Digicom 3G Industrial PRO User manual

3G Industrial Pro
User’s Guide
rev. 1.1 02/2013

3G Industrial PRO User’s Manual
We, Digicom S.p.A. registered office at: Via Volta 39 – 21010 Cardano al Campo Varese – Italy) declare under
our sole responsability that the product with name 3G Industrial Pro Type: HSPA Router, Category: Device for
the Information Technology satisfies the basic requirement of the below indicated Directive:
1999/5/EC 9th March 1999, R&TTE concerning radio equipment and telecommunication terminal equipment
and the acknowledgment of their conformity) Law Decree 9th May 2001, n.269, G.U. n. 156 of 7-7-2001).
Directive 2009/125/EC OF of 21 October 2009, ERP, establishing a framework for the setting of ecodesign
requirements for energy-related products. EC Regulations n° 278/2009 and n° 1275/2008
As indicated in conformity with the requirements of following Reference Standards or of other regulations
documents:
EN 300 386
EN 301 489-1
EN 301 489-07
EN 301 489-24
EN 301 511
EN 301 908-1
EN 301 908-2
EN 50385
EN 60950-1

3G Industrial PRO User’s Manual www.digicom.it

3G Industrial PRO User’s Manual www.digicom.it
Contents
Contents ........................................................................................................................................................................................ 3
Introduction to 3G Industrial PRO ............................................................................................................................................... 4
1.1Overview .......................................................................................................................................................................... 4
1.2Pac age Chec list ............................................................................................................................................................ 4
1.3Product Features .............................................................................................................................................................. 4
1.3.1 Interfaces .............................................................................................................................................................. 4
1.3.2 Functions .............................................................................................................................................................. 5
1.3.3 Environmental Limits .......................................................................................................................................... 6
1.3.4 Power Requirements ............................................................................................................................................ 6
1.3.5 Physical Characteristics ....................................................................................................................................... 6
Quic Installation Guide ............................................................................................................................................................... 7
2.1Typical Application .......................................................................................................................................................... 7
2.2Panel Layout .................................................................................................................................................................... 7
2.3Quic Connection to Internet .......................................................................................................................................... 9
2.3.1 Insert SIM Card ................................................................................................................................................... 9
2.3.2 Antenna Installation ............................................................................................................................................. 9
2.3.3 Power Supply ....................................................................................................................................................... 9
2.3.4 Connect ............................................................................................................................................................... 9
2.3.5 First Connect Industrial PRO with Your PC ....................................................................................................... 9
2.3.6 Start to configure your Industrial Router (Optional) ......................................................................................... 12
2.3.7 Connect Industrial Router with Internet ............................................................................................................ 13
2.4Quic IPSec VPN Configuration ................................................................................................................................... 15
2.5Reset to Factory Defaults .............................................................................................................................................. 17
2.5.1Hardware Method ............................................................................................................................................... 17
2.5.2 Web Method ....................................................................................................................................................... 18
Advanced Configuration ............................................................................................................................................................. 19
3.1Configuration on Web .................................................................................................................................................... 19
3.1.1 Preparation ......................................................................................................................................................... 19
3.1.2 System ................................................................................................................................................................ 20
3.1.3 Networ ............................................................................................................................................................. 25
3.1.4 Service ............................................................................................................................................................... 32
3.1.5 Firewall .............................................................................................................................................................. 36
3.1.6 QoS .................................................................................................................................................................... 39
3.1.7 VPN ................................................................................................................................................................... 39
3.1.8 Tools ................................................................................................................................................................... 44
3.1.9 Status .................................................................................................................................................................. 45
Support ........................................................................................................................................................................................ 47

