NetComm NTC-40WV, User Manual

Page 1: ...User Guide NTC 40WV Industrial Indoor 3G Router with Voice ...

Page 2: ...nd of its useful life it must be taken to a recycling centre and processed separately from domestic waste The cardboard box the plastic contained in the packaging and the parts that make up this device can be recycled in accordance with regionally established regulations Never dispose of this electronic equipment along with your household waste You may be subject to penalties or sanctions under th...

Page 3: ...Dynamic DNS 62 Network time NTP 63 Data stream manager 64 Watchdogs 68 SNMP 71 TR 069 73 Auto Dial Configuration 75 USSD 76 SMS messaging 77 Diagnostics 81 Sending an SMS Diagnostic Command 84 System 92 Log 92 System Configuration 95 HTTPS key management 102 SSH Key Management 105 Appendix A Tables 109 Appendix B Default Settings 110 Restoring factory default settings 111 Appendix C Recovery mode ...

Page 4: ...e continuing with the installation of your NTC 40WV router please confirm that have the following A device with a working Ethernet network adapter A web browser such as Internet Explorer Mozilla Firefox or Google Chrome A flathead screwdriver if field terminated power is required Telephony Requirements Standard analogue PSTN or cordless PSTN phone handset DECT with an RJ 11 port ISDN phone handset...

Page 5: ...elemetry and WAN applications The integrated telephone adapter connects standard analogue phone handsets to the NTC 40WV It allows for phone calls to be made over the 3G UMTS network from inside the premise for a full landline replacement The device s powerful processor delivers optimal performance and it s embedded NetComm Linux OS and Software Development Kit SDK offers the end user the capabili...

Page 6: ...th 2x2 MIMO antenna technology Powerful processor for optimal performance on advanced 3G UMTS networks Ethernet 10 100 connectivity for universal deployment Analogue telephone connectivity CS Voice for complete landline replacement Supports SNMP with cellular specific MIB Flexible DC power input and to suit diverse installation environments Built in VPN clients for a secure connection over a publi...

Page 7: ...he cellular network DCD green Solid ON The green Data Carrier Detect LED illuminates to indicate a data connection Service Type green The green LED will illuminate when cellular network coverage is detected Solid ON 3G Indicates UMTS HSPA available coverage Flashing EDGE Indicates EDGE available coverage Off 2G Indicates GSM GPRS available coverage only RSSI green This green LED shows Received Sig...

Page 8: ...hone Cable Port Connect a PSTN telephone here in order to make calls via the 3G connection 4 RJ 45 Ethernet Port Connect an Ethernet cable here The RJ 45 Ethernet port has two LEDs a green LED indicating the link status and an amber one indicating the speed of the link When an Ethernet cable is connected and the link LED is illuminated the amber speed LED illuminates to indicate a 100Mbps connecti...

Page 9: ...than 15 seconds you can cancel the factory reset by removing the power source before releasing the button or by releasing the button and quickly pressing it once more 6 WiFi Antenna Port Connect one of the WiFi antennas here Table 4 Top Mounted interfaces Note The amber speed LED on the RJ 45 Ethernet port remains illuminated when no Ethernet cable is attached The reading of the speed LED is only ...

Page 10: ...with the gold side facing down into the SIM card bay and in the direction as shown below Press the SIM Eject button Figure 4 Inserting the SIM Card Setting Up the Cellular Router Attach the supplied antennas to the router by screwing them onto the antenna connectors Connect the power adapter to the mains and plug the output into the power jack of the router When power is correctly supplied to the ...

Page 11: ...wer via field terminated power source If an existing 9 28V DC power supply is available you can insert the wires into the supplied terminal block to power your router Use a flathead screwdriver to tighten the terminal block screws and secure the power wires making sure the polarity of the wires are correctly matched for your particular unit as illustrated below Installing the router After you have...

Page 12: ...ogin username and password If this is the first time you are logging in or you have not previously configured the password for the root or admin accounts you can use one of the default account details to log in ROOT MANAGER ACCOUNT Username root Password admin Table 6 Management account login details Root manager ADMIN MANAGER ACCOUNT Username admin Password admin Table 7 Management account login ...

Page 13: ...ou log in to the NTC 40WV router management console The status page shows System information LAN details Cellular connection status Packet data connection status and Advanced status details You can toggle the sections from view by clicking the or buttons to show or hide them Extra status boxes will appear as additional software features are enabled e g VPN connectivity Figure 7 The Status page ...

Page 14: ...The connection status of the active profile Default profile Indicates whether the current profile in use is the default profile WWAN IP The IP address assigned by the mobile broadband carrier network DNS server The primary and secondary DNS servers for the WWAN connection APN The Access Point Name currently in use Connection uptime The length of time of the current mobile connection session Advanc...

Page 15: ...www netcommwireless com NetComm Wireless NTC 40WV Industrial Indoor 3G Router with Voice 15 Module PRIID PRI part number The part number of the Module PRIID Table 8 Status page item details ...

