EtherWAN EW200 User manual

Industrial Cellular Gateway
EW200
User Manual

All Rights Reserved
Dissemination or reproduction of this document, or its contents, is not authorized except where
expressly permitted. Violators are liable for damages. All rights reserved, for the purposes of patent
application or trademark registration.
Disclaimer of Liability
The information contained in this document is subject to change without notice. EtherWAN is not
liable for any errors or omissions contained herein or for resulting damage in connection with the
information provided in this manual.
All other trademarks are property of their respective owners.
Warranty
For details on the EtherWAN warranty replacement policy, please visit our web site at:
www.etherwan.com
Products Supported by this Manual:
EW200

Preface
Audience
This guide is designed for the person who installs, configures, deploys, and maintains the Ethernet network.
This document assumes the reader has moderate hardware, computer, and Internet skills.
Document Revision Level
This section provides a history of the revision changes to this document.
Revision
Document Version
Date
Description
A
Version 2
1/15/2018
Fixed several spelling and grammar errors
A
3
2/9/2018
Text revisions
B
1
07/05/2019
Added TR-069 & LLDP function description
C
1
09/03/2019
Added MQTT and Azure info
C
2
12/19/2019
Added max connections for TCP client and server

EW200 Industrial Cellular Gateway
4
Contents
Preface ..............................................................................................................................................................3
Contents.....................................................................................................................................................4
Chapter 1 Introduction......................................................................................................................................9
1.1 Introduction.........................................................................................................................................9
1.2 Contents List.....................................................................................................................................10
1.2.1 Package Contents.....................................................................................................................10
1.3 Hardware Configuration....................................................................................................................11
1.4 LED Indicators..................................................................................................................................13
1.5 Installation & Maintenance................................................................................................................14
1.5.1 SYSTEM REQUIREMENTS.................................................................................................14
1.5.2 WARNING.............................................................................................................................14
1.5.3 HOT SURFACE CAUTION...................................................................................................15
1.5.4 Product Information for CE RED Requirements .....................................................................16
1.6 Hardware Installation ........................................................................................................................18
1.6.1 Mount the Unit .......................................................................................................................18
1.6.2 Insert the SIM Card ................................................................................................................18
1.6.3 Connecting Power ..................................................................................................................19
1.6.4 Power Supply Installation.......................................................................................................19
1.6.5 Connecting DI/DO Devices ....................................................................................................22
1.6.6 Connecting Serial Devices......................................................................................................23
1.6.7 Connecting to the Network or a Host ......................................................................................23
1.6.8 Setup by Configuring WEB UI ..............................................................................................24
Chapter 2 Basic Network................................................................................................................................25
2.1 WAN & Uplink .................................................................................................................................25
2.1.1 Physical Interface ...................................................................................................................26
2.1.2 Internet Setup .........................................................................................................................31
2.1.3 Load Balance...........................................................................................................................50
2.2 LAN & VLAN ..................................................................................................................................55
2.2.1 Ethernet LAN..........................................................................................................................55
2.2.2 VLAN ....................................................................................................................................57
2.2.3 DHCP Server..........................................................................................................................68

EW200 Industrial Cellular Gateway
5
2.3 Wi-Fi.................................................................................................................................................75
2.3.1 Wi-Fi Configuration................................................................................................................76
2.3.2 Wireless Client List ................................................................................................................86
2.3.3 Advanced Configuration.........................................................................................................88
2.4 IPv6 ..................................................................................................................................................90
2.4.1 IPv6 Configuration .................................................................................................................90
2.5 Port Forwarding .............................................................................................................................101
2.5.1 Configuration .......................................................................................................................102
2.5.2 Virtual Server & Virtual Computer........................................................................................103
2.5.3 DMZ & Pass Through...........................................................................................................109
2.5.4 Special AP & ALG................................................................................................................ 111
2.6 Routing ...........................................................................................................................................115
2.6.1 Static Routing.......................................................................................................................116
2.6.2 Dynamic Routing..................................................................................................................119
2.6.3 Routing Information .............................................................................................................127
2.7 DNS & DDNS................................................................................................................................128
2.7.1 DNS & DDNS Configuration ...............................................................................................128
2.8 QoS................................................................................................................................................134
2.8.1 QoS Configuration................................................................................................................134
2.9 Redundancy ....................................................................................................................................143
2.9.1 VRRP...................................................................................................................................143
Chapter 3 Object Definition.......................................................................................................................... 146
3.1 Scheduling ......................................................................................................................................146
3.1.1 Scheduling Configuration .....................................................................................................146
3.2 Grouping.........................................................................................................................................148
3.2.1 Host Grouping......................................................................................................................148
3.3 External Server................................................................................................................................150
3.4 Certificates......................................................................................................................................153
3.4.1 Configuration .......................................................................................................................153
3.4.2 My Certificate ......................................................................................................................156
3.4.3 Trusted Certificate ................................................................................................................163
3.4.4 Issue Certificate....................................................................................................................169

