NetModule NB1600 User manual

NetModule Router NB1600
User Manual
Manual Version 1.0
NetModule AG, Switzerland
November 28, 2012

Contents
1 Welcome to NetModule 8
2 Conformity 9
2.1 Safety Instructions .............................. 9
2.2 Declaration of Conformity .......................... 10
2.3 Waste Disposal ................................ 10
2.4 National Restrictions ............................. 10
2.4.1 France ................................. 10
2.4.2 Italy .................................. 11
2.4.3 Latvia ................................. 11
2.4.4 Luxembourg .............................. 11
2.4.5 Norway ................................ 11
2.4.6 Russian Federation .......................... 11
2.4.7 Turkey ................................. 12
3 Specifications 13
3.1 Operating Elements .............................. 13
3.2 Interfaces ................................... 15
3.2.1 Overview ............................... 15
3.2.2 USB 2.0 Host Port .......................... 15
3.2.3 RJ45 Ethernet Connectors ...................... 16
3.2.4 15 Pin Terminal Block ........................ 17
4 Installation 20
4.1 Environmental Conditions .......................... 20
4.2 Installation of the Router .......................... 20
4.3 Installation of the SIM Card ......................... 20
4.4 Installation of the GSM/UMTS Antenna .................. 21
4.5 Installation of the WLAN Antennas ..................... 21
4.6 Installation of the Local Area Network ................... 21
4.7 Installation of the Power Supply ....................... 21
5 Configuration 22
2

NB1600 User Manual
5.1 First Steps ................................... 22
5.1.1 Initial Access ............................. 22
5.1.2 Recovery ................................ 23
5.2 HOME ..................................... 24
5.3 INTERFACES ................................ 25
5.3.1 WAN .................................. 25
5.3.2 Ethernet ................................ 30
5.3.3 Mobile ................................. 34
5.3.4 WLAN ................................. 38
5.3.5 USB .................................. 44
5.3.6 Serial Port ............................... 46
5.3.7 Digital I/O .............................. 48
5.4 ROUTING ................................... 49
5.4.1 Static Routes ............................. 49
5.4.2 Extended Routing .......................... 51
5.4.3 Bridging ................................ 52
5.4.4 Mobile IP ............................... 53
5.5 FIREWALL .................................. 56
5.5.1 Administration ............................ 56
5.5.2 Rules .................................. 56
5.5.3 NAPT ................................. 57
5.6 VPN ...................................... 60
5.6.1 OpenVPN ............................... 60
5.6.2 IPsec .................................. 65
5.6.3 PPTP ................................. 70
5.6.4 Dial-In ................................. 73
5.7 SERVICES .................................. 74
5.7.1 SDK .................................. 74
5.7.2 DHCP Server ............................. 84
5.7.3 DNS Server .............................. 86
5.7.4 DynDNS ................................ 87
5.7.5 E-Mail ................................. 88
5.7.6 Events ................................. 89
5.7.7 SMS .................................. 90
5.7.8 SSH/Telnet Server .......................... 93
5.7.9 SNMP Agent ............................. 94
5.7.10 Web Server .............................. 98
5.7.11 Redundancy .............................. 99
5.8 SYSTEM ...................................101
5.8.1 System .................................101
5.8.2 Authentication ............................104
5.8.3 Software Update ...........................106
3

5.8.4 Configuration .............................107
5.8.5 Troubleshooting ............................110
5.8.6 Keys and Certificates .........................113
5.8.7 Licensing ...............................116
5.9 LOGOUT ...................................117
6 Command Line Interface 118
6.1 General Usage .................................118
6.2 Print Help ...................................119
6.3 Getting Config Parameters ..........................120
6.4 Setting Config Parameters ..........................120
6.5 Getting Status Information ..........................121
6.6 Sending E-Mail or SMS ............................121
6.7 Updating System Facilities ..........................122
6.8 Restarting Services ..............................122
6.9 Resetting System ...............................123
6.10 Rebooting System ...............................123
6.11 Running Shell Commands ..........................123
6.12 CLI-PHP ...................................124
7 Technical Support 129
8 Legal Notice 130
A Appendix 132
A.1 Abbrevations .................................132
A.2 System Events .................................134
A.3 Factory Configuration ............................136
A.4 SNMP VENDOR MIB ............................137
A.5 SDK Examples ................................144
A.6 SDK Sample SMS Control ..........................146
List of Figures
5.1 Home ..................................... 24
5.2 WAN Links .................................. 26
5.3 WAN Settings ................................. 27
5.4 Link Supervision ............................... 28
4

