NetModule NB3700 User manual

NetModule Router NB3700
User Manual for Software Version 3.8
Manual Version 1.5
NetModule AG, Switzerland
October 28, 2016

Contents
1 Welcome to NetModule 3
2 Conformity 4
2.1 Safety Instructions .............................. 4
2.2 Declaration of Conformity .......................... 5
2.3 Waste Disposal ................................ 5
2.4 National Restrictions ............................. 5
2.5 Open Source Software ............................ 6
3 Specifications 7
3.1 Features .................................... 7
3.2 Operating Elements .............................. 8
3.3 Interfaces ................................... 10
3.3.1 Overview ............................... 10
3.3.2 USB 2.0 Host Port .......................... 11
3.3.3 M12 Ethernet Connectors ...................... 11
3.3.4 Power Supply ............................. 12
3.3.5 Digital Inputs and Outputs ..................... 13
3.3.6 RS-232 Port .............................. 14
4 Installation 16
4.1 Environmental Conditions .......................... 16
4.2 Installation of the Router .......................... 16
4.3 Installation of the SIM Card ......................... 17
4.4 Installation of the WLAN Antennas ..................... 17
4.5 Installation of the Local Area Network ................... 17
4.6 Installation of the Power Supply ....................... 17
5 Configuration 18
5.1 First Steps ................................... 18
5.1.1 Initial Access ............................. 19
5.1.2 Recovery ................................ 20
5.2 HOME ..................................... 21
2

NB3700 User Manual 3.8
5.3 INTERFACES ................................ 24
5.3.1 WAN .................................. 24
5.3.2 Ethernet ................................ 30
5.3.3 Mobile ................................. 36
5.3.4 WLAN ................................. 41
5.3.5 USB .................................. 47
5.3.6 Serial Port ............................... 50
5.3.7 Digital I/O .............................. 53
5.3.8 GNSS ................................. 54
5.4 ROUTING ................................... 57
5.4.1 Static Routes ............................. 57
5.4.2 Extended Routing .......................... 59
5.4.3 Multipath Routes ........................... 61
5.4.4 Mobile IP ............................... 62
5.4.5 Quality Of Service .......................... 65
5.4.6 Multicast ............................... 67
5.5 FIREWALL .................................. 68
5.5.1 Administration ............................ 68
5.5.2 Adress/Port Groups ......................... 68
5.5.3 Rules .................................. 69
5.5.4 NAPT ................................. 71
5.6 VPN ...................................... 74
5.6.1 OpenVPN ............................... 74
5.6.2 IPsec .................................. 80
5.6.3 PPTP ................................. 86
5.6.4 GRE .................................. 89
5.6.5 Dial-In ................................. 90
5.7 SERVICES .................................. 92
5.7.1 SDK .................................. 92
5.7.2 DHCP Server .............................103
5.7.3 DNS Server ..............................105
5.7.4 NTP Server ..............................107
5.7.5 DynDNS ................................108
5.7.6 E-Mail .................................110
5.7.7 Events .................................111
5.7.8 SMS ..................................112
5.7.9 SSH/Telnet Server .......................... 115
5.7.10 SNMP Agent .............................117
5.7.11 Web Server ..............................122
5.7.12 Redundancy .............................. 123
5.7.13 Voice Gateway ............................125
5.8 SYSTEM ...................................132
3

5.8.1 System .................................132
5.8.2 Authentication ............................136
5.8.3 Software Update ...........................139
5.8.4 Module Firmware Update ......................140
5.8.5 Software Profiles ...........................140
5.8.6 Configuration .............................141
5.8.7 Troubleshooting ............................145
5.8.8 Keys and Certificates .........................147
5.8.9 Licensing ...............................152
5.8.10 Legal Notice .............................. 153
5.9 LOGOUT ...................................154
6 Command Line Interface 155
6.1 General Usage .................................155
6.2 Print Help ...................................156
6.3 Getting Config Parameters .......................... 157
6.4 Setting Config Parameters .......................... 157
6.5 Getting Status Information ..........................158
6.6 Scanning Networks ..............................159
6.7 Sending E-Mail or SMS ............................159
6.8 Updating System Facilities ..........................159
6.9 Manage keys and certificates ......................... 160
6.10 Restarting Services ..............................160
6.11 Debug System ................................. 161
6.12 Resetting System ............................... 162
6.13 Rebooting System ...............................162
6.14 Running Shell Commands ..........................162
6.15 Working with History .............................163
6.16 CLI-PHP ................................... 163
7 Technical Support 169
8 Legal Notice 170
A Appendix 172
A.1 Abbrevations .................................172
A.2 System Events .................................174
A.3 Factory Configuration ............................177
A.4 SNMP VENDOR MIB ............................178
A.5 SDK Examples ................................187
4