EW200 Industrial Cellular Gateway
6
Chapter 4 Field Communication ................................................................................................................... 172
4.1 Bus & Protocol................................................................................................................................172
4.1.1 Port Configuration................................................................................................................172
4.1.2 Virtual COM.........................................................................................................................174
4.1.3 Modbus ................................................................................................................................184
4.2 Data Interchange .............................................................................................................................194
4.2.1 OPC UA...............................................................................................................................194
4.2.2 MQTT..................................................................................................................................194
4.3 Data Logging ..................................................................................................................................199
4.2.1 Data Logging Configuration .................................................................................................203
4.2.2 Scheme Setup.......................................................................................................................205
4.2.3 Log File Management...........................................................................................................207
Chapter 5 Security........................................................................................................................................ 209
5.1 VPN................................................................................................................................................209
5.1.1 IPsec.....................................................................................................................................210
5.1.2 OpenVPN.............................................................................................................................223
5.1.3 L2TP ....................................................................................................................................236
5.1.4 PPTP....................................................................................................................................244
5.1.5 GRE .....................................................................................................................................251
5.2 Firewall...........................................................................................................................................255
5.2.1 Packet Filter .........................................................................................................................255
5.2.2 URL Blocking ......................................................................................................................260
5.2.3 MAC Control........................................................................................................................264
5.2.4 IPS .......................................................................................................................................267
5.2.5 Options.................................................................................................................................271
Chapter 6 Administration.............................................................................................................................. 275
6.1 Configure & Manage.......................................................................................................................275
6.1.1 Command Script...................................................................................................................276
6.1.2 TR-069.................................................................................................................................279
6.1.3 SNMP...................................................................................................................................284
6.1.4 Telnet with CLI.....................................................................................................................295
6.1.5 LLDP ...................................................................................................................................299

EW200 Industrial Cellular Gateway
7
6.2 System Operation............................................................................................................................300
6.2.1 Password & MMI .................................................................................................................300
6.2.2 System Information ..............................................................................................................302
6.2.3 System Time.........................................................................................................................303
6.2.4 System Log...........................................................................................................................306
6.2.5 Backup & Restore.................................................................................................................310
6.2.6 Reboot & Reset ...................................................................................................................311
6.3 FTP.................................................................................................................................................312
6.3.1 Server Configuration ............................................................................................................313
6.3.2 User Account........................................................................................................................315
6.4 Diagnostics .....................................................................................................................................316
6.4.1 Diagnostic Tools...................................................................................................................316
6.4.2 Packet Analyzer....................................................................................................................317
Chapter 7 Service .........................................................................................................................................320
7.1 Cellular Toolkit ...............................................................................................................................320
7.1.1 Data Usage...........................................................................................................................321
7.1.2 SMS .....................................................................................................................................323
7.1.3 SIM PIN...............................................................................................................................326
7.1.4 USSD...................................................................................................................................330
7.1.5 Network Scan.......................................................................................................................333
7.2 SMS & Event..................................................................................................................................335
7.2.1 Configuration .......................................................................................................................337
7.2.2 Managing Events..................................................................................................................346
7.2.3 Notifying Events...................................................................................................................349
7.3 Azure Agent ....................................................................................................................................352
7.3.1 Azure Configuration .............................................................................................................352
7.3.2 EW-200 Azure Configuration................................................................................................354
Chapter 8 Status............................................................................................................................................ 359
8.1 Dashboard.......................................................................................................................................359
8.1.1 Device Dashboard ................................................................................................................359
8.2 Basic Network.................................................................................................................................361
8.2.1 WAN & Uplink Status ..........................................................................................................361

