Cradlepoint MBR1400 Series User manual

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
`
Preface
CradlePoint reserves the right to revise this publication and to make changes in the content thereof without obligation to
notify any person or organization of any revisions or changes.
Manual Revisions
Revision
Date
Description
Author
1.0
July 28, 2011
Initial release for Firmware version 3.2.4
Jeremy Cramer
1.1
Aug. 22, 2011
Added features for Firmware version 3.3.0
Jeremy Cramer
Trademarks
CradlePoint and the CradlePoint logo are registered trademarks of CradlePoint, Inc. in the United States and other
countries. All other company or product names mentioned herein are trademarks or registered trademarks of their
respective companies.
Copyright © 2011 by CradlePoint, Inc.
All rights reserved. This publication may not be reproduced, in whole or in part, without prior expressed written consent
by CradlePoint, Inc.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
`
Table of Contents
1INTRODUCTION ................................................................ 3
1.1 PACKAGE CONTENTS ............................................................. 3
1.2 SYSTEM REQUIREMENTS......................................................... 3
1.3 MBR1400 OVERVIEW.......................................................... 3
2HARDWARE OVERVIEW .................................................... 6
2.1 PORTS,BUTTONS,AND SWITCHES............................................ 7
2.2 LEDS.................................................................................. 9
3QUICK START .................................................................. 10
3.1 BASIC SETUP ...................................................................... 10
3.2 CONNECT TO A COMPUTER OR OTHER DEVICE .......................... 11
3.3 COMMON PROBLEMS .......................................................... 14
4WEB INTERFACE -- ESSENTIALS........................................ 17
4.1 ADMINISTRATOR LOGIN ....................................................... 18
4.2 GETTING STARTED –FIRST TIME SETUP................................... 20
4.3 QUICK LINKS ...................................................................... 25
4.4 BASIC MODE VS.ADVANCED MODE ....................................... 26
4.5 NETWORK SETTINGS VS.INTERNET ......................................... 27
5STATUS........................................................................... 28
5.1 CLIENT LIST........................................................................ 29
5.2 DASHBOARD ...................................................................... 31
5.3 GPS................................................................................. 34
5.4 GRE TUNNELS (ADVANCED MODE ONLY)................................ 35
5.5 INTERNET CONNECTIONS ...................................................... 36
5.6 STATISTICS......................................................................... 47
5.7 SYSTEM LOGS..................................................................... 48
5.8 VPN TUNNELS (ADVANCED MODE ONLY) ............................... 49
6NETWORK SETTINGS ....................................................... 50
6.1 CONTENT FILTERING............................................................ 51
6.2 DHCP SERVER (ADVANCED MODE ONLY) ............................... 54
6.3 DNS (ADVANCED MODE ONLY)............................................. 55
6.4 FIREWALL (ADVANCED MODE ONLY) ...................................... 58
6.5 MAC FILTER...................................................................... 63
6.6 ROUTING (ADVANCED MODE ONLY)....................................... 64
6.7 WIFI /LOCAL NETWORKS .................................................... 65
6.8 WIPIPE QOS(ADVANCED MODE ONLY).................................. 83
7INTERNET........................................................................ 87
7.1 CONNECTION MANAGER ...................................................... 88
7.2 DATA USAGE (ADVANCED MODE ONLY) ................................. 91
7.3 ETHERNET MANAGER .......................................................... 96
7.4 GRE TUNNELS (ADVANCED MODE ONLY)................................ 98
7.5 LOAD BALANCE (ADVANCED MODE ONLY)............................. 101
7.6 MODEM SETTINGS ............................................................ 102
7.7 VPN TUNNELS (ADVANCED MODE ONLY) ............................. 109
7.8 WIFI AS WAN SETTINGS (ADVANCED MODE ONLY)................ 119
8SYSTEM SETTINGS ......................................................... 122
8.1 ADMINISTRATION ............................................................. 123

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 2
8.2 DEVICE ALERTS (ADVANCED MODE ONLY)............................. 130
8.3 HOTSPOT SERVICES (ADVANCED MODE ONLY) ....................... 132
8.4 MANAGED SERVICES (ADVANCED MODE ONLY)ASK YOUR
CRADLEPOINT SALES REPRESENTATIVE FOR DETAILS........... 136
8.5 SYSTEM CONTROL............................................................. 137
8.6 SYSTEM SOFTWARE ........................................................... 138
9GLOSSARY..................................................................... 139
10 APPENDIX ................................................................... 153
10.1 REGULATORY INFORMATION ............................................. 153
10.2 WARRANTY INFORMATION ............................................... 153
10.3 SPECIFICATIONS .............................................................. 154

