ETIC IPL-G12 User manual

IPL-G12
3G - GPRS EDGE – GSM data router
_________________
User manual
Document reference : 9017009-02
_________________

Page 2 User manual ref. 9017009-02 GSM-GPRS-EDGE routerIPL-G12
The IPL-G12 router is manufactured by
ETIC TELECOM
13 Chemin du vieux chêne
38240 MEYLAN
FRANCE
:
TEL : + 33 4-76-04-20-00
FAX : + 33 4-76-04-20-01
E-mail : [email protected]
web : www.etictelecom.com

CONTENT
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 3
OVERVIEW
1PRODUCTS IDENTIFICATION....................................................................................7
2TECHNICAL DATA......................................................................................................8
3PRODUCT OVERVIEW.............................................................................................11
4GSM SERVICES OVERVIEW...................................................................................15
INSTALLATION
1PRODUCT DESCRIPTION.......................................................................................17
1.1 Leds...............................................................................................................17
1.2 Connectors...................................................................................................19
1.3 DIP-switches.................................................................................................20
2VENTILATION............................................................................................................20
3SUPPLY VOLTAGE...................................................................................................20
4ETHERNET INTERFACE...........................................................................................20
5RS232 INTERFACE...................................................................................................21
6RS485 INTERFACE...................................................................................................21
7INPUTS & OUTPUT...................................................................................................22
8GSM CONNECTION..................................................................................................23
8.1 Checking the GSM reception signal level..................................................23
8.2 Antenna.........................................................................................................23
8.3 Installing the SIM card.................................................................................24
../..

CONTENT
Page 4 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
SETUP
1SET UP STEPS..........................................................................................................25
2CONFIGURING THE IPL-G12 ROUTER...................................................................26
2.1 Overview.......................................................................................................26
2.2 First configuration .......................................................................................28
2.3 Modifying the configuration........................................................................29
3REBOOTING THE ROUTER AFTER PARAMETERS CHANGES...........................29
4RECOVERING THE IP ADDRESS OF THE ROUTER..............................................30
5RECOVERING THE FACTORY CONFIGURATION................................................30
6RESTRICTING ACCESS TO THE ADMINISTRATION SERVER.............................30
7RECOVERING A FREE ACCESS TO THE ADMINISTRATION SERVER...............30
8ASSIGNING AN IP ADDRESS TO THE LAN INTERFACE OF THE ROUTER.......31
93G OR GPRS EDGE CONFIGURATION...................................................................32
9.1 Configuring the 3G-GPRS-EDGE parameters...........................................32
9.2 Internet connection control.........................................................................33
9.3 Controlling the 3G connection with a “Ping control”...............................34
10 GSM DATA CONFIGURATION.................................................................................34
11 RELEASING A DYNAMIC IP @ WITH THE DYNDNS SERVICE............................35
12 CONFIGURING VPN CONNECTIONS BETWEEN ROUTERS (3G-GPRS-EDGE) 36
12.1 Principles......................................................................................................36
12.2 Configuring IPSec VPN connections.........................................................37
12.3 Configuring TLS VPN connections............................................................43
13 CONFIGURING CONNECTIONS BETWEEN ROUTERS (9600 B/S GSM DATA).48
13.1 Principle........................................................................................................48
13.2 Configuration................................................................................................48
../..

CONTENT
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 5
…SETUP
14 ROUTING FUNCTIONS.............................................................................................51
14.1 Basic routing function.................................................................................51
14.2 Static routes .................................................................................................52
14.3 RIP protocol..................................................................................................53
15 ADDRESS AND PORT TRANSLATION ...................................................................54
15.1 Port forwarding (DNAT)...............................................................................54
15.2 Advanced network address and port translation......................................56
16 REMOTE USERS CONNECTION (3G-GPRS-EDGE SERVICE)..............................60
16.1 Principles......................................................................................................60
16.2 Configuring a TLS remote user connection..............................................62
16.3 Configuring a PPTP VPN connection.........................................................64
17 M2ME_CONNECT SERVICE.....................................................................................65
17.1 Overview.......................................................................................................65
17.2 Configuring the M2Me_Connect connection.............................................66
18 REMOTE USERS CONNECTION (GSM DATA SERVICE)......................................67
18.1 Principe.........................................................................................................67
18.2 Configuring the remote user connection...................................................68
18.3 Configuring the remote user connection using an additional modem...68
19 CONFIGURING THE USERS LIST............................................................................69
20 CONFIGURING THE FIREWALL..............................................................................71
20.1 Overview.......................................................................................................71
20.2 Remote user filter.........................................................................................72
21 SERIAL TO IP GATEWAY.........................................................................................77
21.1 Modbus gateway..........................................................................................78
21.2 RAW TCP gateway.......................................................................................81
21.3 RAW UDP gateway.......................................................................................83
../..

