virtual access GW6600 User manual

GW6600 User Manual
Issue:
2.3
Date:
08 May 2015

Table of Contents
_______________________________________________________________________________________________________
1Introduction ...............................................................................................10
1.1 Document scope ..................................................................................... 10
2GW6600 Series hardware ...........................................................................11
2.1 Hardware specification............................................................................. 11
2.1.1 GW6600 Series router model variants ................................................. 11
2.2 Hardware features .................................................................................. 11
2.3 GSM technology...................................................................................... 11
2.4 Power supply.......................................................................................... 12
2.5 Dimensions ............................................................................................ 12
2.6 Compliance ............................................................................................ 12
2.7 Operating temperature range ................................................................... 12
2.8 Antenna................................................................................................. 12
2.9 Components........................................................................................... 12
2.10 Inserting the SIM cards ........................................................................... 13
2.11 Connecting the SIM lock .......................................................................... 14
2.12 Connecting cables................................................................................... 14
2.13 Connecting the antenna........................................................................... 14
2.14 Connecting the WiFi antenna.................................................................... 14
2.15 Powering up ........................................................................................... 14
2.16 Reset button .......................................................................................... 14
3GW6600 Series LED behaviour....................................................................16
3.1 Main LED behaviour................................................................................. 16
3.2 Ethernet port LED behaviour .................................................................... 18
4Factory configuration extraction from SIM card .........................................19
5Accessing the router...................................................................................20
5.1 Over Ethernet......................................................................................... 20
5.2 Over a 3G or 4G interface ........................................................................ 20
6Upgrading router firmware.........................................................................21
6.1 Upgrading firmware using the web interface............................................... 21
6.2 Upgrading firmware using CLI .................................................................. 23
7File system .................................................................................................24
7.1 Configurations........................................................................................ 24
7.1.1 High level configuration commands..................................................... 24
7.1.2 Configuration file syntax.................................................................... 25
7.1.3 Command line utility ......................................................................... 26
7.1.3.1 Command line utility examples.................................................................................28
7.1.4 Configuration copying and deleting ..................................................... 29
7.1.5 Image files....................................................................................... 29
7.1.6 Viewing files..................................................................................... 29
7.1.7 Copying files .................................................................................... 30
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 2 of 305

Table of Contents
_______________________________________________________________________________________________________
7.1.8 Editing files...................................................................................... 31
7.1.9 Processes and jobs............................................................................ 31
7.1.10 System information........................................................................... 31
8Command Line Interface ............................................................................33
8.1 Basics.................................................................................................... 33
8.2 Unified Configuration Interface (UCI)......................................................... 35
8.3 Configuration files................................................................................... 39
8.4 Configuration file syntax .......................................................................... 39
8.5 Examples............................................................................................... 40
8.5.1 Export an entire configuration ............................................................ 41
8.5.2 Display just the value of an option ...................................................... 41
9Management configuration settings ...........................................................42
9.1 Autoload - boot up activation.................................................................... 42
9.2 Httpclient - Activator configuration............................................................ 44
9.3 System settings...................................................................................... 47
9.3.1 Configuring a router’s host name........................................................ 47
9.4 User management................................................................................... 50
9.4.1 Configuration file: config user............................................................. 50
9.4.2 UCI export and UCI show commands................................................... 52
9.5 Interfaces configuration........................................................................... 53
9.5.1 Interfaces ........................................................................................ 53
9.5.2 Options valid for all protocol types ...................................................... 54
9.5.3 Protocol "static"................................................................................ 55
9.5.4 Protocol "dhcp"................................................................................. 55
9.5.5 Protocol "3g" (PPP over EV-DO, CDMA, UMTS or GRPS) ......................... 55
9.5.6 Protocol "l2tp" (layer 2 tunneling protocol)........................................... 56
9.5.7 Aliases............................................................................................. 56
10 DHCP server and DNS configuration ...........................................................59
10.1 Common options section.......................................................................... 59
10.2 DHCP pools ............................................................................................ 63
10.3 Static leases........................................................................................... 65
11 VLAN configuration.....................................................................................66
11.1 VLAN web interface ................................................................................. 66
11.2 VLAN definition....................................................................................... 66
11.3 Port description ...................................................................................... 67
11.4 VLANs UCI interface ................................................................................ 68
11.4.1 config port ....................................................................................... 70
11.4.2 config vlan....................................................................................... 70
11.4.3 Config nat vlan................................................................................. 70
12 Static routes configuration .........................................................................71
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 3 of 305

