EtherWAN AiR GUARD User manual

AiR GUARD
Industrial IoT Cellular Smart Security
Gateway
Building Trust in IIoT Devices

AiR GUARD Industrial IoT Cellular Smart Security Gateway
2
Preface
Audience
This guide is designed for the person who installs, configures, deploys, and maintains the Ethernet network.
This document assumes the reader has moderate hardware, computer, and Internet skills.
Document Revision Level
This section provides a history of the revision changes to this document.
Revision
Document Version
Date
Description
A
Version 1
09/30/2021
First version of document
A
Version 2
10/14/2021
Expanded descriptions of all device functions
A
Version 3
06/07/2022
All new function release document

AiR GUARD Industrial IoT Cellular Smart Security Gateway
3
Contents
Preface ..........................................................................................................................................................................2
Audience...............................................................................................................................................................2
Document Revision Level..................................................................................................................................2
Contents...............................................................................................................................................................3
Chapter 1 Introduction ..............................................................................................................................................5
1.1 Introduction ..................................................................................................................................................5
1.2 Contents List.................................................................................................................................................6
Package Contents.......................................................................................................................................6
Chapter 2 Hardware Guide .......................................................................................................................................7
2.1 Product Overview........................................................................................................................................7
2.1 DC Power......................................................................................................................................................8
2.3 LEDs ...............................................................................................................................................................9
2.4 RESET key .................................................................................................................................................. 10
2.5 Hardware Installation............................................................................................................................... 11
Mount the Unit ........................................................................................................................................ 11
Insert the Nano SIM Card...................................................................................................................... 12
Connecting DI/DO Devices .................................................................................................................. 13
Connecting Serial Devices..................................................................................................................... 14
Connecting to the Network or a Host ................................................................................................ 14
Chapter 3 Web Console Configuration ................................................................................................................15
3.1 Introduction ............................................................................................................................................... 15
3.2 Status .......................................................................................................................................................... 17
Overview................................................................................................................................................... 17
Firewall ...................................................................................................................................................... 20
Routes........................................................................................................................................................ 21
System Log................................................................................................................................................ 22
Kernel Log................................................................................................................................................. 23
Realtime Graphs ...................................................................................................................................... 24
3.3 System......................................................................................................................................................... 25

AiR GUARD Industrial IoT Cellular Smart Security Gateway
4
System ....................................................................................................................................................... 25
Administration ......................................................................................................................................... 28
Backup / Flash Firmware....................................................................................................................... 30
Reboot ....................................................................................................................................................... 33
3.4 VPN ............................................................................................................................................................. 34
OpenVPN.................................................................................................................................................. 34
3.5 Network...................................................................................................................................................... 37
Interfaces .................................................................................................................................................. 38
Hostnames................................................................................................................................................ 54
Static Routes ............................................................................................................................................ 56
Diagnostics ............................................................................................................................................... 58
Firewall ...................................................................................................................................................... 60
3.6 Data Tag Engine with Azure Sphere...................................................................................................... 66
AZsphere Port Setting............................................................................................................................ 69
Data Tag Protocol Setting ...................................................................................................................... 73
Data Tag Uplink Setting.......................................................................................................................... 77
Data Tag Rule Setting ............................................................................................................................. 80
CA Certificate........................................................................................................................................... 82
Modbus Log.............................................................................................................................................. 83
MQTT Log................................................................................................................................................. 84
3.7 Cloud Service............................................................................................................................................. 85
EWFOTA Settings ................................................................................................................................... 85
3.8 Remote Service ......................................................................................................................................... 86
MQTT Remote Service Overview ........................................................................................................ 86
Appendix.....................................................................................................................................................................88
Specifications ................................................................................................................................................... 88
Contact Information .................................................................................................................................................90

AiR GUARD Industrial IoT Cellular Smart Security Gateway
5
Chapter 1 Introduction
1.1 Introduction
Congratulations on your purchase of this product: AiR GUARD Industrial IoT Cellular Smart Security Gateway.
Over the past few years, the Internet of Things (IoT) has captured headlines across the world. With its network
of “smart,” sensor-enabled devices that can communicate and coordinate with one another via the Internet,
the IoT can facilitate computer-mediated strategies for managing city resources, energy management, and
numerous other tasks. The IoT’s way forward may be complicated, however. As with any market in its early stages,
weak security is often an important concern for many projects. There have already been instances where hackers
have wreaked havoc by infiltrating connected IoT devices. With security being so essential, EtherWAN has
developed the AiR GUARD, an advanced IIoT cellular gateway specifically optimized for secure IoT data solutions.
Running with Microsoft’s Azure Sphere, it not only provides secure connectivity, but also provides industrial
protocols as well as easy to use data pre-processing and conversion for cost-efficient Edge to Cloud connection.
Main Features:
•Built-in Microsoft Security Technology
•Highly Reliable Network Connection
•Friendly 30W PoE for Connecting PoE Devices
•Powerful Data Processing and Conversion
•Automatic Over-the-air (OTA) Firmware Updates
Before you install and use this product, please read this manual in detail.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
6
1.2 Contents List
Package Contents
Items
Description
Contents
Quantity
1
AiR GUARD Security Gateway
1 pc
2
Cellular Antenna
2 pcs
3
3 pin Terminal Block
1 pc
4
4 pin Terminal Block
1 pc
5
6 pin Terminal Block
1 pc
7
DIN-Rail Bracket
1 pc

AiR GUARD Industrial IoT Cellular Smart Security Gateway
7
Chapter 2 Hardware Guide
2.1 Product Overview
COM Port
2 x RS485
Power
Terminal Block
RJ-45 10/100/1000 BASE-TX
PoE-PSE and LAN port
RJ-45 10/100/1000 BASE-TX
WAN port
D/I D/O
Terminal Block
RJ-45 10/100 BASE-TX
Azure Sphere managed
LAN Device port
RESET key
LED group

