Helmholz REX 100 3G User manual

Quick Start Guide REX 100 3G|LTE
www.helmholz.de
Version
2en from FW 1.9.0

Quick Start Guide REX 100 3G|LTE
2
Contents
1. Introduction 3
2. Preparing the REX 100 unit 3
3. Access to the myREX24-V2 portal 5
4. InitialroutercongurationviathemyREX24-V2portal 7
5. Routercongurationtransferoptions 9
6. Establishing a VPN connection to your REX 100 17
7. Tips and tricks 18
8. Remote maintenance of Ethernet CPUs 20
9. Description of LEDs and buttons 21
10. Restoring the REX 100 router to its default settings 21
11. Loadconguration/rmwareupdatefromUSBstick 22
12. Technical data 23

Quick Start Guide REX 100 3G|LTE
3
The REX 100 is an industrial router suitable for worldwide remote access to IP-en-
ableddevices(PLCs,HMIs,IPcameras,etc.)ItismountedontheDINrail.
ThisQuickStartGuideexplainsthebasicsettingsinthemyREX24portalandshows
howtotransferthecongurationmadetheretotheREX100unit.
Important advance information: Please use the most current version (as of v3.7.0) of
the dial-up software "shDIALUP" for commissioning. You can acquire it as a download
at www.helmholz.de.
The current rmware must be installed on all REX 100 routers for successful connection
with the myREX24 V2 portal. Write down the serial number and MAC address of your
REX 100 router before installing the router in your system. You will need the serial num-
ber in order to congure the REX 100!
2. Preparing the REX 100 unit
AccesstoaGSMnetworkrequiresastandardSIMcardofaprovider.Thisservesthe
purposeofidenticationforthenetworkoperator.Theinsertisfoundontheleft
housingside.Inordertounlockandremovetheinsert,pleasepresstherecessed
yellowbuttonnexttothecardreader.
TheLANportsP1toP4areavailableforconnectiontothemachinerynetworkand
forcommissioningviaPC.TheyarealsoactivewhentheREX100routerhasno
connection with the Internet.
1. Introduction

Quick Start Guide REX 100 3G|LTE
4
2.1 Connection
The REX 100 must be supplied with 24 V DC at the wide range input 18 – 30 V DC
viatheprovidedconnectorplug.
Theterminal(FG)isforthefunctionalground.Connectthiscorrectlywiththerefer-
ence potential.
2.2 Digital inputs IN1 and IN2
Thealarminputscanbeactivatedwithpotential-freeswitches,buttonsorrelay
contacts.E-mailrecipientswhoneedtobenotiedareconguredandactivatedvia
thealarmmanagementinthemyREX24-V2portal.Dependinguponthesetting,itis
possibletoinitiatetheestablishingofaconnectiontothemyREX24-V2portalviaIN1.
The use of these functions is optional.
ThePWRLEDlightsupwhenthesupplyvoltageisswitchedon.Thebootprocess
startsfollowingtheinternalsystemcheck(durationofapprox.25sec.),whichis
indicatedbytheblinkingRDYLED(forapprox.90sec.).TheREX100isreadyfor
operation as soon as the RDY LED lights solid.
2.3 Antenna terminals
Please ensure prior to installation that the antenna is positioned in such a way that
itreceivesanadequateGSMsignal.Alsobesuretofollowtheinstructionsfromthe
technicaldatasheetsoftheantennamanufactureranddonotinstallthese(dueto
theshieldingeffect)intometalhousings(e.g.controlcabinet).
2.3.1 REX 100 3G (UMTS)
TheantennarequiredforradioreceptionisscrewedontotheSMAsocket"ANT".

