Welotec TK800 User manual

TK800
Version:
v1.0.0.r20037
Date:
29.11.2023

Contents
1 1. Introduction 3
1.1 CopyrightNotice............................................. 3
1.2 Trademarks ............................................... 3
1.3 LegalNotice ............................................... 3
1.4 Technical Support Contact Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.5 Description................................................ 3
1.6 Important Safety Notes: ......................................... 4
1.7 Warning ................................................. 4
1.8 WEEENotice ............................................... 4
2 2. Quick Start 5
2.1 2.1.Packagechecklist.......................................... 5
2.2 2.2. Information and Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.3 2.3.InstallationGuide.......................................... 6
2.4 2.4.InstallingtheSIMCard ....................................... 7
2.5 2.5.AntennasInstallation........................................ 8
2.6 2.6. Installation of the Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
2.7 2.7.CableConnections ......................................... 9
2.8 2.8. Connection of the Serial Interfaces and I/O’s . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
2.9 2.9.StartupoftheRouter ........................................ 9
2.10 ...................................................... 11
2.11 2.10.LEDstatuslamps.......................................... 11
2.12 2.11.FactoryReset............................................ 12
2.13 2.12.Watchdog ............................................. 14
2.14 2.13. Port Mapping / Port Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.15 2.14.SMSFunctions........................................... 20
3 3. WEB Configuration 23
3.1 3.1.Administration ........................................... 24
3.2 3.2.Network............................................... 45
3.3 3.3.Services ............................................... 60
3.4 3.4.LinkBackup............................................. 74
3.5 3.5.Routing ............................................... 86
3.6 3.6.Firewall ............................................... 94
3.7 3.7.VPN ................................................. 104
3.8 3.8.APP ................................................. 122
3.9 ...................................................... 122
3.10 3.9.Industrial .............................................. 124
3.11 3.10.Tools ................................................ 130
3.12 3.11.Wizards............................................... 133
3.13 3.12.CLICommands........................................... 139
4 4. Technical Specifications 146
4.1 DeviceProperties ............................................ 146
4.2 EnvironmentalConditions ....................................... 146
4.3 RadioFrequenciesLTEEurope ..................................... 147
4.4 Radio Frequencies UMTS Europe . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
4.5 RadioFrequenciesGSMEurope..................................... 147
4.6 RadioFrequenciesLTEAsia ....................................... 148
4.7 RadioFrequenciesUMTSAsia...................................... 148
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 1

4.8 RadioFrequenciesGSMAsia ...................................... 148
4.9 RadioFrequenciesLTEUSA ....................................... 149
4.10 RadioFrequenciesUMTSUSA...................................... 149
4.11 RadioFrequenciesGSMUSA ...................................... 149
4.12 Radio Frequencies LTE for Additional Countries Worldwide . . . . . . . . . . . . . . . . . . . . . . 150
4.13 Radio Frequencies UMTS for Additional Countries Worldwide . . . . . . . . . . . . . . . . . . . . 150
4.14 Radio Frequencies GSM for Additional Countries Worldwide . . . . . . . . . . . . . . . . . . . . . 150
4.15 RadioFrequenciesWLAN ........................................ 151
5 5. Declaration of Conformity 152
5.1 CEDeclaration.............................................. 153
5.2 FCC PART 15 VERIFICATION STATEMENT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
5.3 ICED‑003 ISSUE 7 VERIFICATION STATEMENT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
6 TK800‑Series ‑ FAQ: IPsec 155
6.1 Preface.................................................. 155
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 2

1 1. Introduction
1.1 Copyright Notice
Copyright © 2019 Welotec GmbH
All rights reserved.
Duplication without authorization is not permitted.
1.2 Trademarks
Welotec is a registered trademark of Welotec GmbH. Other trademarks mentioned in this manual are the property
of their respective companies.
1.3 Legal Notice
The information in this document is subject to change without notice and is not a commitment by Welotec GmbH.
It is possible that this user manual contains technical or typographical errors. Corrections are made regularly with‑
out being pointed out in new versions.
1.4 Technical Support Contact Information
Welotec GmbH
Zum Hagenbach 7
48366 Laer
Tel.: [phone]
Fax.: [phone]
Email: [e-mail]
1.5 Description
The TK800 series industrial routers provide stable connectivity between remote devices and customer sites over
2G/3G/4G networks. They can operate in a voltage range of 12‑48V DC and have a temperature range of ‑25°C to
70°C with a relative humidity of 95%, as well as adhering to numerous EMC standards, ensuring high stability and
reliability under severe industrial conditions. The TK800 can be used on the workstation or mounted on DIN rails.
TK800 series products support VPN (IPSec/L2TP/GRE/OpenVPN), which ensures a secure connection between re‑
mote devices and customer sites.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 3