CONTENT
Page 6 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
… SETUP
22 ADVANCED FUNCTIONS.........................................................................................85
22.1 Adding a certificate......................................................................................85
22.2 Alarms...........................................................................................................85
22.3 Configuring the web portal.........................................................................87
22.4 Configuring the DNS server........................................................................88
DIAGNOSTIC AND MAINTENANCE
1DIAGNOSTIC.............................................................................................................91
2SAVING THE PARAMETERS TO A FILE................................................................92
3FIRMWARE UPDATE................................................................................................93
APPENDIX 1 : HTML configuration server
APPENDIX 2 : VPN technology overview

OVERVIEW
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 7
1 Products identification
IPL-G12B IPL-G12B-3G
UMTS HSDPA (3G) - •
GSM (GPRS-EDGE) ••
GSM data switched 9600 b/s •-
RJ45 Ethernet 10 Mb/s 1 1
RS232-RS85 11
IP router ••
NAT – DNAT – Port forwarding ••
SNMP ••
Dyn DNS ••
DHCP client or server (LAN interface) ••
Firewall SPI ••
VPN PPTP, IPSEC, TLS ••
Remote access server • •
Digital input for email alarms 33
Serial gateway :
RAW UDP client & server multi-unicast
Raw TCP client & server
Modbus client and server
Telnet server
unitelway
••
Html Configuration ••
IO Viewer software option ••
• means the function is provided
- means the function is not provided
Important notice : In the manual hereafter, when we speak of “IPL-G12”, it
means both the IPL-G12B and IPL-G12B-3G references

OVERVIEW
Page 8 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
2 Technical data
General characteristics
Dimensions 128 x 38 x 107 mm (h, l, p)
Electrical safety EN 60950- UL 1950
CEM
ESD : EN61000-4-2 : Discharge 6 KV
RF field : EN61000-4-3 : 10V/m < 2 GHz
Fast transient : EN61000-4-4
Surge voltage : EN61000-4-5 : 4KV line / earth
RoHS 2002/95/CE (RoHS)
Supply voltage 9 to 30 VDC - 170 mA at 24 VDC
Operating T° -20°C / + 60°C Humidity 5 - 95 %
3G & GPRS-EDGE & GSM data
RF Frequencies 850/900/1800/1900 / 2100 MHz
(see detailed table below)
RF power EGSM850 EGSM900 : class 4 (2 W)
GSM1800 GSM1900 : class 1 ((1 W)
RF connector FME
UMTS * HSDPA 384 kbps downlink / 384 kbps uplink
EDGE-GPRS ** Max data rate : 85,6 Kb/s downlink & 21,4 Kb/s uplink
Multislot class 10
GPRS ** Multislot class 12
GSM data *** 9600 b/s
* IPL-G12B-3G only ** IPL-G12B-3G and IPL-G12B *** IPL-G12B only
UMTS Frequency range (3G)
Min Max
UMTS 850 Band V 824 MHz 849 MHz
UMTS 1900 Band II 1850 MHz 1910 MHz
Uplink (UE to Node B)
UMTS 2100 Band I 1920 MHz 1980 MHz
UMTS 850 Band V 869 MHz 894 MHz
UMTS 1900 Band II 1930 MHz 1990 MHz
Downlink (Node B to UE)
UMTS 2100 Band I 2110 MHz 2170 MHz

OVERVIEW
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 9
GSM Frequency range (GPRS-EDGE)
Min Max
GSM 850 824 MHz 849 MHz
E-GSM 900 880 MHz 915 MHz
GSM 1800 1710 MHz 1785 MHz
Uplink (MS to BTS)
GSM 1900 1850 MHz 1910 MHz
GSM 850 869 MHz 894 MHz
E-GSM 900 925 MHz 960 MHz
GSM 1800 1805 MHz 1880 MHz
Downlink (BTS to MS)
GSM 1900 1930 MHz 1990 MHz
Ethernet / IP router
Ethernet 10BT
IP router Remote connections- static routes - RIP V2
Ip address
translation
Source IP @ translation (NAT)
Destination IP @ translation (DNAT)
Port translation (Port forwarding)
DNS Domain name
IP address assignment Fixed IP @ or DHCP client or DHCP server
Security
VPN Client or server IPSEC or TLS/SSL or PPTP Encryption 3DES
Certificate 509
Firewall Stateful packet inspection (50 rules)
Logs Date and time stamped logs
Remote access server (RAS)
User list 25 users
Connection VPN PPTP / L2TP-IPSec / TLS Open VPN Login & password
Certificate X509
M2Me VPN Compliant with the M2Me_Secure VPN client
Compliant with the M2Me_Connect mediation service
Alarms 3 inputs : emails

