Dahua DH-WM4700-O User manual

User’s Manual
4G Router
User’s Manual
V1.0.0
V1.0.0
ZHEJIANG DAHUA VISION TECHNOLOGY CO., LTD.
ZHEJIANG DAHUA VISION TECHNOLOGY CO., LTD.

User’s Manual
I
Foreword
General
This manual introduces the functions and operations of the 4G Router device (hereinafter
referred to as "the Router").
Safety Instructions
The following categorized signal words with defined meaning might appear in the manual.
Signal Words
Meaning
DANGER
Indicates a high potential hazard which, if not avoided, will result
in death or serious injury.
WARNING
Indicates a medium or low potential hazard which, if not avoided,
could result in slight or moderate injury.
CAUTION
Indicates a potential risk which, if not avoided, could result in
property damage, data loss, lower performance, or unpredictable
result.
TIPS
Provides methods to help you solve a problem or save you time.
NOTE
Provides additional information as the emphasis and supplement
to the text.
Revision History
Version
Revision Content
Release Time
V1.0.1
Update images in 1.3, 2.3.2 and
3.1.
March 2020
V1.0.0
First release.
Janurary 2020
About the Manual
The manual is for reference only. If there is inconsistency between the manual and the
actual product, the actual product shall prevail.
We are not liable for any loss caused by the operations that do not comply with the manual.
The manual would be updated according to the latest laws and regulations of related
jurisdictions. For detailed information, refer to the paper manual, CD-ROM, QR code or our
official website. If there is inconsistency between paper manual and the electronic version,
the electronic version shall prevail.
All the designs and software are subject to change without prior written notice. The product
updates might cause some differences between the actual product and the manual. Please

User’s Manual
II
contact the customer service for the latest program and supplementary documentation.
There still might be deviation in technical data, functions and operations description, or
errors in print. If there is any doubt or dispute, we reserve the right of final explanation.
Upgrade the reader software or try other mainstream reader software if the manual (in PDF
format) cannot be opened.
All trademarks, registered trademarks and the company names in the manual are the
properties of their respective owners.
Please visit our website, contact the supplier or customer service if there is any problem
occurring when using the device.
If there is any uncertainty or controversy, we reserve the right of final explanation.

User’s Manual
III
Important Safeguards and Warnings
The manual helps you to use our product properly. To avoid danger and property damage, read
the manual carefully before using the product, and we highly recommend you to keep it well for
future reference.
Operating Requirements
Do not expose the device directly to the sunlight, and keep it away from heat.
Do not install the device in the damp environment, and avoid dust and soot.
Make sure the device is in horizontal installation, and install the device on solid and flat
surface to avoid falling down.
Avoid liquid spattering on the device. Do not place object full of liquid on the device to
avoid liquid flowing into the device.
Install the device in the well-ventilated environment. Do not block the air vent of the device.
Use the device at rated input and output voltage.
Do not dissemble the device without professional instruction.
Transport, use, and store the device in allowed ranges of humidity and temperature.
Power Supply Requirements
Use the battery properly to avoid fire, explosion, and other dangers.
Replace the battery with battery of the same type.
Use locally recommended power cord in the limit of rated specifications.
Use the standard power adapter. We will assume no responsibility for any problems
caused by nonstandard power adapter.
The power supply shall meet the SELV requirement. Use the power supply that conforms
to Limited Power Source, according to IEC60950-1. Refer to the device label.
Adopt GND protection for I-type device.
The coupler is the disconnecting apparatus. Keep it at the angle for easy to operate.

