ORiNG IGMG-P83244GC+-D4G, User Manual

Page 1: ...m without the prior written consent of ORing Industrial Networking Corp I IG GM MG G P P8 83 32 24 44 4G GC C D D4 4G G I In nd du us st tr ri ia al l C Ce el ll lu ul la ar r M M2 2M M G Ga at te ew wa ay y U Us se er r M Ma an nu ua al l V Ve er rs si io on n 1 1 0 0 M Ma ar rc ch h 2 20 01 19 9 w ww ww w o or ri in ng gn ne et t c co om m ...

Page 2: ...ons or repairs done by persons other than ORing approved personnel and this warranty does not apply to ORing products that are misused abused improperly installed or damaged by accidents Please refer to the Technical Specifications section for the actual warranty period s of the product s associated with this publication DISCLAIMER Information in this publication is intended to be accurate ORing s...

Page 3: ...2 Wall Mounting 5 3 3 Wiring 7 ATTENTION 7 3 3 1 Grounding 7 3 3 2 Fault Relay 7 3 3 3 Redundant Power Inputs 7 3 4 SIM Card Installation 8 Cables and Antenna 9 4 1 Ethernet Pin Definition 9 4 2 Serial Port Pin Definition 10 4 3 Cellular Antenna 11 Management 12 5 1 Network Connection 12 5 2 Configuration 13 5 2 1 Basic Setting 13 5 2 1 1 WAN 13 5 2 1 2 LAN 17 5 2 1 3 DHCP 18 5 2 1 6 DDNS 21 5 2 1...

Page 4: ... 50 5 2 3 1 Login Setting 50 5 2 3 2 Router Restart 51 5 2 3 3 Firmware Upgrade 52 5 2 3 4 Save Restore Configurations 52 5 2 3 5 Remote Management 53 5 2 3 6 Miscellaneous 54 5 2 3 7 Port Setting 54 5 2 3 8 Event Warning 55 5 2 3 9 Disk 59 5 2 7 System Status 60 5 2 4 1 System Info 60 5 2 4 2 System Log 60 5 2 4 3 Traffic Statistics 60 Technical Specifications 62 Compliance 64 ...

Page 5: ...ing all in one solutions to help user build up highly reliable and user friendly SCADA and IOT system for variant industrial automation applications IGMG P83244GC D4G also supports VPN client server including IPsec OPENSSL VPN It can provide remote access service through ORing PaaS platform and NAT firewall to protect networking security 1 2 Software Features Support Open VPN PPTP VPN Versatile mo...

Page 6: ...he following ports and features on the front panel Port Description 10 100 1000Base T X Ethernet ports 4 x 10 100 1000 Base T X ports supporting auto negotiation Gigabit Combo port with 10 100 1000Base T X and 100 1000Base X SFP ports 4 x 10 100 1000Base T X and 100 1000Base X SFP ports SIM card slot 2 x SIM card slot Serial port 1 x RS 422 RS 485 serial port 1 x RS 232 RS 422 RS 485 serial port ...

Page 7: ...unning at 1000Mbps Amber On Port running at 100Mbps Green Amber Off Port running at 10Mbps Fault Amber On Fault relay power failure or port disconnected 1 Cellular 1 antenna connector 2 WiFi connection LED 3 Storage LED 4 Ring Master LED 5 Ring LED 6 SIM 1 card slot 7 SIM 2 card slot 8 SIM card slot 9 WAN port P o E port 10 Ethernet port 11 Serial port 1 TX RX LED 12 Serial port 2 TX RX LED 13 Pow...

Page 8: ...en On WLAN is activated Strength 1 25 2 50 3 75 4 100 Blinking Transmitting data 2 2 Top Panel Below are the top panel components of the device 1 Serial port 1 RS 422 RS 485 2W 4W 2 Terminal Block PWR1 PWR2 Relay 2 3 Rear Panel 1 Wall mount screw holes 2 DIN rail screw holes ...

