Opengear ACM7004-2-LMA User manual

ACM700x'2'LMx*Quick*Start*(520084'Rev*1.1)* Page*1*
*
!"#$%%&'(')#!
!"#$%%&'(')#"*
!"#$%%+'(')#!
!"#$%%&'(')#,
!"#$%%&'(')#"-
!"#$%%+'(')#,
!"#$%%+'(')#*
Quick Start Guide
Thank you for purchasing the Opengear Resilience Gateway (referred to herein as the
appliance ). This Quick Start walks you through installation, configuration & local
operation. More details are available in the User Manual , which can be downloaded from:
http://opengear.com/documentation
./01232 "4056267/2589/09/:2
Resilience Gateway appliance; external rack mount tab;
black terminal block; two 4G LTE blade antennas; dual
SIM holder; DB9F-RJ45 adapter (319015, to DTE); four
rubber feet; 12VDC power pack; Quick Start Guide.
./012(2"89905/2/4024;<=>;<0
!Attach rubber feet to base, or attach the rack mount tab
!Screw the antennas on to the (M) main and (A) diversity connectors – if
you have an optional GPS antenna, screw it on to the GPS connector
!Using a standard size Mini-SIM (2FF) card, insert the notched side firmly
into the bottom slot of the SIM holder, with contacts facing upwards
!Insert the holder into the Dual SIM slot, with longer guide arm to the left
Note: The -LMA, -LMV, -LMCR and -LMCT models include Opengear OCM cellular
modem devices, which are programmable to support either AT&T USA, Verizon USA,
Rogers Canada or Telus Canada. The -LMR with OCM73R4 supports most other carriers
globally, including major carriers in EMEA, APAC and ANZ regions.For more details, refer
to the Knowledge Base FAQ article OCM modem devices integrated in ACM7000
Resilience Gateways.
!Connect the Ethernet NET1 port to your primary network

ACM700x'2'LMx*Quick*Start*(520084'Rev*1.1)* Page*2*
*
!For Out-Of-Band Management (OOB) only mode, you may connect NET2 to a
secondary or management network; for cellular IP Passthrough mode, connect
NET2 to your primary router’s secondary WAN Ethernet port
Note: IP Passthrough mode allows your LAN router to utilize the appliance’s
cellular modem as a WAN connection. For details, refer to the Knowledge Base FAQ
article Can I use Opengear cellular as a failover WAN link for a remote LAN?
!Connect your serial devices to the 4 or 8 SERIAL ports, connect your USB
devices to the 4 USB ports
Note: Advanced users may connect to the appliance CLI on SERIAL 1 with the
supplied 319015 adapter and a DTE device (such as a laptop), set at 115200 8-N-1.
!Plug in the black screw terminal block and attach external sensors and DIO
!Apply power – when the power status LED is lit steadily and the heartbeat
LED is flashing, the appliance is ready to be set up
./012?2.0/2@12;11A7;950290/>8<679B
The appliance’s default IP address is 192.168.0.1 (subnet mask 255.255.255.0 ). With a
web browser on any computer that is connected to the appliance via NET1 :
!Enter https://192.168.0.1 into the address bar
!Log in using the default system user name root and the default password
default, a Welcome screen listing the basic configuration steps is displayed
Note: The computer must have an IP address in the same network range
(192.168.0.x) as the appliance. The appliance also has DHCP client enabled by default.
It will automatically accept any network IP address assigned by any DHCP server on
your network, and will then respond at both 192.168.0.1 and its DHCP address.
!Select Serial & Network: Users & Groups and Edit the Root User . Enter and
confirm a new Password and click Apply
!Select System: IP then Network Interface ( NET1) and check DHCP or
Static for Configuration Method
The appliance’s second Ethernet port is inactive by default. To activate:
!Select Management LAN Interface (NET2) and uncheck Disable
!Enter an IP Address and Subnet Mask – for OOB only mode this may be a
secondary management network; for IP Passthrough mode, select an unused
private network
Note: The appliance’s firewall determines which protocols and services can be
used for network access. By default only HTTPS and SSH access is enabled to the
appliance itself, this policy is set using System: Services, Service Access.

