virtual access GW7304-3G-AC User manual

GW7304 Series User Manual
Issue:
1.9
Date:
11 April 2017

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 2 of 336
1Introduction .................................................................................................8
1.1 Document scope .......................................................................................8
1.2 Using this documentation...........................................................................8
2GW7304 Series hardware ...........................................................................11
2.1 Hardware specification............................................................................. 11
2.2 Power supply.......................................................................................... 12
2.3 Serial port.............................................................................................. 12
2.4 GSM technology...................................................................................... 13
2.5 Dimensions ............................................................................................ 13
2.6 Operating temperature range ................................................................... 14
2.7 Antennas ............................................................................................... 14
2.8 Components........................................................................................... 14
2.9 Getting started ....................................................................................... 15
3GW7304 Series LED behaviour....................................................................21
4GW7304 Series safety and approvals..........................................................22
4.1 Safety ................................................................................................... 22
4.2 Product disposal ..................................................................................... 22
4.3 Approvals............................................................................................... 23
5Factory configuration extraction from SIM card .........................................24
6Accessing the router...................................................................................25
6.1 Configuration packages used.................................................................... 25
6.2 Accessing the router over Ethernet using the web interface.......................... 25
6.3 Accessing the router over Ethernet using an SSH client ............................... 26
6.4 Accessing the router over Ethernet using a Telnet client .............................. 27
6.5 Configuring the password......................................................................... 27
6.6 Configuring the password using the web interface....................................... 27
6.7 Configuring the password using UCI.......................................................... 28
6.8 Configuring the password using package options......................................... 28
6.9 Accessing the device using RADIUS authentication...................................... 29
6.10 Accessing the device using TACACS+ authentication ................................... 30
6.11 SSH ...................................................................................................... 33
6.12 Package dropbear using UCI..................................................................... 35
6.13 Certs and private keys............................................................................. 36
6.14 Configuring a router’s web server ............................................................. 37
6.15 Basic authentication (httpd conf) .............................................................. 42
6.16 Securing uhttpd...................................................................................... 43
7Configuring Dynamic DNS...........................................................................44
7.1 Overview ............................................................................................... 44
7.2 Configuration packages used.................................................................... 44
7.3 Configuring Dynamic DNS using the web interface ...................................... 44

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 3 of 336
7.4 Dynamic DNS using UCI........................................................................... 46
8System settings..........................................................................................48
8.1 Configuration package used ..................................................................... 48
8.2 Configuring system properties .................................................................. 48
8.3 System settings using UCI ....................................................................... 52
8.4 System diagnostics ................................................................................. 53
9Upgrading router firmware.........................................................................55
9.1 Software versions ................................................................................... 55
9.2 Upgrading firmware using CLI .................................................................. 61
10 Router file structure ...................................................................................64
10.1 System information................................................................................. 64
10.2 Identify your software version .................................................................. 65
10.3 Image files............................................................................................. 66
10.4 Directory locations for UCI configuration files ............................................. 66
10.5 Viewing and changing current configuration ............................................... 66
10.6 Configuration file syntax .......................................................................... 67
10.7 Managing configurations .......................................................................... 67
10.8 Exporting a configuration file.................................................................... 68
10.9 Importing a configuration file ................................................................... 69
11 Using the Command Line Interface.............................................................73
11.1 Overview of some common commands ...................................................... 73
11.2 Using Unified Configuration Interface (UCI)................................................ 76
11.3 Configuration files................................................................................... 81
11.4 Configuration file syntax .......................................................................... 81
12 Management configuration settings ...........................................................83
12.1 Activator................................................................................................ 83
12.2 Monitor.................................................................................................. 83
12.3 Configuration packages used.................................................................... 83
12.4 Autoload: boot up activation..................................................................... 84
12.5 Autoload packages.................................................................................. 84
12.6 Autoload using UCI ................................................................................. 87
12.7 HTTP Client: configuring activation using the web interface.......................... 88
12.8 Httpclient: Activator configuration using UCI .............................................. 90
12.9 Httpclient: Activator configuration using package options............................. 91
12.10 User management using UCI................................................................. 92
12.11 Configuring the management user password using UCI............................. 93
12.12 Configuring management user password using package options................. 93
12.13 User management using UCI................................................................. 94
12.14 User management using package options ............................................... 94
12.15 Configuring user access to specific web pages ......................................... 95