I
Introduction to 3G Industrial PRO
1.1 Overview
3G Industrial PRO grade routers provide users with stable and high speed connection between remote devices and customer’s
center via 2.5G/3G networ s. They allow wide voltage power supply (9-48V DC), large range operating temperature from
-25°C to 70°C (-10 ~ 158F)/ humidity: 95% RH, and fully satisfy various EMC verifications, which ensure stability and
reliability under harsh industrial conditions. The 3G Industrial PRO can be placed on a des top or DIN-mounted.
3G Industrial PRO products support VPN (IPSec/PPTP/ L2TP/GRE VPN), which create high-security lin s between remote
equipment and customer’s center.
Warning
This is a class A product. In a domestic environment this product may cause radio interference in which case the user may
be required to ta e adequate measures.
1.2 Package C ecklist
We put each 3G Industrial PRO cellular router in a box with standard accessories. Additionally, there’re optional accessories
can be ordered. When you receive our pac age, please chec carefully, and if there’re items missing or appearing to be
damaged, please contact with your Digicom sales representative.
Items in pac age include:
3G Industrial PRO; Ethernet Cable; Cellular Antenna; Manual and Power Supply
1.3 Product Features
1.3.1 Interfaces
WAN
Cellular WAN:
Band Options:
HSUPA /HSDPA/WCDMA
850/900/1900/2100MHz
GSM/GPRS/EDGE
850/900/1800/1900MHz

3G Industrial PRO User’s Manual www.digicom.it
LAN
Number of Ports: 1
Et ernet: 10/100 Mbps, RJ45 connector, Auto MDI/MDIX
Magnetic Isolation Protection: 1.5 KV built-in
Serial
A. Serial Type: RS232/485
B. Data bit: 5/6/7/8
C. Stop bit: 1/2
D. Chec bit: N/O/D
E. Baud rate: 1,200bit/s~ 115,200bit/s
SIM Interface
SIM Control: 3 V
1.3.2 Functions
PPP
Supported VPDN/APN, fast access to virtual private dial-up networ (VPDN) provided by mobile operator, ensure
high-security data transmission.
Support PPPoE (Point to Point Protocol over Ethernet) Protocol.
Support CHAP/PAP/MS-CHAP/MS-CHAP V2 authorization
Support Connection Detection, auto-recovery, auto-lin , ensure reliable communication.
Support On-demand connection, SMS Activity
Dynamic IP
Support DHCP, applied as Server/Client
Dynamic DNS
Support Dynamic DNS-IP Binding
Firewall Function
Pac age filtering
Port Mapping
Virtual Address Mapping
DMZ zone
MAC addresses binding.
Route function
Support Static Routing Table
VPN
IPSec VPN
L2TP VPN
PPTP VPN
GRE
Link Backup
VRRP
5

3G Industrial PRO User’s Manual www.digicom.it
Support VRRP protocols, realizing immediate lin bac up
DNS Forwarding
Support DNS Forwarding, support DNS record
Network tools
Support Ping, Trace Route and Telnet
Wakeup Over LAN (WOL)
Support Wa eup over LAN, to wa eup industrial PC over Eth. after receives SMS.
RSSI + Cell ID Display
1.3.3 Environmental Limits
Operating Temperature: -25 to 70°C (-10 to 158°F)
Operating Humidity: 5 to 95% RH
Storage Temperature: -40 to 85°C (-40 to 167°F)
1.3.4 Power Requirements
Power Inputs: 1 terminal bloc , including power jac and serial.
Input Voltage: 9 -48 VDC
1.3.5 P ysical C aracteristics
Housing: Steel, providing IP30 protection
Weig t: 490g
Dimensions (mm)
6
Side View DIN Rail Kit Front View Rear View DIN Rail Kit

3G Industrial PRO User’s Manual www.digicom.it
II
Quick Installation Guide
2.1 Typical Application
2.2 Panel Layout
3G Industrial PRO can be used to connect your device (with RS232/485/Ethernet Interface) to internet via
GPRS/HSUPA cellular. Meanwhile, to ensure the security and access, 3G Industrial PRO support VPN, enabling remote
access and secure data transmission through internet.
Interface Description
Power Interface Access 9-48 V DC Power Supply
Serial Access to the serial line, realizing
Ethernet Ports One 10/100Base-TX RJ45 Port
ANTENNA 2.5G/3G antenna
SIM Card Connector Put SIM card
7

3G Industrial PRO User’s Manual www.digicom.it
Description of LED
Legend: On-- Off-- Blink--
Power on Start to run firmware Begin dial to Internet
Connect to internet Upgrading firmware Restore factory default
Signal Status LED Description
----- Signal: 1-9 (bad signal level, route cannot wor , please chec the antenna and local signal level)
------ Signal: 10-19 (Router wor normally under this signal level)
------ Signal: 20-31 (Perfect signal level)
8

