GE MDS ORBIT MCR User manual

MDS™ORBIT MCR
Multiservice Connect Router
MDS™ORBIT ECR
Edge Connect Router
MDS 05-6632A01, Rev. F
May 2016
Including New Features from Firmware Revsion 4.6.x
Technical Manual Technical Manual

View instructional videos: Orbit™ MCR Learning and Development YouTube
Channel
Quick-Start instructions for this product are contained in publication 05-6709A01.
Visit our website for downloadable copies of all documentation at www.gemds.com.

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual iii
TABLE OF CONTENTS
COPYRIGHT AND TRADEMARK................................................................................................................7
RF REGULATORY INFORMATION.............................................................................................................7
SAFETY REGULATORY INFORMATION –(REGION-SPECIFIC)...........................................................10
PRODUCT COUNTRY CERTIFICATION INFORMATION –(NON-NA/EU).............................................13
1.0 PRODUCT OVERVIEW AND APPLICATIONS.............................................................................16
1.1 INTRODUCTION ..............................................................................................................................16
PRODUCT VARIATIONS..............................................................................................................................161.1.1
ABOUT THIS MANUAL ...............................................................................................................................171.1.2
2.0 PRODUCT DESCRIPTION.............................................................................................................19
2.1 KEY FEATURES..............................................................................................................................19
2.2 INTERFACE TYPES .........................................................................................................................19
2.3 NETWORK INTERFACE CARDS (NICS).............................................................................................19
4GLTE/CDMA (VERIZON ONLY)..............................................................................................................192.3.1
4GLTE, HSPA+, GSM/GPRS (EMEA/APAC) .......................................................................................202.3.2
4GLTE, HSPA+, GSM/GPRS (NORTH AMERICA)....................................................................................202.3.3
3GCELL.................................................................................................................................................202.3.4
900 MHZ UNLICENSED.............................................................................................................................202.3.5
LICENSED NARROWBAND..........................................................................................................................212.3.6
2.4 TYPICAL APPLICATIONS..................................................................................................................22
2.5 MCR AND ECR CONNECTORS AND INDICATORS .............................................................................22
2.6 GROUNDING CONSIDERATIONS.......................................................................................................28
2.7 MOUNTING OPTIONS......................................................................................................................29
OPTIONAL DIN RAIL MOUNTING ................................................................................................................302.7.1
2.8 ANTENNA PLANNING AND INSTALLATION..........................................................................................31
3.0 DEVICE MANAGEMENT................................................................................................................36
3.1 INITIAL SETTINGS OVERVIEW..........................................................................................................39
SETTING BASIC PARAMETERS—FIRST STEPS.............................................................................................393.1.1
ONE-TIME “RECOVERY”PASSWORDS ........................................................................................................393.1.2
CHANGE DEFAULT PASSWORDS ................................................................................................................423.1.3
SECURITY REVIEW ...................................................................................................................................433.1.4
3.2 PRECONFIGURED SETTINGS...........................................................................................................44
3.3 SPECIFIC APPLICATION EXAMPLES USING DEVICE MANAGER...........................................................45
3.4 USING THE COMMAND LINE INTERFACE (CLI)..................................................................................51
DIFFERENCES BETWEEN SERIAL AND SSH .................................................................................................513.4.1
ESTABLISHING COMMUNICATION—SERIAL INTERFACE .................................................................................513.4.2
USING THE CLI........................................................................................................................................523.4.3
CLI QUICK REFERENCE TABLE..................................................................................................................533.4.4
SPECIFIC EXAMPLES USING CLI................................................................................................................553.4.5
3.5 INTERFACE CONFIGURATION...........................................................................................................59
SERIAL INTERFACE...................................................................................................................................593.5.1
CELL.......................................................................................................................................................643.5.2
WIFI.......................................................................................................................................................783.5.3

