virtual access GW2024P-2 User manual

GW2020 Series User Manual
Issue:
1.4
Date:
12 May 2016

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 2 of 309
1Introduction .................................................................................................8
1.1 Document scope .......................................................................................8
1.2 Using this documentation...........................................................................9
2GW2020 hardware specification .................................................................11
2.2 Hardware features .................................................................................. 11
2.3 Serial ports ............................................................................................ 11
2.4 GSM and LTE technology.......................................................................... 14
2.5 Power supply.......................................................................................... 14
2.6 Router dimensions .................................................................................. 15
2.7 Compliance ............................................................................................ 15
2.8 Operating temperature range ................................................................... 16
2.9 Antenna................................................................................................. 16
2.10 Components........................................................................................... 16
2.11 Inserting a SIM card................................................................................ 18
2.12 Connecting the SIM lock .......................................................................... 18
2.13 Connecting the antenna........................................................................... 18
2.14 Powering up the GW2020 Series router...................................................... 18
2.15 Powering up the GW2024P Series router.................................................... 18
2.16 Reset button .......................................................................................... 19
3GW2020 Series LED behaviour....................................................................20
3.1 Main LED behaviour................................................................................. 20
3.2 GW2020 Ethernet port LED behaviour ....................................................... 21
4GW2024P Series LED behaviour..................................................................22
4.1 Main LED behaviour................................................................................. 22
4.2 Ethernet LED behaviour ........................................................................... 23
5GW2028 Series LED behaviour....................................................................24
5.1 Main LED behaviour................................................................................. 24
5.2 Ethernet port LED behaviour .................................................................... 25
6Factory configuration extraction from SIM card .........................................26
7Accessing the router...................................................................................27
7.1 Configuration packages used.................................................................... 27
7.2 Accessing the router over Ethernet using the web interface.......................... 27
7.3 Accessing the router over Ethernet using an SSH client ............................... 28
7.4 Accessing the router over Ethernet using a Telnet client .............................. 29
7.5 Configuring the password......................................................................... 29
7.6 Configuring the password using the web interface....................................... 29
7.7 Configuring the password using UCI.......................................................... 30
7.8 Configuring the password using package options......................................... 30
7.9 Accessing the device using RADIUS authentication...................................... 31
7.10 Accessing the device using TACACS+ authentication ................................... 32

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 3 of 309
7.11 SSH ...................................................................................................... 36
7.12 Package dropbear using UCI..................................................................... 37
7.13 Certs and private keys............................................................................. 38
7.14 Configuring a router’s web server ............................................................. 38
7.15 Basic authentication (httpd conf) .............................................................. 43
7.16 Securing uhttpd...................................................................................... 44
8Configuring Dynamic DNS...........................................................................45
8.1 Overview ............................................................................................... 45
8.2 Configuration packages used.................................................................... 45
8.3 Configuring Dynamic DNS using the web interface ...................................... 45
8.4 Dynamic DNS using UCI........................................................................... 47
9System settings..........................................................................................49
9.1 Configuration package used ..................................................................... 49
9.2 Configuring system properties .................................................................. 49
9.3 System settings using UCI ....................................................................... 53
9.4 System diagnostics ................................................................................. 54
10 Upgrading router firmware.........................................................................56
10.1 Upgrading firmware using the web interface............................................... 56
10.2 Upgrading firmware using CLI .................................................................. 57
11 Using the Command Line Interface.............................................................59
11.1 Overview of some common commands ...................................................... 59
11.2 Using Unified Configuration Interface (UCI)................................................ 62
11.3 Configuration files................................................................................... 67
11.4 Configuration file syntax .......................................................................... 67
12 Management configuration settings ...........................................................69
12.1 Activator................................................................................................ 69
12.2 Monitor.................................................................................................. 69
12.3 Configuration packages used.................................................................... 69
12.4 Autoload: boot up activation..................................................................... 69
12.5 Autoload packages.................................................................................. 70
12.6 Autoload using UCI ................................................................................. 72
12.7 HTTP Client: configuring activation using the web interface.......................... 73
12.8 Httpclient: Activator configuration using UCI .............................................. 75
12.9 User management using UCI.................................................................... 76
12.10 Configuring the management user password using UCI............................. 77
12.11 Configuring management user password using package options................. 78
12.12 User management using UCI................................................................. 78
12.13 Configuring user access to specific web pages ......................................... 79
13 Configuring an Ethernet interface...............................................................80
13.1 Configuration packages used.................................................................... 80

