NetModule NB2800 User manual

NetModule Router NB2800
User Manual for Software Version 4.2
Manual Version 1.12
NetModule AG, Switzerland
November 28, 2018

NetModule Router NB2800
This manual covers all variants of the NB2800 product type.
The specifications and information regarding the products in this manual are subject to change without notice.
We would like to point out that NetModule makes no representation or warranties with respect to the contents
herein and shall not be responsible for any loss or damage caused to the user by the direct or indirect use of
this information This document may contain information about third party products or processes. Such third
party information is generally out of influence of NetModule and therefore NetModule shall not be responsible
for the correctness or legitimacy of this information. Users must take full responsibility for their application of
any products.
Copyright ©2018 NetModule AG, Switzerland All rights reserved
This document contains proprietary information of NetModule. No parts of the work described herein may be
reproduced. Reverse engineering of the hardware or software is prohibited and protected by patent law. This
material or any portion of it may not be copied in any form or by any means, stored in a retrieval system, adopted
or transmitted in any form or by any means (electronic, mechanical, photographic, graphic, optic or otherwise),
or translated in any language or computer language without the prior written permission of NetModule.
A large amount of the source code to this product is available under licenses which are both free and open
source. Most of it is covered by the GNU General Public License which can be obtained from www.gnu.org. The
remainder of the open source software which is not under the GPL, is usually available under one of a variety of
more permissive licenses. A detailed license information for a particular software package can be provided on
request.
All other products or company names mentioned herein are used for identification purposes only and may be
trademarks or registered trademarks of their respective owners. The following description of software, hard-
ware or process of NetModule or other third party provider may be included with your product and will be
subject to the software, hardware or other license agreements.
Contact
www.netmodule.com/support
NetModule AG Tel [phone]
Meriedweg 11 Fax [phone]
CH-3172 Niederwangen info netmodule.com
Switzerland http://www.netmodule.com

Contents
1. Welcome to NetModule ................................. 1
2. Conformity ........................................ 2
2.1. Safety Instructions .................................. 2
2.2. Declaration of Conformity .............................. 4
2.3. Waste Disposal .................................... 4
2.4. National Restrictions ................................. 4
2.5. Open Source Software ................................ 5
3. Specifications ....................................... 6
3.1. Appearance ...................................... 6
3.2. Features ........................................ 7
3.3. Type Label ....................................... 7
3.4. Environmental Conditions .............................. 8
3.5. Interfaces ....................................... 9
3.5.1. Overview ..................................... 9
3.6. LED Indicators .................................... 10
3.6.1. Reset ....................................... 11
3.6.2. Mobile ...................................... 13
3.6.3. WLAN ....................................... 14
3.6.4. GNSS ....................................... 15
3.6.5. USB 3.0 Host Port ................................ 16
3.6.6. RJ45 Ethernet Connectors ........................... 16
3.6.7. 6 Pin Terminal Block .............................. 17
3.6.8. Extension Port .................................. 19
3.7. Data Storage (Option Dx) .............................. 24
4. Installation ........................................ 27
4.1. Installation of Micro-SIM Cards ........................... 27
4.2. Installation of the GSM/UMTS/LTE Antennas ................... 27
4.3. Installation of the WLAN Antennas ......................... 28
4.4. Installation of the GNSS Antenna .......................... 29
4.5. Installation of the Local Area Network ....................... 30
4.6. Installation of the Power Supply & Delayed Power Off .............. 30
4.7. Installation of the Audio Interface ......................... 30
5. Configuration ....................................... 31
5.1. First Steps ....................................... 31
5.1.1. Initial Access ................................... 31
5.1.2. Recovery ..................................... 32
5.2. HOME ......................................... 34
5.3. INTERFACES ...................................... 37
5.3.1. WAN ....................................... 37
5.3.2. Ethernet ..................................... 44
5.3.3. Mobile ...................................... 50
5.3.4. WLAN ....................................... 55
5.3.5. Software Bridges ................................ 64
5.3.6. USB ........................................ 65
5.3.7. Serial Port .................................... 68
3

