Planet ICG-2510W-LTE Series, User Manual

Page 1: ...1 Industrial 4G LTE Cellular Wireless Gateway with 5 Port 10 100 100T ICG 2510W LTE ICG 2510WG LTE Series...

Page 2: ...led and operated with a minimum distance of 20 centimeters between the radiator and your body This transmitter must not be co located or operating in conjunction with any other antenna or transmitter...

Page 3: ...derstand the meaning of the crossed out wheeled bin symbol Do not dispose of WEEE as unsorted municipal waste and have to collect such WEEE separately Revision PLANET ICG 2510W G LTE Series User s Man...

Page 4: ...pper Panel 21 2 1 4 Wiring the Power Inputs 21 2 1 5 Wiring the Digital Input Output and Relay 22 2 1 6 Console Line Definition 22 2 1 7 Dual SIM Cards Installation 23 2 1 8 Installing MicroSD Card 24...

Page 5: ...4 2 L2TP 62 4 3 4 3 OPENVPN 64 4 3 4 4 IPSEC 69 4 3 4 5 GRE 72 4 3 5 Security 74 4 3 5 1 Firewall 74 4 3 6 Access Restrictions 77 4 3 6 1 WAN Access 77 4 3 6 2 URL Filter 80 4 3 6 3 Packet Filter 81 4...

Page 6: ...6 4 3 10 6 Backup 92 4 3 11 Status 93 5 APPENDIX A RJ45 PIN ASSIGNMENTS 94 5 1 A 1 10 100Mbps 10 100BASE TX 94...

Page 7: ...user s manual 1 1 Packet Contents Open the box of the Cellular Gateway and carefully unpack it The box should contain the following items 1 Industrial 4G LTE Cellular Wireless Gateway x 1 2 Quick ins...

Page 8: ...ormance 4G LTE The ICG 2510W G LTE series supports LTE 2x1 DL MIMO technology which can reach a download DL speed of up to 150Mbps and an upload UL speed of 50Mbps The Cellular Gateway also supports m...

Page 9: ...e bridged The 2 4GHz wireless connection can also be used simultaneously The Wireless Protected Access WPA WPA2 with TKIP AES and Wireless Encryption Protocol WEP features enhance the level of transmi...

Page 10: ...interface can be converted over the Fast Ethernet networking It can operate as a virtual server or client where IP based serial equipment can be managed The ICG 2510W G LTE series helps save the netw...

Page 11: ...11...

Page 12: ...er friendly and Secure Management For efficient management the ICG 2510W G LTE series is equipped with console web SNMP and CMS Central Management System management interfaces With the built in web ba...

Page 13: ...how to physically install the Cellular Gateway Section 3 CELLULAR GATEWAY MANAGEMENT The section contains the information about the software function of the Cellular Gateway Section 4 WEB CONFIGURATIO...

Page 14: ...antenna Two SIM card slots One GPS antenna for ICG 2510WG LTE One serial console port RS232 or RS485 One reset button One MicroSD slot to save files for serial port data Cellular Interface Supports mu...

Page 15: ...Dynamic DNS and PLANET DDNS Provides Firewall and access policy functions Supports WAN connection types DHCP 4G DHCP Client Static IP PPPoE Client 3G Link1 3G Link 2 DHCP Backup 4G Secures network co...

Page 16: ...1 28dB gain external antennas with SMA connectors 3m DI DO Interfaces 2 Digital Input DI 1 Digital Output DO 1 Relay Input ON Voltage DC 5 30 V Input OFF Voltage DC 0 3 V Output 50mA DC 30V Relay AC 2...

Page 17: ...g n ac Wireless Mode AP Client Repeater Repeater Bridge Band Mode 2 4G 5G concurrent mode Frequency Range 2 4GHz FCC 2 412 2 462GHz ETSI 2 412 2 472GHz 5GHz FCC 5 180 5 240GHz 5 745 5 825GHz ETSI 5 1...

Page 18: ...t Basic Management Interfaces Console Telnet HTTP HTTPS SNMP v1 v2c CMS Secure Management Interfaces SSH Firewall SNMP MIBs RFC 1158 MIB RFC 1213 MIB RFC 1269 MIB RFC 1271 MIB RFC 1285 MIB RFC 1316 MI...

Page 19: ...ont panel illustrations in this chapter display the unit LED indicators Before connecting any network device to the Industrial Cellular Gateway please read this chapter completely 2 1 Hardware Descrip...

Page 20: ...s 192 168 1 1 Subnet mask 255 255 255 0 2 1 2 LED Indications The front panel LEDs indicate instant status of port links data activity and system power it helps monitor and troubleshoot when needed Sy...

Page 21: ...trial Cellular Gateway consists of three terminal block connectors Figure 2 4 shows the upper panel of the Cellular Gateway Figure 2 4 ICG 2510W G LTE Series Upper Panel 2 1 4 Wiring the Power Inputs...

