AAxeon 00P, User Manual

Page 1: ...Industrial Wireless Router APR 2000 APR 2000P User Manual Version 1 0 ...

Page 2: ...l 12 Rear Panel 12 Cables and Antenna 13 Ethernet Cables 13 Wireless Antenna 14 Management Interface 15 First time configuration 15 Configure the Wireless Router 16 Basic Setting 17 WAN 17 LAN 20 DHCP 21 Wireless 23 Advanced Setting 26 Wireless 26 NAT Setting 28 Security Setting 31 VPN Setting 33 Notification 37 Miscellaneous DDNS 39 System Tools 40 Date Time 40 Login Setting 41 Router Restart 42 ...

Page 3: ...APR 2000 APR 2000P User s Manual 3 System Log 45 Traffic Statistics 46 Wired Wireless Clients 46 Technical Specifications 47 Appendix A How to configure openvpn and use openvpn in the Windows 49 ...

Page 4: ...nment to provide shared internet access anytime and anywhere The APR 2000 wireless router s VPN capability creates encrypted tunnels through the internet allowing remote office or traveling users to securely connect into your corporate network from off site Software Features Effortless installation via configurable Universal Plug and Play UPnP integration with an intuitive graphical user interface...

Page 5: ... MAC filter Hardware Features Fully Compliant with IEEE802 3af Power Device at ETH2 APR 2000P only Redundant Power Inputs 12 48 VDC on terminal block Operating Temperature 10 to 60 o C Standard Model 35 to 75 o C Wide Temp Model Storage Temperature 40 to 80 o C Operating Humidity 5 to 95 non condensing Casing IP 30 10 100Base T X Ethernet port Dimensions W x D x H 52 mm W x 106 mm D x 144 mm H ...

Page 6: ... Installation Router on DIN Rail Each Wireless Router has a Din Rail kit on rear panel The Din Rail kit helps Router to fix on the Din Rail It is easy to install the Router on the Din Rail Step 1 Slant the router and mount the metal spring to Din Rail Metal Spring ...

Page 7: ...stallation Each router has another installation method to fix the switch A wall mount panel can be found in the package The following steps show how to mount the router on the wall Step 1 Remove Din Rail kit Step 2 Use 6 screws that can be found in the package to combine the wall mount panel Just like the picture shows below ...

Page 8: ...ual 8 The screws specification shows in the following two pictures In order to prevent switches from any damage the screws should not larger than the size that used in APR 2000 Pozidrive Step 3 Mount the combined router on the wall ...

Page 9: ... APR 2000 Port Description 10 100 RJ 45 fast Ethernet ports 2 10 100Base T X RJ 45 fast Ethernet ports support auto negotiation Default Setting Speed auto Duplex auto Flow control disable P O E PD Port APR 2000P Only ETH2 of APR 2000P compliant with IEEE802 3af P O E specifications ANT Reversed SMA connector for external antenna ...

Page 10: ...m status When the PWR1 links the green led will be light on 4 LED for PWR2 and system status When the PWR2 links the green led will be light on 5 LED for Fault Relay When the fault occurs the amber LED will be light on 6 10 100Base T X Ethernet ports APR 2000P contains PD function of P O E 7 LED for Ethernet ports status 8 LED for WLAN link status 9 LED for WLAN signal strength 10 USB Port for Int...

Page 11: ... did not respond properly PWR2 Green Red On DC power 2 activated Red blinking Indicates an IP conflict or DHCP or BOOTP server did not respond properly Fault Amber On Fault relay Power failure or Port down fail WLAN Green On WLAN activated Blinking WLAN Data transmitted WLAN Strength Green On WLAN signal strength 1 25 2 50 3 75 4 100 10 100Base T X Fast Ethernet ports 10Mbps LNK ACT Amber On Port ...

Page 12: ...l block includes PWR1 PWR2 12 48V DC and Relay output 1A 24VDC 2 Reset bottom Push the bottom 3 seconds for reset 5 seconds for factory default PWR1 PWR2 12 48V DC and Reset Button Relay output 1A 24VDC Rear Panel The rear panel components of APR 2000 are showed as below 1 Screw holes for wall mount kit 2 Din Rail kit ...