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 4 of 309
13.2 Configuring an Ethernet interface using the web interface............................ 80
13.3 Interface configuration using UCI.............................................................. 89
13.4 Configuring port maps............................................................................. 92
13.5 Port map packages.................................................................................. 92
13.6 Interface diagnostics ............................................................................... 94
14 DHCP server and DNS configuration (Dnsmasq).........................................96
14.1 Configuration package used ..................................................................... 96
14.2 Configuring DHCP and DNS using the web interface .................................... 96
14.3 Configuring DHCP and DNS using UCI...................................................... 103
14.4 Configuring DHCP pools using UCI........................................................... 105
14.5 Configuring static leases using UCI.......................................................... 106
15 Configuring VLAN .....................................................................................108
15.1 Maximum number of VLANs supported .................................................... 108
15.2 Configuration package used ................................................................... 108
15.3 Configuring VLAN using the web interface ................................................ 108
15.4 Viewing VLAN interface settings.............................................................. 111
15.5 Configuring VLAN using the UCI interface................................................. 111
16 QoS: VLAN 802.1Q PCP tagging ................................................................112
16.1 Configuring VLAN PCP tagging................................................................ 112
17 QoS: type of service..................................................................................115
17.1 QoS configuration overview.................................................................... 115
17.2 Configuration packages used.................................................................. 115
17.3 Configuring QoS using the web interface.................................................. 115
17.4 Configuring QoS using UCI..................................................................... 117
17.5 Example QoS configurations................................................................... 121
18 Configuring static routes ..........................................................................122
18.1 Configuration package used ................................................................... 122
18.2 Configuring static routes using the web interface ...................................... 122
18.3 Configuring IPv6 routes using the web interface ....................................... 123
18.4 Configuring routes using command line ................................................... 124
18.5 IPv4 routes using UCI............................................................................ 124
18.6 IPv4 routes using package options .......................................................... 125
18.7 IPv6 routes using UCI............................................................................ 125
18.8 IPv6 routes using packages options......................................................... 125
18.9 Static routes diagnostics........................................................................ 126
19 Configuring BGP (Border Gateway Protocol) ............................................127
19.1 Configuration package used ................................................................... 127
19.2 Configuring BGP using the web interface.................................................. 127
19.3 Configuring BGP using UCI..................................................................... 130
19.4 Configuring BGP using packages options.................................................. 131

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 5 of 309
19.5 View routes statistics............................................................................. 132
20 Configuring a mobile connection ..............................................................133
20.1 Configuration package used ................................................................... 133
20.2 Configuring a mobile connection using the web interface............................ 133
20.3 Configuring a mobile connection using UCI............................................... 138
20.4 Mobile status using UCI ......................................................................... 138
21 Configuring mobile manager.....................................................................140
21.1 Configuration package used ................................................................... 140
21.2 Configuring mobile manager using the web interface................................. 140
21.3 Configuring mobile manager using UCI.................................................... 141
21.4 Configuring a roaming interface template via the web interface .................. 143
21.5 Monitoring SMS .................................................................................... 143
21.6 Sending SMS from the router ................................................................. 143
21.7 Sending SMS to the router ..................................................................... 143
22 Configuring Multi-WAN .............................................................................144
22.1 Configuration package used ................................................................... 144
22.2 Configuring Multi-WAN using the web interface......................................... 144
22.3 Multi-WAN traffic rules........................................................................... 149
22.4 Configuring Multi-WAN using UCI............................................................ 149
22.5 Multi-WAN diagnostics........................................................................... 150
23 Automatic operator selection....................................................................153
23.1 Configuration package used ................................................................... 153
23.2 Configuring automatic operator selection via the web interface................... 153
23.3 Configuring via UCI............................................................................... 172
23.4 Configuring No PMP + roaming using UCI................................................. 176
23.5 Automatic operator selection diagnostics via the web interface ................... 179
23.6 Automatic operator selection diagnostics via UCI ...................................... 179
24 Configuring IPSec.....................................................................................182
24.1 Configuration package used ................................................................... 182
24.2 Configuring IPSec using the web interface................................................ 182
24.3Configuring IPSec using UCI................................................................... 189
24.4 Configuring an IPSec template for DMVPN via the web interface ................. 193
24.5 Configuring an IPSec template to use with DMVPN.................................... 200
24.6 IPSec diagnostics using the web interface ................................................ 202
24.7 IPSec diagnostics using UCI ................................................................... 202
25 Configuring a GRE interface......................................................................203
25.1 Configuration packages used.................................................................. 203
25.2 Creating a GRE connection using the web interface ................................... 203
25.3 GRE configuration using command line .................................................... 207
25.4 GRE configuration using UCI................................................................... 207

