CTC Union ICR-W401 User manual

i
ICR-W401
Industrial 4G LTE Router

2
LEGAL
The information in this publication has been carefully checked and is believed to be entirely
accurate at the time of publication. CTC Union Technologies assumes no responsibility, however, for
possible errors or omissions, or for any consequences resulting from the use of the information
contained herein. CTC Union Technologies reserves the right to make changes in its products or
product specifications with the intent to improve function or design at any time and without notice
and is not required to update this documentation to reflect such changes.
CTC Union Technologies makes no warranty, representation, or guarantee regarding the suitability of
its products for any particular purpose, nor does CTC Union assume any liability arising out of the
application or use of any product and specifically disclaims any and all liability, including without
limitation any consequential or incidental damages.
CTC Union products are not designed, intended, or authorized for use in systems or applications
intended to support or sustain life, or for any other application in which the failure of the product
could create a situation where personal injury or death may occur. Should the Buyer purchase or
use a CTC Union product for any such unintended or unauthorized application, the Buyer shall
indemnify and hold CTC Union Technologies and its officers, employees, subsidiaries, affiliates, and
distributors harmless against all claims, costs, damages, expenses, and reasonable attorney fees
arising out of, either directly or indirectly, any claim of personal injury or death that may be
associated with such unintended or unauthorized use, even if such claim alleges that CTC Union
Technologies was negligent regarding the design or manufacture of said product.
WARNING:
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and if not installed and used in
accordance with the instruction manual may cause harmful interference in which case the user will
be required to correct the interference at his own expense.

3
ICR-W401 Series
Industrial Grade 4G LTE Cellular Router
User Manual
Version 0.9 January 2020
This manual supports the following models:
ICR-W401
This document is the current official release manual. Contents are subject to change without
prior notice. Please check CTC Union's website for any updated manual or contact us by E-mail
at [email protected]. Please address any comments for improving this manual or to point out
omissions or errors to [email protected]. Thank you.
2019 CTC Union Technologies Co.,Ltd.
All Rights Reserved
The contents of this document are subject to change without any prior notice.

4
TABLE OF
CONTENTS
Table of Contents
1Introduction.......................................................................................................................7
1.1 Features.............................................................................................................................7
1.2 Specifications.....................................................................................................................8
1.3 Mechanical Dimensions.....................................................................................................9
1.4 Hardware Panel Layout......................................................................................................9
2Hardware Installation......................................................................................................11
2.1 LED Indicators .................................................................................................................11
2.2 Ethernet Port....................................................................................................................11
2.3 Grounding the Router.......................................................................................................12
2.4 Pin Assignments ..............................................................................................................12
2.5 Connecting the Power Supply..........................................................................................13
2.6 Connecting I/O Ports........................................................................................................13
2.7 UART (RS-232)................................................................................................................14
2.8 Install the SIM Card..........................................................................................................15
2.9 Reset Button....................................................................................................................15
2.10 External Antennas..........................................................................................................16
3Configuration via Web Browser.....................................................................................17
3.1 Access the Web Interface.................................................................................................17
3.1.1 Logging in the Router...............................................................................................17
3.1.2 Navigate the Web Configurator................................................................................18
3.2 Status...............................................................................................................................20
3.2.1 Status > GPS ...........................................................................................................24
3.3 System.............................................................................................................................25
3.3.1 System > Time and Date..........................................................................................25
3.3.2 System > COM.........................................................................................................29
3.3.3 System > Logging....................................................................................................30
3.3.3.1 Logging > Logging ............................................................................................................................................... 30
3.3.3.2 Logging > Log ...................................................................................................................................................... 31
3.3.4 System > Alarm........................................................................................................32
3.3.4.1 Alarm > Contacts > Create and name the Group ................................................................................................ 33
3.3.4.2 Alarm > Contacts > Add User .............................................................................................................................. 35
3.3.4.3 Alarm > Duty Schedule........................................................................................................................................ 36
3.3.5 System > Ethernet Ports..........................................................................................36
3.3.6 System > Client List .................................................................................................38
3.4 WAN ................................................................................................................................39
3.4.1 WAN > Priority .........................................................................................................39
3.4.2 WAN > Ethernet.......................................................................................................40
3.4.2.1 WAN Ethernet Configuration .............................................................................................................................. 40
3.4.3 WAN > IPv6 DNS.....................................................................................................43
3.4.4 WAN > Health Check...............................................................................................44
3.5 LTE..................................................................................................................................45

