Planet Networking & Communication IVR-100 User manual

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 1 -
Industrial 5-Port 10/100/1000T VPN
Security Gateway
IVR-100

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 2 -
Copyright
Copyright (C) 2020 PLANET Technology Corp. All rights reserved.
The products and programs described in this User’s Manual are licensed products of PLANET
Technology, This User’s Manual contains proprietary information protected by copyright, and this
User’s Manual and all accompanying hardware, software, and documentation are copyrighted.
No part of this User’s Manual may be copied, photocopied, reproduced, translated, or reduced to any
electronic medium or machine-readable form by any means, electronic or mechanical including
photocopying, recording, or information storage and retrieval systems, for any purpose other than the
purchaser's personal use, and without the prior express written permission of PLANET Technology.
Disclaimer
PLANET Technology does not warrant that the hardware will work properly in all environments and
applications, and makes no warranty and representation, either implied or expressed, with respect to
the quality, performance, merchantability, or fitness for a particular purpose.
PLANET has made every effort to ensure that this User’s Manual is accurate; PLANET disclaims
liability for any inaccuracies or omissions that may have occurred. Information in this User’s Manual is
subject to change without notice and does not represent a commitment on the part of PLANET.
PLANET assumes no responsibility for any inaccuracies that may be contained in this User’s Manual.
PLANET makes no commitment to update or keep current the information in this User’s Manual, and
reserves the right to make improvements and/or changes to this User’s Manual at any time without
notice.
If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate
your comments and suggestions.
FCC Compliance Statement
This Equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful
interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If this
equipment does cause harmful interference to radio or television reception, which can be determined
by turning the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
– Reorient or relocate the receiving antenna.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 3 -
– Increase the separation between the equipment and receiver.
– Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
– Consult the dealer or an experienced radio/TV technician for help.
CE mark Warning
The is a class A device, In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.
WEEE
To avoid the potential effects on the environment and human health as a result of the
presence of hazardous substances in electrical and electronic equipment, end users of
electrical and electronic equipment should understand the meaning of the crossed-out
wheeled bin symbol. Do not dispose of WEEE as unsorted municipal waste and have to collect such
WEEE separately.
Trademarks
The PLANET logo is a trademark of PLANET Technology. This documentation may refer to numerous
hardware and software products by their trade names. In most, if not all cases, these designations are
claimed as trademarks or registered trademarks by their respective companies.
Revision
User’s Manual of PLANET Industrial 5-Port 10/100/1000T VPN Security Gateway
Model: IVR-100
Rev.: 1.0 (December, 2020)
Part No. EM-IVR-100_v1.0

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 4 -
Table of Contents
Chapter 1. Product Introduction.............................................................................................6
1.1 Package Contents......................................................................................................6
1.2 Overview ....................................................................................................................6
1.3 Topology...................................................................................................................11
1.4 Features...................................................................................................................12
1.5 Product Specifications .............................................................................................14
Chapter 2. Hardware Introduction .......................................................................................17
2.1 Physical Descriptions...............................................................................................17
2.1.1 Front View..............................................................................................17
2.1.2 Top View ................................................................................................18
2.1.3 Wiring the Power Inputs.........................................................................18
2.1.4 Wiring the Fault Alarm Contact..............................................................19
2.1.5 Dimensions............................................................................................21
2.2 Hardware Installation ...............................................................................................22
2.2.1 DIN-rail Mounting...................................................................................22
2.2.2 Wall Mount Plate Mounting....................................................................23
2.2.4 Side Wall Mount Plate Mounting............................................................25
Chapter 3. Preparation ........................................................................................................26
3.1 Requirements...........................................................................................................26
3.2 Setting TCP/IP on your PC ......................................................................................26
3.2.1Windows 7/8 ..........................................................................................26
3.2.2 Windows 10 ...........................................................................................30
3.3 Planet Smart Discovery Utility..................................................................................33
Chapter 4. Web-based Management ..................................................................................35
4.1Introduction ..............................................................................................................35
4.2 Logging in to the VPN Gateway...............................................................................35
4.3 Main Web Page........................................................................................................36
4.4 System .....................................................................................................................38
4.4.1 Setup Wizard .........................................................................................39
4.4.2 Dashboard .............................................................................................45
4.4.3 Status.....................................................................................................46
4.4.4 Statistics.................................................................................................47
4.4.5 Connection Status .................................................................................47
4.4.6 SNMP.....................................................................................................48