User’s Manual
IV
Table of Contents
Foreword.................................................................................................................................................... I
Important Safeguards and Warnings.................................................................................................... III
1 Introduction............................................................................................................................................ 1
Overview ....................................................................................................................................... 11.1 Features........................................................................................................................................ 11.2 Typical Application......................................................................................................................... 21.3
2 Installation.............................................................................................................................................. 3
Out-of-Box Checking..................................................................................................................... 32.1 Dimensions ................................................................................................................................... 3
2.2 Installation and Cable Connection................................................................................................ 42.3 2.3.1 Antenna Installation............................................................................................................ 4
2.3.2 SIM/UIM Card Installation................................................................................................... 4
2.3.3 Power Supply...................................................................................................................... 5
2.3.4 Indicator.............................................................................................................................. 5
2.3.5 Reset................................................................................................................................... 6
3 Configuration and Management.......................................................................................................... 7
Device Connection........................................................................................................................ 73.1 Login.............................................................................................................................................. 73.2 Setup............................................................................................................................................. 83.3 3.3.1 Basic Setup......................................................................................................................... 8
3.3.2 Dynamic DNS................................................................................................................... 17
3.3.3 MAC Address Clone ......................................................................................................... 19
3.3.4 Advanced Router.............................................................................................................. 19
3.3.5 VLANS.............................................................................................................................. 21
3.3.6 Networking........................................................................................................................ 22
Wireless....................................................................................................................................... 253.4 3.4.1 Basic Settings................................................................................................................... 25
3.4.2 Wireless Security.............................................................................................................. 27
Services ...................................................................................................................................... 293.5 3.5.1 DHCP Server.................................................................................................................... 29
3.5.2 DNSMasq.......................................................................................................................... 29
3.5.3 SNMP................................................................................................................................ 30
3.5.4 System Log....................................................................................................................... 31
3.5.5 Telnet ................................................................................................................................ 32
3.5.6 WAN Traffic Counter......................................................................................................... 32
VPN............................................................................................................................................. 323.6 3.6.1 PPTP................................................................................................................................. 32
3.6.2 L2TP .................................................................................................................................35
3.6.3 OPENVPN ........................................................................................................................ 37
3.6.4 IPSEC............................................................................................................................... 41
3.6.5 GRE.................................................................................................................................. 45
Security....................................................................................................................................... 463.7

User’s Manual
V
3.7.1 Firewall.............................................................................................................................. 46
3.7.2 Log Management.............................................................................................................. 48
Access Restrictions..................................................................................................................... 493.8 3.8.1 WANAccess..................................................................................................................... 49
3.8.2 URL Filter.......................................................................................................................... 50
3.8.3 MAC Filter......................................................................................................................... 50
3.8.4 Packet Filter...................................................................................................................... 51
NAT ............................................................................................................................................. 533.9 3.9.1 Port Forwarding................................................................................................................ 53
3.9.2 Port Range Forwarding .................................................................................................... 53
3.9.3 DMZ.................................................................................................................................. 54
3.9.4 Virtual IP Mapping ............................................................................................................ 55
QoS Setting............................................................................................................................... 553.103.10.1 Basic............................................................................................................................... 55
3.10.2 Classify ........................................................................................................................... 56
Serial Applications..................................................................................................................... 583.11 Administration............................................................................................................................ 603.123.12.1 Router Management....................................................................................................... 60
3.12.2 Keep Alive....................................................................................................................... 64
3.12.3 Commands ..................................................................................................................... 64
3.12.4 Factory Defaults.............................................................................................................. 65
3.12.5 Firmware Upgrade.......................................................................................................... 66
3.12.6 Backup and Restore....................................................................................................... 66
Status........................................................................................................................................ 673.133.13.1 Router............................................................................................................................. 67
3.13.2 WAN................................................................................................................................ 68
3.13.3 LAN................................................................................................................................. 70
3.13.4 Wireless.......................................................................................................................... 72
3.13.5 Device Management....................................................................................................... 74
3.13.6 Bandwidth....................................................................................................................... 75
3.13.7 System Information......................................................................................................... 76
Cybersecurity Recommendations................................................................................... 79Appendix 1

