Cradlepoint MBR1200 User manual

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 1
User Manual /MBR1200B 5/3/16
ARC Series
Router
MBR1200B
User Manual

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 2
User Manual /MBR1200B 5/3/16
TABLE OF CONTENTS
INTRODUCTION 4
WHAT’S IN THE BOX 4
KEY FEATURES 4
INTERNET ACCESS AND DEVICE CONNECTIVITY 4
BUSINESS CONTINUITY: FAILOVER/FAILBACK 4
FLEXIBILITY 4
SECURITY 4
LICENSABLE FEATURES – REQUIRE EXTENDED ENTERPRISE LICENSE 4
SYSTEM REQUIREMENTS 5
SPECIFICATIONS 5
HARDWARE 6
SUPPORT AND WARRANTY 7
QUICK START 8
BASIC SETUP 8
ACCESSING THE ADMINISTRATION PAGES 8
FIRST TIME SETUP WIZARD 9
USING ENTERPRISE CLOUD MANAGER 9
ADMINISTRATION PAGES 10
QUICK LINKS 10
DASHBOARD 10
CONNECTION MANAGER 11
WAN INTERFACE PROFILES & PRIORITY 11
STATUS 15
INTERNET 15
CLIENT LIST 18
FIREWALL 19
TUNNELS 19
ROUTING 20
ETHERNET 20
GPS 20
SYSTEM LOGS 21

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 3
User Manual /MBR1200B 5/3/16
NETWORKING 22
LOCAL NETWORKS 22
VLAN INTERFACES 29
TUNNELS 30
DNS SERVERS 38
ROUTING 38
WIFI AS WAN 41
CLIENT DATA USAGE 42
SECURITY 43
IDENTITIES 43
ZONE FIREWALL 43
CONTENT FILTERING 48
CERTIFICATE MANAGEMENT 50
SYSTEM 53
ADMINISTRATION 53
ENTERPRISE CLOUD MANAGER 57
DEVICE ALERTS 57
SNMP CONFIGURATION 59
SYSTEM CONTROL 61
DIAGNOSTICS 62
SETUP WIZARDS 63
APPENDIX 65
SAFETY, REGULATORY, AND WARRANTY GUIDE 65
ROUTER COMMUNICATION/DATA USAGE 67

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 4
User Manual /MBR1200B 5/3/16
INTRODUCTION
WHAT’S IN THE BOX
• Cradlepoint Mission-Critical Broadband Router (MBR1200B)
• AC power adapter (12V, 1.5A) WARNING: using a power adapter other than the one provided may damage the
MBR1200B and will void the warranty
• CAT5 Ethernet Cable
• Setup Guide
KEY FEATURES
INTERNET ACCESS AND DEVICE CONNECTIVITY
• Plug-and-play support for over 125 of the most advanced broadband data modems (LTE, WiMAX, HSPA+). Security
cap available to prevent device theft
• 5 Ethernet 10/100 LAN/WAN ports for Ethernet-enabled devices or landline Internet (up to 2 WAN, up to 5 LAN, 5
total)
• Wireless LAN - WiFi (802.11 b/g/n) supports up to 64 concurrent connections
BUSINESS CONTINUITY: FAILOVER/FAILBACK
• Automatic failover to wireless WAN connection when wired WAN disruption occurs, automatic failback when wired
WAN connection is restored
• Load balancing across multiple wired and wireless WANs for more bandwidth
• Proactive alerts when failover occurs through Enterprise Cloud Manager (ECM)
FLEXIBILITY
• Remote management with ECM and SNMP v1,2,3
• Two SSIDs, with individual security, separate critical trac
• WiFi-as-WAN mode enables use as a WiFi repeater, WiFi bridge or as a WiFi-to-Ethernet adapter for Ethernet-
enabled devices
• Two Ethernet ports can be congured to WAN Mode to provide wireless and wired failover and load balancing
• Data usage management and alerts to monitor data usage and avoid overages
SECURITY
• IPsec VPN (2 concurrent sessions) with GRE tunneling option, also supports pass-through VPN connections (IPsec,
L2TP, PPTP)
• WEP, WPA, WPA2, WPA2 Enterprise and AES encryption for secure WiFi
• Stateful packet inspection rewall and NAT (network address translation) to prevent unwanted access to
connected computers
• Variety of security features (URL ltering, trac ltering, DMZ, virtual server, port forwarding) for safer Internet
access
LICENSABLE FEATURES – REQUIRE EXTENDED ENTERPRISE LICENSE
• OSPF, BGP, RIPv1 and RIPv2, VRRP, and STP (also requires hardware version 2.0)
• Site-to-site dynamic VPN with NHRP (also requires hardware version 2.0)

