HY-LINE hy-443p User manual

HY-LINE truecon Router Manual
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 1

HY-LINE truecon Router Manual
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 2
Copyright 2014 Manua release R1.9.2b English – 21. June 2016
All rights reserved for this documentation. Along with that all photographs and electronic media are the sole propert of HY-
LINE S stems.
T
Te ec ch hn ni ic ca a M Mo od di if fi ic ca at ti io on ns s
The compan HY-LINE S stems reserves the right to make changes to the illustrations and information in this documentation
without previous announcement. This documentation was created with utmost care and is regularl revised. In spite of all
control measures taken it can not be ruled out that technical inaccuracies and t pographical errors might have occurred. All
errors known to us are eliminated in the next edition. We are alwa s grateful for information regarding errors in this
documentation.
S
Su up pp po or rt t
Our technical support pages are on our website www.h -line.de. New manuals and data sheets are also available there. FAQ
pages are also available on our website. If ou have further questions please direct them at s stems@h -line.de
C
Ca ar re e a an nd d M Ma ai in nt te en na an nc ce e
Onl clean the case with a dr towel, do not use water or an other cleaning agents. Never use a spra can or bottle on the
device.
S
Sa af fe et ty y
Never open the router while it’s connected to a power outlet. Take the power socket out before opening the case. Danger
possibilit of electric shock.
R
Re ec cy yc c i in ng g W WE EE EE E
IBM PC, AT, XT is trademark from International Business Machine Corporation.
Windows™ is trademark from Microsoft Corporation.
Java is trademark from Oracle Corporation.
Linux is trademark from Linus Torvalds.
Errors and omissions excepted.
S
Se er rv vi ic ce e a ad dd dr re es ss se es s, , d de e i iv ve er ri ie es s a an nd d r re ep p a ac ce em me en nt ts s: :
HY-LINE Systems GmbH
Inselkammerstr. 10
82008 Unterhaching
German
Phone [phone]
Fax [phone]
E-Mail s stems@h -line.de
Internet: www.h -line.de/s stems
M2M-Router: www.h -line.de/router

HY-LINE truecon Router Manual
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 3
D
Di ir re ec ct to or ry y
Product description 4
Safet & Regulations 5
Router Variations 7
Operating elements 8
Quick start 9
Software reset (factor defaults ) 10
Configuration - Home 11
Base Settings
Identification 14
Network 16
Date & Time 18
Connection Settings
Phone Settings 19
Internet Settings 20
Dial-In / Call back 22
E-Mail 24
I/O-Settings Input / Output 26
Firewall 28
NAT 29
Services – Status 32
DHCP/DNS Server 33
D nDNS 34
InetWD + Redundanc 35
NTPd 39
Ser2TCP 40
SNMP 41
SShd _ 42
S slogd 43
FTP Server 43
UDP-Broadcast 44
Webserver 45
VPN 47
VPN-PPTP Server 48
VPN-PPTP Client 49
VPN-OpenVPN Server 53
VPN-OpenVPN Client 56
VPN-IPsec 57
Advanced
Command line interface 63
S stem settings / Update 66
Logging 67
Network tracer 68
User Management 70
Technical specifications 71
with integr. Switch 72
Dimensions 73
Analog modem countr code 74

HY-LINE truecon Router Handbuch
HY
-
Lstems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 4
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems@h -line.de www.h -line.de/s stems Seite 4
Product description
M2M Industria Router with modem, VPN and Firewa
The M2M-Industrial router is a simple, secure and global communications solution that will
connect ou to our s stems and machines where ever ou are! Connections to our s stems
and machines are made through the integrated firewall, VPN and automated call center. The
compact design, with standard European Top Hat Rail connection for eas mounting, as well
as the possibilit to establish all connections (Analog, ISDN, GSM/GPRS/UMTS, LTE, DSL) in
one device, are what make this the leading industrial router on the market.
The router has an RS232 port as well as the standard Ethernet connection. On the protocol
side the router is capable of SNMP, D nDNS, NTP and DHCP. Configurable alarms can be
sent via E-Mail. The digital inputs and outputs offer additional control and alarm possibilities.
Ever router has an internal HTML web server with complete configuration software. Access,
configuration and maintenance are eas and secure with a standard web browser. Installation
of 3rd part software is not necessar or recommended.
Order-numbers: see current product ist