Page 22: ...nsole Line Definition Insert the RJ45 end of the console cable into the RJ45 outlet with sign console and insert the DB9F end of the console cable into the RS232 serial interface of user s device The...

Page 23: ...anel 3 Press the button with a paper clip or suitable tool to eject the SIM card from the drawer 4 Insert the SIM card with the contact facing up and align the SIM card tray properly with the slot Mak...

Page 24: ...24 2 1 8 Installing MicroSD Card The ICG 2510W G LTE series provides a MicroSD card slot Refer to the SIM card installation method for inserting the MircoSD card...

Page 25: ...esented To install your Industrial Cellular Gateway on a desktop or shelf simply complete the following steps 2 2 1 DIN rail Mounting The DIN rail is screwed on the Industrial Cellular Gateway when ou...

Page 26: ...e track Step 3 Check whether the DIN rail bracket is tightly on the track Step 4 Please refer to the following procedures to remove the Industrial Cellular Gateway from the track Step 5 Lightly pull o...

Page 27: ...llowing topics Requirements Management Access Overview Web Management Access SNMP Access Standards Protocols and Related Reading 3 1 Requirements Workstations running Windows 2000 XP 2003 Vista 7 8 20...

Page 28: ...ethods Method Advantages Disadvantages Web Browser Ideal for configuring the Cellular Gateway remotely Compatible with all popular browsers Can be accessed from any location Most visually appealing Se...

Page 29: ...ess the Industrial Cellular Gateway s Web interface applications directly in your Web browser by entering the IP address of the Industrial Cellular Gateway Figure 3 1 Web Management You can then use y...

Page 30: ...gateway and the SNMP Network Management Station to use the same community string This management method in fact uses two community strings the get community string and the set community string If the...

Page 31: ...2 168 1 1 4 2 Accessing the Configuration Web Page The chapter is to present main functions of each page Users visit page tool via web browser after connecting user PC to the cellular gateway There ar...

Page 32: ...tion main page is shown below Users need to input user name and password if it is their first time to log in Input correct user name and password to visit relevant menu page Default user name and pass...

Page 33: ...3 1 Setting The Setup screen is the first screen users will see when accessing the cellular gateway Most users will be able to configure the gateway and get it work properly using only the settings o...

Page 34: ...Users set subnet mask by their own or ISP assigns Gateway Users set gateway by their own or ISP assigns Static DNS1 DNS2 DNS3 Users set static DNS by their own or ISP assigns Automatic Configuration D...

Page 35: ...35 Object dhcp 4G Description User Name Login user s ISP Internet Service Provider Password Login user s ISP APN Access point name of user s ISP PIN PIN code of user s SIM card...

Page 36: ...36 PPPoE Object PPPoE Description User Name Login the Internet Password Login the Internet...

Page 37: ...Object 3G Link1 Description User Name Login user s ISP Internet Service Provider Password Login user s ISP Dial String Dial number of user s ISP APN Access point name of user s ISP PIN PIN code of use...

Page 38: ...r Name Login user s ISP Internet Service Provider Password Login user s ISP Dial String Dial number of user s ISP APN Access point name of user s ISP PIN PIN code of user s SIM card dhcp bkup4G IP add...

Page 39: ...ord Login user s ISP APN Access point name of user s ISP PIN PIN code of user s SIM card Connection Type The connection type provides 12 options for required mode This option allows user to select con...

Page 40: ...route method when choosing this method Users should also configure Detection Interval Primary Detection Server IP and Backup Detection Server IP items Detection Method TCP Detect connection with TCP...

Page 41: ...ied to loop network Through certain algorithm achieves path redundancy and loop network cuts to tree based network without loop thus avoiding the hyperplasia and infinite circulation of a message in t...

Page 42: ...to use their own DNS server or other stable DNS servers if not keep it default Network Address Server Settings DHCP These settings for the gateway s Dynamic Host Configuration Protocol DHCP server fu...

Page 43: ...Client Lease Time is the amount of time a network user will be allowed to connect to the Router with their current dynamic IP address Enter the amount of time in minutes that the user will be leased...

Page 44: ...the gateway s own IP address Server IP Name IP address of NTP server is up to 32 characters If blank the system will find a server by default Adjust Time To adjust time by the system and refresh to ge...

Page 45: ...ard or not the default is OFF ON means host 3322 org is equal to host 3322 org Do not use external ip check Enable or disable the function of do not use external ip check Force Update Interval Unit is...

Page 46: ...twork s layout and exchange routing tables with other Routers The Router determines the network packets route based on the fewest number of hops between the source and destination To enable the Dynami...

Page 47: ...P address is the network portion and which portion is the host portion Interface Indicate whether the Destination IP Address is on the LAN WLAN internal wired and wireless networks the WAN Internet or...

