InHand IR720 series User manual

1
User's Manual For InHand IR720 Series Router
(Version: V2)
Beijing InHand Network Technology Co., Ltd.
http://www.inhandnetworks.com

2
Copyright © 2012-2013 All rights are reserved by Beijing InHand Network Technology Co., Ltd.
and its licensors. Without the written permission of the Company, no unit or individual is allowed to
excerpt, reproduce or transmit in any form part or all of the contents in the manual.
, INHAND and InHand are trademarks of Beijing InHand Network Technology Co., Ltd.
The trademarks of other companies, product logos and trade names in the manual are possessed by
their respective owners.
The contents of this manual may be changed due to product version upgrade or other reasons.
InHand reserves the right to modify the contents of this manual without any notice or prompt. This
manual is only used as the guidance. InHand makes every effort to provide accurate information in
this manual, but InHand does not guarantee that there is no error in the manual. All statements,
information and recommendations in this manual do not constitute any express or implied warranty.

3
Preface
The User’s Manual for InHand IR720 Series Industrial Grade Router will guide you in detail on
how to set page or command line through Web for local management.
The preface includes the following contents:
Readers
Conventions in the Manual
Way of Information Acquisition
Technical Support
Information Feedback
Readers
This manual is mainly intended for the following engineers:
Network planners
On-site technical support and maintenance personnel
Network administrators responsible for network configuration and maintenance
Conventions in the Manual
1. Format Conventions on Command Line
Format
Significance
Bold
Keywords of command line (the part that should be remained unchanged in
command and be entered as it is) are expressed with bold font.
Italic
The parameters of command line (the part that must be replaced with the actual
value in command) are expressed in italic.
[ ]
Indicating that the part in “[]” is optional in command configuration.
{ x | y | ... }
Indicating to select one from multiple options.
[ x | y | ... ]
Indicating to select one or not to select from multiple options.
{ x | y | ... } *
Indicating to select at least one from multiple options.
[ x | y | ... ] *
Indicating to select one or more or not to select from multiple options.
&<1-n>
Indicating that the parameter in front of the symbol & can be repeatedly entered
for 1~n times.
#
The lines starting from no. “#” are comment lines.
2. Format Conventions on Graphic Interface
Format
Significance

4
< >
The content in angle brackets "<>" indicates button name, e.g. "click <OK>
button.”
[ ]
The content in square brackets "[]" indicates window name, menu name or data
sheet, e.g. “pop-up the [New User] window”.
/
Multi-level menu is separated by "/". For example, the multi-level menu [File /
New / Folder] indicates the menu item [Folder] under the submenu [New] under
the menu [File].
3. Various Signs
The manual also uses a variety of eye-catching signs to indicate the places to which special
attention should be paid in operation. The significances of these signs are as follows:
It indicates matters to be noted. Improper operation may cause
data loss or damage to the device.
The necessary complement or description on the contents of
operation.
Way of InformationAcquisition
The latest product information is available on the website of InHand (www. InHand.com.cn):
The main columns related to product information on the website of InHand are described as
follows:
[Service Support / Document Center]: Product information in terms of hardware installation,
software upgrade, configuration, etc., is available.
[Product Technology]: Documents on product introduction and technology introduction
including relevant introduction on product, technical introduction, technical white papers, etc.,
are available.
[Service Support / Software Download]: The supporting information on software version is
available.
Technical Support
User Support E-mail:
Technical Support Hotline: [phone]
Website: http://www.inhandnetworks.com
Information Feedback
If you have any question on product information in use, you can feed back through the following
ways:
E-mail：[email protected]
Thanks for your feedback to let us do better!

5
Contents
1 WHAT DO YOU WANT TO KNOW?...................................................................................................... 8
2 Product Overview........................................................................................................................................... 9
2.1 Product Description................................................................................................................................. 9
2.2 Major Characteristics.............................................................................................................................10
2.3 Typical Networking Applications.......................................................................................................11
3 Login Web Setting Page...............................................................................................................................12
3.1 Preparations..............................................................................................................................................12
3.2 Login the Web Setting Page of Router...............................................................................................15
4 Get Familiar with the Web Setting Page...................................................................................................16
4.1 Introduction of Web Setting Page.......................................................................................................16
4.2 Introduction of Controls of Common Page.......................................................................................16
4.3 Introduction of Operation of Page List...............................................................................................17
4.4 Exit the Web Setting Page ....................................................................................................................17
5 Management....................................................................................................................................................18
5.1 System.........................................................................................................................................................18
5.2 System Time...............................................................................................................................................19
5.3 Admin Access.............................................................................................................................................21
5.4 AAA.............................................................................................................................................................23
5.5 Configuration Management....................................................................................................................24
5.6 SNMP..........................................................................................................................................................25
5.7 Alarm ...........................................................................................................................................................27
5.8 System Log.................................................................................................................................................30
5.9 System Upgrading.....................................................................................................................................31
5.10 Reboot.......................................................................................................................................................32