Page 16: ...vides configuration options for Wireless WAN LAN Routing and VPN connectivity Data Connection The data connection page allows you to configure and enable disable the connection profile To access this page click on the Networking menu and under the Wireless WAN menu select the Data connection item Figure 8 Data connection settings ...

Page 17: ...able 9 Data connection item details Connecting to the mobile broadband network The router supports the configuration of up to six APN profiles these profiles allow you to configure the settings that the router will use to connect to the 2G 3G network and switch easily between different connection settings For advanced networking purposes you may activate a maximum of two profiles simultaneously de...

Page 18: ...cifies the number of times to attempt a network connection if the router fails to establish a connection It is set to 0 by default which causes the router to attempt to reconnect indefinitely 9 The Metric value is used by router to prioritise routes if multiple are available and is set to 20 by default This value is sufficient in most cases but you may modify it if you are aware of the effect your...

Page 19: ... not designate any particular traffic to be routed via this profile For more information on configuring Profile routing settings see the Setting a default gateway with two active connection profiles example 13 Click the Save button when you have finished entering the profile details Confirming a successful connection After configuring the packet data session and ensuring that it is enabled click o...

Page 20: ...an select the router to only connect on the network frequencies that suit your requirements Use the Change band drop down list to select the band you wish to use The following band settings options are available NTC 40WV WCDMA 900 2100 WCDMA All GSM ALL GSM 900 1800 All bands Table 10 Band settings It is not necessary to change the default setting of All bands in most cases In fact locking to a pa...

Page 21: ...t Select the most appropriate 3G service from the list shown and click Apply When Select operator mode is set to Automatic the router selects the most appropriate operator based on the inserted SIM card This is the default option and is sufficient for most users SIM security settings The SIM security settings page can be used for authenticating SIM cards that have been configured with a security P...

Page 22: ...d re use of the SIM elsewhere while still allowing the router to connect to the cellular service When this feature is enabled the PIN you enter when setting the Remember PIN feature is encrypted and stored locally on the router The next time the SIM asks the router for the PIN the router decrypts the PIN and automatically sends it to the SIM without user intervention When this feature is disabled ...

Page 23: ...www netcommwireless com NetComm Wireless NTC 40WV Industrial Indoor 3G Router with Voice 23 Figure 16 SIM security settings SIM unlock successful ...

Page 24: ... NTC 40WV Industrial Indoor 3G Router with Voice www netcommwireless com Enabling Disabling SIM PIN protection The security PIN protection can be turned on or off using the PIN protection toggle key Figure 17 PIN Settings ...

Page 25: ...the Change PIN button and enter the current PIN into the Current PIN and Confirm current PIN fields then enter the desired PIN into the New PIN and Confirm new PIN fields and click the Save button Figure 18 PIN settings Change PIN When the PIN has been changed successfully the following screen is displayed Figure 19 SIM security settings PIN unlock successful ...

Page 26: ...s PUK Personal Unblocking Key locked and you are requested to enter a PUK code to unlock it Note To obtain the PUK unlock code you must contactyour service provider You will be issued a PUK to enable you to unlock the SIM and enter a new PIN Enter the new PIN and PUK codes Click the Save button when you have finished entering the new PIN and PUK codes Figure 20 SIM security SIM PUK locked ...

Page 27: ...lly assigned cellular network DNS servers With DNS masquerading ON the DHCP server embedded in the NTC 40WV router hands out its own IP address e g 192 168 1 1 as the DNS server address to LAN clients The downstream clients then send DNS requests to the NTC 40WV router which proxies them to the upstream DNS servers With DNS masquerading OFF the DHCP server hands out the upstream DNS server IP addr...

Page 28: ...P relay is enabled This enables the NTC 40WV router to accept client broadcast messages and to forward them onto another subnet To configure the router to act as a DHCP relay agent click the DHCP relay toggle key to turn it ON and enter the DHCP server address into the DHCP server address field DHCP relay is disabled by default Figure 22 DHCP relay configuration DHCP configuration You can manually...

Page 29: ...otocol server DHCP option 150 This is used to configure Cisco IP phones When a Cisco IP phone starts if it is not pre configured with the IP address and TFTP address it sends a request to the DHCP server to obtain this information Specify the string which will be sent as a reply to the option 150 request DHCP option 160 This is used to configure Polycom IP phones When a Polycom IP phone starts if ...

Page 30: ...ent list displays a list of the DHCP clients If you want to reserve the current IP address for future use click the Clone button and the details will be copied to the address reservation list fields Remember to click the Save button under the Address reservation list section to confirm the configuration Figure 25 Dynamic DHCP client list ...

Page 31: ... Each mode represents one or more wireless network protocols Each wireless device will be capable of receiving some but possibly not all of wireless broadcast protocol types They are 802 11b g n mixed mode 802 11b only 802 11g only 802 11n only 802 11b g n mixed mode Frequency Channel Select the wireless channel that the wireless signal will broadcast on SSID The SSID Service Set IDentifier or Net...