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 5
User Manual /MBR1200B 5/3/16
• NEMO (Network Mobility) / DMNR (Dynamic Mobile Network Routing for Verizon) (requires hardware version 2.0)
• Layer 2 Tunneling Protocol (L2TP)
• OpenVPN (SSL VPN)
• WPA2 Enterprise Authentication for WiFi as WAN
SPECIFICATIONS
WAN:
• USB 2.0 WAN modem (2)
• Express Card modem (1)
• 10/100 Ethernet ports (cable/DSL/T1/satellite modems)
• WiFi (as WAN) 2x2 MIMO “N” 2.4 GHz (802.11 b/g/n)
LAN:
• WiFi (802.11 b/g/n)
• Five 10/100 Ethernet ports (WAN/LAN switchable)
• Serial console support w/ USB-to-serial adapter
TEMPERATURE:
• 0 °C to 40 °C (32 °F to 104 °F) operating
• −20 °C to 70 °C (−4 °F to 158 °F) storage
HUMIDITY (non-condensing):
• 10% to 85% operating
• 5% to 90% storage
POWER: 12VDC 1.5A adapter
SIZE: 9 x 5.1 x 1.6 in (230 x 130 x 40 mm) or 9x7.25x1.6 in (230x185x40 mm)
CERTIFICATIONS:
• FCC
• WiFi Alliance
• CE
• IC
• Carrier certications
CradleCare Support available with technical support, software upgrades, and advanced hardware exchange – 1-, 3-, and
5-year options.
One-year limited hardware warranty available in the US and Canada; two-year limited hardware warranty for
integrated EU products when purchased from an authorized EU distributor – extend warranty to 2, 3, or 5 years.
SUPPORT AND WARRANTY

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 6
User Manual /MBR1200B 5/3/16
HARDWARE

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 7
User Manual /MBR1200B 5/3/16
QUICK START
BASIC SETUP
1. Access Internet Source
Your router requires an Internet source. Insert supported USB or ExpressCard modem/s, connect a Cable or DSL
modem to the Blue Ethernet WAN port, or connect to an available WiFi source. For Failover/Failback functionality,
you will need at least two of these sources (for example: one Ethernet source and one USB modem).
2. Connect to a power source.
Connect the 12v DC power adapter to the router and a power source. Flip the power switch to the ON position; this
illuminates the green power status LED.
3. Connect to a computer or other network equipment.
Connect via Ethernet to LAN 1 for local management.
ACCESSING THE ADMINISTRATION PAGES
Once you are connected, open the Cradlepoint MBR1200B’s GUI-based administration pages to make
conguration changes to your router.
1. Open a browser window and type “cp/” or “192.168.0.1” in the address bar. Press ENTER/RETURN.
2. When prompted for your password, type the eight character DEFAULT PASSWORD found on the product
label.
NOTE: The product label below is an example only: your DEFAULT PASSWORD and SSID will be unique.
It’s possible – and more ecient – to do all your conguration changes through Cradlepoint Enterprise Cloud
Manager (ECM) without logging into the local administration pages. Set up a group of routers and set the
conguration for all of them at once. See below for more information about ECM.

