3G Mobile Router (RUT100) User Manual
Contents
1. E Display characters sr If you have a USB flash drive with network settings for OpenWrtdas insert it now 36 Page 7 Appendix B Changing router IP address Step 1 Connect to router WEB configuration page Then go CONFIGURATION then Maintenance Step 2 Change router IP address In the field Router IP address write new router address eg 192 168 123 1 Network Settings Router settings Router IP address 192 168 0 1 Router subnet 755 755 2550 DHCP Settings DHCP settings Enable DHCP Ei IP address from 192 168 0 2 IP address to 192 168 0 254 Lease time I Lease time scale CN WINS address Step 2 Change router DHCP server assigned IP address range Type the fields IP address from and IP address to type new range Example Router IP address 192 168 123 1 IP address from 192 168 123 2 IP address to 192 168 123 254 Network Settings Router settings Router IP address 192 168 0 1 Router subnet 255 255 255 0 DHCP Settings DHCP settings Enable DHCP Fi i Ea IP address from 192 168 0 2 i IP address to 192 168 0254 Es Lease time 12 Lease time scale Hours Te WINS address PT Domain Po Step 3 Reboot the router 37 Page 8 Appendix D Accessing RUT from the WEB There are two ways to connect the router from internet 1 Using SIM card with public static IP address 2 Using SIM card with public dynamic IP address witch will be linked to static2. HTTP port override Allow HTTP from IP only El empty means any IP address Enable HTTPS access from WAN al HTTPS port override Allow HTTPS from IP only E empty means any IP address Figure 15 HTTP service configuration Enable HTTP access from WAN Check the box to enable management though HTTP from WAN HTTP port override Set port number for the HTTP management from WAN Allow HTTP from IP only Set the IP address which should be allowed to use HTTP connection Enable HTTPS access from WAN Check the box to enable management though HTTPS from WAN HTTPS port override Set port number for the HTTPS management from WAN Allow HTTPS from IP only Set the IP address which should be allowed to use HTTP connection 19 Page 4 7 VPN 4 7 1 OpenVPN site to site OpenVPN site to site graphical user interface GUI implementation allows connecting two remote networks via point to point encrypted tunnel OpenVPN implementation offers a cost effective simply configurable alternative to other VPN technologies The OpenVPN security model is based on SSL the industry standard for secure communications via the internet OpenVPN implementation uses OSI layer 2 secure network extension using the SSL TLS protocol The typical VPN site to site implementation using OpenVPN is presented in Figure 16 Remote Endpoint IP Server Network IP 192 168 0 0 24 Client configuration Client Network IP 192 168 1 0 24 Lo
3. 3G Mobile Router RUT104 User Manual LEGAL NOTICE Copyright O 2012 TELTONIKA Ltd All rights reserved Reproduction transfer distribution or storage of part or all of the contents in this document in any form without the prior written permission of TELTONIKA Ltd is prohibited The manufacturer reserves the right to modify the product and manual for the purpose of technical improvement without prior notice Other product and company names mentioned herein may be trademarks or trade names of their respective owners CE COMPLIANCE This equipment has been tested and found to comply with the limits for a Class B digital device CE mark declaration of conformity can be found at Teltonika WEB page www teltonika eu ATTENTION Before using the device we strongly recommend read this user manual Do not rip the device Do not touch the device 1f the device block is broken or its connecting wires are without isolation All wireless devices for data transferring may be susceptible to interference which could affect performance The device is not water resistant Keep it dry The device requires high 230V AC voltage IMPORTANT NOTES It is mandatory to read the notes and manual carefully before starting to use the device TECHNICAL SUPPORT CONTACTS If you face any problems related to the device which you are not able to solve by yourself you are always welcome to address our technical support department by e mai
4. IEEE Mode B G Mixed Channel auto ESSID Teltonika_RUT104 Figure 4 System Information Connection information displays the GSM network information Local Network Information displays local network configuration Wireless Information displays wireless network information 13 Page 4 5 2 Hardware information Hardware Information System Uptime 1h 23m 55s Firmware version RUT104_T_00 00 16 Average system load imin 0 00 5min 0 01 15min 0 05 LAN MAC address 00 1E 42 00 20 40 WLAN MAC address 00 80 48 51 CB 62 Memory Total Available 18108 kB 29952 kB 60 Free 8768 kB 29952 kB 29 Cached 6888 kB 29952 kB 22 Buffered 2452 kB 29952 kB 8 Figure 5 Hardware information Uptime displays the time since the system was last rebooted Firmware version displays current version of the firmware Average system load displays the average load of the device processor in the period of the last 1 minute 5 minutes and 15 minutes a larger value means a larger average load on the processor lt 1 0 System is idle 1 0 Normal load gt 1 0 Processor is busy LAN MAC address displays wired LAN MAC address WLAN MAC address displays wireless LAN MAC addtess Memory displays total free cached and buffered system memory 4 5 3 Routes Routes The following rules are currently active on this system ARP IPv4 Address MAC Address Interface 192 168 0 200 00 e0 4c 00
5. e S e Figure 12 Wireless network settings SSID Specify a unique name for your wireless network Fragmentation Specify the fragmentation threshold in bytes which determines whether data frames will be fragmented and at what size 256 2346 off auto On the 802 11 wireless LAN frames exceeding the fragmentation threshold will be fragmented 1 e split into smaller units suitable for the circuit size Data frames smaller than the specified fragmentation threshold value are not fragmented Default off RTS Specify the maximum packet size beyond which the wireless LAN card invokes it s RTS CTS mechanism 0 2347 off auto Packets that exceed the specified RTS threshold trigger the RTS CTS mechanism The card transmits packets smaller than this threshold without using RTS CTS Default off Fast Frames Packet aggregation and timing modifications Default off Packet Bursting More data frames per given time period Default off Compression Standards based Lempel Ziv real time hardware compression Default off 17 Page Quality of service WMM Check the box to enable applications such as audio video and voice to have higher priority than less sensitive data applications User isolation Check the box to isolate the wireless clients from communicating with each other Hide ESSID Hides the wireless LAN SSID Default off Encryption Choose the authentication method for wireless network No Encryption It will let
