NavigateWorx NR500 NC User manual

Industrial VPN Route
NR500 NC User Manual
Guangzhou Navigateworx Technologies Co, Ltd
www.navigateworx.com
Industrial VPN Router
NR500 NC User Manual

Industrial VPN Router NR500 Series User Manual
Page 1 / 77
REVISION HISTORY
Revision
Date
Firmware version
Revision Details
0
Jul 2019
v1.1.0(ddcaac4)
Initial release.
1
Dec 2019
Change home page layout of UM, add 1-to-1 NAT
2
Jul 2020
v1.1.4(0c0c9fa)
1. Add OpenVPN Server
2. Allow to import or download OpenVPN client file
3. Add System Security: Local Telnet/Local HTTP/Local
HTTPS/Local SSH/Ping request/DDoS Defense
4. Add “NAT Enable” option on each uplink
5. Allow to set multiple remote/local subnet on IPsec
6. Allow to set the “metric” value manually on static route
7. Allow to set “Secondary WAN IP Address”
8. Serial settings: Add the parity “Mark” and “Space”; Add
“Sync to Secondary Address” option
9. Add “MAC Binding IP” on LAN
10. Change the layout of DDNS
11. GRE VPN：Add “Enable Default Route”,
“Binding Interface” Options
12. Changed the Digital Output diagram
3
1. Add the sniffer feature
2. Add the URL filter feature
3. Add sync PC time feature
4. Add NTP server feature
5. Add the input chain on the ACL
Trademarks and copyright
Guangzhou Navigateworx Technologies Co, Ltd and & logo are the
trademarks or registered trademarks in China mainland, HongKong and other countries
worldwide. All other trademarks mentioned in this document are the property of their respective
owners.
@2018 Navigateworx Technologies. All Rights Reserved.
Disclaimers
Information in this document is subject to change without notice and does not represent a
commitment on the part of Navigateworx Technologies.
Navigateworx Technologies provides this document as is, without warranty of any kind, either
expressed or implied, including, but not limited to, its particular purpose. Navigateworx

Industrial VPN Router NR500 Series User Manual
Page 2 / 77
Technologies may make improvements and/or changes in this manual, or in the product(s) and/or
the program(s) described in this manual at any time.
Information provided in this manual is intended to be accurate and reliable. However,
Navigateworx Technologies assumes no responsibility for its use, or for any infringements on the
rights of third parties that may result from its use.
Technical Support
E-mail: [e-mail]
[e-mail]
Web:www.navigateworx.com
Interference Issues
Avoid possible radio frequency (RF) interference by following these guidelines:
•The use of cellular telephones or devices in aircraft is illegal. Use in aircraft may endanger operation and
disrupt the cellular network. Failure to observe this restriction may result in suspension or denial of cellular
services to the offender, legal action, or both.
•Do not operate in the vicinity of gasoline or diesel fuel pumps unless use has been approved or
authorized.
•Do not operate in locations where medical equipment that the device could interfere with may be in
use.
•Do not operate in fuel depots, chemical plants, or blasting areas unless use has been approved and
authorized.
•Use care if operating in the vicinity of protected personal medical devices, i.e., hearing aids and
pacemakers.
•Operation in the presence of other electronic equipment may cause interference if equipment is
incorrectly protected. Follow recommendations for installation from equipment manufacturers.
Declaration of Conformity
NR500 Series products are in conformity with the essential requirements and other relevant provisions of the
CE and RoHS.