EW200 Industrial Cellular Gateway
8
8.2.2 LAN & VLAN Status...........................................................................................................365
8.2.3 Wi-Fi Status..........................................................................................................................366
8.2.4 DDNS Status........................................................................................................................369
8.3 Security...........................................................................................................................................370
8.3.1 VPN Status...........................................................................................................................370
8.3.2 Firewall Status......................................................................................................................374
8.4 Administration.................................................................................................................................378
8.4.1 Configure & Manage Status..................................................................................................378
8.4.2 Log Storage Status................................................................................................................379
8.5 Statistics & Reports.........................................................................................................................380
8.5.1 Connection Session...............................................................................................................380
8.5.2 Network Traffic ....................................................................................................................381
8.5.3 Device Administration..........................................................................................................382
8.5.4 Cellular Usage......................................................................................................................383
Specifications ................................................................................................................................................ 384
Contact Information.......................................................................................................................................387

EW200 Industrial Cellular Gateway
9
Chapter 1 Introduction
1.1 Introduction
Congratulations on your purchase of this product: Industrial Cellular Gateway. For M2M (Machine-to-Machine)
applications, EtherWAN Cellular Gateway is the right choice.
With a built-in world-class 4G LTE module, just insert a SIM card from local mobile carrier to access the
Internet. The dual SIM design provides redundancy and a reliable WAN connection for critical applications.
Through VPN tunneling technology, remote sites easily become a part of the local Intranet, and all data is
transmitted in a secure (256-bit AES encryption) link. The DI/DO feature allows the gateway to respond in real
time to events detected by sensors.
This EW200 is equipped with a host of security features including VPN, firewall, NAT, port forwarding, DHCP
server and other features for outdoor IP surveillance applications. Redundant 12-48 VDC power terminals and
dual SIM cards ensure data transmission and network connection without loss.
Main Features:
Built-in high speed LTE modem with dual SIMs for uplink traffic failover.
Equipped with gigabit Ethernet ports to connect other IP-based devices.
RS-232 serial port for controlling legacy serial devices or Modbus devices.
Digital I/O ports for integrating sensors, switch, or other alarm devices.
Equipped with 802.11a/b/g/n/ac 2T2R 2.4G/5GHz selectable Wi-Fi access point.
Designed with solid and easy-to-mount metal body for industrial environments to work with a variety
M2M (Machine-to-Machine) applications.
Before you install and use this product, please read this manual in detail.

EW200 Industrial Cellular Gateway
10
1.2 Contents List
1.2.1 Package Contents
#Standard Package
Items
Description
Contents
Quantity
1
EW200
Industrial Cellular Gateway
1pcs
2
8 pin Terminal Block
1pcs
3
4 pin Terminal Block
1pcs
4
DIN-Rail Bracket
1pcs

EW200 Industrial Cellular Gateway
11
1.3 Hardware Configuration
Front View
※Reset Button
The RESET button provides a quick and easy way to restore the default settings. Press the RESET button
continuously for 6 seconds, and then release it. The device will reset to factory default settings.
※3G/4G, Wi-Fi Antenna
All the 3G/4G and 2.4G/5GHz Wi-Fi antennas are optional accessories, and are not included in the standard
package. Purchase suitable antennas and required RF cables to fit your application.
Left View
LED
Indicators
Auto MDI/MDIX RJ45 Ports
4x Gb LAN
Auto MDI/MDIX RJ45 Port
1x Gb Configurable WAN
3G/4G
Antenna
2.4G/5GHz
Wi-Fi Ant.
SIM A
Slot
SIM B
Slot
Serial
Port
Reset
Button
USB
Port

EW200 Industrial Cellular Gateway
12
DI/DO
Terminal Block
DC Power
Terminal Block
Earth Ground
Screw

