InHand IR611-S User manual

IR611-S Industrial Router
User Manual
InHand Networks
www.inhandnetworks.com
Version: v1.2
December 2016
FCC ID: 2AANYIR611S
IC: 11594A-IR611S / IC: 11594A à IR611S

1
Disclaimers
The content in this manual is subject to change without notice. This manual is only used as the
guidance. InHand makes every effort to provide accurate information in this manual, but InHand
does not guarantee that there is no error in the manual. All statements, information and
recommendations in this manual do not constitute any expressed or implied warranty.
Trademarks and Copyright
INHAND, InHand and the InHand logo are trademarks of InHand Networks. The trademarks of
other companies, product logos and trade names in the manual are possessed by their respective
owners.
© 2016 InHand Networks. All rights reserved.
Technical Support
For technical support, please contact:
Tel: [phone] (USA)
E-mail: [e-mail]

2
Preface
This user manual will guide you on installing and configuring InHand IR6XX-S industrial router.
Audience
This manual is for:
Network Planner
Field technical support
Network administrators
Conventions
This manual uses the following conventions:
Conventions
Indication
<>
Content in angle brackets “<>” indicates a button name. For example, the <OK>
button.
“”
“” indicates a window name or menu name. For example, the pop-up window
“New User.”
>>
A multi-level menu is separated by the double brackets “>>.” For example, the
multi-level menu File >> New >>Folder indicates the menu item [Folder] under
the sub-menu [New], which is under the menu [File].
Means reader be careful. Improper action may result in loss of data or device damage.
Notes contain detailed descriptions and helpful suggestions.

3
Contents
PREFACE....................................................................................................................................................2
AUDIENCE................................................................................................................................................2
CONVENTIONS ..........................................................................................................................................2
CONTENTS ................................................................................................................................................1
I. INROUTER6XX-S INTRODUCTION ..............................................................................................................1
1.1 Overview ....................................................................................................................................1
1.2 Packing List.................................................................................................................................1
1.2.1 Applicable to IR611-S series ................................................................................................................1
1.2.2 Applicable to IR615-S series ................................................................................................................2
1.3 Panel Introduction......................................................................................................................2
1.3.1 Applicable to IR611-S Series................................................................................................................2
1.3.2 Applicable to IR6X5-S Series................................................................................................................2
1. 4 Introductions to Status LED.......................................................................................................3
1.4.1 Applicable to IR611-S series ................................................................................................................3
1.4.2 Applicable to IR615-S series ................................................................................................................3
II. INSTALLATION .....................................................................................................................................4
2.1 Installation of Device..................................................................................................................4
2.2 Installation of SIM/UIM Card......................................................................................................5
2.3 Installation of Antenna...............................................................................................................5
2.4 Installation of Protective Grounding ..........................................................................................6
2.5 Installation of Power Supply.......................................................................................................6
2.6 Login Router ...............................................................................................................................6
III. WEB CONFIGURATION ...........................................................................................................................7
3. 1 System .......................................................................................................................................7
3.1.1 Basic Setup ..........................................................................................................................................8
3.1.2 System Time ........................................................................................................................................8
3.1.3 Serial Port............................................................................................................................................9

