MB Connect Line mbNET MDH 810 User manual

MANUAL V3.3.6 EN
MDH800 –MDH859
23.03.2017
MDH810, MDH811, MDH814, MDH815, MDH816, MDH819, MDH830, MDH831, MDH834,
MDH835, MDH841, MDH849, MDH850, MDH855, MDH858, MDH858, MDH859

Page 2 of 226
Version: 3.3.5 –DR05 –23.03.2017
Copyright © MB connect line GmbH 2016
No part of this document and its contents may be reproduced, used or distributed without the express permission
of MB Connect Line GmbH. Damages will be claimed in the event of infringement. All rights reserved.
By purchasing the mbNET router, you have chosen a product made in Germany.
Our products are produced exclusively in Germany, which guarantees the highest quality and safe-guards jobs in
Europe.
This user manual (please read carefully and keep safely) describes the functions and use of the mbNET router
MDH800 –MDH59.
The latest information and updates can be found on our homepage
www.mbconnectline.com. We welcome comments, suggestions for improvement or constructive criticism at any
time.
Trademarks
The use of any trademark not listed herein is not an indication that it is freely available for use.
No part of this document and its contents may be reproduced, used or distributed without our express permis-
sion. Damages will be claimed in the event of infringement.
All rights reserved.
MB Connect Line hereby confirms that the device mbNET (MDH8xx) complies with the basic requirements and
all other relevant regulations of the European Directive 1999/5/EC. You can view the Declaration of Conformity
at: www.mbconnectline.com
Issued by:
MB connect line GmbH
Fernwartungssysteme
Winnettener Str. 6
91550 Dinkelsbühl
GERMANY
Tel.: +49 (0) 700 MBCONNECT
[phone]
Website: www.mbconnectline.com

Page 3 of 226
Version: 3.3.5 –DR05 –23.03.2017
1. Introduction ...................................................................................................................................8
Brief description ...................................................................................................................................................... 8
1.1
Features .................................................................................................................................................................. 81.2
Prerequisites/components: ..................................................................................................................................... 81.3
2. Safety Instructions (English and France) ..........................................................................................9
3. Using Open Source Software ........................................................................................................11
General Information.............................................................................................................................................. 113.1
Special Liability Regulations .................................................................................................................................. 113.2
Used Open-Source Software.................................................................................................................................. 113.3
4. Technical Data..............................................................................................................................12
5. What is included in the package ...................................................................................................16
6. Displays, controls and connections ...............................................................................................17
Front panel view.................................................................................................................................................... 176.1
Top, bottom and back panel views ........................................................................................................................ 186.2
7. Interfaces .....................................................................................................................................19
Pinout of top panel terminal blocks X1 and X2 ...................................................................................................... 197.1
Pinout of bottom panel RJ11 jack .......................................................................................................................... 197.2
Pinout of front panel serial interfaces COM1 and COM2 ....................................................................................... 197.3
Pinout of front panel LAN / WAN ports ................................................................................................................. 207.4
Pinout front panel USB port .................................................................................................................................. 207.5
8. First time operation......................................................................................................................21
Connecting the router to the power supply and switching on ............................................................................... 218.1
Connecting the router to a configuration PC.......................................................................................................... 228.2
9. Router configuration prerequisites ...............................................................................................22
How to set computer address (IP address) and subnet mask in Windows 7........................................................... 239.1
How to set computer address (IP address) and subnet mask in XP ........................................................................ 249.2
10. Access the web interface of the router ......................................................................................25
Cloudserver ........................................................................................................................................................... 2610.1
External Router .................................................................................................................................................... 2710.1.1
External DSL Modem ............................................................................................................................................ 2810.1.2
WLAN.................................................................................................................................................................... 2910.1.3
Cloudserver .......................................................................................................................................................... 3010.1.4
Start screen of the mbNET ................................................................................................................................... 3110.1.5
Classic router......................................................................................................................................................... 3210.2
Configuration screen of the mbNET ....................................................................................................................... 3310.3
11. Basic configuration of the router using the web interface ..........................................................34
Web interface home page ..................................................................................................................................... 3411.1
Icons, buttons and fields........................................................................................................................................ 3511.2
System settings ..................................................................................................................................................... 3611.3
CTM (Configuration Transfer Manager) ................................................................................................................. 3811.4
WEB....................................................................................................................................................................... 3911.5
WLAN Configuration.............................................................................................................................................. 4011.6
12. Description of different connection scenarios............................................................................43

