CTC Union ICR-4103 Series User manual

ICR-4103
4G LTE Cellular Router

2
LEGAL
The information in this publication has been carefully checked and is believed to be entirely
accurate at the time of publication. CTC Union Technologies assumes no responsibility,
however, for possible errors or omissions, or for any consequences resulting from the use of
the information contained herein. CTC Union Technologies reserves the right to make
changes in its products or product specifications with the intent to improve function or design
at any time and without notice and is not required to update this documentation to reflect
such changes.
CTC Union Technologies makes no warranty, representation, or guarantee regarding the
suitability of its products for any particular purpose, nor does CTC Union assume any liability
arising out of the application or use of any product and specifically disclaims any and all
liability, including without limitation any consequential or incidental damages.
CTC Union products are not designed, intended, or authorized for use in systems or
applications intended to support or sustain life, or for any other application in which the
failure of the product could create a situation where personal injury or death may occur.
Should the Buyer purchase or use a CTC Union product for any such unintended or
unauthorized application, the Buyer shall indemnify and hold CTC Union Technologies and
its officers, employees, subsidiaries, affiliates, and distributors harmless against all claims,
costs, damages, expenses, and reasonable attorney fees arising out of, either directly or
indirectly, any claim of personal injury or death that may be associated with such unintended
or unauthorized use, even if such claim alleges that CTC Union Technologies was negligent
regarding the design or manufacture of said product.
WARNING:
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio frequency
energy and if not installed and used in accordance with the instruction manual may cause
harmful interference in which case the user will be required to correct the interference at his
own expense.

ICR-4103 Series
Industrial Grade 4G LTE Cellular Router
User Manual
Version 1.0 January 2018
This manual supports the following models:
ICR-4103
This document is the current official release manual. Contents are subject to change without
prior notice. Please check CTC Union's website for any updated manual or contact us by
E-mail at [email protected]. Please address any comments for improving this manual or to
point out omissions or errors to mar[email protected]om. Thank you.
2018 CTC Union Technologies Co.,Ltd.
All Rights Reserved
The contents of this document are subject to change without any prior notice.

4
Table of Contents
1Introduction................................................................................................................ 7
1.1 Features................................................................................................................... 7
1.2 Specifications........................................................................................................... 8
1.3 Mechanical Dimensions ........................................................................................... 8
1.4 Hardware Panel Layout............................................................................................9
2Hardware Installation............................................................................................... 10
2.1 LED Indicators........................................................................................................ 10
2.2 Ethernet Port.......................................................................................................... 10
2.3 Serial Port COM1 (Console)....................................................................................11
2.4 Install the SIM Card................................................................................................ 12
2.5 Reset Button.......................................................................................................... 13
2.6 External Antenna.................................................................................................... 13
2.7 Connecting the Power Supply................................................................................ 13
2.8 Grounding the Router............................................................................................. 14
2.9 Pin Assignments..................................................................................................... 14
2.10 Connecting I/O Ports............................................................................................... 15
2.11 Serial Port COM2 (RS-232)..................................................................................... 16
2.12 Serial Port COM3 (RS-485) .................................................................................... 16
2.13 DIP Switch.............................................................................................................. 17
3Configuration via Web Browser.............................................................................. 18
3.1 Access the Web Interface....................................................................................... 18
3.2 Status..................................................................................................................... 19
3.3 Configuration > System.......................................................................................... 20
3.3.1 System > Time and Date................................................................................... 20
3.3.2 System > COM Ports........................................................................................ 23
3.3.3 System > Logging............................................................................................. 24
3.3.3.1 Logging > Logging ...................................................................................................................................... 25
3.3.3.2 Logging > Log ............................................................................................................................................. 25
3.3.4 System > Alarm ................................................................................................ 26
3.3.4.1 Alarm > Name Group................................................................................................................................. 28
3.3.4.2 Alarm > Edit User ....................................................................................................................................... 28
3.3.5 System > Ethernet Ports................................................................................... 30
3.3.6 System > Modbus............................................................................................. 30
3.3.7 System > Client List.......................................................................................... 31
3.4 Configuration > WAN.............................................................................................. 31
3.4.1 WAN > Priority.................................................................................................. 32
3.4.2 WAN > Ethernet................................................................................................ 32
3.4.2.1 WAN Ethernet Configuration ..................................................................................................................... 32
3.4.2.2 Ethernet Ping Health.................................................................................................................................. 35
3.4.3 WAN > IPv6 DNS.............................................................................................. 36
3.5 Configuration > LTE ............................................................................................... 37
3.5.1 LTE > LTE Config.............................................................................................. 37