NB1600 User Manual
5.5 LAN Ports ................................... 30
5.6 LAN Link Settings .............................. 31
5.7 LAN IP Configuration ............................ 32
5.8 SIMs ...................................... 34
5.9 WWAN Interfaces ............................... 36
5.10 WLAN Management ............................. 38
5.11 WLAN Scan .................................. 39
5.12 WLAN Interfaces ............................... 40
5.13 WLAN Configuration ............................. 41
5.14 WLAN IP Configuration ........................... 42
5.15 USB Device Server .............................. 45
5.16 Serial Port ................................... 46
5.17 Static Routing ................................. 49
5.18 Extended Routing ............................... 51
5.19 Bridging .................................... 52
5.20 Mobile IP ................................... 54
5.21 NAPT Administration ............................ 57
5.22 Inbound NAPT ................................ 58
5.23 Outbound NAPT ............................... 59
5.24 OpenVPN Administration .......................... 60
5.25 OpenVPN Configuration ........................... 62
5.26 OpenVPN Client Management ........................ 64
5.27 IPsec Administration ............................. 66
5.28 IPsec Configuration .............................. 67
5.29 PPTP Administration ............................ 70
5.30 PPTP Tunnel Configuration ......................... 71
5.31 PPTP Client Management .......................... 72
5.32 Dial-in Server Settings ............................ 73
5.33 SDK Administration ............................. 78
5.34 SDK Jobs ................................... 80
5.35 SDK Testing .................................. 82
5.36 DHCP Leases ................................. 84
5.37 DHCP Server ................................. 85
5.38 DNS Server .................................. 86
5.39 Dynamic DNS Settings ............................ 87
5.40 E-Mail Settings ................................ 88
5.41 Event Notification Settings .......................... 89
5.42 SMS Configuration .............................. 91
5.43 SSH and Telnet Server ............................ 93
5.44 SNMP Agent ................................. 96
5.45 Web Server .................................. 98
5.46 VRRP Configuration ............................. 99
5

5.47 System .....................................101
5.48 Regional settings ...............................102
5.49 System information ..............................103
5.50 User Accounts .................................104
5.51 Remote Authentication ............................105
5.52 Manual File Configuration ..........................107
5.53 Automatic File Configuration ........................108
5.54 Factory Configuration ............................109
5.55 Log Viewer ..................................110
5.56 Tech Support File ...............................111
5.57 Keys and certificates management ......................113
5.58 Licensing ....................................116
5.59 Logout .....................................117
List of Tables
3.1 NB1600 Status Indicators .......................... 14
3.2 NB1600 Interfaces ............................... 15
3.3 USB 2.0 Host Port Specification ....................... 16
3.4 Ethernet Port Specification ......................... 16
3.5 Pin Assignments of RJ45 Ethernet Connectors ............... 16
3.6 Power Specifications ............................. 17
3.7 RS-232 Port Specification .......................... 17
3.8 Isolated Digital Outputs Specification .................... 18
3.9 Isolated Digital Inputs Specification ..................... 18
3.10 Pin Assignments of Terminal Block ..................... 19
4.1 Operating Conditions ............................. 20
5.1 WAN Link Prerequisites ........................... 25
5.2 Static Route Flags .............................. 50
5.5 SMS Control Commands ........................... 83
5.6 SMS Number Expressions .......................... 90
5.7 Certificate/Key Terms ............................114
5.8 Certificate Attributes .............................114
A.1 Abbreviations .................................133
A.2 System Events .................................135
6