Page 4 of 226
Version: 3.3.5 –DR05 –23.03.2017
General.................................................................................................................................................................. 4312.1
Configuring the industrial router for connection over the telephone network ...................................................... 45
12.2
Connecting and configuring the router ................................................................................................................4612.2.1
Connecting the router ......................................................................................................................................4612.2.1.1
Configuring the router using the web interface ...............................................................................................4712.2.1.2
Configuring a client (PC) to access the router ......................................................................................................5012.2.2
Establishing a connection between the client PC and the industrial router.........................................................5212.2.3
Displaying and verifying connection status ..........................................................................................................5212.2.4
Configuring the industrial router for connection via the Internet .......................................................................... 5312.3
Connection and configuration of the router.........................................................................................................5312.3.1
Connecting the router ......................................................................................................................................5312.3.1.1
Configuring the router –client connection over the telephone network ........................................................5412.3.1.2
Router Internet dial-in ..........................................................................................................................................5612.3.2
Displaying the Internet connection ......................................................................................................................5612.3.3
Configuring the industrial router for connection to the Internet using a DSL modem ............................................ 5712.4
Connecting and configuring the router ................................................................................................................5712.4.1
Connecting the router ......................................................................................................................................5712.4.1.1
Configuring the router using the web interface ...............................................................................................5812.4.1.2
Establishing a connection between client PC and router .....................................................................................6012.4.2
Displaying connection status ................................................................................................................................6012.4.3
Configuring the industrial router for connection to the Internet via an existing router ......................................... 6112.5
Connecting and configuring the router ................................................................................................................6112.5.1
Connecting the router ......................................................................................................................................6112.5.1.1
Configuring the router using the web interface ...............................................................................................6112.5.1.2
Configuring the industrial router for VPN connection to a client ........................................................................... 6412.6
Connecting and configuring the router ................................................................................................................6512.6.1
Connecting the router ......................................................................................................................................6512.6.1.1
Adding VPN dial-in users ..................................................................................................................................6512.6.1.2
Configuration of the router (VPN-Server) ........................................................................................................6512.6.1.3
Configuring a client PC for a VPN connection to the router .................................................................................6812.6.2
Setting up a VPN connection between client PC and router ................................................................................70
12.6.3
Router Internet dial-in......................................................................................................................................7012.6.3.1
Setting up a VPN connection from client to router ..........................................................................................7012.6.3.2
Additional settings............................................................................................................................................7012.6.3.3
Configuring a connection between two routers via VPN PPTP ............................................................................... 7112.7
Settings for connecting two industrial routers –PPTP –server ...........................................................................7212.7.1
Settings for connecting two industrial routers - PPTP-Client ...............................................................................7412.7.2
13. Creating certificates and revocation lists using XCA................................................................... 76
Certificates overview ............................................................................................................................................. 7613.1
Creating certificates............................................................................................................................................... 7713.2
Creating a root certificate.....................................................................................................................................7813.2.1
Root certificate source .....................................................................................................................................7813.2.1.1
Root certificate subject ....................................................................................................................................7913.2.1.2
Root certificate extensions...............................................................................................................................8113.2.1.3
Root certificate key usage ................................................................................................................................83
13.2.1.4
Creating a client certificate...................................................................................................................................8413.2.2
Client certificate source....................................................................................................................................8513.2.2.1
Client certificate subject...................................................................................................................................8613.2.2.2
Client certificate –Extensions ..........................................................................................................................8713.2.2.3
Client certificate –Key usage ...........................................................................................................................8813.2.2.4
Client certificate –Netscape ............................................................................................................................8913.2.2.5
Generating CRL-Files (Certificate Revocation Lists) ................................................................................................ 9113.3
14. Importing certificates in Windows XP........................................................................................ 93
15. System settings ........................................................................................................................ 95