3G Industrial PRO User’s Manual www.digicom.it
2.3 Quick Connection to Internet
2.3.1 Insert SIM Card
Open Industrial Router SIM/UIM card case at the button, insert the SIM card and close the case.
2.3.2 Antenna Installation
After install the 3G INDUSTRIAL, connect the interface of enhanced antenna and the interface of s in antenna and
screw closely. Put the amplifier of enhanced antenna to where there receives good signal.
Attention: The position and angle may influence the quality of signal.
2.3.3 Power Supply
Lin the power supply in the product pac age with Industrial PRO, watch where the Industrial PRO Power LED on the
panel is light up. If not, please connect with Digicom for technical supports.
You can configure 3G INDUSTRIAL after the Power LED lights up.
2.3.4 Connect
Lin the 3G INDUSTRIAL with PC:
(1) Using the cable to lin 3G INDUSTRIAL with PC;
(2) After the connection, you can see one LED of RJ45 Interface turns green and the other flashes.
2.3.5 First Connect Industrial PRO wit Your PC
3G INDUSTRIAL Router can auto-distribute IP address for PC. Please set the PC to automatically obtain IP address via
DHCP. (Based on the Windows operation system):
1) Open “Control Panel”, double clic “Networ Connections” icon, and enter “Networ Connections” Screen.
2) Double clic “Local Area Connection”, enter “Local Area Connection Status” screen:
9

3G Industrial PRO User’s Manual www.digicom.it
3) Clic “Properties”, enter “Local Area Connection Properties” screen
Choose “Internet Protocol (TCP/IP)”, clic “properties” button, ensure your PC can obtain IP and DNS address
automatically. (Or you can set your PC in the subnet: 192.168.2.0/24, for example, set IP: 192.168.2.10, Net Mas :
255.255.255.0, Default Gateway: 192.168.2.1)
10

3G Industrial PRO User’s Manual www.digicom.it
Clic “OK”, Industrial PRO will allocate an IP address: 192.168.2.X, and a gateway: 192.168.2.1(the default address of 3G
INDUSTRIAL).
After configure TCP/IP protocols, you can use ping command to chec whether the lin between PC and Router is built
correctly. There is an example to execute Ping command under Windows XP as below:
Ping 192.168.2.1
11

3G Industrial PRO User’s Manual www.digicom.it
If the screen shows:
Then the lin between the PC and Router is correct connected. Else if it shows:
Then the connection seems not build, and you need to chec thoroughly following the former instructions.
2.3.6 Start to configure your Industrial Router (Optional)
After you have finished the former steps, you can configure the Router:
1) Open IE browser, input the default IP address of the Router: http://192.168.2.1, you can see the login web below:
Input “username” (default: adm) and the “password” (default: 123456), and then clic “login” to enter the operation screen.
2) Change the IP configuration:
Attention: After configuration, please clic “apply” to activate your configuration.
If you want to set your own IP of Industrial Router, please follow the instructions below:
12

3G Industrial PRO User’s Manual www.digicom.it
Clic “Networ ”=>“LAN”, change the IP address to 192.168.1.254:
3) Clic “Apply”, then you will see:
Now the IP address of 3G INDUSTRIAL has been reset, and in order to enter the configuration web, you need set your
PC in the same subnet, for example: 192.168.1.10/24 then input the changed IP address (192.168.1.254) in your IE
Browser.
2.3.7 Connect Industrial Router wit Internet
Following the configuration steps below to enable 3G INDUSTRIAL to connect with the internet.
Clic “Networ ”=>“Dialup”, enter dialup configuration web:
13

3G Industrial PRO User’s Manual www.digicom.it
Please chec the APN, Dialup Number, Username and Password:
Dialup Number, Username and Password are provided by local mobile operator. You can contact them for more details.
The following example shows parameters provided by Italian operators:
TIM: ibox.tim.it, VODAFONE : web.omnitel.it, WIND: internet.wind, TRE: tre.it
After correct configuration, 3G Industrial Router can now connect with Internet. Open IE Browser, input
www.google.com, you can see the Google web as below:
14