6
6 Layer2 Switch.................................................................................................................................................33
6.1 Port.............................................................................................................................................................33
6.2 RSTP..........................................................................................................................................................35
6.3 Port Security.............................................................................................................................................37
6.4 802.1x........................................................................................................................................................38
6.5 Mac Address...............................................................................................................................................39
7 Network...............................................................................................................................................................42
7.1 VLAN........................................................................................................................................................42
7.2 Cellular Port............................................................................................................................................ 44
7.3 Loopback..................................................................................................................................................46
7.4 DHCP Service..........................................................................................................................................47
7.5 DNS service .............................................................................................................................................48
7.6 DDNS........................................................................................................................................................49
8 Link Backup.......................................................................................................................................................51
8.1 SLA............................................................................................................................................................51
8.2 Track Module...........................................................................................................................................52
8.3 VRRP.........................................................................................................................................................53
8.4 Interface Backup.....................................................................................................................................56
9 Routing................................................................................................................................................................58
9.1 Static Route..............................................................................................................................................58
9.2 Dynamic Routing....................................................................................................................................59
10 Firewall.............................................................................................................................................................67
10.1 Access Control.......................................................................................................................................67
10.2 NAT.........................................................................................................................................................68
11 QOS ...................................................................................................................................................................70
11.1 Layer 2 QOS..........................................................................................................................................70

7
11.2 Flow Control..........................................................................................................................................72
12 VPN ...................................................................................................................................................................73
12.1 IPSec........................................................................................................................................................73
12.2 GRE.........................................................................................................................................................79
12.3.......................................................................................................................................................... ….. ...88
12.4 Certificate Management......................................................................................................................85
12.5 DMVPN..................................................................................................................................................86
13 Tools...................................................................................................................................................................95
13.1 PING detection......................................................................................................................................95
13.2 Routing detection..................................................................................................................................96
13.3 Internet Speed Testing..........................................................................................................................97
14 Typical Networking Configuration Examples...........................................................................................98
15 Appendix - Setting of Command Line......................................................................................................101
15.1 Set up Configuration Environment through the Console Port...................................................102
15.2 Online Help of Command Line........................................................................................................104
15.3 Command Line Operation.................................................................................................................105
16 Appendix - Troubleshooting.......................................................................................................................107
17 Appendix - Default Settings........................................................................................................................110
18 Appendix - Glossary of Terms....................................................................................................................111

8
1What do you want to know?
Preliminary acquaintance of the general form of
product, business characteristics or its positioning in the
actual network applications
“Product Overview”
Manage device through setting Web environment and
further get familiar with its setting page
“Login web setting page" and "Get
familiar with the web setting page”
Set device management module through the Web
setting page, e.g. management access, system upgrade,
etc.
"Management"
Set layer 2 switching function through the Web setting
page, e.g. Spanning Tree Protocol, mac address table,
etc.
“Layer 2 switching”
Set network function module through the Web setting
page, e.g. dial-up, dhcp service, etc.
"Network"
Set link backup through the Web setting page, e.g.
VRRP, interface backup, etc.
“Link backup”
Set device routing function through the Web setting
page, e.g. static routing, dynamic routing, etc.
“Route”
Configure firewall function for the device through the
Web setting page, e.g. ACL, NAT, etc.
“Firewall”
Configure QOS through the Web setting page, e.g. layer
2 QOS and flow control
“QOS”
Configure VPN through the Web setting page, e.g.
IPSec, GRE, DMVPN, etc.
“VPN”
Use tools through the Web setting page to facilitate the
positioning
“Tools”
Further understand the key characteristics of device
through specific typical networking examples
“Typical networking configuration
examples”
Maintain the device in a simple way through the
command line
“Appendix - setting of command line”
Position or eliminate problems encountered in the use
of the device
“Appendix - Troubleshooting”
Get the default factory configuration information of
equipment
“Appendix - Default Settings”