OVERVIEW
Page 10 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
Serial interface
RS232 1200 - 115200 b/s parity N / E / O
Serial to IP gateways
Serial gateway :
RAW UDP client & server multi-unicast,
Raw TCP client & server,
Modbus client and server,
Telnet server,
unitelway

OVERVIEW
3 Product overview
IPL-G12B-3G router
The IPL-G12B-3G router
is designed to
interconnect safely
automated devices over
the UMTS 3G or the
GPRS-EDGE service.
The connection is
permanent.
IPL-G12B router
The IPL-G12B router
provides the same
function but over the
GPRS-EDGE service (and
not over the UMTS 3G
service).
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 11

OVERVIEW
Page 12 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
IPL-G12B router
The IPL-G12B router can
set a 9600 b/s connection
with another router also
connected to the GSM or,
if the service is provided,
to the PSTN or the ISDN.
The connection is not
permanent. One party
must dial the other one.
IP router
The IPL-G12 router provides flexible and comprehensive solutions to
route IP frames from one network to other networks.
The solutions include remote nodes description, static routes, RIP
protocol and destination network address translation (DNAT).
Safe VPN links
The IPL-G12 router is able to establish safe VPN tunnels (TLS or IPSec
and client or server).
Once a VPN is established between two IPL-G12 routers or between an
IPL-G12 and an other compatible router , each IP device connected to the
first LAN can exchange IP frames with any device connected to the other
LAN as if they were linked with a private line.
If the VPN is established between a remote user PC and an IPL-G12
router, the remote user can access to the devices connected to the router.
The IPL-G12 router is able to establish up to 25 IPSec or TLS – SSL
VPNs.

OVERVIEW
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 13
Authentication can be carried out with a pre-shared key or with
certificates.
SPI Firewall
The IPL-G12 incorporates a firewall.
The firewall controls the status of the sessions (TCP, UDP, ICMP) to
avoid sophisticated spoofing attacks.
Entering the product is not possible unless a DNAT rule or a VPN have
been set.
DNS server
DNS makes it possible to assign Internet names to devices or
organizations independently of their public IP address.
The IPL-G12 router behaves like a DNS server for the devices connected
to the LAN.
DynDNS client
The IPL-G12 router is compatible with the Dyn DNS service.
DHCP client or server
Over the Ethernet LAN interface, the IPL-G12 can be a DHCP client or
server.
Emails – sms
An email (or SMS) can be sent each time one of the three digital inputs
are opened or closed.
SNMP
The IPL-G12 router is an SNMP agent.
Html and DIP switches configuration
The IPL-G12 is configured with a web server .
Two DIP switches allow to set the method the product receives its IP
address over the LAN interface : From a DHCP client or server, factory IP
address or stored IP address.

OVERVIEW
Page 14 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
Remote access server
The IPL-G12 provides to authorized users a remote access to the devices
connected either to the LAN or to a serial RS232-RS485 interface, as if
his PC was directly connected to the LAN or to the RS232.
Serial gateway
The product includes an up-to-date RS to IP gateway, enabling to connect
serial devices safely to the GSM network and the Internet.
EticFinder software
The ETICFinder software detects the ETIC products connected to an
Ethernet interface and displays the MAC address and the iP address of
each product.
M2Me_Secure ™VPN client software
M2Me_Secure is a TLS client software (to order separately) edited by
ETIC Telecommunications.
It is able to register up to 100 remote sites connection parameters the
user can set on a click.