Page 32: ...eless router broadcasts a beacon which is used to synchronize the wireless network Data Beacon Rate DTIM Enter a value in milliseconds between 1 and 255 for the Delivery Traffic Indication Message DTIM A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages Fragment Threshold This specifies the maximum size of a packet during the fragmentation o...

Page 33: ...re the client machines connect via Ethernet cable In Repeater mode the WDS access points communicate with each other and with wireless clients Below is an example of how to configure two NTC 40WV routers to use the Repeater mode WDS feature In this example Access Point 1 is connected to a mobile broadband network and Access Point 2 and its clients will connect to the internet through Access Point ...

Page 34: ...ice www netcommwireless com 3 Enable the DHCP Server on Access Point 1 Figure 30 WDS Access Point 1 DHCP Server Settings 4 Click Wireless Settings and then Basic Enter the required details as listed in the table below Figure 31 WDS Access Point 1 Repeater Mode Setup ...

Page 35: ... MAC address of Access Point 2 Figure 32 WDS Access Point 1 WDS Settings When you have entered the required information click Save Access Point 2 No connection to mobile broadband 1 Access Point 2 will act as a repeater for and provide internet access to its clients through Access Point 1 and therefore does not require a Mobile Broadband connection to be established Figure 33 WDS Aceess Point 2 St...

Page 36: ... DHCP Settings 4 Under Wireless Setup select the same frequency channel as you did for Access Point 1 Enter an SSID to identify Access Point 2 Copy the Network Authentication and Encryption settings from Access Point 1 Set Access Point 2 to Repeater mode and enter the MAC address of Access Point 1 in the AP MAC Address1 field The MAC address of Access Point 1 is listed on the same page under Wirel...

Page 37: ...www netcommwireless com NetComm Wireless NTC 40WV Industrial Indoor 3G Router with Voice 37 Figure 36 WDS Access Point 2 Repeater Mode Setup The Wireless Distribution System setup is now complete ...

Page 38: ... able to gain network access All other wireless client devices will be denied network access When the MAC filter is enabled with a Reject policy all wireless client devices listed whose MAC address is listed in the MAC filter list will be denied network access All other wireless client devices will be allowed network access Figure 37 MAC Filtering Station Info The Station Info page shows the numbe...

Page 39: ... device on the Ethernet subnet Adding Static Routes To add a new route to the static routing list click the Add button The Static routes page appears 1 In the Route name field type a name for the route so that it can be identified in the static routing list 2 From the Network interface drop down list select the interface for which you would like to create a static route 3 In the Destination IP add...

Page 40: ...s com Figure 40 Adding a static route Active routing list Static routes are displayed in the Active routing list Figure 41 Active routing list Deleting static routes From the static routing list click the icon to the right of the entry you wish to delete Figure 42 Deleting a static route ...

Page 41: ...uter on this network will know how to route to a device on the router s Ethernet subnet Static routes must be added manually according to your requirements See Adding Static Routes Note Some routers will ignore RIP Figure 43 RIP configuration To enable Routing Information Protocol RIP 1 Click the RIP toggle key to switch it to the ON position 2 Using the Version drop down list select the version o...

Page 42: ...er Identifier VRID which is different for each virtual router in the network This address is used by only one physical router at a time and is the only way that other physical routers can identify the master router within a virtual router Figure 44 VRRP configuration To configure VRRP configure multiple devices as follows and connect them all via an Ethernet network switch to downstream devices 1 ...

Page 43: ...o access the router or a wildcard IP address 0 0 0 0 that allows all IP addresses to access the router 4 The Source Port Range From and To fields are used to specify the port s on the source side that are to be forwarded This allows you to send a range of consecutive port numbers by entering the first in the range in the From field and the last in the range in the To field To forward a single port...

Page 44: ...ndustrial Indoor 3G Router with Voice www netcommwireless com Figure 46 Port forwarding settings To delete a port forwarding rule click the button on the Port forwarding list for the corresponding rule that you would like to delete ...

Page 45: ... avoid complex port forwarding rules but it exposes the device to untrusted networks as there is no filtering of what traffic is allowed and what is denied The DMZ configuration page is used to specify the IP Address of the device to use as the DMZ host Figure 47 DMZ configuration 1 Click the DMZ toggle key to turn the DMZ function ON 2 Enter the IP Address of the device to be the DMZ host into th...

Page 46: ... on the Networking page the firewall takes a low priority The priority of the firewall can be described as DMZ MAC IP Port filtering rules MAC IP Port filtering default rule Router firewall rules In other words the firewall is of the lowest priority when compared to other manual routing configurations Therefore a MAC IP Port filtering rule takes priority in the event that there is a conflict of ru...

Page 47: ...t you have first added a filtering rule which allows at least one known MAC IP to access the router otherwise you will not be able to access the user interface of the router without resetting the router to factory default settings Creating a MAC IP Port filtering rule To create a filtering rule 1 Click the MAC IP Port filtering toggle key to switch it to the ON position 2 Using the Default rule in...