iv MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
UNLICENSED 900 MHZ ISM (NX915)........................................................................................................933.5.4
LICENSED NARROWBAND (LN) ................................................................................................................1243.5.5
3.6 SYSTEM HEALTH AND STATUS......................................................................................................146
DEVICE OVERVIEW.................................................................................................................................1463.6.1
EVENT LOGGING ....................................................................................................................................1463.6.2
IPERF SERVER SERVICE .........................................................................................................................1533.6.3
SNAPSHOTS AND SYSTEM RECOVERY ......................................................................................................1553.6.4
SUPPORT BUNDLE..................................................................................................................................1603.6.5
3.7 SYSTEM CONFIGURATION AND SETUP...........................................................................................162
DATE,TIME AND NTP.............................................................................................................................1623.7.1
GEOGRAPHICAL-LOCATION......................................................................................................................1653.7.2
USER MANAGEMENT AND ACCESS CONTROLS ..........................................................................................1653.7.3
RADIUS USER MANAGEMENT ................................................................................................................1693.7.4
FIRMWARE MANAGEMENT .......................................................................................................................1713.7.5
TAMPER DETECTION...............................................................................................................................1793.7.6
CONFIGURATION FILES ...........................................................................................................................1823.7.7
DNS.....................................................................................................................................................1863.7.8
3.8 NETWORKING SERVICES AND ROUTING.........................................................................................189
NETWORK .............................................................................................................................................1893.8.1
LAN.....................................................................................................................................................1933.8.2
ETHERNET PORT SECURITY /PORT-BASED AUTHENTICATION......................................................................1993.8.3
VLAN OPERATION.................................................................................................................................2003.8.4
BRIDGING..............................................................................................................................................2033.8.5
ROUTING...............................................................................................................................................2063.8.6
STATIC NEIGHBOR ENTRIES ....................................................................................................................2113.8.7
ACCESS CONTROL LIST (PACKET FILTERING /FIREWALL)...........................................................................2143.8.8
SOURCE NAT (MASQUERADING).............................................................................................................2263.8.9
DESTINATION NAT (PORT FORWARDING).................................................................................................2343.8.10
STATIC NAT..........................................................................................................................................2413.8.11
VPN.....................................................................................................................................................2453.8.12
DHCP SERVICE ....................................................................................................................................2643.8.13
TERMINAL SERVICE ................................................................................................................................2683.8.14
REMOTE MANAGEMENT INTERFACES........................................................................................................2763.8.15
REMOTE MANAGEMENT SERVICE.............................................................................................................2813.8.16
QUALITY OF SERVICE (QOS)...................................................................................................................290
3.8.17
SNMP..................................................................................................................................................3003.8.18
NETWORK MONITOR SERVICE .................................................................................................................3203.8.19
NETWORK LINK FAILOVER/FAILBACK........................................................................................................3223.8.20
DYNAMIC ROUTING.................................................................................................................................3423.8.21
GPS SERVICE .......................................................................................................................................3553.8.22
DYNAMIC DNS ......................................................................................................................................3573.8.23
VRRP –VIRTUAL ROUTER REDUNDANCY PROTOCOL ...............................................................................3603.8.24
IPPASSTHROUGH..................................................................................................................................3623.8.25
3.9 PUBLIC KEY AND CERTIFICATES....................................................................................................364
CERTIFICATE MANAGEMENT AND 802.1XAUTHENTICATION........................................................................3643.9.1

