WM Systems M2M Industrial Router 2 SECURE User manual

User Manual
M2M Industrial Router 2 SECURE
___________________________________________________
Rev: 1.00
2023-02-09

Document specifications
This document was completed for the M2M Industrial Router 2 SECURE® device and
contains the hardware specification, with the most important information and
software settings of the device.
Document category:
User Manual
Document subject:
M2M Industrial Router 2 SECURE
®
Author:
WM Systems LLc
Document version No.:
REV 1.00
Number of pages:
27
Hardware Identifier No.:
BE0109D_ROUTER_9X60_7070_AXP
Firmware version:
202302061 or later
OpenWRT Linux Kernel version:
5.10.154
Document status:
Final
Last modified:
9 February, 2023
Approval date:
9 February, 2023

Table of contents
CHAPTER 1. Product information .......................................................................................... 5
CHAPTER 2. Technical data.................................................................................................... 6
2.1 Power voltage / Current ratings .............................................................................................................................................. 6
2.2 Cellular modules (order options) .......................................................................................................................................... 6
CHAPTER 3. Device exterior design and appearance ....................................................... 8
3.1 Safety cautions .................................................................................................................................................................................... 9
3.2 Mounting, fastening ....................................................................................................................................................................... 11
3.3 Antenna................................................................................................................................................................................................... 12
3.4 Further accessories......................................................................................................................................................................... 12
CHAPTER 4. Software system................................................................................................ 14
4.1 Operation system.............................................................................................................................................................................. 14
4.2 LAN block feature ............................................................................................................................................................................ 14
4.3 Device Manager platform........................................................................................................................................................... 14
4.4 TLS protocol communication.................................................................................................................................................. 15
4.5 Accessing the router (via SSH connection) .................................................................................................................... 15
CHAPTER 5. Starting the device ........................................................................................... 16
5.1 Connecting the router ................................................................................................................................................................... 16
5.2 First start................................................................................................................................................................................................. 17
5.3 Access via SSH connection ........................................................................................................................................................ 18
CHAPTER 6. Important notes................................................................................................. 20
CHAPTER 7. Troubleshooting ................................................................................................ 21
CHAPTER 8. Support availability........................................................................................... 26
8.1 Contact the support line .............................................................................................................................................................. 26
8.2 Product support................................................................................................................................................................................ 26
CHAPTER 9. Legal notice........................................................................................................ 27

Chapter 1. Product information
This secure and robust device features an Ethernet port, cellular module, and
compact industrial design. It is currently available with LTE Cat.1 or LTE Cat.M/Cat.NB
modules that provide enhanced coverage.
This product boasts special firmware that offers additional security features as
required by the ENCS, the European Network for Cyber Security.
To meet ENCS standards, the device has been completely redesigned to enhance
security. As a result, it has successfully passed all tests and offers improved processing
speed with an eMMC chip for secure boot and encrypted data storage.
This device is designed for use in various smart grid and industrial M2M / IoT
applications, including Automated Metering Infrastructure (AMI) and industrial
automation projects. It is a preferred choice for securing critical smart grid
infrastructure for some of the largest European utilities. The device offers all features
required for the world of smart metering, smart grid, and industrial automation.
Ports / Interfaces
The device offers the following ports: Ethernet, and micro-USB port (for configuration).
System Software
The operating system is open-source OpenWRT®and the device is manageable
through our state-of-the-art Device Manager®platform via TLS-secured
communication. The solution enables clients to perform OTA firmware updates and
mass deployments quickly and efficiently.
Secure storage / Secure Boot
The device has a built-in eMMC chip (4 or 8 GByte storage –by order option) for Secure
Boot process / encrypted storage of all customer data. It uses an OTP-enabled
memory chip.
The device is secured with Secure Boot system and secure storage mechanism. It uses
an SHA-256 encrypted file system (with RSA and SHA-256 assigments).
The device operates with multiple encrypted partitions and file systems, which
ensures the security of the device.

