Mdex MX510 User manual

Release: 8th October 2018 (V.2.1)
Quick Guide
MX510 & mdex fixed.IP+ via OpenVPN
MX510 & mdex public.IP via OpenVPN
This guide describes the quick configuration of the mdex Router MX510 to have a
remote access to one or more terminals with your own SIM-card by using the
service mdex fixed.IP+ (via OpenVPN) or mdex public.IP (via OpenVPN).
MX510 Preferences:
mdexSIM-Vodafone is pre-installed.
This pre-installed mdexSIM-Vodafone must be replaced with your own SIM-card.
The MX510 configuration is preset to access one connected terminal:
oThe MX510 DHCP server assigns the IP address 192.168.0.100 to the terminal.
oAll incoming data packets are forwarded from the MX510 to 192.168.0.100.
The “source zone” at MX510 forwarding must be changed to „VPN“! Step 10a
Other MX510 preferences:
oLAN IP address and HTTP port: 192.168.0.1:8080
oUsername / Password: admin / admin01
oRemote HTTP Access: enabled
oNTP (time server): time.mdex.de
oPing reboot: ping.mdex.de (ping every 5 min., 3x failed ping= MX510 reboot)
oDaily reboot: at 23:30 CET
mdex
SIM
Vodafone

Page 2
Step 1 Insert your SIM card
1. Loosen the two screws on the back of the MX510 router (antenna side).
2. Remove the Rear Cover.
3. Pull out the preinstalled mdex SIM card and insert your SIM card into the SIM card slot
according to the picture.
4. Fasten the rear cover with the two screws.
SIM
SIM-Karte
An inactive mdexSIM-Vodafone is pre-installed in the MX510. Replace this pre-
installed SIM card with your own SIM card.

Page 3
Step 2 Connect the GSM antenna to GSM MAIN
Step 3 Connect the power supply
Plug in the connector from the power supply into the MX510 PWR jack.
The MX510 can be alternatively supplied with another power supply (7V - 30V DC).
In this case please remove the power adapter cables from the green connector (loosen the
screws) and connect the cables from your own power supply.
GSM MAIN
PWR jack for connecting
the power supply.

Page 4
Step 4 Change the default MX510 password
1. Make a connection with your web browser to the MX510: http://192.168.0.1:8080
(Username: admin / Password: admin01)
2. After the first login to MX510 the wizard instructs you to change the router password. It´s
strongly recommended to change the default password to another save password.
You can change the password later at System Admin Account.
Step 5 Connection settings of your SIM card
The MX510 default SIM card settings must be replaced with the settings from your SIM card.
Please ask the mobile operator of your SIM card about the current access details (APN,
Username and Password) for an internet connection.
1. Network Connection settings (WAN): Common configuration
2. Click on .
3. The SIM card connection status can be checked at Status Network Information.
Username of your SIM card
Passwort of your SIM card
APN of your SIM card
PIN of your SIM card

Page 5
Step 6 Setup MX510 OpenVPN Client
The "mdex_OpenVPN" client of the MX510 is preset.
You have to enter only the mdex OpenVPN Username and Password of your mdex fixed.IP+/
mdex public.IP according to the confirmation e-mail or the Management Portal
(https://manager.mdex.de) and enable the OpenVPN client.
1. Please click on VPN OpenVPN, then on the button Edit.
2. Make the following OpenVPN settings:
3. Click on .
4. You should now reboot the MX510 at System Reboot. (or turn-off -> turn-on power)
Edit
Only in case of using mdex public.IP
it´s important to enable this option!
(If you are using mdex fixed.IP+
please let this option disabled!)
Enable
Enter the Username and Password
from your mdex OpenVPN device.

Page 6
Step 7 MX510 establishes a connection to mdex
The MX510 establishes a connection to the mobile network using the inserted SIM card.
When the MX510 has internet access the OpenVPN Client establishes a connection to mdex.
The MX510 OpenVPN connection status can be checked at Status Network Information
Step 8 Enter mdex DNS Servers
This step can be skipped in case of using mdex fixed.IP+ (via OpenVPN).
In case of using mdex public.IP (via OpenVPN) it´s important to enter the following custom DNS
servers to the MX510. Otherwise the MX510 (and terminals) can`t resolve DNS names.
1. Click to Network LAN.
2. Enter the following DNS Server at Use custom DNS servers.
3. Click on .
Use custom DNS servers:
46.16.220.98
46.16.216.25
mobile Network
OpenVPN
mdex

