InHand IG601 User manual

1 / 92
IG601 Intelligent Gateway
User Manual
InHand Networks
www.inhandnetworks.com
Version: v2.4
September 2017
Copyright © 2016. All rights are reserved by InHand Networks and its licensors. Without the written
permission of the Company, no unit or individual is allowed to excerpt, reproduce or transmit in any
form part or all of the contents in the manual.

2 / 92
INHAND and InHand are trademarks of InHand Networks. The trademarks of other
companies, product logos and trade names in the manual are possessed by their respective owners.
The contents of this manual may be changed due to product version upgrade or other reasons. InHand
reserves the right to modify the contents of this manual without any notice or prompt. This manual is
only used as the guidance. InHand makes every effort to provide accurate information in this manual,
but InHand does not guarantee that there is no error in the manual. All statements, information and
recommendations in this manual do not constitute any express or implied warranty.

3 / 92
Preface
Welcome to the IG601 series industrial gateway user manual. This manual will guide you on how to
configure the IG601.
This preface includes the following contents:
Intended Users
Conventions in the Manual
Obtaining Documentation
Technical Support
Feedback
Intended Users
This manual is intended for the following users:
Network architects
On-site technical support
Network administrators
Any other network staff
Conventions in the Manual
To help guide the reader, the manual will use the following conventions.
Format
Description
< >
Content in angle brackets “< >” indicates a button name. For example, the <OK>
button.
“”
“” indicates a window name or menu name. For example, the pop-up window “New
User.”
>>
A multi-level menu is separated by the double brackets “ >>.” For example, the
multi-level menu File >> New >>Folder indicates the menu item [Folder] under the
sub-menu [New], which is under the menu [File].
Various Signs
The manual also uses a variety of eye-catching signs to indicate the places where special attention
should be paid. The significances of these signs are as follows:
Attention indicates something very important. Improper operation may
cause data loss or damage to the device.

4 / 92
Detailed description of certain features.
Obtaining Documentation
The latest product information is available on the InHand website, www.inhandnetworks.com .
Specific documentation can be found in these areas:
Support >> Technical Support: Product information on hardware installation, software upgrade,
configuration, manuals and more are available.
Products >> Industrial Intelligent >> IG601: An introduction to the Intelligent Gateway, along
with manuals, data sheets, a quick guide, and other support documentation. Other products can be
found by browsing through the products menu.
Support >> Software Download: Software updates, webinars and technical papers are available
for download.
Technical Support
InHand is invested in supporting our products with fast and reliable customer service. Feel free to email.
E-mail: [email protected]
Website: www.inhandnetworks.com
Feedback
If you have any comments or questions on your products, please send us feedback via email.
E-mail：[email protected]
Your feedback is vital to improving our products.

5 / 92
Contents
Preface................................................................................................................................................. 3
IG601 Introduction ............................................................................................................................ 7
1.1 Overview................................................................................................................................ 7
1.2 Product Features..................................................................................................................... 7
Login Gateway ................................................................................................................................... 9
2.1 Establish Network Connection................................................................................................ 9
2.1.1 Automatic acquisition of IP address.............................................................................. 9
2.1.2 Set a static IP address................................................................................................. 12
2.2 Test the network connection between the supervisory PC and InGateway. ............................ 13
2.3 Disconnect from the Proxy Server......................................................................................... 15
Web Configuration........................................................................................................................... 17
3.1 Login the Web Configuration Page of Gateway .................................................................... 18
3.2 System.................................................................................................................................. 19
3.2.1 Basic Setup................................................................................................................ 20
3.2.2 Time .......................................................................................................................... 20
3.2.3 Serial Port.................................................................................................................. 21
3.2.4 Admin Access ............................................................................................................ 22
3.2.5 System Log................................................................................................................ 25
3.2.6 Config Management................................................................................................... 26
3.2.7 System Upgrade......................................................................................................... 28
3.2.8 Reboot....................................................................................................................... 29
3.2.9 Logout....................................................................................................................... 29
3.3 Network ............................................................................................................................... 30
3.3.1 Dialup/Cellular Connection........................................................................................ 30
3.3.2 LAN .......................................................................................................................... 34
3.3.3 DNS........................................................................................................................... 35
3.3.4 DDNS........................................................................................................................ 36
3.3.5 Static Routes.............................................................................................................. 38
3.4 Service ................................................................................................................................. 39
3.4.1 DHCP Service............................................................................................................ 39
3.4.2 DNS Relay................................................................................................................. 40
3.4.3 VRRP: Virtual Router Redundancy Protocol.............................................................. 41
3.4.4 Device Manager......................................................................................................... 42
3.4.5 DTU .......................................................................................................................... 44
3.4.6 Modbus to SMS......................................................................................................... 46
3.4.7 SMS Alarm Rules ...................................................................................................... 48
3.4.8 Mbsms Variable Template.......................................................................................... 53
3.4.9 SMS........................................................................................................................... 53
3.5 Firewall................................................................................................................................ 54
3.5.1 Basic.......................................................................................................................... 54
3.5.2 Filtering..................................................................................................................... 55
3.5.3 Port Mapping............................................................................................................. 56
3.5.4 Virtual IP Mapping..................................................................................................... 57