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual v
PRIVATE KEYS.......................................................................................................................................3643.9.2
CA CERTIFICATES..................................................................................................................................3683.9.3
CLIENT CERTIFICATES ............................................................................................................................3713.9.4
FIRMWARE CERTIFICATES .......................................................................................................................3753.9.5
SCEPAND CA CONFIGURATION .............................................................................................................3783.9.6
4.0 TECHNICAL REFERENCE..........................................................................................................381
4.1 TROUBLESHOOTING .....................................................................................................................381
LED STATUS INDICATORS.......................................................................................................................3814.1.1
4.2 TECHNICAL SPECIFICATIONS ........................................................................................................383
5.0 GLOSSARY OF TERMS AND ABBREVIATIONS.......................................................................390
6.0 APPENDIX A –COMMAND LINE INTERFACE (CLI) FEATURES ............................................394
6.1 OPERATIONAL MODE ...................................................................................................................394
6.2 CONFIGURATION MODE................................................................................................................394
6.3 CHANGING CONFIGURATION DATA................................................................................................394
6.4 INPUTTING VALUES ......................................................................................................................394
6.5 INPUT OF A LIST OF VALUES .........................................................................................................394
6.6 TAB-COMPLETION........................................................................................................................395
6.7 CLI ENVIRONMENT ......................................................................................................................396
6.8 COMMAND OUTPUT PROCESSING.................................................................................................397
6.9 COUNT THE NUMBER OF LINES IN THE OUTPUT .............................................................................398
6.10 SEARCH FOR A STRING IN THE OUTPUT.........................................................................................398
6.11 REGULAR EXPRESSIONS ..............................................................................................................399
6.12 DISPLAY LINE NUMBERS...............................................................................................................399
6.13 SHOWING INFORMATION...............................................................................................................400
6.14 CONTROL SEQUENCES.................................................................................................................400
6.15 COMMANDS.................................................................................................................................400
6.16 OPERATIONAL MODE COMMANDS.................................................................................................401
6.17 CONFIGURE MODE COMMANDS ....................................................................................................404
7.0 APPENDIX B –INTEGRITY MEASUREMENT AUTHORITY (IMA) ...........................................408
7.1 UNDERSTANDING.........................................................................................................................408
7.2 CONFIGURING..............................................................................................................................408
OBTAINING CONFIGURATION FILE HASH ...................................................................................................4097.2.1
7.3 MONITORING ...............................................................................................................................409
7.4 IMA TROUBLESHOOTING..............................................................................................................410
8.0 APPENDIX C –COMMON EVENT EXPRESSION (CEE)...........................................................411
8.1 EVENT TAXONOMY.......................................................................................................................411
8.2 EVENT FIELD DICTIONARY............................................................................................................411
8.3 EVENT ENCODING &TRANSPORT .................................................................................................412
EXAMPLES.............................................................................................................................................4128.3.1
SYSLOG PRIVAL ...................................................................................................................................4138.3.2
SYSLOG APP-NAME .............................................................................................................................4138.3.3
SYSLOG MSG........................................................................................................................................4138.3.4
8.4 CONFIGURING..............................................................................................................................413

vi MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
8.5 MONITORING ...............................................................................................................................414
9.0 APPENDIX D –MANAGING SIGNED FIRMWARE ....................................................................415
10.0 APPENDIX E –OBTAINING PROVISIONED 4G/LTE SERVICE (VERIZON)............................417
10.1 UNDERSTANDING.........................................................................................................................417
10.2 BEFORE CONTACTING VERIZON....................................................................................................417
10.3 ESTABLISHING A CELL SERVICE PLAN...........................................................................................417
11.0 APPENDIX F –NX915 MODULE FREQUENCIES......................................................................418
12.0 APPENDIX G- VPN CONFIGURATION EXAMPLES..................................................................421
12.1 POLICY-BASED IPSEC VPN WITH JUNIPER JUNOS.......................................................................421
ORBIT...................................................................................................................................................42112.1.1
JUNOS................................................................................................................................................424
12.1.2
12.2 DMVPN WITH CISCO IOS............................................................................................................425
ORBIT...................................................................................................................................................42612.2.1
CISCO IOS............................................................................................................................................43212.2.2
12.3 GRE/IPSEC WITH JUNIPER JUNOS..............................................................................................437
ORBIT...................................................................................................................................................43712.3.1
JUNOS................................................................................................................................................44112.3.2
13.0 APPENDIX H –802.1X PORT AUTHENTICATION W/ EAP.......................................................446
13.1 OVERVIEW...................................................................................................................................446
13.2 CONFIGURATION EXAMPLES.........................................................................................................446
ORBIT DEVICE .......................................................................................................................................44613.2.1
FREERADIUS..........................................................................................................................................44713.2.2
WINDOWS AS 802.1X PEER/SUPPLICANT –START WIREDAUTOCONFIG SERVICE ..........................................44813.2.3
WINDOWS CONFIGURATION #1 -CISCO PEAP MODE.................................................................................44813.2.4
WINDOWS CONFIGURATION #2 -EAP-TLS MODE......................................................................................45013.2.5
KUBUNTU LINUX CONFIGURATION #1 –PEAP MODE..................................................................................45513.2.6
KUBUNTU LINUX CONFIGURATION #2 –EAP-TLS MODE ............................................................................45513.2.7
CISCO SWITCH AS AUTHENTICATOR ..........................................................................................................45613.2.8
14.0 APPENDIX H –LICENSES ..........................................................................................................457
14.1 OPEN SOURCE LICENSE DECLARATION.........................................................................................457
15.0 APPENDIX I –COUNTRY SPECIFIC INFORMATION................................................................458