Page 5 of 226
Version: 3.3.5 –DR05 –23.03.2017
System –WEB........................................................................................................................................................ 9515.1
System –Users ...................................................................................................................................................... 96
15.2
General................................................................................................................................................................. 9615.2.1
Editing users ......................................................................................................................................................... 9615.2.2
Adding users......................................................................................................................................................... 9715.2.3
Deleting Users ...................................................................................................................................................... 9815.2.4
System –Certificates ............................................................................................................................................. 9915.3
Personal Certificates............................................................................................................................................. 9915.3.1
Root certificate (CA) ........................................................................................................................................... 10115.3.2
Peer certificates (IPSec)...................................................................................................................................... 10215.3.3
CRL...................................................................................................................................................................... 10315.3.4
System - USB ....................................................................................................................................................... 10415.4
Firmware Version 4.x ......................................................................................................................................... 10515.4.1
System - Logging.................................................................................................................................................. 10615.5
System - Configuration ........................................................................................................................................ 10715.6
System –Firmware .............................................................................................................................................. 10915.7
Upgrade via USB ................................................................................................................................................. 10915.7.1
Upgrade via Network ......................................................................................................................................... 11015.7.2
16. Network .................................................................................................................................111
Network –LAN .................................................................................................................................................... 11116.1
Network –WAN .................................................................................................................................................. 11216.2
Network –Modem .............................................................................................................................................. 11416.3
Network –Modem –Incomming ........................................................................................................................ 11416.3.1
Network –Modem –Outgoing........................................................................................................................... 11616.3.2
Menu settings SMS............................................................................................................................................. 11816.3.3
Network –Modem –Callback ............................................................................................................................ 12016.3.4
Network –Modem –SMS .................................................................................................................................. 12116.3.5
Remote service control commands using SMS .................................................................................................. 12216.3.6
Network –Internet.............................................................................................................................................. 12316.4
Network –Internet –Internet Connections ....................................................................................................... 12316.4.1
Network –Internet –Internet Settings .............................................................................................................. 12416.4.2
Internet failover connection .............................................................................................................................. 12616.4.3
Network –DHCP .................................................................................................................................................. 13016.5
Network –DNS server ......................................................................................................................................... 13116.6
Network –Hosts .................................................................................................................................................. 13216.7
Network - DynDNS............................................................................................................................................... 13216.8
General............................................................................................................................................................... 13216.8.1
How to set up DynDNS configuration ................................................................................................................ 13216.8.2
17. Serial interfaces ......................................................................................................................134
General................................................................................................................................................................ 13417.1
RS232/485 serial interfaces ................................................................................................................................. 13517.2
MPI/PROFIBUS Interface .................................................................................................................................... 13617.2.1
Redirecting serial interfaces to your PC (VCOM LAN2)......................................................................................... 13817.3
Settings for Simatic Manager ............................................................................................................................. 14017.3.1
Enabling RFC1006 on the mbNET ......................................................................................................................... 14017.4
Settings for NETPro Step 7 ................................................................................................................................. 14117.4.1
Create subnets ................................................................................................................................................... 14117.4.2
Add PC station .................................................................................................................................................... 14217.4.3
Configure PC station........................................................................................................................................... 14317.4.4