User’s Manual
1
1 Introduction
Overview1.1
DH-WM4700-O 4G Router (hereinafter referred to as "the Router") is a kind of cellular terminal
device that provides data transmission by public cellular network.
It adopts high-powered industrial 32-bit CPU and is embedded real time operating system. It
provides one RS232 (or RS485/RS422), four Ethernet LAN, one Ethernet WAN and one Wi-Fi
port for serial, Ethernet and Wi-Fi devices to achieve data transmission and routing.
The Router has been widely used on M2M fields, such as self-service terminal industry,
intelligent transportation, smart grid, smart home, industrial automation, intelligent building,
public security, fire protection, environment protection, telemetry, finance, POS, water supply,
meteorology, remote sensing, digital medical, military, space exploration, agriculture, forestry
and petrochemical.
Features1.2
Design for Industrial Application
High-performance industrial cellular module
High-performance industrial 32-bit CPU
Adopt metal shell with IP30 protection. Suitable for industrial control field applications
Power supply: 12V DC
Stability and Reliability
Support hardware and software WDT
Support auto recovery mechanism to make the Router always online
Ethernet port: 1.5kV magnetic isolation protection
RS232/RS485/RS422 port: 15kV ESD protection
SIM/UIM port: 15kV ESD protection
Power port: reverse-voltage and overvoltage protection
Antenna port: lightning protection(optional)
Standard and Convenience
Support standard RS232(or RS485/RS422), Ethernet and WIFI port that can connect to
serial, Ethernet and WIFI devices directly
Support standard WAN port and PPPOE protocol that can connect to ADSL directly
Support intellectual mode, enter into communication state automatically when powered
Provide management software for remote management
Support several work modes
Convenient configuration and maintenance interface (WEB or CLI)

User’s Manual
2
High-performance
Multiple WAN access methods, including static IP, DHCP, L2TP, PPTP, PPPOE and
2.5G/3G/4G
Double link backup between cellular and WAN(PPPOE,ADSL) (optional)
VPN client (PPTP, L2TP, OPENVPN, IPSEC and GRE)
VPN server (PPTP, L2TP, OPENVPN, IPSEC and GRE)
Remote management, such as SYSLOG, SNMP, TELNET, SSHD, HTTPS
Local and remote firmware upgrade, import and export configure file
NTP, RTC embedded
Multiple DDNS provider service
VLANs, MAC Address clone, PPPoE Server
WIFI supports 802.11b/g/n, supports AP, client, Repeater, Repeater Bridge and
WDS(optional) mode
WIFI supports WEP,WPA,WPA2 encryption, supports RADIUS authentication and MAC
address filter
Multiple online trigger ways, including SMS, ring and data. Support link disconnection
when timeout
APN/VPDN
Multi-channel DHCP server and client, DHCP bundled with MAC address, DDNS, firewall,
NAT, DMZ host, QoS, traffic statistics, real-time display of data transmission rate
Full protocol support , such as TCP/IP, UDP, FTP (optional), HTTP
SPI firewall, VPN traversal, access control, URL filtering
Schedule Reboot, Schedule Online and Offline
Typical Application1.3
The typical application of the Router is shown in Figure 1-1.
Typical applicationFigure 1-1

User’s Manual
3
2 Installation
The Router must be installed correctly to make it work properly. Install the Router under the
guidance of qualified engineers.
Forbid to install the Router when powered.
Out-of-Box Checking2.1
Check if there is obvious damage to the appearance of the Router.
Make sure that the components are complete against the packing list. See Table 2-1 for
details.
Table 2-1 Product list
Name
Quantity
Router host
1
Cellular antenna (Male SMA)
2
WIFI antenna (Female SMA)
1
Power adapter
1
Network cable
1
RS232 console cable (optional)
1
Quick Guide Start
1
Certification card
1
Dimensions2.2
Front panel (unit: mm [inch])Figure 2-1

User’s Manual
4
Top panel (unit: mm [inch])Figure 2-2
Installation and Cable Connection2.3
2.3.1 Antenna Installation
The cellular antenna and the WIFI antenna cannot be connected reversely, otherwise the
Router cannot work.
Make sure that the antennas are tightened, or the signal quality will be affected.
Screw the SMA male pin of the cellular antenna to the female SMA interface of theStep 1 Router with sign "ANT-M" and "ANT-A".
Screw the SMAfemale pin of the WIFI antenna to the male SMAinterface of the RouterStep 2 with sign "WIFI”.
2.3.2 SIM/UIM Card Installation
Power off the Router, and press the out button of the SIM/UIM card outlet with a needleStep 1 object.And the SIM/UIM card sheath ejects.
Put the metal side of SIM/UIM card into the card sheath.Step 2 Insert the card sheath back to the SIM/UIM card outlet.Step 3