NB3700 User Manual 3.8
List of Figures
5.1 Initial Login .................................. 19
5.2 Home ..................................... 21
5.3 WAN Links .................................. 24
5.4 WAN Settings ................................. 27
5.5 Link Supervision ............................... 28
5.6 Ethernet Ports ................................ 30
5.7 Ethernet Link Settings ............................ 31
5.8 VLAN Management ............................. 32
5.9 LAN IP Configuration ............................ 34
5.10 SIMs ...................................... 36
5.11 WWAN Interfaces ............................... 39
5.12 WLAN Management ............................. 41
5.13 WLAN Configuration ............................. 43
5.14 WLAN IP Configuration ........................... 45
5.15 USB Administration ............................. 47
5.16 USB Device Management .......................... 48
5.17 Serial Port Administration .......................... 50
5.18 Serial Port Settings .............................. 51
5.19 Digital I/O Ports ............................... 53
5.20 Static Routing ................................. 57
5.21 Extended Routing ............................... 59
5.22 Multipath Routes ............................... 61
5.23 Mobile IP ................................... 64
5.24 Firewall Groups ................................ 68
5.25 Firewall Rules ................................. 69
5.26 NAPT Administration ............................ 71
5.27 Inbound NAPT ................................ 72
5.28 OpenVPN Administration .......................... 74
5.29 OpenVPN Configuration ........................... 75
5.30 OpenVPN Client Management ........................ 78
5.31 IPsec Administration ............................. 81
5.32 IPsec Configuration .............................. 82
5.33 PPTP Administration ............................ 86
5

5.34 PPTP Tunnel Configuration ......................... 87
5.35 PPTP Client Management .......................... 88
5.36 Dial-in Server Settings ............................ 90
5.37 SDK Administration ............................. 97
5.38 SDK Jobs ................................... 99
5.39 DHCP Server .................................104
5.40 DNS Server ..................................105
5.41 NTP Server ..................................107
5.42 Dynamic DNS Settings ............................108
5.43 E-Mail Settings ................................110
5.44 SMS Configuration ..............................113
5.45 SSH and Telnet Server ............................ 115
5.46 SNMP Agent .................................118
5.47 Web Server ..................................122
5.48 VRRP Configuration .............................123
5.49 Voice Gateway Administration ........................125
5.50 Voice Gateway Endpoint Configuration ...................127
5.51 Voice Gateway Routing Configuration ....................130
5.52 System .....................................132
5.53 Regional settings ...............................135
5.54 User Accounts .................................136
5.55 Remote Authentication ............................138
5.56 Manual File Configuration ..........................141
5.57 Automatic File Configuration ........................142
5.58 Factory Configuration ............................ 143
5.59 Log Viewer ..................................145
5.60 Tech Support File ...............................146
5.61 Keys and certificates .............................147
5.62 Certificate Configuration ...........................149
5.63 Licensing ....................................152
List of Tables
3.1 NB3700 Models ................................ 7
3.2 NB3700 Status Indicators .......................... 9
3.3 NB3700 Interfaces ............................... 10
3.4 USB 2.0 Host Port Specification ....................... 11
6

NB3700 User Manual 3.8
3.5 Ethernet Port Specification ......................... 11
3.6 Pin Assignments of Ethernet Connectors .................. 11
3.7 Power Input Specifications Variant Pa ................... 12
3.8 Power Input Specifications Variant Pb ................... 12
3.9 Pin Assignments of Power Connector .................... 13
3.10 Isolated Digital Outputs Specification .................... 13
3.11 Isolated Digital Inputs Specification ..................... 13
3.12 Pin Assignments of Digital Inputs and Outputs .............. 14
3.13 RS-232 Port Specification .......................... 14
3.14 Pin Assignments of RS-232 Port ....................... 15
4.1 Operating Conditions ............................. 16
5.17 IEEE 802.11 Network Standards ....................... 42
5.33 Static Route Flags .............................. 58
5.69 SMS Control Commands ...........................102
5.75 SMS Number Expressions ..........................112
5.103Certificate Sections .............................. 148
5.104Certificate Operations ............................ 148
A.1 Abbreviations .................................174
A.2 System Events .................................176
A.3 SDK Examples ................................ 189
7