Table of Contents
_______________________________________________________________________________________________________
12.1 IPv4 routes ............................................................................................ 71
12.2 IPv6 routes ............................................................................................ 72
13 BGP (Border Gateway Protocol)..................................................................74
13.1 Configuring the BGP web interface ............................................................ 74
13.2 Optionally configure BGP route map .......................................................... 75
13.3 Configure BGP neighbours........................................................................ 76
13.4 Routes statistics ..................................................................................... 76
13.5 BGP UCI interface ................................................................................... 77
14 Configuring WiFi.........................................................................................80
14.1 Configuring WiFi through the web interface ................................................ 80
14.2 Configuring WiFi in AP mode on an existing Ethernet interface...................... 80
14.3 Configuring WiFi in AP mode on a new interface.......................................... 84
14.4 Configuring WiFi in client mode................................................................. 89
14.5 Configuring WiFi via UCI .......................................................................... 93
14.5.1 Configuring Wi-Fi in AP mode on an existing Ethernet interface .............. 93
14.5.2 Configuring WiFI on a new interface.................................................... 95
14.6 Configuring WiFi in client mode................................................................. 97
15 Configuring a 3G/4G connection.................................................................99
16 Configuring SMS .......................................................................................102
16.1 Monitoring SMS .................................................................................... 103
16.2 Outgoing messages............................................................................... 103
17 Configuring Multi-WAN .............................................................................104
17.1 Multi-WAN web interface........................................................................ 104
17.2 Multi-WAN UCI interface ........................................................................ 107
18 Automatic operator selection....................................................................110
18.1 Introduction to automatic operator selection ............................................ 110
18.2 Configuring automatic operator selection ................................................. 110
18.3 Configuring automatic operator selection via the web interface................... 110
18.3.1 PMP + roaming: pre-empt enabled.................................................... 110
18.3.1.1 Creating primary predefined interface ...............................................................111
18.3.1.2 Setting multi-WAN options for primary predefined interface............................113
18.3.1.3 Setting options for automatically created interfaces .........................................115
18.3.2 PMP + roaming: pre-empt disabled................................................... 120
18.3.3 Roaming: no PMP defined ................................................................ 121
18.3.4 Disable roaming.............................................................................. 122
19 Configuring IPSec.....................................................................................123
19.1 Common settings.................................................................................. 123
19.2 Connection settings............................................................................... 124
19.3 Shunt connection.................................................................................. 128
19.4 Secret settings ..................................................................................... 128
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 4 of 305