Page 48: ...UDP UDP TCP or ICMP Source MAC Address Enter the MAC address in six groups of two hexadecimal digits separated by colons e g 00 40 F4 CE FA 1E Source IP Address Enter the IPv4 address that the traffic originates from and the subnet mask using CIDR notation Destination IP Address Enter the IPv4 address that the traffic is destined for and the subnet mask using CIDR notation Action Select the action...

Page 49: ...r the different VPN connection types Note The following descriptions are an overview of the various VPN options available More detailed instructions are available in separate whitepapers on the NetComm Wireless website IPSec IPSec operates on Layer 3 of the OSI model and as such can protect higher layered protocols IPSec is used for both site to site VPN and Remote Access VPN The NTC 40WV router s...

Page 50: ...50 NetComm Wireless NTC 40WV Industrial Indoor 3G Router with Voice www netcommwireless com Figure 54 IPSec profile edit ...

Page 51: ...er Detection action This is the action to take when a dead Internet Key Exchange Peer is detected DPD keep alive time Enter the time in seconds for the interval between Dead Peer Detection keep alive messages DPD timeout Enter the time in seconds of no response from a peer before Dead Peer Detection times out IKE re key time Enter the time in seconds between changes of the encryption key To disabl...

Page 52: ...configure an OpenVPN Server 1 Click the OpenVPN profile toggle key to switch it to the ON position 2 Type a name for the OpenVPN server profile you are creating 3 Select OpenVPN connection type TUN TAP Default is TUN 4 Use the Server port field to select a port number and then use the drop down list to select a packet type to use for your OpenVPN Server The default OpenVPN port is 1194 and default...

Page 53: ...e file depending on which format you would like If for some reason the integrity of your network has been compromised you can return to this screen and use the Certificate drop down list to select the certificate and then press the Revoke button to disable it Optional To inform the OpenVPN server of the network address scheme of the currently selected certificate enter the network address and netw...

Page 54: ...54 NetComm Wireless NTC 40WV Industrial Indoor 3G Router with Voice www netcommwireless com Figure 57 OpenVPN server profile settings ...

Page 55: ... not be received by the client network because it is not aware of the remote client s subnet When you have finished entering all the required information click Save to finish configuring the OpenVPN server Configuring an OpenVPN Client 1 Click the OpenVPN profile toggle key to switch it to the ON position 2 In the Profile name field type a name for the OpenVPN client profile you are creating 3 In ...

Page 56: ...it to the router Figure 59 OpenVPN client Certificate upload Username Password Authentication Enter the username and password to authenticate with the OpenVPN server Figure 60 OpenVPN Client Username Password section Certificate and Username Password This mode authenticates using both a certificate and a username password Enter the username and password then use the drop down list to select the de...

Page 57: ...UDP 5 In the Local IP Address and Remote IP Address fields enter the respective local and remote IP addresses to use for the OpenVPN tunnel The slave should have the reverse settings of the master 6 Under the Remote network section enter the network Address and network Subnet mask The Network Address and Network Mask fields inform the Master node of the LAN address scheme of the slave 7 Press the ...

Page 58: ...es on Layer 2 of the OSI model and is included on Windows computers Configuring the PPTP Client To configure the PPTP client 1 From the menu bar at the top of the screen click Networking and then from the VPN section on the left side of the screen click PPTP client The PPTP client list is displayed Figure 63 PPTP client list 2 Click the Add button to begin configuring a new PPTP client profile The...

Page 59: ... 9 The Use peer DNS option allows you to select whether the remote clients will use the Domain Name Server of the PPTP server Click the toggle key to set this to ON or OFF as required 10 NAT masquerading allows the router to modify the packets sent and received to inform remote computers on the internet that packets originating from a machine behind the router actually originated from the WAN IP a...

Page 60: ...ishes the VPN tunnel GRE is used to securely encapsulate the data or payload Configuring GRE tunnelling To configure GRE tunnelling 1 From the menu bar at the top of the screen click Networking and then from the VPN section on the left side of the screen click GRE The GRE client list is displayed Figure 65 GRE client list 2 Click the Add button to begin configuring a new GRE tunnelling client prof...

Page 61: ...ches zero before the datagram arrives at its destination the data packet is discarded and an error message is sent back to the sender 11 The Verbose logging option sets the router to output detailed logs regarding the GRE tunnel in the System Log section of the router interface 12 The Reconnect delay is the time in seconds that the router will wait before attempting to connect to the GRE server in...

Page 62: ...figure dynamic DNS 1 Click the DDNS configuration toggle key to switch it to the ON position 2 From the Dynamic DNS drop down list select the Dynamic DNS service that you wish to use The available DDNS services available are www dhs org www dyndns org www dyns cx www easydns com www justlinux com www ods org www tzo com www zoneedit com 3 Enter your hostname in Host name field 4 In the Username an...

Page 63: ... accurate use the Time zone drop down list to select the correct time zone for the router If the selected zone observes daylight savings time a Daylight savings time schedule link appears below the drop down list Click the link to see the start and end times for daylight savings 2 When you have selected the correct time zone click the Save button to save the settings Configuring NTP settings To co...