4
3.1.4 Admin Access ......................................................................................................................................9
3.1.5 System Log ........................................................................................................................................11
3.1.6 Configuration Management ..............................................................................................................12
3.1.7 Task Schedule ....................................................................................................................................12
3.1.8 System Upgrading .............................................................................................................................13
3.1.9 Reboot...............................................................................................................................................13
3.1.10 Logout .............................................................................................................................................13
3. 2 Network...................................................................................................................................14
3.2.1 Dialup/Cellular Connection ...............................................................................................................14
3.2.2 WAN (Only Applicable to IR615-S Series) ..........................................................................................15
3.2.3 Link Backup .......................................................................................................................................18
3.2.4 LAN....................................................................................................................................................18
3.2.5 Switch of WLAN Mode ......................................................................................................................19
3.2.6 WLAN Client (AP Mode) ....................................................................................................................19
3.2.7 WLAN Client (STA Mode)...................................................................................................................20
3.2.8 DNS....................................................................................................................................................21
3.2.9 Dynamic Domain Name.....................................................................................................................21
3.2.10 Static Route .....................................................................................................................................22
3.3 Service......................................................................................................................................23
3.3.1 DHCP service .....................................................................................................................................23
3.3.2 DNS Relay ..........................................................................................................................................24
3.3.3 VRRP: Virtual Router Redundancy Protocol ......................................................................................25
3.3.4 Device Manager ................................................................................................................................26
3.3.5 DTU ...................................................................................................................................................27
3.3.6 SMS ...................................................................................................................................................28
3.4 Firewall.....................................................................................................................................28
3.4.1 Basic Setup ........................................................................................................................................29
3.4.2 Access Control (ACL)..........................................................................................................................29
3.4.3 Filtering .............................................................................................................................................30
3.4.4 Port Mapping ....................................................................................................................................30

5
3.4.5 Virtual IP Mapping.............................................................................................................................31
3.4.6 DMZ...................................................................................................................................................31
3.4.7 MAC-IP Binding .................................................................................................................................32
3.5 QoS...........................................................................................................................................32
3.5.1 Bandwidth Control ............................................................................................................................32
3.5.2 IP Bandwidth Limit ............................................................................................................................33
3.6 VPN...........................................................................................................................................33
3.6.1 IPSec Settings ....................................................................................................................................34
3.6.2 IPSec Tunnels.....................................................................................................................................35
3.6.3 GRE Tunnels.......................................................................................................................................37
3.6.4 L2TP Client.........................................................................................................................................39
3.6.5 PPTP Client ........................................................................................................................................41
3.6.6 OpenVPN...........................................................................................................................................41
3.6.7 OpenVPN Advanced ..........................................................................................................................43
3.6.8 Certificate Management ...................................................................................................................43
3.7 Tools .........................................................................................................................................44
3.7.1PING Detection...................................................................................................................................44
3.7.2Traceroute..........................................................................................................................................44
3.7.3 Link Speed Test..................................................................................................................................45
3.8 Status........................................................................................................................................45
3.8.1 System...............................................................................................................................................45
3.8.2 Modem..............................................................................................................................................45
3.8.3 Network Connections........................................................................................................................46
3.8.4 Route Table........................................................................................................................................46
3.8.5 Device List .........................................................................................................................................46
3.8.6 Log.....................................................................................................................................................46
APPENDIX A FAQ.....................................................................................................................................47
APPENDIX B INSTRUCTION OF COMMAND LINE....................................................................................49

1
Contents
I. InRouter6XX-S Introduction
1.1 Overview
Integrating 3G, 4G LTE and advanced security, the InRouterXX-S (referred to as “IR6XX-S”
thereinafter) series is the next generation of InRouter695 cellular router. With embedded
hardware watchdog, link detection, auto-recovery and auto-reboot, the InRouterIR6XX-S series
provides reliable communications to unattended sites. Reliable VPN technology secures sensitive
data. The IR6XX-S also utilizes remote management tools such as a CLI, a web interface and
InHand Device Manager Cloud platform for batch configuration and monitoring.
IR6XX-S series is ideal for large-scale Internet of Things (IoT) applications including kiosks,
vending machines, medical equipment and industrial control systems.
1.2 Packing List
1.2.1 Applicable to IR611-S series
Standard Accessories
Accessories
Quantity
Description
IR611-S
1
IR611-S series industrial router
Power Adapter
1
12VDC power adapter
Cable
1
1. 5m cable
Optional Accessories
Accessories
Quantity
Description
3G/4G antenna
1/2
3G/4G antenna (for 3G/4G models), 2 for VH09,
FS18 and FS28 models, 1 for others
Wi-Fi antenna
2
Dual Wi-Fi antennas (for Wi-Fi models)
Hanger mounting accessory
1
To fix device