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 5 -
4.5 Network....................................................................................................................49
4.5.1 WAN.......................................................................................................50
4.5.2 WAN Advanced......................................................................................51
4.5.3 LAN Setup..............................................................................................52
4.5.4 Routing...................................................................................................53
4.5.5 WAN IPv6 Setting..................................................................................54
4.5.6 DHCP.....................................................................................................55
4.5.7 DDNS.....................................................................................................57
4.5.8 MAC Address Clone ..............................................................................59
4.6 Security....................................................................................................................60
4.6.1 Firewall...................................................................................................61
4.6.2 MAC Filtering.........................................................................................63
4.6.3 IP Filtering..............................................................................................64
4.6.4 Web Filtering..........................................................................................65
4.6.5 Port Forwarding .....................................................................................66
4.6.6 DMZ.......................................................................................................67
4.7 VPN 68
4.7.1 IPSec .....................................................................................................69
4.7.2 GRE.......................................................................................................74
4.7.3 PPTP Server..........................................................................................76
4.7.4 L2TP Server...........................................................................................80
4.7.5 SSL VPN................................................................................................85
4.7.6 VPN Connection ....................................................................................86
4.8 Maintenance.............................................................................................................87
4.8.1 Administrator..........................................................................................87
4.8.2 Date and Time .......................................................................................88
4.8.3 Saving/Restoring Configuration.............................................................89
4.8.4 Upgrading Firmware..............................................................................90
4.8.5 Reboot / Reset.......................................................................................90
4.8.6 Diagnostics ............................................................................................91
Appendix A: DDNS Application ..............................................................................................93

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 6 -
Chapter 1. Product Introduction
1.1 Package Contents
The package should contain the following:
VPN Gateway x 1
Quick Installation Guide x 1
Wall-mount Kit x 1
Dust Cap x 5
If any of the above items are missing, please contact your dealer immediately.
1.2 Overview
Powerful Industrial VPN Security Solution
The innovation of the Internet has created tremendous worldwide opportunities for e-business and
information sharing. It has become essential for businesses to focus more on network security issues.
The demand for information security has become the primary concern for the enterprises. To fulfill this
demand, PLANET has launched the IVR-100 Industrial VPN Security Gateway, an all-in-one appliance
that carries several main categories across your industrial network security deployments: Cyber
security, SPI firewall security protection, policy auditing (Content Filtering, VPN Tunnel and VLAN), and
easy management (Setup Wizard, QoS and Dashboard). Furthermore, its Dual-WAN Failover and
Outbound Load Balancing features can improve the network efficiency while the web-based interface
provides friendly and consistent user experience. For the harsh environment, the IVR-100 can not only
operate stably under temperature range from -40 to 75 degrees C, but also is equipped with a compact
IP30 metal case that allows either DIN-rail or wall mounting for efficient use of cabinet space.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 7 -
Excellent Ability in Threat Defense
The IVR-100 built-in SPI (stateful packet inspection) firewall and anti DoS/DDoS attack functions
provide high efficiency and extensive protection for your network. Virtual server and DMZ functions can
let you set up servers in the Intranet and still provide services to the Internet users.
Ideal VPN Security Gateway Solution for SMBs
The IVR-100 provides complete data security and privacy for accessing and exchanging most sensitive
data, built-in IPSec VPN function with DES/3DES/AES encryption and
MD5/SHA-1/SHA-256/SHA-384/SHA-512 authentication, and GRE, SSL, PPTP and L2TP server
mechanism. The full VPN capability in the IVR-100 makes the connection solidly secure, more flexible,
and more capable.
The IVR-100 supports many popular security features including Content Filtering to block specific URL,
MAC/IP filtering, outbound load balancing and more. Furthermore, it provides higher performance with
all Gigabit Ethernet interfaces which offer faster speeds for your network applications. The Gigabit