NB2800 User Manual 4.2
5.3.8. Audio ....................................... 72
5.3.9. GNSS ....................................... 73
5.4. ROUTING ....................................... 76
5.4.1. Static Routes ................................... 76
5.4.2. Extended Routing ................................ 78
5.4.3. Multipath Routes ................................ 79
5.4.4. Mobile IP ..................................... 80
5.4.5. Quality Of Service ................................ 83
5.4.6. Multicast ..................................... 85
5.4.7. OSPF ....................................... 86
5.4.8. BGP ........................................ 87
5.5. FIREWALL ....................................... 88
5.5.1. Administration ................................. 88
5.5.2. Adress/Port Groups ............................... 88
5.5.3. Rules ....................................... 89
5.5.4. NAPT ....................................... 91
5.6. VPN .......................................... 94
5.6.1. OpenVPN .................................... 94
5.6.2. IPsec .......................................100
5.6.3. PPTP .......................................106
5.6.4. GRE ........................................109
5.6.5. Dial-In ......................................110
5.7. SERVICES .......................................112
5.7.1. SDK ........................................112
5.7.2. DHCP Server ...................................121
5.7.3. DNS Server ....................................123
5.7.4. NTP Server ....................................125
5.7.5. Dynamic DNS ..................................126
5.7.6. E-Mail .......................................128
5.7.7. Events ......................................129
5.7.8. SMS ........................................130
5.7.9. SSH/Telnet Server ................................132
5.7.10.SNMP Agent ...................................134
5.7.11.Web Server ...................................139
5.7.12.Discovery ....................................140
5.7.13.Redundancy ...................................141
5.7.14.Voice Gateway ..................................143
5.8. SYSTEM ........................................149
5.8.1. System ......................................149
5.8.2. Authentication ..................................155
5.8.3. Software Update ................................158
5.8.4. Module Firmware Update ...........................159
5.8.5. Software Profiles ................................160
5.8.6. Configuration ..................................161
5.8.7. Troubleshooting .................................164
5.8.8. Keys and Certificates ..............................167
5.8.9. Licensing .....................................172
4

NB2800 User Manual 4.2
5.8.10.Legal Notice ...................................173
5.9. LOGOUT ........................................174
6. Command Line Interface ................................175
6.1. General Usage ....................................175
6.2. Print Help .......................................176
6.3. Getting Config Parameters .............................177
6.4. Setting Config Parameters ..............................177
6.5. Checking Config Completed .............................177
6.6. Getting Status Information .............................177
6.7. Scanning Networks ..................................178
6.8. Sending E-Mail or SMS ................................178
6.9. Updating System Facilities ..............................179
6.10. Manage keys and certificates ............................179
6.11. Restarting Services ..................................180
6.12. Debug System .....................................180
6.13. Resetting System ...................................181
6.14. Rebooting System ..................................181
6.15. Running Shell Commands ..............................181
6.16. Working with History .................................182
6.17. CLI-PHP ........................................182
A. Appendix .........................................187
A.1. Abbrevations .....................................187
A.2. System Events ....................................189
A.3. Factory Configuration ................................191
A.4. SNMP VENDOR MIB .................................192
A.5. SDK Examples .....................................211
5