5
TABLE OF
CONTENTS
3.5.1 LTE > LTE Config.....................................................................................................45
3.5.1.1 LTE Configuration ................................................................................................................................................ 45
3.5.2 LTE > GPS Config....................................................................................................46
3.5.3 LTE > GPS Track.....................................................................................................47
3.5.4 LTE > APN Config....................................................................................................48
3.5.5 LTE > APN1 Usage..................................................................................................51
3.5.6 LTE > SMS...............................................................................................................55
3.5.7 LTE > Serving Cell ...................................................................................................57
3.5.8 LTE > DNS...............................................................................................................58
3.5.9 LTE > USSD.............................................................................................................59
3.6 WiFi .................................................................................................................................60
3.6.1 WiFi > WiFi Config ...................................................................................................60
3.6.2 WiFi > MAC Filter.....................................................................................................61
3.6.3 WiFi > Client List......................................................................................................62
3.7 LAN..................................................................................................................................63
3.7.1 LAN > IPv4...............................................................................................................63
3.7.2 LAN > IPv6...............................................................................................................64
3.7.3 LAN > VLAN ............................................................................................................64
3.7.4 LAN > Subnet ..........................................................................................................66
3.8 IP Routing........................................................................................................................67
3.8.1 IP Static Route .........................................................................................................67
3.8.2 IP Routing > RIP......................................................................................................70
3.8.3 IP Routing > OSPF...................................................................................................72
3.8.4 IP Routing > BGP.....................................................................................................75
3.9 VPN.................................................................................................................................78
3.9.1 OpenVPN.................................................................................................................78
3.9.1.1 Open VPN Common Setting................................................................................................................................ 78
3.9.1.2 Open VPN Client Setting ..................................................................................................................................... 79
3.9.1.3 Open VPN Server Setting .................................................................................................................................... 81
3.9.1.4 Set up Open VPN Custom ................................................................................................................................... 83
3.9.2 IPSec.......................................................................................................................84
3.9.2.1 Connections ........................................................................................................................................................ 85
3.9.2.2 Authentication IDs .............................................................................................................................................. 88
3.9.2.3 X.509 Certificates................................................................................................................................................ 90
3.9.2.4 CA Certificates..................................................................................................................................................... 91
3.9.2.5 Net-to-Net Configuration.................................................................................................................................... 94
3.9.3 GRE.......................................................................................................................109
3.9.4 PPTP Server..........................................................................................................109
3.9.5 L2TP...................................................................................................................... 111
3.10 Firewall ........................................................................................................................115
3.10.1 Firewall > Basic Rules..........................................................................................115
3.10.2 Port Forwarding....................................................................................................116
3.10.3 DMZ.....................................................................................................................117
3.10.4 IP Filter.................................................................................................................118
3.10.5 MAC Filter............................................................................................................121
3.10.6 URL Filter.............................................................................................................122

6
TABLE OF
CONTENTS
3.10.7 NAT......................................................................................................................123
3.10.8 IPS.......................................................................................................................123
3.11 Service.........................................................................................................................124
3.11.1 SNMP...................................................................................................................124
3.11.1.1 SNMP configuration........................................................................................................................................ 124
3.11.1.2 SNMP v3 User configuration........................................................................................................................... 125
3.11.1.3 SNMP trap configuration ................................................................................................................................ 126
3.11.2 TR069 ..................................................................................................................127
3.11.3 Dynamic DNS.......................................................................................................128
3.11.4 VRRP...................................................................................................................130
3.11.5 MQTT...................................................................................................................131
3.11.6 UPnP....................................................................................................................133
3.11.7 SMTP...................................................................................................................133
3.11.8 IPAlias.................................................................................................................134
3.11.9 QOS.....................................................................................................................135
3.11.9.1 ISP Bandwidth................................................................................................................................................. 135
3.11.9.2 QoS ................................................................................................................................................................. 136
3.11.9.3 Status ...............................................................................................................................................................137
3.12 Management................................................................................................................138
3.12.1 Identification.........................................................................................................138
3.11.2 Administration.......................................................................................................139
3.12.3 Contacts / On Duty...............................................................................................140
3.12.3.1 Contacts .......................................................................................................................................................... 140
3.12.3.2 Duty Schedule................................................................................................................................................. 141
3.12.4 SSH .....................................................................................................................142
3.12.5 WEB.....................................................................................................................142
3.12.6 Firmware..............................................................................................................143
3.12.7 Configuration........................................................................................................143
3.12.8 Load Factory........................................................................................................143
3.12.9 Restart.................................................................................................................144
3.12.10 Schedule Reboot................................................................................................144
3.13 Diagnosis.....................................................................................................................145
3.13.1 Ping......................................................................................................................145
3.13.2 Traceroute............................................................................................................145