2
1.2.2 Applicable to IR615-S series
Standard Accessories
Accessories
Quantity
Description
IR615-S
1
IR615-S series industrial router
DIN rail
1
DIN35 rail
Power Terminal
1
7PIN 3.81mm industrial terminal
Cable
1
1. 5m cable
Optional Accessories
Accessories
Quantity
Description
Power Adapter
1
12VDC power adapter
3G/4G antenna
1/2
3G/4G antenna (for 3G/4G models), 2 for hardware
version 40214, 60214 and 60625, 1 for others
Wi-Fi antenna
2
Dual Wi-Fi antennas (for Wi-Fi models)
Hanger mounting or
wall-mounting accessories
1
To fix device
1.3 Panel Introduction
1.3.1 Applicable to IR611-S Series
1.3.2 Applicable to IR6X5-S Series

3
IR6XX-S series has a variety of panel appearances, but all of the installation methods are the
same. The specific panel condition should be subject to the real object.
1. 4 Introductions to Status LED
1.4.1 Applicable to IR611-S series
POWER
STATUS
WARN
ERROR
LINK
Description
(Red)
(Green)
(Yellow)
(Red)
(Yellow)
On
Off
Off
Off
On
Powered On
On
Blinking
On
Off
Blinking
Powered on succeed
On
Blinking
On
Off
Blinking
Dialing
On
Blinking
Off
Off
Blinking
Dialing succeed
On
Blinking
Blinking
Blinking
Blinking
Upgrading
On
Blinking
On
Blinking
On
Reset Succeed
Signal status LED and description:
Green LED 1
Green LED 2
Green LED 3
Description
Off
Off
Off
No signal detected
On
Off
Off
Signal strength 1-9 (Signal strength is weak,
please check antenna and the signal strength of
current location)
On
On
Off
Signal strength 10-19 (signal strength is basically
normal, and equipment can be used under
normal conditions)
On
On
On
Signal strength 20-31 (signal strong)
WLAN LED and description:
WLAN Green LED
Description
On
Enable WLAN
Off
Disable WLAN
Blinking
Reset Succeed
1.4.2 Applicable to IR615-S series
POWER
STATUS
WARN
ERROR
Description

4
(Red)
(Green)
(Yellow)
(Red)
On
Off
Off
Off
Powered On
On
Blinking
On
Off
Powered on succeed
On
Blinking
On
Off
Dialing
On
Blinking
Off
Off
Dialing succeed
On
Blinking
Blinking
Blinking
Upgrading
On
Blinking
On
Blinking
Reset Succeed
Signal status LED and description:
Green LED 1
Green LED 2
Green LED 3
Description
Off
Off
Off
No signal detected
On
Off
Off
Signal strength 1-9 (Signal strength is weak,
please check antenna and the signal strength of
current location)
On
On
Off
Signal strength 10-19 (signal strength is basically
normal, and equipment can be used under
normal conditions)
On
On
On
Signal strength 20-31 (signal strong)
WLAN LED and description:
WLAN Green LED
Description
On
Enable WLAN
Off
Disable WLAN
Blinking
Reset Succeed
II. Installation
2.1 Installation of Device
Precautions:
Please be sure there is 3G/4G network coverage and there is no shield on site. 220V AC or
9~26VDC shall be provided on site. First installation shall be done under direction of the
engineer recognized by InHand Networks.
1 PC
OS: Windows 2000, Windows NT, Windows XP, Windows 7
CPU: Above PII 233
Memory: Above 32M
Hard disk: Above 6.4G

5
Serial port: At least one
Ethernet port: At least one (10M/100M)
IE version: Above 5.0
Resolution ratio: Above 640*480
1 SIM card:
Ensure the card is enabled with data service and its service is not suspended
because of an overdue charge.
Power supply:
220V AC: Alternatively used with the product with DC power
9~26V DC: Ripple voltage < 100 mV
Fixation:
Please place InRouter level and have it installed in an environment with small
vibrational frequency.
The device shall be installed and operated when powered off!
2.2 Installation of SIM/UIM Card
IR6XX-S series apply pop-up card holder. Press the yellow button on the right of the card holder
and the card holder will pop up. Then, install the SIM/UIM card and press the card holder back to
the card slot.
2.3 Installation of Antenna
Slightly rotate the movable part of metal SMA-J interface until it cannot be rotated (at this time,
external thread of antenna cable cannot be seen). Do not forcibly screw the antenna by holding
black rubber lining.