1.6 Important Safety Notes:
This product is not suitable for the following areas of application
•Areas where radio applications (such as cell phones) are not allowed
•Hospitals and other places where the use of cell phones is not allowed
•Gas stations, fuel depots and places where chemicals are stored
•Chemical plants or other places with explosion hazard
•Metal surfaces that can weaken the radio signal level
1.7 Warning
This is a Class A product. In a domestic environment its use may cause radio interference in which case the user
may be required to take adequate measures.
1.8 WEEE Notice
The European Directive on Waste Electrical and Electronic Equipment (WEEE), which became eective on February
13, 2003, has led to major changes regarding the reuse and recycling of electrical equipment.
The main objective of this directive is to prevent waste from electrical and electronic equipment and to promote
reuse, recycling and other forms of recovery. The WEEE logo on the product or packaging indicates that the product
must not be disposed of with other household waste. You are responsible for disposing of all discarded electrical
and electronic equipment at appropriate collection points. Separate collection and sensible recycling of your elec‑
tronic waste helps to use natural resources more sparingly. In addition, proper recycling of waste electrical and
electronic equipment ensures human health and environmental protection.
For more information on disposal, recycling, and collection points for waste electrical and electronic equipment,
contact your local municipal authority, waste disposal companies, the distributor, or the manufacturer of the
equipment.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 4

2 2. Quick Start
Guide to installation and comissioning of the TK800 series. Please ensure that all package contents are present
upon delivery. If you need a SIM card, contact your local network operator.
2.1 2.1. Package checklist
Each TK800 is supplied in a box with standard accessories. Optional accessories can also be ordered. Check the
contents of the box. If something is missing, contact Welotec.
2.1.1 2.1.1. Components Router
Product Amount Description
TK800 1 TK800 series industrial router
Terminal block 1 Terminal block, 2‑pin
Terminals Serial and I/O 1 Terminal block, 9‑pin (EX0 / EXW variants only)
2.1.2 2.1.2. Components Set
Product Amount Description
TK800 1 TK800 series industrial router
Terminal block 1 Terminal block, 2‑pin
Network cable 1 1,5 m
Antenna 2 (4) 3G/4G Antenna Wi‑fi Antenna (EXW variant only)
Power supply unit 1 230 V AC to 12 V DC
Terminals Serial and I/O 1 Terminal block, 9‑pin (EX0 / EXW variants only)
2.2 2.2. Information and Control Panel
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 5

2.2.1 2.2.1. Control Panel
2.2.2 2.2.2. Dimension Drawings
2.3 2.3. Installation Guide
2.3.1 2.3.1. Preparations
Prepare the power supply (12 ‑ 48 V DC). Make sure that the device can operate under the specified environmental
conditions (working temperature range ‑25 – +70 °C, humidity: 5 – 95 % relative humidity). The device should
not be exposed to direct sunlight and should be installed away from heat sources and environments with strong
electromagnetic interference. The router can be mounted on a DIN rail (top‑hat rail) or used at a workstation.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 6

2.3.2 2.3.2. Mounting the Device
DIN rail:
Select a position with suicient space on the DIN rail. Then place the upper part of the DIN rail mount on the DIN
rail. Subsequently, press the lower side of the DIN rail mount down until the device is locked in place. This picture
serves as an illustration:
For demounting press the device from top to bottom and then pull the lower side of the device from the DIN rail
(see figure).
2.4 2.4. Installing the SIM Card
The TK800 supports dual SIM. To insert the cards, press the yellow “Eject” button with a small screwdriver on the
top of the device, for example. The respective SIM card slot is pushed out. If the TK800 is not operated in dual SIM
mode, use the SIM card slot “SIM1”.
Then insert the SIM card. The SIM card slot is not hot‑pluggable. The router must be restarted aer inserting the
SIM card.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 7

