NetComm Wireless NTC-140-01, User Manual

Page 1: ...User Guide NTC 140 01 4G M2M Router ...

Page 2: ...s or other loss NetComm Wireless accepts no responsibility for any loss or damage resulting from errors or delays in transmission or reception or the failure of the NetComm Wireless NTC 140 01 to transmit or receive such data Safety and Hazards Do not connect or disconnect cables or devices to or from the USB port SIM card tray Ethernet port or the terminals of the Molex power connector in hazardo...

Page 3: ...l life it must be taken to a recycling centre and processed separately from domestic waste The cardboard box the plastic contained in the packaging and the parts that make up this device can be recycled in accordance with regionally established regulations Never dispose of this electronic equipment along with domestic waste You may be subject to penalties or sanctions under the law Instead ask for...

Page 4: ...guration of the NTC 140 01 router 18 Powering the router 18 Installing the router 18 Advanced configuration 19 Status 20 Networking 23 Wireless WAN 23 LAN 36 Ethernet LAN WAN 40 PPPoE 42 Routing 45 VPN 54 Services 67 Dynamic DNS 67 Network time NTP 68 Data stream manager 69 PADD 78 Remote management 79 IO configuration 85 Event notification 87 Email settings 90 SMS messaging 91 System 107 Log 107 ...

Page 5: ...ss 4G M2M Router 5 v1 0 Appendix H Obtaining a list of RDB variables 147 Appendix I Using USB devices and MicroSD cards 148 Accessing USB SD card storage devices 148 Host and Device mode 148 Safety and product care 149 Product Warranty 154 ...

Page 6: ...ho understand telecommunications terminology and concepts Prerequisites Before continuing with the installation of your NTC 140 01 router please confirm that you have the following An electronic computing device with a working Ethernet network adapter and a web browser such as Internet Explorer Mozilla Firefox or Google Chrome Notation The following symbols are used in this user guide The followin...

Page 7: ...log viewer via browser TR 069 device management optional Ignition Sense capability for graceful shutdown and startup in vehicle applications Configurable power save mode with minimum current draw when not operational Tested for vehicular applications IEC Class 5M2 and MIL STD 810F Method 516 5 Product features The robust and intelligent NetComm 4G M2M Router is designed to provide real time M2M da...

Page 8: ...sions and indicators Physical dimensions Below is a list of the physical dimensions of the NTC 140 01 router Figure 1 NTC 140 01 router Dimensions NTC 140 01 ROUTER WITHOUT EXTERNAL ANTENNAS ATTACHED Length 143 mm Depth 107 mm Height 34 mm Weight 235g Table 2 Device Dimensions ...

Page 9: ...ing Hardware error such as SIM not inserted Network Off Radio Off On Connected via WWAN Blinking 1 Traffic via WWAN Slow flashing Connecting PDP On Registered network Slow flashing Registering network Slow flashing SIM PIN locked Fast flashing SIM PUK locked On Can t connect Signal strength On LTE signal On WCDMA signal On GSM signal Table 3 LED Indicators 1 The term blinking means that the LED ma...

Page 10: ...RENGTH All LEDs unlit 109 dBm 1 109 dBm to 102dBm 2 101 dBm to 92 dBm 3 91 dBm to 86 dBm 4 85 dBm to 78 dBm 5 77 dBm Table 4 Signal strength LED descriptions GSM signal mapping Red NUMBER OF LIT LEDS SIGNAL STRENGTH All LEDs unlit 109 dBm 1 102 dBm to 108dBm 2 93 dBm to 101 dBm 3 87 dBm to 92 dBm 4 86 dBm to 78 dBm 5 78 dBm LED update interval The signal strength LEDs update within a few seconds w...

Page 11: ... network link detected Amber On The Ethernet port is operating at a speed of 1000Mbps Off The Ethernet port is operating at a speed of 10 100Mbps or no Ethernet cable is connected Table 5 Ethernet port LED indicators description Do not connect or disconnect cables or devices to or from the Ethernet ports in hazardous locations such as those in which flammable gases or vapors may be present but nor...

Page 12: ...uence to indicate that the router will reboot normally if the button is released during this period Press and hold for 5 to 15 seconds to reboot to recovery mode The LEDs are amber and extinguish in sequence to indicate that the router will reboot to recovery mode if the button is released during this period Press and hold for 15 to 20 seconds to reset the router to factory default settings The LE...

Page 13: ...n selecting a location for the router allow at least 20 seconds for the signal strength LEDs to update before trying a different location Mounting options The NTC 140 01 router can be quickly and easily mounted in a variety of locations Mounted flat against the wall When mounted flat against the wall the NTC 140 01 router has a slimline form factor Use appropriately sized screws in the mounting ho...

Page 14: ...14 NetComm Wireless 4G M2M Router www netcommwireless com v1 0 Wall mounted via DIN rail bracket Figure 7 Wall mounted via DIN rail bracket DIN rail mount Figure 8 DIN rail mount ...

Page 15: ...www netcommwireless com NetComm Wireless 4G M2M Router 15 v1 0 Pole mount using DIN rail bracket Figure 9 Pole mount using DIN rail bracket Desk mount Figure 10 Desk mount ...

Page 16: ...he vertical DIN rail bracket to the metal bracket The NTC 140 01 router may then be snapped into the vertical DIN rail bracket Via horizontal DIN rail mounting bracket Attach the horizontal DIN rail mounting bracket to the DIN rail by either snapping it onto the rail using the bend line and the tab at the top or sliding it on to the rail from the end Optionally you may put a screw through the cent...

Page 17: ... v1 0 Attach the vertical DIN rail mounting bracket to the NTC 140 01 by snapping it on to the back of the router then slide the NTC 140 01 router on to the horizontal mounting bracket The NTC 140 01 router is successfully mounted in a horizontal orientation ...

Page 18: ...en insert the loaded tray into the SIM slot with the gold side facing up 2 Attach the cellular antennas to their respective connectors 3 Connect equipment that requires network access to the LAN port of your router This may be your computer for advanced configuration purposes or your end equipment which requires data access via the NTC 140 01 router You can connect one device directly or several d...