5
3.5.1.1 LTE Configuration....................................................................................................................................... 37
3.5.1.2 LTE Ping Health .......................................................................................................................................... 38
3.5.2 LTE > Dual SIM................................................................................................. 39
3.5.3 LTE > Usage Display ........................................................................................ 43
3.5.4 LTE > SMS ....................................................................................................... 47
3.6 Configuration > LAN............................................................................................... 48
3.6.1 LAN > IPv4 ....................................................................................................... 49
3.6.2 LAN > IPv6 ....................................................................................................... 49
3.6.3 LAN > VLAN..................................................................................................... 51
3.6.4 LAN > Subnet................................................................................................... 53
3.7 IP Routing.............................................................................................................. 54
3.7.1 IP Routing > Static Route.................................................................................. 54
3.7.2 IP Routing > RIP............................................................................................... 56
3.7.3 IP Routing > OSPF........................................................................................... 57
3.7.4 IP Routing > BGP ............................................................................................. 61
3.8 Configuration > Service.......................................................................................... 64
3.8.1 Service > Configuration OpenVPN.................................................................... 64
3.8.1.1 Edit OpenVPN Connection......................................................................................................................... 64
3.8.1.2 Set up OpenVPN Client .............................................................................................................................. 66
3.8.1.3 Set up OpenVPN Server ............................................................................................................................. 68
3.8.1.4 Set up OpenVPN Custom ........................................................................................................................... 69
3.8.2 Service > Configuration IPSec.......................................................................... 70
3.8.2.1 IPSec > General setting .............................................................................................................................. 70
3.8.2.2 IPSec > Connections................................................................................................................................... 72
3.8.2.3 IPSec > The setting of X.509 Certificates.................................................................................................... 74
3.8.3 Service > Configuration Port Forwarding .......................................................... 75
3.8.4 Service > Dynamic DNS ................................................................................... 76
3.8.5 Service > DMZ.................................................................................................. 78
3.8.6 Service > SNMP ............................................................................................... 78
3.8.6.1 SNMP configuration................................................................................................................................... 78
3.8.6.2 SNMP v3 User configuration...................................................................................................................... 79
3.8.6.3 SNMP trap configuration ........................................................................................................................... 80
3.8.7 Service > TR069............................................................................................... 81
3.8.8 Service > IP Filter ............................................................................................. 82
3.8.9 Service > MAC Filter......................................................................................... 83
3.8.10 Service > URL Filter........................................................................................ 84
3.8.11 Service > VRRP.............................................................................................. 85
3.8.12 Service > MQTT.............................................................................................. 86
3.8.13 Service > UPnP .............................................................................................. 87
3.8.14 Service > SMTP.............................................................................................. 88
3.8.15 Service > NAT................................................................................................. 88
3.8.16 Service > IP Alias............................................................................................ 89
3.8.17 Service > GRE................................................................................................ 89
3.9 Management............................................................................................................. 90
3.9.1 Identification ..................................................................................................... 91
3.9.2 Administration................................................................................................... 91
3.9.3 Firmware........................................................................................................... 92

6
3.9.4 Configuration .................................................................................................... 92
3.9.5 Load Factory..................................................................................................... 92
3.9.6 Restart.............................................................................................................. 92

7
CHAPTER 1.
INTRODUCTION
1Introduction
ICR-4103 series 4G/LTE Cellular Router are highly reliable and secure wireless
communications gateway designed for industrial networking. It supports multi-band
connectivity including FDD/TDD LTE, WCDMA and GSM for a wide range of applications and
vertical machine-to-machine (M2M) markets. To enhance reliability, ICR-4103 series are
equipped with dual SIM that support failover and roaming over to ensure uninterrupted
connectivity for mission-critical cellular communications.
With flexible LAN / WAN Ethernet options, ICR-4103 series allow you to customize your
professional applications in diverse environments. Integrated with WAN, LAN, built-in DI/DO
and RS-232/RS-485 serial ports, the ICR-4103 series also provide various serial network
protocols, such as IPv6, Modbus Gateway, MQTT and VPN for enriching connectivity and
security. For VPN tunnel, OpenVPN and IPSec are for reliable authentication of the network
stations, data encryption and verification of data integrity. The device is administrated via web
GUI, Telnet, SSH v2 and HTTP/HTTPS.
Built for secure and uninterrupted operation in harsh environments, ICR-4103 series support
extended operating temperature from -20°C to +75°C and a flexible input voltage range of
12/24VDC (8.4~30VDC). With DIN-rail mounting and IP40 housing protection, ICR-4103
series are ideal cellular communications solution for heavy industrial use.
1.1 Features
Highly reliable and secure for mission-critical cellular communications
Provide flexible options to configure LAN / WAN ports
Support multi-band connectivity with FDD LTE / TDD LTE / WCDMA / GSM / LTE Cat4
Built-in dual SIM for network redundancy
Integrated dual detachable antenna against radio interference
LED indicators for connection and data transmission status
Industrial rated from -20°C to +75°C for use in harsh environments
Metal Housing with IP40 industrial grade protection
IPv6/IPv4 dual stack and all applications are IPv6 ready
Support various serial communication protocols for connectivity
Enhance security and encryption for authentication and transmission