List of Figures
5.1. Initial Login ...................................... 32
5.2. Home ......................................... 34
5.3. WAN Links ...................................... 37
5.4. WAN Settings ..................................... 41
5.5. Link Supervision ................................... 42
5.6. Ethernet Ports .................................... 44
5.7. Ethernet Link Settings ................................ 45
5.8. VLAN Management .................................. 46
5.9. LAN IP Configuration ................................ 48
5.10. SIMs .......................................... 50
5.11. WWAN Interfaces .................................. 53
5.12. WLAN Management ................................. 55
5.13. WLAN Configuration ................................. 59
5.14. WLAN IP Configuration ............................... 63
5.15. USB Administration ................................. 65
5.16. USB Device Management .............................. 66
5.17. Serial Port Administration .............................. 68
5.18. Serial Port Settings .................................. 69
5.19. Static Routing ..................................... 76
5.20. Extended Routing .................................. 78
5.21. Multipath Routes ................................... 79
5.22. Mobile IP ....................................... 82
5.23. Firewall Groups .................................... 88
5.24. Firewall Rules ..................................... 89
5.25. Masquerading .................................... 91
5.26. Inbound NAPT .................................... 92
5.27. OpenVPN Administration .............................. 94
5.28. OpenVPN Configuration ............................... 95
5.29. OpenVPN Client Management ........................... 99
5.30. IPsec Administration .................................101
5.31. IPsec Configuration .................................102
5.32. PPTP Administration .................................106
5.33. PPTP Tunnel Configuration .............................107
5.34. PPTP Client Management ..............................108
5.35. Dial-in Server Settings ................................110
5.36. SDK Administration .................................116
5.37. SDK Jobs ........................................117
5.38. DHCP Server .....................................121
5.39. DNS Server ......................................123
5.40. NTP Server ......................................125
5.41. Dynamic DNS Settings ................................126
5.42. E-Mail Settings ....................................128
5.43. SMS Configuration ..................................130
5.44. SSH and Telnet Server ................................132
6

NB2800 User Manual 4.2
5.45. SNMP Agent .....................................135
5.46. Web Server ......................................139
5.47. VRRP Configuration .................................141
5.48. Voice Gateway Administration ...........................143
5.49. System ........................................149
5.50. Regional settings ...................................152
5.51. User Accounts ....................................155
5.52. Remote Authentication ...............................156
5.53. Manual File Configuration ..............................161
5.54. Automatic File Configuration ............................162
5.55. Factory Configuration ................................163
5.56. Log Viewer ......................................165
5.57. Tech Support File ...................................166
5.58. Keys and certificates .................................167
5.59. Certificate Configuration ..............................169
5.60. Licensing .......................................172
7

List of Tables
3.1. Environmental Conditions .............................. 8
3.2. NB2800 Interfaces .................................. 10
3.3. NB2800 Status Indicators .............................. 11
3.4. Ethernet Status Indicators ............................. 11
3.5. Mobile Interface ................................... 13
3.6. Mobile Antenna Port Specification ......................... 13
3.7. IEEE 802.11 Standards ................................ 14
3.8. WLAN Antenna Port Specification ......................... 14
3.9. GNSS Specifications option G ............................ 15
3.10. GNSS Specifications option Ge ........................... 15
3.11. GNSS / GPS Antenna Port Specification ...................... 15
3.12. USB 3.0 Host Port Specification ........................... 16
3.13. Ethernet Port Specification ............................. 16
3.14. Pin Assignments of RJ45 Ethernet Connectors .................. 17
3.15. 6 Pin Terminal Block Specifications ......................... 17
3.16. Pin Assignments of Terminal Block ......................... 17
3.17. Power Specifications ................................. 18
3.18. RS-232 Port Specification .............................. 18
3.19. Audio Port Specification ............................... 20
3.20. Pin Assignments of RJ45 Audio Connector ..................... 20
3.21. CAN Port Specification ................................ 21
3.22. Pin Assignments of RJ45 CAN Connector ..................... 21
3.23. Isolated RS-232 Port Specification ......................... 22
3.24. Pin Assignments of RJ45 RS-232 Connector .................... 22
3.25. RS-485 Port Specification .............................. 23
3.26. Pin Assignments of RJ45 RS-485 Connector .................... 23
3.27. Storage Specifications ................................ 24
3.28. Common PTT Specification ............................. 25
3.29. Audio Port Specification ............................... 25
3.30. Digital Input Specification .............................. 25
3.31. Digital Output Specification ............................. 26
3.32. Pin Assignments of RJ45 Audio-PTT Connector .................. 26
4.1. LTE/UMTS antenna port types ........................... 28
4.2. WLAN antenna port types .............................. 29
5.20. IEEE 802.11 Network Standards .......................... 56
5.44. Static Route Flags .................................. 77
5.90. SMS Control Commands ..............................120
5.100. SMS Number Expressions ..............................131
5.142. Certificate Sections ..................................168
5.143. Certificate Operations ................................168
A.1. Abbreviations .....................................188
A.2. System Events ....................................190
8