6. DDNS server provider In the Update period field enter the IP address update interval Enter the DDNS service provider After setting DDNS settings press Save button then press reboot to start router with new settings 38 Page 9 Appendix E SIM card public or private IP address Step 1 Connect PC to router and check if it is possible to browse Internet If you are not able then there is problem with MOBILE NETWORK SETTINGS If you are able then go to next step Step 2 Type www whatismyip com in the web browser and write down the red marked IP address Arim lt Y w http Anam whatisimyip com p v FN x UY What Is My IP Shows You gt n Jhal Is My IP WhatisMyIP com whatismyip com Home Forum Speed Test IP Tools IP FAQ IP Commands Hide My IP Most Popular What Is My IP WhatIsMyIP com Your IP Address Is 214 147 39 133 No Proxy Detected Step 3 Connect to router web configuration tool and then go STATUS System Information and write down the marked IP address Connection Information Signal Strength 40 IMEI 39 564013207802 PIN Status READY Network Status REGISTERED HOME NETWORK Operator BITE IP Address DNS 1 213 226 131 191 DNS 2 193 219 88 36 Send Bytes 358833 Received Bytes 27576 Step 4 Compare the IP addresses in step 2 and 3 If they are the same then SIM card 1s with public IP address 1f they are different SIM card is with private IP address 39 P
7. Discovery PMTUD status on this tunnel Remote tunnel endpoint IP address Set remote tunnel Endpoint IP address Remote network IP address Specify remote LAN IP address Remote CIDR Specify remote LAN Subnet CIDR value MTU Specify the maximum transmission unit MTU of a communications protocol of a layer in bytes 23 Page 4 7 3 IPsec The IPsec protocol client enables the router to establish a secure connection to an IPsec peer via the Internet IPsec is supported in two modes transport and tunnel Transport mode creates secure point to point channel between two hosts Tunnel mode can be used to build a secure connection between two remote LANSs serving as a VPN solution IPsec system maintains two databases Security Policy Database SPD which defines whether to apply IPsec to a packet or not and specify which how IPsec SA is applied and Security Association Database SAD which contain Key of each IPsec SA The establishment of the Security Association Psec SA between two peers is needed for IPsec communication It can be done by using manual or automated configuration Note router starts establishing tunnel when data from router to remote site over tunnel is sent For automatic tunnel establishment used tunnel keep alive feature 4 7 3 1 Manual IPSec Key exchange IPsec Basic ipsec configuration Description Enable IPsec v IPSec key exchange mode Manual Key 7 Enable NAT traversal Enable initial contact
8. Remote network secure group IP address Subnet mask IN Y Number 0 32 Tunnel keep alive Ping IP address Cd Ping period seconds a Figure 23 Authentication header settings Enable IPSec Check box to enable IPSec IPSec key exchange mode Select the Manual or Automatic Key exchange Enable NAT traversal Enable this function if client to client applications will be used Peers identifier type Choose fqdn or user fqdn accordingly to your IPSec server configuration Mode Select Main or Aggressive mode accordingly to your IPSec server configuration My identifier Set the device identifier for IPSec tunnel Preshare key specify the authentication secret string Secret s length depends on selected algorithm eg 128 bit long secret is 16 characters in length 128 bits 8 bits one character 16 Remote VPN Endport set remote IPSec server IP address Phase 1 and Phase 2 must be configured accordingly to the IPSec server configuration Remote Network Secure Group Set the remote network Secure Policy Database information Tunnel keep alive Allows sending ICMP echo request ping utility to the remote tunnel network This function may be used to automatically start the IPSec tunnel Ping IP address Enter IP address to which ICMP echo requests will be sent Ping period seconds Set sent ICMP request period in seconds 25 Page 4 8 Admin Use the Admin menu to define access s
9. anyone within range and with the proper equipment to connect onto your network within the router operating range WEP Open System choose the 64 bit WEP security with one of four pre shared keys WEP Shared Key choose the 128 bit WEP security with one of four pre shared keys WPA PSK choose the WPA security with pre shared key WPA2 PSK choose the WPA2 security with pre shared key WPA PSK WPA2 PSK Mixed mode choose for the coexistence of WPA and WPA2 clients in WPA EAP choose to enable the certificate based authentication WPA2 EAP choose to enable the certificate based authentication Cipher Choose the encryption method Auto Encryption method is chosen by device Force CCMP AES Encryption by the AES algorithm Force TKIP Encryption by the TKIP Temporal Key Integrity Protocol algorithm Key Specify security key passphrase to protect your network Note Setting a lower fragmentation threshold value can help improve connection reliability in noisy environments where radio interference is present This mechanism does add overhead and therefore reduces effective throughput Note Setting a lower RTS threshold value can improve connection reliability and throughput in crowded wireless LAN environments where many clients are trying to communicate simultaneously It adds a certain amount of overhead but can compensate for this by reducing bandwidth lost due to collisions 4 6 4 Dynamic
10. e Screw the antenna in a clockwise direction to the back panel of the unit e Position the antenna upward at its connecting joint This will ensure optimal reception Insert the SIM card which was given by your GSM mobile service provider Insert the Ethernet cable into LAN Port if the router will be configured using wired connection Connect the power adapter to the socket on the front panel of 3G Mobile Router Then plug the other end of the power adapter into a wall outlet or power strip Note SIM card is mandatory for setting up connection to the GSM network However the manufacturer of this equipment does not supply the SIM card The SIM card can be purchased from yout GSM mobile service provider For APN user name and password please contact your GSM mobile service provider The 3G Mobile Router must be powered off while inserting or taking out the SIM card 8 Page 4 ROUTER CONFIGURATION 4 1 Connect to router WEB configuration page using wired connection Step 1 Connect 3G Mobile Router to your PC using LAN cable Step 2 Setup Local Area Network adapter on A E ls G Ny gt Control Panel Network and Internet Network Connections gt your computer Go to Start gt Control Panel gt i i i Network and Internet gt Network and Sharing Organize v Disable this network device Diagnose this connection Center In the left pane click Change adapter settings link Right click on Local Network Connection and sele
11. fast LZO compression Debug level Authentication Local tunnel endpoint IP A Remote tunnel endpoint IP OoOO OS Resolve Retry Remote network IP address Remote network netmask Ho Static pre shared key Choose File No file chosen Figure 18 Server configuration Enable Check box to enable the OpenVPN Tun Tap Select tunneled or bridged connection Protocol Select UDP or TCP protocol Port Set the OpenVPN port Default port 1194 LZO Check box to enable the LZO compression Default disabled Debug level Select the connection debugging level Default 5 Local tunnel endpoint IP Specify the IP address of the local VPN tunnel endpoint Remote tunnel endpoint IP Specify the IP address of remote VPN tunnel endpoint Resolve Retry Connection retry count Default infinite Remote network IP address Specify the remote network IP address Remote network netmask Specify the remote network subnet mask Static pre shared key Static key configurations offer the simplest setup and are ideal for point to point VPNs The GUI allows to upload the static key Important The same key must be uploaded in server and client e g if the key was generated in server then it must be download by clicking Download then uploaded in the remote client VPN configuration 21 Page 4 7 1 2 Client configuration OpenVPN instance client_new Main settings Enable Y Tun Tap Tun tunnel El Type of used device Pro