9
2Product Overview
This chapter mainly contains the following contents:
Product Description
Major Characteristics
Typical Networking Applications
2.1 Product Description
Thank you for selecting IR720 series industrial grade router (hereinafter referred to as the “Router”).
InRouter 720 Series is an industrial grade wireless router integrating the managerial industrial
Ethernet switch, industrial grade wireless router and highly secure firewall. It is now widely used in
various typical SCADAsystems, e.g. substation networking system in power automation.
As a result of the application of the distinctive closed industrial grade design, InRouter720 is able to
work reliably in extreme environments. Up to eight Ethernet ports can easily connect to 8 Ethernet
devices and arrange them in different VLANs for orderly and efficient management of data. In
addition, InRouter 720 provides VPN channel with a high degree of security to ensure the security
of data transmission between the SCADA center and remote site devices.
Table 2-1 List of Routers
Product Model
Power Supply
Ethernet Port
SIM Card Slot
IR724-A-4FE01-W
220 V AC
4
1
IR726-A-6FE01-W
220 V AC
6
1
IR728-A-8FE01-W
220 V AC
8
1
IR724-A-4FE01-WDS
220 V AC
4
2
R726-A-6FE01-WDS
220 V AC
6
2
IR728-A-8FE01-WDS
220 V AC
8
2
IR724-D-4FE01-W
12-48V DC
4
1
IR726-D-6FE01-W
12-48V DC
6
1
IR728-D-8FE01-W
12-48V DC
8
1
IR724-D-4FE01-WDS
12-48V DC
4
2
IR726-D-6FE01-WDS
12-48V DC
6
2

10
IR728-D-8FE01-WDS
12-48V DC
8
2
The software features of products are essentially similar. If there is any difference, the
manual will give relevant instructions in the description of specific characteristics.
The Web setting page involved in the manual is for reference only, and it is based on
IR728-D. In case of any difference, the actual conditions should prevail. In addition, the
functional characteristics and specifications described in the manual may be changed
without prior notice with the upgrade of product. For details, please contact the marketing
personnel or technical support personnel of InHand company.
2.2 Major Characteristics
2.2.1 Powerful Functional Characteristics
3G link backup
It supports 2 sim cards and use 2 different 3G network backup links to support link
self-healing.
Dynamic routing
It has its own routing algorithm and is able to automatically adapt to the changes in network
topology.
DMVPN
It adds new branch sites without changing the configuration of central site.
High-performance firewall
It has a built-in high-performance firewall. Access control can be achieved through setting
outbound and inbound communication strategies.
VLAN
It supports multi-LAN function allowing you to easily divide LAN into multiple network
segments, thus to reduce the impact of broadcast domain and ARP virus.
Network flow speed limit
The IP-based network flow speed limit function can effectively control the upward /
downstream flow of specified user, limiting excessive occupation of network bandwidth by
P2P software. Meanwhile, it provides the function of broadband width on demand to
intelligently promote user’s throttle bandwidth when the network is idle, which not only fully

11
promotes the utilization rate of network bandwidth, but also guarantees the availability of
bandwidth when the network is busy.
Intelligent centralized management
Device management platform of InHand Device Networks
SNMP
2.2.2 User-friendly Interface
It provides a very simple Web setting page which has intuitive configuration and low use
complexity and is easy to operate.
2.2.3 Rich Statistical Diagnostic Function and Supervisor Mode
It provides a wealth of display function of statistics and status information allowing you to
know the router's current operating status.
It supports detailed configuration and management of router by way of Web.
It supports simple command line management for router through the Console port, Telnet,
etc.
2.3 Typical Networking Applications

12
3 Login Web Setting Page
This chapter mainly contains the following contents:
Preparations
Login the Web Setting Page of Router
3.1 Preparations
After the hardware installation and before login the Web setting page of router, you are required
to ensure that the supervisory computer and network meet some basic requirements.
3.1.1 Requirements on Supervisory Computer
Please confirm that the supervisory computer has been installed with an Ethernet card.
3.1.2 Establish Network Connection
1. Set IP Address of Supervisory Computer
Automatic acquisition of IP address (recommended): Please set the supervisory computer to
"automatic acquisition of IP address" and "automatic acquisition of DNS server address"
(default configuration of computer system) to let the router automatically assign IP address for
supervisory computer.
Set a static IP address: Please set the IP address of supervisory computer and IP address of
LAN port of router in the same network segment (default IP address of LAN port: 192.168.2.1;
subnet mask: 255.255.255.0). The operating steps are as follows (taking Windows XP system
as an example):

13
1) Open “Control Panel”, double click “Network
Connections” icon, and enter “Network
Connections” Screen.
(2) Click the button <Properties> to enter the
window of "Local Connection Properties”