User’s Manual
5
SIM/UIM card installationFigure 2-3
2.3.3 Power Supply
The power supply range of the Router is 5V–36V DC. The standard power supply is 12V/1.5A
DC.
When you use external power supply, make sure that the power supply is stable (that is, the
ripple is less than 300mV, and the instantaneous voltage is not more than 36V) and the power
is above 8W.
Standard power supply: 12V/1.5ADC is recommended.
2.3.4 Indicator
For details of the indicators of the Router, see Table 2-2.
Table 2-2 Indicator description
Indicator
Status
Description
Power
On
The Router is powered on.
Off
The Router is powered off or during shutdown by
timing switch.
System
Flash
The system is running normally.
Off
The system is abnormal.
Online
On
The Router is connected to the network.
Off
The Router is disconnected to the network.
SIM
On
SIM/UIM card is identified.
Off
SIM/UIM card is not identified.

User’s Manual
6
Indicator
Status
Description
Local Network
On/Flash
On: Network port is connected.

Flash: Data transmission is in progress.

Off
Network port is disconnected.
WAN
On/Flash
On: WAN port is connected.

Flash: Data transmission is in progress.

Off
WAN port is disconnected.
WIFI
On
Wi-Fi is enabled.
Off
Wi-Fi is not enabled.
Signal Strength
One light on
Weak signal strength (less than -90 dbm).
Two lights on
Medium signal strength (-70 dbm to -90 dbm).
Three lights on
Strong signal strength (more than -70 dbm).
2.3.5 Reset
The Router has a Reset button to restore it to the factory default settings. When you press the
Reset button for up to 15 s, the Router will restore to the factory default settings and restart
automatically.

User’s Manual
7
3 Configuration and Management
Device Connection3.1
Before configuration, connect the Router and the PC with the network cable or Wi-Fi. See
Figure 3-1.
Connect with network cable:
Connect one end of the network cable to the Local Network (LAN) port of the Router, and
another end of the network cable to the Ethernet port of the PC.
Connect with Wi-Fi:
The default SSID of the Router is "Dahua Wireless", and password is not required.
Device connectionFigure 3-1
Login3.2
Before you configure the Router, make sure that:
The Router is connected to the PC.
The network of the PC is set to automatic access mode.
Open the browser, enter IP address of the Router (the default IP is 192.168.1.110) andStep 1 then press Enter key.
Enter the login account and password.Step 2
The account is admin and password is admin by default.
It is recommended to change the user name and password after first login.
The password must consist of 8 to 32 non-blank characters and contain at least
two types of characters among upper case, lower case, number, and special
character (excluding ' " ; : &).
You can also reset password in Administratio > Management , refer to 3.12.1.1
Router Password.

User’s Manual
8
Initial interfaceFigure 3-2
Setup3.3
3.3.1 Basic Setup
You can configure WAN and network.
3.3.1.1 WAN Setup
You can connect the Router to Internet by WAN setup.
WAN Connection Type
Log in to the web interface of the Router.Step 1 In the left navigation menu, select Setup > Basic Setup.Step 2 In WAN Connection Type section, select Connection Type.Step 3 6 options are available:
Disabled: WAN connection is disabled.
Static IP: Suitable for commercial optical fiber and other special line access.
Automatic Configuration-DHCP: Wire connection, obtain IP address of WAN port
automatically through DHCP.
dhcp-4G: Obtain IP address of WAN port automatically through DHCP-4G. This
option is recommended.
PPPOE: Wire connection, suitable for China Telecom, China Unicom ADSL
broadband service and other broadband service providers.
3G/UNMTS/4G/LTE: Network types are selectable.
Configure the corresponding parameters.Step 4

User’s Manual
9
Set WAN connection typeFigure 3-3
Table 3-1 Parameters to be configured when Static IP as the WAN connection type
Parameter
Description
WAN IPAddress
Set IP address by your own or ISP assigns.
Subnet Mask
Set subnet mask by your own or ISP assigns.
Gateway
Set gateway by your own or ISP assigns
Static DNS 1/DNS 2/DNS 3
Set static DNS by your own or ISP assigns.
Keep Online Detection
Select online detection mode to detect whether the
Internet connection is active. The following detection
mode are available: None (disable this function), Ping,
Route and TCP.
Detection Interval
Set time interval between two detections, expressed by
seconds.
Primary Detection Server IP
Enter the IP address of the server which is used to
response the Router’s detection packet.
Backup Detection Server IP
Enable Dial Failure to Restart
Whether to enable the restart of the Router when
dial-up fails.