Quick Start Guide REX 100 3G|LTE
5
2.3.2 REX 100 LTE (4G)
Forradioreception,atleastonesuitableantennamustbescrewedontotheSMA
socket"MAIN"(ANT2).
Inordertoimprovethedatathroughput,asecondantennaterminalisavailable
ontheREX100LTErouterwiththeSMAsocket"Rx"(ANT1)thatcanbeusedasan
option.Thisfunctionalityiscalledantennadiversityinthe"WCDMAmode"and
Downlink-MIMOinthe"LTEmode".
Thesecondreceiverantennashouldnotbelocatedintheimmediatevicinityofthe
mainantenna.Inordertoimprovethediversitygainandreduceotherreciprocal
interactions(interferenceeffects),thetwoantennasshouldbe(takingthespace
availableintheapplicationintoaccount)installedwiththegreatestpossibledistance
between them.
Forthesamereason,thesecondantennashouldbemountedcross-polarized(rotat-
edby90°inrelationtothemainantenna).
3. Access to the myREX24-V2 portal
REX100routerscanbefullyconguredusingthemyREX24portal.Asecureconnec-
tionwiththeportalisrequiredtothispurpose:
-ForcompletehardwareprojectplanningofaREX100router,theremoteclient
software shDIALUP must be used in order to establish a VPN connection.
-Alternatively,youcouldalsocreatethecongurationwithanHTTPS-secureddirect
callupfromyourbrowser.ThecallupisrealizedwiththefollowingURL:https://
v2.myREX24.net.
PleasealwaysuseyourmyREX24-V2portalaccessdatatologin.Youcanndfurther
information in the manual for the myREX24-V2 portal.
ThevariouswaystotransferthecongurationyouhavecreatedtotheREX100are
describedinthisQuickStartGuide.

QuickStartGuideREX1003G|LTE6
3.1 Registering
Ifyoudon'tyethaveamyREX24-V2portalaccount,youcanregisterunderwww.
myREX24.net.Fillouttherequiredeldsthere.Afteryourdataischeckedbyourser-
viceteam(Mon.-Fri.8a.m.to5p.m.CET),youwillreceivetwoseparatee-mailswith
theaccessdata.Onee-mailcontainstheusername,thesecondthepassword.
ThesoftwarerequiredforestablishingtheconnectionwiththemyREX24-V2portal
(shDIALUPandshCHECK)canbefoundinthedownloadareaunderwww.helmholz.
de.Thereyoucanalsodownloadfurtherdocumentswithadditionalexampleappli-
cations at any time.
3.2 Log in to the myREX24 portal
OnceyouinstallandstarttheshDIALUPsoftware,youcanuseyourlogindatatolog
intothemyREX24portal.Select"V2.myrex24.net"intheserverselectioneld.
Notes:
-Alternatively, the login page can also be reached under: https://v2.myrex24.net.
Any up-to-date browser can be used for this purpose. Chrome and Firefox have been
successfully tested.
-Your login name is composed of a user name preceding the @ character and the name
of your company. Example: admin@helmholz
-Following the initial login, you will be prompted to register a new, individual password
for your account.
-If necessary, you can also create and administer additional users after logging into the
myREX24-V2 portal.

QuickStartGuideREX1003G|LTE 7
Thefollowinginformationgoesoverthebasiccongurationstepsrequiredinorder
tobeabletoestablishaVPNportalconnection.Adescriptionoftheexpandedfunc-
tionscanbefoundwiththeonlinehelporinthemanuals/whitepapers.
Assoonasyouhavesuccessfullyloggedintotheportalforthersttime,youwill
bepromptedtoindividualizeyouraccessdataonce(usernames/passwords).Only
subsequenttothiscananewprojectbecreated.
4.1 Create new project
Navigation: Administration > Projects
Click on the plus intheprojectoverviewandassignaprojectnameinthesubse-
quentwindow(allotherentries/informationcanbeprovidedlater).
4.2 Creatinganewdevice
Navigation: Administration > Projects > Project (here "Project1"):
Click on the plus intheselectedprojectandthenon"Createnewdevice".
OnlytheselectionoftheREXtype,theassignmentofauniquenameandtheentry
oftheserialnumbersarenecessaryfortheinitial/minimalcongurationinthemenu
"Device"underthetab"Device".Thenamecanbefreelyselected,butonlythefol-
lowingnumbersand/orlettersareallowed:0to9,AtoZ,atoz(withoutspaces).
Notes:
-The name must start with a letter. Umlauts, special characters, and spaces are not
permitted. Double designations are also not possible in the "Name"  eld.
-The serial number always starts with the letter "R", followed by eight numbers (0-9).
Aftersavingyourinformation,youwillbeautomaticallyforwardedtothedevice
settings.
4. InitialroutercongurationviathemyREX24-V2portal

