Cradlepoint MBR1400 Series User manual

C

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
`
Preface
Cradlepoint reserves the right to revise this publication and to make changes in the content thereof without obligation to
notify any person or organization of any revisions or changes.
Manual Revisions
Revision
Date
Description
Author
1.0
July 28, 2011
Initial release for Firmware version 3.2.4
Jeremy Cramer
1.1
Aug. 22, 2011
Updates for Firmware version 3.3.0
Jeremy Cramer
1.2
Jan. 20, 2012
Updates for Firmware version 3.4.1 and ARC versions
Jeremy Cramer
1.3
May 1, 2012
Updates for Firmware version 3.5.0
Jeremy Cramer
1.4
May 15, 2012
Updates for Firmware version 3.6.0
Jeremy Cramer
2.0 Dec. 28, 2012 Updates for Firmware version 4.1.1 and ARC MBR1400LP-
AT
Jeremy Cramer
2.1
Feb. 25, 2013
Updates for Firmware version 4.2 and hardware version 2.0
Jeremy Cramer
2.2
Aug. 26, 2013
Updates for Firmware version 4.4
Jeremy Cramer
3.0
Nov. 19, 2013
Updates for Firmware version 5.0
Jeremy Cramer
Trademarks
Cradlepoint and the Cradlepoint logo are registered trademarks of Cradlepoint, Inc. in the United States and other
countries. All other company or product names mentioned herein are trademarks or registered trademarks of their
respective companies.
Copyright © 2013 by Cradlepoint, Inc. All rights reserved. This publication may not be reproduced, in whole or in part,
without prior expressed written consent by Cradlepoint, Inc.

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
`
Table of Contents
1INTRODUCTION ................................................................ 3
1.1 PACKAGE CONTENTS ............................................................. 3
1.2 SYSTEM REQUIREMENTS......................................................... 3
1.3 MBR1400 OVERVIEW.......................................................... 4
1.4 CRADLEPOINT ARC MBR1400 SERIES ..................................... 7
2HARDWARE OVERVIEW .................................................. 15
2.1 PORTS,BUTTONS,AND SWITCHES.......................................... 17
2.2 LEDS................................................................................ 20
3QUICK START .................................................................. 21
3.1 BASIC SETUP ...................................................................... 21
3.2 CONNECT TO A COMPUTER OR OTHER DEVICE .......................... 22
3.3 COMMON PROBLEMS .......................................................... 25
4WEB INTERFACE – ESSENTIALS ........................................ 29
4.1 ADMINISTRATOR LOGIN ....................................................... 30
4.2 GETTING STARTED –FIRST TIME SETUP WIZARD....................... 32
4.3 QUICK LINKS ...................................................................... 38
4.4 CONFIGURATION PAGES ....................................................... 40
4.5 ENTERPRISE CLOUD MANAGER REGISTRATION.......................... 42
4.6 IP PASSTHROUGH SETUP...................................................... 43
5STATUS ........................................................................... 44
5.1 CLIENT LIST........................................................................ 45
5.2 CP CONNECT ..................................................................... 47
5.3 DASHBOARD ...................................................................... 48
5.4 GPS................................................................................. 52
5.5 GRE TUNNELS ................................................................... 53
5.6 HOTSPOT CLIENTS............................................................... 54
5.7 INTERNET CONNECTIONS ...................................................... 55
5.8 ROUTING .......................................................................... 67
5.9 STATISTICS......................................................................... 70
5.10 SYSTEM LOGS .................................................................. 73
5.11 VPN TUNNELS ................................................................. 74
5.12 WIPIPE QOS ................................................................... 75
6NETWORK SETTINGS .......................................................76
6.1 CONTENT FILTERING............................................................ 77
6.2 DHCP SERVER ................................................................... 85
6.3 DNS ................................................................................ 86
6.4 FIREWALL .......................................................................... 89
6.5 MAC FILTER /LOGGING ...................................................... 97
6.6 ROUTING .......................................................................... 99
6.7 ROUTING PROTOCOLS........................................................ 100
6.8 WIFI /LOCAL NETWORKS .................................................. 110
6.9 WIPIPE QOS ................................................................... 135
7INTERNET...................................................................... 142
7.1 CONNECTION MANAGER .................................................... 143
7.2 CP CONNECT ................................................................... 170
7.3 CLIENT DATA USAGE ......................................................... 171