ACM700x'2'LMx*Quick*Start*(520084'Rev*1.1)* Page*3*
*
./012&2"89905/2/40250AA@A;<2C8=0C
Note: In OOB only mode the cellular modem may be always-on, or configured to
start and stop dynamically (e.g. in response to a loss of primary network connectivity).
For an overview of failover configurations, refer to the Knowledge Base FAQ article
Automatic failover to alternate broadband, cellular or dial-out Internet
connection. In IP Passthrough mode, the cellular connection must remain always-on.
To set up an always-on cellular connection:
!Select System: Dial then the Internal Cellular Modem tab
!Select Enable Dial-Out, under SIM 1 (Bottom Slot) enter the carrier’s APN
and optionally a Username and Password
Note: AT&T, Verizon, Rogers and Telus require carrier-specific cellular modem
firmware. On -LMA, -LMV, -LMCR and -LMCT models, the Change Carrier option loads
firmware for the selected network. This takes several minutes during which the cellular
modem is unavailable.
!To use your own or public DNS servers, check the Override Returned DNS
Servers box and enter the DNS Server IP address(es)
!Click Apply and a data connection will be established with your cellular carrier
!Select Status: Statistics then the Failover & Out-of-Band tab
!Verify the Connection Status of Internal Cellular Modem is Connected and
note your allocated IP Address (take note if it’s a private IP address)
!At any time you may view the cellular signal strength (RSSI) from the Cellular
tab of the Status: Statistics page – an RSSI of -100 dBm and less is
unacceptable coverage, -99 to -90 is weak to medium coverage, -89 to -70 is
medium to strong coverage, -69 and greater is very strong coverage
Note: The cellular status LED indicates the state of the cellular data
connection: off for no connection, blinking while establishing, and on while established.
The signal strength LEDs indicate cellular coverage: four ( very strong ), three ( strong ),
two ( medium ), one ( weak ), zero ( unacceptable )
If you have been allocated a public IP address , you can now access the appliance’s
HTTPS and SSH services directly using this address. If you have a dynamic public IP
address that changes each time the appliance connects, you may configure the
appliance’s Dynamic DNS client in System: Dial, Internal Cellular Modem.
If you have been allocated a private IP , direct remote access may not be possible.
Instead, use Call Home or VPN to establish an outbound tunnel to an Opengear
Lighthouse or VPN server, to enable remote access over the tunnel.

ACM700x'2'LMx*Quick*Start*(520084'Rev*1.1)* Page*4*
*
Note: For details on accessing a private IP address, refer to the Knowledge Base
FAQ article Does my site need a public IP address for OOB or Failover access?
./012D2"89E7B@<02C;9;B0=2=0F750:
!Select Serial & Network: Serial Port to display the labels, modes and
protocol options currently set for each serial & USB port – to configure a port for
remote access to the managed device’s console:
oConfigure the Common Settings to match the connected serial device
oSelect the Console Server protocols (e.g. SSH, Telnet, Web Terminal)
that are to be used for the network connection to this console
oClick Apply – device consoles can now be accessed using your preferred
client (e.g. PuTTY, SecureCRT, OpenSSH) and in Manage: Devices
!User access policies may be configured locally in Serial & Network: Users &
Groups and/or remotely with a AAA server, refer to the User Manual for details
./012G2"89E7B@<02HI2I;::/4<8@B42J81/789;AK
!Select Serial & Network: IP Passthrough to transparently bridge the cellular
IP settings and data traffic to a downstream Ethernet router
oCheck Enable and select Internal Cellular Modem as the Modem
oSelect Management LAN as the Interface
oIf your router has issues accepting the cellular network settings via DHCP,
check Enable Force Subnet Mask and enter Force Subnet Mask of 24
oTo access to the appliance itself (e.g. for OOB management) using the
cellular IP address, check Intercept Enabled for the desired services
Note: To use Service Intercepts, the appliance must not have a non-cellular
default route installed . Ensure each Interface is set to Static and the Default
Gateway field is blank. Routes to specific remote networks may be added under
Serial & Network: IP, Route Settings.
oClick Apply
!Ensure your downstream router’s secondary WAN Ethernet is connected to NET2
and is set to receive network settings via DHCP, to automatically complete setup
./012$2L/40<2C8=0:2;9=2E@95/789:2
Please refer to the User Manual for details other advanced features, such as cellular
failover, PDU (RPC) and UPS power management, environmental monitoring, logging,
Auto-Response alerting and more.
Please register your product to activate the warranty and to
automatically receive advice of future firmware updates. Go to:
http://opengear.com/product-registration