Page 9: ...IN Rail DIN rail Measurement Unit mm Installing the device on the DIN rail is easy First screw the Din rail kit onto the back of the device right in the middle of the back panel Then slide the device onto a DIN rail from the Din rail kit and make sure the device clicks into the rail firmly 3 2 Wall Mounting Besides Din rail the device can be fixed to the wall via a wall mount panel which can be fo...

Page 10: ...es of wall mount kits onto both ends of the rear panel of the switch A total of six screws are required as shown below Step 2 Use the switch with wall mount plates attached as a guide to mark the correct locations of the four screws Step 3 Insert a screw through the cross shaped aperture on the plate and then slide the switch downwards Tighten the screw for added stability ...

Page 11: ...nications wiring and power wiring through the same wire conduit To avoid interference wires with different signal characteristics should be routed separately 6 You can use the type of signal transmitted through a wire to determine which wires should be kept separate The rule of thumb is that wiring sharing similar electrical characteristics can be bundled together 7 You should separate input wirin...

Page 12: ...ive positive wires into the V V terminals respectively Step 2 to keep the DC wires from pulling loose use a small flat blade screwdriver to tighten the wire clamp screws on the front of the terminal block connector 3 4 SIM Card Installation After disconnecting the power of the device 1 Un fasten the screws 2 Remove the cover Note only remove the cover for SIM card installation DO NOT remove the co...

Page 13: ...Cable Type Max Length Connector 10Base T Cat 3 4 5 100 ohm UTP 100 m 328 ft RJ45 100Base T X Cat 5 100 ohm UTP UTP 100 m 328 ft RJ45 1000Base TX Cat 5e 6 UTP 100 m 328 ft RJ45 With 10 100Base T X cables pins 1 and 2 are used for transmitting data and pins 3 and 6 are used for receiving data 10 100Base T X RJ 45 Port Pin Assignments Pin Number Assignment 1 TD 2 TD 3 RD 6 RD 1000Base T RJ 45 Port Pi...

Page 14: ... used Not used 6 RD receive TD transmit 7 Not used Not used 8 Not used Not used 1000Base T MDI MDI X Pin Assignments Pin Number MDI port MDI X port 1 BI_DA BI_DB 2 BI_DA BI_DB 3 BI_DB BI_DA 4 BI_DC BI_DD 5 BI_DC BI_DD 6 BI_DB BI_DA 7 BI_DD BI_DC 8 BI_DD BI_DC Note and signs represent the polarity of the wires that make up each wire pair 4 2 Serial Port Pin Definition Com 1 Com 2 Pin RS 232 RS 422 ...

Page 15: ... Networking Corp 11 4 3 Cellular Antenna The device provides one cellular connector for a 3G or 4G antenna External RF cables and antennas can also be used with the connector 3G Cellular Antenna 4G LTE Antenna 7 RTS 8 CTS 9 RI RS 232 mod act as DTE ...

Page 16: ...p which indicates the connection is established the computer will initiate a DHCP request to retrieve an IP address from the Gateway Step 3 Configure the device on a web based management utility Open a web browser on your computer and type http 192 168 10 1 default gateway IP of the Gateway in the address box to access the webpage A login window will pop up where you can enter the default login na...

Page 17: ...time since the AP router is started Wan IP Shows WAN IP address 5 2 1 Basic Setting This section will guide you through the general settings for the Gateway 5 2 1 1 WAN This page allows you to configure WAN settings based on the type of connections you use You can consult your ISP if you are unsure of your connection type If you use the PPPoE option make sure any PPPoE client software on your comp...

Page 18: ...s option if you want the IP address of the WAN port to be assigned automatically by the DHCP server in your network Use the following IP address Select this option if you want to assign an IP address to the WAN port manually You should set IP Address Subnet Mask and Default Gateway according to IP rules You can also type a link in the Ping Test Site field to test your Internet connection Obtain DN...

Page 19: ...you want to use modem 3G as a backup connection when main connection is lost Enter your account username and password in the corresponding fields Type a website address such as www google com in Ping Test Site to use it to check if the connection is alive or lost WAN Connection Type as PPPoE Choose this option if your ISP requires you to use a PPPoE Point to Point Protocol over Ethernet connection...