NB2800 User Manual 4.2
A.3. SDK Examples ....................................213
9

1. Welcome to NetModule
Thank you for purchasing a NetModule Router. This document should give you an introduc-
tion to the router and its features. The following chapters describe any aspects of commis-
sioning the device, installation procedure and provide helpful information towards configu-
ration and maintenance.
Please find further imformation such as sample SDK script or configuration samples in our
wiki on http://wiki.netmodule.com.
1

2. Conformity
This chapter provides general information for putting the router into operation.
2.1. Safety Instructions
Please carefully observe all safety instructions in the manual that are marked with the sym-
bol .
Compliance information: The NetModule routers must be used in compli-
ance with any and all applicable national and international laws and with any
special restrictions regulating the utilization of the communication module in
prescribed applications and environments.
Information about the accessories / changes to the device:
•Please only use original accessories to prevent injuries and health risks.
•Changes made to the device or the use of non-authorized accessories will
render the warranty null and void and potentially invalidate the operating
license.
•NetModule routers must not be opened (SIM cards may be used according
to the instructions).
2

NB2800 User Manual 4.2
Information about the device interfaces:
•All systems that are connected to the NetModule router interfaces must meet
the requirements for SELV (Safety Extra Low Voltage) systems.
•Interconnections must not leave the building nor penetrate the body shell of
a vehicle.
•Connections for antennas may only exit the building or the vehicle hull if
transient overvoltages (according to IEC 62368-1) are limited by external pro-
tection circuits down to 1 500 Vpeak. All other connections must remain within
the building or the vehicle hull.
•Always keep a distance of more than 40 cm from the antenna in order to
reduce exposure to electromagnetic fields below the legal limits.
•Devices with a WLAN interface may be operated only with applicable Regula-
tory Domain configured. Special attention must be paid to country, number
of antennas and the antenna gain (see also chapter 5.3.4). The maximum
allowed gain is 3dBi in the relevant frequency range. WLAN antennas with a
higher amplification may be used with the NetModule router "Enhanced-RF-
Configuration" software license and the antenna gain and cable attenuation
that have been correctly configured by certified specialized personnel. A mis-
configuration will lead to loss of the approval.
•Cellular antennas attached to the router must have an antenna gain of equal
or less than 2.5 dBi. The user is responsible for the compliance with the legal
regulations.
•Only CE-compliant power supplies with a current-limited SELV output voltage
range may be used with the NetModule routers.
3

NB2800 User Manual 4.2
General safety instructions:
•Observe the usage limitations of radio units at filling stations, in chemical
plants, in systems with explosives or potentially explosive locations.
•The devices may not be used in airplanes.
•Exercise particular caution near personal medical aids, such as pacemakers
and hearing aids.
•The NetModule routers may also cause interference in the nearer distance of
TV sets, radio receivers and personal computers.
•Never perform work on the antenna system during a thunderstorm.
•The devices are generally designed for normal indoor use. Do not expose the
devices to extraordinary environmental conditions worse than IP40.
•Protect them against aggressive chemical atmospheres and humidity or tem-
peratures outside specifications.
•We highly recommended creating a copy of a working system configuration.
It can be easily applied to a newer software release afterwards.
2.2. Declaration of Conformity
NetModule hereby declares that under our own responsibility that the
routers comply with the relevant standards following the provisions of the
RED Directive 2014/53/EU. The signed version of the Declaration of Con-
formity can be obtained from http://www.netmodule.com/downloads
2.3. Waste Disposal
In accordance with the requirements of the Council Directive 2012/19/EU
regarding Waste Electrical and Electronic Equipment (WEEE), you are
urged to ensure that this product will be segregated from other waste
at end-of-life and delivered to the WEEE collection system in your country
for proper recycling.
2.4. National Restrictions
This product may be generally used in all EU countries (and other countries following the
RED Directive 2014/53/EU) without any limitation. Please refer to our WLAN Regulatory
Database for getting further national radio interface regulations and requirements for a
particular country.
4

