RedPort Optimizer WXA-223 Assembly instructions

Optimizer
ADVANCED USER GUIDE
FOR MODELS: WXA-203, WXA-213, AND WXA-223
v2.2.1 – 21JULY2021
Copyright © Pivotel IP LLC. All rights reserved

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
1
Revision History
Doc Rev
Date
Name
Changes Made
2.0
08JAN2021
Kyle Tuczynski
Issued as version 2.0
2.1.0
19JAN2021
Bethany Headrick
Issued as version 2.1.0
2.2.0
12JULY2021
Bethany Headrick
Issued as version 2.2.0
2.2.1
21JULY2021
Bethany Headrick
Issued as version 2.2.1

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
2
Table of Contents
REVISION HISTORY .................................................................................................................................................. 1
1. ABOUT THIS GUIDE ............................................................................................................................... 4
2. INTRODUCTION TO THE REDPORT OPTIMIZER ............................................................................. 5
2.1. OPTIMIZER KEY FEATURES ....................................................................................................................... 6
2.2. SERVICES INCLUDED ................................................................................................................................. 7
2.3. PREMIUM SERVICES AVAILABLE ............................................................................................................... 7
3. SAFETY .................................................................................................................................................... 8
4. THINGS TO KNOW BEFORE GETTING STARTED ............................................................................. 9
4.1. MORE THAN JUST AROUTER ................................................................................................................... 9
4.2. DESIGNED USE OF THE OPTIMIZER ........................................................................................................... 9
4.2.1. Single User Environment ........................................................................................................... 9
4.2.2. Multi-User Environment ........................................................................................................... 10
4.3. HOW IT WORKS OUT OF THE BOX .......................................................................................................... 10
4.4. NAVIGATING THE USER INTERFACE ......................................................................................................... 11
5. GETTING STARTED – USER INTERFACE (UI) ACCESS .................................................................. 12
5.1. ACCESS THE PORTAL DASHBOARD ........................................................................................................ 12
5.1.1. Login - Onsite Administrator (Admin) ................................................................................... 13
5.1.2. Installer/Network Administrator Login (Superadmin) ...................................................... 14
5.2. HOW TO USE WITH DEFAULT SETUP ....................................................................................................... 16
5.2.1. Email and Web Browsing ......................................................................................................... 16
5.2.2. Voice Calls ................................................................................................................................... 17
5.2.3. SMS Messaging ......................................................................................................................... 17
5.3. ROUTER SECURITY .................................................................................................................................. 17
5.3.1. How to Secure Your Router .................................................................................................... 18
6. SERVICES ............................................................................................................................................... 19
6.1. WEB COMPRESSION AND FILTERING ...................................................................................................... 19
6.1.1. Settings ........................................................................................................................................ 19
6.1.2. Filters ............................................................................................................................................ 23
6.2.1. Web Settings ............................................................................................................................... 24
6.2.2. Configure SIP Extensions to Receive SMS Messages ..................................................... 25
6.2.3. Settings ........................................................................................................................................ 26
6.2.4. SMS Management ..................................................................................................................... 27
6.3.1. Voice PBX Settings ................................................................................................................... 29
6.3.2. SIP Extensions ............................................................................................................................ 30
6.3.3. How to Make and Receive Voice Calls ................................................................................. 31
6.3.4. FleetBroadband Monitor (FBB) .............................................................................................. 32
6.4.1. Configure Optimizer for use with the Halo Wi-Fi Extender ............................................ 33
6.4.2. Route Network Traffic through the Halo Wi-Fi Extender ................................................ 36
6.4.3. Manage Halo Firewall ............................................................................................................... 37
6.4.4. Disconnect from the Halo Wi-Fi ............................................................................................. 38
6.5.1. Tracking powered by RedPort ............................................................................................... 39
6.5.2. SMS Tracking ............................................................................................................................. 40
6.6.1. GPS/NMEA Repeater Equipment Setup .............................................................................. 42
7. STATUS ................................................................................................................................................... 48

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
3
8. SYSTEM .................................................................................................................................................. 50
9. NETWORK .............................................................................................................................................. 57
9.2.1. GSM Configuration in Optimizer ........................................................................................... 58
9.2.2. Using GSM ................................................................................................................................... 61
9.2.3. Changing from GSM Service to Satellite Service .............................................................. 62
9.5.2. Add a Firewall Zone .................................................................................................................. 69
9.5.3. Port Forwards ............................................................................................................................. 71
9.5.4. Firewall Rules ............................................................................................................................. 72
9.5.5. IP Sets ........................................................................................................................................... 76
9.5.6. Allow WhatsApp Configuration .............................................................................................. 77
10. STATISTICS ....................................................................................................................................... 81
10.1. GRAPHS ................................................................................................................................................... 81
11. USING OPTIMIZER WITH SATELLITE HANDSETS ...................................................................................... 82
12. PRODUCT WARRANTY AND SUPPORT INFORMATION ............................................................ 83
12.1. PRODUCT WARRANTY INFORMATION ..................................................................................................... 83
12.2. PRODUCT SUPPORT INFORMATION ........................................................................................................ 84

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
4
1. About this Guide
This guide is intended for users of the RedPort Optimizer wXa-203, wXa-213, and wXa-
223 routers. It features only those sections of the user interface that require configuration
for a specific service or may need to be accessed by the average user.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
5
2. Introduction to the RedPort Optimizer
RedPort, the leaders in advancing satellite data speeds and services, helps Fixed and
Mobile Satellite Services providers and their customers by offering the industry’s fastest,
most reliable and easy-to-use email, web, VoIP and other hardware and software
services to maritime, oil and gas, first responder and business continuity users.