8
CHAPTER 1.
INTRODUCTION
1.2 Specifications
1.3 Mechanical Dimensions
LTE Interface
FDD LTE: B1/B3/B5/B7/B8/B20
TDD LTE: B38/B40/B41
WCDMA: B1/B5/B8
GSM: 900/1800 MHz
LTE Cat4
Processor & I/O Interface
High performance 528 MHz CPU with 512 Mbytes of
DDR3 memory
2 x SIM Card Slots
3 x LAN 10/100 Mbps Ethernet ports
1 x WAN 10/100 Mbps Ethernet port
Reset Button
Console: 1 x RS232 (9-pin Sub-D)
2 x SMAconnectors for detachable LTE antenna
1 x RS485 (D+/D-)
1 x RS232 (TXD/RXD)
2 x DI, 1 x DO (Alarm +/-)
Physical Characteristics
Enclosure: Metal Shell, IP40 Protection
Weight: 740g
Dimension: 106 mm (D) x 62.5 mm (W) x 135 mm (H)
Installation: DIN Rail (Default) or Wall Mount
(Optional)
LED Display
1 x System status LED (Green)
1 x VPN status LED (Green)
1 x SIM1 status LED (Green)
1 x SIM2 status LED (Green)
Ethernet status LEDs (Green for LINK/ACT, Yellow for
SPEED)
2 x Mobile connection strength LEDs (Green)
Power Supply
Power Consumption: <7W
Power Input: 12/24VDC (8.4~30VDC)
MTBF (mean time between failures)
296,306 Hrs (MIL-HDBK-217)
Software
Network Protocols:
IPv4, IPv6, IPv4/IPv6 dual stack, DHCP server and
client,
PPPoE, Static IP, SNTP, DNS Proxy, Modbus, VRRP,
OSPF, Message Queue Telemetry, Transport (MQTT
Broker)
Routing/Firewall:
NAT, Virtual Server, DMZ, MAC Filter, URL Filter, IP
Filter,
VLAN, Static Routing and RIP-1/2
VPN:
OpenVPN, IPSec (3DES, AES128, AES196, AES256,
MD5, SHA-1, SHA256)
Wireless Connectivity:
Two SIM for failover/ roaming over/ back up
Two SIM data usage control
Seamless multi WAN connections switch
Others:
DDNS, QoS, Virtual COM, UPnP
Alarm:
DI, DO, SMS, VPN/WAN Disconnect, SNMP Trap,
E-mail
Management Software
Web GUI for remote and local management, CLI
Dual Image firmware upgrade by Web GUI
Syslog monitor
SNMP, TR069
Remote management via SSH v2, HTTPS
Local management via Telnet, SSH v2, HTTP/HTTPS
Environment
Operating Temperature: -20 ~ +75°C
Storage Temperature: -40 ~ +85°C
Humidity: 5 ~ 95% (non-condensing)
Standards and Certifications
EMI: FCC
EMC: CE (EN55032 & EN55024)
Railway Traffic: EN50121-4
Immunity for Heavy Industrial Environment:
EN61000-6-2
Emission for Heavy Industrial Environment:
EN61000-6-4
Safety: EN60950-1
Radio: EN301489, EN301908, EN303413

9
CHAPTER 1.
INTRODUCTION
1.4 Hardware Panel Layout
This chapter describes the panel and interface layout of hardware.
[Front Panel View] [Top Panel View]
Index No.
Description
1
Fast Ethernet port 1~3
2
WAN port
3
SIM card slot
4
SMA antenna connectors
5
LED indicators (SYS, Call Signal, VPN, SIM1,
SIM2)
6
RS-232 Console/COM1
7
Reset push-button
8
DIP switch
9
Terminal block for DI1, DI2, COM2 (RS-232),
COM3 (RS-485), Alarm
10
Terminal block for power
11
Earth grounding
8
9
11
10
1
2
3
4
4
5
6
7