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 4 of 336
13 Configuring an Ethernet interface...............................................................96
13.1 Configuration packages used.................................................................... 96
13.2 Configuring an Ethernet interface using the web interface............................ 96
13.3 Interface configuration using UCI............................................................ 106
13.4 Configuring port maps........................................................................... 109
13.5 Port map packages................................................................................ 109
13.6 Interface diagnostics ............................................................................. 111
14 Configuring DHCP server and DNS (Dnsmasq)..........................................113
14.1 Configuration package used ................................................................... 113
14.2 Configuring DHCP and DNS using the web interface .................................. 113
14.3 Configuring DHCP and DNS using UCI...................................................... 121
14.4 Configuring DHCP pools using UCI........................................................... 123
14.5 Configuring static leases using UCI.......................................................... 124
15 Configuring VLAN .....................................................................................125
15.1 Maximum number of VLANs supported .................................................... 125
15.2 Configuration package used ................................................................... 125
15.3 Configuring VLAN using the web interface................................................ 125
15.4 Viewing VLAN interface settings.............................................................. 128
15.5 Configuring VLAN using the UCI interface................................................. 129
16 QoS: VLAN 802.1Q PCP tagging ................................................................130
16.1 Configuring VLAN PCP tagging................................................................ 130
17 QoS: type of service..................................................................................133
17.1 QoS configuration overview.................................................................... 133
17.2 Configuration packages used.................................................................. 133
17.3 Configuring QoS using the web interface.................................................. 133
17.4 Configuring QoS using UCI..................................................................... 135
17.5 Example QoS configurations................................................................... 138
18 Configuring static routes ..........................................................................139
18.1 Configuration package used ................................................................... 139
18.2 Configuring static routes using the web interface ...................................... 139
18.3 Configuring IPv6 routes using the web interface ....................................... 140
18.4 Configuring routes using command line ................................................... 140
18.5 IPv4 routes using UCI............................................................................ 141
18.6 IPv4 routes using package options .......................................................... 142
18.7 IPv6 routes using UCI............................................................................ 142
18.8 IPv6 routes using packages options......................................................... 142
18.9 Static routes diagnostics........................................................................ 143
19 Configuring BGP (Border Gateway Protocol) ............................................144
19.1 Configuration package used ................................................................... 144
19.2 Configuring BGP using the web interface.................................................. 144

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 5 of 336
19.3 Configuring BGP using UCI..................................................................... 147
19.4 Configuring BGP using packages options.................................................. 148
19.5 View routes statistics............................................................................. 149
20 Configuring a mobile connection ..............................................................150
20.1 Configuration package used ................................................................... 150
20.2 Configuring a mobile connection using the web interface............................ 150
20.3 Configuring a mobile connection using CLI ............................................... 156
20.4 Diagnositcs .......................................................................................... 157
21 Configuring mobile manager.....................................................................159
21.1 Configuration package used ................................................................... 159
21.2 Configuring mobile manager using the web interface................................. 159
21.3 Configuring mobile manager using UCI.................................................... 162
21.4 Configuring a roaming interface template via the web interface .................. 163
21.5 Monitoring SMS .................................................................................... 163
21.6 Sending SMS from the router ................................................................. 164
21.7 Sending SMS to the router ..................................................................... 164
22 Configuring Multi-WAN .............................................................................165
22.1 Configuration package used ................................................................... 165
22.2 Configuring Multi-WAN using the web interface......................................... 165
22.3 Multi-WAN traffic rules........................................................................... 170
22.4 Configuring Multi-WAN using UCI............................................................ 170
22.5 Multi-WAN diagnostics........................................................................... 171
23 Automatic operator selection....................................................................174
23.1 Configuration package used ................................................................... 174
23.2 Configuring automatic operator selection via the web interface................... 174
23.3 Configuring via UCI............................................................................... 194
23.4 Configuring no PMP + roaming using UCI................................................. 198
23.5 Automatic operator selection diagnostics via the web interface ................... 200
23.6 Automatic operator selection diagnostics via UCI ...................................... 202
24 Configuring IPSec.....................................................................................205
24.1 Configuration package used ................................................................... 205
24.2 Configuring IPSec using the web interface................................................ 205
24.3 Configuring IPSec using UCI................................................................... 213
24.4 Configuring an IPSec template for DMVPN via the web interface ................. 217
24.5 Configuring an IPSec template to use with DMVPN.................................... 225
24.6 IPSec diagnostics using the web interface ................................................ 227
24.7 IPSec diagnostics using UCI ................................................................... 227
25 Configuring firewall..................................................................................228
25.1 Configuration package used ................................................................... 228
25.2 Configuring firewall using the web interface ............................................. 228