User’s Manual
10
Table 3-2 Parameters when Automatic Configuration-DHCP as the WAN connection type
Parameter
Description
Keep Online Detection
Select online detection mode to detect whether the
Internet connection is active. The following detection
modes are available: None (disable this function),
Ping, Route and TCP.
Detection Interval
Set time interval between two detections, expressed by
seconds.
Primary Detection Server IP
Enter the IP address of the server which is used to
response the Router’s detection packet.
Backup Detection Server IP
Enable Dial Failure to Restart
Whether to enable the restart of the Router when
dial-up fails.
Table 3-3 Parameters to be configured when dhcp-4G as the WAN connection type
Parameter
Description
User Name
Enter the user name for login to the Internet.
Password
Enter the password for login to the Internet.
APN
Enter the access point name of your ISP.
Fixed WAN IP
Set whether to enable fixed WAN IP. If enabled, enter
the WAN IP address.
Allow these authentication
Supports PAP and CHAP.
Connection type
Supports the following options are available: Auto,
Force 3G, Force 2G, Prefer 3G, Prefer 2G and Force
4G.
PIN
Enter PIN code of the SIM card.
Keep Online Detection
Select online detection mode to detect whether the
Internet connection is active. The following detection
modes are available: None (disable this function),
Ping, Route and TCP.
Detection Interval
Set time interval between two detections, expressed by
seconds.
Primary Detection Server IP
Enter the IP address of the server which is used to
response the Router’s detection packet.
When you choose Route or Ping as the detection
mode, make sure that Primary Detection Server IP
and Backup Detection Server IP are valid and stable,
because they have to response the detection packet
frequently.
Backup Detection Server IP
Enable Dial Failure to Restart
Whether to enable the restart of the Router when
dial-up fails.

User’s Manual
11
Table 3-4 Parameters to be configured when PPPoE as the WAN connection type
Parameter
Description
User Name
Enter the user name for login to the Internet.
Password
Enter the password for login to the Internet.
Keep Online Detection
Select online detection mode to detect whether the
Internet connection is active. The following detection
modes are available: None (disable this function),
Ping, Route,PPP and TCP.
Detection Interval
Set time interval between two detections, expressed by
seconds.
Primary Detection Server IP
Enter the IP address of the server which is used to
response the Router’s detection packet.
When you choose Route or Ping as the detection
mode, make sure that Primary Detection Server IP
and Backup Detection Server IP are valid and stable,
because they have to response the detection packet
frequently.
Backup Detection Server IP
Fixed WAN IP
Set whether to enable fixed WAN IP. If enabled, enter
the WAN IP address.
Fixed WAN GW Address
Set whether to enable fixed WAN gateway address. If
enabled, enter the WAN gateway address.
Enable Dial Failure to Restart
Whether to enable the restart of the Router when
dial-up fails.
Force reconnect
Whether to enable mandatory reconnection.
Time
This parameter is valid only when Force reconnect is
enabled.
Set when to reconnect.
Table 3-5 Parameters to be configured when 3G/UNMTS/4G/LTE as the WAN connection type
Parameter
Description
User Name
Enter the user name provided by the Internet Service
Provider (ISP) for login to the Internet.
Password
Enter the password provided by the ISP for login to the
Internet.
Dial String
Select the dial-up number of your ISP.
APN
Enter access point name of your ISP.
PIN
Enter PIN code of your SIM card.
Connection type
Select a connection type as your need.
Allow these authentication
The following authentications are supported: PAP,
CHAP, MS-CHAP and MS-CHAPv2.