Table of Contents
_______________________________________________________________________________________________________
20 Configuring firewall..................................................................................131
20.1 Defaults section.................................................................................... 131
20.2 Zones section....................................................................................... 131
20.3 Forwarding sections .............................................................................. 132
20.4 Redirects ............................................................................................. 133
20.5 Rules................................................................................................... 134
20.6 Includes............................................................................................... 135
20.7 IPv6 notes ........................................................................................... 135
20.8 Implications of DROP vs. REJECT ............................................................ 136
20.9 Note on connection tracking................................................................... 137
20.10 Firewall examples .............................................................................. 137
20.10.1 Opening ports ............................................................................. 137
20.10.2 Forwarding ports (destination NAT/DNAT)....................................... 137
20.10.3 Source NAT (SNAT)...................................................................... 138
20.10.4 True destination port forwarding.................................................... 139
20.10.5 Block access to a specific host ....................................................... 139
20.10.6 Block access to the internet using MAC........................................... 139
20.10.7 Block access to the internet for specific IP on certain times............... 139
20.10.8 Restricted forwarding rule............................................................. 140
20.10.9 Transparent proxy rule (same host) ............................................... 140
20.10.10 Transparent proxy rule (external) .................................................. 140
20.10.11 Simple DMZ rule.......................................................................... 141
20.10.12 IPSec passthrough....................................................................... 141
20.10.13 Manual iptables rules.................................................................... 142
20.11 Firewall management ......................................................................... 142
20.12 Debug generated rule set.................................................................... 143
21 Configuring SNMP.....................................................................................144
21.1 agent .................................................................................................. 144
21.2 system ................................................................................................ 145
21.3 com2sec .............................................................................................. 145
21.4 access ................................................................................................. 148
21.5 SNMP traps .......................................................................................... 149
22 Configuring HTTP server...........................................................................150
22.1 Server settings ..................................................................................... 150
22.2 HTTPS certificate settings and creation .................................................... 152
22.3 Basic authentication (httpd.conf) ............................................................ 153
22.4 Securing uHTTPd .................................................................................. 154
22.5 SSH server configuration ....................................................................... 154
23 Configuring ADSL......................................................................................155
23.1 What is ADSL technology?...................................................................... 155
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 5 of 305

Table of Contents
_______________________________________________________________________________________________________
23.2 ADSL connections ................................................................................. 155
23.3 ADSL connection options on your router .................................................. 155
23.4 Configuring ADSL PPP connection via the web interface ............................. 156
23.5 Configuring an ADSL PPPoA connection.................................................... 157
23.6 Configuring an ADSL PPPoEoA connection ................................................ 159
23.7 Configuring an ADSL bridge connection with static IP ................................ 162
23.8 Configuring ADSL via UCI....................................................................... 165
23.8.1 Configuring an ADSL PPPoA connection via UCI .................................. 165
23.8.2 Configuring an ADSL PPPoEoA connection via UCI............................... 166
24 Virtual Router Redundancy Protocol (VRRP) ............................................169
24.1 Software versions ................................................................................. 169
24.2 VRRP web interface............................................................................... 170
24.3 Configuring VRRP using UCI ................................................................... 173
25 Dial modem ..............................................................................................175
25.1 V.90 modem scenarios .......................................................................... 175
25.2 Setting up the V.90 physical port connection............................................ 175
25.3 Configuring the modem as a dial out interface via UCI interface.................. 176
25.4 Configuring the modem as a dial in interface via UCI................................. 177
25.4.1 Mgetty settings............................................................................... 177
25.4.2 Dial in interface settings .................................................................. 178
25.4.3 Management user settings ............................................................... 179
26 ISDN pseudowire......................................................................................180
26.1 Introduction ......................................................................................... 180
26.2 Pseudowire functionality ........................................................................ 181
26.3 ISDN pseudowire in client role................................................................ 181
26.3.1 Configuring LCR using UCI ............................................................... 181
26.3.2 Configuring Asterisk using UCI ......................................................... 182
26.4 ISDN pseudowire in client and provider role (back-to-back) ....................... 183
26.4.1 Configuring LCR using UCI ............................................................... 183
26.4.2 Configuring Asterisk using UCI ......................................................... 184
27 Analogue Leased Line interface ................................................................187
27.1 Terminal Server: V.23 modem emulation................................................. 187
27.2 CESoPSN: transparent mode .................................................................. 187
27.3 Gain and attenuation control .................................................................. 187
27.4 ALL interface ........................................................................................ 188
27.4.1 ALL status...................................................................................... 188
27.4.2 ALL statistics.................................................................................. 189
27.4.3 ALL wiring...................................................................................... 189
28 Configuring CESoPSN................................................................................191
28.1 What is CESoPSN? ................................................................................ 191
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 6 of 305