10
CHAPTER 2.
HARDWARE INSTALLATION
2Hardware Installation
This chapter introduces how to install and connect the hardware.
2.1 LED Indicators
LED
SYS
Call Signal
M~H
Call Signal
Low
VPN
SIM1
SIM2
ON
System UP
Normal
Signal
Low Signal
VPN
Connected
Connected
Connected
Slow
Blinking
Booting
N/A
N/A
WAN
Connected
Connecting
Connecting
Fast
Blinking
N/A
N/A
N/A
N/A
Error
Error
OFF
Power Down
N/A
N/A
NO WAN
Connection
Not
Working
Not
Working
Heart
Beat
N/A
N/A
N/A
N/A
Reading
Reading
2.2 Ethernet Port
(1) 10/100 Mbps Ethernet LAN1~LAN3
Pin
Description
Function
1
LAN TX+
10/100 Mbps LAN, TX+ Pin
2
LAN TX-
10/100 Mbps LAN, TX- Pin
3
LAN RX+
10/100 Mbps LAN, RX+ Pin
The Ethernet LAN1~3 interfaces are standard RJ45 connectors.

11
CHAPTER 2.
HARDWARE INSTALLATION
4
N/A
N/A
5
N/A
N/A
6
LAN RX-
10/100 Mbps LAN, RX- Pin
7
N/A
N/A
8
N/A
N/A
Each Ethernet port has two LED indicators.
The Green LED indicates Link/ACT, and the Yellow LED indicates Speed.
LED
Status
Description
Green (Link/ACT)
Off
Connection is down
Blink
Data is being transmitted
On
Connection is up
Yellow (Speed)
Off
10 Mbps Mode
On
100 Mbps Mode
2.3 Serial Port COM1 (Console)
Pin
Description
Direction
1
N/A
N/A
2
RXD
In
3
TXD
Out
4
N/A
N/A
5
GND
Ground
6
N/A
N/A
7
RTS
Out
8
CTS
In
9
N/A
N/A
The serial port COM1 is a standard Sub-D connector.

12
CHAPTER 2.
HARDWARE INSTALLATION
2.4 Install the SIM Card
1. SIM1/SIM2 Card Drawers and Eject Buttons
2. Insert and Remove SIM1/SIM2 Card
(1)Before inserting or removing the SIM card, ensure that the power has been turned off and
the power connector has been removed from mobile router.
(2)Press the button with a paper clip or suitable tool to eject the SIM card from the drawer.
(3)Insert the SIM card with the contacts facing up and align it properly into the drawer. Make
sure your direction of SIM Card and put it into the tray.
(4)Slide the drawer back and locks it in place.
Note:
Please make sure the direction first. When pulling into the SIM tray without putting the
correct direction, the tray will be stuck inside.
Please turn off your router before taking the SIM card.
SIM 1
SIM 2

13
CHAPTER 2.
HARDWARE INSTALLATION
2.5 Reset Button
Reset button allows you to reboot the unit or restore to factory default
setting.
Function
Operation
Reboot
Press the button for 1 second
Restore to factory default setting
Press the button for 5 seconds
Note:
Press the Reset button and count the time around 5 seconds. The LED Indicators will be
blinking to show you have activated the setting successfully.
2.6 External Antenna
Each unit has two antenna connectors (SMA), MAIN and AUX. Connect the antenna to MAIN
when you have only one antenna. Please tighten the connecting nut properly to ensure good
connection.
2.7 Connecting the Power Supply
The router requires a DC power supply in the range of 12/24VDC (8.4~30VDC). Please ensure
all components are earthed to a common ground before connecting any wiring.
Pin
12/24VDC (8.4~30VDC)
Power Input
FRAME GROUND
V -
Negative
V+
Positive

14
CHAPTER 2.
HARDWARE INSTALLATION
2.8 Grounding the Router
To prevent the noise and surge effect, please connect the router to the site ground wire by the
ground screw before turning on the router.
2.9 Pin Assignments
Ring-type
terminal
Fork-type
terminal

15
CHAPTER 2.
HARDWARE INSTALLATION
2.10 Connecting I/O Ports
(1) Digital Input DI1 & DI2
The unit has four terminals on the terminal block for the Digital inputs.
Note: Q1 is a bidirectional component.
(2) Digital Output –Alarm Contacts
The unit has 2 terminals on the terminal block for the Alarm Contacts. Photo relay output
with current capacity of 500mA/50VDC maximum.
Pin
Description
Alarm -
Alarm negative signal output
Alarm +
Alarm positive signal output
Pin
Description
DI1_I1
Digital INPUT 1
DI1_COM
Digital INPUT 1
DI2_I2
Digital INPUT 2
DI2_COM
Digital INPUT 2