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 8 -
user-defined interfaces flexibly fulfill the network requirements, and the dual-WAN interfaces enable the
IVR-100 to support outbound load balancing and WAN fail-over features.
Cybersecurity Network Solution to Minimize Security Risks
The cybersecurity feature included to protect the switch management in a mission-critical network
virtually needs no effort and cost to install. For efficient management, the IVR-100 is equipped with
HTTPS web and SNMP management interfaces. With the built-in web-based management interface,
the IVR-100 offers an easy-to-use, platform independent management and configuration facility. As the
IVR-100 supports SNMP, it can be managed via any management software based on the standard
SNMP protocol.
Improving Network Efficiency
The IVR-100 has link redundancy, content filtering and many more functions to make the entire network
system perform better. It is applicable to the small-scale sector (from 10 to 50 people), using a compact
industrial design, with five Gigabit ports (WAN/LAN). The IVR-100’s economical price with complete
cable management features make it an inevitable choice for the next-generation office network load
balancer.
The IVR-100’s built-in content filtering feature can automatically resolve the IP address corresponding
to all. Users’ network can be easily managed by just typing the URL of the websites like Facebook,
YouTube and Yahoo.
The IVR-100 can connect dual WANs with up to two different ISPs. It creates a stable and qualified
VPN connection for many important applications such as VoIP, video conferencing and data
transmission.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 9 -
Convenient and Reliable Power System
To facilitate transportation and industrial-level applications, the IVR-100 provides an integrated power
solution with a wide range of voltages (9~48V DC) for worldwide operability. It also provides
dual-redundant, reversible polarity 9~48V DC power supply inputs for high availability applications.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 10 -
Stable Operating Performance under Difficult Environments
Today, the VPN demand expands from commercial applications to many critical networks in the harsh
environment. The IVR-100 will be one of the ideal solutions that provide a high level of immunity
against electromagnetic interference and heavy electrical surges typical of environments found on plant
floors or in curb-side traffic control cabinets. The IVR-100 can operate stably under temperature range
from -40 to 75 degrees C which enables the users to conveniently apply the device in almost any
location of the network. The IVR-100 is also equipped with a compact IP30 standard metal case that
allows either DIN-rail or wall mounting for efficient use of cabinet space.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 11 -
1.3 Topology
PLANET IVR-100 can work as a VPN security gateway in an industrial application for a company that
has a factory and many different divisions. With IPSec/GRE/PPTP/L2TP/SSL VPN solutions, the
IVR-100 provides secured data communication for branches, vendors, and mobile workers with a
flexible way to connect back to the headquarters.
The IVR-100 connects dual WANs with up to two different ISPs. It creates a stable and qualified VPN
connection for many important applications such as VoIP, video conferencing and data transmission.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 12 -
1.4 Features
Hardware
5 10/100/1000BASE-T RJ45 ports
1 undefined Ethernet port (LAN/WAN)
Dual-WAN function
1 USB 3.0 port for system configuration backup and firmware upgrade
Reset button
Industrial Case and Installation
IP30 metal case
Solid DIN-rail, wall-mount or side wall-mount design
Supports 6KV DC Ethernet ESD protection
Fault alarm for power input failure
DC redundant power with reverse polarity protection
-40 to 75 degrees C operating temperature
IP Routing Feature
Static Route
Dynamic Route (RIPv1/v2)
Firewall Security
Stateful Packet Inspection (SPI) firewall
Blocks DoS/DDoS attack
Content filtering
MAC/IP filtering
Blocks SYN/ICMP flooding
VPN Features
IPSec (Host to Host)/GRE/PPTP server/L2TP/SSL(Open VPN)
Max. Connection Tunnel Entries: 60 VPN tunnels,
Encryption methods: DES, 3DES, AES, AES-128/192/256
Authentication methods: MD5, SHA-1, SHA-256, SHA-384, SHA-512
Networking
Outbound load balancing
Failover for dual-WAN

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 13 -
Static IP/DHCP client for WAN
Protocols: TCP/IP, UDP, ARP, IPv4, IPv6
Port forwarding
QoS
DMZ
VLAN
IGMP Proxy
SNMP(v1/v2C/v3)
DHCP server/NTP client
MAC address clone
DDNS: PLANET DDNS, PLANET Easy DDNS, DynDNS and No-IP
Cybersecurity
Others
Setup wizard
Dashboard for real-time system overview
Supported access by HTTP or HTTPS
Auto reboot
Configuration backup and restoration via remote/USB port
Firmware upgrade via remote/USB port
Event message logging to remote syslog server
PLANET Smart Discovery utility/UNI-NMS supported

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 14 -
1.5 Product Specifications
Product VPN security gateway
Model IVR-100
Hardware
Ethernet
5 10/100/1000BASE-T RJ45 Ethernet ports including
3 LAN ports
1WAN port
1 LAN/WAN port
USB Port 1 USB 3.0 port for system configuration backup and firmware upgrade
Reset Button < 5 sec: System reboot
> 5 sec: Factory default
Enclosure IP30 metal case
LED Indicators Power1/Power2 (Green)
Fault (Red)
Installation DIN-rail, wall-mount or side wall-mount design
Connector
Removable 6-pin terminal block
Pin 1/2 for Power 1
Pin 3/4 for power fault alarm
Pin 5/6 for Power 2
Alarm One relay output for power failure.
Alarm relay current carry ability: 1A @ 24V AC
Power Requirements 9-48V AC, 1A max.
Power Consumption 9W max.
Weight 0.53kg
Dimensions (W x D x H) 135 x 87.8 x 50 mm
ESD Protection 6KV DC
Software
Management Web browser
Operation Mode Routing mode
Routing Protocol Static route: 32
Dynamic route (RIPv1/v2): 4096
NAT Throughput Max. 900Mbps
Firewall Security Stateful packet inspection (SPI)
Blocks DoS/DDoS attack
Outbound Load Balancing Supported algorithms: Weight