HY-LINE truecon Router Handbuch
HY
-
Lstems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 5
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems@h -line.de www.h -line.de/s stems Seite 5
Qua ification of personne
This manual is onl for trained personnel familiar with the applicable norms and standards. The specialist must have read and
understood this documentation and follow the instructions.
Safety regu ations
The responsible staff must ensure that the application or use of the product described fulfill all safet requirements, including
an applicable laws, regulations, guidelines and rules.
De ivered
The product is delivered according to the application and internal modem in particular hardware and firmware
configurations. Changes to hardware or software configurations which are not described in this manual are not allowed and
nullif the liabilit of the HY-LINE S stems GmbH
The product is made according to current state of the art technical and reliable in operation and left the factor in
safet condition state.
To maintain this condition over the period of operation, the information in the manual and applicable product change
notification should take care of.
Ob igation of di igence
The operator must ensure that
• The product is used as intended.
• the product is operated working condition.
• Onl suitabl qualified and authorized personnel operate the product.
• the personnel is instructed regularl about relevant occupational safet and environmental protection,
as well as the manual and especiall the safet notes contained herein.
The operator must strictl observe the applicable national regulations concerning operation, functional testing,
repair and maintenance of electronic equipment note.
Intended Use
The product is onl allowed to use within the specified information from this document and documents referred to. The product
must not be used for the following purposes and under these conditions or operated: control of machines and equipment that
are not of the Directive 2006/42/EC and Directive 2004/108/EC (EMC - Directive).
It is recommended to use the following power suppl with the HY-LINE router because all EMC tests were performed with this
power suppl :
- HAP-RUx - UMTS Router Versionen: 12W AC adapter Minwa MC120D050 with ferrite Würth 74270077
- all other router versions: Power suppl PHI-CON: PS18A120
12W AC adapter Minwa MC120D050 with ferrite Würth 74270077
Read carefull this documentation before installation and commissioning. Incorrect handling of the product
ma result in personal injur or propert damage.
Technica Limits
The product is for use onl within the specified limits which are in the data sheets determined.
Following limiting values are set:
• The ambient temperature must not be exceeded or below.
• The specified suppl voltage must not be exceeded or below.
• Humidit must not be exceeded, and condensation should be avoided.
• The maximum switching voltage, and maximum switching current must not be exceeded.
• The maximum input voltage, and the maximum input current must not be exceeded.

HY-LINE truecon Router Handbuch
HY
-
Lstems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 6
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems@h -line.de www.h -line.de/s stems Seite 6
Warranty provision
The product is maintenance free. Opening the case will void the warrant . Repairs should be performed onl b authorized
personnel.
An improper use, disregarding of this documentation, the use of insufficientl qualified personnel as well as unauthorized
changes exclude the liabilit of the manufacturer for an resulting damage.
Notes for transport and storage
Please avoid environmental conditions for storage like: mechanical stress, temperature, moisture, corrosive atmospheres.
The product is packaged so that it is protected against shocks during transport and storage.
Please check the product for possible damage that might be caused b improper transport or improper handling before
installation.
E ectrica insta ation safety
Installation must be in accordance with appropriate tools and documentation. The assembl of the product ma onl occur with
switched off power suppl . When wiring the cabinet must be secured against being switched on again. National accident
prevention regulations must be observed. The electrical installation is in accordance with national regulations done (wire
colors, cross sections, fuses, PE connection, etc.) Electrical work must made b authorized personnel. Observe the electrical
connection information in the documentation, otherwise the electrical protection can be affected.
Disposa
The product in its deliver consists of different materials:
The individual components must be disposed of properl . All components of the deliver can be returned to
HY-LINE s stem for proper disposal. Transport costs will be paid b the sender.
De ivery
The scope of suppl for the HY-LINE router includes the accessories listed below. Please check that all accessories are
included in the box. If an thing is missing or damaged, please contact our distributor.
1 HY-LINE router (basic t pes)
1 Quick Installation Guide
1 GSM antenna with magnetic base (optional for different Router package versions)
Further documents for the HY-LINE routers are available at: www.h -line.de/router
Licences
The software included in this product contains cop righted software that is licensed under the GPL or other Free Licenses. You
ma obtain the complete corresponding source code from us at cost price for a period of three ears after our last shipment of
this product. Please contact under topic: 'Source code for truecon router': HY-LINE S stems GmbH, Inselkammerstr. 10,
82008 Unterhaching, German . E-Mail: s stems@h -line.de This offer is valid to an one in receipt of this information.