NB2800 User Manual 4.2
2.5. Open Source Software
We inform you that NetModule products may contain in part open-source software. We
are distributing such open-source software to you under the terms of GNU General Public
License (GPL)1, GNU Lesser General Public License (LGPL)2or other open-source licenses3.
These licenses allow you to run, copy, distribute, study, change and improve any software
covered by GPL, Lesser GPL, or other open-source licenses without any restrictions from us
or our end user license agreement on what you may do with that software. Unless required
by applicable law or agreed to in writing, software distributed under open-source licenses
is distributed on an "AS IS" basis, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
either express or implied.
To obtain the corresponding open source codes covered by these licenses, please contact
our technical support at router support.netmodule.com.
Acknowledgements
This product includes:
•PHP, freely available from http://www.php.net
•Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org)
•Cryptographic software written by Eric Young (eay cryptsoft.com)
•Software written by Tim Hudson (tjh cryptsoft.com)
•Software written Jean-loup Gailly and Mark Adler
•MD5 Message-Digest Algorithm by RSA Data Security, Inc.
•An implementation of the AES encryption algorithm based on code released by Dr
Brian Gladman
•Multiple-precision arithmetic code originally written by David Ireland
•Software from The FreeBSD Project (http://www.freebsd.org)
1Please find the GPL text under http://www.gnu.org/licenses/gpl-2.0.txt
2Please find the LGPL text under http://www.gnu.org/licenses/lgpl.txt
3Please find the license texts of OSI licenses (ISC License, MIT License, PHP License v3.0, zlib License) under
http://opensource.org/licenses
5

3. Specifications
3.1. Appearance
6

NB2800 User Manual 4.2
3.2. Features
All models of NB2800 have following standard functionalities:
•Power input with Ingition Sense
•2 Ethernet ports (10/100/1000 Mbit/s)
•1 serial port (RS-232)
•1 USB 3.0 host port
•4 micro SIM card slots
•Extension port
The NB2800 can be equipped with the following options:
•LTE
•LTE 450MHz
•LTE US
•CDMA 450MHz
•WLAN IEEE 802.11ac
•GPS/GNSS
•RS-232
•RS-485
•IBIS
•CAN
•Audio
•Audio-PTT
•1 TB internal storage
•Software Key Virtualization
•Software Key Server
•Software Key Voice
Note: All LTE models include support for UMTS/EDGE/GPRS.
Due to its modular approach, the NB2800 router and its hardware components can be
arbitrarily assembled according to its indented usage or application. Please contact us in
case of special project requirements.
3.3. Type Label
The type label of the NB2800 router is located on the bottom side of the enclosure.
7

NB2800 User Manual 4.2
3.4. Environmental Conditions
Parameter Rating
Input Voltage 12 VDC to 48 VDC (±25%)
Operating Temperature Range
main board: −40 ◦Cto +85 ◦C
UMTS: −25 ◦Cto +70 ◦C
LTE: −25 ◦Cto +70 ◦C
WLAN: −25 ◦Cto +70 ◦C
Storage Temperature Range −40 ◦Cto +85 ◦C
Humidity 0 to 95% (non-condensing)
Altitude up to 4000m
Over-Voltage Category I
Pollution Degree 2
Ingress Protection Rating IP40 (with SIM and USB covers mounted)
Table 3.1.: Environmental Conditions
8