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 7
Copyright and Trademark
This manual and all software described herein is protected by Copyright: 2016 GE MDS LLC. All rights
reserved. GE MDS LLC reserves its right to correct any errors and omissions in this publication.
RF Regulatory Information
RF Safety Notice (English and French)
Concentrated energy from a directional antenna may pose a health hazard to humans.
Do not allow people to come closer to the antenna than the distances listed in the
table below when the transmitter is operating. More information on RF exposure can
be found online at the following website:
www.fcc.gov/oet/info/documents/bulletins
Concentré d'énergie à partir d'une antenne directionnelle peut poser un risque pour
la santé humaine. Ne pas permettre aux gens de se rapprocher de l'antenne que les
distances indiquées dans le tableau ci-dessous lorsque l'émetteur est en marche. Plus
d'informations sur l'exposition aux RF peut être trouvé en ligne à l'adresse suivante:
www.fcc.gov/oet/info/documents/bulletins
Antennas must not be co-located. All transmission antennas must be at least 20 cm apart to comply with
FCC co-location rules.
Orbit Device vs. Minimum RF Safety Distance
Radio Module
Equipped
Minimum Safety Distance
from Antenna
Cell
33 cm
NX915
23 cm
LN400
143 cm - using 5 dBi antenna
254 cm - using 10 dBi antenna
507 cm - using 16 dBi antenna
LN900
108 cm - using 5 dBi antenna
192 cm - using 10 dBi antenna
382 cm - using 16 dBi antenna
Other models
Consult factory prior to operation.
NOTE THE ORBIT MCR/ECR DOES NOT SUPPORT VOICE COMMUNICATIONS
FCC Class A Notice
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
This device may not cause harmful interference.
This device must accept any interference received, including interference that may cause
undesired operation.
Note: This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against
harmful interference when the equipment is operated in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance
l’exposition aux RF
RF Exposure

8 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
with the instruction manual, it may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause harmful interference, in which case the user will be
required to correct the interference at his own expense.
Modifications: Any modifications made to this device that are not approved by GE MDS LLC, Inc. may
void the authority granted to the user by the FCC to operate this equipment.
Industry Canada Notice
This Class A digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
Operational Safety Notices
The MDS Orbit MCR may not be used in an environment where radio frequency equipment is prohibited
or restricted in its use. This typically includes aircrafts, airports, hospitals, and other sensitive electronic
areas.
Do not operate RF devices in an environment that may be susceptible to radio interference resulting in
danger, specifically:
Areas where prohibited by law - Follow any special rules and regulations and obey all signs and
notices. Do not use the Orbit MCR when you suspect that it may cause interference or danger.
Near Medical and life support equipment - Do not use the Orbit MCR in any area where medical
equipment, or life support equipment may be located, or near any equipment that may be susceptible
to any form of radio interference.
All cables and conductors making connections to the units need to be rated at 85 °C or higher.
Use Copper Conductors Only
Use 18 AWG wire
FCC IDs of Installed Transmitters
As of the printing date, the following identifiers are assigned to the modules listed below. For the latest,
official listings of all agency approvals, please contact your factory representative.
Config. Id –Radio Desc.
FCC ID
IC ID
E4V - 4G/3G CELL Modem
PKRNVWE362
3229B:E362
3G1 - 3G CELL Modem
RI7HE910
5131A-HE910
E4S,E42 - 4G/3G CELL Modem
n/a
n/a
4G1,4G2,4G3,4G4,4G5 - 4G/3G CELL
Modem
N7NMC7355
2417C-MC7355
4GP - 4G/3G CELL Modem
N7NMC7354B
n/a
WIFI Module
M4Y-ZCN722MV1
3195A-ZCN722MV1
NX915 Module
E5MDS-NX915
101D-NX915
LN400 Module
E5MDS-LN400
101D-LN400
LN900 Module
E5MDS-LN900
101D-LN900
Country-Specific Installation Data
Refer to APPENDIX I –Country Specific Information at the back of this manual for important notices
regarding installation in specific countries.