Page 6 of 226
Version: 3.3.5 –DR05 –23.03.2017
Add PC/PG station ..............................................................................................................................................14417.4.5
Configure mbNET PC station...............................................................................................................................14717.4.6
Routing................................................................................................................................................................14917.4.7
Connecting to S7 using the mbNET S7 driver ....................................................................................................... 15017.5
18. Security settings ..................................................................................................................... 152
General................................................................................................................................................................ 15218.1
WAN>LAN............................................................................................................................................................ 15318.2
LAN>WAN............................................................................................................................................................ 15518.3
Forwarding .......................................................................................................................................................... 15618.4
NAT ..................................................................................................................................................................... 15718.5
19. VPN........................................................................................................................................ 158
VPN-IPSec ............................................................................................................................................................ 15819.1
Configuring a VPN-IPSec connection with two routers ......................................................................................15819.1.1
Connection settings........................................................................................................................................159
19.1.1.1
Network Settings ............................................................................................................................................15919.1.1.2
Authentication................................................................................................................................................16019.1.1.3
Protocol settings.............................................................................................................................................16219.1.1.4
L2TP Server Configuration ..............................................................................................................................16319.1.1.5
VPN - PPTP........................................................................................................................................................... 16419.2
Server settings ....................................................................................................................................................16419.2.1
VPN –OpenVPN .................................................................................................................................................. 16619.3
Basics about OpenVPN .......................................................................................................................................16619.3.1
Connection scenarios..........................................................................................................................................16719.3.2
Client –router ................................................................................................................................................16719.3.2.1
Configuring an OpenVPN Windows client ......................................................................................................17019.3.2.2
Authenticating a Windows client with static key ...........................................................................................17119.3.2.3
Router-Router ................................................................................................................................................17319.3.2.4
Server –no authentication or static key ........................................................................................................17519.3.2.1
Multi-client: Multiple clients can dial in .........................................................................................................17619.3.2.2
Authentication ....................................................................................................................................................18019.3.3
No authentication...............................................................................................................................................18019.3.4
Authentication with static key ............................................................................................................................18019.3.5
Key management ................................................................................................................................................18119.3.6
Authentication with certificates .........................................................................................................................18219.3.7
Authentication with CA certificate and own certificate .................................................................................18219.3.7.1
Authentication with CA certificate and own certificate and user/password .................................................18319.3.7.2
Inactivity settings................................................................................................................................................18519.3.8
Protocol options .................................................................................................................................................18619.3.9
20. I/O Manager........................................................................................................................... 188
Configuring the connection.................................................................................................................................. 18920.1
Creating the PLC connection...............................................................................................................................19020.1.1
Tags.....................................................................................................................................................................19120.1.2
Creating the tags ............................................................................................................................................19120.1.2.1
Configuring the logging function.......................................................................................................................... 19220.2
Tag status ............................................................................................................................................................ 19320.3
Diagnostic............................................................................................................................................................ 19320.4
21. Alarm management ................................................................................................................ 194
General................................................................................................................................................................ 19421.1
Digital inputs ....................................................................................................................................................... 19421.2
Multiplex inputs..................................................................................................................................................19521.2.1

Page 7 of 226
Version: 3.3.5 –DR05 –23.03.2017
Digital outputs..................................................................................................................................................... 19721.3
22. Status messages......................................................................................................................198
General................................................................................................................................................................ 19822.1
Status –Interfaces ............................................................................................................................................... 19822.2
Status - Network.................................................................................................................................................. 19922.3
Firewall ............................................................................................................................................................... 20022.3.1
IN / OUT / FORWARD ..................................................................................................................................... 20022.3.1.1
NAT ................................................................................................................................................................ 20122.3.1.2
Status –Modem .................................................................................................................................................. 20222.4
Status –Internet.................................................................................................................................................. 20422.5
Status –DHCP...................................................................................................................................................... 20522.6
Status –DNS Server ............................................................................................................................................. 20622.7
Status –DynDNS.................................................................................................................................................. 20622.8
Status –NTP ........................................................................................................................................................ 20722.9
Status –VPN-IPSEC .......................................................................................................................................... 20822.10
Status –VPN-PPTP........................................................................................................................................... 20922.11
Status –VPN OpenVPN.................................................................................................................................... 21022.12
Status –Diagnostics......................................................................................................................................... 21122.13
Status –USB .................................................................................................................................................... 21222.14
Status –Alarmmanagement ............................................................................................................................ 21222.15
Status –System ............................................................................................................................................... 21322.16
23. Extras......................................................................................................................................214
LUA...................................................................................................................................................................... 21423.1
Toolbox ............................................................................................................................................................... 21523.2
24. Factory settings on delivery.....................................................................................................216
Username and password ..................................................................................................................................... 21624.1
IP address of the router....................................................................................................................................... 21624.2
25. Loading the factory settings ....................................................................................................216
26. Initializing the modem ............................................................................................................217
General information on the AT commands ......................................................................................................................... 217
Analog modem commands .................................................................................................................................. 21726.1
ISDN terminal adapter (TA) commands ............................................................................................................... 21926.2
27. Basic instructions ....................................................................................................................220
Restart router...................................................................................................................................................... 22027.1
Via webinterface ................................................................................................................................................ 22027.1.1
Via reset button.................................................................................................................................................. 22027.1.2
Restore factory settings....................................................................................................................................... 22127.2
28. Appendix ................................................................................................................................222
Country codes for analog devices ........................................................................................................................ 22228.1