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 2
7.4 DATA USAGE ................................................................... 172
7.5 GRE TUNNELS ................................................................. 176
7.6 L2TP TUNNELS ................................................................ 179
7.7 NETWORK MOBILITY (NEMO) ........................................... 182
7.8 NHRP CONFIGURATION .................................................... 184
7.9 OPENVPN TUNNELS ......................................................... 186
7.10 VPN TUNNELS ............................................................... 190
7.11 WIFI AS WAN /BRIDGE.................................................. 202
7.12 WAN AFFINITY AND LOAD BALANCING............................... 207
8SYSTEM SETTINGS......................................................... 212
8.1 ADMINISTRATION ............................................................. 213
8.2 DEVICE ALERTS................................................................. 232
8.3 ENTERPRISE CLOUD MANAGER............................................ 235
8.4 FEATURE LICENSES ............................................................ 237
8.5 HOTSPOT SERVICES ........................................................... 238
8.6 SERIAL REDIRECTOR........................................................... 242
8.7 SNMP CONFIGURATION .................................................... 244
8.8 SYSTEM CONTROL............................................................. 247
8.9 SYSTEM SOFTWARE ........................................................... 248
9GLOSSARY..................................................................... 250
10 APPENDIX ................................................................... 265
10.1 PRODUCT INFORMATION AND SAFETY GUIDE ....................... 265
10.2 SPECIFICATIONS.............................................................. 268

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 3
1 INTRODUCTION
1.1 Package Contents
•Cradlepoint Mission-Critical Broadband Router (MBR1400)
•AC power adapter (12V, 1.5A) WARNING: using a power adapter other than the one provided may damage the
MBR1400 and will void the warranty
•Three 2.4 GHz high performance 802.11n antennas
•Mounting hardware
•CAT5 Ethernet cable
•Setup Guide
•ARC Series with integrated 3G/4G business-grade modem***
oARC MBR1400LE-VZ – 4G LTE / EVDO for Verizon
oARC MBR1400LP-AT – 4G LTE / HSPA+ for AT&T
oARC MBR1400LP2-EU – 4G LTE / HSPA+ for Europe
oARC MBR1400LP – 4G LTE / HSPA+ for Canada
oARC MBR1400W – 4G WiMAX for Sprint or CLEAR
Discontinued:
oMBR1400E-VZ – 3G EVDO for Verizon
oMBR1400E-SP – 3G EVDO for Sprint
1.2 System Requirements
•At least one Internet source: a Cradlepoint 3G/4G business-grade modem, an Ethernet-based modem, a
broadband data modem with active subscription (USB, ExpressCard), or WiFi as WAN.
•Windows 2000/XP/7, Mac OS X, or Linux computer (with WiFi adapter—802.11n recommended—for WiFi
functionality).
•Internet Explorer v6.0 or higher, Firefox v2.0 or higher, Safari v1.0 or higher.

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 4
1.3 MBR1400 Overview
Cradlepoint's Mission-Critical Broadband Router (MBR1400) takes the power and flexibility of our industry leading router,
and when combined with an active high-speed wireless broadband data connection, gets your business network online in
no time. Cradlepoint’s ARC Series includes an integrated 3G/4G business-grade modem, a seamless, worry-free solution
to keep your business online.
Designed for small business, branch office, and retail locations – our business series router provides a secure primary or
backup connection to the Internet. In addition to connection options for traditional wired networking solutions like cable,
DSL, satellite, or T1, the most powerful feature of the MBR1400 is its ability to use Cradlepoint business-grade modems
or USB or ExpressCard data modems to create instant networks anywhere you receive a broadband signal.
The MBR1400 features failover/failback, secure VPN, multiple encryption modes for maximum security, dual-band WiFi
broadcast, private and public networks, WiFi as WAN, Modem Health Management, and remote management options
with Cradlepoint Enterprise Cloud Manager for deployed units. Cradlepoint provides enterprise-grade performance,
security, and the modem reliability businesses need to ensure continuous uptime. Create an instant network today with
LTE, WiMAX, HSPA+, or any other wireless broadband technology.
ENTERPRISE PERFORMANCE
•Targeted for retail locations, branch offices, or small and medium-sized businesses
•Choose the ARC MBR1400 Series to include an integrated Cradlepoint business-grade modem
•Centralize the administration and monitoring of distributed routers using cloud-based WiPipe Central
•Load balance multiple data sources (data modems, wired data services, and WiFi as WAN)
•Compatible with Cisco, Juniper, and other industry-leading network hardware providers
ENHANCED WIFI
•Wireless “N” WiFi (802.11n, 802.11a + legacy 802.11b/g, 3x3 MIMO antenna system)
•Enhanced performance around walls and other obstructions
•Dual-band WiFi broadcast – either 2.4 GHz or 5.0 GHz
•Maximum security with both public and private networks