6 / 92
3.5.5 DMZ (All Port Mapping)........................................................................................... 58
3.5.6 MAC-IP Bundling...................................................................................................... 59
3.6 QoS...................................................................................................................................... 60
3.6.1 Bandwidth Control..................................................................................................... 60
3.6.2 IP Bandwidth Limit.................................................................................................... 61
3.7 Tools .................................................................................................................................... 62
3.7.1 Ping ........................................................................................................................... 62
3.7.2 Trace Route................................................................................................................ 63
3.7.3 Link Speed Test ......................................................................................................... 64
3.8 Status ................................................................................................................................... 65
3.8.1 System....................................................................................................................... 65
3.8.2 Modem ...................................................................................................................... 66
3.8.3 Network Connections................................................................................................. 67
3.8.4 Route Table................................................................................................................ 68
3.8.5 Device List ................................................................................................................ 69
3.8.6 Modbus PLC.............................................................................................................. 69
3.8.7 Log............................................................................................................................ 69
3.9 VPN ..................................................................................................................................... 70
3.9.1 IPSec ......................................................................................................................... 71
3.9.2 GRE Tunnels ............................................................................................................. 74
3.9.3 L2TP Client ............................................................................................................... 75
3.9.4 PPTP Client ............................................................................................................... 76
3.9.5 OpenVPN .................................................................................................................. 77
3.9.6 Certificate Management............................................................................................. 79
4. Applications.................................................................................................................................. 81
Appendix I FAQ............................................................................................................................... 82
Appendix II Command Lines.......................................................................................................... 84
Appendix III Description of LED.................................................................................................... 91

7 / 92
IG601 Introduction
This chapter includes the following parts：
Overview
Product Features
1.1 Overview
The InGateway601 (IG601) combines 3G networks, intelligent protocol conversion, and VPN
technology to create a product designed for remote maintenance and management. The IG601 features
remote communication between the controller and data center, which provides an ingress (or gateway)
for the remote diagnosis and maintenance of the machines. The controller technicians can construct
large-scale networks for remote maintenance of equipment. The IG601 can also be employed as a
communication gateway for equipment to coordinate with each other.
With the IG601, technicians in the office can remotely program field PLCs, monitor variables and
receive alerts in real time. The IG601 supports both communications via the PLCs Ethernet port and
via the serial port. IG601 also supports status queries, PLC controls and alarm message via SMS. The
IG601 series utilizes the ubiquitous cellular network to the fullest and opens new horizons in remote
management and machine to machine communication.
1.2 Product Features
Designed for the Communication of Industrial Equipment
SMS Function：
SMS Alarm: users can receive timely alarm message when PLC exception occur in field.
SMS Check and Control: users can remotely monitor and control PLC.
PLC Collaboration: PLCs can communicate with each other via SMS, ensuring more PLCs
work collaboratively.
Remote Maintenance
Users can achieve PLC’s remote programming via secure channel (serial/Ethernet pot)
Remote Monitoring：

8 / 92
IG601 can check real-time operating status (variable) and send it to data center regularly
through 3G/2G network. Users can check PLC’s operation and alarm messages anywhere via
internet.
Industrial Design
In the aspects of EMC, anti-static grade, anti-surge level and wide temperature range, IG601
meet the requirements of industrial and operate easily under harsh environments.
Metal enclosure. IP30.
All EMC grade reach level 3.
Ethernet port supports 1.5kv isolation transformer protection
Serial port support 15kv ESD protection.
Wide temperature range: -30℃~70℃.
Wide voltage range: DC: 12-24V.
Complete Security
Data Transmission Security
InGateway 601 uses encrypted channel to communicate with remote controller, enabling the
process of updating PLC program enjoys high level of encryption, which is comparable to
that of the financial industry.
Network Protection Security
With powerful firewall features, InGateway601 supports SPI State Inspection, Secure Shell
(SSH), Intrusion Protection, DDoS Defense, Attack Defense, IP-MAC binding, etc, protecting
the equipment against external network attack.
Equipment Management Security
Multi-level authorization security mechanism realizes centralized authentication and authorization
management of equipment.