HY-LINE truecon Router Handbuch
HY
-
Lstems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 7
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems@h -line.de www.h -line.de/s stems Seite 7
H
HY Y- -L LI IN NE E R Ro ou ut te er r p pr ro od du uc ct t v va ar ri ia at ti io on ns s
• Ana og: HAP-RA
• with integr. Switch (4x LAN): HAP-RAS
• ISDN: HAP-Ri
• with integr. Switch (4x LAN): HAP-RiS
• UMTS : HAP-RU
• with integr. Switch (4x LAN): HAP-RUS
• DSL : HAP-RDS / HAP-RDSH
• with integr. Switch (4x LAN):
• HAP-R – without integr. Modem
• with integr. Switch (4x LAN): HAP-RS
• LTE : HAP-RL
• with integr. Switch (4x LAN): HAP-RLS

HY-LINE truecon Router Handbuch
HY
-
Lstems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 8
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems@h -line.de www.h -line.de/s stems Seite 8
O
Op pe er ra at ti in ng g e e e em me en nt ts s
Power (10-30VDC)
Digita I/Os
(Screw termina ,
removab e)
Antenna 2 -- SMA:
GSM/UMTS
(optiona )
Antenna 1 -- FME:
GSM/UMTS
Seria RS232 –
SUB-D 9 PIN
ISDN/DSL RJ45
Ana og RJ11Ana og RJ11
Network RJ45
Mounting: Din Rai Mount
SIM-Card S ot
integr. 4--port Switch
HAP-R
HAP-RI
HAP-RA
HAP-RG
HAP-RU
HAP-RL
HAP-RS
HAP-RIS
HAP-RAS
HAP-RGS
HAP-RUS
HAP-RLS
HAP-RDS
integr. 4--port Switch
-> For better shie ding (EMC reason) p ease connect antenna connector (1 and 2) with connector PE. The PE
connector shou d be connected to earth/ground eve e.g. from cabinet.
C
Co on nn ne ec ct to or r a ay yo ou ut t: :
Antenna 1: Main Antenna (use this connector if onl one antenna is connected)
Antenna 2: RX-Diversit /MIMO for 3G/4G (Router automaticall recognize Antenna 2)
I
Im mp po or rt ta an nt t: : t th he e n ne et tw wo or rk k R RJ J4 45 5 s so oc ck ke et t o on n t th he e s si id de e o of f t th he e r ro ou ut te er r i is s n no ot t c co on nn ne ec ct te ed d a at t r ro ou ut te er r v ve er rs si io on ns s w wi it th h i in nt te eg gr ra at te ed d
s
sw wi it tc ch h a an nd d m mu us st t n no ot t b be e u us se ed d . . T Th hi is s s so oc ck ke et t i is s s se ea al le ed d i in n f fa ac ct to or r d de ef fa au ul lt t b b a a p pl lu ug g. . T Th hi is s p pl lu ug g m mu us st t n no ot t b be e r re em mo ov ve ed d. .
Router Version
Connector – ISDN/DSL
Connector – Ana og
LTE/UMTS/GPRS - HAP-RU/RUS
Not used Not used
DSL - HAP-RDS
used (Pin 4/5 – DSL A/B) Not used
Ana og - HAP-RA/RAS
Not used used (Pin 3/4 – TX/RX)
ISDN - HAP-RI/RIS
used
(Pin 3/4/5/6 – TX+/TX-/RX+/RX-) Not used
Without interna modem - HAP-R/RS
Not used Not used

