Siemens Stratos Outstation User manual

667/CI/45025/000
3G OTU
IP ROUTERS INSTALLATION
GUIDE
Jun-19
Issue 4

Contents
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
2
Contents
Contents 2
List of Figures 3
List of Tables 4
Health and Safety Protection 5
Handling Precautions 6
1. Introduction 7
1.1. Purpose 7
1.2. Document References 7
1.3. Key Terms and Abbreviations 7
2. Routers - General Description 9
2.1. MuLogic RSA ADSL 9
2.2. PROROUTE 3G/4G Router 9
2.3. Connection Types 9
2.3.1. Transparent Connection 9
2.3.2. VPN Connection 10
3. Installation and Configuration Guidance 11
3.1. Installation of the Antenna Cable 11
3.1.1. Installation of Pole Mounted Antenna Kit 13
3.2. Configuration and Installation of the 3G/4G Router 14
3.2.1. RMS over IP Gemini Mk2 14
3.2.2. STRATOS Outstation Connection 14
3.2.3. UTC Connection via 3G/4G router 16
3.3. Installation and Configuration of ADSL Routers 20
4. Maintenance 21
4.1. Modifications 21
4.2. Routine Maintenance Visits 21
4.3. First Line Maintenance 21
4.4. Second Line Maintenance 22

List of Tables
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
3
List of Figures
Figure 1 : SIM Card Slot 14
Figure 3 : 3G/4G Router Settings (WAN) 15
Figure 4 : 3G/4G Router Settings (ICMP) 15
Figure 5 : IPSec Configuration 16
Figure 6 : Example IPSec Instance 18
Figure 7 : Example IPSec Status 19

List of Tables
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
4
List of Tables
Table 1 : External Document References 7
Table 2 : Terms and Abbreviations 8
Table 3 : IPSec Settings Table 17

Health and Safety Protection
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
5
Health and Safety Protection
Safety of Installation and Maintenance Personnel
In the interests of health and safety, when installing, using or servicing this equipment the
following instructions must be noted and adhered to:
(1) Only skilled or instructed personnel, with relevant technical knowledge and experience,
who are also familiar with the safety procedures required when dealing with modern
electrical/electronic equipment, are to be allowed to use and/or work on this equipment.
All work shall be performed in accordance with the local regulations1,2.
(2) Such personnel must take heed of all relevant notes, cautions and warnings in this
Handbook and any other Document or Handbook associated with the equipment includ-
ing, but not restricted to, the following:
i. The equipment must be correctly connected to the specified incoming power supply.
ii. Only trained / competent persons should work on this equipment.
iii. Any power tools must be regularly inspected and tested.
iv. Any personnel working on site must wear the appropriate protective clothing, e.g. re-
flective vests, etc.
Safety of Road Users
It is important that all personnel are aware of the dangers to road users that could arise during
repair and maintenance of traffic control equipment.
Ensure that the junction area is coned and signed as necessary to warn motorists and pedes-
trians of any dangers and to help protect the personnel working on the site.
1
For UK this refers to Electricity at Work Regulations 1989.
2
For DE this refers to GV A3, DIN EN 50110-1 (VDE 0105-1) and VDE 0832 and the work-safety leaflet
ASM 0099-01

Handling Precautions
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
6
Handling Precautions
Safety of Handling
•Take care not to ‘kink’ the cable when installing. The impact may manifest in poor re-
turn loss.
•Due to the cable thickness the RF cable the minimum bend radius of 25cm must be ob-
served
•It is recommended that RF connectors exposed to the environment are protected using
amalgamating Tape, and electrical tape

Introduction
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
7
1. Introduction
1.1. Purpose
This User Guide gives a general description for the range of IP router used by Siemens ITS.
This document either outlines the general procedures for installation, commissioning and
maintenance or refers to appropriate and applicable documents.
1.2. Document References
External Document References
667/HB/31601/000
UTMC OTU/ MOVA Handbook
667/HB/32600/000
GEMINI² Traffic Outstation Handbook
667/AY/45025/000
3G/4G OTU Communications Site Selection Guide
667/DZ/31601/000
Family Tree
667/CI/32630/000
Gemini MK2 3G/4G Conversion GUIDE
667/CI/52251/000
Stratos Outstation 3G/4G Comms Installation QS Guide
Table 1 : External Document References
1.3. Key Terms and Abbreviations
Key Terms and Abbreviations
PSTN
Public Switching Telephone Network
GSM
Global System for Mobile communication (This Usually Refers to 2nd Generation,
2G Networks)
GPRS
Global Packet Radio Service, Used on, 2G networks as a packet data service.
2G
Second Generation GSM Networks optimised for Voice Communication
3G
Third Generation GSM Network optimised for Data Communications
4G
Fourth Generation GSM Network optimised for Data Communications
EDGE
Enhanced Data rates for GSM Evolution (or EGPRS). Used on 2G networks to
increase the data rates achievable.
PSU
Power Supply Unit
I/O
Inputs / Outputs