2.5 2.5. Antennas Installation
Plug the antennas onto the SMA connectors and turn the external attachment on the antenna cable until the con‑
nection is tight.
For optimal performance, place the antennas at least 20 cm apart.
2.6 2.6. Installation of the Power Supply
Remove the terminal block from the top of the router. Loosen the corresponding screws on the terminal block and
route the wires to the corresponding terminals. The terminals are marked accordingly on the top of the router.
Tighten the screws and then reinsert the connector block into the router.
To ground the device, use the grounding screw on the device.
To prevent interference due to electromagnetic influence, the housing of the router must be grounded via the
grounding screw.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 8

2.7 2.7. Cable Connections
Connect the router to your PC via a network cable (RJ45). We recommend port FE 0/2 for all TK8x2 models and port
FE 1/4 for all TK8x5 models.
2.8 2.8. Connection of the Serial Interfaces and
I/O’s
For the connection of the serial interfaces and the I/O’s you will find a terminal block on the front of the device. The
individual contacts for this are labeled on the front of the device. Connect the lines according to these labels. The
“IN” contact here represents the digital input, while the output is labeled “Relay”. “COM” represents the ground.
This is a potential‑free contact, i.e. what you put in at the IN contact comes out again at the relay contact, provided
the contact is closed. Switching can be done via SMS and via the web interface. At 230 VAC the contact can be
loaded with 2 Ampere. During installation, please remove the connection block from the device and connect the
individual wires to the corresponding terminals. Then plug the connection block back onto the device.
This chapter describes only routers in the versions with serial interfaces and I/Os TK8XXX‑EX.
2.9 2.9. Startup of the Router
2.9.1 2.9.1. Automatic Configuration (DHCP)
Configure the PC so that it works as a DHCP client (obtain IP address automatically). Connect the PC with a network
cable to the interface FE0/2 or FE1/1 ‑ FE1/4 (TK8X5 variants only). The PC is then assigned an IP address, standard
gateway and DNS server by the router. The following figure shows the configuration process via DHCP on a PC with
the Windows 10 operating system. The settings can be accessed via the Network and Sharing Center in Windows
10.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 9

Aer configuring the IP address of the PC and connecting to the router, open a web browser.
Then enter “http://192.168.2.1” in the address line of your browser (e.g. Google Chrome). Aerconfirming with the
“Enter” key, a pop‑up appears as the login page of the router. Enter the username (default: “adm”) and password
(default: “123456”) here and confirm with “Enter”. Now you will be redirected to the configuration web page. Now
configure the router according to your requirements.
To check if you are connected to the Internet, select Network > Cellular > Status from the navigation panel. Here
you can see the data of the cellular unit in the router. Alternatively, simply open a web page in your browser.
IP: 192.168.2.1
Username: adm
Password: 123456
2.9.2 2.9.2. Manual Configuration
Configure your PC so that it is in the same subnet as the router (192.168.2.1). The subnet mask must be
255.255.255.0. The following image shows the process of configuring the IP address on a PC with the Windows
10 operating system.
Aer configuring the IP address of the PC and connecting to the router, open a web browser.
Then enter “http://192.168.2.1” in the address line of your browser. Aer confirming with the “Enter” key, a pop‑up
appears as the login page of the router. Enter the user name (default: “adm”) and the password (default: “123456”)
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 10

and confirm with “Enter”. Now you will be redirected to the configuration web page. Now configure the router
according to your requirements.
To check if you are connected to the Internet, select Network > Cellular > Status from the navigation panel. Here
you can see the data of the cellular unit in the router. Alternatively, simply open a web page in your browser.
IP: 192.168.2.1
Username: adm
Password: 123456
2.10
2.11 2.10. LED status lamps
2.11.1 Symbol explanation
= LED leuchtet = LED leuchtet nicht = LED blinkt
There are two SIM card LEDs. When the router boots up, the SIM card LED for SIM card 1 is lit. In all other cases, the
SIM card reception indicator is lit:
Dial‑in: Dial‑in successful:
STATUS WARN STATUS WARN
SIM
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 11