Page 19: ...nfigured the password for the root or admin accounts you can use one of the default account details to log in ROOT MANAGER ACCOUNT Username root Password tkemAx177a Table 8 Management account login details Root manager ADMIN MANAGER ACCOUNT Username admin Password tkemAx177a Table 9 Management account login details Admin manager Note The admin manager account allows you to manage all settings of t...

Page 20: ...outer management console The status page shows System information LAN details Cellular connection status Packet data connection status Wireless LAN status and Advanced status details You can toggle the sections from view by clicking the or buttons to show or hide them Extra status boxes will appear as additional software features are enabled e g VPN connectivity Figure 13 NTC 140 01 status page ...

Page 21: ...gth measured in dBm Network registration status The status of the router s registration for the current network Operator selection The mode used to select an operator network Current operator The current operator network in use Roaming status The roaming status of the router Allowed bands The bands to which the router may connect Current band The current band being used by the router Coverage The ...

Page 22: ...on used for customization Module PRIID PRI part number The part number of the Module PRIID PRI carrier The carrier network PRI config Configuration file for the current carrier network Reference Signal Received Quality RSRQ RSRQ calculates signal quality taking into consideration the RSSI It is calculated by N x RSRP RSSI where N is the number of Physical Resources Blocks PRBs over which the RSSI ...

Page 23: ...tions for Wireless WAN LAN Routing and VPN connectivity Wireless WAN Data connection The data connection page allows you to configure and enable disable the connection profile To access this page click on the Networking menu and under the Wireless WAN menu select the Data connection item Figure 14 Data connection settings ...

Page 24: ... it is roaming onto a foreign network When set to OFF the router will deny network access to data services when roaming onto a foreign network This setting is OFF by default Note that additional costs may apply when using roaming data services Table 11 Data connection item details Connecting to the mobile broadband network The router supports the configuration of up to six APN profiles these profi...

Page 25: ...f times to attempt a network connection if the router fails to establish a connection It is set to 0 by default which causes the router to attempt to reconnect indefinitely 9 The Metric value is used by router to prioritise routes if multiple are available and is set to 20 by default This value is sufficient in most cases but you may modify it if you are aware of the effect your changes will have ...

Page 26: ...s enabled click on the Status menu item at the top of the page to return to the Status page When there is a mobile broadband connection the WWAN section is expanded showing the details of the connection and the Status field displays Connected To see details on the connected session you can click the Show data usage button Figure 17 WWAN connection status section ...

Page 27: ...establish a mobile broadband data connection When the data connection is established the router monitors traffic and terminates the link when it is idle Note When interesting packets arrive the recovery time for the wireless WAN connection is approximately 20 30 seconds Configuring Connect on demand To configure Connect on demand 1 Click the Networking menu item from the top menu bar 2 On the Conn...

Page 28: ...et it to ON Figure 20 Connect on demand Ignore NCSI traffic Excluding certain packet types from triggering the connection to dial Depending on your environment you might prefer to exclude certain types of traffic passing through the router from triggering the data connection You can tell the router to ignore outbound TCP UDP or ICMP packets When any of these options are checked the router will not...

Page 29: ...ect regularly every to specify the interval between dials Setting this to never effectively disables this option The router also features the ability to randomize the time at which the first dial action is performed This is useful in situations such as where you have numerous routers in an area where a power outage has occurred Setting a random dial time helps to reduce network congestion when all...

Page 30: ...layed above the buttons Figure 25 Connect on demand Online Offline control When you have finished configuring the options for the Connect on demand feature click the Save button at the bottom to save your changes SMS Wake up The router can also be woken up by means of an SMS message using the SMS diagnostics feature by sending an executable wakeup command via SMS See the Diagnostics section for de...

Page 31: ...ble bands may vary depending on your variant of the product It is not necessary to change the default setting of All bands in most cases In fact locking to a particular band can cause connection difficulties if the device is moved to a location where the forced band selection is no longer available When All bands is selected the router attempts to find the most suitable band based on the available...

Page 32: ...is set to Automatic the router selects the most appropriate operator based on the inserted SIM card This is the default option and is sufficient for most users SIM security settings The SIM security settings page can be used for authenticating SIM cards that have been configured with a security PIN Unlocking a PIN locked SIM If the SIM card is locked you will receive a notice when you access the S...

Page 33: ...o be PIN locked to prevent unauthorised re use of the SIM elsewhere while still allowing the router to connect to the cellular service When this feature is enabled the PIN you enter when setting the Remember PIN feature is encrypted and stored locally on the router The next time the SIM asks the router for the PIN the router decrypts the PIN and automatically sends it to the SIM without user inter...

Page 34: ...re 32 PIN Settings Changing the SIM PIN code If you would like to change the PIN click the Change PIN button and enter the current PIN into the Current PIN and Confirm current PIN fields then enter the desired PIN into the New PIN and Confirm new PIN fields and click the Save button Figure 33 PIN settings Change PIN When the PIN has been changed successfully the following screen is displayed ...

Page 35: ... card becomes PUK Personal Unblocking Key locked and you are requested to enter a PUK code to unlock it Note To obtain the PUK unlock code you must contact your service provider You will be issued a PUK to enable you to unlock the SIM and enter a new PIN Enter the new PIN and PUK codes Click the Save button when you have finished entering the new PIN and PUK codes Figure 35 SIM security SIM PUK lo...

Page 36: ...S server without needing to know the dynamically assigned cellular network DNS servers With DNS masquerading ON the DHCP server embedded in the NTC 140 01 router hands out its own IP address e g 192 168 0 1 as the DNS server address to LAN clients The downstream clients then send DNS requests to the NTC 140 01 router which proxies them to the upstream DNS servers With DNS masquerading OFF the DHCP...

Page 37: ...0 01 router are able to communicate with the DHCP server when DHCP relay is enabled This enables the NTC 140 01 router to accept client broadcast messages and to forward them onto another subnet To configure the router to act as a DHCP relay agent click the DHCP relay toggle key to turn it ON and enter the DHCP server address into the DHCP server address field DHCP relay is disabled by default Fig...

Page 38: ...DHCP option 150 This is used to configure Cisco IP phones When a Cisco IP phone starts if it is not pre configured with the IP address and TFTP address it sends a request to the DHCP server to obtain this information Specify the string which will be sent as a reply to the option 150 request DHCP option 160 This is used to configure Polycom IP phones When a Polycom IP phone starts if it is not pre ...