Table of Contents
_______________________________________________________________________________________________________
28.2 Configuring CESoPSN using UCIJK........................................................... 191
28.2.1 Main settings.................................................................................. 191
28.3 Port settings......................................................................................... 192
28.3.1 ALL interface settings ...................................................................... 194
28.3.2 Dual X.21 interface settings ............................................................. 194
29 Dynamic Multipoint Virtual Private Network (DMVPN) .............................195
29.1 The advantage of using DMVPN .............................................................. 195
29.2 DMVPN scenarios .................................................................................. 195
29.3 Configuring DMVPN via the web interface................................................. 197
29.3.1Configuring IPSec for DMVPN ........................................................... 198
29.4 DMVPN hub settings.............................................................................. 204
29.5 UCI interface........................................................................................ 205
29.5.1 IPSec configuration using CLI........................................................... 205
29.6 Configuring DMVPN using CLI................................................................. 207
30 Terminal Server ........................................................................................209
30.1 Introduction ......................................................................................... 209
30.2 Terminal Server interfaces ..................................................................... 209
30.3 Configuring Terminal Server................................................................... 209
30.3.1 Configuring Terminal Server using the web interface ........................... 209
30.3.1.1 Main settings.......................................................................................................209
30.3.1.2 Port settings ........................................................................................................210
30.3.1.3 Port settings: general section .............................................................................210
30.3.1.4 Port settings: serial section................................................................................. 212
30.3.1.5 Port settings: network section ............................................................................214
30.4 Configuring Terminal Server using UCI .................................................... 216
30.5 Terminal Server operation...................................................................... 226
30.5.1 General ......................................................................................... 226
30.5.2 Starting Terminal Server.................................................................. 226
30.5.3 Checking the status of Terminal Server ............................................. 226
30.5.4 Stopping Terminal Server ................................................................ 227
31 GRE interfaces ..........................................................................................228
31.1 GRE web interface................................................................................. 228
31.2 GRE UCI interface ................................................................................. 230
32 Multicasting using PIM and IGMP interfaces.............................................232
32.1 Configuring PIM and IGMP via the web interface ....................................... 232
32.2 PIM and IGMP UCI interface ................................................................... 234
33 Dynamic Multipoint Virtual Private Network (DMVPN) .............................237
33.1 The advantage of using DMVPN .............................................................. 237
33.2 DMVPN scenarios .................................................................................. 237
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 7 of 305

Table of Contents
_______________________________________________________________________________________________________
33.3 Configuring DMVPN via the web interface................................................. 239
33.3.1 Configuring IPSec for DMVPN ........................................................... 240
33.4 DMVPN hub settings.............................................................................. 246
33.5 UCI interface........................................................................................ 247
33.5.1 IPSec configuration using CLI........................................................... 247
33.6 Configuring DMVPN using CLI................................................................. 249
34 Event system ............................................................................................251
34.1 Implementation of the event system ....................................................... 251
34.2 Supported events.................................................................................. 251
34.3 Supported targets................................................................................. 251
34.4 Supported connection testers ................................................................. 252
34.5 Configuring the event system via the web interface................................... 252
34.6 Configuring the event system via UCI...................................................... 252
34.6.1 Main section................................................................................... 252
34.6.2 Forwardings ................................................................................... 253
34.6.3 Connection testers.......................................................................... 253
34.6.3.1 Ping connection tester ........................................................................................254
34.6.3.2 Link connection tester.........................................................................................254
34.6.4 Supported targets........................................................................... 255
34.6.4.1 Syslog target........................................................................................................255
34.6.4.2 Email target......................................................................................................... 256
34.6.4.3 SNMP target ........................................................................................................257
34.6.4.4 Exec target ..........................................................................................................257
34.6.5 Example and export ........................................................................ 258
35 Configuring SLA reporting on Monitor.......................................................264
35.1 Introduction ......................................................................................... 264
35.2 Configuring SLA reporting ...................................................................... 264
35.2.1 Configuring a content template......................................................... 264
35.3 Adding an SLA report ............................................................................ 267
35.4 Viewing an SLA report ........................................................................... 269
35.5 Viewing automated SLA reports.............................................................. 270
35.6 Configuring router upload protocol .......................................................... 271
36 Configuring SLA for a router.....................................................................272
36.1 Configuring SLA for a router via the web interface..................................... 272
36.2 Configuring SLA for a router via UCI interface........................................... 274
36.3 SLA statistics........................................................................................ 275
37 Diagnostics...............................................................................................277
37.1 ADSL diagnostics .................................................................................. 277
37.1.1 ADSL PPPoA connections.................................................................. 277
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 8 of 305