Page 64: ...am 1 Click the Add button on the right side of the page Figure 69 Data stream list 1 Click the Activate toggle key so that it is in the ON position Figure 70 Activate button 2 In the Data stream name field enter a name to identify the mapping on the Data stream list 3 Under the Endpoint A section use the Type drop down list to select the desired input port for example Serial SMS messaging or GPS U...

Page 65: ...www netcommwireless com NetComm Wireless NTC 40WV Industrial Indoor 3G Router with Voice 65 Figure 71 Data stream list Below are some configuration examples of how the Data stream manager can be used ...

Page 66: ...Voice www netcommwireless com Sending Serial data to an IP network This example demonstrates common settings for sending raw traffic out of an attached USB to Serial cable to a TCP IP server running on the router Figure 72 Data stream manager Serial to IP example ...

Page 67: ...Voice 67 Sending an incoming SMS to an IP network This example shows a configuration allowing received SMS messages to be forwarded to a TCP client running on the router which sends the SMS message to TCP server 123 45 67 89 on port 2000 Figure 73 Data stream manager SMS to IP example ...

Page 68: ...st resort attempt to restore connectivity We recommend using caution when implementing this feature in situations where the device is intentionally offline for a particular reason for example when Connect on demand has been enabled This is because the watchdog expects to be able to access the internet at all times and will always eventually reboot the router if access isn t restored by the time th...

Page 69: ...celerated timer interval d If all 3 accelerated pings to the first destination address fail the router sends 3 pings to the second destination address at the Periodic Ping accelerated timer interval e If all 3 accelerated pings to the second destination address fail the router registers this as a fail and returns to step C f When the number of failures reaches the number configured in the Fail cou...

Page 70: ...bling the Periodic Ping reset function To disable the Periodic Ping reset function set Fail count to 0 Note The traffic generated by the periodic ping feature is usually counted as chargeable data usage Please keep this in mind when selecting how often to ping Configuring a Periodic reboot The router can be configured to automatically reboot after a period of time specified in minutes While this i...

Page 71: ...k the SNMP toggle key to switch it to the ON position 2 Enter Read only community name and Read write community name which are used for client authentication Community names are used as a type of security to prevent access to reading and or writing to the routers configuration It is recommended that you change the Community names to something other than the default settings when using this feature...

Page 72: ...ter the IP address to which SNMP data is to be sent 2 In the Heartbeat interval field enter the number of seconds between SNMP heartbeats 3 Use the Trap persistence field to specify the time in seconds that an SNMP trap persists 4 Use the Trap retransmission time to specify the length of time in seconds between SNMP trap retransmissions Figure 77 SNMP traps To send a manual SNMP Heartbeat click th...

Page 73: ...ficient in applying configuration updates across networks to multiple CPEs TR 069 uses a bi directional SOAP HTTP based protocol based on the application layer protocol and provides several benefits for the maintenance of a field of CPEs Simplifies the initial configuration of a device during installation Enables easy restoration of service after a factory reset or replacement of a faulty device F...

Page 74: ... password and Verify ACS password fields enter the Auto Configuration Server password 5 In the Connection Request Username field enter the username to use for the connection requests 6 In the Connection Request Password and Verify password fields enter the connection request password 7 The inform message acts as a beacon to inform the ACS of the existence of the router Click the Enable periodic AC...

Page 75: ...NTC 40WV Industrial Indoor 3G Router with Voice 75 Auto Dial Configuration Using the Auto Dial function you can configure the router to automatically dial a pre defined phone number when the handset is lifted Figure 79 Auto Dial Configuration ...

Page 76: ...fied by your carrier for these various services Once a special code is sent to the network the network responds with the requested information The response often includes instructions for sending additional follow on messages allowing further functionality e g entering credit card information for a credit recharge Please contact your network provider to learn which codes can be used on your networ...

Page 77: ... TCP UDP server or other mobile devices Ability to receive run time variables from the device e g uptime on request via SMS Ability to change live configuration on the device e g network username via SMS Ability to execute supported commands e g reboot via SMS Ability to trigger the NTC 40WV router to download and install a firmware upgrade Ability to trigger the NTC 40WV router to download and ap...

Page 78: ... Table 15 SMS Setup Settings SMS forwarding configuration Incoming text messages can be redirected to another mobile device and or a TCP UDP message server Redirect to mobile You can forward incoming text messages to a different destination number This destination number can be another mobile phone or a 3G router phone number For Example If someone sends a text message and Redirect to mobile is se...

Page 79: ... a destination number click the button and to remove the last destination in the list click the button Figure 82 SMS New Message Destination numbers should begin with the symbol followed by the country calling code To send a message to a destination number enter the symbol followed by the country calling code and then the destination number For example To send a message to the mobile destination n...

Page 80: ...ton Click this button to open a new message window where you can forward the corresponding message to another recipient Reply button Click this button to open a new message window where you can reply to the sender Add to White list Click this button to add the sender s mobile number to the white list on the router Delete button Click this button to delete the corresponding message Refresh button C...