Page 39: ...ys a list of the DHCP clients If you want to reserve the current IP address for future use click the Clone button and the details will be copied to the address reservation list fields Remember to click the Save button under the Address reservation list section to confirm the configuration Figure 40 Dynamic DHCP client list ...

Page 40: ... page click on the Networking menu at the top of the screen click on the Ethernet LAN WAN menu on the left then select the Ethernet group menu item Figure 41 Ethernet group configuration OPTION DEFINITION A number identifying the interface on the router Description A description of the type of interface Name The name used to identify the interface on the router Link status Displays whether the int...

Page 41: ... WAN Ethernet Use this field to select the WAN interface to configure Connection Type Selects whether the WAN interface has static IP settings or DHCP IP address The IP address to assign to the selected WAN interface Subnet mask The Subnet mask of the IP address above Gateway The gateway to assign this WAN interface DNS server 1 IP address The first DNS server for the WAN interface DNS server 2 IP...

Page 42: ... whether the router passes the WAN IP address on to the PPPoE client When this option is set to ON the first PPPoE client to connect will receive the WAN IP address and no further clients will be able to make a connection In this mode the router transparently bridges the connection and many of the router s features are disabled When this option is set to OFF the router retains the WAN IP address a...

Page 43: ...con for the interface you wish to edit The Failover configuration page is displayed When Monitoring method is set to Hardware link the failover is controlled by the physical detection of the link Figure 46 Failover configuration hardware link OPTION DESCRIPTION Priority The priority metric is a numeric value which determines which interface has priority Lower priority values mean higher priority M...

Page 44: ...error monitor Fail count The number of failed pings that must occur before the monitor moves to the second destination address or fails the connection over to the next interface Periodic ratio monitor Monitor total count This field specifies the number of previous pings to consider when calculating whether to fail over or fail back Failover total count This field specifies the number of failed pin...

Page 45: ... initialization such as the Ethernet subnet route for routing to a device on the Ethernet subnet Adding Static Routes To add a new route to the static routing list click the Add button The Static routes page appears 1 In the Route name field type a name for the route so that it can be identified in the static routing list 2 From the Network interface drop down list select the interface for which y...

Page 46: ... Adding a static route Active routing list Static routes are displayed in the Active routing list Figure 50 Active routing list Deleting static routes From the static routing list click the icon to the right of the entry you wish to delete Figure 51 Deleting a static route ...

Page 47: ...es must be added manually according to your requirements See Adding Static Routes To access the RIP configuration page click on the Networking menu at the top of the screen click on the Routing failover menu on the left then click on the RIP menu item Note Some routers will ignore RIP Figure 52 RIP configuration To enable Routing Information Protocol RIP 1 Click the RIP toggle key to switch it to ...

Page 48: ...Identifier VRID which is different for each virtual router in the network This address is used by only one physical router at a time and is the only way that other physical routers can identify the master router within a virtual router To access the Redundancy VRRP page click on the Networking menu at the top of the screen click on the Routing failover menu on the left then click on the Redundancy...

Page 49: ...the router or a wildcard IP address 0 0 0 0 that allows all IP addresses to access the router 4 The Source Port Range From and To fields are used to specify the port s on the source side that are to be forwarded This allows you to send a range of consecutive port numbers by entering the first in the range in the From field and the last in the range in the To field To forward a single port enter th...

Page 50: ...e is no filtering of what traffic is allowed and what is denied The DMZ configuration page is used to specify the IP Address of the device to use as the DMZ host To access the DMZ page click on the Networking menu at the top of the screen click on the Routing failover menu on the left then click on the DMZ menu item Figure 56 DMZ configuration 1 Click the DMZ toggle key to turn the DMZ function ON...

Page 51: ...ibed as DMZ MAC IP Port filtering rules MAC IP Port filtering default rule Router firewall rules In other words the firewall is of the lowest priority when compared to other manual routing configurations Therefore a MAC IP Port filtering rule takes priority in the event that there is a conflict of rules When DMZ is enabled MAC IP Port filtering rules and the router firewall are ignored but the rou...

Page 52: ...AC IP Port filtering and setting the default rule to Dropped you should ensure that you have first added a filtering rule which allows at least one known MAC IP to access the router otherwise you will not be able to access the user interface of the router without resetting the router to factory default settings Creating a MAC IP Port filtering rule To create a filtering rule 1 Click the MAC IP Por...

Page 53: ... ICMP Source MAC Address Enter the MAC address in six groups of two hexadecimal digits separated by colons e g 00 40 F4 CE FA 1E Source IP Address Enter the IPv4 address that the traffic originates from and the subnet mask using CIDR notation Destination IP Address Enter the IPv4 address that the traffic is destined for and the subnet mask using CIDR notation Action Select the action to take for t...

Page 54: ...VPN connection types Note The following descriptions are an overview of the various VPN options available More detailed instructions are available in separate whitepapers on the NetComm Wireless website IPSec IPSec operates on Layer 3 of the OSI model and as such can protect higher layered protocols IPSec is used for both site to site VPN and Remote Access VPN The NTC 140 01 router supports IPsec ...

Page 55: ...www netcommwireless com NetComm Wireless 4G M2M Router 55 v1 0 Figure 63 IPSec profile edit ...

Page 56: ...n choose Main Aggressive or Any PFS Choose whether Perfect Forward Secrecy is ON or OFF for the VPN connection IKE encryption Select the cipher type to use for the Internet Key Exchange IKE hash Select the IKE Hash type to use for the VPN connection The hash is used for authentication of packets for the key exchange DH group Select the desired Diffie Hellman group to use Higher groups are more sec...

Page 57: ...rver the router checks whether there are existing server certificates If no server certificate is found you are informed that you must generate a certificate before configuring the OpenVPN server Click on the OK button to be taken to the Server certificate page For more information on generating server certificates refer to the Server certificate section of this guide When you have created the cer...

Page 58: ...Certificate or Username Password Certificate Authentication In the Certificate Management section enter the required details to create a client certificate All fields are required When you have finished entering the details click the Generate button Figure 65 OpenVPN server configuration Certificate management When it is done you can click the Download P12 button or the Download TGZ button to save...