HY-LINE truecon Router Handbuch
HY
-
Lstems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 9
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems@h -line.de www.h -line.de/s stems Seite 9
Quick start
Access to the router through a web browser:
http://192.168.101.222/ or https://192.168.101.222/
Administration access:
ogin: manager password: changemetoo (Password can be changed through this account)
Visitors access:
ogin: user password: changeme (Password can onl be changed through the administrators account)
Access to the router through SSH-Secure She (TCP/IP):
ogin: root password: changemetoo Settings SSH (TCP/IP): Host-Name or IP-Address: Router-IP Port: 22
Note: After first time power-up the router initializes his SSH-Ke s. This process takes about 15 minutes after that the router
will be reachable through SSH.
Access to router over seria :
ogin: root password: changemetoo Settings for seria connection: 38.400 bps // 8 bits // no parit // 1 Stop bits //
no flow control
IP-Address changes over SSH or seria conso e zero modem cab e):
Login over SSH or serial as described above, Execute the following commands:
a. ip address xxx.xxx.xxx.xxx netmask xxx.xxx.xxx.xxx device eth0
b. commit ch
c. write disk
Insta ation of the SIM card with a GSM/GPRS/UMTS/LTE-Router:
Insert the SIM-Card inside the SIM-card holder with the Chip side (gold) pointing to the printed side of the router case. The
SIM card must snap in the SIM card holder.
Internet watchdog service: Don’t enable this service until router is read to access internet connections
Down oad Router Handbook & Firmware: www.hy- ine.de/router
Firmware update: Please contact our support team: s stems@h -line.de
Attention: Do not install s stem.conf files from older firmware version to newer firmware versions or vice versa.

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 10
S
So of ft tw wa ar re e r re es se et t
Factory defau t for a settings
1. Disconnect power from the router
2. Set Jumper 3 (see picture) to on position
3. Power up router, wait for flashing LEDs (approx. 2 Min.)
4. Disconnect power from the router
5. Set Jumper 3 (see picture) to off position
6. Power up router, factor default set
Important: Power down Router be ore changing the jumper positions!

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 11
C
Co on nf fi ig gu ur ra at ti io on n - - H Ho om me e: :
The start page holds a general oversight of the router; Firmware version, S stem updates, serial
number, modem t pe, band t pe, gsm signal strength, router uptime, PPP-Data Counter (max. 2GB)
as well as the status of the digital inputs and outputs

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 12
C
Co on nf fi ig gu ur ra at ti io on n - - H Ho om me e: :
 Interna modem 1: analog, isdn, gsm, umts, dsl, lte, none (without modem)
 Signa strength: Error no signal, check antenna and/or SIM-Card and SIM-PIN
Bad -113 ... -112 dBm
Low -111 ... – 90 dBm
Good - 89 ... – 56 dBm
Ver good > -55 dBm
 Active band: lte
Umts / WCDMA2100
gsm1800 (gprs-1800 MHz Band)
gsm900 (gprs-900 MHz Band)
no service (no signal, check antenna and/or SIM-Card and SIM-PIN)
 Connectivity status: While the router is online it will show the assigned IP address form the service
provider (WAN interface). In Online mode ou will see the status of the internet connection:
 WAN Traffic Counter: Traffic counter Internet und PPP-Traffic, max. 2.147.483.648 B tes
 Reset-Taste: Reset traffic counter

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 13
K
Ko on nf fi ig gu ur ra at ti io on n - - H Ho om me e: :
 DNS Servers: active DNS server
 Defau t Gateway: active gatewa (further information on page 16 – LAN settings)
 Internet Connectivity: Pressing the button send a ping to a host or ip-address configured in
../Services/InetWD. On demand router will be triggered to establish an internet connection
 Refresh-button: resend ping
 Home-button: back to home menu
 Reboot-button: Router (software) reboot
 Redundancy mode: On/Off – Active/Inactive

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 14
B
Ba as se e S Se et tt ti in ng gs s - - I Id de en nt ti i i ic ca at ti io on n: :
 Router name: Name of router, max. 35 letters characters, name is attached to send E-Mails
 Location: Location of the router (for informational purposes onl )
 Manager: E-Mail Address of the s stem manager (Recipient of the d namic IP address, once
the router is connected to the internet)