Page 20: ...IGMG P83244GC D4G User Manual ORing Industrial Networking Corp 16 WAN Connection Type as Modem 3G ...

Page 21: ...onnect on Failure Check to allow for reconnection when links fail Two LAN ports Enable this option to use two LAN ports as WAN inputs Radio Type Select a type of radio from the list which includes GSM UMTS and both UIM Status Shows the status of SIM card Operations Click Connect to start modem 3G connections or Disconnect to shut down connections Link Status Shows the status of connections Modem S...

Page 22: ...ble to disable network connectivity to a FTP server Samba Server Click to enable to disable network connectivity to a Samba server Modbus TCP Click to enable to disable network connectivity to Modbus TCP 5 2 1 3 DHCP DHCP is a network protocol designed to allow devices connected to a network to communicate with each other using an IP address The connection works in a client server model in which D...

Page 23: ... DHCP Forwarder Built in DHCP Server will enable the device to automatically assign an IP address to a computer on the LAN DHCP Forwarder will forward DHCP messages to a server on the Internet to handle DHCP requests If you choose DHCP Forwarder enter a DHCP server IP address DHCP Server Enables or disables the DHCP server function The default ...

Page 24: ...optional WINS Server Specifies the IP address of a local Windows NetBios Server if one is present in your network optional DHCP Range for Relay Configure the DHCP range for relay by inputting a starting and ending IP address and a subnet mask Starting IP The starting IP for the DHCP relay range Ending IP The ending IP for the DHCP relay range Subnet Mask Enter a Subnet mask for the DHCP relay rang...

Page 25: ...urrent dynamic IP address Label Description DDNS Service Choose a DDNS service provider from the list User Name Enter the user name of your DDNS account Password Enter the password of your DDNS account Domain Enter the domain name provided by your dynamic DNS service provider 5 2 1 7 Date Time In this page you can set the date time of the device A correct date and time will help the system log eve...

Page 26: ...P server Time Zone Select the time zone you are located in Synchronize Specify the scheduled time for synchronization Local Date Set a local date manually Local Time Set a local time manually Get Current Date Time from Browser Click to set the time from your browser 5 2 2 Serial Setting Remote Management The remote management setting allows you access the serial port from a WAN network ...

Page 27: ...Access Enable to allow using of serial data port and control port through WAN access Serial Configuration This page allows you to configure serial port parameters Label Description Port Alias Enter the COM port number that modem is connected to Interface Choose an interface for your serial device Available interfaces include RS 232 RS 422 RS 485 2W and RS 485 4W ...

Page 28: ...it modes include None Odd Even Mark and Space None means parity checking is not performed and the parity bit is not transmitted Odd means the number of mark bits in the data is counted and the parity bit is asserted or unasserted to obtain an odd number of mark bits Even means the number of mark bits in the data is counted and the parity bit is asserted or unasserted to obtain an even number of ma...

Page 29: ...a Buffer After times out the data will also be sent You can set the time from 0 to 65535 seconds Delimiter For advanced data packing options you can specify delimiters for Serial to Ethernet and or Ethernet to Serial communications You can define max 4 delimiters 00 FF Hex for each way The data will be hold until the delimiters are received or the option Flush Serial to Ethernet data buffer times ...

Page 30: ...to remote host to check the TCP connection If the TCP connection is not alive the connection will be closed and the port will be freed 0 indicates disabling this function Factory default is 0 Max Connection The number of maximum connections can be supported The maximum value is 5 default values is 1 Not allowed to mapping Virtual COM from web TCP Server mode In TCP Server mode IMG is configured wi...

Page 31: ...or this setting Alive Check The serial device will send TCP alive check package in each defined time interval Alive Check to remote host to check the TCP connection If the TCP connection is not alive the connection will be closed and the port will be freed 0 indicates disabling this function Factory default is 0 Max Connection The number of maximum connections can be supported The maximum value is...