6
2.4 Installation of Protective Grounding
The specific steps are shown in below:
Step 1: Remove the grounding screw.
Step 2: Connect the grounding ring of the cabinet’s grounding wire onto the grounding
screw.
Step 3: Tighten the grounding screw up.
To improve the immunity from interference of whole router, the router must be grounded when
using. According to operating environment, the ground wire should be connected with
grounding stud of router.
2.5 Installation of Power Supply
Upon installation of the antenna, connect the device to 9~26V DC power and see if the Power
LED on the panel of the device is on. If not, please contact technical support of InHand Networks
immediately.
2.6 Login Router
Upon installation of hardware, be sure the Ethernet card has been mounted in the supervisory PC
prior to logging in the page of Web settings of the router.
I. Automatic Acquisition of IP Address (Recommended)
Please set the supervisory computer to "automatic acquisition of IP address" and "automatic
acquisition of DNS server address" (default configuration of computer system) to let the device
automatically assign IP address for supervisory computer.
II. Set a Static IP Address
Set the IP address of supervisory PC (such as 192. 168. 2. 2) and LAN interface of device in same
network segment (initial IP address of LAN interface of device: 192. 168. 2. 1, subnet mask: 255.
255. 255. 0).
III. Cancel the Proxy Server

7
If the current supervisory PC uses a proxy server to access the Internet, it is required to cancel
the proxy service. The operating steps are shown below: 1) In the browser window, select
"tools>>Internet options"; 2) select "connection" page and click the button of LAN Settings to
enter "LAN Settings" window interface. Please confirm if the option "Use a Proxy Server for LAN"
is checked; if it is checked, please cancel and click the button <OK>.
IV. Log in/Exit Web Settings Page
Open IE or other browser and enter IP address of IR611-S, such as http://192.168.2.1 in address
bar (default setting of IR611-S). Upon connection, log in from the login interface as a system
admin, i.e. enter username and password at the login interface (user name /password default:
adm/123456).
For security, you are suggested to modify the default login password after the first login
and safe keep the password information.
III. Web Configuration
Prior to use, the device shall be effectively configured. This chapter will introduce how to
configure your router via Web.
3. 1 System
The system configuration process involves ten steps, including basic setup, system time, serial
port, admin access, system Log, configuration management, task schedule, update, reboot and
logout. Here, system and network state and system time of synchronizing device and PC can be
checked and router WEB configuration interface language can be set as well as the name of
mainframe of router can be customized.

8
3.1.1 Basic Setup
Here, WEB configuration interface language can be set; name of mainframe of router can be
customized.
From the navigation tree, select System >> Basic Setup, then enter the “Basic Setup” page.
Table 3-1-1 Basic Setup Parameters
Basic settings
Function description: Select display language of the router configuration interface and set
personalized name.
Parameters
Description
Default
Language
Configure language of WEB configuration interface
Chinese
Host Name
Set a name for the host or device connected to the router
for viewing.
Router
3.1.2 System Time
To ensure the coordination between this device and other devices, user is required to set the
system time in an accurate way since this function is used to configure and check system time as
well as system timezone. System time is used to configure and view system time and system time
zone. It aims to achieve time synchronization of all devices equipped with a clock on network
so as to provide multiple applications based on synced time.
From the navigation tree, select System >> Time, then enter the “Time” webpage, as shown
below. Click <Sync Time> to synchronize the time of the gateway with the system time of the
host.
Table 3-1-2 Parameters of System Time
System Time
Function description: Set local timezone and automatic updating time of NTP.
Parameters
Description
Default
Time of
Router
Display present time of router
8:00:00 AM, 12/12/2015
PC Time
Display present time of PC
Present time
Timezone
Set timezone of router
Custom
Custom TZ
String
Set TZ string of router
CST-8
Auto update
Select whether to automatically update time,
Disable