1. Welcome to NetModule
Thank you for purchasing a NetModule Router. This document should give you an
introduction to the router and its features. The following chapters describe any aspects
of commissioning the device, installation procedure and provide helpful information
towards configuration and maintenance.
Plese further imformation such as sample SDK script or configuration samples also in
our wiki on http://wiki.netmodule.com.
8

2. Conformity
This chapter provides general information for putting the router into operation.
2.1. Safety Instructions
NetModule routers must be used in compliance with any and all applicable national
and international laws and with any special restrictions regulating the utilization of the
communication module in prescribed applications and environments.
We would like to point out that only the original accessories, shipping with the router,
must be used in order to prevent possible injury to health and damage to appliances and
to ensure that all the relevant provisions have been complied with. Unauthorized mod-
ifications or utilization of unapproved accessories may void the warranty. The routers
must not be opened. However, it is possible to replace any pluggable SIM cards even
during operation.
All circuits connected to the interfaces of the router must comply with the requirements
of Safety Extra Low Voltage (SELV) circuits and have to be designed for indoor use only.
Interconnections must not leave the building nor penetrate the body shell of a vehicle.
Possible antenna circuits must be limited to over-voltage transient levels below 1500
Volts according to IEC 60950-1, TNV-1 circuit levels using safety approved components.
NB3700 routers shall only be used with a certified (CSA or equivalent) power supply
which must have a limited and SELV circuit output. They are basically designed for
indoor use. Do not expose the communication module to extreme ambient conditions
and protect the communication module against dust, moisture and high temperature.
We remind the user of the duty to observe the restrictions concerning the utilization of
radio devices at petrol stations, in chemical facilities or in the course of blasting works
in which explosives are used. Switch off the communication module when traveling by
plane.
You need to pay heightened attention when using the communication module close to
personal medical devices, such as cardiac pacemakers or hearing aids. NetModule routers
may also cause interference in the nearer distance of TV sets, radio receivers and personal
computers.
Avoid any installation of the antenna during a lightning. Always keep a distance of more
than 40 cm from the antenna in order to reduce exposure to electromagnetic fields below
the legal limits. This distance applies to λ
4- and λ 2-antennas. Larger distances may apply
to antennas with higher gain.
Any Ethernet cabling must be shielded, the Ethernet section of this manual provides
9

NB3700 User Manual 3.8
more information.
Devices with WLAN interface may be operated only with applicable Regulatory Domain
configured.
Cellular antennas attached to the router must have an antenna gain of equal or less than
2.5 dBi. If an extension cable is used to attach the antenna, the antenna gain may be
higher by the amount of cable attenuation.
We highly recommended creating a copy of a working system configuration. It can
be downloaded using the Web Manager and easily applied to a newer software release
afterwards as we generally guarantee backward compatibility.
2.2. Declaration of Conformity
NetModule hereby declares that under our own responsibility that the
routers comply with the relevant standards following the provisions of
the Council Directive 1999/5/EC. The signed version of the Declara-
tions of Conformity can be found on the NetModule web page.
2.3. Waste Disposal
In accordance with the requirements of the Council Directive
2002/96/EC regarding Waste Electrical and Electronic Equipment
(WEEE), you are urged to ensure that this product will be segregated
from other waste at end-of-life and delivered to the WEEE collection
system in your country for proper recycling.
2.4. National Restrictions
This product may be generally used in all EU countries (and other countries following
the EU directive 1999/5/EC) without any limitation except for the countries mentioned
below. Please refer to our WLAN Regulatory Database for getting further national radio
interface regulations and requirements for a particular country.
10

NB3700 User Manual 3.8
2.5. Open Source Software
We inform you that NetModule products may contain in part open-source software.
We are distributing such open-source software to you under the terms of GNU General
Public License (GPL)1, GNU Lesser General Public License (LGPL)2or other open-
source licenses3. These licenses allow you to run, copy, distribute, study, change and
improve any software covered by GPL, Lesser GPL, or other open-source licenses with-
out any restrictions from us or our end user license agreement on what you may do
with that software. Unless required by applicable law or agreed to in writing, software
distributed under open-source licenses is distributed on an "AS IS" basis, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
To obtain the corresponding open source codes covered by these licenses, please contact
our technical support at [e-mail].
Acknowledgements
This product includes:
•PHP, freely available from http://www.php.net
•Software developed by the OpenSSL Project for use in the OpenSSL Toolkit
(http://www.openssl.org/)
•Cryptographic software written by Eric Young ([email protected])
•Software written by Tim Hudson ([email protected])
•Software written Jean-loup Gailly and Mark Adler
•MD5 Message-Digest Algorithm by RSA Data Security, Inc.
•An implementation of the AES encryption algorithm based on code released by
Dr Brian Gladman
•Multiple-precision arithmetic code originally written by David Ireland
•Software from The FreeBSD Project (www.freebsd.org)
1Please find the GPL text under http://www.gnu.org/licenses/gpl-2.0.txt
2Please find the LGPL text under http://www.gnu.org/licenses/lgpl.txt.
3Please find the license texts of OSI licenses (ISC License, MIT License, PHP License v3.0, zlib License)
under http://opensource.org/licenses
11