QuickStartGuideREX1003G|LTE8
Onlythe"Interfaces"menuisrelevantfortheinitialconguration.
Navigation: Administration > Projects > Project (selected project) > New Device (selected
device)
Click on the editing symbol inordertoprocessthesettingsoftherelevantsub-
menu.
Thefollowingmenusaresignicantfortheinitialconguration:
-LAN All REX 100 routers come with a LAN-side IP address of
192.168.0.100/24asadefault.ModifytheIPaddressandthesubnet
maskinkeepingwiththespecicationsfromthemachinerynetwork.
Note: It can happen that this IP address must be used as a standard gateway for ad-
ditional TCP/IP components that are connected to the REX 100 for remote maintenance
purposes (see page 20, chapter 8).
-Internet Fortheinitialcongurationitisadvisabletochoosetheaction"Always"
fortheselectioneld"Connecttoserveron".Onlywiththissetting
does the REX 100 automatically attempt to establish a connection with
the portal as soon as it is supplied with power.
-Modem IfyouhavethetelephonenumberoftheSIMcardattheready,you
canenterthisinthecorrespondingeld.TheREX100canthenbe
controlledthroughthemyREX24-V2portalviaSMSmessages.
TheparametersfortheAPNaccesspoint(AccessPointName)ofthe
cardproviderandthecorrectSIMPINmustbeavailabletoyouandbe
stored here.
Savethesettings.Theinitialcongurationisherewithcomplete.
4.3 CongureREX100(connectiondata)

QuickStartGuideREX1003G|LTE 9
ThecreateddevicecongurationcanbetransferredtotheactualREX100unitina
varietyofways.
1. Download to PC
ThecongurationleissavedonthePCandsubsequentlytransferredtotheREX100
usingaUSBstick(page10,chapter5.1).
You can choose this procedure when the REX 100 router cannot be reached through
eitherthelocalnetwork(LAN)orthroughtheInternetduringcommissioning.Pre-
requisite:thecongurationPChasaconnectionwiththemyREX24-V2portal.
2.Prepareforsynchronization(FirstStartAssistantintheREX100necessary)
Tothispurposeyouprovidethecongurationdatafordownloadingintheportal.
ThecongurationisautomaticallytransferredtotheREX100assoonastheREX100
connectswiththeportal(page11,chapter5.2).
Prerequisite/conditions:
-TheREX100cancreateaconnectionwiththemyREX24-V2portalviatheInternet.
-YouhavepreconguredtheconnectiondataviathewebinterfaceoftheREX100
(FirstStartAssistant).
-TheREX100canbeauthenticatedattheportalonthebasisofitsuniqueserial
number.
3.Submittodevice
ThecongurationistransferredviaalocalLANconnectionofthecomputeronwhich
shDIALUPisrunning(page15,chapter5.3).
You can select this procedure if the REX 100 can be reached directly through the local
network(LAN).TheIPaddresssettingsofthenetworkadapterarenotrelevanthere.
Note: We recommend the "Submit to Device" variant for the initial con guration.
5. Routercongurationtransferoptions

QuickStartGuideREX1003G|LTE10
TheUSB-basedcongurationmethodcanbeusediftheREX100cannotbereached
eitherthroughthelocalnetwork(LAN)orthroughtheInternet.Theprerequisitefor
thisisaPCwithaUSBterminal,anInternetconnectiontothemyREX24-V2portal
andanFAT-formatedUSBstick.
InthemyREX24-V2portal,selectthe"DownloadtoPC"optioninthedevicesettings.
DownloadthecongurationleprovidedbythemyREX24portaltoyourPCand
saveitonaFAT-formatedUSBstick.Theleiscalledmyrex24.mbnfortheinitialcom-
missioningoftheREX100.Allofthefollowingcongurationlesgeneratedforthis
routerareautomaticallygeneratedbythesystemasmyrex24.mbnx.Neverrename
thisle.
5.1 TransferofthecongurationusingaUSBstick
3. Save the configuration file
1. Log-In at myREX24 V2
2. Create/edit and download the
REX 100 configuration
4. Transfer the configuration
Nowcarryoutthestepsdescribedonpage22inchapter11"Loadconguration/
rmwareupdatefromtheUSBstick".

