CTC Union ICR-4103 Series User manual

i
ICR-4103
4G LTE Cellular Router

2
LEGAL
The information in this publication has been carefully checked and is believed to be entirely
accurate at the time of publication. CTC Union Technologies assumes no responsibility,
however, for possible errors or omissions, or for any consequences resulting from the use of
the information contained herein. CTC Union Technologies reserves the right to make
changes in its products or product specifications with the intent to improve function or design
at any time and without notice and is not required to update this documentation to reflect
such changes.
CTC Union Technologies makes no warranty, representation, or guarantee regarding the
suitability of its products for any particular purpose, nor does CTC Union assume any liability
arising out of the application or use of any product and specifically disclaims any and all
liability, including without limitation any consequential or incidental damages.
CTC Union products are not designed, intended, or authorized for use in systems or
applications intended to support or sustain life, or for any other application in which the
failure of the product could create a situation where personal injury or death may occur.
Should the Buyer purchase or use a CTC Union product for any such unintended or
unauthorized application, the Buyer shall indemnify and hold CTC Union Technologies and
its officers, employees, subsidiaries, affiliates, and distributors harmless against all claims,
costs, damages, expenses, and reasonable attorney fees arising out of, either directly or
indirectly, any claim of personal injury or death that may be associated with such unintended
or unauthorized use, even if such claim alleges that CTC Union Technologies was negligent
regarding the design or manufacture of said product.
WARNING:
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequency
energy and if not installed and used in accordance with the instruction manual may cause
harmful interference in which case the user will be required to correct the interference at his
own expense.

3
ICR-4103 Series
Industrial Grade 4G LTE Cellular Router
User Manual
Version 1.3 March 2019
This manual supports the following models:
ICR-4103
This document is the current official release manual. Contents are subject to change without
prior notice. Please check CTC Union's website for any updated manual or contact us by E-mail
at [email protected]. Please address any comments for improving this manual or to point out
omissions or errors to [email protected]. Thank you.
2019 CTC Union Technologies Co.,Ltd.
All Rights Reserved
The contents of this document are subject to change without any prior notice.

4
TABLE OF
CONTENTS
Table of Contents
1Introduction.......................................................................................................................7
1.1 Features..........................................................................................................................7
1.2 Specifications ..................................................................................................................8
1.3 Mechanical Dimensions...................................................................................................8
1.4 Hardware Panel Layout...................................................................................................9
2Hardware Installation......................................................................................................10
2.1 LED Indicators...............................................................................................................10
2.2 Ethernet Port.................................................................................................................10
2.3 Serial Port COM1 (Console)..........................................................................................12
2.4 Install the SIM Card.......................................................................................................13
2.5 Reset Button..................................................................................................................14
2.6 External Antenna...........................................................................................................14
2.7 Connecting the Power Supply .......................................................................................14
2.8 Grounding the Router....................................................................................................15
2.9 Pin Assignments............................................................................................................15
2.10 Connecting I/O Ports......................................................................................................16
2.11 Serial Port COM2 (RS-232)............................................................................................17
2.12 Serial Port COM3 (RS-485)............................................................................................18
2.13 DIP Switch .....................................................................................................................18
3Configuration via Web Browser.....................................................................................19
3.1 Access the Web Interface.................................................................................................19
3.2 Navigate the Web Configurator........................................................................................21
3.3 Status...............................................................................................................................22
3.4 System.............................................................................................................................24
3.4.1 Time and Date..........................................................................................................24
3.4.2 COM Ports...............................................................................................................27
3.4.3 Logging....................................................................................................................28
3.4.3.1 Logging................................................................................................................................................................ 29
3.4.3.2 Log Data.............................................................................................................................................................. 29
3.4.4 Alarm .......................................................................................................................30
3.4.5 Ethernet Ports..........................................................................................................32
3.4.6 Modbus....................................................................................................................33
3.4.7 Client List.................................................................................................................33
3.5 WAN ................................................................................................................................34
3.5.1 Priority......................................................................................................................34
3.5.2 Ethernet...................................................................................................................35
3.5.2.1 WAN Ethernet Configuration .............................................................................................................................. 35
3.5.2.2 Ethernet Ping Health............................................................................................................................................37
3.5.3 IPv6 DNS.................................................................................................................39
3.6 LTE..................................................................................................................................40