7
CHAPTER 1.
INTRODUCTION
1 Introduction
ICR-W401 are compact, lightweight and cost-effective Industrial 4G LTE Cellular Routers
with built in 2-port fast Ethernet connection as well as 2G/3G/4G mobile networks for wired and
wireless communication in harsh environments. Equipped with RS232 serial port and digital
input/output interfaces, ICR-W401 devices are easy to configure and collect real-time data
quickly for Industrial IoT and machine-to-machine applications. ICR-W401 routers are also
compliant with IEEE 802.11b/g/n Wi-Fi connectivity.
Featuring VPN Tunnels, Firewall, TR069, and SNMP Trap, ICR-W401 Industrial 4G LTE
Cellular Routers enhance secure authentication, encryption and management to protect your
data efficiently between public and private networking. Besides, by supporting -30~+70°C
wide-temperature operation and flexible input voltage range of 9.6-60VDC, ICR-W401 are ideal
devices to be applied in diverse environments for various applications.
ICR-W401 Industrial 4G LTE Cellular Routers are suitable and reliable choices for fast
deployment and easy configuration to simplify your complicated solutions and fit your services
for industrial networking and smart city.
1.1 Features
Highly reliable and secure for mission-critical cellular communications
Compact and lightweight design with 2-port Ethernet interfaces
Support multi-band connectivity with FDD LTE/ TDD LTE/ WCDMA/ GSM/ LTE Cat 4
Provide IEEE 802.11b/g/n Wi-Fi standards
Built-in micro SIM connector, RS232 serial port, and DI/DO interfaces
Integrated detachable antenna against radio interference
LED indicators for connection and data transmission status
Industrial rated from -30 to +70°C for use in harsh environments
IPv6/IPv4 dual stack and all applications are IPv6 ready
Support serial communication protocols for rich connectivity
Enhance security and encryption for authentication and transmission

8
CHAPTER 1.
INTRODUCTION
1.2 Specifications
Cellular Interface
Standards:
(Please see ordering information for optional band)
▪4G: FDD LTE, TDD LTE
▪3G: WCDMA
▪2G: GSM/EDGE
LTE Data Rate: Cat 4, 150Mbps (DL), 50Mbps (UL)
Wi-Fi Interface
Compliant with IEEE 802.11 b/g/n Wi-Fi standards
2.4 GHz radio band for wireless
2T2R 300 Mbps wireless operation rate
Wireless security with WPA-PSK, WPA2-PSK support
Multiple SSIDs
Wireless MAC Filtering
Wireless client isolation
Hardware Interface
High Performance 550 MHz SoC with 128MByte
Flash
1 x Micro SIM Connector (push-push type)
1 x LAN 10/100 Mbps Ethernet port
1 x WAN 10/100 Mbps Ethernet port
WPS / RESET Button
1 x RS232 (TXD/RXD/GND)
1 x DI (Non-Isolated), 1 x DO (Non-Isolated)
2 x SMA connectors for detachable LTE Antenna
2 x RP-SMA connectors for detachable Wi-Fi Antenna
1 x SMAconnector for detachable GPS antenna
Physical Characteristics
Enclosure：Metal Case
Dimensions (W x H x D)：30mm x 92mm x 75mm
Weight：400 g
Installation：DIN Rail / Wall Mount (Optional)
LED Display
1 x Power LED
1 x Ethernet LED for each port (LAN/WAN)
1 x Mobile LTE LED
1 x Function LED
Power Supply
Power Consumption 7 Watts(Max)
Power Input 12/24/48VDC (9.6 ~ 60VDC)
Software
Network Protocols:
▪IPv4, IPv6, IPv4/IPv6 dual stack, DHCP server and
client,
▪PPPoE, Static IP, SNTP, GPS sync time, DNS Proxy
▪VRRP, OSPF, Message Queue Telemetry Transport
▪(MQTT Broker), BGP, Flow (Modbus master 
MQTT client)
Routing/Firewall:
▪NAT, Virtual Server, DMZ, MAC Filter, URL Filter, IP
Filter,
▪VLAN, Static Routing and RIP-1/2, IPS, Policy Route
VPN:
▪OpenVPN, IPSec (3DES, AES128, AES196, AES256,
▪MD5, SHA-1, SHA256), GRE, PPTP, L2TP
WiFi:
▪Security with WPA2-PSK (AES)
▪Multiple SSID
▪Wireless Mac Filtering
▪Wireless client isolation
▪Wireless Connectivity: WAN WiFi Client
Others:
DDNS, QoS, UPnP, SMS action, GPS track Drawing,
GPS TCP Push
Alarm:
DI, DO, SMS, VPN/WAN Disconnect, SNMP Trap,
E-mail, TR069
Management Software
Web GUI for remote and local management, CLI
Syslog monitor
SNMP, TR069
Remote management via SSH v2, HTTPS
Local management via Telnet, SSH v2, HTTP/HTTPS
FOTA (Firmware over Air)
Environment
Operating Temperature: -30 ~ +70°C
Storage Temperature: -40 ~ +85°C
Ambient Relative Humidity: 10 ~ 95% (non-condensing)
Humidity: 0 ~ 95% (non-condensing)
Standards and Certifications
EMC: CE
EMI: EN301 489, FCC
EMS: EN301 489
Radio: EN301511, EN301908-1, EN301908-2,
EN301908-13, EN300328, EN303413, EN62311
Shock: IEC 60068-2-27
Freefall: IEC 60068-2-32
Vibration: IEC 60068-2-6