NB1600 User Manual
A.3 SDK Examples ................................145
7

1. Welcome to NetModule
Thank you for purchasing a NetModule Router. This document should give you an
introduction to the router and its features. The following chapters describe any aspects
of commissioning the device, installation procedure and provide helpful information
towards configuration and maintenance.
8

2. Conformity
This chapter provides general information for putting the router into operation.
2.1. Safety Instructions
NetModule routers must be used in compliance with any and all applicable national
and international laws and with any special restrictions regulating the utilization of the
communication module in prescribed applications and environments.
We would like to point out that only the original accessories, shipping with the router,
must be used in order to prevent possible injury to health and damage to appliances and
to ensure that all the relevant provisions have been complied with. Unauthorized mod-
ifications or utilization of unapproved accessories may void the warranty. The routers
must not be opened. However, it is possible to replace any pluggable SIM cards even
during operation.
All circuits connected to the interfaces of the router must comply with the requirements
of Safety Extra Low Voltage (SELV) circuits and have to be designed for indoor use only.
Interconnections must not leave the building nor penetrate the body shell of a vehicle.
Possible antenna circuits must be limited to over-voltage transient levels below 1500
Volts according to IEC 60950-1, TNV-1 circuit levels using safety approved components.
NB1600 routers shall be only used with certified (CSA or equivalent) power supply,
which must have a limited and SELV circuit output. They are basically designed for
indoor use. Do not expose the communication module to extreme ambient conditions
and protect the communication module against dust, moisture and high temperature.
We remind the user of the duty to observe the restrictions concerning the utilization of
radio devices at petrol stations, in chemical facilities or in the course of blasting works
in which explosives are used. Switch off the communication module when traveling by
plane.
You need to pay heightened attention when using the communication module close to
personal medical devices, such as cardiac pacemakers or hearing aids. NetModule routers
may also cause interference in the nearer distance of TV sets, radio receivers and personal
computers.
Avoid any installation of the antenna during a lightning. Always keep a distance of more
than 40 cm from the antenna in order to reduce exposure to electromagnetic fields below
the legal limits. This distance applies to λ
4- and λ 2-antennas. Larger distances may apply
to antennas with higher gain.
Any Ethernet cabling must be shielded, the Ethernet section of this manual provides
9

NB1600 User Manual
more information.
We highly recommended creating a copy of a working system configuration. It can
be downloaded using the Web Manager and easily applied to a newer software release
afterwards as we generally guarantee backward compatibility.
2.2. Declaration of Conformity
NetModule hereby declares that under our own responsibility that the
routers comply with the relevant standards following the provisions of
the Council Directive 1999/5/EC. The signed version of the Declara-
tions of Conformity can be found at: http://www.netmodule.com/
products
2.3. Waste Disposal
In accordance with the requirements of the Council Directive
2002/96/EC regarding Waste Electrical and Electronic Equipment
(WEEE), you are urged to ensure that this product will be segregated
from other waste at end-of-life and delivered to the WEEE collection
system in your country for proper recycling.
2.4. National Restrictions
This product may be generally used in all EU countries (and other countries following
the EU directive 1999/5/EC) without any limitation except for the countries mentioned
below.
2.4.1. France
In case the product is used outdoors, the output power is restricted at some parts of the
band. See the table below or check http://www.art-telecom.fr/ for more details.
Frequency Power (EIRP) Restrictions
2400-2454 MHz 100 mW (20 dBm) Only for indoor applications
2454-2483.5 MHz 10 mW (10 dBm) If used outdoors
5470-5725 MHz Relevant provisions for the implementa-
tion of DFS mechanism described
10