9
Time
you may select when startup or very
1/2/...hours.
3.1.3 Serial Port
Setting the parameters of router’s serial port according to the serial port of the terminal device
connected with router to achieve the normal communication between router and terminal
device.
From the navigation tree, select System >> Serial Port, then enter “Serial Port” page.
Table 3-1-3 Serial Port Setting Parameter Description
Serial Port
Function description: Set relevant parameters based on application of the serial port.
Parameters
Description
Default
Baud Rate
Serial baud rate
115200
Data Bit
Serial data bits
8
Parity
Set parity bit of serial data
None
Stop Bit
Set stop bit of serial data
1
Software
Flow
Control
Set whether to enable software flow control and enable software
flow control
Disable
3.1.4 Admin Access
Admin services include HTTP, HTTPS, TELNET and console.
HTTP
HTTP (Hypertext Transfer Protocol) is used for transferring web pages on Internet. After enabling
HTTP service on device, users can log on via HTTP and access and control the device using a web
browser.
HTTPS
HTTPS (Secure Hypertext Transfer Protocol) is the secure version of hypertext transfer protocol.
As a HTTP protocol which supports SSL protocol, it is more secure.
TELNET
Telnet protocol provides telnet and virtual terminal functions through a network. Depending on
Server/Client, Telnet Client could send request to Telnet server which provides Telnet services.

10
The device supports Telnet Client and Telnet Server.
Console
The console port, also called the access or serial port, refers for initial configuration and
subsequent management of a device. It has the same terminal as the telnet client.
From the navigation tree, select System >> Admin Access, then enter “Admin Access” page.
Table3-1-4 Parameters of Admin Access
Admin Access
Function description:
1. Modify username and password of router.
2. The router may be set by the following 4 ways, i.e. http, https, telnet and console.
3. Set login timeout.
Parameters
Description
Default
Username/Password
Username
Set name of user who logs in WEB configuration
adm
Old
Password
Previous password access to WEB configuration
123456
New
Password
New password access to WEB configuration
N/A
Confirm
New
Password
Reconfirm the new password
N/A
Amin functions
Service Port
Service port of HTTP/HTTPS/TELNET/Console
80/443/23
Local Access
Enable - Allow local LAN to administrate the router with
corresponding service (e.g. HTTP)
Disable - Local LAN cannot administrate the router with
corresponding service (e.g. HTTP)
Enable
Remote
Access
Enable - Allow remote host to administrate the router
with corresponding service (e.g. HTTP)
Disable - Remote host cannot administrate the router
with corresponding service (e.g. HTTP)
Enable
Allowed
Access from
WAN
(Optional)
Set allowed access from WAN (only HTTP/HTTPS/TELNET)
The host
controlling
service at this
moment can be
set, e.g.
192.168.2.1/30
or
192.1682.1-192.1
682.10
Description
For recording significance of various parameters of
N/A

11
admin functions (without influencing router
configuration)
Console Login User (Click <new> button after setting a group of username and password)
Username
Configure console login user, custom
N/A
Password
Configure the password, custom
N/A
Other Parameters
Log Timeout
Set login timeout (router will automatically disconnect
the configuration interface after login timeout)
500 seconds
In “Username/Password” section, users can modify username and password rather than
create new username, i.e. only this username can be used in logins.
In “Console Login User” section, we can create multiple usernames, i.e. multiple
usernames can be used by serial port or TELNET console logins.
3.1.5 System Log
A remote log server can be set through “System Log Settings,” and all system logs will be
uploaded to the remote log server through the gateway. This makes remote log software, such as
Kiwi Syslog Daemon, a necessity on the host.
Kiwi Syslog Daemon is free log server software for Windows. It can receive, record and display
logs from host (such as gateway, exchange board and Unix host). After downloading and installing
Kiwi Syslog Daemon, it must be configured through the menus “File >> Setup >> Input >> UDP.
From the navigation tree, select System >> System Log, then enter “System Log” page.
Table 3-1-5 Parameters of System Log
System Log
Function description: Configure IP address and port number of remote log server which will
record router log.
Parameters
Description
Default
Log to Remote System
Enable log server
Disable
Log server address and
port (UDP)
Set address and port of remote log server
N/A:
514
Log to Console
Output device log by serial port
Disable