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 3
1 INTRODUCTION
1.1 Package Contents
CradlePoint Mission-Critical Broadband Router (MBR1400)
AC power adapter (12V, 1.5A) WARNING: using a power adapter other than the one provided may damage the
MBR1400 and will void the warranty
Three 2.4 GHz High Performance 802.11n Antennas
Mounting Hardware
CAT5 Ethernet Cable
Setup Guide
1.2 System Requirements
At least one internet source: an Ethernet-based modem, a broadband data modem with active subscription
(USB, ExpressCard), or WiFi as WAN.
Windows 2000/XP/7, Mac OS X, or Linux computer (with WiFi adapter—802.11n recommended—for WiFi
functionality).
Internet Explorer v6.0 or higher, Firefox v2.0 or higher, Safari v1.0 or higher.
1.3 MBR1400 Overview
ENTERPRISE PERFORMANCE
Targeted for retail locations, branch offices, or small and medium sized businesses
Integrates seamlessly with CradlePoint‘s Business Grade modems
Load balance multiple data sources (data modems, WiFi as WAN, and wired data services)
Compatible with Cisco, Juniper, and other industry-leading network hardware providers
ENHANCED WIFI
750+ feet of WiFi Range

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 4
Wireless ―N‖ WiFi (802.11n, 802.11a + legacy 802.11b/g, 3x3 MIMO Antenna system)
Enhanced performance around walls and other obstructions
Dual-Band WiFi broadcast - either 2.4 GHz or 5.0 GHz
Maximum security with both Public and Private networks
ADDITIONAL FEATURES
Dual-band WiFi, 3x3 MIMO Antenna Subsystem, removable external antennas, up to four SSIDs
Plug-and-Play support for over 120 broadband data modems, allowing for site-specific carrier/service selection
for broadest deployment
Standardized platform and centralized remote management
Up to 20 concurrent VPN endpoint sessions
Compatible with Cisco, SonicWall, and other VPN termination systems
Establish continuous uptime with optimum total cost of ownership for broad deployment
Centralize the administration and monitoring of distributed routers using WiPipe Central.
Simple to install, configure and maintain with minimal impact on IT
NEW WITH FIRMWARE VERSION 3.3.0
Virtual LAN capabilities
Data Usage section that allows users to track and manage modem use relative to data plans
NAT-less routing
MBR1400 now allows four SSIDS
VPN NAT traversal
CradlePoint's Mission-Critical Broadband Router (MBR1400) takes the power and flexibility of our industry leading router,
and when combined with an active high-speed wireless broadband data connection, gets your business network online in
no time.
Designed for small business, branch office, and retail locations - our business series router provides a secure primary or
backup connection to the internet. In addition to connection options for traditional wired networking solutions like Cable,
DSL, Satellite, or T1, the most powerful feature of the MBR1400 is its ability to use USB or ExpressCard Data Modems to
create instant networks anywhere you receive a broadband signal.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 5
The MBR1400 features failover/failback, secure VPN, multiple encryption modes for maximum security, dual-band WiFi
broadcast, private and public networks, WiFi as WAN, Modem Health Management, and remote management options
with WiPipe Central for deployed units. CradlePoint provides enterprise-grade performance, security, and the modem
reliability businesses need to ensure continuous uptime. Create an instant network today with LTE, WiMAX, or any other
wireless broadband technology.
1.3.1 Captive Portal
The Captive Portal solution provided by CradlePoint routers enables businesses to provide their customers with a public
WiFi hotspot with access controls. The controls can be as simple as requiring acceptance of a Terms of Service
agreement, while Advanced features allow administrators to control and monitor usage, require login, direct users to
specific web pages, provide revenue through services fees or paid advertising, and more.
1.3.2 WiPipe Central
CradlePoint‘s cloud-based router management service allows for remote monitoring, configuration, and firmware updates
of deployed routers like the IBR1400. WiPipe Central drastically simplifies router administration for businesses using
multiple routers. WiPipe Central can be purchased separately at http://cradlepoint.com/support/wipipe-central.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 6
2 HARDWAREOVERVIEW