12. DNS Settings Dynamic DNS DDNS is a domain name service allowing to link dynamic IP addresses to static hostname To start using this feature firstly you should register to DDNS service provider Dynamic DNS Settings Enable Dynamic DNS Password er Host name Update Period seconds OE DynDNS service type ooo OE Figure 13 Dynamic DNS Settings Enable Dynamic DNS check the box to enable DDNS User name enter your user name The router will use it to automatically login to update your IP address in the DDNS server Password enter you login password 18 Page Hostname enter your hostname which was registered in DDSN server Update period enter IP address update time in seconds DynDNS service type DYNDNS service type Allowed are all DynDNS service types 4 6 5 Services In this section HTTP SSH services which are important for remote control monitoring and management may be enabled and disabled 4 6 5 1 SSH SSH configuration SSH settings Enable SSH Y Allow SSH from IP only empty means any IP address Enable access from WAN Figure 14 SSH service configuration Enable SSH Check the box to enable SSH service Port Set port value of the SSH service Allow SSH from IP only Set the IP address which should be allowed to use SSH connection Enable access form WAN Check the box to enable access via SSH from WAN 4 6 5 2 HTTP HTTP s settings Remote access Enable HTTP access from WAN El
13. Diagnostic tools 4 11 Reboot and Logout Use the Reboot button to reboot the device or press Logout button to log off from device 32 Page 5 TECHNICAL SPECIFICATION Wireless IEEE 802 11 network Standards IEEE 802 11b 11Mbps 5 5Mbps 2Mbps 1Mbps IEEE 802 119 54Mbps 48Mbps 36Mbps 24Mbps 18Mbps 12Mbps 9Mbps 6Mbps automatically fall back to 5 5Mbps 2Mbps 1Mbps Transmitter output power at antenna connector IEEE 802 11b 1 11Mbps 20dBm IEEE 802 11g 6 24Mbps 20dBm 36Mbps 19dBm 48Mbps 17dBm 54Mbps 16dBm Receiver sensitivity at antenna connector IEEE 802 11b 92 dBm 1Mbps 87 dBm 11Mbps IEEE 802 11 90 dBm Y 6Mbps 70 dBm 54Mbps Security WPA WPA2 WEP 64 128 bit Wireless Frequency Range 2 412GHz to 2 484GHz External Antenna Type Detachable reverse SMA Management User friendly Web GUI Wired and wireless network status Site survey test Traffic monitoring Firmware upgradeable SSH VPN IPsec pass through GRE Tunnel pass through GRE tunnel IPsec client 33 Page RUT104 Quad Band 850 900 1900 2100 MHz GSM EDGE GPRS HSUPA HSDPA UMTS RUT104 Power Class Power Class 4 2 W 33 dBm for GSM GPRS 850 900 MHz bands Power Class 1 1 W 30 dBm for GSM GPRS 1800 1900 Mhz bands Power Class E2 0 5 W 27 dBm for EDGE 850 900 MHz bands Power Class E2 0 4 W 26 dBm for EDGE 1800 1900 MHz bands Power Class 3 0 25 W 24 dBm for UMTS 850 900 1900 2100 MHz bands Power Cl
14. P addresses when there are more clients than addresses Enter the Lease time in seconds WINS address If WINS Windows Internet Naming Service server is specified the router at system startup will register its name and IP address with the WINS server WINS server is used for mapping host names to network addresses This results in fast and efficient host name resolution Specify WINS server IP address 16 Page Domain Enter the domain name for the Router Some ISP s require it for identification Check your ISP to see if your broadband Internet service has been configured with a domain name In most cases leaving these fields blank will work 4 6 3 Wireless Settings 4 6 3 1 Hardware wireless settings Hardware settings Enable Radio W IEEE mode B G Mixed Channel Transmit power dBm 100 Figure 11 Wireless network settings Enable radio Check the box to enable the wireless function If you do not want to use witeless network uncheck the box to disable the wireless function IEEE mode Specify the wireless network mode B G mixed B G G Dynamic Turbo Channel Select the channel for the wireless network Transmit power Set the maximum transmitter radiation power 4 6 3 2 Software wireless settings Software settings SSID Fragmentation RTS Po Po Fast Frames Packet Bursting Compression Quality of service WMM IE User isolation Hide ESSID E Encryption WPA PSK Cipher auto Key
15. Peers identifier type Phase 1 Encryption 3des ly pm E E Dh group modp1024 E Phase 2 PFS group modp1024 E Encryption sds le Authentication hmac_shat ly Remote network secure group IP address fo Subnet mask tT Number 0 32 Tunnel keep alive Ping IP address Ping period seconds Figure 22 Manual IPSec Key exchange Enable IPSec Check box to enable IPSec IPSec key exchange mode Select the Manual or Automatic Key exchange Enable NAT traversal Enable this function if client to client applications will be used Peers identifier type Choose fqdn or user fqdn accordingly to your IPSec server configuration Phase 1 and Phase 2 must be configured accordingly to the IPSec server configuration Remote Network Secure Group Set the remote network Secure Policy Database information Tunnel keep alive Allows sending ICMP echo request ping utility to the remote tunnel network This function may be used to automatically start the IPSec tunnel 24 Page 4 7 3 2 Automatic IPSec Key exchange IPsec Basic ipsec configuration Description Enable IPsec Y IPSec key exchange mode Enable NAT traversal Enable initial contact Peers identifier type Mode My identifier aa Preshare Key ra Remote VPN endpoint Length 6 32 IP address Phase 1 Encryption 3des __________ wm Dh group modp1024 B Phase 2 PFS group modp1024 7 Encryption 3des dw Authentication fhmac shat
16. TCP UDP ICMP or ALL Save Save made changes Back to Overview Return to the traffic rules main page 29 Page 4 9 3 Port forwarding This section will let to manage port forwarding Ports forwarding Port forwarding rules Application Name Input port range Protocol Destination IP address Destination port range IN E IO E IN E D Ju Fr DL CO VI E O E D C e E ES Pf Y E E Pf A A E IN T VI E IE D C e E E DL CO e E E E Do C VI E Figure 30 Port forwarding settings Application name Set the name of the application Input port range Set incoming port value or range Protocol Select TCP UDP or BOTH Destination IP address Enter the IP address of the computer on your local network that you want to allow the incoming service to be forwarded Destination port range Set destination port value or range Example 1 Forward TCP port 40000 to IP address 192 168 0 100 Example 2 Forward UDP port 40000 to IP address 192 168 0 100 port 50000 Example 3 Forward TCP and UDP ports range 4000 7000 to IP address 192 168 0 100 port 5000 Ports forwarding Port forwarding rules Application Name Input port range Protocol Destination IP address Destination port range 4000 Tep si 192 168 0 100 Example 2 4000 UDP Figure 31 Port Forwarding examples 30 Page 4 9 4 DMZ A DMZ host is not protected by the firewall and may be vulnerable to attack You should only use this feature when a spec
17. age