5
TABLE OF
CONTENTS
3.6.1 LTE Config...............................................................................................................40
3.6.1.1 LTE Configuration ................................................................................................................................................ 40
3.6.1.2 LTE Ping Health ................................................................................................................................................... 41
3.6.2 Dual SIM..................................................................................................................42
3.6.3 Usage Display..........................................................................................................46
3.6.4 SMS.........................................................................................................................52
3.6.4.1 Configuration ...................................................................................................................................................... 52
3.6.4.2 Activate DO Control via SMS............................................................................................................................... 53
3.6.5 Service Cell..............................................................................................................57
3.6.6 Lock PCIs ................................................................................................................57
3.6.7 Lock Bands..............................................................................................................58
3.6.8 DNS.........................................................................................................................59
3.7 LAN..................................................................................................................................60
3.7.1 IPv4 .........................................................................................................................60
3.7.2 IPv6 .........................................................................................................................60
3.7.3 VLAN .......................................................................................................................61
3.7.4 Subnet .....................................................................................................................63
3.8 IP Routing........................................................................................................................64
3.8.1 IP Static Route .........................................................................................................64
3.8.2 IP RIP ......................................................................................................................66
3.8.3 OSPF.......................................................................................................................68
3.8.4 BGP.........................................................................................................................72
3.9 VPN.................................................................................................................................75
3.9.1 OpenVPN.................................................................................................................75
3.9.1.1 Edit OpenVPN Connection .................................................................................................................................. 75
3.9.1.2 Set up OpenVPN Client ....................................................................................................................................... 77
3.9.1.3 Set up OpenVPN Server ...................................................................................................................................... 78
3.9.1.4 Set up OpenVPN Custom .................................................................................................................................... 79
3.9.2 IPSec.......................................................................................................................80
3.9.2.1 Connections ........................................................................................................................................................ 81
3.9.2.2 Authentication IDs .............................................................................................................................................. 84
3.9.2.3 X.509 Certificates................................................................................................................................................ 85
3.9.2.4 CA Certificates..................................................................................................................................................... 86
3.9.2.5 Net-to-Net Configuration.................................................................................................................................... 89
3.9.2.6 Hub-Spoke Topology ......................................................................................................................................... 103
3.9.3 GRE.......................................................................................................................113
3.9.4 PPTP Server..........................................................................................................114
3.9.5 L2TP......................................................................................................................115
3.9.6 Firewall ..................................................................................................................119
3.9.6.1 Port Forwarding ................................................................................................................................................ 120
3.9.6.2 DMZ .................................................................................................................................................................. 121
3.9.6.3 IP Filter ............................................................................................................................................................. 122
3.9.6.4 MAC Filter......................................................................................................................................................... 124
3.9.6.5 URL Filter .......................................................................................................................................................... 125
3.9.6.6 NAT ................................................................................................................................................................... 126
3.9.6.7 IPS ..................................................................................................................................................................... 126
3.10 Service.........................................................................................................................127
3.10.1 SNMP ..................................................................................................................127

6
TABLE OF
CONTENTS
3.10.1.1 SNMP configuration.........................................................................................................................................127
3.10.1.2 SNMP v3 User configuration............................................................................................................................127
3.10.1.3 SNMP trap configuration ................................................................................................................................ 128
3.10.2 TR069..................................................................................................................129
3.10.3 Dynamic DNS ......................................................................................................131
3.10.4 VRRP...................................................................................................................132
3.10.5 MQTT...................................................................................................................133
3.10.6 UPnP ...................................................................................................................135
3.10.7 SMTP...................................................................................................................135
3.10.8 IP Alias.................................................................................................................136
3.10.9 QoS (Quality of Service).......................................................................................137
3.10.9.1 ISP Bandwidth..................................................................................................................................................137
3.10.9.2 QoS ................................................................................................................................................................. 138
3.10.9.3 Status .............................................................................................................................................................. 141
3.10.9.4 The case of Internet Web site access.............................................................................................................. 141
3.10.9.5 Bandwidth divided for each IP address........................................................................................................... 145
3.11 Management................................................................................................................146
3.11.1 Identification.........................................................................................................146
3.11.2 Administration.......................................................................................................147
3.11.3 Contacts / On Duty...............................................................................................148
3.11.3.1 Contacts .......................................................................................................................................................... 148
3.11.3.2 Duty Schedule................................................................................................................................................. 149
3.11.4 SSH......................................................................................................................150
3.11.5 WEB.....................................................................................................................150
3.11.6 Firmware..............................................................................................................150
3.11.7 Configuration........................................................................................................151
3.11.8 Load Factory........................................................................................................151
3.11.9 Restart..................................................................................................................151
3.11.10 Schedule Reboot................................................................................................152
3.12 Diagnosis.....................................................................................................................153
3.12.1 Ping......................................................................................................................153
3.12.2 Traceroute............................................................................................................153