Page 81: ...is page are described below Enable remote diagnostics and command execution Enables or disables the remote diagnostics feature If this setting is enabled all incoming text messages are parsed and tested for remote diagnostics commands If remote diagnostics commands are found the router executes those commands This feature is enabled by default All remote diagnostic commands that are received are s...

Page 82: ...ned off and only allows execution of the basic commands listed later in this guide If this option is enabled you are able to execute advanced commands such as those which are common to the Linux command line For example execute ls usr bin sms to list the contents of the etc folder on the router Send acknowledgement replies to This option allows you to specify where to send acknowledgment messages ...

Page 83: ... number to give an additional level of security When a password is specified for a number the SMS diagnostic or command message is parsed for the password and will only be executed if the number and password match Figure 86 White list for diagnostic or execution SMS A maximum of 20 numbers can be stored on the router in the white list To add a number to the white list click the Add button Figure 8...

Page 84: ...ostic commands from any sender set the Only accept authenticated SMS messages toggle key to the OFF position Note An alternative method of adding a number to the white list is to send an SMS message to the router navigate to Services SMS messaging Inbox and then click the button next to the message which corresponds to the sender s number 5 Click the Save button Types of SMS diagnostic commands Th...

Page 85: ...ssfully executed command COMMAND Table 17 SMS Diagnostic Command Syntax Where VARIABLE is the name of the value to be read Where VARIABLE x is the name of another value to be read Where VALUE is the content to be written to the VARIABLE Where COMMAND is a supported command to be executed by the device e g reboot Where PASSWORD is the password if configured for the corresponding sender number speci...

Page 86: ...ofile Reports an error if no profile number is selected and there is no currently activated profile 4 pdpup Reconnects the PDP If a profile number is selected in the command the router tries to connect with the specified profile If no profile number is selected the router tries to connect to the last active profile The gateway will check the currently activated profile and disconnect this profile ...

Page 87: ...tocol to protocol 1 2 or both 1 2 get ssh passauth get ssh passauth Returns the status of the SSH Enable password authentication option set ssh passauth set ssh passauth 1 Sets the SSH Enable password authentication option on or off get ssh keyauth get ssh keyauth Returns the status of the SSH Enable key authentication option set ssh keyauth set ssh keyauth 1 Sets the SSH Enable key authentication...

Page 88: ...lable operator which may be selected 2 Indicates a forbidden operator which may not be selected applies only to generic SIM cards 4 Indicates the currently selected operator Table 22 Operator status codes returned by get plmnscan SMS command Notes about the network connection status when using the get plmnscan command If the connection status is Up and connection mode is Always on the get plmnscan...

Page 89: ...manual selection with respect to the set command and includes the final MNC MCC that was configured Confirming the currently configured operator and network type You can retrieve the currently configured operator and network type using the get forceplmn command The get forceplmn command returns the operator and network type selection mode Automatic Manual in addition to the MCC and MNC values for ...

Page 90: ...wakeup Send SMS to perform firmware upgrade when firmware is located on HTTP server Not required execute download http download com 8080 firmware_image cdi execute download http download com 8080 firmware_image_r cdi Required PASSWORD execute download http download com 8080 firmware_image cdi PASSWORD execute download http download com 8080 firmware_image_r cdi Send SMS to perform firmware upgrade...

Page 91: ...tion status Not required get ssh passauth Required PASSWORD get ssh passauth Enable disable password authentication on host Not required set ssh passauth 1 or set ssh passauth 0 Required PASSWORD set ssh passauth 1 or PASSWORD set ssh passauth 0 Generate set of public private keys on the host Not required execute ssh genkeys Required PASSWORD execute ssh genkeys Clear client public keys stored on ...

Page 92: ... in the table below To download the System log for offline viewing right click the Download button and choose Save as to save the file To clear the System log click the Clear button The downloaded log file is in Linux text format with carriage return CR only at the end of a line therefore in order to be displayed correctly with new lines shown it is recommended to use a text file viewer which disp...

Page 93: ...accepts and displays the log data Most syslog servers can also save the log data to a file on the computer on which it is running allowing you to ensure that no log data is lost between reboots To configure the NTC 40WV router to output log data to a remote syslog server 1 Click on the System menu from the top menu bar The System log item is displayed 2 Under the Remote syslog server section enter...

Page 94: ...oblems you may have with the IPSec VPN Figure 90 IPSec log Use the Log level drop down list to specify the type of detail you want to capture in the log and then click the Save button When you change the logging level any active IPSec VPN tunnels will be disconnected as a change in logging level requires the IPSec service to be restarted To download the IPSec log click the Download IPSec log butto...

Page 95: ...a location to save the settings file Note The following conditions apply It is NOT possible to edit the contents of the file downloaded if you modify the contents of the configuration file in any way you will not be able to restore it later You may change the name of the file if you wish but the filename extension must remain as cfg Restore your backup configuration 1 In the web configuration inte...