9 / 92
Login Gateway
This chapter covers the following:
Establish Network Connection
Test the connection between supervisory PC and InGateway
Cancel the Proxy Server
2.1 Establish Network Connection
2.1.1 Automatic acquisition of IP address
Please set the supervisory PC to “automatic acquisition of IP address”and “automatic acquisition of
DNS server address,”which is the default configuration of Windows. This way, the InGateway
automatically assign an IP address to the supervisory PC using DHCP.
Open “Control Panel”, double click “Network and Internet” icon, and enter “Network and Sharing
Centers”
Click the button <Local Connection> to enter the window “Local Connection Status”

10 / 92
Click <Properties> to enter the window “Local Connection Properties”, as shown below.

11 / 92
Select “Internet Protocol Version 4 (TCP/IPv4).” Click <Properties> to enter “Internet
Protocol Version 4(TCP/IPv4) Properties.” Select “Obtain an IP address automatically”
and “Obtain DNS Server address automatically,”then click <OK> to complete the process,
as shown below.

12 / 92
2.1.2 Set a static IP address
Please set the supervisory PC’s IP address in the same subnet as the gateway FE (or fast Ethernet) port.
In this example, the default IP address of gateway FE port is 192.168.2.1, and the subnet mask is
255.255.255.0. Enter the “Internet Protocol Version 4 (TCP/IPv4) Properties” window. Then,
select “Use the following IP address”, type the IP address (arbitrary value between 192.168.2.2 -
192.168.2.254), subnet mask (255.255.255.0), and default gateway (192.168.2.1) into the text boxes.
Finally, click <OK> to finish setting a static IP, as shown below.

13 / 92
2.2 Test the network connection between the supervisory PC and
InGateway.
1) Click the button <Start> at the lower left corner. Type “cmd” into the field, and run cmd.exe.
批注 [Unknown A1]: More inconsistent font.

14 / 92
2) Enter “ping 192.168.2.1” and click the <OK> button. (192.168.2.1 is the default IP address of the
InGateway). If the connection is good, you will see four returned packets. If there is no response,
be sure to check your connection and your supervisory PC's network settings.

15 / 92
2.3 Disconnect from the Proxy Server.
If the supervisory PC uses a proxy server to access the Internet, it is necessary to disconnect from the
proxy and remove any proxy settings. The operating steps are as follows:
Open Internet Explorer.
Select Tools>>Internet Options to enter the window “Internet Options”.

16 / 92
Select the tab “Connect” and click the button <LAN Setting(L)> to enter the window “LAN
Setting.” If the option “Use a Proxy Server for LAN” is checked, uncheck it. Click the <OK>
button and continue to the web configuration section of the manual.

17 / 92
Web Configuration
This chapter covers the following contents:
批注 [Unknown A2]: This section seems like it has been
localized already. It only needed light editing.

18 / 92
Logging in the Browser Interface
System
Network
Service
Firewall
QoS
Tools
Status
3.1 Login the Web Configuration Page of Gateway
Run the Web browser, enter “http://192.168.2.1” in the address bar, and press Enter to skip to the Web
login page, as shown below. Enter the “User Name” (default: adm) and “Password” (default: 123456).
Click button <Login> or directly press Enter to enter the Web configuration page, as shown below.

19 / 92
Click <Sync Time> to synchronize the gateway's clock with the system time of the host.
For security, it is highly recommended that you modify the default password after
your first login. Store the password information in a secure location.
3.2 System
The system configuration process involves nine steps:
•Basic Setup
•Time
•Serial Port
•Admin Access
•System Log
•Configuration Management
•Update
•Reboot
•Logout

20 / 92
3.2.1 Basic Setup
From the navigation panel, select System >> Basic Setup, then enter the “Basic Setup” page, as
shown below.
Page description is shown below:
Parameters
Description
Default
Language
Select the language of configuration
page
English
Hostname
Set the name of InGateway
Gateway
3.2.2 Time
In order to ensure the coordination of the gateway and other devices, users need to set the system time
and time zone correctly. From the navigation panel, select System >> Time then enter the “Time”
webpage, as shown below. Click <Sync Time> to synchronize the time of the gateway with the system
time of the host.
批注 [Unknown A3]: This is inconsistent with the
previous part of the document, but it actually is much
cleaner looking.