NB1600 User Manual
2.4.2. Italy
This product meets the national radio interface regulations and requirements specified
in the National Frequency Allocation Table for Italy. Unless operating within the bound-
aries of the owner’s property, the use of this Wireless LAN product requires a general
authorization. Please check http://www.comunicazioni.it for more details.
2.4.3. Latvia
The outdoor usage within the 2.4-GHz band requires authorization from the Electronic
Communications Office. Please check http://www.esd.lv for more details.
2.4.4. Luxembourg
General authorization required for network and service apply.
2.4.5. Norway
Frequency Restrictions
2400.0-2483.5 MHz This band range cannot be operated in any geographical
areas within a radius of 20km away from the center of Ny-
Ålesund
2.4.6. Russian Federation
Frequency Power (EIRP) Restrictions
2400.0-2483.5 MHz 100 mW (20 dBm) Only for indoor applications
5150-5250 MHz 100 mW (20 dBm) Permitted to use only for indoor appli-
cations, closed industrial/warehouse areas
and on board of aircrafts
5250-5350 MHz 100 mW (20 dBm) 1. Permitted to use for local networks of
crew service communications on board of
aircrafts in the area of the airport and at
all stages of the flight. 2. Permitted to use
for public wireless access local networks on
board of a aircraft during the flight but at
a altitude of not less than 3000 m
11

NB1600 User Manual
Frequency Power (EIRP) Restrictions
5650-5825 MHz 100 mW (20 dBm) Permitted to use on board of the aircraft
during a flight at a altitude not less than
3000 m
2.4.7. Turkey
Frequency Restrictions
5470-5725 MHz Not implemented
12

3. Specifications
There are currently four different models of NB1600 available:
•NB1600 Mobile
•NB1600 Mobile & WLAN
•NB1600 WLAN
•NB1600 Wireline
3.1. Operating Elements
The following table describes the router’s status indicators. The color of the LED
represents the signal quality for wireless links.
lred means low
lyellow means moderate
lgreen means good or excellent
Label Color State Function
Status lblinking The device is busy due to startup, software or configu-
ration update.
lon The device is ready. The captions of the right bank
apply.
lon The device is ready. The captions of the left bank apply.
PPPoE lon PPPoE connection is up.
moff PPPoE connection is down.
Mobile lllon Mobile connection is up.
lblinking Mobile connection is being established.
moff Mobile connection is down.
VPN lon VPN connection is up.
moff VPN connection is down.
WLAN lllon WLAN connection is up.
lblinking WLAN connection is being established.
13

NB1600 User Manual
Label Color State Function
moff WLAN connection is down.
DO1 lon Normally open output port 1 is closed.
moff Normally open output port 1 is open.
DO2 lon Normally closed output port 2 is closed.
moff Normally closed output port 2 is open.
DI1 lon Input port 1 is set.
moff Input port 1 is not set.
DI2 lon Input port 2 is set.
moff Input port 2 is not set.
Table 3.1.: NB1600 Status Indicators
14

NB1600 User Manual
3.2. Interfaces
3.2.1. Overview
Label Panel Function
USB Front USB 2.0 host port, can be used as USB device server or for
software/configuration updates.
Ethernet 1 Front First Ethernet port, can be used as LAN or WAN interface.
Ethernet 2 Front Second Ethernet port, can be used as LAN or WAN inter-
face.
Mobile Front SMA female connector for GSM/UMTS antenna
WLAN1 Front SMA female connector for first WLAN antenna (main)
WLAN2 Front SMA female connector for second WLAN antenna (diver-
sity)
Top Earth protection connector (earthing is optional), connected
to the ground of the power supply VGND. If used, connect a
yellow-green marked cable with at least 6mm2copper area.
Avoid corrosion and protect the screws against loosening.
Power Top Power supply 12-48 VDC (Pins 1 and 2). Additional power
supply (redundancy) 12-48 VDC (Pins 3 and 4)
RS-232 Top Non-isolated serial RS-232 interface (Pins 5 to 7) which can
be used for console administration, serial device server or
other serial based communication applications.
Outputs Top Galvanic isolated digital outputs (Pins 8 to 11)
Inputs Top Galvanic isolated digital inputs (Pins 12 to 15)
Reset Top Reset button, press at least 3 seconds for reboot and at least
5 second for a factory reset. The start of the factory reset is
confirmed by all LEDs lighting up for a second. The button
can be released then again.
Table 3.2.: NB1600 Interfaces
3.2.2. USB 2.0 Host Port
The USB 2.0 host port comes with the following specification:
15