3G Industrial PRO User’s Manual www.digicom.it
2.4 Quick IPSec VPN Configuration
If you need to build a VPN tunnel to realize access to your PLC far away through internet or you need ensure the
security by using VPN. Here’s a quic configuration guide of IPSec for Industrial Router Series.
Connect PC with Router to enter router configuration web, select “VPN” => “IPSec setting”:
Enable NAT-Traversal (NATT): select enable.
Keep alive time interval of NATT: set the “Keep alive time interval of NATT”, default is 60 seconds.
Enable Compression: select enable.
Please change the parameters according to concrete situation.
Clic “Apply” to finish configuration.
1）Select “VPN”=> “IPSec Tunnels” to chec or modify parameters of IPSec Tunnels.
Clic “Add” to add a new IPSec Tunnel:
15

3G Industrial PRO User’s Manual www.digicom.it
Basic Parameters: set basic parameters of IPSec tunnel.
Tunnel Name: name IPSec tunnel, the default is IPSec_tunnel_1.
Destination Address: set to VPN server IP/domain, e.g.: the domain provided by GJJ is gjj-ovdp.3322.org.
Startup Modes: select Auto Activated.
Negotiation Mode: optional between Main Mode and Aggressive Mode. Generally, select Main Mode.
IPSec Protocols: optional among ESP, AH. Generally, select ESP.
IPSec Mode: optional between Tunnel Mode and Transport Mode. Generally, select Tunnel Mode.
Tunnel Type: optional among Host-Host, Host-Subnet, Subnet-Host and Subnet-Subnet.
Local Subnet: IPSec local subnet protected. E.g.: 172.16.16.0.
Local Net Mas : IPSec local Net Mas protected. E.g.: 255.255.255.252.
Remote Subnet: IPSec remote subnet protected. E.g.: 172.16.0.0.
Remote Net Mas : IPSec remote Net Mas protected. E.g.: 255.240.0.0.
P ase 1 Parameters: configure parameters during t e P ase 1 of IPSec negotiation.
IKE Policy: optional between 3DES-MD5-96 and AES-MD5-96, suggest selecting 3DES-MD5-96.
IKE Lifetime: the default is 86400 seconds.
Local ID Type: optional among FQDN, USERFQDN, IP address, suggest selecting IP address.
Remote ID Type: optional among FQDN, USERFQDN, IP address, suggest selecting IP address.
Authentication Type: optional between Shared Key and Certificate, generally choose Shared Key.
Key: set IPSec VPN negotiating ey.
P ase 2 Parameters: configure parameters during t e P ase 2 of IPSec negotiation.
IPSec Policy: optional between 3DES-MD5-96 and AES-MD5-96, suggest selecting 3DES-MD5-96.
IPSec Lifetime: the default is 3600 seconds.
Perfect Forward Encryption: Optional among None, GROUP1, GROUP2 and GROUP5. This parameter should match
with the server, generally, select “None”.
Clic “Save” to finish adding IPSec Tunnel:
16

3G Industrial PRO User’s Manual www.digicom.it
You can clic “Show Detail Status” to observe the specific connection details, or clic “Add” to add a new tunnel.
Now you succeed to build a high-security IPSec tunnel, here’s an example:
We set an IPSec Tunnel from subnet: 192.168.220.0/24 to subnet: 192.168.123.0/24, when it succeeds, the web will show:
And the PC in IPSec client subnet can get access to the server’s subnet.
Open command in your PC, then ping a PC in the server’s subnet:
2.5 Reset to Factory Defaults
2.5.1 Hardware Met od
Legend: On-- Off-- Blink--
1) Push RESET button while powering on 3G INDUSTRIAL:
2) When you see ERROR LED turns on (about 10 seconds after powering on), stop push RESET button:
17

3G Industrial PRO User’s Manual www.digicom.it
3) After a few seconds, the ERROR LED then turns off, now push RESET button again:
4) Then you will see ERROR and STATUS blin ing, which means reset to factory defaults successfully!
Factory default settings:
IP: 192.168.2.1
Net Mas : 255.255.255.0
Serial parameter: 19200-8-N-1
2.5.2 Web Met od
1) Login the web interface of 3G INDUSTRIAL, select “System””Config Management”:
2) Clic “Restore default configuration” to Reset 3G INDUSTRIAL.
18