Page 48: ...48 meanwhile LAN port and WAN port disable is to divide into one VLAN port 4 3 1 6 Networking Object Networking Description...

Page 49: ...able Shows current bridging table Create Bridge Click Add to create a new bridge configuration is shown below Create bridge option the first br0 means bridge name STP means to on off spanning tree pro...

Page 50: ...is basically used for LAN port and should not be bound with WAN port If binding is successful bridge binding list in the list of current bridging table is shown below To make br1 bridge have the same...

Page 51: ...DHCPDs Using multiple DHCP service Click Add in multiple DHCP servers to appear relevant configuration The first means the name of port or bridge do not be configured as eth0 the second means whether...

Page 52: ...ireless Network Mode Disabled Mixed BG Mixed B Only G Only NG Mixed N Only Wireless Network Name SSID The default is ICG 2510W LTE or ICG 2510WG LTE Wireless Channel A total of 1 13 channels to choose...

Page 53: ...ireless Width or Broadband option click on the button you prefer to configure 4 3 2 2 Wireless Security Wireless security option is used to configure the security of your wireless network This route h...

Page 54: ...exadecimal format If you are using 64 bit 40 bit then each key must consist of exactly 10 hexadecimal characters or 5 ASCII characters For 128 bit each key must consist of exactly 26 hexadecimal chara...

Page 55: ...TKIP AES WPA Shared Key Between 8 and 63 ASCII characters or hexadecimal digits Key Renewal Interval in seconds 1 99999 WPA Enterprise WPA2 Enterprise WPA2 Enterprise Mixed Object Wireless Security WP...

Page 56: ...ject DHCPd Description Additional DHCPd Options Some extra options users can set by entering them Static Leases If users want to assign to certain hosts a specific address they can define them here Th...

Page 57: ...Additional DNS Options For example static allocation dhcp host AB CD EF 11 22 33 192 168 0 10 myhost myhost domain 12h max lease number dhcp lease max 2 DHCP server IP range dhcp range 192 168 0 110 1...

Page 58: ...to access the Linux OS of their Router with an SSH client Object Secure Shell Description SSH TCP Forwarding Enable or disable to support the TCP forwarding Password Login Allows login with the gatew...

Page 59: ...n users should input a syslog server s IP Address and run a syslog server program on it Telnet Enable a telnet server to connect to the gateway with telnet The username is admin and the password is th...

Page 60: ...f PPTP data DNS1 DNS2 WINS1 WINS 2 Set DNS1 DNS2 WINS1 WINS2 Server IP Input IP address of the gateway as PPTP server different from LAN address Client IP s IP address is assigned to the client the fo...

Page 61: ...mote PPTP server Remote Subnet Mask Subnet mask of remote PPTP server MPPE Encryption Enable or disable Microsoft Point to Point Encryption MTU Maximum transmission unit MRU Maximum receive unit NAT E...

Page 62: ...disable force MPPE encryption of L2TP data Server IP Input IP address of the gateway as PPTP server different from LAN address Client IP s IP address is assigned to the client the format is xxx xxx xx...

Page 63: ...emote Subnet Mask The subnet mask of remote PPTP server MPPE Encryption Enable or disable Microsoft Point to Point Encryption MTU Maximum transmission unit MRU Maximum receive unit NAT Enable or disab...

Page 64: ...64 Authentication 4 3 4 3 OPENVPN OPENVPN Server...

Page 65: ...t Type WAN UP Start after online System Start when booting up Config via Server or Daemon Server Mode Router TUN and Bridge TAP modes Router TUN Mode Network Network address allowed by OPENVPN server...

Page 66: ...Tunnel Protocol UCP or TCP of OPENVPN tunnel protocol Encryption Cipher Blowfish CBC AES 128 CBC AES 192 CBC AES 256 CBC AES 512 CBC Hash Algorithm Hash algorithm provides a method of quick access to...

Page 67: ...rver Port listen port of OPENVPN client Tunnel Device TUN Router mode TAP Bridge mode Tunnel Protocol UDP and TCP protocol Encryption Cipher Blowfish CBC AES 128 CBC AES 192 CBC AES 256 CBC AES 512 CB...

Page 68: ...upports multiple options Use LZO Compression Enable or disable use LZO compression for data transfer NAT Enable or disable NAT through function Bridge TAP to br0 Enable or disable bridge TAP to br0 IP...

Page 69: ...of current IPSEC connection Common Name Local subnet local address opposite end address and opposite end subnet of current connection Status Closed This connection does not launch a connection reques...

Page 70: ...E To indicate this connection name must be unique Enabled If enabled the connection will send tunnel connection request when it is reboot or re connection otherwise it is no need if disable Local WAN...