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 5
ADDITIONAL FEATURES
•Dual-band WiFi, 3x3 MIMO antenna subsystem, removable external antennas, up to four SSIDs
•Plug-and-play support for more than 120 broadband data modems, allowing for site-specific carrier/service selection
for broadest deployment
•Up to 20 concurrent VPN endpoint sessions
•Compatible with Cisco, SonicWall, and other VPN termination systems
•Establish continuous uptime with optimum total cost of ownership for broad deployment
•Standardized platform and centralized remote management
•Simple to install, configure, and maintain with minimal impact on IT
•Virtual LAN capabilities
•Data Usage section that allows users to track and manage modem use relative to data plans
•NAT-less routing and VPN NAT traversal
•SNMP support
•USB-to-serial console passthrough support
•IP passthrough support
•Multicast Proxy support (requires hardware version 2.0)
•IPv6 support
LICENSABLE FEATURES – REQUIRE EXTENDED ENTERPRISE LICENSE
•OSPF, BGP, RIPv1 and RIPv2, VRRP, and STP (also requires hardware version 2.0)
•Site-to-site dynamic VPN with NHRP (also requires hardware version 2.0)
•NEMO (Network Mobility) / DMNR (Dynamic Mobile Network Routing for Verizon) (requires hardware version 2.0)
•Layer 2 Tunneling Protocol (L2TP)
•OpenVPN (SSL VPN)
•Seamless integration with Zscaler's secure web gateway.
•WPA2 Enterprise Authentication for WiFi as WAN

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 6
1.3.1 Cradlepoint Enterprise Cloud Manager
Rapidly deploy and dynamically manage networks at geographically distributed stores and branch locations with
Enterprise Cloud Manager, Cradlepoint’s next generation management and application platform. Enterprise Cloud
Manager integrates cloud management with your Cradlepoint devices to improve productivity, increase reliability, reduce
costs, and enhance the intelligence of your network and business operations. Learn more at http://Cradlepoint.com/ecm.
1.3.2 Captive Portal
The Captive Portal solution provided by Cradlepoint routers enables businesses to provide their customers with a public
WiFi hotspot with access controls. The controls can be as simple as requiring acceptance of a terms of service
agreement, while advanced features allow administrators to control and monitor usage, require login, direct users to
specific web pages, provide revenue through services fees or paid advertising, and more.

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 7
1.4 Cradlepoint ARC MBR1400 Series
The Cradlepoint ARC MBR1400 Series includes a Cradlepoint 3G/4G business-grade modem with the MBR1400 and
creates an effortless instant network from high-speed wireless broadband.
Cradlepoint integrated business-grade modems are specifically designed to provide the highest level of performance,
reliability, and security for 24x7 business-critical applications. Antennas can be located and oriented to receive the highest
signal strength. The ARC Series intelligently manages the coexistence between the mobile broadband signal and the WiFi
broadcast of the router.
Choose from the following ARC MBR1400 Products:
•MBR1400LE-VZ – 4G LTE/EVDO for Verizon
•MBR1400LP-AT – 4G LTE/HSPA+ for AT&T
•MBR1400LP2-EU – 4G LTE/HSPA+ for Europe
•MBR1400LP – 4G LTE/HSPA+ for Canada
•MBR1400W – 4G WiMAX for Sprint or CLEAR
Discontinued:
•MBR1400E-VZ – 3G EVDO for Verizon
•MBR1400E-SP – 3G EVDO for Sprint

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 8
MBR1400LE-VZ 4G/3G LTE/EVDO for Verizon
Technology: LTE, EVDO Rev A
Downlink Rates: LTE 100 Mbps, EVDO 3.1 Mbps (theoretical)
Uplink Rates: LTE 50 Mbps, EVDO 1.8 Mbps (theoretical)
Frequency Band: LTE Band 13 (700 MHz)
CDMA EVDO Rev A/1xRTT (800/1,900 MHz)
Power: LTE 23 +/−1 dBm, EVDO 24 +/−1dBm (typical
conducted)
Module: Sierra Wireless MC7750
Module Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi
(Cellular/PCS) gain; finger tighten only; maximum torque spec is 7
kgf-cm
GPS: standalone GPS support
Industry Standards & Certs: FCC, Verizon
Modem Part Number: MC200LE

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 9
MBR1400LP-AT 4G/3G LTE/HSPA+ for AT&T
Technology: LTE, HSPA+
Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps (theoretical)
Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps (theoretical)
Frequency Bands:
•LTE Band 17 (700MHz), Band 4 (AWS)
•UMTS/HSPA+ (850/1900/2100 MHz)
•
EDGE/GPRS/GSM (850/900/1800/1900 MHz)
Module Power: LTE 23 +/− 1 dBm, UMTS 23 +/− 1 dBm (typical
conducted)
Module: Sierra Wireless MC7700
Module Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi gain;
finger tighten only; support for GPS on aux connection
GPS: standalone GPS support
Industry Standards & Certs: PTCRB, FCC, AT&T
Modem Part Number: MC200LP