NB1600 User Manual
Feature Specification
Speed Low, Full & Hi-Speed
Current max. 500mA
Table 3.3.: USB 2.0 Host Port Specification
3.2.3. RJ45 Ethernet Connectors
Specification
The two Ethernet ports are specified as follows:
Feature Specification
Isolation 1500 Vrms
Speed 10/100 Mbps
Mode Half- & Full-Duplex
Crossover Automatic MDI/MDI-X
Table 3.4.: Ethernet Port Specification
Pin Assignment
Pin Signal
1 TX+
2 TX−
3 RX+
4 -
5 -
6 RX−
7 -
8 -
Table 3.5.: Pin Assignments of RJ45 Ethernet Connectors
16

NB1600 User Manual
3.2.4. 15 Pin Terminal Block
Power Supply
NB1600 routers provide two non-isolated power supply inputs. The power is sourced
from the input with the higher voltage applied to. The power ports have the following
specifications:
Feature Specification
Power supply nominal voltages 12 VDC, 24 VDC, 36 VDC and 48 VDC
Voltage range 12 VDC to 48 VDC (−15% / +20%)
Max. power consumption 5 W
Table 3.6.: Power Specifications
RS-232
The RS-232 port has the following specification:
Feature Specification
Protocol 3-wire RS-232 (TXD, RXD, GND)
Baud rate 300, 1 200, 2 400, 4 800, 9 600, 19 200,
38 400, 57 600, 115 200
Data bits 7 bit, 8 bit
Parity none, odd, even
Stop bits 1, 2
Software flow control None, XON/XOFF
Hardware flow control None
Table 3.7.: RS-232 Port Specification
Isolated Outputs
The isolated digital outputs have the following specification:
Feature Specification
Number of outputs 2
Limiting continuous current 1 A
17

NB1600 User Manual
Feature Specification
Maximum switching voltage 60 VDC, 42 VAC ( Vrms)
Maximum switching capacity 60 W
Table 3.8.: Isolated Digital Outputs Specification
Isolated Inputs
The isolated digital inputs have the following specification:
Feature Specification
Number of inputs 2
Maximum input voltage 40 VDC
Minimum voltage for level 1
(set) 7.2 VDC
Maximum voltage for level 0
(not set) 5.0 VDC
Table 3.9.: Isolated Digital Inputs Specification
Note: A negative input voltage is not recognized.
Pin Assignment
Pin Signal
1 VGND
2 V1+ (12 VDC to 48 VDC)
3 VGND
4 V2+ (12 VDC to 48 VDC)
5 RS-232 RxD (non-isolated)
6 RS-232 TxD (non-isolated)
7 RS-232 GND (non-isolated)
8 DO1: Dry contact relay normally open
9 DO1: Dry contact relay normally open
10 DO2: Dry contact relay normally closed
18

NB1600 User Manual
Pin Signal
11 DO2: Dry contact relay normally closed
12 DI1−
13 DI1+
14 DI2−
15 DI2+
Table 3.10.: Pin Assignments of Terminal Block
19

4. Installation
4.1. Environmental Conditions
The following precautions must be taken before installing a NB1600 router:
•Avoid direct solar radiation
•Protect the device from humidity, steam and aggressive fluids
•Guarantee sufficient circulation of air around the device
•The device is for indoor use only
Parameter Rating
Input Voltage 12 VDC to 48 VDC (−15% / +20%)
Operating Temperature Range −25 ◦Cto +70 ◦C
Humidity 0 to 95% (non-condensing)
Altitude up to 4000m
Over-Voltage Category II
Pollution Degree 2
Ingress Protection Rating IP40
Table 4.1.: Operating Conditions
4.2. Installation of the Router
The NB1600 is designed for mounting it on a DIN rail or wall but it can also be put on
a worktop. Please consider the safety instructions and the environmental conditions in
chapter 2.
4.3. Installation of the SIM Card
For installing a SIM card, you will have to remove the SIM cover first. The card holder is
opened by sliding it slightly until it shifts up. You can now insert the SIM card, press the
holder and shift it back until it is locked. Ensure to have the contacts placed correctly,
otherwise the holder will not lock. The cover has to be closed again afterwards.
20