Table of Contents
_______________________________________________________________________________________________________
37.1.2 ADSL PPPoEoA connections .............................................................. 277
37.1.3 ADSL bridge connections ................................................................. 278
37.2 ALL diagnostics..................................................................................... 279
37.3 Automatic operator selection diagnostics via the web interface ................... 280
37.3.1 Checking the status of the Multi-WAN package ................................... 280
37.4 Automatic operator selection diagnostics via UCI ...................................... 281
37.5 CESoPSN diagnostics............................................................................. 283
37.5.1 cesop show config........................................................................... 283
37.5.2 cesop show status........................................................................... 285
37.5.3 cesop show stats ............................................................................ 285
37.5.4 cesop clear stats............................................................................. 286
37.6 DMVPN diagnostics................................................................................ 287
37.7 File system diagnostics.......................................................................... 289
37.8 Firewall diagnostics ............................................................................... 290
37.8.1 IP tables........................................................................................ 293
37.8.2 Debug ........................................................................................... 293
37.9 GPS diagnostic commands ..................................................................... 294
37.10 Interfaces diagnostics......................................................................... 294
37.10.1 Interfaces status.......................................................................... 294
37.10.2 Route status................................................................................ 295
37.10.3 Mobile status............................................................................... 295
37.10.4 ADSL status ................................................................................ 296
37.11 ISDN pseudowire diagnostics............................................................... 297
37.11.1 Packages .................................................................................... 297
37.11.2 Asterisk CLI diagnostics................................................................ 298
37.11.3 ISDN LED status.......................................................................... 299
37.12 IPSec diagnostics............................................................................... 299
37.13 Multi-WAN diagnostics........................................................................ 300
37.14 PAD diagnostics................................................................................. 301
37.14.1 Showing Log ............................................................................... 301
37.14.2 Debugging guidelines................................................................... 302
37.15 Terminal Server diagnostics ................................................................ 303
37.16 VRRP diagnostics ............................................................................... 304
37.16.1 VRRP diagnostics web interface ..................................................... 304
37.16.2 VRRP diagnostics using the command line interface ......................... 304
37.17 Diagnostics for WiFi AP mode .............................................................. 305
37.18 Diagnostics for WiFi client mode .......................................................... 305
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 9 of 305

1: Introduction
_______________________________________________________________________________________________________
1Introduction
Based on the very latest ADSL2+, WiFi and 3G HSPA+ technology, Virtual Access
GW600 Series routers address the needs of today’s businesses for managed
resilient broadband connectivity. Point of Sale (POS), retail branch office,
security monitoring and other key business applications demand managed
connectivity that is cost-effective, high performance and resilient to network
outage or last mile circuit failure.
Designed for managed network providers, GW6600 Series routers provide secure
WAN connectivity for internet and private networking environments over both
ADSL2+ and 3G broadband paths and incorporate optional 802.11n WiFi
connectivity.
1.1 Document scope
This document covers the following models in the GW6600 Series.
Model ADSL2+ Eth WiFi 3G/HSPA+
4G/LTE CDMA
450
Dual
SIM
Socket
V92
Modem Analogue Leased Line ISDN BRI
GW6610 1 4   
GW66110W 1 4 1   
GW6630 1 4     
GW6630W 1 4 1     
GW6640 1 4      
GW6640W 1 4 1      
GW6650 1 4    
GW6650W 1 4 1    
Throughout this document we use the host name ‘VA_router’.
_______________________________________________________________________________________________________
© Virtual Access 2015
GW6600 User Manual
Issue: 2.3 Page 10 of 305