Ship to shore network management solutions are sold by Pivotel under the RedPort
brand name at redportglobal.com and as white-label solutions for the world’s premier
satellite data service providers.
Optimizer is a satellite Wi-Fi router that combines a powerful satellite data router with
voice capabilities, including a full PBX. It is more than just a voice device. It gives you
everything you need to create a local voice and data network with your satellite device.
You can manage your usage, protect against accidental airtime usage, accelerate your
data speeds, enable web compression, track your location via GPS, and provide routing,
filtering and security.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
6
2.1. Optimizer Key Features
Designed specifically for use with satellite phones and satellite terminals:
• Replaces a standard router that is typically added to any satellite broadband
installation.
• Powerful firewall accommodates any common installation scenario, with features
including block or allow any range of port, IP address and protocols.
• Proxy Server enables HTTP filtering: whitelist/blacklist of URL’s, domains, and
rudimentary content filtering.
• Logging/Reporting to keep track of usage.
• Wi-Fi hotspot makes setup and use easy for crew with compatible computers and
tablets.
• Supports Shared Web Compression.
• GSM Compatibility with optional GSM modem and your own SIM card.
• GPS NMEA Repeater reads the built-in GPS in any satellite broadband terminal
and rebroadcasts via Wi-Fi.
• Supports voice calling and SMS messages using smartphones connected to the
local network.
• Compatible with any IP-based satellite phone and satellite broadband terminal.
• Powerful firewall stops all unwanted data traffic. Optimizer blocks all traffic except
XGate-compressed email, web and weather data.
• Works with XGate for email, web, weather and social media services.
• GSM support to switch between satellite and GSM when available.
• Track GPS locations from compatible GPS-enabled devices.
• Compatible with optional RedPort Halo Wi-Fi Extender for access to external Wi-
Fi networks, when available.
NOTE: XGate service and Tracking service are not included with the Optimizer and must
be purchased separately. Contact your satellite service provider for details.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
7
2.2. Services Included
Voice PBX - allows smartphones to send/receive calls to others on the local area
network for free, or over the satellite link at standard satellite airtime rates. Requires a
supported satellite terminal.
SMS Messaging - allows smartphones to send SMS messages to others on the local
area network for free, or over the satellite link at standard satellite airtime rates. Requires
a supported satellite terminal.
GPS NMEA Repeater – allows other devices onboard/on-site to read your GPS location.
For example, a navigation program running on an iPad could be used on your boat, or
you could get weather information tailored to your location.
GSM Compatibility - allows Internet connectivity via your GSM modem or cell phone
with your own SIM card.
File Sharing - Network Shares allows the sharing of files among Windows and Mac
computers via Wi-Fi, without the requirement of a wired local network of computers.
2.3. Premium Services Available
The following additional services are available. Contact your RedPort dealer to purchase.
Shared Web Compression – routes all web traffic through a proxy service that works
with an onshore server to deliver 3-5 times average web compression, along with virus
detection and ad blocking.
GPS Tracking - Using a GPS-enabled device, submit position reports to a central
database for viewing on the tracking website.
RedPort VoIP Service - Transform your satellite device into a multi-user unit. Up to four
users can send/receive phone calls and/or SMS (text) messages simultaneously.