Page 13: ...Connector 10BASE T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ 45 100BASE TX Cat 5 100 ohm UTP UTP 100 m 328 ft RJ 45 1000BASE TX Cat 5 Cat 5e 100 ohm UTP UTP 100 m 328ft RJ 45 100BASE TX 10BASE T Pin Assignments With 100BASE TX 10BASE T cable pins 1 and 2 are used for transmitting data and pins 3 and 6 are used for receiving data RJ 45 Pin Assignments Pin Number Assignment 1 TD 2 TD 3 RD 4 Not used 5 N...

Page 14: ... transmit RD receive 2 TD transmit RD receive 3 RD receive TD transmit 4 Not used Not used 5 Not used Not used 6 RD receive TD transmit 7 Not used Not used 8 Not used Not used Note and signs represent the polarity of the wires that make up each wire pair Wireless Antenna An antenna is used for APR 2000 and connected with a reversed SMA connector ...

Page 15: ...ss to a computer equipped with an Ethernet card or wireless card Using an Ethernet card to connect to LAN port is recommended Basic router connection topology Step 1 Select the Power Source APR 2000 can be powered by a DC power input or by PoE Power over Ethernet Step 2 Connect a computer to APR 2000 Cable XDSL Modem 3G Internet WAN Wireless Router Wireless Network Wired Network WAN Line LAN Line ...

Page 16: ...using USB modem 3G as WAN connection please plug in your device in the USB port Please contact your supplier for list of currently supported 3G 3 5G USB devices Step 5 Protect the wireless access in encryption mode Click the Wireless in Basic Setting menu default encryption mode is None choose WEP WPA to enhance the security of wireless connection Step 6 Review the router settings and check router...

Page 17: ...rface In the page you can check the Firmware version the router running time and the Wan IP Label Description Firmware Show the version of current firmware Uptime Show the elapsed time since router is started Wan IP Show the WAN IP address BASIC SETTING WAN The APR 2000 provides three types of WAN connection 1 WAN Connection Type Dynamic Static IP ...

Page 18: ...omply with IP rules Obtain DNS server address automatically Obtain DNS server from DHCP server If the above Obtain an IP address automatically is selected this option will be chosen accordingly Use the following DNS server addresses Specify DNS server address manually Use Modem 3G as backup connection Enable this option if you want to use Modem 3G as a backup connection when normal connection is l...

Page 19: ...tion Mode Auto Connect automatically when the router boots up Connect on Demand Select to disconnect the PPP session if the router has had no traffic for the specified amount of time Enter the Max Idle Time in minutes Manual Select this option to use only the Connect Disconnect buttons to call up or close the connection Use Modem 3G as backup connection Enable this option if you want to use Modem ...

Page 20: ...rovided by your ISP Password Password provided by your ISP PIN Enter the PIN code if PIN check is required Auto Connect If this option is enabled the connection will be called up when router boots up Device Status Show the status of Medem 3G device Operations Click Connect to call up the Modem 3G Click Disconnect to shut down the connection Link Status Show the status of connection up down or conn...

Page 21: ...r will automatically assign an IP address to the computers on the LAN Set your computers to be DHCP clients by setting their TCP IP settings to Obtain an IP Address Automatically The DHCP server will automatically allocate an unused IP address from the IP address pool to the requesting computer 1 DHCP Sever DHCP Server Screen The following table describes the labels in this screen Label Descriptio...

Page 22: ... MAC address to IP address When a computer with the MAC address requests an IP from the APR 2000 it will be assigned to the IP address according to the mapping You can choose one from the client lists and add it to the mapping relationship IP Allocation Screen Label Description Choose a Client to Edit The list shows the MAC addresses and IP addresses that are already assigned by APR 2000 Choose on...

Page 23: ...hannel Note The wireless adapters will automatically scan and match the wireless setting Security options Select the type of security for Wireless Local Area Networks None any encryption WEP Wired Equivalent Privacy WEP is a wireless security protocol for Wireless Local Area Networks WLAN WEP provides security by encrypting the data that is sent over the WLAN WPA PSK WPA2 PSK WPA PSK or WPA2 PSK w...

Page 24: ...encryption keys ASCII American Standard Code for Information Interchange is a code for representing English letters as numbers from 0 127 Hex digits consist of the numbers 0 9 and the letters A F Security Type WPA PSK WPA2 PSK Wireless Security Type WPA PSK WPA2 PSK Screen 1 Security Type Select WPA PSK WPA2 PSK 2 Choose one of three Auth Modes WPAPSK WPA2PSK WPAPSK WPA2PSK mix 3 Encryption Type S...