EW200 Industrial Cellular Gateway
13
1.4 LED Indicators
LED Icon
Indication
LED Color
Description
Power Source 1
Blue
Steady ON: Device is powered on by power source 1
Power Source 2
Blue
Steady ON: Device is powered on by power source 2
Wi-Fi
Wi-Fi 2.4G/5GHz
Blue
OFF: Wi-Fi is disabled
Steady ON: Wi-Fi is enabled
Signal
Signal (Cellular)
Blue
Steady On: Signal Strength is 61~100%
Slow Flash (per Second): Signal Strength is 31~60%
Fast Flash (per 0.5 second): Signal Strength is 0~30%
WAN
WAN (Cellular)
Blue
OFF: No data packets transferred via Cellular interface
Flashing: Data packets being transferred via Cellular interface
LAN 1 ~ LAN 4/WAN
Green
Steady ON: Ethernet connection of LAN or WAN is established.
Flash: Data packets are being transferred.
OFF: No Ethernet cable attached or Device not linked.
Serial
Serial
Blue
OFF: No Serial data transferred via serial port
Flashing: Data packets being transferred via Serial port
Status
Status
Blue
Slow Flash (per Second): Device working normally
Very Fast Flash: Device is in Recovery Mode or abnormal state
SIM A/B
Blue
OFF: SIM not detected
Slow Flash (per Second): SIM A/B was chosen for the connection
Steady ON: Cellular connection successfully established (under SIM
A/B)

EW200 Industrial Cellular Gateway
14
1.5 Installation & Maintenance
1.5.1 SYSTEM REQUIREMENTS
Network Requirements
A gigabit Ethernet RJ45 cable
3G/4G cellular service subscription
IEEE 802.11 a/b/g/n/ac wireless clients
10/100/1000 Ethernet adapter on PC
Web-based Configuration Utility
Requirements
Computer with the following:
Windows®, Macintosh, or Linux-based operating
system
An installed Ethernet adapter
Browser Requirements:
Internet Explorer 6.0 or higher
Chrome 2.0 or higher
Firefox 3.0 or higher
Safari 3.0 or higher
1.5.2 WARNING
Only use the power supply that complies with the power
specification of the gateway. Using an out-of-spec
voltage rating power source is dangerous and may
damage the product.
Do not open or repair the case yourself. If the product is
too hot, turn off the power immediately and have it
repaired at a qualified service center.
Attention

EW200 Industrial Cellular Gateway
15
1.5.3 HOT SURFACE CAUTION
CAUTION: The surface temperature for the metallic enclosure can be very high!
Especially after long periods of operation, when installed in a closed
cabinet without air conditioning, or in a location with a high ambient
temperature.
DO NOT touch the hot surface!!

EW200 Industrial Cellular Gateway
16
1.5.4 Product Information for CE RED Requirements
The following product information is required to be presented in product User Manual for latest CE RED
requirements.
1
(1) Frequency Band & Maximum Power
1.a Frequency Band for Cellular Connection
Band number
Operating Frequency
Max output power
LTE FDD BAND 1
Uplink: 1920-1980 MHz
Downlink: 2110-2170 MHz
23 ±2.7 dBm
LTE FDD BAND 3
Uplink: 1710-1785 MHz
Downlink: 1805-1880 MHz
LTE FDD BAND 7
Uplink: 2500-2570 MHz
Downlink: 2620-2690 MHz
LTE FDD BAND 8
Uplink: 880-915 MHz
Downlink: 925-960 MHz
LTE FDD BAND 20
Uplink: 832-862 MHz
Downlink: 791-821 MHz
WCDMA BAND 1
Uplink: 1920-1980 MHz
Downlink: 2110-2170 MHz
24 +1/-3 dBm
WCDMA BAND 8
Uplink: 880-915 MHz
Downlink: 925-960 MHz
E-GSM
Uplink: 880-915 MHz
Downlink: 925-960 MHz
33 ±2 dBm
DCS
Uplink: 1710-1785 MHz
Downlink: 1805-1880 MHz
30 ±2 dBm
1.b Frequency Band for Wi-Fi Connection
Band
Operating Frequency
Max. Output Power (EIRP)
2.4G
2.4 –2.4835 GHz
100 mW
5G
5.15 –5.25 GHz
200 mW
(2) 5150 ~ 5350MHz Indoor Use Statements
This product is equipped with IEEE 802.11ac compliant 5GHz wireless radio module. According to RED
requirements, the channels covered in the 5150 ~ 5350 MHz frequency band are for Indoor Use Only.
1
The information presented in this section is ONLY valid for the EU/EFTA regional version. For non-CE/EFTA
versions, please refer to the corresponding product specification.