OVERVIEW
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 15
4 GSM services overview
3G service
The 3G service provides an IP permanent connection to the Internet at a high data rate
(see the technical data table).
The connection can also be set towards a private network without using the Internet.
The 3G radio fixed infrastructure is not the same as the GSM mobile phone infrastructure;
it why, the 3G service may be less available than the GPRS-EDGE service which uses the
GSM mobile phone infrastructure.
GPRS-EDGE service
As the 3G service, the GPRS-EDGE service provides a permanent IP connection to the
Internet but at a medium data rate (see the data-sheet).
The effective data rate depends of the operator and the reception quality.
The GPRS-EDGE service is provided over the usual GSM network. It is why the GPRS-
EDGE service is usually available each time the GSM voice service is available.
GSM data service
The GSM data service is a 9600 b/s serial data transmission service.
It is a switched service; it means that one party has to dial the other party.
Most GSM service providers also provide the capability to dial from a PSTN modem or an
ISDN adapter towards a GSM modem and reciprocally.
However, if that function is needed, please check it is provided by your GSM operator.
IP address
On a 3G or GPRS-EDGE network, the IP address assigned to the router’s “antenna”
interface by the wireless service provider can be public or private. It is generally dynamic.
Outgoing or ingoing VPN connection
The IPL-G12 can behave like a VPN client or a VPN server.
Outgoing VPN connections to the Internet or to a private network are generally easy to
set..
The IPL-G12 can also behaves like a VPN server to accept ingoing VPN connections
from the Internet for instance.

OVERVIEW
Page 16 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
However, ingoing VPN connections from the Internet towards the IPL-G12 may not be
possible if the IP address assigned to the router’s “antenna” interface by the provider is a
private IP address.

INSTALLATION
1 Product description
IPL-G12
1.1 Leds
Function
Line /
• If no SIM card is present : Extinguished
• If the SIM card has been inserted :
Blinks to indicate the signal level - see table hereafter
• If the SIM card has been inserted ad if the id and
password have been entered in the html server :
Blinking at power-on to indicate the signal level,
Lit after 30 s, to indicate the router is connected to the GSM
VPN Lit : One VPN at least has been established
Blinking : VPN establishment in progress
LINK Ethernet Interface connected
DATA Data activity
RD Bytes transmitted to the RS232 (from the IPL)
TD Bytes received from the RS232 (to the IPL)
Operation Blinks if the SIM cart has not been insterted
Lit otherwise
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 17

INSTALLATION
Page 18 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
the L / led RF signal level indication at power-on
… briefly blinks 3 times The quality of the reception signal is fine
… briefly blinks 2 times The quality of the reception signal is
acceptable
… briefly blinks 1 time The quality of the reception signal is poor
… is turned off No reception
Is a GSM voice communication possible ?
has the SIM card been correctly inserted ?

INSTALLATION
3G-GPRS-EDGE router IPL-G12 User manual ref. 9017009-02 Page 19
1.2 Connectors
2 pins screw-block : Supply voltage
Pin Signal Function
1 + 9 to 30 V – 170 mA at 24 VDC (on line)
2 - Ground
8 pins : Inputs / outputs
Pin Signal Function
1 + 3 V DC provided by the IPL router
2 IN1 Digital input Nr 1
3 IN2 Digital input Nr 2
4 IN3 Digital input Nr 3
5 OUT1 Relay output 1
6 OUT2 Relay output 2
7 B + RS485 polarity B
8 A - RS485 polarity A
DB9 fem. RS232 connector
Pin Circuit Designation IPL - Terminal
1 CD 109 Carrier detect ⇒
2 RD 104 Data Reception ⇒
3 TD 103 Data Emission ⇐
4 DTR 108
Data terminal ready ⇐
5 GND 102 Ground
6 DSR 107 Data set ready ⇒
7 RTS 105 Request to send ⇐
8 CTS 106 Clear to send ⇒
9 RI 125 Ring indicator ⇒

INSTALLATION
Page 20 User manual ref. 9017009-02 3G-GPRS-EDGE router IPL-G12
1.3 DIP-switches
DIP switches
SW 1 SW 2 Management
OFF OFF The current IP@ of the product is the stored IP @
ON OFF The active IP@ of the product is the factory IP@ : 192.168.0.128
No login and password are required to access to the html server
OFF ON The active IP@ is provided by the BOOTP or DHCP server.
ON ON Reserved
SW 3, SW 4 Not used
Push-button : It enables to restore the factory profile.
To restore the factory profile, switch the power on while pressing the
push-button until the RUN light turns green.
Attention : Once the factory profile has been restored, the stored
configuration is lost.
2 Ventilation
To avoid overheating when the ambient temperature is high, leave a 1 cm
(0.5 inch) space on each side of the product.
3 Supply voltage
The supply voltage must be strictly lower than 30 VDC and higher than 9
VDC. The consumption is 170 mA at 24 VDC.
Careful : The supply voltage module must be able to provide current
peaks absorbed by the GSM RF transmitter.
4 Ethernet interface
The Ethernet interface is a 10 Mb/s interface.
To connect a PC directly to the IPL, use the cross wired red cable
provided with the product.