18. ass 3 0 25 W 24 dBm for 1xRTT amp EVDO Electrical characteristics Current Consumption when idle 600mA_ 350mA_ 300mA Current Consumption when operating 980mA_ 520mA_ 400mA Temperature amp Humidity Operation 0 to 55 C Humidity 5 to 95 non condensing Transit Storage 40 to 85 C LEDS Power Mobile Network Activity LAN Activity Host Operating System Microsoft Windows 98SE ME NT4 0 2000 XP Vista 7 8 Unix Linux and MacOS RUT104 Dimensions L 100mm W 85mm H 36mm RUT104 Weight 230 34 Page 6 Appendix A Configuring PC wireless security 1 Enable the wireless network connection Go to Start gt Control Panel gt Network and Internet gt Network and Sharing Center In the left pane click Change adapter settings link Right click on Wireless Network Connection and select Enable Esa Oo E gt Control Panel Network and Internet Network Connections Organize y Disable this network device Diagnose this connection A Wireless Network Connection alli Intel R PRO Wireless 394 Enable Diagnose Create Shortcut Delete Rename Properties 2 Setup wireless network adapter on your computer Right click on Wireless Network Connection select choose Internet Protocol Version 4 TCP IP and click Properties 3 Select Obtain IP address automatically and Obtain DNS server address automatically if they are not selected Click OK Internet Prot
19. cal tunnel IP Remote tunnel IP Remote network IP subnet mask subnet mask The OpenVPN implementation requires server to have public IP or hostname Also the remote network subnets must be different as in Fig 23 192 168 0 0 24 and 192 168 1 0 24 If the subnet will be the same tunnel will not be created or may not function correctly due to routing rules The server and client have almost the same configuration The difference in the client configuration is the remote endpoint IP or hostname field Also the client can set up the keep alive settings For successful tunnel creation a static key must be generated on one side and the same key must be uploaded on the opposite side OpenVPN OpenVPN instances Below is a list of configured OpenVPN instances and their current state Tunnel Name Tun Tap Protocol Port Status cllent_new Disabled Role Client New configuration name E Add New Figure 17 OpenVPN instances Role Select Client or Server role for the device New configuration name Set the name for OpenVPN configuration Edit Press Edit button to edit the OpenVPN configuration Delete Press Delete button to delete the OpenVPN configuration Edit Delete 20 Page 4 7 1 1 Server configuration OpenVPN instance server_new Main settings Enable m Tun Tap Tun tunnel 2 Type of used device Protocol Udp pa Port El TCP UDP port for both local and remote LZO E El Use
20. ct Properties Network 7 A Local Area Connection las Disable Status Diagnose fa Bridge Connections Create Shortcut Delete Py Rename PY Properties 4 Local Area Connection Properties Send Feedback ES Step 3 Setup the Local Area network adapter s IP Networking address Choose Internet Protocol Version 4 TCP IP and Connect using click Properties a Network Connection This connection uses the following items Setup the Local area network adapter to A Client for Microsoft Networks aos Packet Scheduler Obtain an IP address automatically and 18 Fie and Printer Sharing for Microsoft Networks de Intemet Protocol Version TCP IPv8 Obtain DNS server address automatically WW irtemet Protocol Version 4 TCP IPv4 Link Layer Topology Discovery Mapper 1 0 Driver Link Layer Topology Discovery Responder Note It is possible to assign manually static IP address within i Install Uninsta Properties 192 168 0 2 192 168 0 254 address range with mask EER 255 255 255 0 gateway 192 168 0 1 and DNS server ee ae 1 92 1 6 8 0 1 across diverse interconnected networks Step 4 Open the Web browser and type the IP address of the router Default 192 168 0 1 and enter the 3G Mobile Router administrator login details to access the Web management tool GS TELTONIKA Authorization Required a n z f Teltonika router Administrator Login Windows I
21. d in server then it must be download by clicking Download then uploaded in the remote client VPN configuration 22 Page 4 7 2 GRE Tunnel GRE Generic Routing Encapsulation RFC2784 is a solution for tunneling RFC1812 private address space traffic over an intermediate TCP IP network such as the Internet GRE tunneling does not use encryption it simply encapsulates data and sends it over the WAN WAN IP WAN IP Figure 20 Typical GRE tunnel application connecting two remote networks In the example network diagram Fig 22 two distant networks LAN1 and LAN2 are connected To create GRE tunnel the user must know the following parameters 1 Source and destination IP addresses From Fig 22 A A A A and B B B B 2 Tunnel local IP address 3 Distant network IP address and Subnet mask GRE Tunnel GRE is a solution for tunneling RFC1812 privateaddress space traffic over an intermediate TCP IP network Local network settings Enable GRE tunnel Ei TTL Ed value 0 255 PMTUD E Remote tunnel endpoint IP address O Remote network IP address A Remote CIDR Cidr value 0 32 MTU E MTU value 0 1500 Figure 21 GRE tunnel settings Enable GRE Tunnel Check the box to enable the GRE Tunnel function TTL Specify the fixed time to live TTL value on tunneled packets 0 255 The 0 is a special value meaning that packets inherit the TTL value Enable PMTUD Check the box to enable the Path Maximum Transmission Unit
22. e starting to use the device 3G Mobile Router is used to provide a mobile Internet access using a GSM network To avoid burning and voltage caused traumas of the personnel working with device please follow these safety requirements Device requires power supply source that satisfies all safety requirements listed in LST EN 60950 1 standard Each power supply source should not exceed 15VA The PC and power supply source to which the device is connected should satisfy LST EN 60950 1 standard The device can be used on first Personal Computer or second Notebook computer safety class Disconnect device from power supply before mounting to avoid voltage effect Do not mount or serve device during a thunderbolt To avoid mechanical damages of the device it is recommended to transport the device packed in damage proof pack While using the device it should be placed so that its indication LED would be visible as they inform in which working mode the device is and if it has any working problems Protection against over currents short circuits and earth faults should be provided as a part of the building installation Two pole protective device is required to protect from short circuit and earth false The power of connected device should satisfy power of release device To disconnect the device plug off AC DC power adapter from the wall outlet or power strip The interstice between contacts should be no less than 3mm Wall Outlet T
23. ef 90 br lan Active IPv4 Routes Network Target IPv4 Gateway Metric lan 192 168 0 0 24 0 0 0 0 0 Figure 6 Routes information ARP ARP Table shows map of the IP addresses assigned to the MAC addresses Active IPv4 Routes shows the active LAN and WAN routes 4 5 4 Kernel log The Kernel log displays the information about device kernel activity Kernel Log red new interface driver usbfs 290000 usbcore registered new interface driver hub 290000 usbcore registered new device driver usb 310000 NET Registered protocol family 2 310000 IP route cache hash table entries 1024 order 0 4096 bytes 310000 TCP established hash table entries 1024 order 1 8192 bytes 310000 TCP bind hash table entries 1024 order 0 4096 bytes 310000 TCP Hash tables configured established 1024 bind 1024 310000 TCP reno registered 310000 UDP hash table entries 256 order 0 4096 bytes 310000 UDP Lite hash table entries 256 order 0 4096 bytes 320000 NET Registered protocol family 1 320000 PCI CLS 16 bytes default 16 330000 squashfs version 4 0 2009 01 31 Phillip Lougher 330000 JFFS2 version 2 2 NAND SUMMARY LZMA RTIME CMODE PRIORITY c 2001 2006 Red Hat Inc oO e eSeeeoocqceceoqoce ce amp Figure 7 Kernel log information 14 Page 4 6 Configuration 4 6 1 Mobile Network Settings To set up the GSM connection SIM card i