VPN
PWR ERR PWR ERR
SIM
VPN
MODEM MODEM
2.11.2 Signal strength
Signal: 1‑9
(poor signal, the router can not work correctly, please check the antenna connection and the local signal strength
of the mobile network).
Signal: 10‑19
(Router operates normally)
Signal: 20‑31
(Perfect signal level)
2.12 2.11. Factory Reset
2.12.1 2.11.1. Hardware Method
Symbol explanation
= LED lights up = LED does not light up = LED flashes
1) Press and hold the RESET button while turning on the TK800:
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 12

2) As soon as the ERROR LED lights up (approx. 10 seconds aer switching on), release the RESET key:
3) Aer a few seconds, the ERROR LED no longer lights up. Now press the RESET key again until the error light
flashes and then release the key:
4) Now the ERROR and STATUS LED lights will flash, indicating that the factory reset was successful.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 13

Factory default settings
IP: 192.168.2.1
Netmask: 255.255.255.0
Username: adm
Password: 123456
Serial parameter: 115200‑N‑8‑1
2.12.2 2.11.2. Web Method
1) Go to the Config Management submenu via the Administration menu:
2) Click Restore Default Configuration to reset the TK800 to its default settings.
Aer a few seconds you will receive the following message. The router has now been successfully reset.
3) Aer clicking reboot the router reboots to factory defaults.
2.13 2.12. Watchdog
2.13.1 2.12.1. Self Monitoring of the Router
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 14

The watchdog monitors the router with regard to the Internet connection. The router itself checks whether there
is an Internet connection as required. For this purpose, it sends ICMP packets to an individually defined server
(ICMP detection server). If this query fails, the router first automatically restarts the dial‑up, then the modem, and
if necessary the entire system. The watchdog ensures a reliable Internet connection in the mobile network. This
ensures that the router is almost always available.
1) Go via the menu item Network to the submenu item Cellular.
2) Select the Cellular tab
3) Now enter a suitable ICMP Detection Server in the corresponding field and change the ICMP Detection Interval.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 15

Note: The registered ICMP detection server should have a very high accessibility. A server from Google is no longer
suitable for this, since the ICMP requests are blocked there.
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 16

2.14 2.13. Port Mapping / Port Forwarding
2.14.1 2.13.1. Access to Connected Devices via the Internet
To access devices connected to the Welotec router via the Internet, port mapping or port forwarding can be used.
This is configured in the TK800 router via NAT rules.
Port mapping requires a public IP address in the mobile network (Public IP). If necessary, ask your mobile network
provider or service provider about this!
The instructions refer to all TK800 routers with firmware 1.0.0.r10406 or higher.
The following image illustrates the application example (http uses TCP port 80 by default):
Private network (LAN) Public network (WAN)
Package source: 1.2.3.4.8080 Destination:
192.168.2.2.80
Package source: 1.2.3.5.8080 Destination:
1.2.3.4.8080
Explanation:
Welotec Router
LAN IP address: 192.168.2.1
Subnet mask: 255.255.255.0
IP camera
LAN IP‑Adresse: 192.168.2.2
Subnet mask: 255.255.255.0
Standard Gateway 192.168.1.1
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 17

The IP camera has an interface that can be reached with a browser via http://192.168.2.2 (note: http protocol has
TCP port 80).
2.14.2 2.13.2. Port Mapping Guide
1) Go to the submenu item NAT via the menu item Firewall
2) Now add a new NAT rule with Add
3) Enter the data as in the example
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 18

4) Aerwards the NAT rule appears in the Network Address Translation (NAT) Rules table as shown below
The rule is now active. The corresponding services restart and the port mapping is fully set up.
For a working port mapping it is helpful to check the settings of the connected devices in advance. The following
checklist is helpful (according to the example above):
•Does the camera have the IP address 192.168.2.12?
•Does it respond at “ping 192.168.2.12”?
•Is the web interface of the camera accessible via http://192.168.2.12?
•Is the Welotec router entered as the default gateway for the camera (192.168.2.1)?
Welotec GmbH
Zum Hagenbach 7
48366 Laer
www.welotec.com
[e-mail]
[phone] Page 19