QuickStartGuideREX1003G|LTE 11
5.2.1 File confi guration in the myREX24-V2 portal to be picked up
AssoonastheREX100routerhasestablishedanInternetconnectionwiththeportal,
theREX100isautomaticallyveriedforyouraccountonthebasisofitsunique
serialnumberandthecongurationisautomaticallytransferredtotheREX100.This
methodisalsoidealintheeventthatyouneedtocarryoutretroactivechangesto
thedevicesettings.
Prerequisite/conditions:
-ThedevicecongurationwascreatedinthemyREX24-V2portal.Theserialnumber
has been correctly entered.
-TheREX100waspreconguredviathewebinterfacewiththeconnectiondata
(FirstStartAssistant).
-TheREX100hasaGSMconnectiontotheInternet.
Clickonthesymbolfortheselectionofthetypeoftransferandthenon"Preparefor
Synchronization".
Nofurthersettingsarerequiredforthebasicconguration.Clickon"Synchronize".
5.2 Preparationforsynchronizationwiththe"FirstStartAssistant"
4. Automatic synchronization
1. Log in via shDIALUP
2. Create REX 100 configuration
and prepare for
synchronization
3. Carry out First Start Assistent
in the REX 100

QuickStartGuideREX1003G|LTE12
5.2.2 Calling up the "First Start Assistant" through the browser
You can also determine the Internet access of the REX 100 directly in the web inter-
faceoftherouterviathe"FirstStart"website.Thisisrelevantintheeventthatthe
REX100hasnotyetbeenconguredthroughoneoftheothercongurationpaths
(withthePCviaLANorviaUSBstick).
Inthedeliverycondition,theREX100hastheLANIPaddresssetting192.168.0.100
with the subnet mask 255.255.255.0. In order to reach the REX 100 through your
localLANconnection,thenetworksettingofyourPCmayneedtobeadjusted.To
thispurpose,openthepropertiesofyourLANconnectionandadjusttheIPV4ad-
dressandthesubnetofthecomputer(e.g.IP:192.168.0.99/SNM:255.255.255.0).
ThewebsitecanthenbereachedforsubsequentcongurationwiththeURL:
http://192.168.0.100.
Authenticateyourselfwiththeuser:helmholzandthepassword:router. The First
StartAssistantthenopens.
Note: Make sure that there are no address space confl icts with any other network
interfaces (do not assign the same IP address more than once) in order to be able to
communicate with the REX 100 unit properly.
Onlytheaccessdataofthemobilecommunicationsprovider(APN)andtheSIMcard
identicationnumbers(SIM-PIN)arerequiredforthemodemsettings.
Selectthefollowingsettingfromthelistofportalservers:"V2Europe".Thecode
forthesessionkeyisoptionalandisdenedduringsynchronization.Noentryis
requiredforinitialcommissioning.
Conrmwith"Next".
Thesettingsintheassistantarenowcomplete.Clickon"Apply".TheREX100saves
theentriesandyouarethenforwardedtothe"DeviceStatus"page(seechapter
5.2.4,page17).Theindividualconnectionstepsaredisplayedthereforinforma-
tional purposes. As soon as the REX 100 has successfully connected with the portal
throughtheInternet,itpicksupthecongurationstoredforitandactivatesit
automatically.