Experience significant price reduction in outbound calls when using VoIP in lieu of
standard satellite airtime rates. Requires a supported satellite terminal.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
8
3. Safety
Shock Hazard
The Optimizer is a sealed device and is not meant to be opened for repair
in the field by operators or technicians. The enclosure must remain in place
at all times on the router to maintain the warranty terms. Make sure the
system is correctly grounded and power is off when installing, configuring
and connecting components.
Passive POE Port(s)
The Optimizer has a SAT (WAN) and LAN port that are Passive POE.
Connecting any device such as a laptop or switch with a Gigabit ethernet,
1000Mbps speed NIC will cause your device or port, at the minimum,
damage or burn out. RedPort does provide coverage or warranty for this
damage. Connect any device of this nature at your own risk.
Proposition 65
This product can expose you to Acrylonitrile, which is known to the State
of California to cause cancer. For more information go
to www.P65Warnings.ca.gov.
WARNING
SHOCK
HAZARD

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
9
4. Things to Know Before Getting Started
As the onboard/onsite administrator, under normal operating conditions, you will seldom
have a need to interact with the user interface of the router. However, should you find
yourself in a position that requires you to login to the router, this Guide is designed to
help you.
4.1. More Than Just A Router
The Optimizer is more than just a router. It has some enhanced proxy services in addition
to basic routing capabilities.
Proxy Server(s) - when Transparent proxy is enabled, all traffic on port 80 (http port) is
redirected through the internal proxy server. This allows URL and DNS filtering (whitelist
and blacklist sites), some content filtering (i.e. remove flash video) and you can turn on
http logging to see what URLs are
Firewall - A full-featured firewall is included. Block or allow IP address/ranges, port
ranges, different protocols. Rules can be applied to any path in and out of the router.
4.2. Designed Use of the Optimizer
This router is suitable for two distinctly different audiences:
4.2.1. Single User Environment
For the single user that wants the convenience of BYOD (bring your own device) for email,
web browsing, SMS and phone calls. All that is required is a RedPort-certified
compression email account like XGate and/or compression web-browsing service like
XWeb. By adding the XGate Phone app, a smartphone can be used to place and receive
voice calls and/or SMS messages over the satellite network. With the optional RedPort
VoIP service, the costs of those voice calls can be kept to a minimum

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
10
4.2.2. Multi-User Environment
This is a single-user router that can be configured for use in a multi-user environment.
The idea is that you, as the installer or network administrator, will configure the router,
using these guidelines, before installing it at its ultimate destination.
Once installed, the onsite administrator will log in and land on the Home page. The Home
page has the common tasks that will be used locally just as creating and managing crew
accounts.
The onsite administrator does not have access to the full user interface and therefore
does not have the ability to re-configure the router. There is a separate user guide for
the onsite administrator: Optimizer Onsite Administrator Guide.
4.3. How It Works Out of the Box
We ship the router ready for use with a RedPort-certified compression email and/or web
browsing account.
This default setup allows anyone with a RedPort-certified email or web account (with a
Primary Account username
and password) to use the router, as is, to send and receive email and to browse the
Internet.
This out-of-the-box configuration works well for single broadband users.
This configuration is also suitable for the multi-user environment where each person has
a separate primary email and/or web browsing account. While you have the benefit of
email and web compression on each primary account, all users have unlimited access
to the Internet.
If you are in a multi-user environment, we recommend enabling Transparent proxy. With
Transparent Proxy enabled, all traffic on port 80 (http port) is redirected through the
internal proxy server. This allows URL and DNS filtering (whitelist and blacklist sites),
some content filtering (i.e. remove flash video) and you can turn on http logging to see
what URLs are being accessed by the users. You also have the option to communicate
upstream to a compression proxy server. For savings on voice calls consider RedPort
VoIP service. You may realize further savings by enabling shared web compression (see
Section 5.1).
Best Practice is to have a knowledgeable technician (someone who knows about proxy
servers and routers) go through and generate a custom configuration. In a fleet
environment, this custom configuration can be recorded and used on other Optimizer
routers within the organization.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
11
4.4. Navigating the User Interface
Access to the UI depends upon how you login to the router. There are two logins
available: admin and superadmin.
The user interface is divided into sections; use the tabs to access the required service
or information.
On most pages in the user interface, you will see three buttons in the lower right corner:
Reset: Returns the page to its previous saved state.
Save: Saves the changes but does not yet apply the changes.