Page 8 of 226
Version: 3.3.5 –DR05 –23.03.2017
1. Introduction
Brief description1.1
The mbNET industrial router offers you optimum flexibility and security, making remote communication with your
systems both easy and secure. Thanks to its compact design, the mbNET router will fit into any switch cabinet, and
with its multiple interfaces and drivers, is the perfect solution for integrating different control systems. The mbNET
router is configurable using a web interface.
Features1.2
Fully configurable using web interface via locally connected computer, or remotely.
Deployable worldwide using different modem connections, (ISDN, analog, mobile broadband) plus access
via LAN and Internet.
Secure connection using an integrated firewall with IP filter, NAT and port forwarding, VPN with AES,
DES/3DES/DESX, Blowfish or RC2 encryption, and authentication via pre-shared key (PSK), static key or
certificate (X.509).
Alarmmanagement:
oFully configurable digital inputs and outputs, and the ability to send via email, SMS or Internet
dial-up.
oVia remote output switching in the event of a fault or with an active Internet connection.
Integrated server secures all settings, keys and certificates and allows data sharing within the network via
connected USB flash or hard drive.
Variable RS232, RS485, RS422 RS interface or optional MPI/PROFIBUS for connecting control systems.
Prerequisites/components:1.3
mbCONNECT24 from V 1.6.5
mbDIALUP* from V 3.1
mbCHECK * from V 1.1.2
mbNET * from V 3.3.5 firmware (at mbNET variant with WLAN, from firmware V 4.0)
* The latest version can be downloaded from www.mbconnectline.com.

Page 9 of 226
Version: 3.3.5 –DR05 –23.03.2017
2. Safety Instructions (English and France)
Only qualified specialist personnel may install, start up, and operate the router. The national safety and
accident prevention regulations must be observed.
The router is built to the latest technological standards and recognized safety standards (see Declara-
tion of Conformity).
The router is only intended for operation in the control cabinet and with SELV according to IEC
60950/EN 60950/VDE 0805.
The router is for indoor use only.
Never open the router chassis. Unauthorized opening and improper repair can pose a danger to the
user. Unauthorized modifications are not covered by the manufacturer’s warranty
Opening up the device voids the warranty!
The router must be disposed of in line with European regulations and German legislation on elec-
tronics and electronic device (WEEE), and not as general household waste
The router may only be connected to devices, which meet the requirements of EN 60950.
ADVICE:
The unit should be connected and operated on a telephone switchboard only. The unit is not intended
to be direct connected to a public telephone system.
NOTE:
Electrostatic discharge!
Observe the necessary safety precautions when handling components that are vulnerable to
electrostatic discharge (EN 61340-5-1 and IEC 61340-5-1)!

Page 10 of 226
Version: 3.3.5 –DR05 –23.03.2017
Consignes de sécurité
Le routeur est construit selon l’état actuel de la technique et les règles techniques reconnues en ma-
tière de sécurité (voir la déclaration de conformité).
Le routeur doit être monté à un endroit sec. Aucun liquide ne doit pénétrer dans le routeur, car cela
pourrait occasionner des chocs électriques ou des courts-circuits.
Le routeur est uniquement prévu pour l’utilisation dans des bâtiments et non pas à l’extérieur.
Ne jamais ouvrir le boîtier du routeur. L’ouverture du routeur ou des réparations non adaptées peuvent
mettre en danger l’utilisateur du routeur. Le fabricant n’assure aucune garantie concernant les modifi-
cations arbitraires.
La garantie devient caduque en cas d’ouverture de l’appareil !
Conformément aux prescriptions européennes et à la loi allemande relative à l’électronique et les ap-
pareils électroniques, il est interdit de mettre au rebut l’appareil avec les déchets domestiques nor-
maux. L’appareil doit être éliminé dans le respect des prescriptions.
AVERTISSEMENT:
Les modèles MDH830, MDH820, MDH800, MDH810 et MDH815 doivent être utilisés et raccordés uniquement via
des centrales téléphoniques. Il est interdit de les faire fonctionner directement sur le réseau téléphonique public.