QuickStartGuideREX1003G|LTE 13
5.2.3 Synchronization of the portal confi guration
AssoonastheREX100hasloggedintoyouraccountintheportal,youcantransfer
retroactivechangestotheREX100atanytimewith"Synchronize".Wherethereis
anexistingportalconnection,theREX100checkscyclicallywhetherthereisanew
congurationavailableforitsserialnumberandthenloadsitautomatically.When,
forexample,youhaveeditedtheLANIPaddress,the "Devicecongurationis
notuptodate"symbolappearsnexttotheOnlineLED.
Clickheretoinitiatethesynchronization.Alternatively,thecorrespondingmenucan
alsobeopenedviathesymbol .
Thesynchronizationfunctionmustalwaysbeconrmedthroughthefollowing
dialog.Inthismenuyoucandeneadditionalsecurityaspectsasrequired.
Whenyougenerateauniquekeyforthedownloadhere,thismustbeenteredinthe
"FirstSetupAssistant"attheREX100websiteforpurposesofverication(page11,
chapter5.2.1).

QuickStartGuideREX1003G|LTE14
5.2.4 Device status and diagnostics page
The status page on the REX 100 router's web interface will show the router's connec-
tionstatusandactivecongurationdata.Tothispurpose,entertheLANIPaddressof
the REX 100 into the address bar of a browser. The REX 100 must be accessible to this
purpose,meaningthattheTCP/IPaddressofaPCmustbeinthesameIPsubnet.
Authenticateyourselfwiththestandarduser:helmholzandthepassword:router.
Togetmoreinformationoneachstepoftherouterconnection,clickonthe
Infoiconinthestatuselds.
Intheeventofirregularitiesorinterruptionswhenestablishingtheconnection,the
diagnosticspagesupportsyouwithtroubleshooting.Intheeventofanerror,the
technicalsupportofHelmholzrequirestherespectiveresultfromtheindividualand
autonomous test functions.

Quick Start Guide REX 100 3G|LTE
15
5.3 TransfercongurationviaalocalLANconnection
InordertotransferthecongurationfromaPCthroughalocalLANconnection,the
congurationPCmustallowfortwosimultaneousnetworkconnections:
1.ThePCmustbeactiveintheInternetwiththeshDIALUPsoftware
2.ThePCandtheREX100tobeconguredmustbeconnectedinthesamenetwork
viaLAN
Inpracticaltermsthisispossibleasfollows:
-PCwithtwonetworkadapters/Ethernetconnections
-Notebook with WLAN and Ethernet connection
-PC or notebook with additional switch at the workspace
LAN
1. Log in via shDIALUP
3. Search for REX 100 in the LAN
4. Transfer the configuration
2. Create/edit and download the
REX 100 configuration
LAN

QuickStartGuideREX1003G|LTE16
Procedure:
-ConnectthefreeLANportofyourPC(LANadapter)totheREX100unit'sLANport
with a standard CAT-5 patch cable.
-Selecttheoption"SubmittoDevice"intheREX100devicesettingsinthemy-
REX24-V2portal(shDIALUP)(page9,chapter5).
Themenuforthetransferfunctionopens(theWindowsrewallappearsattherst
start;allowaccesstothecorrespondingnetwork).Selecttheappropriatenetwork
adapterinthe"selectnetworkadapter"selectionmenu.
Thesearchstartswithabroadcastwith"scan".WhentheREX100withtheappropri-
ateserialnumberisfound,thetransfercanbestartedwith"go>>".
Afterthecongurationhasbeensuccessfullytransferred,theREX100automatically
carries out a restart and uses the new settings.
Inordertoleavethemenu,click"CANCEL".

QuickStartGuideREX1003G|LTE 17
6. Establishing a VPN connection to your REX 100
Note: The following steps presume that the REX router has already been con gured and
that you have successfully logged into your account with shDIALUP.
LoggedinREX100routersareshownidentiedwithagreencircleinthedashboard
view.TheVPNconnectionisestablishedbyclickingontheconnectionbutton .
Thenumberofactiveconnectionsisshowninthemenubar.
TheactiveconnectionstatuswiththeREX100isrepresentedwithanorangeLED.
Inordertoendtheconnectionofaremoteaccess,pleaseclicktheinthemeantime
yellowandanimatedconnectionbuttonandthenconrmthedisconnectionofthe
remote connection.
OnceaconnectiontotheREX100hasbeenestablished,alltheIPpacketsthatare
validfortheapplicableLANnetworkonthesystemsidewillbeforwarded.Further
parametersfortheVPN-IP/IPsubnetarealsoshowninthelowerstatusbarforinfor-
mational purposes.