Page 96: ... image firmware and then updating the main firmware image Note In order to perform an update you must be logged into the router with the root manager account see the Advanced configuration section for more details To update the NTC 40WV router s firmware 1 Power on the router as described in the Installing the router section 2 Log in to the router with the root user account See the Advanced config...

Page 97: ...ed in the Uploaded files section Click the Install link next to the recovery image to begin installing the recovery firmware image and then click OK on the confirmation window that appears Figure 94 Uploaded files 8 The recovery firmware image is flashed and when it is complete the router displays The firmware update was successful and returns to the main Upload screen Figure 95 Recovery firmware ...

Page 98: ...hen the router s LEDs are flashing as this is when the firmware update is in process 10 The installation is complete when the countdown reaches zero The router attempts to redirect you to the Status page Figure 96 Installing main firmware image 11 Hold down the reset button on the router for more than 15 seconds when all LEDs stop flashing to reboot and restore the factory default settings of the ...

Page 99: ...lled For more information on application development contact NetComm Wireless about our Software Development Kit Figure 97 Software applications manager The Application name Version number of the application the architecture type and time of installation are all displayed Clicking the Package details link will display a pop up window with further details of the package To uninstall any software ap...

Page 100: ...nistration Settings page click on the System menu then the Administration menu on the left and then click on Administration Settings The Administration settings page is used to enable or disable protocols used for remote access and configure the passwords for the user accounts used to log in to the router Figure 98 Administration page ...

Page 101: ... on HTTP management port Enter a port number between 1 and 65534 to use when accessing the router remotely Enable HTTPS Enable or disable remote HTTPS access to the router using a secure connection Remote HTTPS access port Enter a port number between 1 and 65534 to use when accessing the router remotely over a secure HTTPS connection Enable Telnet Enable or disable remote telnet command line acces...

Page 102: ...r of public and private keys on both sides of the connection In cryptography a key refers to a numerical value used by an algorithm to alter information encrypt it making the information secure and visible only to those who have the corresponding key to recover decrypt the information The public key is used to encrypt information and can be distributed freely The private key is used to decrypt inf...

Page 103: ...t Timor BO Bolivia GY Guyana NC New Caledonia TR Turkey BR Brazil HK Hong Kong NE Niger TT Trinidad and Tobago BS Bahamas HM Heard and McDonald Islands NF Norfolk Island TV Tuvalu BT Bhutan HN Honduras NG Nigeria TW Taiwan BV Bouvet Island HR Croatia Hrvatska NI Nicaragua TZ Tanzania BW Botswana HT Haiti NL Netherlands UA Ukraine BZ Belize HU Hungary NO Norway UG Uganda CA Canada ID Indonesia NP N...

Page 104: ...enerate button The certificate takes several minutes to generate When the certificate has been generated you are informed that it has been successfully generated and installed The web server on the router restarts and you are logged out of the router Click OK to be taken back to the login screen Figure 100 New certificate successfully generated message ...

Page 105: ...erated public private key pairs to encrypt the network connection and then use password authentication to log on Use a manually generated public private key pair to perform the authentication and allow users or programs to log in without using a password Figure 101 SSH Server Configuration SSH Server Configuration To configure the SSH server settings 1 Use the SSH Protocol drop down list to select...

Page 106: ...he current public keys on the router and their date and timestamp These public keys are provided in different formats including DSA RSA and ECDSA Each format has advantages and disadvantages in terms of signature generation speed validation speed and encryption decryption speed There are also compatibility concerns to consider with older clients when using ECDSA for example Generating new keys The...

Page 107: ...t panel of the router To set the lights to operate at all times set this to Always on To set the lights to turn off after a specified period select Turn off after timeout When configured to turn off after timeout use the LED power off timer field to specify the time in minutes to wait before turning off the LED indicators The LED Power Off Timer must be an integer between 1 and 65535 The wait peri...

Page 108: ... menu item from the top menu bar 2 Click the Reboot button from the menu on the left side of the screen Figure 103 Reboot menu option 3 The router displays a warning that you are about to perform a reboot If you wish to proceed click the Reboot button then click OK on the confirmation window which appears Figure 104 Reboot confirmation Note It can take up to 2 minutes for the router to reboot Logg...

Page 109: ...ct 48 Table 14 IPSec Configuration Items 51 Table 15 SMS Setup Settings 78 Table 16 Inbox Outbox icons 80 Table 17 SMS Diagnostic Command Syntax 85 Table 18 List of basic SMS diagnostic commands 86 Table 19 List of get set commands 87 Table 20 List of basic SMS diagnostics RDB variables 88 Table 21 Network types returned by get plmnscan SMS command 88 Table 22 Operator status codes returned by get...

Page 110: ... Management Default Settings ADMIN MANAGER ACCOUNT ROOT MANAGER ACCOUNT Username admin Username root Password admin Password admin Table 27 Web Interface Default Settings Note The admin manager account allows you to manage all settings of the router except functions such as firmware upgrade device configuration backup and restore and reset to factory default settings which are privileged only to t...