Page 59: ...www netcommwireless com NetComm Wireless 4G M2M Router 59 v1 0 Figure 66 OpenVPN server profile settings ...

Page 60: ...d by the client network because it is not aware of the remote client s subnet When you have finished entering all the required information click Save to finish configuring the OpenVPN server Configuring an OpenVPN Client 1 Click the OpenVPN profile toggle key to switch it to the ON position 2 In the Profile name field type a name for the OpenVPN client profile you are creating 3 In the Server IP a...

Page 61: ...er Figure 69 OpenVPN Client Username Password section Use the Browse button to locate the CA certificate file you saved from the OpenVPN Server and then press the Upload button to send it to the router Click the Save button to complete the OpenVPN Client configuration Configuring an OpenVPN P2P Connection To configure an OpenVPN peer to peer connection 1 Set the OpenVPN profile toggle key to switc...

Page 62: ...k section enter the network Address and network Subnet mask The Network Address and Network Mask fields inform the Master node of the LAN address scheme of the slave 7 Press the Generate button to create a secret key to be shared with the slave When the timestamp appears you can click the Download button to save the file to exchange with the other router 8 When you have saved the secret key file o...

Page 63: ...of the OSI model and is included on Windows computers Configuring the PPTP client To configure the PPTP client 1 From the menu bar at the top of the screen click Networking and then from the VPN section on the left side of the screen click PPTP client The PPTP client list is displayed Figure 71 PPTP client list 2 Click the Add button to begin configuring a new PPTP client profile The PPTP client e...

Page 64: ... is 30 and should not be modified unless you are aware of the effect your changes will have 9 The Use peer DNS option allows you to select whether the remote clients will use the Domain Name Server of the PPTP server Click the toggle key to set this to ON or OFF as required 10 NAT masquerading allows the router to modify the packets sent and received to inform remote computers on the internet that...

Page 65: ...control session establishes the VPN tunnel GRE is used to securely encapsulate the data or payload Configuring GRE tunnelling To configure GRE tunnelling 1 From the menu bar at the top of the screen click Networking and then from the VPN section on the left side of the screen click GRE The GRE client list is displayed Figure 73 GRE client list 2 Click the Add button to begin configuring a new GRE ...

Page 66: ...st one for each hop the data packet takes to the next router on the route to the datagram s destination If the TTL field reaches zero before the datagram arrives at its destination the data packet is discarded and an error message is sent back to the sender 11 The Verbose logging option sets the router to output detailed logs regarding the GRE tunnel in the System Log section of the router interfa...

Page 67: ...al name server with the current WAN IP address To configure dynamic DNS 1 Click the DDNS configuration toggle key to switch it to the ON position 2 From the Dynamic DNS drop down list select the Dynamic DNS service that you wish to use The available DDNS services available are www dhs org www dyndns org www dyns cx www easydns com www justlinux com www ods org www tzo com www zoneedit com 3 Enter ...

Page 68: ...s the time and date configured on the router If this is not accurate use the Time zone drop down list to select the correct time zone for the router If the selected zone observes daylight savings time a Daylight savings time schedule link appears below the drop down list Click the link to see the start and end times for daylight savings 2 When you have selected the correct time zone click the Save...

Page 69: ...forwarding and translation of data between any of the endpoints In each case the logical flow of the stream is from Endpoint A to Endpoint B Customers interested in developing their own applications to create custom endpoints and streams can contact NetComm Wireless about our Software Development Kit Endpoints The first thing to be done in order to create a data stream is to define the endpoints T...

Page 70: ... using a USB to Serial adapter you could telnet to the router and issue the command ls dev ttyUSB to list the paths of the connected USB devices To determine the path of the desired USB adapter issue the command when the adapter is not connected then run the command again when the adapter is connected and compare the output Note Using a custom host port name is not recommended for normal use as th...

Page 71: ...y Retry timeout interval Figure 80 TCP client endpoint configuration UDP server This creates a UDP server endpoint with the following options available Figure 81 UDP server endpoint configuration UDP client This creates a UDP client endpoint with the following options available The retry timeout period specifies the number of seconds to wait between attempts to re establish a connection in the eve...

Page 72: ...m the modem and this configuration determines the pin s behavior Always DSR is always on Registered When connected to a CSD endpoint sets pin to on when modem is in data mode Session established When connected to PPP endpoint sets pin on when PDP is connected when connected to IP modem endpoint sets pin to on when modem is in online state e g data connection is established Never DSR is always off ...

Page 73: ...ndpoint is designed for use when CSD connectivity is required between equipment connected through NetComm Wireless routers A typical application of CSD is a dial up connection to an ISDN service CSD calls use the functionality of the GSM networking and switching subsystem to carry data via GSM or later cellular networks In many ways this is similar to making a voice call When a CSD connection is e...

Page 74: ...fault commands if default method is used For example to change DTR operation to enter online command mode instead of default disconnect use the following command AT D1 with Default initialization method Inactivity timeout If a non zero value is entered and the router detects an inactivity period in an established CSD call in excess of the number of minutes entered the CSD call will be automaticall...

Page 75: ... End ID This is a string which if configured is sent after all serial data just before the client disconnects START ID SERIAL DATA END ID Keepalive Keepalive sends a message to check that the link is still active or to keep it active Keepalive count The number of keepalive messages to send Keepalive idle The duration between two keepalive transmissions when in idle condition Keepalive interval The...

Page 76: ... endpoint should be the starting point of the stream Use the Mode drop down list to select the mode of operation of the endpoint The mode can be thought of as a transformation of the data as it leaves this endpoint For example if Endpoint A type is Serial port generic the Mode can be set to various Modbus server and client types This means that upon arrival at Endpoint A the data will be transform...

Page 77: ... 2 TCP Server Modbus Server Gateway ASCII Modbus Server Gateway RTU raw No dsm_data_mover Modbus Server Gateway functionality 1 Serial 8 RS232 9 RS485 10 RS422 7 User Executable Raw Raw Yes socat Send standard output of user executable program to serial port 2 TCP Server 3 TCP Client 4 UDP Server 5 UDP Client 7 User Executable Raw Raw Yes socat Send standard output of user executable program to TC...