24. erent voltage rating than the one included with the RUT104 will cause damage and void the warranty for this product Note If any of the components is missing or damaged please contact the retailer or reseller from which this product was purchased 2 3 System requirements A computer with Windows Macintosh or Linux based operating systems with a network connection wired or wireless A web browser Internet Explorer 6 0 Netscape Navigator 6 0 Opera 9 0 Mozilla 5 0 or later versions for configuration 6 Page 2 4 RUT104 Hardware LED s and connections 2 4 1 Back panel Figure 1 Router back panel view Main GSM antenna connection Wireless LAN antenna connection Aux GSM antenna connection E 2 Wireless LAN antenna connection 2 4 2 Front panel SIM LAN Power GS TELTONIKA Figure 2 Router front panel view 1 GSM LED A solid light indicates proper connection of the 3G 2 Reset button 3 Ethernet socket 4 Ethernet LED A solid light indicates proper connection of the Ethernet A blinking light indicates data transfer 5 Power LED A solid light indicates a proper connection to the power supply SIM card socket 7 Power supply adapter socket 7 Page 3 GETTING STARTED 3 1 Initial setup 3G Mobile Router enables to access network using a wireless connection from virtually anywhere within the operating range of wireless network Some things should be considered before findi
25. ervers from the device system Add click Add button to add time server The new field with server will appear 4 8 3 Firmware upgrade To update your device firmware use the Firmware upgrade section select the firmware file and click the Firmware upgrade button Firmware upgrade Select archive for firmware upgrade Firmware upload Choose File No file chosen Firmware upgrade Figure 26 Firmware update Choose File Click the button to select new firmware image from a folder on the PC Firmware upgrade Upload the new firmware 4 8 4 Troubleshoot file Troubleshoot file contains all device debug log files and they are used to detect analyze and solve various problems which device could experience during operation Download troubleshoot archive Download troubleshoot file Figure 27 Firmware update To receive and save the troubleshoot file on your PC press the Download troubleshoot file button 27 Page 4 9 Firewall This section allows configuring firewall for enhanced router security 4 9 1 Traffic rules Firewall Traffic Rules Traffic rules define policies for packets traveling between different zones for example to reject traffic between certain hosts or to open WAN ports on the router Traffic Rules Enable Name Family Protocol Source Destination Action EF Allow DHCP From host in Ti ter IP at port 68 Bae 7 ii IPv4 UDP a el a ore ee Accept input Edit Delete Renew
26. ettings to the device or to use the following system utilities e Account change administrator s password e NTP Manage system time and date e Firmware upgrade new firmware uperade 4 8 1 Account The Administrative Account menu is used for changing the existing administrators password Administrator account configuration Admin password Enter password L c Verify password ho Je Figure 24 Change administrator password Enter password enter the new administrator password Verify password re enter the new password to verify its accuracy Note The only way to gain access to the web management if you forget the administrator passwotd is to reset the device factory default settings Default administrator login settings are User Name admin Password admin01 4 8 2 NTP Use this section to manage the system time and date on the device automatically using the Network Time Time Synchronisation Synchronizes the system time General Current system time Wed Jun 20 13 40 47 2012 Update interval in seconds Timezone Time Servers Delete Delete elete Delete Figure 25 Time setting using NIP Current system time Show the current device time Update interval Time update interval in seconds 26 Page Timezone Choose from UTC or GMT time Time Servers Set your own or use predefined time synchronizations servers Delete click to remove selected NTP s
27. gsccie pat ac peacty T EE A E ER 19 e Ay A 20 4 7 1 Ba IN 0 E APDO N non e EE ceeetemann vee 20 oo eam 1 ge CONO UA LOA ii ii ica 21 A ooo AAA on E aetna oes E eaearadeeaes ZZ 4 7 2 A legate a E ge pe sweetness terse var sense se cane EE cent evevsvancudessarace sensi us Gespanaceueosaccensaes 23 4 7 3 e e EGO sista ssenosoemsessecenaee 24 Aroak PUMA TTP SC Ie o cele alo AAA EA Un 24 Aero tomate TSC CCC CC NO iaa e cria 2 A 2 GS 6061 EIEI E E E A EE ENI ENIE Pe ee eee 26 4 8 1 PE 0101 a E E E E E E E E Ti 26 4 8 2 NT rocosas 26 4 8 3 US WO 1 ANG OPIO PPM o e E A sens ZI 4 8 4 Troubleshoot lE geeneen i ER e EE aE en ERER E aaee 21 A O O OEI AEI ET 28 4 9 1 ii A 28 4 9 2 Trate rules add donald eres 29 4 9 3 PORO ai 30 4 9 4 oo ie A 31 4 10 DON dadas AEAEE 31 ROG 4 O E 1 3 9 e E OO REO un O eer nT AE ee ee ee eT 31 OZ E E A ot seednaitcecstpattpatduetoe steer nevestnaty 32 SB 0 lOs yl 4 10 3 TAO SUC iaa 32 4 11 Renostana Los our area ia cia 32 TECTENES SPECTRA rR ON nO ee RM acia 33 Appendix A contesto PE wireless SeCrEt 35 Appendix DiC haneine router PAG bes Suri 37 Appendix D Accessin RUT trom the WED sonas 38 Appendix E SIM card public Of private IP Address 39 4 Page 1 SAFETY INFORMATION In this document you will be introduced how to use 3G Mobile Router safely We suggest you to adhere to following recommendations to avoid any damage to person or property You have to be familiar with the safety requirements befor
28. hostname using DDNS service Note If the SIM card is with private IP address then reaching camera from the internet is not possible as connection is routed through a NAT firewall in your provider s network SIM card with public static IP address Open your WEB browser and type SIM card IP address when the camera GSM connection has been set up After successful connection router s login page must appear SIM card with public dynamic IP address For the SIM card with dynamic public IP address the IP address is given for a limited period of time which is usually no more than a few hours then the IP address is changed As he IP address is continuously changed it becomes a problem to connect to the camera To solve this problem Dynamic Domain Name Service DDNS may be used DDNS is a domain name service allowing to link dynamic IP addresses to static hostname To start using this feature firstly a hostname must be registered on the DDNS server After creating account you will get Hostname Username and Password To link router s IP address to the static hostname Dynamic DNS settings must be configured To configure DDNS connect to the router WEB configuration page go the Configuration gt Dynamic DNS Settings Refer to Figure below Dynamic DNS Settings Enable Dynamic DNS Password 16 Update Period seconds OE DynDNS service type LF Check the Enable check box Enter username password and hostname which where got from the