Industrial VPN Router NR500 Series User Manual
Page 3 / 77
Table of Contents
Chapter 1. Product Overview.................................................................................................................................5
1.1 Overview .................................................................................................................................................5
1.2 Features and Benefits ..........................................................................................................................5
1.3 General Specifications........................................................................................................................6
1.4 Mechanical Specifications ................................................................................................................8
1.5 Package Checklist................................................................................................................................9
1.6 Order Information ...............................................................................................................................11
Chapter 2. Installation .............................................................................................................................................12
2.1 Product Overview...............................................................................................................................12
2.2 LED Indicators.......................................................................................................................................13
2.3 Ethernet Port Indicator.......................................................................................................................14
2.4 PIN Definition of Terminal block ......................................................................................................14
2.5 Reset Button..........................................................................................................................................15
2.6 Install Antenna .....................................................................................................................................15
2.7 DIN-rail Mounting.................................................................................................................................16
2.8 Protective Grounding Installation...................................................................................................16
2.9 Power Supply Installation ..................................................................................................................17
2.10 Power On The Router .........................................................................................................................17
Chapter 3. Access to Web page.........................................................................................................................18
3.1 PC Configuration ................................................................................................................................18
3.2 Factory Default Settings ....................................................................................................................19
3.3 Login to Web Page.............................................................................................................................20
Chapter 4. Web Configuration.............................................................................................................................21
4.1 Web Interface......................................................................................................................................21
4.2 Overview ...............................................................................................................................................23
4.2.1 Status ......................................................................................................................................................23
4.2.2 Syslog......................................................................................................................................................25
4.3 Link Management...............................................................................................................................26
4.3.1 Connection Manager .......................................................................................................................26
4.3.2 Ethernet..................................................................................................................................................29
4.3.3 Wi-Fi.........................................................................................................................................................35
4.4 Industrial Interface ..............................................................................................................................40
4.4.1 Serial........................................................................................................................................................40
4.4.2 Digital IO ................................................................................................................................................44
4.5 Network..................................................................................................................................................46
4.5.1 Firewall....................................................................................................................................................46
4.5.2 Route ......................................................................................................................................................49
4.5.3 VRRP........................................................................................................................................................51
4.5.4 IP Passthrough......................................................................................................................................52
4.6 Applications..........................................................................................................................................53
4.6.1 DDNS.......................................................................................................................................................53
4.6.2 Schedule Reboot ................................................................................................................................54
4.7 VPN..........................................................................................................................................................55

Industrial VPN Router NR500 Series User Manual
Page 4 / 77
4.7.1 OpenVPN ..............................................................................................................................................55
4.7.2 IPSec .......................................................................................................................................................61
4.7.3 GRE..........................................................................................................................................................64
4.8 Maintenance .......................................................................................................................................66
4.8.1 Upgrade ................................................................................................................................................66
4.8.2 Software.................................................................................................................................................66
4.8.3 System ....................................................................................................................................................67
4.8.4 Configuration .......................................................................................................................................71
4.8.5 Debug Tools..........................................................................................................................................72
Appendix A -Glossary ...............................................................................................................................................74
Appendix B -Q&A ......................................................................................................................................................75
Cannot login to the router ......................................................................................................................75
IPSec VPN established, but LAN to LAN cannot communicate...................................................75
Forget Router Password ...........................................................................................................................75
Appendix C -Digital IO Scenario ...........................................................................................................................76
Appendix D - CLI ........................................................................................................................................................77

Industrial VPN Router NR500 Series User Manual
Page 5 / 77
Chapter 1. Product Overview
1.1 Overview
Navigateworx NR500 series industrial VPN router offers a single, flexible platform to address a
variety of wireline communications needs with over-the-air configuration and system monitoring
for optimal connectivity. This router enables wireline data connectivity.
NR500 series router have 2 or 4 LAN ports, 1 port could be changed to Ethernet WAN connection
(for fixed internet fail over to Wi-Fi). An optional 802.11 b/g/n Wi-Fi interface access point and
client operations supports connectivity to IP applications in a variety of different connection
scenarios. RS232 and RS485 interfaces are provided to support Serial to IP communication. NR500
series router also support 2 x digital input and 2 x Digital output for alarm applications.
NR500 series router supports 9 to 48 VDC wide range power inputs, designed with reverse-voltage
protection mechanism for greater reliability. It is an advanced choice for universal wireless M2M
applications with reliable features for data transmission.
1.2 Features and Benefits
Industrial internet access
•Ethernet WAN and Wi-Fi Connection
•Remote access to SCADA System for Industrial Automation
•Reduce high costs for on-site maintenance
Designed for industrial usage
•Power Input Range 9 to 48 VDC
•Industrial designed for harsh environment
•Compact metal casing for easy mounting
Secure and reliable remote connection
•Connection manager ensure seamless communication
•Support Multiple VPN tunnels for data encryption
•Firewall prevents unsafe and unauthorized access
Easy to use and easy maintenance
•User-friendly web interface for human interaction
•Easy configuration for deployment
•Support 3rd Party remote management cloud