AiR GUARD Industrial IoT Cellular Smart Security Gateway
8
2.1 DC Power
The AiR GUARD can be powered by connecting a DC power source to the terminal block. It supports 12 to 24VDC
power input. VIN connects to DC 12V and GND connects to DC 0V from your Power Supply, EGND is for Earth
ground. The following chart indicates the power terminal block pin assignments. Please check carefully and
connect to the right power requirements and polarity.
Description
Pin
VIN (DC+V)
1
GND (DC 0V)
2
Earth GND (Grounding)
3

AiR GUARD Industrial IoT Cellular Smart Security Gateway
9
2.3 LEDs
Position
Position
Position
COM2
Serial 2 Link Status:
Green – Tx data sending
Red - RX data receiving
COM 1
Serial 1 Link Status:
Green - TX data sending
Red – Rx data receiving
AZS
Azure Sphere Status:
Steady Green – All com
port are fine or not setting
Red blinking – One COM
port failed
Orange blinking – All COM
ports failed
LTE
Cellular Link Status:
Red Blinking – SIM is not ready
Green Blinking – Cellular
Connected
Orange+RED Blinking – PS call is
not ready
Green Light – linked with good RSSI
Orange Light – linked with medium RSSI
Red Light – linked with poor RSSI
SYS
System Status:
Off – Initial / all Network
disconnected
Green Light – PSE+ VPN are all up
Red Blinking – PSE is not up
Orange Blinking – VPN failed
Red_Orange Blinking – PSE+VPN
is not up
PWR
Power Indicator
Orange – Power on
under initialization
Green – Power on and
AiR GUARD initialization
completed

AiR GUARD Industrial IoT Cellular Smart Security Gateway
10
2.4 RESET key
You can reboot device via a pin to RESET hole, or you can long press RESET hole by a pin for 30 seconds.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
11
2.5 Hardware Installation
This chapter describes how to install and configure the hardware
Mount the Unit
The AiR GUARD can be mounted on a wall, horizontal plane, or DIN Rail in a cabinet with the mounting
accessories. The mounting accessories are not screwed on the product when shipped from factory. Screw the
DIN-rail bracket on the product first.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
12
Insert the Nano SIM Card
Follow the figures sequence below to insert SIM card
Fig 1 Fig 2
Fig 3 Fig 4 Fig 5
Fig 6 Fig 7

AiR GUARD Industrial IoT Cellular Smart Security Gateway
13
Connecting DI/DO Devices
There is one DI (digital input, Isolated, "Logic 0": 0-2V, "Logic 1": 5-30V) and one DO (digital output, Isolated,
Non-Relayed Output, 24V/300mA for each port) port.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
14
Connecting Serial Devices
The AiR GUARD has a 6-pin Terminal Block serial port for connecting to your serial devices. Connect the serial
device to the terminal block with the right pin assignments of RS-485 (shown below).
Description
Pin
COM1 –D+
1
COM1 –D-
2
COM1 - GND
3
COM2 –D+
4
COM2 –D-
5
COM2 - GND
6
Connecting to the Network or a Host
Use the LANPSE port to connect 10/100/1000Mbps Ethernet. It can auto detect the transmission speed on the
network and configure itself automatically. Connect one Ethernet cable to the RJ-45 port (LAN) of the device and
plug another end of the Ethernet cable into your computer’s network port. In this way, you can use the RJ-45
Ethernet cable to connect to the host PC’s Ethernet port for configuring the device.
Additionally, The LANPSE port can connect to powered devices without power. WAN/LAN connects the WAN
port for fixed WAN and LANAZS connects to Ethernet low speed device like Modbus/TCP devices.
Pin 1 2 3 4 5 6

AiR GUARD Industrial IoT Cellular Smart Security Gateway
15
Chapter 3 Web Console Configuration
In the following chapters, you will see these command blocks
SAVE & APPLY to save and immediately take effect in system.
SAVE is just to save into configuration,
RESET is to forget the settings just done.
3.1 Introduction
To configure AiR GUARD for the first time, use an Ethernet cable to connect to the LANPSE port. To connect to
the AiR GUARD web console, open a web browser and enter the AiR GUARD IP address.
The default IP address is 192.168.123.254. Default username is “admin” and password is “Guard_2022_!@#$%”
➢ Example: https://192.168.123.254/
Default Login Account:
User: root
Password: Guard_2022_!@#$%

AiR GUARD Industrial IoT Cellular Smart Security Gateway
16
At the first time login, the system will request a renew password page to change password.
Be careful to save this information. Otherwise, the only way to re-access is to long press RESET key to reset
device to default settings, including default password.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
17
3.2 Status
There are six status screens for monitoring the device and connections. They are: Overview, Firewall, Routes,
System Log, Kernel Log, and Realtime Graphs
Overview
The Overview status screen is divided into System, Memory, Network, Active DHCP Leases, and Wireless
sections.
System - This section displays the hostname, model, architecture, firmware version, kernel version, local time,
uptime, and load average.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
18
Memory – Displays total available, used, buffered, and cached memory.
Network – Displays protocol, IP address, gateway, and time connected for IPv4 upstream.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
19
Active DHCP Leases – This section displays the hostname, IPV4 address, MAC address, and leasetime
remaining for IPV4 DHCP.

AiR GUARD Industrial IoT Cellular Smart Security Gateway
20
Firewall
The Firewall Status screen displays IPv4 firewall information, selected by tabs at the top. Sections include chain
input, chain forward, chain output, and existing chain forwarding rules. Three buttons at the top right are Hide
Empty Chains (removes chains with no firewall rules from the display), Reset Counters, and Restart Firewall.