NB2800 User Manual 4.2
3.5. Interfaces
3.5.1. Overview
Nr. Label Panel Function
1 LED Indicators Front LED Indicators for the different interfaces
2 USB Front USB 2.0 host port, can be used for software/configuration
updates.
3 SIM 1-4 Front SIM 1-4, they can be assigned dynamically to any modem
by configuration.
4 Reset Front Reboot and factory reset button
5ETH 1-2 Rear Gigabit Ethernet ports, can be used as LAN or WAN inter-
face.
6MOB 1 Rear 2 FAKRA coding D jacks for MIMO LTE antenna
7MOB 2 Rear 2 FAKRA coding D jacks for MIMO LTE antenna
8GNSS Rear FAKRA coding C jack for GNSS antenna
9RS-232 Rear Non-isolated serial RS-232 interface (Pins 4 to 6) which
can be used for console administration, serial device
server or other serial based communication applications.
10 PWR Rear Power supply 12-48 VDC (Pins 1 and 2) and Ignition (Pin 3)
9

NB2800 User Manual 4.2
Nr. Label Panel Function
11 MOB 3/
WLAN 2
Rear 2 FAKRA coding I/D jacks for MIMO WLAN 2 or MIMO LTE
antenna
12 A8 Rear Auxiliary port
13 MOB 4/
WLAN 1
Rear 2 FAKRA coding I/D jacks for MIMO WLAN or MIMO LTE
antenna
14 EXT Rear Audio/CAN/IBIS/RS-232/RS-485/Audio-PTT extension.
Table 3.2.: NB2800 Interfaces
3.6. LED Indicators
The following table describes the NB2800 status indicators.
Label Color State Function
STAT lblinking The device is busy due to startup, software or configura-
tion update.
lon The device is ready. The captions of the top bank apply.
lon The device is ready. The captions of the bottom bank ap-
ply.
MOB1 lll[1] on Mobile connection 1 is up.
lblinking Mobile connection 1 is being established.
moff Mobile connection 1 is down.
MOB2 lll[1] on Mobile connection 2 is up.
lblinking Mobile connection 2 is being established.
moff Mobile connection 2 is down.
VPN lon VPN connection is up.
moff VPN connection is down.
WLAN1 lll[1] on WLAN 1 connection is up.
lblinking WLAN 1 connection is being established.
moff WLAN 1 connection is down.
WLAN2 lll[1] on WLAN 2 connection is up.
lblinking WLAN 2 connection is being established.
moff WLAN 2 connection is down.
10

NB2800 User Manual 4.2
Label Color State Function
GNSS lon GNSS is turned on and a valid NMEA stream is available.
lblinking GNSS is searching for satellites.
moff GNSS is turned off or no valid NMEA stream is available.
VOICE lon A voice call is currently active.
moff No voice call is active.
USR1-
5
lon User defined.
moff User defined.
EXT1 lon Extension port 1 is on.
moff Extension port 1 is off.
EXT2 lon Extension port 2 is on.
moff Extension port 2 is off.
[1] The color of the LED represents the signal quality for wireless links.
lred means low
lyellow means moderate
lgreen means good or excellent
Table 3.3.: NB2800 Status Indicators
Ethernet LEDs
The following table describes the Ethernet status indicators.
Label Color State Function
ETH1-2 lon Link on (10 Mbit/s, 100 Mbit/s or 1000 Mbit/s)
lblinking Activity
moff no Link
Table 3.4.: Ethernet Status Indicators
3.6.1. Reset
The reset button has two functions:
1. Reboot the system:
Press at least 3 seconds to release a system reboot.
The reboot is indicated with the red blinking STAT LED.
2. Factory reset:
Press at least 10 seconds to release a factory reset.
11