29. ial application s function fails to make an application work Designating a DMZ host may also put other computers in the local network at risk When designating a DMZ host you must consider the security implications and protect it if necessary DMZ zone Enable Destination IP address a Figure 32 DMZ settings Enable Click to enable or disable the DMZ Destination IP address Type a host IP address for the DMZ All remaining incoming packets will be sent to this IP address 4 10 Tools 4 10 1 Site Survey The Site Survey test shows overview information for wireless networks in a local geographic area Using this test an administrator can scan for working access points check their operating channels encryption and see signal noise levels An administrator can use this feature to identify a clear channel to set the device Note Note that Site Survey function can take several minutes to perform A Site Survey test is performed every time on the startup of the device therefore the results of the last performed Site Survey test and its time can be found on the page Thus to obtain the results the initiation of the scan is not necessary To perform the Site Survey test currently click the Scan button Site survey Networks Link ESSID BSSID Channel Protocol Mode Encr Power Scan 0 70 Teltonika_RUT10 0 80 48 51 CB 62 auto ap psk 20 dBm ajScan Figure 33 Site Survey Table Note The Site Survey function 1s impossible 1f
30. k Ske Sharing Prop ertie S Connect using Intel R PRO Wireless 39454BG Network Connection Setup the wireless network adapter to o This connection uses the following items Obtain an IP address automatically and 0E Client for Microsoft Networks M El QoS Packet Scheduler Obtain DNS servet address automatically V iB File and Printer Sharing for Microsoft Networks M GCT WiMax Protocol Driver Internet Protocol Version 6 TCP IP v6 RA Internet Protocol Version 4 TCP Py4 g M i Link L Topology Di M 120 Dri Note It is possible to assign manually static IP address within Aue oo 192 168 0 2 192 168 0 254 address range with mask a ES 255 255 255 0 gateway 192 168 0 1 and DNS server 192 168 0 1 Description Transmission Control Protocol Intermnet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Step 4 Right click on Wireless Network Connection 0K Cancel to see available wireless networks A he ws Network Connection K afi inten PRO Disable Connect Disconnect Step 5 Choose the wireless network default Status Teltonika_RUT104 from the list of available wireless networks ee Bridge Connections Create Shortcut Step 6 Open the Web browser and type the device IP Rename address default 192 168 0 1 and enter the 3G Mobile Router Properties administrator login details to access
31. l support Wteltonika lt We will be very glad to help you a Page Table of Contents 1 A 3 4 SAFETY INFORMATION oido En E aae 5 PRODUCTONER EN E E E EE E 6 e AO A O a E E E EEE E A A EE ree ee eee 6 a PE CON e a E E E E E E E E E E T E E A 6 p is E a A E EE o E 6 24 RUY104 Hardware LED s and connections isesiccssccsiccsdsssissvacesducasssnssseacenduessv sivsvesebisspsvnbsevasosaeersvends 7 2 4 1 Pack 0 Pe O PE O O ae 7 2 4 2 Pont DANE aoa e AA AEE EAN AAE AE 7 CDAC E D A E N T 8 O Neca A e o E E A 8 CW AMEE oa le AAA eo err een er eer te tet 8 ROUTER CONFIGURA TION sicsccoonccacsssosssecinonenowsssnssodunonstenssonatoutinenstuavennchon tasontevsancubinteewntoubiooobiadeenasewuter 9 4 1 Connect to router WEB configuration page using wired CONNECtON cooccccccnnnonnnnnnnonnnncononcnnnnacnnono 9 4 2 Connect to router WEB configuration page using wireless CONNECHON coccocconoonnnnonnnnnonnnnnonnnnos 10 4 3 WEB configuration page interface Suc arranca 11 A T 12 EG AEA A 13 4 5 1 S L a A E O E E A 13 4 5 2 JEE a LOBUT aT EE Metas 14 4 5 3 ETE DE o EN O an 14 4 5 4 Ee R PEI PU e T sontenancecsteseedeeeesees esacseowss 14 AO LO A oO e l gt 4 6 1 Moble Sy OC AAA e E A ENN 15 4 6 2 NEO Den esa 16 4 6 3 IF Tee galas elos AU A In IA 17 4 6 5 1 Hardware ta llenos e nubete IA A A o OI A 17 Na e ao lo o E uo 17 4 6 4 Don SIN fo a 1 ata to o RP o E E E 18 4 6 5 A A o o e e O CE A 19 ee o II III E OE AEAEE 19 A Ne Me aaron asc gnsatv
32. ng place to set up access point 1 Make sure the power outlet is nearby as the router requires power supply Keep the access point as central in work area as possible The number of walls and ceilings between the router and other network devices should be kept to a minimum as each wall or ceiling probably will reduce adapter s range from 1 30 meters Signal strength and speed fall off with distance Higher is often better Set up the router on the top shelf of a bookcase rather than the bottom one if it is possible The antenna usually works best if oriented to point straight up Building materials make a difference A solid metal door or aluminum studs may have a negative effect on range Try to position access point and computers so that the signal passes through drywall or open doorways Materials and objects such as glass steel metal walls with insulation mirrors file cabinets bricks and concrete will degrade wireless signal Keep router away at least 1 2 meters from electrical devices or appliances that generate RF noise If you are using 2 4GHz cordless phones or other wireless products your wireless connection may degrade dramatically or drop completely Make sure your 2 4GHz phone base is as far away from your wireless devices as possible The base transmits a signal even if the phone in not in use 3 2 Router installation guide 1 Attach Wireless LAN and GSM antennas e Remove the antenna from its plastic wrapper
33. nternet Explorer OU Y le 192 168 0 1 File Edit View Favorites Tools Help Be ee ee Username The default administrator login settings are Login admin Password admin01 Note It is strongly recommended to change the password after the first router configuration Step 5 After successful administrator log on you will see the main page of the 3G Mobile Router Web configuration interface The device now is ready for configuration 9 Page 4 2 Connect to router WEB configuration page using wireless connection Note the Wireless network function is shipped disabled by default and the configuration for the first time can be made only by using wited connection a mama Step 1 Enable the wireless network connection Go Sr E gt Control Panel p Network and Intemet p Network Connections gt to Start gt Control Panel gt Network and Internet gt Organize v Disable this network device Diagnose this connection Network and Sharing Center In the left pane click oy Wireless Network connection Change adapter settings link Right click on Wireless AA Enable Network Connection and select Enable wae Create Shortcut Step 2 Setup wireless network adapter on your en computer Right click on Wireless Network Connection Properties and select Properties Step 3 Setup the wireless network adapter s IP address Wireless Network Connection Properties y choose Internet Protocol Version 4 TCP IP and clic