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 6 of 309
25.5 GRE configuration using package options................................................. 207
25.6 GRE diagnostics.................................................................................... 208
26 Dynamic Multipoint Virtual Private Network (DMVPN) .............................210
26.1 Prerequisites for configuring DMVPN........................................................ 210
26.2 Advantages of using DMVPN................................................................... 210
26.3 DMVPN scenarios .................................................................................. 211
26.4 Configuration packages used.................................................................. 213
26.5 Configuring DMVPN using the web interface ............................................. 213
26.6 DMVPN diagnostics................................................................................ 215
27 Configuring firewall..................................................................................218
27.1 Configuration package used ................................................................... 218
27.2 Configuring firewall using the web interface ............................................. 218
27.3 Configuring firewall using UCI................................................................. 230
27.4 IPv6 notes ........................................................................................... 232
27.5 Implications of DROP vs. REJECT ............................................................ 232
27.6 Connection tracking .............................................................................. 233
27.7 Firewall examples ................................................................................. 234
28 Configuring SNMP.....................................................................................241
28.1 Configuration package used ................................................................... 241
28.2 Configuring SMNP using the web interface................................................ 241
28.3 Configuring SNMP using command line .................................................... 246
29 Configuring VRRP .....................................................................................253
29.1 Overview ............................................................................................. 253
29.2 Configuration package used ................................................................... 253
29.3 Configuring VRRP using the web interface................................................ 253
29.4 Configuring VRRP using UCI ................................................................... 255
30 Configuring Multicasting using PIM and IGMP interfaces..........................257
30.1 Overview ............................................................................................. 257
30.2 Configuration package used ................................................................... 257
30.3 Configuring PIM and IGMP using the web interface.................................... 257
30.4 Configuring PIM and IGMP using UCI....................................................... 259
31 Configuring Terminal Server.....................................................................261
31.1 Overview ............................................................................................. 261
31.2 Configuration packages used.................................................................. 261
31.3 Configuring Terminal Server using the web interface ................................. 261
31.4 Terminal Server using UCI ..................................................................... 272
31.5 Terminal Server using package options.................................................... 272
31.6 Terminal Server diagnostics ................................................................... 272
32 Configuring VRF-lite .................................................................................275
32.1 Configuration package used ................................................................... 275

Table of Contents
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 7 of 309
32.2 VRF (Virtual Routing and Forwarding) overview ........................................ 275
32.3 Configuring VRF using UCI ..................................................................... 275
33 Event system ............................................................................................277
33.1 Configuration package used ................................................................... 277
33.2 Implementation of the event system ....................................................... 277
33.3 Supported events.................................................................................. 277
33.4 Supported targets................................................................................. 278
33.5 Supported connection testers ................................................................. 278
33.6 Configuring the event system using the web interface ............................... 278
33.7 Configuring the event system using UCI .................................................. 278
33.8 Event system diagnostics....................................................................... 288
34 Configuring SLA reporting on Monitor.......................................................295
34.1 Introduction ......................................................................................... 295
34.2 Configuring SLA reporting ...................................................................... 295
34.3 Configuring router upload protocol .......................................................... 296
34.4 Viewing graphs..................................................................................... 296
34.5 Generating a report............................................................................... 299
34.6 Reporting device status to Monitor using UCI............................................ 303
35 Configuring SLA for a router.....................................................................305
35.1 Configuration package used ................................................................... 305
35.2 Configuring SLA for a router using the web interface ................................. 305
35.3 Configuring SLA for a router using the UCI interface.................................. 307