9
CHAPTER 1.
INTRODUCTION
1.3 Mechanical Dimensions
1.4 Hardware Panel Layout
This chapter describes the panel and interface layout of hardware.
Front Panel View Left Side Panel View
Right Side Panel View
3
2
1
4
6
5
8
7
9
11
10
11

10
CHAPTER 1.
INTRODUCTION
Index No.
Description
1
Fast Ethernet RJ-45 LAN port
2
Fast Ethernet RJ-45 WAN or LAN port
3
Terminal block for PWR, DI, DO, RS232
4
LED indicators (PWR, Mobile, FN)
5
Micro SIM card slot
6
Mobile MAIN connector
7
Mobile AUX connector
8
GPS connector
9
Earth grounding
10
WPS/Reset push button
11
SMA antenna connectors

11
CHAPTER 2.
HARDWARE INSTALLATION
2 Hardware Installation
This chapter introduces how to install and connect the hardware.
2.1 LED Indicators
LED
Color
Status
Meaning
PWR
Green
On
The system is receiving power and up.
Off
The system is down.
Mobile
Green
On
High signals.
Slow Blinking
Medium signals or reset
Fast Blinking
Low signals or reset to default
Heart Beat
WPS processing
Off
Error
FN
Green
On
VPN connected.
Slow Blinking
Internet connected or reset
Fast Blinking
System rebooting or reset to default
Heart Beat
WiFi connected
2.2 Ethernet Port
(1) 10/100 Mbps Ethernet LAN/WAN
The LAN and WAN interface are standard RJ45 connectors.
Pin
Description
Function
1
WAN TX+
10/100 Mbps WAN, TX+ Pin
2
WAN TX-
10/100 Mbps WAN, TX- Pin
3
WAN RX+
10/100 Mbps WAN, RX+ Pin
4
N/A
N/A
5
N/A
N/A
6
WAN RX-
10/100 Mbps WAN, RX- Pin
7
N/A
N/A
8
N/A
N/A

12
CHAPTER 2.
HARDWARE INSTALLATION
(2) LED Indicator of Ethernet Port
Each Ethernet port has one LED indicators. The Green LED indicates Link/ACT.
LED
Status
Description
Green (Link/ACT)
Off
Connection is down.
Blink
Data is being transmitted.
On
Connection is up.
2.3 Grounding the Router
To prevent the noise and surge effect, please connect the router to the site ground wire by the
ground screw before turning on the router.
2.4 Pin Assignments
Power Input (V+, V-) / DI / DO / UART RS-232 (TXD, RXD, GND)

13
CHAPTER 2.
HARDWARE INSTALLATION
2.5 Connecting the Power Supply
The router requires a DC power supply (12/24/48VDC) in the range of 9.6~60VDC. Please
ensure all components are earthed to a common ground before connecting any wiring.
2.6 Connecting I/O Ports
(1) Digital Input (DI)
The unit has two terminals on the terminal block for the Digital inputs.
Pin
Description
DI
Digital Input
DI_GND
INPUT : Low (+0 to +5V) / High (+8 to +40V)
(2) Digital Output (DO)
The unit has 2 terminals on the terminal block for the Alarm Contacts.
Pin
Description
DO
Digital Output
DO_GND
Pin
Power (9.6~60VDC)
V -
Negative
V+
Positive

14
CHAPTER 2.
HARDWARE INSTALLATION
2.7 UART (RS-232)
The port is a standard RS-232 signal level interface.
Pin
Signal
Direction
TXD
Transmit Data
Output
RXD
Receive Data
Input
GND
Signal Ground
-

15
CHAPTER 2.
HARDWARE INSTALLATION
2.8 Install the SIM Card
Insert and Remove SIM Card
(1) Before inserting or removing the SIM card, ensure that the power has been turned off and
the power connector has been removed from Cellular Router.
(2) Insert the SIM card with right direction. Push the SIM card in to the slot, and lightly press it to
lock it in the slot.
(3) To remove the SIM card, lightly press the SIM card, and it will pop out.
2.9 Reset Button
Function
Operation
WPS Processing
Press the button less than 5 seconds.
Reset
Press the button for 5-10 seconds.
Reset to default setting
Press the button for more than 10 seconds.