16
CHAPTER 2.
HARDWARE INSTALLATION
2.11 Serial Port COM2 (RS-232)
The serial port COM2 is a RS-232 interface.
Pin
Description
RXD
COM2 Serial Port, RXD Signal (INPUT)
TXD
COM2 Serial Port, TXD Signal (OUTPUT)
GND
COM2 Serial Port, Signal Ground
2.12 Serial Port COM3 (RS-485)
The serial port COM3 is a RS-485 interface.
Pin
Description
D -
COM3 Serial Port, Data- (B) wire
D +
COM3 Serial Port, Data+ (A) wire

17
CHAPTER 2.
HARDWARE INSTALLATION
2.13 DIP Switch
Pull High (510 ohm) /
Pull Low (510 ohm) Bias Resistor
SW 1 (Pull Low)
SW 2 (Pull High)
Enable
ON
ON
Disable (Default)
OFF
OFF
Termination Resistor (120 ohm)
SW 3
Enable
ON
Disable (Default)
OFF
A built-in 120 ohm terminal resistor can be activated by DIP switch.
Pull high or Pull low resistor adjustments are also available. It
improves the communication on RS-485 networks for specific
application.
Switch 1 and 2 set the pull high/low resistor
Switch 3 enables or disables the termination resistor

18
CHAPTER 3.
WEB CONFIGURATIONS
3Configuration via Web Browser
3.1 Access the Web Interface
The web configuration is an HTML-based management interface for quick and easy set up of
the Mobile Router. Monitoring of the status, configuration and administration of the router can
be done via the Web interface.
After properly connecting the hardware of Mobile Router as previously explained. Launch your
web browser and enter http://10.1.1.1 as URL.
The default IP address and sub net-mask of the Mobile Router are 10.1.1.1 and 255.255.255.0.
Because the mobile router acts as DHCP server in your network, the mobile router will
automatically assign IP address for PC or NB in the network.
Logging in the Router
In this section, please fill in the default User Name admin and the blank default Password.
Then Click Login to enter the device. For the system security purposes, we strongly suggest
changing Username and password after the initial login..
After clicking, the interface shows Login ok.
Note: After changing the User Name and Password, we strongly recommend you to save them
because another time when you login, the User Name and Password have to be used the
new one you changed.

19
CHAPTER 3.
WEB CONFIGURATIONS
3.2 Status
When you enter the web browser in the beginning, the interface displays the status of router to
inform you of Cellular Attribute, Dual SIM information, the current connectivity of WAN Ethernet
and LAN Ethernet.
Status > WAN LTE
Item
Description
Attribute
SIM Card
Show the SIM card which the router work with currently: Current SIM
or Backup SIM.
Modem Status
Show the status of modem.
Operator
Display the name of operator.
Modem Access
Show the router to access protocol type
IMSI
Show the IMSI number of the current SIM cards.
Phone Number
Show the phone number of the current SIM or Backup SIM.
Band
Show current connected Band.
Channel ID
Show current connected channel ID.
IPv4 Address
LTE obtain IPv4 address.
IPv4 Mask
LTE IPv4 mask.
Status > WAN Ethernet
Item
Description
Attribute
IPv4 Address
Ethernet WAN obtain IPv4 Address.
IPv4 Mask
Ethernet WAN obtain IPv4 Mask.

20
CHAPTER 3.
WEB CONFIGURATIONS
3.3 Configuration > System
This system section provides you to configure the following items, including Time and Date,
COM Ports, Logging, Alarm, Ethernet Ports, Modbus Static Route, and RIP.
3.3.1 System > Time and Date
This section allows you to set up the time and date of router and NTP server. There are two
modes at Time and Date Setup, including Get from Time Server and Manual. The default
mode is Get from Time Server.
For Time Zone Setup, the Daylight Savings Time allows the device to forward/backward the
amount of time from Ahead of standard time setting automatically when the time is at the
Daylight Savings duration that you have set up before.
I. Get from Time Server
Set up the time servers of IPv4 and IPv6.
Select your local time zone.
Click Apply to keep your configuration settings.
Status > LAN Ethernet
Item
Description
Attribute
IPv4 Address
Ethernet LAN is assigned IPv4 Address.
IPv4 Mask
Ethernet LAN is assigned IPv4 Mask.
IPv6 Address
Ethernet LAN is assigned IPv6 Address.