Page 78: ...ial devices The PAD Daemon runs as a background process which can be accessed via the web configuration interface The PADD configuration page is located under Services PADD The PADD is used usually with multiple connections or when redundant connections are needed The PADD has two modes the PADD TCP IP Server mode and PADD TCP IP Client Mode When PADD is enabled both the PADD server mode and PADD ...

Page 79: ... system time and the interface status To configure SNMP 1 Click the SNMP toggle key to switch it to the ON position 2 Enter Read only community name and Read write community name which are used for client authentication Community names are used as a type of security to prevent access to reading and or writing to the routers configuration It is recommended that you change the Community names to som...

Page 80: ...ess to which SNMP data is to be sent 2 In the Heartbeat interval field enter the number of seconds between SNMP heartbeats 3 Use the Trap persistence field to specify the time in seconds that an SNMP trap persists 4 Use the Trap retransmission time to specify the length of time in seconds between SNMP trap retransmissions Figure 93 SNMP traps To send a manual SNMP Heartbeat click the Send heartbea...

Page 81: ...pplying configuration updates across networks to multiple CPEs TR 069 uses a bi directional SOAP HTTP based protocol based on the application layer protocol and provides several benefits for the maintenance of a field of CPEs Simplifies the initial configuration of a device during installation Enables easy restoration of service after a factory reset or replacement of a faulty device Firmware and ...

Page 82: ... the server to authenticate the CPE when it sends an inform message 4 In the ACS password and Verify ACS password fields enter the password used by the server to authenticate the CPE when it sends an inform message 5 In the Connection Request Username field enter the username that the CPE uses to authenticate the Auto Configuration Server during a connection request to the CPE 6 In the Connection ...

Page 83: ... while the router is connected to an APN providing a publicly routable IP address The OMA Lightweight M2M OMA LWM2M protocol was designed by the Open Mobile Alliance to provide remote device management specifically for M2M devices It is less taxing on the system and network than OMA DM and TR 069 OMA LWM2M runs over UDP and supports asynchronous notifications when a resource changes It provides Fi...

Page 84: ...s PSK or RPK This field is used to upload the key file used when security type is set to PSK delete the uploaded key file or show the currently stored key Respond to any IP When turned on this feature adds a firewall rule that allows the router to respond to any IP address on the designated port This eases the restrictions that requests must come from servers the client is currently registered wit...

Page 85: ...vices menu item then select the IO configuration menu item on the left Figure 96 IO configuration options ITEM DESCRIPTION IO configuration IO Functionality Enables the configuration of the input and output pins on the 2x2 Molex connector Pull up voltage Specifies the output voltage of the I O pins IO Manager Debug level Use the slide bar to adjust the level of detail you would like to see in the ...

Page 86: ... commonly used in hazardous or explosive locations where compact sensors are required When a pin is set to NAMUR mode Pull up is turned on and the global Pull up voltage is set to 8 2V These settings may not be changed for as long as a pin is set to NAMUR mode as they are required settings according to the NAMUR IEC 60947 5 6 standard The value column displays whether the signal received on the pi...

Page 87: ...e Notification configuration screen is used to select the event types methods of notification and the destinations for the notifications Up to four types of alerts for a particular event may be sent to a single destination profile containing the contact details To access the Event notification configuration page click the Services menu item select the Event configuration menu item on the left then...

Page 88: ...WWAN Cell ID change 6 Notification is sent if the router connects to a different cell marked by a changed in the Cell ID Cell ID changed 15224145 Cell ID changed 15224148 15224145 WWAN technology change 7 Notification is sent if the router connects to a different network technology e g 3G 2G WWAN network changed N A 3G UMTS WWAN network changed 3G UMTS 2G GSM Number of connected Ethernet interface...

Page 89: ...d new profiles Figure 98 Event destination list To add a new destination profile 1 Click the Add button at the top right corner of the window The Event destination edit screen is displayed 2 In the Destination name field enter a name for the destination profile then enter the contact details for the each type of destination i e Email address TCP address and port UDP address and port and or SMS num...

Page 90: ...end emails CC Optional Enter an email address which will be copied on all messages sent Email server address SMTP Enter the SMTP server address of the email server This may be an IP address or a hostname Email server port Enter the Email server s SMTP port Username Enter the username of the account to be used for sending emails Password Enter the password of the account to be used for sending emai...

Page 91: ...er or other mobile devices Ability to receive run time variables from the device e g uptime on request via SMS Ability to change live configuration on the device e g network username via SMS Ability to execute supported commands e g reboot via SMS Ability to trigger the NTC 140 01 router to download and install a firmware upgrade Ability to trigger the NTC 140 01 router to download and apply a con...

Page 92: ... Setup Settings SMS forwarding configuration Incoming text messages can be redirected to another mobile device and or a TCP UDP message server Redirect to mobile You can forward incoming text messages to a different destination number This destination number can be another mobile phone or a router phone number For Example If someone sends a text message and Redirect to mobile is set to 61412345678...

Page 93: ...ring a valid number for the current destination number field To add a destination number click the button and to remove the last destination in the list click the button Figure 101 SMS New Message Destination numbers should begin with the symbol followed by the country calling code To send a message to a destination number enter the symbol followed by the country calling code and then the destinat...

Page 94: ...e top menu bar select the SMS messaging menu on the left then select the Sent items menu item Figure 103 SMS Outbox ICON DESCRIPTION Forward button Click this button to open a new message window where you can forward the corresponding message to another recipient Reply button Click this button to open a new message window where you can reply to the sender Add to White list Click this button to add...

Page 95: ...scribed below Enable remote diagnostics and command execution Enables or disables the remote diagnostics feature If this setting is enabled all incoming text messages are parsed and tested for remote diagnostics commands If remote diagnostics commands are found the router executes those commands This feature is enabled by default All remote diagnostic commands that are received are stored in the I...

Page 96: ...nly allows execution of the basic commands listed later in this guide If this option is enabled you are able to execute advanced commands such as those which are common to the Linux command line For example execute ls usr bin sms to list the contents of the etc folder on the router Send acknowledgement replies to This option allows you to specify where to send acknowledgment messages after the exe...