Page 71: ...n Advanced Settings This part contains relevant setting of IKE ESP negotiation mode etc Object IPSEC Description Enable Advanced Settings Enable to configure 1st and 2nd phase information otherwise it...

Page 72: ...ate authentication option Current is only to choose use share encryption option 4 3 4 5 GRE GRE Generic Routing Encapsulation Generic Routing Encapsulation protocol is a network layer protocol such as...

Page 73: ...bnet eg 192 168 1 0 24 Peer Tunnel IP The remote tunnel ip address Local Tunnel IP The local tunnel ip address Local Netmask Netmask of local network Keepalive Enable or disable GRE Keepalive function...

Page 74: ...ay reduce the security of the gateway Filtering Proxy will refuse any access to any WAN proxy server Click the check box to enable the function otherwise disabled Filter Cookies Cookies are the websit...

Page 75: ...its the access request from the WAN by SSH and per minute up to accept two connection requests on the same IP Any new access request will be automatically dropped Limit Telnet Access This feature limi...

Page 76: ...gateway can keep logs of all incoming or outgoing traffic for your Internet connection Object Log Management Description Log To keep activity logs select Enable To stop logging select Disable When sel...

Page 77: ...ock or allow specific types of Internet applications for WAN access restrictions You can set specific PC based Internet access policies This feature allows you to customize up to 10 different Internet...

Page 78: ...e or disable a policy Policy Name You may assign a name to your policy PCs The part is used to edit client list the strategy is only effective for the PC in the list Days Choose the day of the week to...

Page 79: ...of PCs button 5 On the list of PC screen specify PCs by IP address or MAC address Enter the appropriate IP addresses into the IP fields If you have a range of IP addresses to filter and complete the a...

Page 80: ...value of policy rules is filtered If the user chooses the default policy rules for refuse editing strategies to directly save the settings If the strategy edited is the first it will be automatically...

Page 81: ...Only discard the matching MAC address in the list Accept only the data packets conform to the following rules Receive only custom rules of MAC address discard all other MAC addresses 4 3 6 3 Packet Fi...

Page 82: ...the data packets conform to the following rules Add Filter Rule Direction Input packet from WAN to LAN Output packet from LAN to WAN Protocol Packet protocol type Source Ports Packet s source port De...

Page 83: ...rce Net Forward only if sender matches this ip net example 192 168 1 0 24 Port from Enter the number of the external port the port number seen by users on the Internet IP Address Enter the IP Address...

Page 84: ...4 3 7 3 DMZ The DMZ DeMilitarized Zone hosting feature allows one local user to be exposed to the Internet for use of a special purpose service such as Internet gaming or videoconferencing DMZ hostin...

Page 85: ...dth management QoS you must enter bandwidth values for your uplink These are generally 80 to 90 of your maximum bandwidth Downlink kbps In order to use bandwidth management QoS you must enter bandwidt...

Page 86: ...is port is used to debug the Router This port can also be used as a serial port The Router has embedded a serial to TCP program The data sent to the serial port is encapsulated by TCP IP protocol stac...

Page 87: ...in standard UDP protocol TCP DTU Data transmission with TCP protocol works as an IP MODEM device which has application protocol Pure TCP Data transmission in standard TCP protocol Router is the clien...

Page 88: ...his feature allows you to manage the Router using either HTTP protocol or the HTTPS protocol If you choose to disable this feature a manual reboot will be required You can also activate or inactivate...

Page 89: ...er http xxx xxx xxx xxx 8080 the x s represent the Router s Internet IP address and 8080 represents the specified port in your web browser s address field You will be asked for the Router s password I...

Page 90: ...90 Remote Management Firmware Upgrade Choose Enable to have a firmware upgrade 4 3 10 2 Keep Alive User is able to reboot the device automatically by interval or specific time...

Page 91: ...ed at shutdown s Router Fill out the text area with commands only one command by row and click Save Shutdown Save Firewall Each time the firewall is started it can run some custom ip tables instructio...

Page 92: ...ult IP address is 192 168 1 1 and the default password is admin 4 3 10 5 Firmware Upgrade 4 3 10 6 Backup Object Backup Description Backup Settings You may back up your current configuration in case y...

Page 93: ...your PC Click the Restore button to overwrite all current configurations with the ones in the configuration file 4 3 11 Status The Status function provides different system and real time information s...

Page 94: ...able The following table and diagram show the standard RJ45 receptacle connector and their pin assignments RJ45 Connector pin assignment Contact MDI Media Dependent Interface MDI X Media Dependent Int...

Page 95: ...DE 2 SIDE 1 1 White Orange 2 Orange 3 White Green 4 Blue 5 White Blue 6 Green 7 White Brown 8 Brown 1 White Green 2 Green 3 White Orange 4 Blue 5 White Blue 6 Orange 7 White Brown 8 Brown SIDE 2 Figur...