Page 32: ...tive for this setting Alive Check The serial device will send TCP alive check package in each defined time interval Alive Check to remote host to check the TCP connection If the TCP connection is not alive the connection will be closed and the port will be freed 0 indicates disabling this function Factory default is 0 Connect on Startup The TCP Client will build TCP connections once the connected ...

Page 33: ...tting a value in Host Start End IP You can also auto scan the sending port number of the device Send Port Set the send port number RTU ASCII Slave Mode Modbus RTU Slave mode allows communications between a host computer and a slave device After a host computer sends a command the slave device processes the command and returns a response to the host computer This process is repeated allowing the ho...

Page 34: ...remote TCP IP clients allowed to connect to this server Max Try Time The maximum number of request retries performed serially Request Pause The delay between serial requests in milliseconds Response Wait The serial response timeout in milliseconds Idle Timeout Enter a TCP connection timeout in seconds When no Modbus TCP data is received within this timeout the TCP connection will be dropped ...

Page 35: ...rt stops data transmission for a defined period of time the connection will be closed and the port will be freed and try to connect with other hosts 0 indicates disabling this function and is also the factory default value If multilink is configured only the first host connection is effective for this setting Alive Check The serial device will send TCP alive check packages in each defined time int...

Page 36: ...ion Edge Label Description Ignition Edge Enabled Disabled the Ignition Edge server Launch Ignition Edge Web Launch the Ignition Edge web in browser Ignition Edge Version Current Ignition Edge version installed Java Version Current Java version installed Available Disk Space Free Disk Space remain Upgrade ignition files To upgrade the ignition Edge module Node Red ...

Page 37: ...ocol 5 2 2 1 NAT Setting Virtual Server This page allows you to set up virtual server setting A virtual server allows Internet users to access services on your LAN This is a useful function if you host services online such as FTP Web or game servers A public port must be defined for the virtual server on your device in order to redirect traffic to an internal LAN IP address and LAN port Any PC use...

Page 38: ... entry and Del to delete the entry DMZ DMZ Demilitarized Zone allows a computer to be exposed to the Internet without passing through the security settings and therefore is unsecured This feature is useful for special purposes such as gaming To use this function you need to set an internal computer as the DMZ host by entering its IP address Adding a client to the DMZ may expose your local network ...

Page 39: ...ts the current auto port forwarding information Application The application that generates this port forwarding Ext Port The port opened on WAN Protocol The protocol type Int Port The port redirected to the local computer IP Address The IP address of local computer to be redirected to 5 2 2 2 Firewall Setting IP Filter IP filters enable you to control the forwarding of incoming and outgoing data b...

Page 40: ... REJECT Direction Specifies the direction of data flow to be filtered IP Address Enter the IP address of the source and destination computer Protocol Configures the protocol to be filtered Enable Now Click Yes to enable the entry after adding it IP filter list Shows the information of all IP filters Click Edit to edit the entry or Del to delete the entry MAC Filter This page enables you to deny or...

Page 41: ...ss Enter the MAC address to be filtered Enable Now Click Yes to enable the entry after adding it MAC filter list Shows the information of all MAC filters Click Edit to edit the entry or Del to delete the entry Custom Rules Custom firewall rules provide more granular access control beyond LAN isolation Firewall rules are evaluated from top to bottom The first rule that matches is applied and subseq...

Page 42: ...tocols encryption algorithms and hashing algorithms Open VPN Open VPN enables you to easily set up a virtual private network over an encrypted connection It is a full function SSL VPN solution which accommodates a wide range of configurations including remote access site to site VPNs WiFi security and enterprise level remote access with load balancing failover and fine grained access control featu...

Page 43: ...orking Corp 39 Connection to Open VPN Server When you enable Open VPN Client you need two Gateways to create site to site VPN connections The server IP and client IP address should be within the same network domain Open VPN Server and Client Connection ...

Page 44: ... want to create a bridge tunnel between two locations using OpenVPN If you want to route across your tunnel then choose TUN Tunnel Protocol Select UDP or TCP protocol depending on your needs TCP is more reliable than UDP but UDP performs better than TCP It is recommended to use UDP if the distance between VPN server and client is short otherwise use TCP Port The number of the port default is 1194 ...