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 6 of 336
25.3 Configuring firewall using UCI................................................................. 240
25.4 IPv6 notes ........................................................................................... 242
25.5 Implications of DROP vs. REJECT ............................................................ 242
25.6 Connection tracking .............................................................................. 243
25.7 Firewall examples ................................................................................. 243
26 Configuring SNMP.....................................................................................251
26.1 Configuration package used ................................................................... 251
26.2 Configuring SMNP using the web interface................................................ 251
26.3 Configuring SNMP using command line .................................................... 256
27 Configuring VRRP .....................................................................................263
27.1 Overview ............................................................................................. 263
27.2 Configuration package used ................................................................... 263
27.3 Configuring VRRP using the web interface................................................ 263
27.4 Configuring VRRP using UCI ................................................................... 265
28 Dynamic Multipoint Virtual Private Network (DMVPN) .............................267
28.1 Prerequisites for configuring DMVPN........................................................ 267
28.2 Advantages of using DMVPN................................................................... 267
28.3 DMVPN scenarios .................................................................................. 268
28.4 Configuration packages used.................................................................. 270
28.5 Configuring DMVPN using the web interface ............................................. 270
28.6 DMVPN diagnostics................................................................................ 272
29 Configuring Terminal package ..................................................................275
29.1 Configuration packages used.................................................................. 275
29.2 Configuring Terminal using the web interface ........................................... 275
29.3 Configuring Terminal package using UCI.................................................. 275
29.4 Configuring Terminal Server using package options................................... 276
29.5 Terminal diagnostics.............................................................................. 276
30 Configuring Terminal Server.....................................................................277
30.1 Overview ............................................................................................. 277
30.2 Configuration packages used.................................................................. 277
30.3 Configuring Terminal Server using the web interface ................................. 277
30.4 Terminal Server using UCI ..................................................................... 287
30.5 Terminal Server using package options.................................................... 288
30.6 Terminal Server diagnostics ................................................................... 288
31 Configuring a GRE interface......................................................................291
31.1 Configuration packages used.................................................................. 291
31.2 Creating a GRE connection using the web interface ................................... 291
31.3 GRE configuration using command line .................................................... 296
31.4 GRE configuration using UCI................................................................... 296
31.5 GRE configuration using package options................................................. 296

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 7 of 336
31.6 GRE diagnostics.................................................................................... 297
32 Configuring multicasting using PIM and IGMP interfaces .........................299
32.1 Overview ............................................................................................. 299
32.2 Configuration package used ................................................................... 299
32.3 Configuring PIM and IGMP using the web interface.................................... 299
32.4 Configuring PIM and IGMP using UCI....................................................... 301
33 Event system ............................................................................................303
33.1 Configuration package used ................................................................... 303
33.2 Implementation of the event system ....................................................... 303
33.3 Supported events.................................................................................. 303
33.4 Supported targets................................................................................. 304
33.5 Supported connection testers ................................................................. 304
33.6 Configuring the event system using the web interface ............................... 304
33.7 Configuring the event system using UCI .................................................. 304
33.8 Event system diagnostics....................................................................... 315
34 Configuring SLA reporting on Monitor.......................................................321
34.1 Introduction ......................................................................................... 321
34.2 Configuring SLA reporting ...................................................................... 321
34.3 Configuring router upload protocol .......................................................... 322
34.4 Viewing graphs..................................................................................... 322
34.5 Generating a report............................................................................... 325
34.6 Reporting device status to Monitor using UCI............................................ 328
35 Configuring SLA for a router.....................................................................332
35.1 Configuration package used ................................................................... 332
35.2 Configuring SLA for a router using the web interface ................................. 332
35.3 Configuring SLA for a router using UCI .................................................... 334