Industrial VPN Router NR500 Series User Manual
Page 6 / 77
1.3 General Specifications
Wi-Fi Interface (Optional)
•Standards: 802.11b/g/n, 300Mbps
•2 x RP-SMA male antenna connector
•Support Wi-Fi AP and Client modes
•Security: WEP, WPA and WPA2 encryption
•Encryption: TKIP, CCMP
Ethernet Interface
•Standard: IEEE 802.3, IEEE 802.3u
•Number of Ports:
NR500-SNC: 2 x 10/100 Mbps, RJ45 connector
NR500-PNC: 4 x 10/100 Mbps, RJ45 connector
•1 x WAN interface (configurable on Web GUI)
•1.5KV magnetic isolation protection
Serial Interface
•1×RS232 (3 PIN): TX, RX, GND
•1 x RS485 (2 PIN): Data+(A), Data-(B)
•Baud rate: 300 bps to 115200 bps
•Connector: terminal block
•15KV ESD protection
DI/DO Interface
•Type: 2 x DI + 2 x DO
•Connector: terminal block
•Isolation: 3KVDC or 2KVrms
•Absolute maximum VDC: 36VDC
•Absolute maximum ADC: 100mA
Other Interfaces
•1× RST button
•LED instruction: 1 x SYS, 1 x USR
Software

Industrial VPN Router NR500 Series User Manual
Page 7 / 77
•Network protocols: DHCP, ICMP, PPPoE, HTTP, HTTPS, DNS, VRRP, NTP…
•VPN: IPSec, GRE, OpenVPN, DMVPN
•Policy: RIPv1/RIPv2/OSPF/BGP dynamic route (optional)
•Firewall & Filter: Port forwarding, DMZ, anti-DoS, ACL
•Serial port: TCP server and client, UDP
•Management: Web, 3rd party platform
Power Supply and Consumption
•Connector: 3-pin 3.5 mm female socket with lock
•Input voltage range: 9~48VDC
•Power consumption:
Idle: 100 mA@12V
Data link: 400 mA (peak) @12V
Physical Specification
•Ingress Protection: IP30
•Housing & Weight: Metal, 300g
•Dimension: 104mm x 104mm x 38mm (excluding antenna)
•Installations: Din-rail mounting
Environmental
•Operation temperature: -40~+75℃
•Store temperature: -40~+85℃
•Operation humidity: 5% to 95% non-condensing

Industrial VPN Router NR500 Series User Manual
Page 8 / 77
1.4 Mechanical Specifications
Dimension: 106mm x 106mm x 40mm (excluding antenna)

Industrial VPN Router NR500 Series User Manual
Page 9 / 77
1.5 Package Checklist
NR500 series Router includes the parts shown in below, please verify your components.
NOTE: if any of the below items is missing or damaged, please contact your sales representative.
Included equipment
•1 x Navigateworx NR500 series Industrial VPN router (Wi-Fi optional)
NR500 SNC NR500 PNC
or
•1 x 3-pin 3.5 mm male terminal block with lock for power supply
•1 x 10-pin 3.5 mm male terminal block for RS232/RS485/DI/DO
•1 x Ethernet cable

Industrial VPN Router NR500 Series User Manual
Page 10 / 77
•1 x Quick Start Guide
Optional Accessories (sold separately)
•RP-SMA Wi-Fi antenna
Stubby antenna Magnet antenna
•35mm Din-rail mounting kit
•AC/DC power adapter (12VDC, 1.5A; EU/US/UK/AU plug optional)

Industrial VPN Router NR500 Series User Manual
Page 11 / 77
1.6 Order Information
Model
Part Number
Description
NR500-SNC
A502033
No Cellular Module, 2 x Eth, 1 x RS232 (3 PIN), 1 x
RS485, 2 x DI, 2 x DO, 9 - 48VDC
A512033
No Cellular Module, 2 x Eth, 1 x RS232 (3 PIN), 1 x
RS485, 2 x DI, 2 x DO, 9 - 48VDC,
2.4GHz Wi-Fi
NR500-PNG
A504033
No Cellular Module, 4 x Eth, 1 x RS232 (3 PIN), 1 x
RS485, 2 x DI, 2 x DO, 9 - 48VDC
A514033
No Cellular Module, 4 x Eth, 1 x RS232 (3 PIN), 1 x
RS485, 2 x DI, 2 x DO, 9 - 48VDC,
2.4GHz Wi-Fi

Industrial VPN Router NR500 Series User Manual
Page 12 / 77
Chapter 2. Installation
2.1 Product Overview
•Front Panel
•Left Side Panel
①Wi-Fi Antenna
②Wi-Fi Antenna
③LED Indicator
④Serial port & DIDO
⑤Ethernet port
①SIM Card Slot
②Reset Button
③Power Connector
④Grounding Stud