7
CHAPTER 1.
INTRODUCTION
1 Introduction
ICR-4103 series 4G/LTE Cellular Router are highly reliable and secure wireless
communications gateway designed for industrial networking. It supports multi-band
connectivity including FDD/TDD LTE, WCDMA and GSM for a wide range of applications and
vertical machine-to-machine (M2M) markets. To enhance reliability, ICR-4103 series are
equipped with dual SIM that support failover and roaming over to ensure uninterrupted
connectivity for mission-critical cellular communications.
With flexible LAN / WAN Ethernet options, ICR-4103 series allow you to customize your
professional applications in diverse environments. Integrated with WAN, LAN, built-in DI/DO
and RS-232/RS-485 serial ports, the ICR-4103 series also provide various serial network
protocols, such as IPv6, Modbus Gateway, MQTT and VPN for enriching connectivity and
security. For VPN tunnel, OpenVPN and IPSec are for reliable authentication of the network
stations, data encryption and verification of data integrity. The device is administrated via web
GUI, Telnet, SSH v2 and HTTP/HTTPS.
Built for secure and uninterrupted operation in harsh environments, ICR-4103 series support
extended operating temperature from -20°C to +75°C and a flexible input voltage range of
12/24VDC (8.4~30VDC). With DIN-rail mounting and IP40 housing protection, ICR-4103 series
are ideal cellular communications solution for heavy industrial use.
1.1 Features
Highly reliable and secure for mission-critical cellular communications
Provide flexible options to configure LAN / WAN ports
Support multi-band connectivity with FDD LTE / TDD LTE / WCDMA / GSM / LTE Cat4
Built-in dual SIM for network redundancy
Integrated dual detachable antenna against radio interference
LED indicators for connection and data transmission status
Industrial rated from -20°C to +75°C for use in harsh environments
Metal Housing with IP40 industrial grade protection
IPv6/IPv4 dual stack and all applications are IPv6 ready
Support various serial communication protocols for connectivity
Enhance security and encryption for authentication and transmission

8
CHAPTER 1.
INTRODUCTION
1.2 Specifications
1.3 Mechanical Dimensions
LTE Interface
FDD LTE: B1/B3/B5/B7/B8/B20
TDD LTE: B38/B40/B41
WCDMA: B1/B5/B8
GSM: 900/1800 MHz
LTE Cat4
Processor & I/O Interface
High performance 528 MHz CPU with 512 Mbytes of
DDR3 memory
2 x SIM Card Slots
3 x LAN 10/100 Mbps Ethernet ports
1 x WAN 10/100 Mbps Ethernet port
Reset Button
Console: 1 x RS232 (9-pin Sub-D)
2 x SMAconnectors for detachable LTE antenna
1 x RS485 (D+/D-)
1 x RS232 (TXD/RXD)
2 x DI, 1 x DO (Alarm +/-)
Physical Characteristics
Enclosure: Metal Shell, IP40 Protection
Weight: 740g
Dimension: 106 mm (D) x 62.5 mm (W) x 135 mm (H)
Installation: DIN Rail (Default) or Wall Mount
(Optional)
LED Display
1 x System status LED (Green)
1 x VPN status LED (Green)
1 x SIM1 status LED (Green)
1 x SIM2 status LED (Green)
Ethernet status LEDs (Green for LINK/ACT, Yellow for
SPEED)
2 x Mobile connection strength LEDs (Green)
Power Supply
Power Consumption: <7W
Power Input: 12/24VDC (8.4~30VDC)
MTBF (mean time between failures)
296,306 Hrs (MIL-HDBK-217)
Software
Network Protocols:
IPv4, IPv6, IPv4/IPv6 dual stack, DHCP server and
client,
PPPoE, Static IP, SNTP, DNS Proxy, Modbus, VRRP,
OSPF, Message Queue Telemetry, Transport (MQTT
Broker)
Routing/Firewall:
NAT, Virtual Server, DMZ, MAC Filter, URL Filter, IP
Filter,
VLAN, Static Routing and RIP-1/2
VPN:
OpenVPN, IPSec (3DES, AES128, AES196, AES256,
MD5, SHA-1, SHA256)
Wireless Connectivity:
Two SIM for failover/ roaming over/ back up
Two SIM data usage control
Seamless multi WAN connections switch
Others:
DDNS, QoS, Virtual COM, UPnP
Alarm:
DI, DO, SMS, VPN/WAN Disconnect, SNMP Trap,
E-mail
Management Software
Web GUI for remote and local management, CLI
Dual Image firmware upgrade by Web GUI
Syslog monitor
SNMP, TR069
Remote management via SSH v2, HTTPS
Local management via Telnet, SSH v2, HTTP/HTTPS
Environment
Operating Temperature: -20 ~ +75°C
Storage Temperature: -40 ~ +85°C
Humidity: 5 ~ 95% (non-condensing)
Standards and Certifications
EMI: FCC
EMC: CE (EN55032 & EN55024)
Railway Traffic: EN50121-4
Immunity for Heavy Industrial Environment:
EN61000-6-2
Emission for Heavy Industrial Environment:
EN61000-6-4
Safety: EN60950-1
Radio: EN301489, EN301908, EN303413