Introduction
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
8
Key Terms and Abbreviations
MOVA
Microprocessor Optimised Vehicle Actuated
UTC
Urban Traffic Control
OTU
Outstation Transmission Unit
SCOOT
Split Cycle Offset Optimisation Technique
IPT
Intelligent Portable Terminal
RAM
Random Access Memory
PROM
Programmable Read Only Memory
CPU
Central Processor Unit
UTMC
OTU
Urban Traffic Management and Control (Outstation Transmission Unit)
UTMC
VMS
Urban Traffic Management and Control (Variable Message Sign)
NAT
Network Address Translation (sometimes referred to as Port Forwarding)
VPN
Virtual Private Network
LAN
Local Area Network
WAN
Wide Area Network
ADSL
Asymmetrical Digital Subscriber Line
SDSL
Symmetrical Digital Subscriber Line
Table 2 : Terms and Abbreviations

Routers - General Description
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
9
2. Routers - General Description
Siemens ITS (Poole) provide and support three types of routers, namely a 3G/4G Router, xDSL
Route and Instation Router for use in customer networks.
This chapter outlines these devices and provides an overview on their use.
2.1. MuLogic RSA ADSL
This type of router can be used to connect IP based equipment to a customer network using
an ADSL “Broadband“ Connection. The ADSL line will allow a connection to the Public Inter-
net, and the router can provide a IPSEC VPN (Virtual Private Network) tunnel to another Rout-
er to allow the WAN (Wide Area Network) connection back to the customer LAN (Local Area
Network). For details please refer to 667/CI/99107/000.
2.2. PROROUTE 4G Router
The current router is the PROROUTE H685 4G (667/1/99110/000), which can be used to con-
nect IP based equipment to a customer network using a Mobile Phone connection (3G or 4G
GSM). Wireless connections of this type are not normally as reliable as using wired communi-
cations solutions and are not always suitable in some locations or for certain applications. If
in doubt, please contact the Engineering department in Poole for clarification.
The PROROUTE H685 4G (667/1/99110/000) Router also allows IPSEC VPN tunnels to be con-
figured for secure connections across the public Internet, these settings would be provided
by the Customer or Poole Engineering department.
2.3. Connection Types
There are two types of equipment connections used in Siemens ITS. The first is the ‘transpar-
ent’ connection and the second is the ‘VPN’ connection.
2.3.1. Transparent Connection
In this type of connection the STRATOS Outstation, or ST950 controller, will be the VPN cli-
ent. Therefore any communications interface only needs to act as a transparent ‘pipe’ to and
from the STRATOS Outstation/ST950 Controller.
Safety of Licences
The STRATOS Outstation/ST950 Controller needs to be supplied with the appropriate certifi-
cates in order to enable connection through to the STRATOS Instation.

Routers - General Description
IP ROUTERS INSTALLATION GUIDE 3G OTU
667/CI/45025/000 Rev 4 Unrestricted
10
Safety of Security
Although the 3G/4G router modem does not handle the STRATOS Outstation to Instation secu-
rity explicitly, it is nevertheless incumbent on the installers to secure the router. Having a se-
cure router may discourage accidental or intentional re-configuration that could end up
providing third parties with access to customers’ internet bandwidth.
The process for securing the 3G/4G router is as follows;
1Generate a random password. It is recommended that KeePass (www.keepass.com) is
used for such a purpose.
2Configure the router such that the spare Ethernet port is not active.
3Confirm and configure the modem such that the WiFi device is in-operable.
4Update the modem with the password generated above.
5Export the router configuration
6Store the password for the router along with router configuration in the STRATOS Outsta-
tion site-log or the ST950 Site Log.
7Delete local copies of the configuration and password.
2.3.2. VPN Connection
This type of connection relies on the router to become the VPN client. Product applications
such as RMS over IP (Gemini Mk2), OMU, Saphire JTM will use this methodology.
Safety of Security
It should be noted that this method of connection is not considered as secure as the ‘Transpar-
ent’ connection method.