Page 25: ...a widely deployed protocol that enables companies to authenticate authorize and account for remote users who want access to a system or service from a central network server Radius server validates your proof also carry on the authorization So the Radius server received by ISA server responded point out the customer carries proof to be not granted and it means that the Radius server did not author...

Page 26: ...roadcast or multicast messages for associated clients it sends the next DTIM with a DTIM Interval value Its clients hear the beacons and awaken to receive the broadcast and multicast messages Fragmentation Threshold This value should remain at its default setting of 2346 The range is 256 2346 bytes It specifies the maximum size for a packet before data is fragmented into multiple packets If you ex...

Page 27: ...g is Auto The range is from 1 to 54Mbps The rate of data transmission should be set depending on the speed of your wireless network You can select from a range of transmission speeds or keep the default setting Auto to have the AP automatically use the fastest possible data rate and enable the Auto Fallback feature Auto Fallback will negotiate the best possible connection speed between the AP and ...

Page 28: ... linked with AP MAC Address MAC addresses for editing Apply Click Apply to set the configurations NAT Setting 1 Virtual Server Virtual Server is used for setting up public services on the LAN such as DNS FTP and Email Virtual Server is defined as a Local Port to the LAN servers and all requests from Internet to this Local port will be redirected to the computer specified by the Local IP Any PC tha...

Page 29: ...that will be used to access the virtual service Protocol The protocol used for the virtual service Local IP The IP of the computer that will be providing the virtual service Local Port The port number of the service used by the Private IP computer Enable Now Enable the virtual server entry after adding it Virtual server list Click Edit to edit the virtual service entry Click Del to delete the entr...

Page 30: ...e port number on the WAN side that will be used to access the application Enable Enable the rule after adding the entry Port Trigger List Click Edit to edit the entry click Del to delete the entry 3 DMZ It allows a computer to be exposed to the Internet This feature is useful for gaming purposes Enter the IP address of the internal computer that will be the DMZ host Adding a client to the DMZ may ...

Page 31: ...NAT router to automatically configure the router to allow parties outside the private network to contact itself NAT PMP runs over UDP It essentially automates the process of port forwarding Check the box to enable NAT PMP UPnP List This table lists the current auto port forwarding information Application The application that generates this port forwarding Ext Port The port opened on WAN side Proto...

Page 32: ... Specify the direction of the data flow that is to be filtered IP Address Enter the IP address of the source and destination computer Protocol Choose which protocol to be filtered Enable Now Enable the entry after adding it IP filter list Click edit for editing the entry click Del to delete the entry 2 MAC Filter Filters are used to deny or allow LAN computers from accessing the internet according...

Page 33: ...y click Del to delete the entry VPN Setting VPN Setting is settings that are used to create virtual private tunnels to remote VPN gateways The tunnel technology supports data confidentiality data origin authentication and data integrity of network information by utilizing encapsulation protocols encryption algorithms and hashing algorithms 1 Open VPN Open VPN is a full featured SSL VPN solution wh...

Page 34: ... of APR 2000 please install openvpn client software for your windows PC Download from http openvpn net download html stablel The version of current Openvpn implementation in APR 2000 is 2 0 9 the corresponding client software should be installed Label Description Open VPN Server Enable or disable the function of Open VPN Server WAN Line Internet WAN Wireless Router Select Open VPN Server LAN Line ...

Page 35: ...uters are needed for creating site to site VPN connection using this mode Label Description Open VPN Client Enable or disable the function of Open VPN Client Open VPN Client allowed or denied option is selected by you Server IP Enter the Open VPN Server IP address Tunnel Protocol Select UDP or TCP protocol Port Enter the port number default is 1194 LZO Compression Enable or disable the LZO Compres...

Page 36: ...he LAN Create a PPTP connection to the router You should create a PPTP network connection if you are using a window PC And the steps are Right click Network property create a new connection connect to my work space VPN use VPN to internet enter the user name and password which are set in the page WAN Line Internet WAN Wireless Router Select Open VPN Server LAN Line WAN Line VPN Line Wireless Route...

Page 37: ...ort IP Client IP Enter the IP address range format is as 192 168 10 xx xx connected client will be assigned the IP address CHAP Secrets Enter the username and password pairs format is as user pass multiple username password pairs are allowed Notification 1 Email SNMP Syslog Email Settings Email Settings Screen Label Description SMTP Server Simple Message Transfer Protocol enter the backup host to ...

Page 38: ... agent provides management information to the NMS by keeping track of various operational aspects of the system Turn on to open this service and off to disable it SNMP Trap Server 1 4 Specify the IP address of trap server which is the address to which snmp trap messages are sent Community Community is essentially password to establish trust between managers and agents Normally public is used for r...