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 15 -
Protocol
IPv4, IPv6, TCP/IP, UDP, ARP,
HTTP, HTTPS, NTP, DNS, PLANET
DDNS, PLANET Easy DDNS, DHCP, SNMP(v1/v2C/v3),
PPPoE,
SNMP, QoS, VLAN, IGMP Proxy
Content Filtering
MAC filtering
IP filtering
Web filtering
Log System operation log
Event message logging to remote syslog server
Others
Outbound load balancing
Failover for dual-WAN
Port forwarding
DMZ
Cybersecurity
Dashboard
Setup wizard
Auto reboot
PLANET Smart Discovery utility/UNI-NMS supported
VPN
VPN Function IPSec (Host to Host)/GRE/PPTP server/L2TP/SSL (Open VPN)
VPN Tunnels Max. 60
VPN Throughput Max. 100Mbps
VPN concurrent users Max. 60
Encryption Methods DES, 3DES, AES or AES-128/192/256 encrypting
Authentication Methods MD5/SHA-1/SHA-256/SHA-384/SHA-512 authentication algorithm
Standards Conformance
Regulatory Compliance CE, FCC
Stability Testing
IEC60068-2-32 (free fall)
IEC60068-2-27 (shock)
IEC60068-2-6 (vibration)
Standards Compliance
IEEE 802.3 10BASE-T
IEEE 802.3u 100BASE-TX/100BASE-FX
IEEE 802.3ab Gigabit 1000T
IEEE 802.1Q VLAN tagging
RFC 768 UDP
RFC 791 IP
RFC 792 ICMP
RFC 2068 HTTP

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 16 -
Environment Specifications
Operating Temperature: -40 ~ 75 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
Storage Temperature: -40 ~ 85 degrees C
Relative Humidity: 5 ~ 95% (non-condensing)
Standard Accessories
Packet Contents
IVR-100 x 1
Quick Installation Guide x 1
Wall-mount Kit x 1
Dust Cap x 5

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 17 -
Chapter 2. Hardware Introduction
2.1 Physical Descriptions
2.1.1 Front View
LED
P1
Green Lights up when the power is on.
P2
Fault Red
Lights to indicate that power input
has failed.
LNK / ACT Green
“Steady on” to indicate the port is
connected to other network device
successfully.
“Blink” to indicate there is traffic on
the port.
1000 Amber
“Steady on” to indicate that the
port is successfully connecting to
the network at 1000Mbps.
“Off” to indicate that the port is
successfully connecting to the
network at 10Mbps or 100Mbps.
Ports
USB Port USB 3.0 port for system configuration backup
and restoration.
Reset Button
Power on the device and press the reset
button for less than 5 seconds to reboot it or
over 5 seconds to restore it to factory default
settings.
Gigabit Port 1-3 It is a LAN port for connecting to a switch.
Gigabit Port 4 Default is LAN port. It can be defined as LAN
port or WAN port.
Gigabit Port 5 It is a WAN port for connecting to a perimeter
gateway.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 18 -
2.1.2 Top View
The upper panel of the Industrial Gateway consists of one terminal block connector within two DC
power inputs.
2.1.3 Wiring the Power Inputs
The 6-contact terminal block connector on the top panel of Industrial Gateway is used for two DC
redundant power inputs. Please follow the steps below to insert the power wire.
1. Insert positive and negative DC power wires into contacts 1 and 2 for POWER 1, or 5 and 6 for
POWER 2.

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 19 -
To avoid damage, please use the Industrial Gateway under its
specification.
2. Tighten the wire-clamp screws for preventing the wires from loosening.
1 2 3 4 5 6
Power 1 Fault Power 2
+ - + -
The wire gauge for the terminal block should be in the range from 12 to 24 AWG.
2.1.4 Wiring the Fault Alarm Contact
The fault alarm contacts are in the middle of the terminal block connector as the picture shows below.
Inserting the wires, the Industrial Gateway will detect the fault status of the power failure and then forms
an open circuit. The following illustration shows an application example for wiring the fault alarm
contacts.
1 2 3 4 5 6
Insert the wires into the fault alarm contacts

Industrial 5-Port 10/100/1000T VPN Security Gateway
IVR-100
- 20 -
1. The wire gauge for the terminal block should be in the range between
12 and 24 AWG.
2. Alarm relay circuit accepts up to 24V, max. 1A currents.