34. ocol Version 4 T CP IPv4 Properties e e General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings 5 Use the following IP address Obtain DNS server address automatically Use the Following DNS server addresses Advanced Cancel 4 Right click on Wireless Network Connection to see available wireless networks A Wireless ema Connection xe alll sisson Dial Connect Disconnect Status Bridge Connections Create Shortcut Delete Diagnose Rename Properties 35 Page 5 Select Wireless from Show drop down list to see only wireless networks Choose the network with SSID which was configured on the router default Teltonika_RUT104 and click Connect If you don t see your network click to refresh the list Select a network to connect to All Dial up and VPN E rr gt lt Mas Wrt_Aztech Security enabled netwark Mas Santavilte Security enabled network c ection or network en Network and Sharing Center Connect 6 The window asking for the Security key should appear The Security key is the key passphrase which was typed in the router settings Type the network security key or passphrase for Wnetwork The person who setup the network can give you the key or passphrase Security key or passphrase
35. ration 36 modem settings APN CSCS PIN LF Authentification method Step 3 Configure wireless network settings Wireless Settings Hardware settings Enable Radio Channel Transmit power dBm Software settings SSID Encryption WPA PSK ly Key ERA q It is recommended to use WPA PSK with TKIP or AES data encryption The passphrase for data encryption may be 8 63 characters long and can include symbols amp _ and spaces This passphrase must be the same as Network key in the PC wireless network security settings If encryption is chosen do not forget to configure your PC settings refer to Appendix A Note If No Encryption will be chosen it will let anyone within the range and with proper equipment to connect to your network 12 Page Step 4 After successful configuration please click Save button and then click the REBOOT button The router will reboot and start up with new settings The process will take several minutes 4 5 Status 4 5 1 System Information System Information menu displays general devices status System Information Connection Information Signal Strength 40 IMEI 357564013207802 PIN Status READY Network Status REGISTERED HOME NETWORK Operator BITE IP Address 10 13 25 206 DNS 1 213 226 131 131 DNS 2 193 219 88 36 Send Bytes 358833 Received Bytes 27576 Local Network Information IF Address 192 168 0 1 Subnet Mask 255 255 255 0 DHCP Server Enabled Wirelles Information
36. rs 15 Page 4 6 2 Network Settings This section will allow you to change the local network settings of the router and to configure the DHCP settings Network Settings Router settings Router IP address Router subnet 255 255 255 0 DHCP Settings DHCP settings Enable DHCP 7 Figure 9 Network settings Router IP address The IP address of the router The default IP address is 192 168 0 1 Subnet mask The Subnet Mask of the router The default subnet mask is 255 255 255 0 Enable DHCP server Check the box to enable the DHCP server on your router Uncheck to disable this function Enabled DHCP server allows configuring IP addresses pool that will be assigned by the router Network Settings Router settings Router IP address 192 168 0 1 Router subnet 255 255 255 0 DHCP Settings DHCP settings Enable DHCP w IP address from 192 168 02 IP address to 192 168 0254 Lease time 12 Lease time scale Hours e WINS address fo Domain tT Figure 10 Network settings IP address from Starting IP addresses for the DHCP server s IP assignment IP address to Ending IP addresses for the DHCP server s IP assignment Lease time Determines how long IP addresses are assigned for you During the lease time the DHCP server cannot assign that IP address to any other clients The purpose of a lease is to limit the length of time that a client may use an IP address A lease prevents unused clients from taking up I
37. ry such as matched source and destination hosts Enable rule Name Restrict to address family Protocol Source zone Source MAC address Source address Source port Destination zone Destination address Destination port Action Y IPv4 and IPv6 TCP UDP Any zone vpn Device input Any zone forward lan vpn 081 I Figure 29 Additional settings Enable rule Check the box to enable the rule Name Set the rule name Back to Overview Save Restrict to address family Set the required address family I Pv4 IPv6 isn t supported yet or both Protocol Choose the required protocol or set the custom one Source zone Select the require zone for rule or assign rule to all zones Source MAC address Set MAC address of the source zone device which will use this rule Source address Set the IP address of the source zone device which will use this rule Source port Set the port which the source device will use for data transfer Destination zone Select the required zone for rule assign it to all zones or to a router Destination address Set the IP address of the destination device to which the data will pass from source address Destination port Set the port to which the router will pass the data incoming from source Zone port Action Set the action for a rule Drop accept reject or don t track the incoming outgoing connection in selected zone Protocol Type Select
38. s required SIM card is not supplied with the router It may be purchased from internet service provider The following information to connect to the internet is required P 2 li EA APN Access Point Name APN PIN SIM card PIN number Authentication method The authentication protocol which is used by your Internet Service Provider None CHAP or PAP User Name If GSM operator does not require username leave it blank Password If GSM operator does not require password leave it blank Enable manual DNS If GSM operator does not require manual DNS leave it disabled DNS server 1 If GSM operator does not require DNS server 1 leave it blank DNS server 2 If GSM operator does not require DNS server 2 leave it blank Warning It is strongly recommended to use SIM card with PIN disabled Otherwise if the entered PIN will be wrong the SIM card will be locked Modem Settings Connection parameters APN PIN Authentification method User Name Password Enable manual DNS DNS server 1 DNS server 2 Figure 8 Mobile network configuration APN Access Point Name APN PIN SIM card pin number Authentication method Select authentication type PAP CHAP or None User Name Enter your User Name for your mobile connection Password Enter your Password for your mobile connection Enable Manual DNS check to enter custom DNS server IP addresses DNS server 1 and DNS server 2 are ISP domain serve
39. te tunnel or site to multi site tunnels GRE Tunnel Create GRE tunnel IPsec IPsec client settings Admin Account change administrator s password NTP Time and time synchronization settings Firmware upgrade Upgrade device firmware and receive the Troubleshoot file Firewall Traffic Rules Defines policies traveling between different zones Port Forwarding Create rules to forward the incoming data Tools Site Survey shows information about wireless networks in the local geography Ping Reboot set up continuous ping IP address with possibility to automatically reboot router if no echo recetved Diagnostics Network utilities such as Ping Traceroute and Nslookup to diagnose the network connection 11 Page 4 4 Quick Setup Use Quick Setup to quickly configure basic 3G Mobile Router settings The configuration is made in four steps this is the default page when accessing the administration web management interface To start quick setup wizard click button QUICK SETUP GS TELTONIKA QUICK SETUP STATUS CONFIGURATION VPN ADMIN FIREWALL TOOLS REBOOT LOGOUT Step 1 Change router network settings if needed if not then leave as it is Network Settings Router settings Router IP address 192 168 01 Router subnet 255 255 255 0 Step 2 Configure mobile network settings The configuration data should be provided by your ISP Internet Service Provider 3G Modem configu