Page 39: ...d depends on the selection of corresponding option in the Advanced Setting Notification System Event page System Event Screen System events record the activities of the Wireless Router system When the setting changes or action performs the event will be sent to administrator by email A trap will also be sent to SNMP trap server The Syslog will record the event locally and may send the log remotely...

Page 40: ...ssword for your DDNS account Domain Enter the domain names provided by your dynamic DNS service provider Mail Server Enter the mail server if provided Use Wildcard Check the box the enable wildcard option SYSTEM TOOLS Date Time In this page set the date time of the device The correct date time will be helpful for logging of system events A NTP Network Time Protocol client can be used to synchroniz...

Page 41: ...rent Date Time from Browser Click this button you can set the time from your browser NTP Enable or disable NTP function to synchronize time from the NTP server NTP Server 1 The primary NTP Server NTP Server 2 The secondary NTP Server Synchronize This is the schedule of time when the NTP synchronization performed Login Setting At this page the administrator can change the login name and password th...

Page 42: ... this field contains 0 9 a z A Z and must be between 0 to 15 characters in length Confirm New Password Retype the password to confirm it Acceptable inputs of this field contains 0 9 a z A Z and must be between 0 to 15 characters in length Web Protocol Choose the web management page protocol HTTP HTTPS are supported Port Choose the web management page port number for HTTP default port is 80 for HTT...

Page 43: ...e model of router It will take several minutes to upload and update the firmware After the upgrade is done successfully the router will reboot Important Notice DO NOT POWER OFF THE ROUTER OR PRESS THE RESET BUTTON WHILE THE FIRMWARE IS BEING UPGRADED Save Restore Config Save Restore Config Screen Save The configuration file will be downloading Internet Explorer user will need to click on the prote...

Page 44: ...ur local hard drive and locate the system settings file previously saved Click Upload when you have selected the file Restore Default Settings You may also reset the router to the factory settings by clicking on Restore Default Settings The router will reboot to validate the default settings Miscellaneous Ping Miscellaneous Screen The Ping Test is used to send Ping packets to test if a computer is...

Page 45: ...Manual 45 SYSTEM STATUS System Info System Info Screen This page displays the details information for the router including model name model description firmware version WAN LAN and wireless settings System Log System Log Screen ...

Page 46: ...r Logs to clear the log entries Traffic Statistics Traffic Statistics Screen This page displays the network traffic statistics for both received and transmitted packets through the Ethernet port and wireless connections Wired Wireless Clients Wired Wireless Clients Screen This page of the list displays the Mac Address and Lease IP Address of the wired wireless clients connected Communication Type ...

Page 47: ...ion Isolation Voltage 1000 VDC min Isolation Resistance 10 8 ohms min WLAN Interface Antenna Connector Reverse SMA Radio Frequency Type DSSS Modulation IEEE802 11b CCK DQPSK DBPSK IEEE802 11g OFDM with BPSK QPSK 16QAM 64QAM Frequency Band America FCC 2 412 2 462 GHz 11channels Europe CE ETSI 2 412 2 472 GHz 13channels Transmission Rate IEEE802 11b 1 2 5 5 11 Mbps IEEE802 11g 6 9 12 18 24 36 48 54 ...

Page 48: ...nal WLAN Strength 1 25 2 50 3 75 4 100 Fault WLAN link down Red Power Requirements Power Input Voltage PWR1 2 12 48VDC in 6 pin Terminal Block Reverse Polarity Protection Present Power Consumption 6 Watts Max Environmental Operating Temperature Standard 10 to 60 o C Operating Temperature Wide Temperature 35 to 75 o C Storage Temperature 40 to 80 o C Operating Humidity 5 to 95 non condensing Mechan...

Page 49: ...rogram Files openvpn easy rsa Run init config bat create the vars bat and openssl Run vars bat clean all bat create new empty index and serial files Run build ca bat build a CA key Run build dh bat build a DH file for server side Run build key server bat server build a private key certificate for openvpn server Run build key bat client build key files in PEM format for client machine All inborn se...

Page 50: ...ting Open VPN 2 In the OpenVPN Server open C Program Files OpenVPN config and run server ovpn In the OpenVPN Client open C Program Files OpenVPN config and run client ovpn The massage Initialization Sequence Completed indicates that the openvpn connection is established successfully Modify according to by the router web settings ...