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 8
User Manual /MBR1200B 5/3/16
FIRST TIME SETUP WIZARD
USING ENTERPRISE CLOUD MANAGER
When you log in for the rst time, you will be automatically directed to the FIRST TIME SETUP WIZARD, which
will walk you through the steps to customize your Cradlepoint MBR1200B. You have the ability to congure any
of the following:
• Administrator Password
• Time Zone
• WiFi Network Name
• Security Mode
• Access Point Name (APN) for SIM-based modems
• Modem Authentication
• Failure Check
If you are currently using the router’s WiFi network, you will need to reconnect your devices to the network
using the newly established wireless network name and password.
NOTE: To return to the First Time Setup Wizard after your initial login, select SYSTEM from the navigation bar,
expand Setup Wizard,and select First Time Setup.
Rapidly deploy and dynamically manage networks at geographically distributed stores and branch locations with
Enterprise Cloud Manager, Cradlepoint’s next generation management and application platform. Enterprise Cloud
Manager (ECM) integrates cloud management with your Cradlepoint devices to improve productivity, increase
reliability, reduce costs, and enhance the intelligence of your network and business operations.
Click here to sign up for a free 30-day ECM trial.
Depending on your ordering process, your devices may have already been bulk-loaded into ECM. If so, simply
log in at cradlepointecm.com using your ECM credentials and begin managing your devices seamlessly from the
cloud.
If your device has not yet been loaded into your ECM account, you need to register. Log into the device
administration pages and select Enterprise Cloud Manager from the SYSTEM menu. Enter your ECM username
and password, and click on “Register”.
Once you have registered your device, go to cradlepointecm.com and log in using your ECM credentials.
For more information about how to use Cradlepoint Enterprise Cloud Manager, see the following:
• Getting Started
• ECM on the Knowledge Base

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 9
User Manual /MBR1200B 5/3/16
ADMINISTRATION PAGES
Quick Links
Dashboard
Connection Manager
Status
Networking
Security
System
QUICK LINKS
DASHBOARD
The Dashboard is a centralized location for
basic information about the status of your
router. The areas include:
• Device Information
• Ethernet WAN*
• Modems*
• WWAN*
• Ethernet LAN*
• WiFi LAN*
*-To quickly edit settings for any of these
areas, click on the pencil icon ( ) in the
top-right of the desired dialog box.
You may return to the Dashboard at any
time by clicking on DASHBOARD from the
left menu or by clicking on the Cradlepoint
logo at the top-left of the screen.
Quick Links allows you to bookmark your most commonly-used settings. Simply click on the bookmark icon ( )
to add an item to your Quick Links menu. To remove an item from your Quick Links menu, select the item and
click on the remove bookmark icon ( ).
Quick Links Menu Add Quick Link Delete Quick Link

©2016 Cradlepoint. All Rights Reserved. |+1.855.813.3385 |cradlepoint.com 10
User Manual /MBR1200B 5/3/16
CONNECTION MANAGER
The router can establish an uplink via Ethernet, WiFi as WAN, or 3G/4G modems (removable or external USB). If the
primary WAN connection fails, the router will automatically attempt to bring up a new link on another device: this
feature is called failover. If Load Balance is enabled, multiple WAN devices may establish a link concurrently.
This is a list of the available interfaces used to access the Internet. You can enable, stop, or start devices from this
section. Drag the priority icon ( ) up or down to set the interface the router uses by default and the order that it
allows failover.
WAN INTERFACE PROFILES & PRIORITY
Availability Key
Enable
Load Balance
On Demand
WAN Verify Data Usage
Failback
LOAD BALANCE
To enable Load Balancing, select the check box for each desired
device. If this is enabled, the router will use multiple WAN
interfaces to increase the data transfer throughput by using any
connected WAN interface consecutively. Selecting Load Balance
will automatically start the WAN interface and add it to the pool
of WAN interfaces to use for data transfer. Turning o Load
Balance for an active WAN interface may require the user to
restart any current browsing session.
From WAN Management, select the Load Balance Algorithm from
the following dropdown options: