Xaptum ENF XAP-RW-001 User manual

®
The Internet for Things
Quick Start Guide
ENF™ Router Card
with Wi-Fi
Model: XAP-RW-001

Introduction
Thank you for purchasing the Xaptum®ENF™ Router Card with
Wi-Fi. This Quick Start Guide contains instructions for installing
and conguring this card in an edge gateway or IoT device.
Package Contents
XAP-RW-001 DAA Group Label
Full Height Adapter M2 Phillips Screw
(Qty. 2)
Installation Requirements
• Mini PCIe slot and compatible mounting screw(s)
• U.FL to RP-SMA coaxial pigtail
• RP-SMA external Wi-Fi antenna
• Phillips screwdriver (for full-height adapter option)
1

Host Requirements
• Linux
• USB Ethernet driver
• DHCPv6 client
IMPORTANT: The XAP-RW-001 requires an IPv6 network
stack and a compatible USB Ethernet driver. Most Linux
distributions include both.
Conguration Requirements
• Edge Network Fabric (ENF) account
•enfcliconguration utility
• QR code scanner or phone app
• Wi-Fi access point
IMPORTANT: The XAP-RW-001 requires an Edge Network
Fabric account. Contact your Xaptum sales representative
to create one.
NOTE: The enfcliconguration utility is available online
at downloads.xaptum.com.
TERMS OF USE: It is the professional installer’s responsibility to follow local country
regulations, including operation within legal frequency channels, output power, an-
tenna placment, indoor cabling requirements, and Dynamic Frequency Selection (DFS)
requirements.
2

Hardware Overview
Router Card
Edge Connector
RF Jack
Edge Connector The Mini PCIe edge connector plugs into a
Mini PCIe slot on the host. It provides power and a USB 2.0
connection to the router card.
NOTE: The XAP-RW-001 uses only the power and USB pins
on the connector. The PCIe lines are not required.
RF Jack The U.FL RF jack connects to an external Wi-Fi antenna
via a U.FL to RP-SMA coaxial pigtail.
Approved Antennas
Antennas with the following characteristics may be used with
the XAP-RW-001.
Approved Anntena Characteristics
Type External Dipole
Max Gain
2.4 GHz 2.2 dBi
5 GHz 5 dBi
3

DAA Group Label
QR Code
Group ID
The DAA group label displays details about the group of router
card(s) in this package.
QR Code The QR code contains the group public key used to
cryptograhically authenticate each router card in this package.
When prompted by the enfcli, scan this code to assign the
group to a network.
NOTE: Router cards are assigned to ::/64networks in
groups, eliminating time-consuming and error-prone
conguration of individual cards.
Full Height Adapter
Alignment Tab
Screw Hole
The full height adapter enables installation in a full height Mini
PCIe slot on the host. Its use is optional.
4

Assigning a Network
You must assign the router card(s) in this package to a ::/64ENF network before they can be used.
1. Launch the enfcli, specifying the host and username for
your ENF account. Enter your password when prompted.
$enfcli--hostdemo.xaptum.io--useruser@demoConnectingto'https://demo.xaptum.io'.....EnterPassword:2. Choose a ::/64network, and assign these router cards to it
using the iamadd-group-to-networkcommand. Scan1the
DAA group label QR code when prompted.
enfcli-user@demo>iamadd-group-to-network--set-as-default--network=2607:8f80:8080:1::/64ScanDAAgroupinformation:IMPORTANT: On rst boot, the router card will be assigned
an IPv6 address from this network.
1If you don’t have a barcode scanner, use a smartphone
app to scan the code. Paste the resulting text into the enfcliprompt.
5

Installing the Router Card
If installing in a half height Mini PCIe slot, skip to step 2.
1. Align the top edge of the router card with the full height
adapter alignment tab and attach with the provided Phillips
screws.
2. Insert the router card into the Mini PCIe slot on the host de-
vice, and secure according to the host device’s instructions.
6

3. Connect the antenna pigtail to the U.FL RF jack.
4. Connect an approved external antenna to the RP-SMA con-
nector on the host device.
7

Connecting to Wi-Fi
The router card is precongured to connect to a Wi-Fi network
with the following credentials.
SSID WPA2-PSK
xaprc_defaultpassword123!Once connected, you can change the conguration remotely
using the enfcli.
1. Congure a Wi-Fi access point2with the SSID and passphrase
listed in the preceding table.
IMPORTANT: The Wi-Fi access point must be connected to
the Internet.
2. Power on the host device and wait 30 seconds for the router
card to connect. Check the connection status using the
captiveget-device-statuscommand. Use the serial num-
ber printed on the router card as the device id.
enfcli-user@demo>captiveget-device-status--device-id=XRW04419003028SerialNumber:XRW04419003028WIFI:connected:trueSSID:xaprc_defaultIPv4addresses:[192.168.1.56]The following steps create a new prole and Wi-Fi conguration
for this device. To use an existing prole, skip to step 5.
2If you don’t have an access point, congure a smartphone
hotspot instead.
8

NOTE: Aprole describes the desired conguration for a
router card. Multiple router cards can be easily managed
at once by assigning them to the same prole.
3. Create a new wi cong JSON le and upload it using the
captivecreate-wifi-configurationcommand.
$cat<<EOF>wifi.json{"name":"Demo","networks":[{"name":"Factory","SSID":"ACME-OT","SSID_type":"string","auth":{"type":"psk","passphrase":"pass123"},"IPv4":{"type":"dhcp"}}]}EOFenfcli-user@demo>captivecreate-wifi-configuration--wifi-config-file=wifi.jsonID:1aad6bdd-8b09-49bc-bd43-d5255d543c78Name:DemoNetworks:Name:FactorySSID:ACME-OTauth:pskIPv4:dhcpIPv6:off9

4. Create a new prole using the captivecreate-profilecommand.
enfcli-user@demo>captivecreate-profile--profile-name=Demo--device-mode=secure-host--wifi-id=1aad6bdd-8b09-49bc-bd43-d5255d543c78Name:DemoID:7db6eaae-51e8-49bf-9ab9-1e3315fb8417Mode:secure-hostWifi:ID:1aad6bdd-8b09-49bc-bd43-d5255d543c785. Assign the prole to the router card using the captiveupdate-devicecommand.
enfcli-user@demo>captiveupdate-device--device-id=XRW04419003028--profile-id=7db6eaae-51e8-49bf-9ab9-1e3315fb8417Serial:XRW04419003028Profile:Name:DemoID:7db6eaae-51e8-49bf-9ab9-1e3315fb8417IMPORTANT: An access point with the new Wi-Fi creden-
tials must be available and connected to the Internet.
Otherwise, the router card will be unable to reconnect.
10

6. Conrm that the change was applied using the captiveget-device-statuscommand. The connected Wi-Fi network
should be the new SSID.
enfcli-user@demo>captiveget-device-status--device-id=XRW04419003028SerialNumber:XRW04419003028WIFI:connected:trueSSID:ACME-OTIPv4addresses:[10.50.17.132]7. Turn o the temporary access point with the default creden-
tials.
11

Conguring the Host
The router card appears to the host as a USB ethernet device.
After powering on the host, you should see a new ethernet
network interface.
1. If necessary, enable the interface in the host network man-
ager. Many systems will do this automatically.
2. Verify that the interface has received an ENF IPv6 address
using the ip-6addrcommand.
$ip-6addr4:eth2<BROADCAST,MULTICAST,UP,LOWER_UP>stateUPinet62607:8f80:8080:1:73d:ff2a:2206:8041/1283. That’s it! Your host is securely connected to the ENF.
NOTE: If the interface doesn’t appear or have an ENF IP
address, see Troubleshooting for help.
12

Specications
XAP-RW-001
Dimensions 26.8×30 ×4.75 mm
(1.06 ×1.18 ×0.19”)
Weight 5 g
Max Throughput 2.5 Mbps
Processor
500 MHz ARM with hard-
ware acceleration for
cryptographic operations
System Memory 256 MB DDR3 RAM
Code Storage 1 GB Flash
Hardware Secure Element TPM 2.0
Host Interface Mini PCI-e
Network Interface (1) Wi-Fi
Operating Frequency 2.4 GHz
5 GHz
Max. TX Power
2.4 GHz 17 dBm
5 GHz 13 dBm
Max. Antenna Gain
2.4 GHz 2.2 dBi
5 GHz 5 dBi
Wi-Fi Standards 802.11 a/b/g/n/ac
Wireless Security WEP, WPA-PSK, WPA-Enterprise
(WPA/WPA2, TKIP/AES)
Operating Temperature −20 to 70◦C
Operating Humidity 5 to 95% RH, non-condensing
Certications FCC, IC
13

Troubleshooting
No Network Interface on Host
If the router card does not appear as a network interface, con-
rm it is installed properly and a USB ethernet driver is loaded.
Incorrect Physical Installation
Verify that the router card is recognized as a USB device using
the lsusbcommand.
$lsusbBus001Device005:ID2fe0:8b02Xaptum,Inc.ENFRouterCardwithWi-FiIf not, check that the router card is properly installed and that
USB is functioning on the host.
Missing USB Ethernet Driver
Ensure that a USB ethernet driver is installed. The Linux kernel
might have been compiled without it.
Recompile the Linux kernel with the CONFIG_USB_NET_CDCETHERcong option to yor m.
14

No IPv6 Address on Network Interface
If the network interface does not receive an IPv6 address, con-
rm that IPv6 support is enabled in the kernel and the host
supports DHCPv6.
Kernel IPv6 Support Disabled
Check if the kernel was compiled without support for IPv6 net-
working. The ENF is an IPv6 overlay network, so this support is
required.
Compile the kernel with the CONFIG_IPV6option set to y.
DHCPv6 Client is Missing
The ENF uses DHCPv6 to assign a static IPv6 address to each
endpoint. If the host does not include a DHCPv6 client, it cannot
receive that IP address.
Install a DHCPv6 client on the host.
DHCPv6 Not Supported by Network Manager
The ENF uses DHCPv6 to assign a static IPv6 address to each
endpoint. If the network manager on the host does not support
starting a DHCPv6 client for the interface, it cannot receive that
IP address. This is a problem with some versions of ifupdownin
particular.
Upgrade to a network manager that supports DHCPv6. The
most recent versions of connman,NetworkManager,systemd-networkd, and wicdall support DHCPv6.
15

Cannot Connect to Wi-Fi
If the router card is not connecting, conrm that the Wi-Fi con-
guration includes the credentials for a working access point.
Recovery Wi-Fi Network
If the router card cannot connect using the provided Wi-Fi con-
guration, it will fallback to the following recovery credentials.
This is useful to x an incorrect Wi-Fi conguration.
SSID WPA2-PSK
xaprc_recoveryxaprc_recoveryCongure a Wi-Fi access point with the recovery SSID and
passphrase. Wait for the router card to connect, and update
the Wi-Fi conguration using the enfcli.
16

Safety Notices
Electrical Safety Information
1. Compliance is required with respect to voltage, frequency,
and current requirements indicated on the manufacturer’s
label. Connection to a dierent power source than those
specied may result in improper operation, damage to the
equipment or pose a re hazard if the limitations are not
followed.
2. There are no operator serviceable parts inside this equip-
ment. Service should be provided only by a qualied service
technician.
17

Limited Warranty
XAPTUM, Inc (“XAPTUM”) warrants that the product(s) furnished
hereunder (the “Product(s)”) shall be free from defects in ma-
terial and workmanship for a period of one (1) year from the
date of shipment by XAPTUM under normal use and operation.
XAPTUM’s sole and exclusive obligation and liability under the
foregoing warranty shall be for XAPTUM, at its discretion, to
repair or replace any Product that fails to conform to the above
warranty during the above warranty period. The expense of
removal and reinstallation of any Product is not included in
this warranty. The warranty period of any repaired or replaced
Product shall not extend beyond its original term.
Warranty Conditions
The above warranty does not apply if the Product:
1. has been modied andor altered, or an addition made
thereto, except by XAPTUM or XAPTUM’s authorized rep-
resentatives, or as approved by XAPTUM in writing;
2. has been painted, rebranded or physically modied in any
way;
3. has been damaged due to errors or defects in cabling, an-
tennas, or the host device;
4. has been subjected to misuse, abuse, negligence, abnor-
mal physical, electromagnetic or electrical stress, including
lightning strikes, or accident;
5. has been damaged or impaired as a result of using third
party rmware;
6. has no original XAPTUM serial number label, or is missing
any other original XAPTUM label(s); or
7. has not been received by XAPTUM within 30 days of issuance
of the RMA.
In addition, the above warranty shall apply only if: the product
has been properly installed and used at all times in accordance,
and in all material respects, with the applicable Product docu-
mentation.
18

Returns
No Products will be accepted for replacement or repair without
obtaining a Return Materials Authorization (RMA) number from
XAPTUM during the warranty period, and the Products being
received at XAPTUM’s facility freight prepaid in accordance with
the RMA process of XAPTUM. Products returned without an
RMA number will not be processed and will be returned freight
collect or subject to disposal. Information on the RMA process
and obtaining an RMA number can be found at:
www.xaptum.com/warranty
Disclaimer
EXCEPT FOR ANY EXPRESS WARRANTIES PROVIDED HEREIN,
XAPTUM, ITS AFFILIATES, AND ITS AND THEIR THIRD PARTY
DATA, SERVICE, SOFTWARE AND HARDWARE PROVIDERS HEREBY
DISCLAIM AND MAKE NO OTHER REPRESENTATION OR WAR-
RANTY OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, IN-
CLUDING, BUT NOT LIMITED TO, REPRESENTATIONS, GUAR-
ANTEES, OR WARRANTIES OF MERCHANTABILITY, ACCURACY,
QUALITY OF SERVICE OR RESULTS, AVAILABILITY, SATISFACTORY
QUALITY, LACK OF VIRUSES, QUIET ENJOYMENT, FITNESS FOR
A PARTICULAR PURPOSE AND NON-INFRINGEMENT AND ANY
WARRANTIES ARISING FROM ANY COURSE OF DEALING, USAGE
OR TRADE PRACTICE IN CONNECTION WITH SUCH PRODUCTS
AND SERVICES. BUYER ACKNOWLEDGES THAT NEITHER XAP-
TUM NOR ITS THIRD PARTY PROVIDERS CONTROL BUYER’S
EQUIPMENT OR THE TRANSFER OF DATA OVER COMMUNICA-
TIONS FACILITIES, INCLUDING THE INTERNET, AND THAT THE
PRODUCTS AND SERVICES MAY BE SUBJECT TO LIMITATIONS,
INTERRUPTIONS, DELAYS, CANCELLATIONS AND OTHER PROB-
LEMS INHERENT IN THE USE OF COMMUNICATIONS FACILITIES.
XAPTUM, ITS AFFILIATES AND THEIR THIRD PARTY PROVIDERS
ARE NOT RESPONSIBLE FOR ANY INTERRUPTIONS, DELAYS,
CANCELLATIONS, DELIVERY FAILURES, DATA LOSS, CONTENT
CORRUPTION, PACKET LOSS, OR OTHER DAMAGE RESULTING
FROM ANY OF THE FOREGOING. In addition, XAPTUM does not
19