9
CHAPTER 1.
INTRODUCTION
1.4 Hardware Panel Layout
This chapter describes the panel and interface layout of hardware.
[Front Panel View] [Top Panel View]
Index No.
Description
1
Fast Ethernet port 1~3
2
WAN port
3
SIM card slot
4
SMA antenna connectors
5
LED indicators (SYS, Call Signal, VPN, SIM1,
SIM2)
6
RS-232 Console/COM1
7
Reset push-button
8
DIP switch
9
Terminal block for DI1, DI2, COM2 (RS-232),
COM3 (RS-485), Alarm
10
Terminal block for power
11
Earth grounding
8
9
11
10
1
2
3
4
4
5
6
7

CHAPTER 2.
HARDWARE INSTALLATION
10
2 Hardware Installation
This chapter introduces how to install and connect the hardware.
2.1 LED Indicators
LED
SYS
Call Signal
M~H
Call Signal
Low
VPN
SIM1
SIM2
ON
System UP
Normal
Signal
Low Signal
VPN
Connected
Connected
Connected
Slow
Blinking
Booting
N/A
N/A
WAN
Connected
Connecting
Connecting
Fast
Blinking
N/A
N/A
N/A
N/A
Error
Error
OFF
Power Down
N/A
N/A
NO WAN
Connection
Not
Working
Not
Working
Heart
Beat
N/A
N/A
N/A
N/A
Reading
Reading
2.2 Ethernet Port
(1) 10/100 Mbps Ethernet LAN1~LAN3
The Ethernet LAN1~3 interfaces are standard RJ45 connectors.

CHAPTER 2.
HARDWARE INSTALLATION
11
Pin
Description
Function
1
LAN TX+
10/100 Mbps LAN, TX+ Pin
2
LAN TX-
10/100 Mbps LAN, TX- Pin
3
LAN RX+
10/100 Mbps LAN, RX+ Pin
4
N/A
N/A
5
N/A
N/A
6
LAN RX-
10/100 Mbps LAN, RX- Pin
7
N/A
N/A
8
N/A
N/A
Each Ethernet port has two LED indicators.
The Green LED indicates Link/ACT, and the Yellow LED indicates Speed.
LED
Status
Description
Green (Link/ACT)
Off
Connection is down
Blink
Data is being transmitted
On
Connection is up
Yellow (Speed)
Off
10 Mbps Mode
On
100 Mbps Mode

CHAPTER 2.
HARDWARE INSTALLATION
12
2.3 Serial Port COM1 (Console)
Pin
Description
Direction
1
N/A
N/A
2
RXD
In
3
TXD
Out
4
N/A
N/A
5
GND
Ground
6
N/A
N/A
7
RTS
Out
8
CTS
In
9
N/A
N/A
The serial port COM1 is a standard Sub-D connector.

CHAPTER 2.
HARDWARE INSTALLATION
13
2.4 Install the SIM Card
1. SIM1/SIM2 Card Drawers and Eject Buttons
2. Insert and Remove SIM1/SIM2 Card
(1)Before inserting or removing the SIM card, ensure that the power has been turned off and
the power connector has been removed from mobile router.
(2)Press the button with a paper clip or suitable tool to eject the SIM card from the drawer.
(3)Insert the SIM card with the contacts facing up and align it properly into the drawer. Make
sure your direction of SIM Card and put it into the tray.
(4)Slide the drawer back and locks it in place.
Note:
Please make sure the direction first. When pulling into the SIM tray without putting the correct
direction, the tray will be stuck inside.
Please turn off your router before taking the SIM card.
SIM 1
SIM 2