Page 97: ... an additional level of security When a password is specified for a number the SMS diagnostic or command message is parsed for the password and will only be executed if the number and password match Figure 105 White list for diagnostic or execution SMS A maximum of 20 numbers can be stored on the router in the white list To add a number to the white list click the Add button Figure 106 Adding a nu...

Page 98: ...from any sender set the Only accept authenticated SMS messages toggle key to the OFF position Note An alternative method of adding a number to the white list is to send an SMS message to the router navigate to Services SMS messaging Inbox and then click the button next to the message which corresponds to the sender s number 5 Click the Save button Types of SMS diagnostic commands There are three t...

Page 99: ...ed command COMMAND Table 31 SMS Diagnostic Command Syntax Where VARIABLE is the name of the value to be read Where VARIABLE x is the name of another value to be read Where VALUE is the content to be written to the VARIABLE Where COMMAND is a supported command to be executed by the device e g reboot Where PASSWORD is the password if configured for the corresponding sender number specified in the Wh...

Page 100: ... check the currently activated profile and disconnect this profile before executing the command The router reports an error if no profile number is selected and there is no stored last active profile number 5 factorydefaults Performs a factory reset on the router Be aware that this command also clears the SMS white list on the router 6 download Performs a download and install of a Firmware Upgrade...

Page 101: ...connectreg get codconnectreg Returns the number of minutes that the router is configured to regularly attempt to connect set codrandomtime set codrandomtime 3 Sets the number of minutes that the router should randomise the dial time by get codrandomtime get codrandomtime Returns the number of minutes that the router is configured to randomise the dial time by set codverbose set codverbose 1 Sets v...

Page 102: ...t commands List of basic RDB variables The following table lists valid variables where x is a profile number 1 6 If no profile is specified variables are read from or written to for the current active profile If a profile is specified variables are read from or written to for the specified profile number x RDB VARIABLE NAME SMS VARIABLE NAME READ WRITE DESCRIPTION EXAMPLE VALUE 0 link profile 1 en...

Page 103: ...ng the get plmnscan command If the connection status is Up and connection mode is Always on the get plmnscan SMS will cause the connection to disconnect perform the scan send the result through SMS and then bring the connection back up again If the connection status is Down the router will perform the PLMN scan send the result and keep the connection status down If the connection status is Waiting...

Page 104: ...values for example Automatic 505 3 This response indicates that the operator network selection mode is Automatic and the network used is Vodafone AU SMS diagnostics examples The examples below demonstrate various combinations of supported commands This is not an exhaustive list and serves as an example of possibilities only DESCRIPTION AUTHENTICATION INPUT EXAMPLE Send SMS to change the data conne...

Page 105: ...firmware upgrade when firmware is located on FTP server Not required execute download ftp username password download com firmware_image cdi execute download ftp username password download com firmware_image_r cdi Required PASSWORD execute download ftp username password download com firmware_image cdi PASSWORD execute download ftp username password download com firmware_image_r cdi Send SMS to down...

Page 106: ... 37 SMS diagnostics example commands Generate set of public private keys on the host Not required execute ssh genkeys Required PASSWORD execute ssh genkeys Clear client public keys stored on host Not required execute ssh clearkeys Required PASSWORD execute ssh clearkeys ...

Page 107: ...7 System log file Log file Use the Display level drop down list to select a message level to be displayed The message levels are described in the table below To download the System log for offline viewing right click the Download button and choose Save as to save the file To clear the System log click the Clear button The downloaded log file is in Linux text format with carriage return CR only at ...

Page 108: ...stem menu item then select the Log menu on the left and finally select IPSec log beneath it Figure 108 IPSec log Use the Log level drop down list to specify the type of detail you want to capture in the log and then click the Save button When you change the logging level any active IPSec VPN tunnels will be disconnected as a change in logging level requires the IPSec service to be restarted To dow...

Page 109: ...roubleshooting any problems you may have with the Event notification feature To access the Event notification log page click on the System menu item then select the Log menu on the left and finally select Event notification log beneath it Figure 109 Event notification log Use the Download event notification history button to download the log file The Update event notification history button forces...

Page 110: ... other than debugging to avoid excessive wear on the memory Log capture level The log capture level defines the amount of detail that the system log stores This setting also affects the Display level setting on the System log page for example if this is set to a low level such as Error the System log will not be able to display higher log levels Remote syslog server The router can be configured to...

Page 111: ...ote syslog server configuration ITEM DEFINITION Debug Show extended system log messages with full debugging level details Info Show informational messages only Notice Show normal system logging information Error Show error condition messages only Table 38 System log detail levels ...

Page 112: ... protect your files just click on Save The router will then prompt you to select a location to save the settings file Note The following conditions apply It is NOT possible to edit the contents of the file downloaded if you modify the contents of the configuration file in any way you will not be able to restore it later You may change the name of the file if you wish but the filename extension mus...

Page 113: ...nd then updating the main firmware image Note In order to perform an update you must be logged into the router with the root manager account see the Advanced configuration section for more details To update the NTC 140 01 router s firmware 1 Power on the router as described in the Installing the router section 2 Log in to the router with the root user account See the Advanced configuration section...

Page 114: ...ded files section Click the Install link next to the recovery image to begin installing the recovery firmware image and then click OK on the confirmation window that appears Figure 115 Uploaded files 8 The recovery firmware image is flashed and when it is complete the router displays The firmware update was successful and returns to the main Upload screen Figure 116 Recovery firmware flash process...

Page 115: ...ry default settings of the router See the Restoring factory default settings section for more information Package manager The Package Manager page is used to provide details of any user installed packages on the router and allow them to be uninstalled For more information on application development contact NetComm Wireless about our Software Development Kit To access the Package manager page click...

Page 116: ...ion Settings page click on the System menu then the Administration menu on the left and then click on Administration Settings The Administration settings page is used to enable or disable protocols used for remote access and configure the passwords for the user accounts used to log in to the router Figure 119 Administration page ...

Page 117: ... disable remote HTTP access to the router You can also set the port you would like remote HTTP access to be available on HTTP management port Enter a port number between 1 and 65534 to use when accessing the router remotely Enable HTTPS Enable or disable remote HTTPS access to the router using a secure connection Remote HTTPS access port Enter a port number between 1 and 65534 to use when accessin...