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 7
2.1 Ports, Buttons, and Switches

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 8
LAN and WAN Ports: By default, the four orange ports are configured as LAN (Local Area Network) ports and the blue
port is configured as a WAN (Wide Area Network—your internet source) port. Any LAN port, however, can be
reconfigured as a WAN port and vice versa.
Modem Ports: The MBR1400 has three USB 2.0 ports and two ExpressCard ports.
WiFi Antenna Connectors: Your router comes with three 2.4 GHz WiFi antennas (Reverse SMA). 5 GHz antennas are
available as an accessory. The antennas are simple to attach and adjust for maximum WiFi broadcast.
Factory Default Reset: You can return your router to factory default settings by pressing and holding the Reset button.
This button is recessed, so it requires a pointed object such as a paper clip to press. Press and hold for 10 seconds to
initiate reset.
WPS Button: WiFi Protected Setup. When you press the WPS button for five seconds, it allows you to use WPS for WiFi
security. The LED will illuminate blue to indicate WPS status. Devices must support WPS in order to be configured by this
method.
Power On/Off:
1 = On
0 = Off
WiFi Broadcast On/Off: You have the option to turn off the WiFi radio.
1 = On
0 = Off
3G/4G Modem Signal Strength Button: When pressed the bar LEDs indicate signal strength from the USB or
ExpressCard modems. The signal strength is shown for 10 seconds if the modem does not support concurrent data
connection and signal strength measurement. Tapping this button will toggle the Modem Signal Strength display on and
off.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 9
2.2 LEDs
LAN and WAN LEDs: The default settings are shown. LAN ports can be reconfigured to function as WAN ports and vice
versa; the LEDs will function accordingly.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 10
3 QUICKSTART
3.1 Basic Setup
Your router requires an internet source. Attach a
CradlePoint Business Grade Modem, insert supported USB
or ExpressCard modem/s, connect a Cable or DSL modem
to the Blue Ethernet WAN port, or connect to an available
WiFi source. For Failover/Failback functionality, you will
need at least two of these sources (for example: one
Ethernet source and one USB modem).1
Attach the three included WiFi antennas to the connectors
for maximum WiFi broadcast. To attach, hold the antenna
straight and twist the base of the antenna to connect,
folding the joint if needed. Please note that 2.4 GHz antennas are provided. 5 GHz antennas are available as an
accessory.
Connect the 12v DC power adapter to the router and a power source. Flip the power switch to the ON position; this
should illuminate the green Power Status LED.
1Data Modem Not Included. This Product Requires an Activated Data Modem or Phone with Data Plan for Full Functionality. See your Cellular/3G/4G Service Provider for Details
on Coverage and Data Plan Options