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 10
Cradlepoint products with the -EU SKUs enable
and disable WiFi channels to comply with EU
law. The -EU SKUs are required for use in Europe
for products with 5 GHz WiFi, but these products
are not legal for use in North America.
See:
http://en.wikipedia.org/wiki/List_of_WLAN_channels.
MBR1400LP2-EU 4G LTE/HSPA+ for Europe
Technology: LTE, HSPA+
Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps (theoretical)
Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps (theoretical)
Frequency Bands:
•LTE (800/900/1800/2100/2600 MHz)
•HSPA+/UMTS (900/2100 MHz)
•EDGE/GPRS/GSM (900/1800/1900 MHz)
Module Power: LTE 23 +/− 1 dBm, UMTS 23 +/− 1 dBm (typical
conducted)
Module: Sierra Wireless MC7710
Module Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi
(Cellular/PCS) gain; finger tighten only; support for GPS on aux
connection
GPS: standalone GPS support
Industry Standards & Certs: CE, GCF-CC
Modem Part Number: MC200LP2

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 11
MBR1400LP 4G LTE/HSPA+ for Canada
Technology: LTE, HSPA+
Downlink Rates: LTE 100 Mbps, HSPA+ 21.1 Mbps (theoretical)
Uplink Rates: LTE 50 Mbps, HSPA+ 5.76 Mbps (theoretical)
Frequency Bands:
•LTE Band 17 (700MHz), Band 4 (AWS)
•UMTS/HSPA+ (850/1900/2100 MHz)
•
EDGE/GPRS/GSM (850/900/1800/1900 MHz)
Module Power: LTE 23 +/− 1 dBm, UMTS 23 +/− 1 dBm (typical
conducted)
Module: Sierra Wireless MC7700
Module Antennas: two SMA male (plug), 1 dBi (LTE), 2 dBi
(Cellular/PCS) gain; finger tighten only; support for GPS on aux
connections
GPS: standalone GPS support
Industry Standards & Certs: PTCRB, FCC, IC
Modem Part Number: MC200LP

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 12
MBR1400W 4G WiMAX for Sprint or CLEAR
Technology: WiMAX 802.16e Wave 2
Downlink Rates: 10Mbps peak, 6Mbps average
Uplink Rates: 5 Mbps peak, 1.2 Mbps average
Frequency Band: 2,500 MHz band
Power: 23.5 +/−0.5 dBm (RSU/CPE)
Module: Beceem 250 chipset
Module Antennas: two SMA male (plug), 5 dBi gain; finger
tighten only; maximum torque spec is 7 kgf-cm
GPS: no GPS support
Industry Standards & Certs: FCC, Sprint, Clearwire
Modem Part Number: MC100W
For optimum performance, antennas on the MBR1400W-SP should
be pointed in opposite directions as shown to the right. This will help
prevent overlap with the 2.4 GHz WiFi band.

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 13
MBR1400E-VZ 3G EVDO for Verizon
Technology: EVDO Rev A
Downlink Rates: 3.1 Mbps (theoretical)
Uplink Rates: 1.8 Mbps (theoretical)
Frequency Band: CDMA EVDO Rev A/1xRTT (800/1,900 MHz)
Power: 24 +/−0.5 dBm (typical conducted)
Module: Sierra Wireless 5728v
Module Antennas: two SMA male (plug), 2 dBi gain
Industry Standards & Certs: modem model MC100E – Verizon
IOT; FCC Part 15, 22 & 24, CDG Stages 1,2; IS-2000IA-98D/E,
IS-134, IS-637B, IS-683A, IS-707A, IS-856, IS-866; JESD22-
A114-B, JESD22-C101
Modem Certification Model Number: MC100E
Modem Certification Part Number: MC100E-VZ
(MBR1400E-VZ has been discontinued.)

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 14
(MBR1400E-SP has been discontinued.)
MBR1400E-SP 3G EVDO for Sprint
Technology: EVDO Rev A
Downlink Rates: 3.1 Mbps (theoretical)
Uplink Rates: 1.8 Mbps (theoretical)
Frequency Band: CDMA Rev A/1xRTT (800/1,900 MHz)
Power: 24 +/−0.5 dBm (typical conducted)
Module: Sierra Wireless 5728v
Module Antennas: two SMA male (plug), 2 dBi gain
Industry Standards & Certs: modem model MC100E – Sprint;
FCC Part 15, 22 & 24,CDG Stages 1,2; IS-2000IA-98D/E,IS-134,
IS-637B, IS-683A, IS-707A, IS-856, IS-866; JESD22-A114-B,
JESD22-C101
Modem Certification Model Number: MC100E
Modem Certification Part Number: MC100E-SP

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 15
2 HARDWARE OVERVIEW

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 16

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 17
2.1 Ports, Buttons, and Switches

CRADLEPOINT MBR1400 | USER MANUAL – Firmware version 5.0
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 18