Page 45: ...penvpn website Open VPN Client Enables or disables the function of Open VPN client Server IP Host name Enter the Open VPN server IP address Tunnel Protocol Select UDP or TCP protocol depending on your needs TCP is more reliable than UDP but UDP performs better than TCP It is recommended to use UDP if the distance between VPN server and client is short otherwise use TCP Port The number of the port ...

Page 46: ...common name for you to identify the VPN Subnet IP Address Enter the subnet IP address for the VPN Netmask Enter the netmask IP address for the VPN Enable Now Check to enable the function PPTP VPN PPTP Point to Point Tunneling Protocol VPN allows PCs connected to the Gateway through WAN ports to act as PCs in the same LAN ...

Page 47: ... VPN server Server IP Enter the server IP address The default value is the IP address of the connected LAN port Client IP Enter the IP address range in the form of 192 168 10 xx xx The connected client will be assigned with an IP address PPP Options Require chap check to use chap authentication on your PPTP server Require mschap check to use mschap authentication on your PPTP server Require mschap...

Page 48: ...4 connections CHAP Secrets Enter the username and password pairs in the form of user pass Multiple username and password pairs are allowed PPTP Client If a device wants to link to the devices in different networks you should enable PPTP client in the following page ...

Page 49: ...e chap check to use chap authentication on your PPTP server Require mschap check to use mschap authentication on your PPTP server Require mschap v2 check to use mschap v2 authentication on your PPTP server Require MPPE check to use MPPE Microsoft Point to Point Encryption encryption on data transmitted through PPP Point to Point Protocol and VPN links Routing Option Click Connect to link to the se...

Page 50: ...o eliminate the single point of failure by automatically assigning available IP routers to participating hosts Using a virtual router ID VRID address and virtual router IP VRIP address to represent itself a virtual router consists of two or more physical routers including one master router and one or more backup routers All routers in the virtual router group share the same VRID and VRIP The maste...

Page 51: ...t gateway interface The other router in the VRID does not own the IP address associated with VRID but provides the backup path if the Master router becomes unavailable Virtual Router IP An IP address associated with the VRID from which other hosts can obtain network service The VRIP is managed by the VRRP instances belonging to a VRID Priority The priority value used by the VRRP router when select...

Page 52: ...u manually configure or the route information that is calculated using dynamic routing algorithms Dynamic Routing Dynamic routing lets routing tables in Gateways change as the routes change If the best path to a destination cannot be used dynamic routing protocols change routing tables when necessary to keep your network traffic moving Dynamic routing protocols include RIP OSPF and BGP however the...

Page 53: ...g static and dynamic routing if enabled Static Route Entry Fills in corresponding information to add new entries to the static routing tablet Mode Choose Gateway Mode if you want PCs in the LAN to visit external network otherwise choose Router Mode RIPv1 v2 Choose Disable to disable dynamic routing or other options to configure the interfaces for dynamic routing Telnet Setting This option is only ...

Page 54: ...GC D4G User Manual ORing Industrial Networking Corp 50 Routing Topography 5 2 6 System Tools 5 2 3 1 Login Setting You can change login name and password in page The default login name and password are both admin ...

Page 55: ... login password Acceptable characters contain 0 9 a z A Z and the length must be 0 to 15 characters Confirm New Password Retype the new password to confirm it Web Protocol Choose a web management page protocol from HTTP and HTTPS HTTPS HTTP over SSL encrypts data sent and received over the Web Choose HTTPS if you want a secure connection Port Choose a web management page port number For HTTP defau...

Page 56: ...nstantly to enhance device performance and functions To upgrade firmware download new firmware from ORing s website to your PC and install it via Web upgrade Make sure the firmware file matches the model of your device It will take several minutes to upload and update the firmware After upgrade completes successfully reboot the device During firmware upgrading do not turn off the power of the devi...