Page 118: ...erical value used by an algorithm to alter information encrypt it making the information secure and visible only to those who have the corresponding key to recover decrypt the information The public key is used to encrypt information and can be distributed freely The private key is used to decrypt information and must be secret by its owner Each NTC 140 01 router contains a self signed digital cer...

Page 119: ...via GY Guyana NC New Caledonia TR Turkey BR Brazil HK Hong Kong NE Niger TT Trinidad and Tobago BS Bahamas HM Heard and McDonald Islands NF Norfolk Island TV Tuvalu BT Bhutan HN Honduras NG Nigeria TW Taiwan BV Bouvet Island HR Croatia Hrvatska NI Nicaragua TZ Tanzania BW Botswana HT Haiti NL Netherlands UA Ukraine BZ Belize HU Hungary NO Norway UG Uganda CA Canada ID Indonesia NP Nepal UM US Mino...

Page 120: ... The certificate takes several minutes to generate When the certificate has been generated you are informed that it has been successfully generated and installed The web server on the router restarts and you are logged out of the router Click OK to be taken back to the login screen Figure 121 New certificate successfully generated message ...

Page 121: ...rd authentication to log on Use a manually generated public private key pair to perform the authentication and allow users or programs to log in without using a password To access the SSH key management page click on the System menu then the Administration menu on the left and then click on SSH key management Figure 122 SSH Server Configuration SSH Server Configuration To configure the SSH server ...

Page 122: ...ter and their date and timestamp These public keys are provided in different formats including DSA RSA and ECDSA Each format has advantages and disadvantages in terms of signature generation speed validation speed and encryption decryption speed There are also compatibility concerns to consider with older clients when using ECDSA for example Generating new keys The complete set of keys can be re g...

Page 123: ...the left and finally select LED Operation Mode Figure 123 LED Operation Mode The Mode drop down list sets the operation mode of the LEDs on the front panel of the router To set the lights to operate at all times set this to Always on To set the lights to turn off after a specified period select Turn off after timeout When configured to turn off after timeout use the LED power off timer field to sp...

Page 124: ...mpt to restore connectivity We recommend using caution when implementing this feature in situations where the device is intentionally offline for a particular reason for example when Connect on demand has been enabled This is because the watchdog expects to be able to access the internet at all times and will always eventually reboot the router if access isn t restored by the time the various time...

Page 125: ... interval d If all 3 accelerated pings to the first destination address fail the router sends 3 pings to the second destination address at the Periodic Ping accelerated timer interval e If all 3 accelerated pings to the second destination address fail the router registers this as a fail and returns to step C f When the number of failures reaches the number configured in the Fail count field the ro...

Page 126: ...ction Disabling the Periodic Ping reset function To disable the Periodic Ping reset function set Fail count to 0 Note The traffic generated by the periodic ping feature is usually counted as chargeable data usage Please keep this in mind when selecting how often to ping Configuring a Periodic reboot The router can be configured to automatically reboot after a period of time specified in minutes Wh...

Page 127: ...e mode columns summarise the method used to sleep or wake the modem To access the Power management page click the System menu item then select the Power management menu item on the left Note When configuring multiple power profiles be careful so that they do not overlap or conflict with one another for example configuring a schedule which wakes up the unit when another profile has it scheduled to ...

Page 128: ... sleep at the time specified in the Schedule sleep at field regardless of the state of the ignition pin Enter the time in 24 hour format without the semi colon Figure 129 Sleep at scheduled time Sleep triggered by ignition pin This mode sets the router to enter sleep state when the signal on the ignition pin reaches the specified value Figure 130 Sleep triggered by ignition pin Use the Sleep when ...

Page 129: ...on pin Use the Wake up when ignition pin goes setting to select Low or High By default this is set to High Wake up at scheduled time When this mode is selected the router wakes up at the time specified in the Schedule wake up at field regardless of the state of the ignition pin Enter the time in 24 hour format without the semi colon Figure 132 Wake up at scheduled time Enter the time in seconds to...

Page 130: ...de or Host mode By default Automatic mode is set to ON allowing the router to intelligently choose the correct mode If you wish to manually override this selection you can turn off Automatic mode and set Host or Device mode yourself To access the USB OTG page click the System menu item then select the USB OTG menu item on the left Figure 133 USB OTG configuration ...

Page 131: ...ould generally only be used when debugging to avoid generating excessively long logs Authenticated access Username The username to be used for authenticated access to the storage device This is configured as smbuser and cannot be changed Password The password to be used for authenticated access to the storage device Verify password The password to be used for authenticated access to the storage de...

Page 132: ...m the top menu bar 2 Click the Reboot button from the menu on the left side of the screen Figure 135 Reboot menu option 3 The router displays a warning that you are about to perform a reboot If you wish to proceed click the Reboot button then click OK on the confirmation window which appears Figure 136 Reboot confirmation Note It can take up to 2 minutes for the router to reboot Logging out To log...

Page 133: ...emulator endpoint options 73 Table 20 CSD endpoint options 74 Table 21 TCP connect on demand endpoint options 75 Table 22 Data stream applications 77 Table 23 OMA Lightweight M2M configuration options 84 Table 24 IO configuration options 85 Table 25 IO pin modes 86 Table 26 Event notification configuration options 88 Table 27 Event notification event types 88 Table 28 Email client settings 90 Tabl...

Page 134: ...ettings ADMIN MANAGER ACCOUNT ROOT MANAGER ACCOUNT Username admin Username root Password tkemAx177a Password tkemAx177a Table 42 Web Interface Default Settings Note The admin manager account allows you to manage all settings of the router except functions such as firmware upgrade device configuration backup and restore and reset to factory default settings which are privileged only to the root man...

Page 135: ...ddress of the router default address is http 192 168 1 1 Login to the router using root as the User Name and admin as the password 2 Click the System item from the top menu bar then System configuration on the left menu and then click Settings backup and restore 3 Under the Restore factory defaults section click the Restore defaults button The router asks you to confirm that you wish to restore fa...