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 9
Servicing Precautions
No user-serviceable parts are contained inside this equipment. Opening of the unit by unauthorized
personnel voids the warranty. All servicing must be performed by an authorized repair facility.
When servicing energized equipment, be sure to wear appropriate Personal Protective Equipment (PPE).
During internal service, situations could arise where objects accidentally contact or short circuit
components and the appropriate PPE would alleviate or decrease the severity of potential injury. When
servicing equipment, all workplace regulations and other applicable standards for live electrical work
should be followed to ensure personal safety.
Manual Revision and Accuracy
This manual was updated to cover a specific version of firmware code. Accordingly, some screens and
features may differ from the actual unit you are working with. While every reasonable effort has been
made to ensure the accuracy of this publication, product improvements may also result in minor
differences between the manual and the product shipped to you. If you have additional questions or need
an exact specification for a product, please contact GE MDS using the information at the back of this
guide. In addition, manual updates can be found on our web site at www.gemds.com .
Environmental Information
The manufacture of this equipment has required the extraction and use of natural resources. Improper
disposal may contaminate the environment and present a health risk due to hazardous substances
contained within. To avoid dissemination of these substances into our environment, and to limit the
demand on natural resources, we encourage you to use the appropriate recycling systems for disposal.
These systems will reuse or recycle most of the materials found in this equipment in a sound way. Please
contact GE MDS or your supplier for more information on the proper disposal of this equipment.
Battery Disposal—This product may contain a battery. Batteries must be disposed of properly, and may
not be disposed of as unsorted municipal waste in the European Union. See the product documentation for
specific battery information. Batteries are marked with a symbol, which may include lettering to indicate
cadmium (Cd), lead (Pb), or mercury (Hg). For proper recycling return the battery to your supplier or to a
designated collection point. For more information see:
www.weeerohsinfo.com.
Product Test Data Sheets
Test Data Sheets showing the original factory test results for this unit are available upon request from the
GE MDS Quality Leader. Contact the factory using the information at the back of this manual. Serial
numbers must be provided for each product where a Test Data Sheet is required.

10 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
Safety Regulatory Information –(region-specific)
CE Mark and RTTE Notice
This product, using the "WIFI internal radio module", “CELL modem”, and “LN400 radio module” is CE
marked and compliant with the RTTE directive. Other configurations will be added for EU use in future
releases.
CE General Safety - IEC/CSA/EN60950 (applicable for CE marked units)
This product meets CE and General Safety requirements subject to the following
constraints:
Power supply unit will be provided by the end users and installed indoor only. It shall be a
certified SELV (Safety Extra Low Voltage) LPS (Limited Power Source) output rated 11-55Vdc,
100W max.
This unit is to be installed in a restricted access location.
Power (11-55Vdc)
UL - CSA/us Notice (NOT applicable to CE marked units)
This product is approved for use in Class 1, Division 2, Groups A, B, C & D Hazardous Locations. Such
locations are defined in Article 500 of the National Fire Protection Association (NFPA) publication
NFPA 70, otherwise known as the National Electrical Code. The transceiver has been recognized for use
in these hazardous locations by the Canadian Standards Association (CSA) which also issues the US mark
of approval (CSA/US). The CSA Certification is in accordance with CSA STD C22.2 No. 213-M1987.
CSA Conditions of Approval: The transceiver is not acceptable as a stand-alone unit for use in the
hazardous locations described above. It must either be mounted within another piece of equipment which
is certified for hazardous locations, or installed within guidelines, or conditions of approval, as set forth
by the approving agencies. These conditions of approval are as follows: The transceiver must be mounted
within a separate enclosure which is suitable for the intended application. The antennas are not intended
to be installed and mounted in a Class 1, Division 2 hazardous location. The antenna feedline, DC power
cable and interface cable must be routed through conduit in accordance with the National Electrical Code.
Installation, operation and maintenance of the transceiver should be in accordance with the transceiver's
installation manual, and the National Electrical Code. Tampering or replacement with non-factory
components may adversely affect the safe use of the transceiver in hazardous locations, and may
void the approval. A power connector with screw-type retaining screws as supplied by GE MDS must be
used.
Do not disconnect equipment unless power has been switched off or the area is
known to be non-hazardous. Refer to Articles 500 through 502 of the National
Electrical Code (NFPA 70) for further information on hazardous locations and
approved Division 2 wiring methods.
EXPLOSION
HAZARD!