1: Introduction
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 8 of 309
1Introduction
This user manual describes the features and how to configure a Virtual Access GW2020
Series router.
The Virtual Access GW2020 Series routers are arrange of versatile 3G/4G LTE/CDMA450
wireless routers suitable for a variety of business and industrial deployments. The
compact and rugged structure makes a suitable product for deployments in M2M
applications such as CCTV, ATM, telemetry, SCADA, retail (POS), digital signage, and
intelligent traffic systems. The product line supports the following radio access
technologies: HSPA+, HSPA, UMTS, EDGE, CDMA450, GPRS and GSM.
3G is the third generation of mobile phone standards and technology. It is based on the
International Telecommunication Union (ITU) family of standards under the International
Mobile Telecommunications programme, IMT-2000.
4G is a mobile communications standard intended to replace 3G, allowing wireless
internet access at a much higher speed.
3G and 4G technologies enable network operators to offer users a wider range of more
advanced services, while achieving greater network capacity through improved spectral
efficiency. Services include wide-area wireless voice telephony, video calls, and
broadband wireless data, all in a mobile environment.
1.1 Document scope
This document covers the following models in the GW2020 Series.
GW2021: 1 x Ethernet and 3G, 4G/LTE
GW2022: 2 x Ethernet and 3G, 4G/LTE
GW2023: 2 x Ethernet, 3G, 4G/LTE and dual RS232
GW2024:
2 x Ethernet, 3G, 4G/LTE, single RS232 and single RS485
GW2024P-2:
2 x Ethernet, 3G, 4G/LTE, single RS232 and single RS485, plastic case
GW2024P-4: 4 x Ethernet, 3G, 4G/LTE, single RS232 and single RS485, plastic case
GW2024P-8: 8 x Ethernet, 3G, 4G/LTE, single RS232 and single RS485, plastic case
GW2024P-2: 2 x Ethernet, 3G, 4G/LTE, single RS232 and single RS485, plastic case
GW2027: 2 x Ethernet, 3G, 4G/LTE, CDMA450, single RS232 and single RS485, Digital I/O
Note: the second input is either RS232 or RS485 and is specified at time of ordering and
fixed in manufacturing.
GW2028: 4 x Ethernet, 3G, 4G/LTE, CDMA450,single RS232 and single RS485, Digital I/O
Note: the second input is either RS232 or RS485 and is specified at time of ordering and
fixed in manufacturing.
The above hardware models use the GIG branch of firmware. This document was
released with firmware version GIG-15.00.50. The screenshots and commands may
vary slightly if you are using a different firmware version.

1: Introduction
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 9 of 309
1.2 Using this documentation
You can configure your router using either the router’s web interface or via the command
line using UCI commands. Each chapter explains first the web interface settings,
followed by how to configure the router using UCI. The web interface screens are shown
along with a path to the screen for example, ‘In the top menu, select Service ->
SNMP.’ followed by a screen grab.
After the screen grab there is an information table that describes each of the screen’s
fields.
1.2.1 Information tables
We use information tables to show the different ways to configure the router using the
router’s web and command line. The left-hand column shows three options:
•Web:refers the command on the router’s web page,
•UCI:shows the specific UCI command, and
•Opt: shows the package option.
The right-hand column shows a description field that describes the feature’s field or
command and shows any options for that feature.
Some features have a drop-down menu and the options are described in a table within
the description column. The default value is shown in a grey cell.
Values for enabling and disabling a feature are varied throughout the web interface, for
example, 1/0; Yes/No; True/False; check/uncheck a radio button. In the table
descriptions, we use 0to denote Disable and 1to denote Enable.
Some configuration sections can be defined more than once. An example of this is the
routing table where multiple routes can exist and all are named ‘route’. For these
sections, the UCI command will have a code value [0] or [x] (where x is the section
number) to identify the section.
Web Field/UCI/Package Option
Description
Web: Metric
UCI: network.@route[0].metric
Opt: metric
Specifies the route metric to use.
Note: these sections can be given a label for identification when using UCI or package
options.
network.@route[0]=route
network.@route[0].metric=0
can be witten as:
network.routename=route
network.routename.metric=0
However the documentation usually assumes that a section label is not configured.

1: Introduction
_______________________________________________________________________________________________________
_______________________________________________________________________________________________________
© Virtual Access 2016
GW2020 Series User Manual
Issue: 1.4 Page 10 of 309
The table below shows fields from a variety of chapters to illustrate the explanations
above.
Web Field/UCI/Package Option
Description
Web: Enable
UCI: cesop.main.enable
Opt: enable
Enables CESoPSN services.
0
Disabled.
1
Enabled.
Web: Syslog Severity
UCI: cesop.main.severity
Opt: log_severity
Selects the severity used for logging events CESoPSN in syslog.
The following levels are available.
0
Emergency
1
Alert
2
Critical
3
Error
4
Warning
5
Notice
6
Informational
7
Debug
Web: Agent Address
UCI: snmpd.agent[0].agentaddress
Opt: agentaddress
Specifies the address(es) and port(s) on which the agent should
listen.
[(udp|tcp):]port[@address][,…]
Table 1: Example of an information table
1.2.2 Definitions
Throughout the document, we use the host name ‘VA_router’ to cover all router models.
UCI commands and package option examples are shown in the following format:
root@VA_router:~# vacmd show current config
1.2.3 Diagnostics
Diagnostics are explained at the end of each feature’s chapter.
1.2.4 UCI commands
For detailed information on using UCI commands, read chapters ‘Router File Structure’ and ‘Using
Command Line Interface’.