3. Specifications
3.1. Features
There are several different models of NB3700 available:
Model UMTS LTE WLAN
NB3700-R (Wireline)
NB3700-W (WLAN) l
NB3700-U (UMTS) l
NB3700-UW (UMTS & WLAN) l l
NB3700-2UW (UMTS & WLAN) 2x l
NB3700-L (LTE) l l
NB3700-LW (LTE & WLAN) lll
NB3700-2LW (LTE & WLAN) 2x 2x l
Table 3.1.: NB3700 Models
Note: All UMTS models include support for EDGE/GPRS. All LTE models include
support for UMTS/EDGE/GPRS. The UMTS/LTE models can be equipped with a
supplementary VOICE (-V) or GNSS (-G) option. We also offer models for CDMA
450MHz (-Ca).
All models have following basic functionality in common:
•Galvanically isolated power supply
•5 Ethernet ports (M12)
•1 USB 2.0 host port
•2 digital inputs
•2 digital outputs
•2 SIM card slots
Due to its modular approach, the NB3700 router and its hardware components can be
arbitrarily assembled according to its indented usage or application. Please contact us
in case of special project requirements.
12

NB3700 User Manual 3.8
3.2. Operating Elements
The following table describes the NB3700 status indicators. The color of the LED
represents the signal quality for wireless links.
lred means low
lyellow means moderate
lgreen means good or excellent
Label Color State Function
Status lblinking The device is busy due to startup, software or configu-
ration update.
lon The device is ready. The captions of the top bank apply.
lon The device is ready. The captions of the bottom bank
apply.
Mob1 lllon Mobile connection 1 is up.
lblinking Mobile connection 1 is being established.
moff Mobile connection 1 is down.
Mob2 lllon Mobile connection 2 is up.
lblinking Mobile connection 2 is being established.
moff Mobile connection 2 is down.
VPN lon VPN connection is up.
moff VPN connection is down.
WLAN lllon WLAN connection is up.
lblinking WLAN connection is being established.
moff WLAN connection is down.
GNSS lon GNSS is turned on and a valid NMEA stream is avail-
able.
lblinking GNSS is searching for satellites.
moff GNSS is turned off or no valid NMEA stream is avail-
able.
Voice lon A voice call is currently active.
moff No voice call is active.
13

NB3700 User Manual 3.8
Label Color State Function
DO1 lon Normally open output port 1 is closed.
moff Normally open output port 1 is open.
DO2 lon Normally closed output port 2 is closed.
moff Normally closed output port 2 is open.
DI1 lon Input port 1 is set.
moff Input port 1 is not set.
DI2 lon Input port 2 is set.
moff Input port 2 is not set.
Table 3.2.: NB3700 Status Indicators
14

NB3700 User Manual 3.8
3.3. Interfaces
3.3.1. Overview
Label Panel Function
SIM 1 Front SIM 1, it can be assigned dynamically to any modem by
configuration.
SIM 2 Front SIM 2, it can be assigned dynamically to any modem by
configuration.
USB Front USB 2.0 host port, can be used as USB device server or for
software/configuration updates.
Ethernet 1-4 Front Ethernet switch ports, can be used as LAN or WAN inter-
face.
Ethernet 5 Front Additional Ethernet switch port (represents an RS232 port
for NB3700-4ES)
Front Earth protection connector, connected to the ground of the
power supply VGND. If used, connect a yellow-green marked
cable with at least 6mm2copper area. Avoid corrosion and
protect the screws against loosening.
Earthing is mandatory for the variant Pb (50 VDC to
136 VDC power supply).
Power Front Power supply (galvanically isolated)
Digital I/O Front Galvanically isolated digital I/O M12 connector
Mob 1 Front TNC female connector for mobile antenna 1
WLAN 1 Front TNC female connector for first WLAN antenna (main)
GPS Front TNC female connector for GPS antenna
Mob 2 Front TNC female connector for mobile antenna 2
WLAN 2 Front TNC female connector for second WLAN antenna (diver-
sity)
Reset Front Reset button, press at least 3 seconds for reboot and at least
5 second for a factory reset. The start of the factory reset is
confirmed by all LEDs lighting up for a second. The button
can be released then again.
Table 3.3.: NB3700 Interfaces
15