Quick Start Guide REX 100 3G|LTE
18
7. Tips and tricks
7.1 Establishing of connection isn't working
Iftheconnectiontotheportaldoesnotworkonthersttry,pleaseinstallour
"shCHECK"testingtoolonaPC.Thisfreelyavailableprogramcheckswhetherthe
portsneededtosuccessfullyestablishaconnectiontothemyREX24portalhavebeen
approved.Thismeansthatthenetworkatthesystem(fromwhichaREX100router
withWANinterfacecreatestheconnectionwiththeInternet)canbechecked,ascan
thenetworkwiththePCsmeanttoconnectwiththeportalviathedial-insoftware
shDIALUP.
Background:
-shDIALUP and the REX 100 establish an outbound TCP connection with the address
v2.myrex24.net(5.39.123.21).
-InordertobeabletoestablishasecureconnectiontothemyREX24serverwith
shDIALUPorREX100,atleastoneofthefollowingTCPports(80,443,or1194)re-
quiredfortheVPNtunnelmustbeopen.Port80islockedintheexampleshownto
theright.However,theconnectionwiththemyREX24-V2servercanbeestablished
viaports443or1194.
PleaseclarifywhichsettingisrequiredinadvancewiththeresponsibleITdepartment
on site. You can adjust the port correspondingly in the VPN settings of the REX 100.
7.2 Deviceconguration:Services–HTTPS
Alternatively,youcanalsoviewthestatusofyourmachineswithadirectcall-upof
themyREX24-V2serverfromyourbrowser:https://v2.myREX24.netTheconnection
isHTTPS-secure.PleaseuseyourshDIALUPaccessdatatologin.MostmyREX24-V2
portalfunctionsarethenavailable.
Youcanonlycarryoutaremotemaintenanceconnection,theUSB/COM-over-IP
functionsandthe"SubmittoDevice"withtheshDIALUPclientsoftware.

Quick Start Guide REX 100 3G|LTE
19
7.3 GSMconnectionisinterrupted
IftheproviderforGSMremotemaintenanceinterruptstheconnectionofyourREX
100router,thismayhaveoccurredforthefollowingreasons,amongothers:
-Wrongusername/password,
-portsblockedbytheprovideror
-creditofprepaidSIMcardsusedup.
7.4 Deviceconguration:Services–NTPserver
ForpurposesoftimesynchronizationoftheREX100,thiscarriesoutacomparison
atregularintervals.Wherenecessary,youcanindividuallysetthepresetNTPserver
andtheinterval.

QuickStartGuideREX1003G|LTE20
8. Remote maintenance of Ethernet CPUs
Theintegrated4-portswitchissuitablefor100Mbpsandfullduplexoperationand
supportsauto-crossoverandauto-negotiation.NospecialPROFINETfunctionsare
supported.
Notes:
-Please note that the "P1“ LAN interface is started delayed for technical reasons in the
event of a device reset/switching on.
-When connecting additional Ethernet participants (PLC/panel) on the REX 100, it must
be ensured that the IP addresses of the devices lie within the address range of the LAN
interface of the REX 100.
Devicesettings:Services–FirewallSettings–SNAT
WithaREX100,theSNATfunctionisactivatedasadefault.Withthissetting,par-
ticipantsforwhichnogateway*/routerhasbeenenteredarereachedviatheVPN
tunnel.FortheCPUsandpanelsofsomemanufacturers,itcanbethecasethatyou
needtoexplicitlyenterthegateway*anddeactivatetheSNATfunctioninorderthat
aremoteconnectionwiththeenddeviceispossible.
*Gateway:ThisreferstotheLANIPaddressoftheREX100.
InordertoreachaPLCorapanelviatheVPNtunnel,theopenVPNadaptermustbe
selectedinthecorrespondingsoftwaremodulesastheinterface.Thevirtualnetwork
connection responsible for this is the TAP Windows¹ Adapter V9.
ThesettingtobeselectedinthePG/PCinterfacemodulefromtheSIMATICSTEP7²
software is emphasized in the detail to the right.