User’s Manual
12
Parameter
Description
Keep Online Detection
Select online detection mode to detect whether the
Internet connection is active. The following detection
modes are available: None (disable this function),
Ping, Route,PPP and TCP.
Detection Interval
Set time interval between two detections, expressed by
seconds.
Primary Detection Server IP
Enter the IP address of the server which is used to
response the Router’s detection packet.
When you choose Route or Ping as the detection
mode, make sure that Primary Detection Server IP
and Backup Detection Server IP are valid and stable,
because they have to response the detection packet
frequently.
Backup Detection Server IP
Fixed WAN IP
Whether to enable fixed WAN IP address.
Fixed WAN GW Address
Whether to enable fixed WAN gateway address.
Enable Dial Failure to Restart
Whether to enable the restart of the Router when
dial-up fails.
Ppp Asyncmap
Whether to enable PPP asyncmap.
Force reconnect
Whether to enable mandatory reconnection.
Time
This parameter is valid only when Force reconnect is
enabled.
Set when to reconnect.
Set WAN NAT and STP.Step 5
STP (Spanning Tree Protocol) can be applied to the loop network to achieve path
redundancy through certain algorithms. At the same time, the loop network is trimmed
to a tree network without loop to avoid the proliferation and infinite loop of packets in
the loop network.
Click Save to save the configuration.Step 6 Click Apply Settings to apply the configuration.Step 7 (Optional) Click Cancel Changes to cancel the configuration.Step 8
Optional Settings
Log in to the web interface of the Router.Step 1 In the left navigation menu, select Setup > Basic Setup.Step 2Step 3 In Optional Settings section, set parameters as needed.

User’s Manual
13
Optional settingsFigure 3-4
Table 3-6 Parameter description of optional settings
Parameter
Description
Router Name
Set router name. The name length can be up to 39 characters.
Host Name
Enter host name and domain name which are provided by your ISP.
Generally you can leave them blank.
Domain Name
MTU
MTU (Maximum Transmission Unit) specifies the maximum packet value
allowed in Internet transmission.
Auto: 1500 by default.

Manual: 576–1492 in PPPoE mode, 576–16320 in other modes. Value

among 1200–1500 is recommended.
1492 is recommended.
If the Router is required to select the best MTU for the Internet, select
Auto mode.
Force Net Card
Mode
Supports the following modes: Auto, 100M and 10M.
Click Save to save the configuration.Step 4 Click Apply Settings to apply the configuration.Step 5 (Optional) Click Cancel Changes to cancel the configuration.Step 6
3.3.1.2 Network Setup
You can configure router IP, WAN port, DHCP, time settings and adjust time.
Router IP
Log in to the web interface of the Router.Step 1 In the left navigation menu, select Setup > Basic Setup.Step 2 In Router IP section, configure router IP.Step 3

User’s Manual
14
Router IPFigure 3-5
Table 3-7 Parameter description of router IP
Parameter
Description
Local IP Address
Set local IP address of the Router.
Subnet Mask
Set the subnet mask of the Router.
Gateway
Set the internal gateway of the Router, the default internal gateway is the
address of the Router.
Local DNS
DNS server is automatically assigned by the operator's access server. If
there is a more stable and reliable DNS server, you can set it. Otherwise,
keep the default setting.
Click Save to save the configuration.Step 4 Click Apply Settings to apply the configuration.Step 5 (Optional) Click Cancel Changes to cancel the configuration.Step 6
WAN Port
You can set WAN port only when the WAN connection type is disabled.
Log in to the web interface of the Router.Step 1 In the left navigation menu, select Setup > Basic Setup.Step 2 In WAN Port section, enable Assign WAN Port to Switch as needed.Step 3 WAN portFigure 3-6
Click Save to save the configuration.Step 4 Click Apply Settings to apply the configuration.Step 5 (Optional) Click Cancel Changes to cancel the configuration.Step 6
Network Address Server Settings（DHCP）
The Router can serve as a DHCP server. And DHCP server automatically assigns an IP
address for each computer in the network.
If the DHCP server function of the Router is enabled, you can set all the computers on the LAN
to automatically obtain an IP address and DNS.