12
3.1.6 Configuration Management
Here you can back up the configuration parameters, import the desired parameters backup and
reset the router.
From the navigation tree, select System >> Config Management, then enter the “Config
Management” page.
Table 3-1-6 Parameters of Configuration Management
Configuration Management
Function description: Set parameters of configuration management.
Parameters
Description
Default
Browse
Choose the configuration file
N/A
Import
Import configuration file to router
N/A
Backup
Backup configuration file to host
N/A
Restore default
configuration
Select to restore default configuration (effective after
rebooting)
N/A
Modem drive
program
For configuring drive program of module
N/A
Network Provider
(ISP)
For configuring APN, username, password and other
parameters of the network providers across the world
N/A
Validity and order of imported configurations should be ensured. The good configs will later
be serially executed in order after system reboot. If the configuration files didn’t be arranged
according to effective order, the system won’t enter the desired state.
In order not to affect the operation of the current system, when performing an import
configuration and restore default configuration, users need to restart the device to make the
new configuration to take effect.
3.1.7 Task Schedule
After this function is enabled, the device will restart as the scheduled time.

13
From the navigation tree, select System >> Task Schedule, then enter “Task Schedule” page.
3.1.8 System Upgrading
The upgrading process can be divided into two steps. In the first step, upgrading files will be
written in backup firmware zone, e.g. , the process in the section of System Upgrading; in second
step: files in backup firmware zone will be copied to main firmware zone, which should be carried
out during system restart. During software upgrading, any operation on web page is not allowed,
otherwise software upgrading may be interrupted.
From the navigation tree, select System >> Upgrade, then enter the “Upgrade” page.
To upgrade the system, firstly, click <Browse> choose the upgrade file, secondly, click <Upgrade>
and then click <OK> to begin upgrade; thirdly, upgrade firmware succeed, and click <Reboot> to
restart the device.
3.1.9 Reboot
Please save the configurations before reboot, otherwise the configurations that are not saved will
be lost after reboot.
To reboot the system, please click the System>>Reboot, then click <OK>.
3.1.10 Logout
To logout, click System >> Logout, and then click <OK>.

14
3. 2 Network
Network settings include Dialup/Cellular, WAN (only for IR615-S series), Link Backup, LAN, WLAN
Mode Switch, WLAN, DNS, DDNS and Static Routes.
3.2.1 Dialup/Cellular Connection
SIM card dial out through dial access to achieve the wireless network connection function of
router.
Click the “Network>>Dial Interface” menu in the navigation tree to enter the “Dial Interface”.
Table3-2-1-1Parameters of Dialup/Cellular
Dialup/Cellular Connection
Function description: Configure parameters of PPP dialup. Generally, users only need to set
basic configuration instead of advanced options.
Parameters
Description
Default
Enable
Enable PPP dialup.
Enable
Time Schedule
Set time schedule
ALL
Shared connection
(NAT)
Enable—Local device connected to Router
can access to the Internet via Router.
Disable—Local device connected to Router
cannot access to the Internet via Router.
Enable
Default Route
Enable default route
Enable
Network Provider (ISP)
For selecting network provider providing
service at present
Custom
APN (inapplicable to
CDMA2000 series)
Mobile carrier provides relevant parameters
(subject to local carrier)
cmnet/uninet
Dialing Number
Relevant dialing parameters provided be
mobile carriers (subject to local carrier)
“*99#”“*99***1#”(
China Mobile,
China
Unicom)#777(China
Telecom)
Username
Relevant dialing parameters provided be
mobile carriers (subject to local carrier)
“gprs” (China
Mobile, China
Unicom)
CARD(China
Telecom)
Password
Relevant dialing parameters provided be
mobile carriers (subject to local carrier)
“gprs” (China
Mobile, China
Unicom)