Security features
The device uses Secure Boot system with Secure Key Storage features (on encrypted
eMMC memory chip).
The router continuously monitoring the operation parameters (QoS, module
operation, vital signals, etc.).
It has detection of network interface connections / disconnections with an alarm
event sending to the Device Manager®management platform.
The software of the router applies unique passwords, firewall and it has support for
IPSec tunneling.
Management
Remote management of routers using Device Manager®software via a secure TLS v1.2
connection (by option) during the communication with the router.
The device has a secure Device Manager®connection (TLS protocol connection
between the router and the remote management software.)
The router allows clients to do OTA firmware updates and mass deployments
significantly faster via Device Manager®platform.
Last GASP –notification of power outage
The device has built-in supercapacitor parts with LastGASP feature (in case of a power
outage, the router is operating further, while an immediate notification will be sent
from the event to the Device Manager®software).

Chapter 2. Technical data
2.1 Power voltage / Current ratings
•Power Voltage / Ratings: • 12V DC, 1A power supply (9-32VDC) –powered via
Microfit 4-pins power input connection (from external 12V DC power adapter)
•Current / Consumption: Average: 200mA - 260mA, 12VDC (according to
module version) / 2.4W –3.1W, 12VDC
For the connection it is recommended to use the DC microfit connection power
adapter or a 12V DC supply according to the pinout which can be seen on the next
figure.
2.2 Cellular modules (order options)
•LTE Cat.1 / 450 MHz module with 2G „fallback”
Module:
oSIMCOM A7676E
Bands:
oLTE Cat.1 / 450MHz: B1/B3/B8/B20/B31/B72
oGSM/EGPRS: 900/1800MHz
•LTE Cat.M / Cat.NB / 450 MHz module with 2G „fallback”
Module:
oSIMCOM SIM 7070E

Bands:
oLTE Cat.M / 450MHz:
1/B2/B3/B4/B5/B8/B12/B13/B14/B18/B19/B20/B25/B26/B27/B28/
B31/B66/B72/B85
oLTE Cat.NB: B1/B2/B3/B4/B5/B8/B12/B13/B18/B19/B20/B25/B26/B28/B31/
B66/B85
oGSM/EGPRS: 850/900/1800/1900MHz

Chapter 3. Device exterior design and appearance
Industrial secure router, assembled in aluminum casing
with interface connectors / ports
* SIM insertion: push the APN-activated SIM into the SIM tray (2) - the SIM chip surface
must be look to top and the cutted edge of the SIM must be look to the router –then
push the SIM until it will be fixed and closed (you will hear a soft click sound).
1 –POWER (9-32V DC): Microfit 4-pin power connector (for DC power/adapter)
2 –*SIM card slot (2FF)
3 –micro-USB connector (for configuration)
4 –Reset button (hole)
5 –Ethernet (RJ45, 10/100 Mbit)
6 –Antenna connector (SMA-M, 50 Ohm)
7 –3 Operation LEDs
3
1
2
4
5
6
7

Industrial secure router, assembled in aluminum casing,
attachable to 35mm DIN rail(with an adapter)
3.1 Safety cautions
The device must be used and operated according to the user manual provided.
Only a responsible and skilled person with adequate experience and knowledge
in wiring and installing a router device, as instructed by the service team, should
carry out the installation.
It is forbidden for the user to touch or alter the wiring or installation. The device
enclosure should not be opened during operation or when connected to power, and
the device PCB should not be removed or modified. No modification or repair should

be made without the manufacturer's permission, as this will result in the loss of
product warranty.
CAUTION! Only certified experts or the manufacturer are authorized to open the
device enclosure.
The device uses 9-32V DC power supply within the enclosure, and the enclosure
should NOT be opened or the PCB touched.
Router current and consumption
•Power voltage: 9..32 VDC
•Current average: 200mA, 12V DC
•Consumption: 1.9W (during 2G/3G communication), 3.1W (during LTE or
Cat.1 / LTE Cat.M communication)
The IP51 immunity protection will only be effective if the device is used under
normal conditions and with undamaged hardware in the provided enclosure /
chassis.
Any deliberate damage or malfunction of the device will result in the loss of
product warranty.
To ensure safety, the following guidelines should be followed:
■ Keep the chassis area clean and free of dust during and after installation.
■ Wear appropriate clothing to avoid loose clothing getting caught in the chassis.
■ Avoid actions that could cause a hazard to people or equipment.
Safety preucations for Electricity
■ Read all safety warnings before working on equipment powered by electricity.
■ Locate the emergency power-off switch for quick access in case of an electrical
accident.
■ Disconnect all power before installing or removing a chassis, working near power
supplies, or inserting a SIM card.