16
CHAPTER 2.
HARDWARE INSTALLATION
2.10 External Antennas
Each unit has three kinds of antenna connectors, these are, MAIN, GPS, AUX (SMA). For
ICR-W401, there are five antenna connectors, two for LTE antennas, two for Wi-Fi (RP-SMA)
antennas and one for GPS antenna. Connect the antenna to MAIN when you have only one LTE
antenna. Please tighten the connecting nut properly to ensure good connection.

17
CHAPTER 3.
WEB CONFIGURATIONS
3 Configuration via Web Browser
3.1 Access the Web Interface
The web configuration is an HTML-based management interface for quick and easy set up of the
Mobile Router. Monitoring of the status, configuration and administration of the router can be
done via the Web interface.
After properly connecting the hardware of Mobile Router as previously explained, launch your
web browser and enter http://10.1.1.1 as URL.
The default IP address and sub net-mask of the Mobile Router are 10.1.1.1 and 255.255.255.0.
Because the mobile router acts as DHCP server in your network, the mobile router will
automatically assign IP address for PC or NB in the network.
3.1.1 Logging in the Router
In this section, please fill in the default User Name admin and the blank default Password. Then
Click Login to enter the device. For the system security purposes, it is strongly recommended to
change Username and Password after the initial login.
After clicking, the interface shows Login ok.However, if this is your first time to login in to the
system (or defaults settings have been restored), the window will also show "For security reasons,
please change password first" message.
Then, you will be directed to Management >Administration page. Then you can assign new
password to Super User.

18
CHAPTER 3.
WEB CONFIGURATIONS
Enter the new Super User password and retype the password to confirm. Then, click Apply
button. The system needs a reboot to take new password into effect.
Note: After changing the User Name and Password, we strongly recommend that you save them
because another time when you login, new User Name and Password have to be used so
as to successfully login to the system.
3.1.2 Navigate the Web Configurator
The main screen is divided into three parts as below.
A -Title Bar, B - Navigation Panel and C - Main Window.
A
B
A
C

19
CHAPTER 3.
WEB CONFIGURATIONS
(1) A : Title Bar
The title bar provides some useful instructions that show the status of the router.
Title Bar
Item
Description
RSSI
Show if the SIM card is inserted in the slot. If yes, RSSI (Received Signal
Strength Indicator) shows the current signal strength in a wireless network and
the name of telecommunication operator.
Uptime
Show the time when the router is turned on until current using.
WAN Priority
Show the three mode of WAN status, which is first to use.
Location
Show the position of router from Google Maps.
Note: This function is for GPS spec.
Google Maps
Display Google Map according to location.
Language
Choose your language from the drop-down list on the upper right corner of
the title bar.
Login/Logout
Click to log in or log out of the web configurator.
?
Online Manual
(2) B : Navigation Panel-Main Menu and Sub Menu
The menu items are divided into main and sub menu to configure the settings and get the
status of connectivity on the navigation panel.
(3) C : Main Window
This section shows the information or setting fields from main menu and sub menu.

20
CHAPTER 3.
WEB CONFIGURATIONS
3.2 Status
When you enter the web configurator and have not logged in, the first item of main menu shows
your status as a guest. This status only allows you to view status page without any permission to
log in. The interface of main window displays information about the router, including Cellular
Attribute, the current connectivity of WAN Ethernet and LAN Ethernet. If the router has GPS
function, the GPS interface is shown.
Note: After logging in the system, you can set up the status of user and divide into three levels
for setting user’s authority, including Super User, Administrator, and Read Only. For Guest,
this status is without any authority. All users log in or log out and they need to have Web UI log
records.
Status
Super User
Administrator
Read Only
Guest
User name
system account (root/admin)
only Super User
can modify
only Super User
can modify
N/A
Password
configurable
configurable
configurable
N/A
Permission
Add/Delete/Modify all users’
accounts except Super User.
Read/Write Configuration
Read/Write
Configuration
only Read
Configuration
N/A