40. the Web LC TELTONIKA management Y pi Teltonika router Administrator Login Windows Internet Explorer a naceicee G y A e 192 168 0 1 Please enter your username and password File Edit View Favorites Tools Help Username o Password E The default administrator login settings are Login admin Passwotd admin01 Step 6 After successful administrator log on you will see the main page of the 3G Mobile Router Web configuration interface The device now is ready for configuration 10 Page 4 3 WEB configuration page interface structure The main Web management menu is displayed after successful login into the system Figure 3 From this menu all essential configuration pages ate accessed CS TELTONIKA QUICK SETUP STATUS CONFIGURATION WPH ADMIN FIREWALL TOOLS REBOOT LOGOUT Figure 3 Main Management Menu By default the Quick Setup menu is activated The web management menu has the following structure Quick Setup quick router configuration wizard Status System Information displays general information of the device status Hardware information displays device hardware information Routes displays the rules which are currently active on this system Kernel log displays the information about device kernel activity Configuration Mobile Network Settings Network Settings Wireless Settings Dynamic DNS Settings Services SSH HTTPS services management VPN OpenVPN Create site to si
41. the selected wireless interface 1s disabled 31 Page 4 10 2 Ping Reboot The Ping Reboot feature allows rebooting the router 1f the connection to GSM network is lost This feature checks using ICMP echo request like ping utility if specific hosts are accessible on the network Function allows adding several host IP addresses When at least one server does not respond the router is rebooted if the check box Enable reboot if no echo received Ping Reboot The Ping Reboot feature allows rebooting the router if the connection to GSM network is lost Reboot on ping fail settings Enable EJ Ping interval Retry count Enable reboot if no echo received E Server to ping Figure 34 Site Survey Table Enable check the box to enable Ping Reboot feature Ping interval specify the monitoring time period in seconds Time scale set ping interval time scale in minutes or hours Retry count specify the number of failed reach ability checks Enable reboot if no echo received enable reboot the router if no echo to sent ICMP requests is received Server to ping Set the host IP address to which ICMP requests will be sent 4 10 3 Diagnostics Network utilities such as Ping Traceroute and Nslookup to diagnose the network connection Diagnostics Network Utilities Ping Traceroute Nslookup Server 127 0 0 1 Address 1 127 0 0 1 localhost Name a 48 B AB Address 1 8 8 8 8 Figure 35
42. tocol Udp Port 1134 Bl TCP UDP port for both local and remote LZO Ol E Use fast LZO compression Debug level Authentication Remote host IP address Po Resolve Retry Local tunnel endpoint IP AA Remote tunnel endpoint IP EIA Remote network IP address AA Remote network IP netmask Si O O Static pre shared key Choose File No file chosen Figure 19 Chent configuration Enable Check box to enable the OpenVPN Tun Tap Select tunneled or bridged connection Protocol Select UDP or TCP protocol Port Set the OpenVPN port Default port 1194 LZO Check box to enable the LZO compression Default disabled Debug level Select the connection debugging level Default 5 Authentication Choose the authentication type Static key or Tls Remote host IP address Specify the remote device OpenVPN server IP address Resolve Retry Connection retry count Default infinite Local tunnel endpoint IP Specify the IP address of the local VPN tunnel endpoint Remote tunnel endpoint IP Specify the IP address of remote VPN tunnel endpoint Remote network IP address Specify the remote network IP address Remote network netmask Specify the remote network subnet mask Static pre shared key Static key configurations offer the simplest setup and are ideal for point to point VPNs The GUI allows to upload the static key Important The same key must be uploaded in server and client e g if the key was generate
43. wan on this device EF From host in Ti ter IP on thi E Allow Ping IPv4 ICMP with type echo request a ee i A e aa Accept input Edit Delete wan device From hostin Ti i ter IP at port 7081 z New Rule Any TCP UDP eee ce Fo en ee ee Accept input Edit Delete wan on this device Open ports on router Name Protocol External port Po Y HUDP Sk ADA Figure 28 Traffic rules This page displays the currently created active or disabled rules with short description of every rule Here new rules can be added the existing rules can be edited or deleted Enable Check or uncheck the box to enable or disable the rules Name Displays the name of rules Protocol Displays the protocol to which the rule is bind Source Shows the source address and its area Destination Shows the rule destination and assigned port Action Displays the rule current action Edit Press to edit the rule Delete Press the remove the rule To add a new rule Write a name for new rule in Name field Choose the required protocol in Protocol field Set the required port number in External port field Press Add button For more detailed configuration of a newly or already existing rule press the Edit button near the required rule 28 Page 4 9 2 Traffic rules additional settings Here you can edit the settings of newly created or existing rule Firewall Traffic Rules New Rule This page allows you to change advanced properties of the traffic rule ent
44. wo pole protective device O O Electrical Signal level of the device depends on the environment in which it is working If the device starts working insufficiently only qualified personnel may repair this product We recommend to forward it to repair centre or to manufacturers No exchangeable parts inside of the device 5 Page 2 PRODUCT OVERVIEW 2 1 Introduction Teltonika 3G Mobile Router provides WAN connectivity to wired and wireless clients using the 3G cellular data network It allows multiple users to get IEEE 802 11 compliant connection within your wireless broadband network with a single 3G data access account and SIM card 3G Mobile Router is extremely useful for mobile work teams or emergency crews that need access to the broadband Internet but have no permanent base The 3G IEEE 802 11 router might be an easy solution to provide Internet connection for commuter vehicles such as trains or company buses Quickly set up a IEEE 802 11 hotspot Internet connection to check email and browse the web or share files 2 2 Package contents RUT104 3G HSPA Mobile Router External Wireless LAN antenna External GSM antenna Power adapter DIN Rail optional Leaflet Quick Start Guide Note The manufacturer does not supply the SIM card which is mandatory for setting up a connection to the GSM network The SIM card may be purchased from your GSM mobile service provider Note Using a power supply with a diff
Download Pdf Manuals
Related Search