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 11
3.2 Connect to a Computer or other Device
3.2.1 Wireless Network Connection
1) Find the network. On a WiFi-enabled computer or
device, open the window or dropdown menu that allows
you to access wireless networks. The MBR1400
network will appear on the list: select this network.
2) Log in. You will need to input the Default Password
when prompted. The Default Password is provided on
the product label found on the bottom of your router
(this password is the last eight digits of the router‘s MAC
address, which can be found on the product box or on
the product label).
NOTE: If more than one MBR1400 wireless router is visible, you
can find the correct unit by checking for its SSID (service set
identifier; the unique name of the local network). The SSID can be found on the bottom of the router in the form MBR1400-xxx, where ―xxx‖ is the
last 3 digits of the router‘s MAC address.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 12
3.2.2 Accessing the Administration Pages
For most users, the MBR1400 Router can be used
immediately without any special configuration
changes. If you would like to change your network
name or password or configure any of the
advanced features of the MBR1400, you will need
to log in to the administration pages:
Access your router‘s Administrator Login
screen by opening a web browser window
and typing ―cp/‖(your router‘s default
hostname) or the IP address ―192.168.0.1‖
into the address bar.
Enter your Default Password. This
password can be found on the bottom of the
MBR1400. Then click the LOGIN button.
When you log in for the first time, you will be automatically directed to the First Time Setup Wizard. Follow the
instructions given with the Wizard or see Getting Started –First Time Setup for more information about using the
First Time Setup Wizard.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 13
3.2.3 Connect to the Internet
If you used the First Time Setup Wizard, you might have
changed the ―WiFi Network Name‖ or the ―Security Mode‖
password. If so, you will need to reconnect to the MBR1400
network.
Find the network. Look for your new personalized
network name (or the default SSID of the form
―MBR1400-xxx‖).
Log in using your new personalized WiFi security
password (or the Default Password found the bottom of
the router).
Your network should now be up and running, and users who
have the security password can access the network on WiFi-enabled devices.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 14
3.3 Common Problems
This section contains a list of some of the most common issues faced by users of the MBR1400.
Please visit CradlePoint Knowledgebase at http://knowledgebase.cradlepoint.com/ for more help and answers to your
other questions.
3.3.1 Your USB or ExpressCard Modem Does Not Work With the Router
If your USB data or ExpressCard is not working with the router, check the list of supported devices at
http://www.cradlepoint.com/modems to ensure you are using a supported device and carrier. The device you are
using must be supported on the carrier network providing your cellular service or it‘s considered an unsupported
device, even if it is supported on another carrier‘s network.
Sometimes a USB data modem needs to be updated or have other configurations set correctly in order to make a
connection through the router. If your USB Modem has not been updated recently, it is recommended that you do
so if it is having trouble connecting to the MBR1400. Insert your USB data modem into your PC and access the
internet using the software provided by your cellular carrier. Follow the directions provided to complete the update.
Once you have updated your USB data modem, reconnect the cellular device to your CradlePoint router and
connect to the internet.
If you are using a 4G WiMAX modem you need to set the WiMAX Realm. This can be done on the administration
pages. Log in using the hostname ―cp/‖or IP address ―http://192.168.0.1‖in your browser. On page 3 of the First
Time Setup Wizard (go to Getting Started → First Time Setup), you can set the WiMAX Realm. Be sure to click
Apply on page 4 to save the change.
Some wireless carriers provide more than one Access Point Name (APN) that a modem can connect to. If you wish
to specify the APN, this can be done on the administration pages. Log in using the hostname ―cp/‖or IP address
―http://192.168.0.1‖in your browser. Go to Internet → Modem Settings. In the Modem Configuration section,
select your modem and click ―Configure.‖ There is an Access Point Name field: Enter the APN and click Apply.
Some APN examples are isp.cingular, ecp.tmobile.com, and vpn.com. The modem must be removed and
reinserted (or the router must be rebooted) for this change to take effect.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 15
If the above issues have been resolved and you can connect to the router but you cannot get internet through it
using your modem, you may need to upgrade the router firmware. Use your computer (you may need to plug your
modem directly into your computer if you don‘t have another way to access the internet) to download the latest
firmware for the router (go to http://www.cradlepoint.com/support/mbr1400 and scroll over firmware at the bottom
of the page). Then log in to the router administration pages and manually upload the firmware. Go to System
Settings → System Software and click on ―Manual Firmware Upload‖.
If you are still unable to access the internet after following the above directions, contact CradlePoint Technical
Support for further assistance.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 16
3.3.2 You are Connected to the Router but Cannot Connect to the Internet
The status LEDs of your router will give you an indication whether or not a proper connection is being made. See the LED
STATUS definitions below:
If the USB data modem LEDs are not illuminated, your modem is not connected and online. You may need to update
firmware. Refer to the previous section, ―Your USB or ExpressCard Modem Does Not Work With The Router.‖
If you are still not online after updating, call CradlePoint Technical Support for further assistance.

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 17
4 WEBINTERFACE-- ESSENTIALS
The MBR1400 has a Web interface for configuration and administration of all features. The interface is organized with a
button for toggling between Basic Mode and Advanced Mode and 5 tabs at the top of the screen:
Getting Started
Status
Network Settings
Internet
System Settings
Web Interface –Essentials contains the following sections to help you more quickly and easy navigate these
administration pages:
4.1 Administrator Login
4.2 Getting Started –First Time Setup
4.3 Quick Links
4.4 Basic Mode vs. Advanced Mode
4.5 Network Settings vs. Internet

CRADLEPOINT MBR1400| USER MANUAL Firmware ver. 3.3.0
© 2011CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 18
4.1 Administrator Login
To access the administration pages, open a Web browser and type the hostname ―cp/‖ or IP address ―http://192.168.0.1‖
into the address bar. The Administrator Login page will appear.
Log in using your administrator password. Initially, this password can be found on the bottom of the MBR1400 unit as the
Default Password. This password is also the last eight digits of the unit‘s MAC address.