Page 111: ...iguration on the left menu and then click Settings backup and restore 3 Under the Restore factory defaults section click the Restore defaults button The router asks you to confirm that you wish to restore factory defaults Click OK to continue The router sets all settings to default Click OK again to reboot the router 4 When the Power light returns to a steady red the reset is complete The default ...

Page 112: ...oblem Accessing recovery mode Both systems have web interfaces that can be used to manipulate the other inactive system The NTC 40WV Router starts up by default in the Main system mode however the router may be triggered to start in recovery mode if desired To start the router in recovery mode 1 Press and hold the physical reset button on the interface panel of the router for 5 to 15 seconds When ...

Page 113: ...od used to trigger the recovery mode the IP and MAC address of the router and the status of the Ethernet port Figure 106 Recovery mode Status Log The log page displays the system log which is useful in troubleshooting problems which may have led to the router booting up in recovery mode The only functionality provided here is the ability to clear the system log filter by log level and downloading ...

Page 114: ...files list you are able to either Install or Delete a file Figure 108 Recovery mode Application Installer Settings The settings page provides the option of restoring the router to factory default settings Click the Restore button to set the router back to the original factory settings Figure 109 Recovery mode Settings Reboot The reboot page allows you to reboot the router when you have finished us...

Page 115: ...e NTC 40WV router using the Upload page Note Your key and certificate files must be named server key and server crt respectively otherwise they will not work To upload your certificate 1 Click on the System item from the top menu bar From the side menu bar select System Configuration and then Upload The file upload screen is displayed Figure 111 Upload page 2 Click the Choose a File button and loc...

Page 116: ...les stored on the router Figure 113 Server certificate file uploaded 4 Repeat steps 2 and 3 for the server key file 5 Click the Install link next to the server crt file then click OK on the prompt that is displayed The certificate file is installed Repeat this for the key file When each file is installed it is removed from the list of stored files Figure 114 Installing the server crt file ...

Page 117: ... 247Kbps Uplink Uplink 5 76 Mbps HSPA Evolution EDGE GPRS 247Kbps Connectivity 1x Fast Ethernet 10 100Base TX w Auto MDIX 1x Voice port RJ 11 SIM Card Reader Locking Tray for SIM SIM in Mini SIM card format 25 00 x 15 00 x 0 76 mm Antenna connectors Cellular 2 x detachable SMA MIMO WLAN 2 x detachable Reverse SMA MIMO LED Indicators 5x LEDs Power Service Tx Rx DCD and RSSI Operating Temperature No...

Page 118: ...fore you start making any phone calls make sure you have checked the following You have an activated 3G SIM card inserted prior to powering on the NTC 40WV 1 Your NTC 40WV is powered on and in running condition 2 A working analogue telephone connected into the Line port 3 You hear the dial tone after lifting the handset How to place a call To make a call simply lift the handset and dial the number...

Page 119: ...s Caller ID Test Steps 1 Dial 31 Hang up and then out call a mobile phone The router phone s number should be blocked 2 Dial 31 Hang up and then out call a mobile phone The router phone s number should be shown Call Waiting Call waiting allows for indication and answering of an incoming telephone whilst an existing call is underway To disable call waiting dial 43 and hang up after you hear 2 high ...

Page 120: ...p after you hear 2 low pitch beeps To disable Call Forwarding Busy dial 24 Hang up after you hear 2 high pitch beeps To check the status of Call Forwarding Busy dial 24 or view the advanced status page of the management console o Call Forwarding Busy is disabled if you hear 2 high pitch beeps o Call Forwarding Busy is enabled if you hear 2 low pitch beeps Call Forwarding Not Reachable Call forward...

Page 121: ...w can I fix this To resolve this issue try the following 1 Verify that the RJ 11 cable is securely connected and not damaged 2 Try to remove any telephone splitters from the connection between your phone and theNTC 40WV 3 Try rebooting your NTC 40WV List of Mobile Broadband Service Provider APNs MOBILE SERVICE APN Australia Telstra telstra internet Optus Postpaid connect Optus Prepaid preconnect T...

Page 122: ...sed in accordance with the instructions detailed within this manual may cause interference to radio communications However there is no guarantee that interference will not occur with the installation of this product in your home or office If this equipment does cause some degree of interference to radio or television reception which can be determined by turning the equipment off and on we encourag...

Page 123: ...r Protection Laws which cannot be excluded see Section 3 above the Product Warranty is automatically voided if 1 you or someone else use the product or attempt to use it other than as specified by NetComm Wireless Limited 2 the fault or defect in your product is the result of a voltage surge subjected to the product either by the way of power supply or communication line whether caused by thunders...

Page 124: ...r 3G Router with Voice www netcommwireless com Contact Address NETCOMM WIRELESS LIMITED Head Office PO Box 1200 Lane Cove NSW 2066 Australia Phone 61 0 2 9424 2070 Fax 61 0 2 9424 2010 Email sales netcommwireless com techsupport netcommwireless com ...