14
2. Confirm that the network between the supervisory PC and router is connected
The operating steps are as follows:
3.1.3 Cancel the Proxy Server
If the current supervisory computer uses a proxy server to access the Internet, it is required to cancel
the proxy service and the operating steps are as follows:
(1) Select [Tools/Internet OPtions] in the browser to enter the window of [Internet Options]
(2) Select the tab”Connect”and click the button<LAN Setting(L)> to enter the page of “LAN
Setting”.Please confirm if the option”Use a Proxy Server for LAN”is checked;if it is
(3) Select "Internet Protocol (TCP / IP), and click
button Properties > to enter the window "Internet
Protocol (TCP / IP) Properties”. Select the radio
button "Use the following IP address", enter the IP
address (any value in the range of 192.168.2.2 ~
192.168.2.254), subnet mask (255.255.255.0) and
default gateway (192.168.2.1). Then complete
operation after confirmation.
(1) Click the button <Start> at the lower left
corner to enter the [Start] menu, and select "Run"
to pop up the dialog box “Run"
(2) Enter "ping 192.168.2.1 (IP address of router;
it is the default IP address), and click the button
<OK>. If the pop-up dialog box shows the
response returned from the router side, it indicates
that the network is connected; otherwise, check
the network connection.

15
checked,please cancel and click the button<OK>.
3.2 Login the Web Setting Page of Router
Run the Web browser, enter “http://192.168.2.1” in the address bar, and press Enter to skip to the
Web login page, as shown in Figure 3-1. Enter the “User Name”(default: adm) and “Password”
(default: 123456), and click button <OK> or directly press Enter to enter the Web setting page.
At the same time, the router allows up to five users to manage through the Web setting page.
When multi-user management is implemented for the router, it is suggested not to conduct
configuration operation for the router at the same time; otherwise it may lead to inconsistent
data configuration.
For security, you are suggested to modify the default login password after the first login and
safe keep the password information.

16
4Get Familiar with the Web Setting Page
The router provides a very simple Web setting page allowing you to quickly complete the
configuration for the required functions through this setting page. This chapter will let you first
understand and get familiar with the Web setting page.
This chapter mainly contains the following contents:
Introduction of Web Setting Page
Introduction of Controls of Common Page
Introduction of Operation of Page List
Exit the Web Setting Page
4.1 Introduction of Web Setting Page
Figure 4-1 Schematic Diagram of Web Setting Page
4.2 Introduction of Controls of Common Page
The following controls often occur in the Web setting page and their purposes are shown in the
table below.
Page Controls
Description
Textbox for entering text
The textbox displays green, indicating that the
configuration is wrong or can not be empty.

17
4.3 Introduction of Operation of Page List
The page similar to that in Figure 4-2 often occurs in the router's Web setting page, and its
operation is uniformly introduced in this section and will no longer be repeated.
Table 4-2 Introduction of Page List Operation
Interface Items
Description
You can click the button <Add> to add a new entry in the
pop-up dialog box.
You can select the specified list item and click the button
<Modify> to modify the list item.
You can select the specified list item and click the button
<Delete> to delete the list item.
4.4 Exit the Web Setting Page
Click at the upper right corner of the web interface and confirm to exit the Web setting
page.
Check box is used to enable (checked) and disable
(unchecked) the function or service.
Drop-down list box is used to select the appropriate
list item.
When you have finished the setting items of a page,
you need to click on the button <apply and save > on
this page to validate the setting and save the
configuration.
You can click the button <Refresh> to manually
update the page setting data;
You can also select refresh rate and the page data will
automatically update at the refresh rate.

18
5Management
This chapter mainly includes the following contents:
System
System Time
Admin Access
AAA
Config Management
SNMP
Alarm
System Log
System Upgrade
System Reboot
5.1 System
5.1.1 System Status
Page Wizard：Administration → System → System Status
This page provides the following function:
Show the router’s basic information and status.
The meanings of key items in the page are shown in the table below..
Key items
Description
MAC address
The MAC address of InSwitch
Current Version
Firmware version of InSwitch
Router Time
Router’s system time

19
5.1.2 Basic Settings
Page Wizard：Administration→System→Basic Settings
This page provides the following function:
5.2 System Time
5.2.1 System Time
Page Wizard：Administrator→System Time
Set system time:
5.2.2 SNTPClient
Page Wizard：Administrator→System Time
PC Time
The time of PC which is accessing to the router via Web.
CPU Load（1/5/15
minutes）
The average load of CPU in the past 1, 5,15 miutes
Memory Total/Free
The total memory and free memory of Router
Router basic setting

20
NTP Client Settings:
The meanings of key items in the page are shown in the table below..
Key Items
Description
SNTP Client
Start/Close SNTP Client
Update Event Interval
The interval synchronize with SNTP server
Server Address
SNTP Server Address (domain/IP)，10 servers at most
Port
SNTP service port of SNTP server
Before setting a SNTP server, should ensure SNTP server reachable. Especially when
the IP address of SNTP server is domain, should ensure DNS server has been
configured correctly.
When setting multiple SNTP server, system will poll all SNTP servers until find an
available SNTP server.