Page 7
Step 9 Remote access to MX510
To prevent unauthorized access over the WAN IP address it´s strongly recommended to disable
the rule “Enable_HTTP_WAN” in the MX510 firewall.
1. Click on Network Firewall,then on Traffic Rules
2. Disable the rule “Enable_HTTP_WAN”and click on
oEnable_SSH_WAN:
Access to MX510 SSH interface over WAN IP address of your SIM-card.
This SSH access over WAN is already disabled as default.
oEnable_HTTP_WAN:
Access to MX510 HTTP interface over WAN IP address of your SIM-card.
This HTTP access over WAN should be disabled!
oEnable_HTTPS_WAN:
Access to MX510 HTTPS interface over WAN IP address of your SIM-card.
This HTTPS access over WAN is already disabled by default.
oEnable_SSH_VPN:
Access to MX510 SSH interface over the OpenVPN tunnel (disabled by default).
oEnable_HTTP_VPN:
Access to MX510 HTTP interface over the OpenVPN tunnel.
In case of using mdex public.IP: The MX510 HTTP web interface is reachable from the whole
Internet! IF you don´t need access to the MX510 web interface, please disable this rule. Otherwise it´s
important to change the MX510 router password as described in Step 4)
oEnable_HTTPS_VPN:
Access to MX510 HTTPS interface over the OpenVPN tunnel (disabled by default).
disable

Page 8
Step 10a Remote access to only one terminal
The following steps are required if only one terminal is connected to the MX510.
1. Setup Forwarding at MX510
A host forwarding (all data packets and protocols) is already preset to the IP address
192.168.0.100. You must change only the source zone from "WAN" to "VPN".
1. Click on Network Port Forwarding.
2. Change at “DMZ configuration” the “Source zone”to VPN.
3. Click on .
Now all incoming data packets and protocols are forwarded over the MX510 OpenVPN tunnel to
the local IP address 192.168.0.100 (terminal).
2. Connect your terminal to a LAN socket
Remove your computer from the MX510 and connect your terminal to the LAN1, LAN2 or
LAN3 socket of the MX510.
Your terminal should be set to DHCP client (automatically obtain an IP address).
The MX510 is preconfigured for dynamic assignment of IP addresses (DHCP) and
automatically assigns the IP address 192.168.0.100 to your connected terminal.
Alternatively, the IP address 192.168.0.100 can be set manually in your terminal.
All incoming data packets over the MX510 OpenVPN tunnel are forwarded to the IP
address 192.168.0.100 (terminal).
Note
The MX510 is preconfigured for the allocation of only one IP address (192.168.0.100). This
IP address is reserved for another 5 minutes after this terminal was removed. So remove
any terminal (eg your computer) from the MX510 router and wait at least 5 minutes (or do a
reboot of the MX510) before connecting the desired terminal to the MX510.
VPN
Terminal

Page 9
Step 10b Remote access to more than one terminal
This step can be skipped, if you are connecting only one terminal to the MX510 as in step 10a.
The following steps are required if more than one terminal should be accessible by remote.
1. LAN IP addresses for terminals
The integrated MX510 DHCP Server can assign the local IP addresses to the terminals.
1. Click to Network LAN
2. Increase the IP address range that should be assigned to the connected terminals.
3. Click on to save the entered IP address range.
4. To allocate the IP addresses to the terminals click on , then on .
5. Enter the IP address and MAC address from the terminal, then click on .
Now the terminal with this assigned MAC address get always the same IP address from
the MX510 DHCP Server. To enter more terminals click again on the button .
6. After all allocations where done, click on .
Instead of using the DHCP server from MX510 you can enter also static IP addresses to
the terminals:
IP address: 192.168.0.2 to 192.168.0.255
Default-Gateway & DNS Server: 192.168.0.1

Page 10
2. Add Port Forwarding in MX510
1. Click to Network Port Forwarding and disable DMZ configuration
2. Click on .
3. Enter the needed port forwarding at “New port forward” and click on .
Name: You can enter a name of this forwarding.
Source zone: Select VPN (important!)
Protocol: Select the protocol (TCP and/or UDP).
External port: Enter the incoming port to access the destination terminal
Internal IP address: Enter the local address from the destination terminal.
Internal port: Enter the local port from the destination terminal.
4. When you added all needed forwardings, click on .
3. Connect your terminals to the MX510 LAN sockets
Connect your terminals to the LAN1, LAN2 or LAN3 socket of the MX510. More terminals
can be connected by using an external switch that is connected to a LAN socket.
If your terminals are set to DHCP client (automatically obtain an IP address), point 1
“LAN IP addresses for terminals”(page 9) must be done first.
Without using DHCP you must enter static IP addresses in your terminals.
oIP address: 192.168.0.2 to 192.168.0.255
oDefault-Gateway & DNS Server: 192.168.0.1
Terminals
Add
disable