Save & Apply: Saves the changes and applies them to the router configuration. In some
cases, the router must reboot to apply the change. If reboot is required, it will be noted
on the page.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
12
5. Getting Started – User Interface (UI) Access
In a typical situation, the Optimizer router arrives to you with the following services
enabled:
• Closed Firewall allowing email and web access via RedPort-certified services only.
• GPS/NMEA Repeater.
There are also services available that are disabled:
• Internal Transparent Proxy for Web Filtering.
• SMS for compatible satellite devices.
• Voice Capability for compatible satellite devices.
• Web Compression (additional fees may apply).
• GPS Tracking (additional fees may apply).
• RedPort VoIP for multi-user calls and SMS (additional fees may apply).
5.1. Access the Portal Dashboard
To access the router’s Dashboard, you must login to the router. This can be
accomplished in several ways however the most popular method is to:
1. Connect to the Wi-Fi Hotspot created by the router using a PC. Connect to the Wi-Fi
Hotspot just like you would any other Wi-Fi connection: On a Windows PC, go to:
Windows Start > Control Panel > Network Connections.
On a MAC, go to: Apple > System Preferences > Network.
The Network Name will look something like: ‘wXa-223-XXXX’ where ‘XXXX’ is the last
four digits of the Optimizer’s Mac address.
2. Open any web browser on the computer and enter the URL: http://192.168.10.1
The next sub-section outlines the login process. The Optimizer ships with two existing
accounts:
• Admin - for normal day-to-day operation.
• Superadmin - for configuration and maintenance.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
13
5.1.1. Login - Onsite Administrator (Admin)
Onsite Admin Default User Credentials:
Username: admin
Password: webxaccess
This login gives the user access to portions of the user interface and the ability to perform
common tasks such as:
• Monitor the system status.
• Reboot the router, if necessary.
• Change the router password for the admin account, if necessary.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
14
5.1.2. Installer/Network Administrator Login (Superadmin)
Installer/Network Administrator Default User Credentials:
Username: superadmin
Password: webxaccess
This login provides full access to the user interface for configuration and maintenance of
the router. Once logged in, you will see the router’s Home page (Super Administrator
login shown):
NOTE: The Wi-Fi Extender Setup section only displays when the optional RedPort Halo
Wi-Fi Extender is physically connected to the Optimizer and powered ON.
This Home Page is the onsite administrator’s gateway to the most used features. From
the Home Page you have access to the remaining sections of the user interface.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
15
Each service is contained in its own tab under the Services section. This is where you
will enable/disable the services and configure them for use.
Status: displays how much memory the router is using, who is connected via Wi-Fi and
other information you may find useful.
The System Log contains detailed information of the router’s performance. It will report
error messages and can be useful when troubleshooting connection issues. Realtime
Graphs report how much data is being using by the different interfaces. All Status
information is Read Only.
System: contains some of the router’s basic settings for you to configure plus a few
maintenance functions.
Use this section to set your time zone, change the ‘admin’ and/or ‘superadmin’
password, flash new firmware to the router, reboot the router if necessary. Profiles is a
way to ‘clone’ the router configuration for use on another Optimizer router.
Network: contains access to the network interfaces and the firewall.
Use this section to configure network interfaces, run diagnostics, or modify the firewall.
Statistics: contains information about resource usage.
Use the tabs to navigate through the user interface. You will see that the information
represented in the user interface can be quite technical. This Guide will cover only those
sections of the user interface that require configuration for a specific service or may need
to be accessed by the average user.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
16
5.2. How to Use with Default Setup
We ship the router ready for use with Voice and SMS ready to be enabled for use with
compatible satellite devices using standard satellite airtime.
This out-of-the-box configuration works well for single broadband users. This
configuration is also suitable for the multi-user environment where each person has a
separate primary email and/or web browsing account.
While you have the benefit of email and web compression on each primary account, all
users have unlimited access to the Internet.
BEST PRACTICE: If you are in a multi-user environment, we recommend enabling
Transparent proxy. With Transparent Proxy enabled, all traffic on port 80 (http port) is
redirected through the internal proxy server. This allows URL and DNS filtering (whitelist
and blacklist sites), some content filtering (i.e. remove flash video) and you can turn on
http logging to see what URLs are being accessed by the users. You also have the option
to communicate upstream to a compression proxy server. For savings on Voice calls
consider RedPort VoIP service. You may realize further savings by enabling shared web
compression.