EW200 Industrial Cellular Gateway
17
(3) Country List for Restrictions (for products with 5GHz radio)
For EU/EFTA, this product can be used in all EU member states and EFTA countries.
AT
BE
BG
CH
CY
CY
DK
DE
EE
EL
ES
FI
FR
HR
HU
IE
IT
LT
LU
LV
MT
NL
NO
PL
PT
RO
SI
SK
SE
TR
UK
(4) RF Exposure Statements
The antenna of the product, under normal use condition, should be at least 20 cm away from the body of
user.

EW200 Industrial Cellular Gateway
18
1.6 Hardware Installation
This chapter describes how to install and configure the hardware
1.6.1 Mount the Unit
The EW200 series product can be mounted on a wall, horizontal plane, or DIN Rail in a cabinet with the
mounting accessories (brackets or DIN-rail kit). The mounting accessories are not screwed on the product
when shipped from factory. Screw the wall-mount kits or DIN-rail bracket on the product first.
1.6.2 Insert the SIM Card
WARNING: BEFORE INSERTING OR CHANGING THE SIM CARD, MAKE SURE THAT
DEVICE POWER IS SWITCHED OFF.
The SIM card slots are located at the front side of the device housing. Push the button and pull the SIM card
loader to install or remove the SIM card. After the SIM card is placed in the loader, push the SIM card loader
into its slot.
Step 1:
Push the button with a
pin to unlock and eject
SIM socket.
Step 2:
Put SIM card in the
socket firmly.
Step 3:
Put SIM socket back
into the SIM slot.

EW200 Industrial Cellular Gateway
19
1.6.3 Connecting Power
The EW200 series product can be powered by connecting one or two power sources to the terminal block. It
supports dual 12 to 48V DC power inputs. The following picture indicates the power terminal block pin
assignments. Please check carefully and connect to the right power requirements and polarity.
The dual power supplies PWR1 and PWR2 can be used in either primary/backup or concurrent modes,
depending on the voltage for PWR1 and PWR2.
If the voltage difference between PWR1 and PWR2 is greater than 5.0 volts (this is the case for using two
power supplies with the different external spec., such as 48V and 24V), the power control circuit works in
primary / backup power mode. The one with higher voltage is treated as the primary power, and the other one
is backup power. Normally, only the primary power supplies power to the gateway and connected PoE devices;
the backup power supply will supply the power to the gateway and connected PoE devices only when the
primary power fails.
If the voltage difference between PWR1 and PWR2 is less than 0.5 volts (this is the case for using two power
supply with the same external spec., such as 48V), the power control circuit works in concurrent mode. Both
PWR1 and PWR2 supply required power to the gateway and connected PoE devices simultaneously.
Make sure that the external power supply can supply the amount of power that the system requires. Failure to
so so may result in a situation in which the power control circuit switches to concurrent mode so that PWR1
and PWR2 supply power at the same time.
1.6.4 Power Supply Installation
The power supply is an optional unit, is not included in the standard package. You have to purchase or prepare
an external power supply for providing power to the gateway. Following is an example of the Industrial power
supply installation.
AC Power Cable Installation
The power supply unit should be 100-240V AC, 50/60Hz with power input lines. AWG 18 power cable is
recommended.
PWR1
GND
GND
PWR2

EW200 Industrial Cellular Gateway
20
The terminal pin number assignment is shown below
Connect the live line, neutral line and earth line to the corresponding locations.
DC Power Terminal Block Installation
The Power Supply unit may consist of one set or two sets of DC power output contacts.
You can connect the DC power supply and the terminal block power pins, as shown below, of the gateway
with a power cable. AWG 18 power cable is recommended.
Insert DC power wires into the contacts PWR1 or PWR2. The +V connect to PWR and then -V connect to GND.
After that, plug in the terminal block to the socket at the side of the gateway.