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 15
B
Ba as se e S Se et tt ti in ng gs s - - N Ne et tw wo or rk k: :

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 16
B
Ba as se e S Se et tt ti in ng gs s - - N Ne et tw wo or rk k: :
Configure LAN network parameter. Interfaces are: eth0, eth0:1 und eth0:2. The :x are virtual
interfaces mapped to eth0. With this settings it is possible to have more then one subnet on the
ph sical interface of the router. Subnets on the ethernet interface of the router are not isolated against
each other.
 LAN 0 – LAN 2:
Loca IP-Adresse / Network mask: Parameter for each individual interface (Multirouting)
 Systemwide Network Settings:
DNS Server: Network DNS Server Address (Default is public DNS Server from Arcor)
Gateway: Network Gatewa Address
Activate network changes: check to enable settings after pressing SAVE button immediatel
 Configuration Mu ti-LAN:
- DHCP works onl with interface LAN2 (eth0:2)
- DHCP Client receives IP address, subnet mask, DNS server and default gatewa .
 Externa gateway for data communications (Router: no interna modem or not active)
- Service: Deactivate Internet-Dial-Up in Service menu ../Services/
- Appl following settings if HY-LINE Router is using an external gatewa on WAN side
DHCP-Server inactive in externa gateway subnet (WAN):
LAN 0: Network/subnet Gatewa side (WAN)
LAN 2: Network/subnet HY-LINE Router
Gateway (systemwide): Network/Subnet Gatewa side (WAN)
DHCP-Server active in ext. gateway subnet:
LAN 0: Network/subnet HY-LINE Router
LAN 2: Network/subnet Gatewa side (WAN - DHCP active)
Gateway (systemwide): Network/subnet Gatewa side (WAN)

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 17
B
Ba as se e S Se et tt ti in ng gs s - - N Ne et tw wo or rk k: :
 continue: externa gateway for data communications
A ow: In- and outgoing data traffic over externa WAN gateway
Service Menu Firewa :
 Masquerade srcnet: activate to allow TCP/IP packets to send over standard gatewa (no modem
gatewa )
 Source net: network ip-mask of outgoing traffic
Example: 172.1.2.0/8 - 255.0.0.0
172.1.0.0/16 - 255.255.0.0
172.0.0.0/24 - 255..255.255.0
Ipv4 network adresses and netmasks
(Source: Wikipedia: http://de.wikipedia.org/wiki/Netzmaske)
Examp e:

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 18
B
Ba as se e S Se et tt ti in ng gs s - - D Da at te e & & T Ti im me e: :
 Date, Time: Date and time of the router
 Timezone: Timezone in which the router is (Please be aware that the summer and winter time
will be automaticall switched onl in German . Settings: Berlin)
 Time-Server: Time server, standard: ptbtime1.ptb.de: ptbtime1.ptb.de
 Manua app y: for manual adjustment of the time and date
 Network sync.: Time and date will be s nchronized after pressing SAVE over
the internet (The router will dial in to the internet)

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 19
C
Co on nn ne ec ct ti iv vi it ty y S Se et tt ti in ng gs s – – M Mo od de em m S Se et tt ti in ng gs s: :
 MSN/Mobi e number:
Telephone number of the router: onl important when it is an ISDN connection: the
MSN must be included here. Die MSN (Multiple subscriber Number) is either the
dialling number without area code or onl the extension number. This is
dependent on the setup of the telephone s stem.
 GSM band: Set GSM Band manuall . Option: 0=auto; 5=gprs; 8=umts; 9=lte
 SIM-PIN: Enable PIN is onl for use with a SIM card in order to log in to the network -> do
not enable for use with analog or ISDN connections!
 PIN: PIN number of the GSM/GPRS SIM card
 PIN verify: Re-enter the SIMS PIN number

HY-LINE truecon Router Handbuch
HY
-
LINE Systems GmbH
Inselkammerstr. 10 82008 Unterhaching s stems(at)h -line.de www.h -line.de/s stems Seite 20
C
Co on nn ne ec ct ti iv vi it ty y S Se et tt ti in ng gs s – – I In nt te er rn ne et t S Se et tt ti in ng gs s: :