5.2.1. Email and Web Browsing
This default setup allows anyone with a RedPort-certified email account (such as XGate)
or web account (such as XWeb), with a Primary Account username and password, to
use the router, as is, to send and receive email and to browse the Internet.
Here are the basic instructions:
1. Power the Optimizer ON.
2. Turn your satellite phone ON.
3. Connect the Optimizer to your satphone with the appropriate cable.
4. On your computer, iOS or Android device, connect to the wireless network created by
the Optimizer. The name of the wireless network will be something like: wXa-223-xxxx,
where xxxx may represent the last four digits of the Mac address of the Optimizer.
5. Once connected to the wireless network, open the RedPort-certified email program
(such as XGate) and go to Settings > Connection > and set the Connection Type to
“Optimizer xxxxxx” where xxxxxx represents your satphone connection. Click [OK].
6. Wait for a strong satphone signal.
7. Start an email or a web browsing session.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
17
5.2.2. Voice Calls
Voice is disabled by default but can be enabled for use with compatible satellite devices
using standard satellite airtime.
CAUTION: When you enable the Voice PBX it is listening on all ports. Without
further configuration, this could leave you vulnerable to unwanted traffic.
5.2.3. SMS Messaging
SMS is disabled by default but can be enabled for use with compatible satellite devices
using standard satellite airtime.
CAUTION: When you enable the SMS service it is listening on all ports. Without
further configuration, this could leave you vulnerable to unwanted traffic.
5.3. Router Security
If you modify the default settings of the firewall you may have WAN ports open.
If you enable the Voice PBX or SMS messaging, all ports are listening.
Any of these changes could leave you vulnerable to unwanted traffic. Note that ports
open to the Internet on satellite systems that have public IP addresses are vulnerable to
attackers that run dictionaries trying to guess usernames and passwords on the router.
These dictionary attacks, at best, can result in large amounts of accounted traffic; and,
at worst, they are a security breach that could endanger communications on the vessel.
Systems open to the public Internet must take special precautions to secure the router
from intrusion.
Web Proxy is not a problem, by default, unless you make changes since the software,
by default, only listens to traffic on the LAN.
CAUTION: Before you block the WAN ports, read the next chapter. Blocking
the WAN ports at this stage may lock you out of the router. We’ve built in
some measures to help minimize that possibility, but please pay special attention
when making router configuration modifications.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
18
5.3.1. How to Secure Your Router
First, confirm that the Disable anti-lock rule setting is “Unchecked” in System > System
Settings. If it is checked, you want to uncheck it to Enable the anti-lock rule. The anti-
lock rule prevents the administrator from inadvertently locking him/herself out of the
router when programming firewall rules.
Confirm that in Network > Firewall > Firewall Rules that the first rule “BLOCK WAN” is
disabled. If you Enable (check) this rule you will lock yourself OUT of the router, unless
the antilock rule is enabled (unchecked). If you lock yourself out of the router you must
perform a factory reset.
Confirm that in Services > Web Compression and Filtering > Advanced that Listen
Interfaces is set to LAN. Do not change this to WAN unless you desire proxy service
through the WAN port. If changing the default configuration to listen on the WAN then
firewall rules must be created to allow access to the proxy listen port (port 3128 by
default).
Go to System > Router Password and change the router password for both the
“superadmin” and the “admin” access.
NOTE: The BLOCK WAN firewall rule, if enabled, will prevent access to these ports.
If Voice PBX is enabled, it is listening on all ports. You can specify the Interface to Listen
(such as LAN) in Services > Voice PBX > Settings OR, you can leave it to listening on all
interfaces and use a firewall rule to restrict traffic Network > Firewall.
NOTE: The BLOCK WAN firewall rule, if enabled, will prevent access to these ports.
If planning to access the web user interface over the WAN port then create firewall rules
with higher precedence than the BLOCK ALL rule that allow traffic from your Internet IP
address to the router.
NOTE: Ports 80, 443 and 22 are open, if not disabled.
When you have completed and tested your configuration and are confident that it is
working as desired, you can remove the Anti-Lock rule in System > System Settings.
Now you can Enable the BLOCK ALL from WAN firewall rule in Network > Firewall >
Firewall Rules.

wXa-203, wXa-213, wXa-223 Optimizer v2.2.1
19
6. Services
6.1. Web Compression and Filtering
This section is used to:
• Configure filters for the internal proxy server when compression is not enabled.
• Enable compression so that traffic is passed to the upstream proxy server.
• Configure filters for the proxy server (internal or upstream).
• View traffic logs.
6.1.1. Settings