CHAPTER 2.
HARDWARE INSTALLATION
14
2.5 Reset Button
Reset button allows you to reboot the unit or restore to factory default
setting.
Function
Operation
Reboot
Press the button for 1 second
Restore to factory default setting
Press the button for 5 seconds
Note:
Press the Reset button and count the time around 5 seconds. The LED Indicators will be blinking
to show you have activated the setting successfully.
2.6 External Antenna
Each unit has two antenna connectors (SMA), MAIN and AUX. Connect the antenna to MAIN
when you have only one antenna. Please tighten the connecting nut properly to ensure good
connection.
2.7 Connecting the Power Supply
The router requires a DC power supply in the range of 12/24VDC (8.4~30VDC). Please ensure
all components are earthed to a common ground before connecting any wiring.
Pin
12/24VDC (8.4~30VDC)
Power Input
FRAME GROUND
V -
Negative
V+
Positive

CHAPTER 2.
HARDWARE INSTALLATION
15
2.8 Grounding the Router
To prevent the noise and surge effect, please connect the router to the site ground wire by the
ground screw before turning on the router.
2.9 Pin Assignments
Ring-type
terminal
Fork-type
terminal

CHAPTER 2.
HARDWARE INSTALLATION
16
2.10 Connecting I/O Ports
(1) Digital Input DI1 & DI2
The unit has four terminals on the terminal block for the Digital inputs.
Note: Q1 is a bidirectional component.
(2) Digital Output –Alarm Contacts
The unit has 2 terminals on the terminal block for the Alarm Contacts. Photo relay output
with current capacity of 500mA/50VDC maximum.
Pin
Description
Alarm -
Alarm negative signal output
Alarm +
Alarm positive signal output
Pin
Description
DI1_I1
Digital INPUT 1
DI1_COM
Digital INPUT 1
DI2_I2
Digital INPUT 2
DI2_COM
Digital INPUT 2

CHAPTER 2.
HARDWARE INSTALLATION
17
2.11 Serial Port COM2 (RS-232)
The serial port COM2 is a RS-232 interface.
Pin
Description
RXD
COM2 Serial Port, RXD Signal (INPUT)
TXD
COM2 Serial Port, TXD Signal (OUTPUT)
GND
COM2 Serial Port, Signal Ground

CHAPTER 2.
HARDWARE INSTALLATION
18
2.12 Serial Port COM3 (RS-485)
The serial port COM3 is a RS-485 interface.
Pin
Description
D -
COM3 Serial Port, Data- (B) wire
D +
COM3 Serial Port, Data+ (A) wire
2.13 DIP Switch
Pull High (510 ohm) /
Pull Low (510 ohm) Bias Resistor
SW 1 (Pull Low)
SW 2 (Pull High)
Enable
ON
ON
Disable (Default)
OFF
OFF
Termination Resistor (120 ohm)
SW 3
Enable
ON
Disable (Default)
OFF
A built-in 120 ohm terminal resistor can be activated by DIP switch.
Pull high or Pull low resistor adjustments are also available. It
improves the communication on RS-485 networks for specific
application.
Switch 1 and 2 set the pull high/low resistor
Switch 3 enables or disables the termination resistor

19
CHAPTER 3.
WEB CONFIGURATIONS
3 Configuration via Web Browser
3.1 Access the Web Interface
The web configuration is an HTML-based management interface for quick and easy set up of the
Mobile Router. Monitoring of the status, configuration and administration of the router can be
done via the Web interface.
After properly connecting the hardware of Mobile Router as previously explained. Launch your
web browser and enter http://10.1.1.1 as URL.
The default IP address and sub net-mask of the Mobile Router are 10.1.1.1 and 255.255.255.0.
Because the mobile router acts as DHCP server in your network, the mobile router will
automatically assign IP address for PC or NB in the network.
Logging in the Router
In this section, please fill in the default User Name admin and the blank default Password. Then
Click Login to enter the device. For the system security purposes, we strongly suggest changing
Username and password after the initial login.
After clicking, the interface shows Login ok.However, if this is your first time to login in to the
system (or defaults settings have been restored), the window will also show "For security reasons,
please change password first" message.
Then, you will be directed to Management >Administration page. Then you can assign new
password to Super User.

20
CHAPTER 3.
WEB CONFIGURATIONS
Enter the new Super User password and retype the password to confirm. Then, click Apply
button. The system needs a reboot to take new password into effect.
Note: After changing the User Name and Password, we strongly recommend that you save them
because another time when you login, new User Name and Password have to be used so
as to successfully login to the system.