Page 136: ...ode Both systems have web interfaces that can be used to manipulate the other inactive system The NTC 140 01 Router starts up by default in the Main system mode however the router may be triggered to start in recovery mode if desired To start the router in recovery mode 1 Press and hold the physical reset button on the interface panel of the router for 5 to 15 seconds When the LEDs on the front pa...

Page 137: ...gger the recovery mode the IP and MAC address of the router and the status of the Ethernet port Figure 138 Recovery mode Status Log The log page displays the system log which is useful in troubleshooting problems which may have led to the router booting up in recovery mode The only functionality provided here is the ability to clear the system log filter by log level and downloading of the log fil...

Page 138: ... are able to either Install or Delete a file Figure 140 Recovery mode Application Installer Settings The settings page provides the option of restoring the router to factory default settings Click the Restore button to set the router back to the original factory settings Figure 141 Recovery mode Settings Reboot The reboot page allows you to reboot the router when you have finished using recovery m...

Page 139: ...uter using the Upload page Note Your key and certificate files must be named server key and server crt respectively otherwise they will not work To upload your certificate 1 Click on the System item from the top menu bar From the side menu bar select System Configuration and then Upload The file upload screen is displayed Figure 143 Upload page 2 Click the Choose a File button and locate your serv...

Page 140: ...he router Figure 145 Server certificate file uploaded 4 Repeat steps 2 and 3 for the server key file 5 Click the Install link next to the server crt file then click OK on the prompt that is displayed The certificate file is installed Repeat this for the key file When each file is installed it is removed from the list of stored files Figure 146 Installing the server crt file ...

Page 141: ... using the pin layout shown below Pin 8 1 Figure 147 The RJ 45 connector PIN COLOUR SIGNAL 10 100 SIGNAL 1000 1 White Orange stripe Rx DC BI_DA 2 Orange Solid Rx DC BI_DA 3 White Green stripe Tx DC BI_DB 4 Blue solid unused BI_DC 5 White Blue stripe unused BI_DC 6 Green solid Tx DC BI_DB 7 White Brown stripe unused BI_DD 8 Brown solid unused BI_DD Table 44 RJ 45 connector pin outs ...

Page 142: ...dware Interface The interface of the input output terminals are based on the circuit diagram below The Input Output label is the physical connection to the outside world There are protection devices and resistor dividers to condition the signal prior to it going into the processor The three labels to the right are the interface to the processor Output Enable activates the Transistor which provides...

Page 143: ...e integrator must be a qualified electrician if dealing with mains voltages controlled by this unit Open Collector Output driving a relay Any output can be configured to control a relay This is an example where the transistor will supply the ground terminal of the solenoid External voltage is supplied to the other side of the solenoid Logic level Output An output can be used with the pull up resis...

Page 144: ... will decode it in a certain way depending on your configuration Below is a contact closure type input which is detecting an Earth Pull up is activated for this to work The following input detects an input going high The turn on off threshold can be set in the software NAMUR Sensor A NAMUR sensor is a range of sensors which conform to the EN 60947 5 6 IEC 60947 5 6 standards They basically have tw...

Page 145: ...istor usually 250 ohms thus producing a voltage of 0v to 5V at the input The sensor would require an external power source which may or may not be the same as the unit itself It will also require an external resistor The internal pull up resistor is not activated Analogue Sensor with Thermistor Some sensors work by changing resistance due to a change such as temperature light etc These may be wire...

Page 146: ...ommwireless com v1 0 System Example Solar powered Router with battery backup The previous examples of wiring can be used to come up with a system The following test case is an example of how the I O s can be used to enhance a simple router setup ...

Page 147: ...settings menu item 3 Click the Enable Telnet toggle key so that it is in the ON position 4 Under the Telnet SSH account section enter a telnet password and then re enter it in the Confirm password field 5 Click the Save button at the bottom of the screen 6 Open a terminal client such as PuTTY and telnet to the router using its IP address 7 At the login prompt type root and press Enter At the passw...

Page 148: ... the network address of the router my router or 192 168 1 1 by default and press Enter The storage devices are labelled Disk A Disk B or Disk C Mac OS 1 In Mac OS open a Finder window 2 Select Go Connect to Server 3 Enter the server address smb my router or smb 192 168 1 1 4 Select the volumes you want to mount Storage devices are labelled Disk A Disk B or Disk C Linux Smartphones You can use any ...

Page 149: ...metteur radio peut fonctionner avec une antenne d un type et d un gain maximal ou inférieur approuvé pour l émetteur par Industrie Canada Dans le but de réduire les risques de brouillage radioélectrique à l intention des autres utilisateurs il faut choisir le type d antenne et son gain de sorte que la puissance isotrope rayonnée quivalente p i r e ne dépassepas l intensité nécessaire à l établisse...

Page 150: ... mark Foremost it refers to the safety rather than to the quality of the product Secondly CE Marking is mandatory for the product it applies to whereas most quality markings are voluntary Marking The product shall bear the CE mark the notified body number s as depicted to the right NOTE To comply with the RF exposure requirements this equipment must be operated with a minimum of 30 cm separation f...

Page 151: ...oélectrique subi même si le brouillage est susceptible d en compromettre le fonctionnement This Class B digital apparatus complies with Canadian CAN ICES 3 B NMB 3 B Cet appareil numérique de la classe B est conforme à la norme NMB 003 du Canada IMPORTANT NOTE IC radiation exposure statement This equipment complies with IC RSS 102 radiation exposure limits set forth for an uncontrolled environment...

Page 152: ...er such shutdown cool it in a well ventilated place before turning it on Please check local regulations for disposal of electronic products Do not operate the device where ventilation is restricted Installation and configuration should be performed by trained personnel only Do not use or install this product near water to avoid fire or shock hazard Avoid exposing the equipment to rain or damp area...

Page 153: ...with the operation of your medical device Hospitals Switch off your wireless device when requested to do so in hospitals clinics or health care facilities These requests are designed to prevent possible interference with sensitive medical equipment Interference in cars Please note that because of possible interference to electronic equipment some vehicle manufacturers forbid the use of devices in ...

Page 154: ...154 NetComm Wireless 4G M2M Router www netcommwireless com v1 0 Product Warranty For warranty information please visit http www netcommwireless com product m2m ntc 140 ...