NB3700 User Manual 3.8
3.3.2. USB 2.0 Host Port
The USB 2.0 host port has the following specification:
Feature Specification
Speed Low, Full & Hi-Speed
Current max. 500 mA
Table 3.4.: USB 2.0 Host Port Specification
3.3.3. M12 Ethernet Connectors
Specification
The five Ethernet ports have the following specification:
Feature Specification
Isolation 1500 Vrms
Speed 10/100 Mbps
Mode Half- & Full-Duplex
Crossover Automatic MDI/MDI-X
Table 3.5.: Ethernet Port Specification
Pin Assignment on M12, 4 poles, D-coded female
Pin Signal Pinning
1 Tx+
2 Rx+
3 Tx−
4 Rx−
Table 3.6.: Pin Assignments of Ethernet Connectors
16

NB3700 User Manual 3.8
3.3.4. Power Supply
Variant Pa (12 VDC to 60 VDC)
The power input has the following specifications:
Feature Specification
Power supply nominal voltages 24 VDC, 36 VDC and 48 VDC
(according to EN 50155)
Voltage range 12 VDC to 60 VDC (−15% / +5%)
Max. power consumption 15 W
Galvanic isolation yes, 1500 VDC
(according to EN 50155 & EN 60950)
Power Interruption Class S2 Sustains interruptions up to 10 ms, there
are no batteries included
Connector type M12, 4 poles, A-coded male
Table 3.7.: Power Input Specifications Variant Pa
Variant Pb (50 VDC to 136 VDC)
The power input has the following specifications:
Feature Specification
Power supply nominal voltages 72 VDC, 96 VDC and 110 VDC
(according to EN 50155)
Voltage range 50 VDC to 136 VDC (±10%)
Max. power consumption 15 W
Galvanic isolation yes, 1500 Vrms
(according to EN 50155 & EN 60950)
Power Interruption Class S2 Sustains interruptions up to 10 ms, there
are no batteries included
Connector type M12, 4 poles, A-coded male
Table 3.8.: Power Input Specifications Variant Pb
17

NB3700 User Manual 3.8
Pin Assignment M12, 4 poles, A-coded male
Pin Signal Pinning
1 V+ (12−60 VDC or 50−136 VDC)
2 Not connected
3 VGND
4 Not connected
Table 3.9.: Pin Assignments of Power Connector
3.3.5. Digital Inputs and Outputs
Isolated Outputs
The isolated digital output ports have the following specification:
Feature Specification
Number of output ports 2
Limiting continuous current 1 A
Maximum switching voltage 60 VDC, 42 VAC ( Vrms)
Maximum switching capacity 60 W
Table 3.10.: Isolated Digital Outputs Specification
Isolated Inputs
The isolated digital input ports have the following specification:
Feature Specification
Number of inputs 2
maximum input voltage 40 VDC
Minimum voltage for level 1
(set) 7.2 VDC
Maximum voltage for level 0
(not set) 5.0 VDC
Table 3.11.: Isolated Digital Inputs Specification
18

NB3700 User Manual 3.8
Note: A negative input voltage is not recognized.
Pin Assignment M12 8-pole A-coded female
Pin Signal Pinning
1 DI1+
2 DI1−
3 DI2+
4 DI2−
5 DO1: Dry contact relay normally open
6 DO1: Dry contact relay normally open
7 DO2: Dry contact relay normally closed
8 DO2: Dry contact relay normally closed
Table 3.12.: Pin Assignments of Digital Inputs and Outputs
3.3.6. RS-232 Port
The RS-232 port (if present)has the following specification:
Feature Specification
Protocol 3-wire RS-232: GND, TXD, RXD
Baud rate 300, 1 200, 2 400, 4 800, 9 600, 19 200,
38 400, 57 600, 115 200
Data bits 7 bit, 8 bit
Parity none, odd, even
Stop bits 1, 2
Software flow control None, XON/XOFF
Hardware flow control None
Table 3.13.: RS-232 Port Specification
Pin Assignment M12, 4 poles, D-coded female
Pin Signal Pinning
1 GND
19

NB3700 User Manual 3.8
Pin Signal Pinning
2 RxD
3 not connected
4 TxD
Table 3.14.: Pin Assignments of RS-232 Port
20