1: Introduction
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 8 of 336
1Introduction
This user manual describes the features and how to configure a Virtual Access GW7304
Series router.
The Virtual Access GW7304 Series router is ruggedized and supports extended
temperature, high isolation and protection levels. The router enclosure is not conductive.
It has 8 Ethernet ports, 3G radio access modems, with up to two SIM cards and a serial
console access. There are AC and DC power versions. It implements general purpose
rouer features such as dynamic routing protocols (OSPF and RIP), VPN and DMVPN,
IPSec, VLANs, GRE tunnels, DHCP server client and relay, TFTP, 3G access, CLI and web
access.
1.1 Document scope
This document covers the following models in the GW7304 Series.
GW7304-3G-AC 8 x Ethernet ports, dual SIM, 1 x RS232, 3G wireless WAN connection, Internal PSU,
AC power input, 2 x antenna SMA connectors
GW7304-3G-DC 8 x Ethernet ports, dual SIM, 1 x RS232, 3G wireless WAN connection, Internal PSU,
DC power input, 2 x antenna SMA connectors
1.2 Using this documentation
You can configure your router using either the router’s web interface or via the command
line using UCI commands. Each chapter explains first the web interface settings,
followed by how to configure the router using UCI. The web interface screens are shown
along with a path to the screen for example, ‘In the top menu, select Service ->
SNMP.’ followed by a screen grab.
After the screen grab there is an information table that describes each of the screen’s
fields.
1.2.1 Information tables
We use information tables to show the different ways to configure the router using the
router’s web and command line. The left-hand column shows three options:
•Web:refers the command on the router’s web page,
•UCI:shows the specific UCI command, and
•Opt: shows the package option.
The right-hand column shows a description field that describes the feature’s field or
command and shows any options for that feature.
Some features have a drop-down menu and the options are described in a table within
the description column. The default value is shown in a grey cell.
Values for enabling and disabling a feature are varied throughout the web interface, for
example, 1/0; Yes/No; True/False; check/uncheck a radio button. In the table
descriptions, we use 0to denote Disable and 1to denote Enable.

1: Introduction
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 9 of 336
Some configuration sections can be defined more than once. An example of this is the
routing table where multiple routes can exist and all are named ‘route’. For these
sections, the UCI command will have a code value [0] or [x] (where x is the section
number) to identify the section.
Web Field/UCI/Package Option
Description
Web: Metric
UCI: network.@route[0].metric
Opt: metric
Specifies the route metric to use.
Note: these sections can be given a label for identification when using UCI or package
options.
network.@route[0]=route
network.@route[0].metric=0
can be witten as:
network.routename=route
network.routename.metric=0
However the documentation usually assumes that a section label is not configured.
The table below shows fields from a variety of chapters to illustrate the explanations
above.
Web Field/UCI/Package Option
Description
Web: Enable
UCI: cesop.main.enable
Opt: enable
Enables CESoPSN services.
0
Disabled.
1
Enabled.
Web: Syslog Severity
UCI: cesop.main.severity
Opt: log_severity
Selects the severity used for logging events CESoPSN in syslog.
The following levels are available.
0
Emergency
1
Alert
2
Critical
3
Error
4
Warning
5
Notice
6
Informational
7
Debug
Web: Agent Address
UCI: snmpd.agent[0].agentaddress
Opt: agentaddress
Specifies the address(es) and port(s) on which the agent should
listen.
[(udp|tcp):]port[@address][,…]
Table 1: Example of an information table
1.2.2 Definitions
Throughout the document, we use the host name ‘VA_router’ to cover all router models.
UCI commands and package option examples are shown in the following format:
root@VA_router:~# vacmd show current config

1: Introduction
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2017
GW7304 Series User Manual
Issue: 1.9 Page 10 of 336
1.2.3 Diagnostics
Diagnostics are explained at the end of each feature’s chapter.
1.2.4 UCI commands
For detailed information on using UCI commands, read chapters ‘Router File Structure’
and ‘Using Command Line Interface’.