Page 57: ...tore configurations to previous status by installing a previous configuration file To do this choose Web Restore or Tftp Restore If you choose Web Restore you need to choose a file and click Web Restore If you selet Tftp Restore fill in a Tftp server IP address and the file name before clicking Tftp Restore Restore Factory Default Setting Click to reset the device to the factory settings The devic...

Page 58: ...r assigning an IP range Tick Any Host or enter a hostname or IP address if you only want a specific computer or device to be able to access the device Allow Ping from WAN Click Enable to allow system administrator to ping the device from WAN interface 5 2 3 6 Miscellaneous This page enables you to run ping test which will send out ping packets to test if a computer is on the Internet or if the WAN...

Page 59: ...IGMG P83244GC D4G User Manual ORing Industrial Networking Corp 55 5 2 3 8 Event Warning When an error occurs the Gateway will notify you through system log e mail SNMP and relay System Log ...

Page 60: ...rking Corp 56 Label Description Syslog Server IP Enter the IP address of a remote server if you want the logs to be stored remotely Leave it blank will disable remote syslog Syslog Server Port Specifies the port to be logged remotely Default port is 514 ...

Page 61: ...IGMG P83244GC D4G User Manual ORing Industrial Networking Corp 57 E mail ...

Page 62: ... Corp 58 Label Description SMTP Server Enter a backup host to be used when the primary host is unavailable Server Port Specifies the port where MTA can be contacted via SMTP server E mail Address 1 4 Enter the mail address that will receive notifications SNMP ...

Page 63: ...on SNMP Trap Server 1 4 Enter the IP address of the SNMP server which will send out traps generated by the AP Community Community is a password to establish trust between managers and agents Normally public is used for read write community SysLocation Specifies sysLocation string SysContact Specifies sysContact string Relay You can select events to trigger relay action by checking the boxes in thi...

Page 64: ...scription firmware version WAN LAN and settings 5 2 4 2 System Log The Gateway will constantly log events and activities and provide the files for you to review You can click Refresh to renew the page or Clear Logs to clear all or certain log entries 5 2 4 3 Traffic Statistics This page displays network traffic statistics for packets both received and transmitted through Ethernet ports ...

Page 65: ...IGMG P83244GC D4G User Manual ORing Industrial Networking Corp 61 ...

Page 66: ...tenna Connector SMA Female 1 Serial Ports Connector Terminal Block x 1 Port 1 DB9 male x 1 Port 2 Operation Mode Port 1 RS 422 RS 485 2W 4W Which can be configured by utility Port 2 RS 232 RS 422 RS 485 2W 4W Which can be configured by utility Serial Baud Rate 110 bps to 921 6 Kbps Data Bits 7 8 Parity odd even none mark space Stop Bits 1 1 5 2 Serial signals RS 232 TxD RxD DCD RTS CTS DSR DTR RI ...

Page 67: ...esent Reverse polarity protection Present Physical Characteristic Enclosure IP 30 Dimension W x D x H 116 4mm W x 170mm D x 154mm H 4 6 W x 6 7 D x 6 1 H Weight g 2400 g Environmental Storage Temperature 40 to 85o C 40 to 185o F Operating Temperature 40 to 70o C 40 to 158o F Operating Humidity 5 to 95 Non condensing Regulatory Approvals EMI FCC Part 15 CISPR EN55022 class A EMS EN61000 4 2 ESD EN6...

Page 68: ... Statement This device complies with Industry Canada licence exempt RSS standard s Operation is subject to the following two conditions 1 this device may not cause interference and 2 this device must accept any interference including interference that may cause undesired operation of the device Le présent appareil est conforme aux CNR d Industrie Canada applicables aux appareils radio exempts de l...

Page 69: ...radiated power e i r p is not more than that permitted for successful communication Afin de réduire les interférences radio potentielles pour les autres utilisateurs le type d antenne et son gain doivent être choisie que la puissance isotrope rayonnée équivalente PIRE est pas plus que celle premise pour une communication réussie RF exposure warning The equipment complies with RF exposure limits se...