Industrial VPN Router NR500 Series User Manual
Page 13 / 77
2.2 LED Indicators
Name
Color
Status
Description
SYS
Green
Slow Blinking (500ms duration)
Operating normally
Fast Blinking
System initialing
Off
Power is off
USR: Wi-Fi
Green
On
Wi-Fi is enable but without data
transmission
Blinking
Wi-Fi is enabled and data
transmission
Off
Wi-Fi is disable or initialize failed

Industrial VPN Router NR500 Series User Manual
Page 14 / 77
2.3 Ethernet Port Indicator
Name
Status
Description
Link indicator
On
Connection is established
Blinking
Data is being transmitted
Off
Connection is not established
NOTE：There are two LED indicators for each Ethernet port. Due to the chipset design NR500 router
would only light up the green one(Link indicator) on left side, the right LED is Off without meaning.
2.4 PIN Definition of Terminal block
•Serial Port & DIDO
PIN
RS232
RS485
DI
DO
Direction
1
--
--
--
DO1
Router-->Device
2
--
--
--
DO2
Router-->Device
3
--
--
--
COM
--
4
--
A
--
--
Router<-->Device
5
--
B
--
--
Router<-->Device
6
--
--
DI1
--
Router<--Device
7
--
--
DI2
--
Router<--Device
8
GND
--
--
--
--
9
TX
--
--
--
Router-->Device
10
RX
--
--
--
Router<--Device

Industrial VPN Router NR500 Series User Manual
Page 15 / 77
•Power Input
PIN
Description
V+ (Red line)
Positive
V- (Yellow line)
Negative
PGND
GND
2.5 Reset Button
Function
Action
Reboot
Press the RST button within 3s under operation status
Factory Reset
Press the RST button between 3s to 10s, all LEDs blink few times then
reboot the router manually.
Run Normally
Press the RST button more than 10s, router will run normally without
reboot or factory reset.
2.6 Install Antenna
•Connect the Wi-Fi antenna to the Wi-Fi connector on the unit.

Industrial VPN Router NR500 Series User Manual
Page 16 / 77
2.7 DIN-rail Mounting
1. Use 4 pcs of M3x6 flat head phillips screws to fix the DIN-rail to the router.
2. Insert the upper lip of the DIN-rail into the DIN-rail mounting kit.
3. Press the router towards the DIN-rail until it snaps into place.
2.8 Protective Grounding Installation
1. Remove the grounding nut.
2. Connect the grounding ring of the cabinet’s grounding wire onto the grounding stud and screw
up the grounding nut.
NOTE: Strongly recommended the router to be grounded when deployed.

Industrial VPN Router NR500 Series User Manual
Page 17 / 77
2.9 Power Supply Installation
1. Remove the pluggable connector from the unit, then loosen the screws for the locking flanges
as needed.
2. Connect the wires of the power supply to the terminals.
2.10 Power On The Router
1. Connect one end of the Ethernet cable to the LAN port on the unit and the other end to a LAN
port on a PC.
2. Connect the AC power to a power source.
3. Router is ready when SYS LED is blinking.

Industrial VPN Router NR500 Series User Manual
Page 18 / 77
Chapter 3. Access to Web page
3.1 PC Configuration
NR500 router contains a DHCP server which will automatically assign an IP address to your PC,
however in some cases the user may need to change the network settings on their PC to accept
the IP address from the NR500. or you can configure a static IP address manually.
•Obtain an IP address automatically
The process required to do this differs depending on the version of Windows you are using.
NOTE: The following steps are based on Windows 7.
select Start »Control Panel »Network Connections. Right click Local Area Connection and select
Properties to open the configuration dialog box for Local Area Connection. Select Internet
Protocol (TCP/IP) and click Properties to open the TCP/IP configuration window. On the General
tab, select Obtain an IP address automatically and Obtain DNS server address automatically.
Click OK to complete TCP/IP configuration.

Industrial VPN Router NR500 Series User Manual
Page 19 / 77
•Set to a static IP address
click "Use the following IP address" to assign a static IP manually within the same subnet of the
router.
NOTE：Default gateway and DNS server is not necessary if PC not routing all traffic go through
NR500 router.
3.2 Factory Default Settings
NR500 router supports Web-based configuration interface for management. If this is the first time
for you to configure the router, please refer to below default settings.
Username: admin
Password: admin
LAN IP Address: 192.168.5.1 (Eth1/Eth1~Eth3 bridge as LAN mode)
DHCP Server: Enabled