Home

NB1600 Router F User Manual NB1600 Router Family er

1. r PN y http 19216811 adn User Manual NB1600 Router Family nin openVPN ph O BG X amp NetBox Wireless Router We X gt Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Administration Tunnel Configuratio Tunnel 1 Configuration IPsec Operation mode disabled Administrati xi Configurat e client server PPTP Server Dial in Server Mobile IP NB1600 NetBox Wireless Router Soft Version 3 5 0 6 2004 2011 NetModule AG 11 Apr 2012 37 80 net Module 4 6 1 3 OpenVPN Expert Configuration Client The expert configuration mode offers a straightforward way to configure a tunnel by simply uploading a package containing the required configuration and key certificate file For a client tunnel the typical files are e client conf OpenVPN configuration file see http www openvpn net for available options e ca crt root certificate file e Client crt certificate file e Client key private key file Please note that you may specify arbitrary file names however the configuration file suffix must be conf and all files referred in the conf must correspond relatively to the path names specified in the configura tion 4 6 1 4 OpenVPN Expert Configuration Server A server tunnel typically requires the following files e server conf OpenVPN configuration file e ca crt root certificate file e server crt certificate file e
2. Qo amp http 192 1681 1 admin systemInforn net Module System Settings Time amp Region System Information Restart Authentication Authentication User Accounts i Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 10 4 Restart HOME System Summary Component Product name Product type Hardware version Serial number Operating system System software UBoot SPL WWAN module WWAN IMEI WLAN O module WLAN O MAC address RAM Flash memory System time Uptime LR amp C X NetBox Wireless Router We X INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT oss NetBox Wireless Router NB1600 V2 2 00112B0020BB Linux 2 6 36 3 5 0 6 unsupported beta version 3 5 0 100 3 5 0 100 Manufacturer Option N V Model GTM671 Revision 1 8 4 0 Date Apr 5 2011 Time 11 53 13 354153040085846 ar9285 PCI ID 168C002B 000CE36E7325 64 MB 128 MB 2011 11 25 02 22 00 4 13 This menu can be used to restart the system Any WAN links will be dropped E Go hitp 192 168 1 1 admin restartphp D BOX le
3. 4 9 10 Unstructured Supplementary Services Data USSD Unstructured Supplementary Services Data USSD is a GSM service that allows high speed interactive communication between the subscribers and applications across a GSM Network A sample USSD service is the bill status service accessed by dialling 141 or similar numbers in between and Contact your mobile operator for further information e nttp 19216811 admin usdphp Or BOX le NetBox Wireless Router We X net 5 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Unstructured Supplementary Services Data USSD DHCP Server DNS Proxy Server Service number Dynamic DNS Client Provider response E mail Client Event Manager Events Subscribers Event Processor L GPS Settings Data SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router User Manual NB1600 Router Family 11 Apr 2012 54 80 net Module 4 9 11 Web Server Parameter Description HTTP port Web server port for HTTP connections HTTPS port Web server port for HTTPS connections EE A Go http 192 168 1 1 admin webServer ph 8 X amp NetBox Wireless Router We X mo netos HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT en Web Server Configuration DHCP Server HTTP port en m DNS Proxy Server P 80 Dynamic DNS Client ore 443
4. Location Trap target host Trap target port Signal strength trap threshold Signal strength trap reactivation threshold Location of the device The host where the traps will be sent to The port where the traps will be sent to than this value A trap will be sent if signal strength falls below this threshold No further traps will be sent as long as signal strength his not higher Once the SNMP agent is enabled the SNMP traps are generated in case of the following conditions e Start up of the box e Shutdown of the box e VPN connected e VPN disconnected e Signal strength fell below Signal strength trap threshold The start up trap is implemented using the standard cold Start amp warm Start traps The system shutdown trap is sent when the system is rebooted via the reboot function of the web inter face or when the watchdog reboots the system Q C CH e http 192 168 1 1 admin snmpAgentr JO B X net PS Module DHCP Server DNS Proxy Server Dynamic DNS Client E mail Client Event Manager Events SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router S oftware Version 3 5 0 2004 2011 NetModule AG Server php HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT SNMP Agent Administration SNMP agent status SNMP Agent Configuration Operation mo
5. Port Settings WPA WPA2 mixed mode WPA WPA2 IP Sett ds WPA cipher TKIP Mobile Passphrase Apply M Configuration IP Settings Serial Port Settings Device Server Digital O NB1600 NetBox Wireless Router Software Version 3 5 0 6 U 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 24 80 4 3 5 4 net Module WLAN Configuration Access Point Running in access point mode you can define up to 4 SSIDs that is networks to be broadcasted to your WLAN clients This section can be used to configure security related features Parameter SSID Security mode WPA WPA2 mixed mode WPA cipher Passphrase 4 3 5 5 Description The network name SSID The desired security mode We strongly recommend performing authentication and encryption on any WLAN links such as WPA PSK WPA 802 1x can be used to authenticate against a remote RADIUS server in your backbone A RADIUS server can be configured in the Remote Authentication section WPA2 should be preferred over WPA1 Running WPA WPA2 mixed mode offers both The WPA cipher to be used you can leave both TKIP CCMP Your passphrase WLAN IP Settings This section can be used to configure the TCP IP settings of your WLAN networks when running in ac cess point mode You can bridge the WLAN interface to any LAN interface for letting WLAN clients and LAN hosts operating in the same subnet However for multiple SSIDs we strongly
6. Configure your provider s settings such as user password APN in the Configuration section You can load these settings from our comprehensive database Enable the link in the Administration section commonly with the default settings provided there bile link set in WAN Link Management menu Being the first WAN link the primary link will automatically switch to Mobile then 2 4 Ensure to have the Mo 4 3 4 1 Administration You can enable and disable the Mobile connection here and control the start mode of the Mobile link Regarding the administrative status we recommend using the permanent option for unlimited ac counts Generally the service type of the connection will be determined automatically depending on your coverage and general availability of networks like 3G 4G The UMTS GSM LED will be blinking dur ing the connection establishm ent process and goes on as soon as the connection is up Refer to the trou bleshooting section and log files if the connection does not come up Parameter Administrative connection status Redial attempts Dial on demand idle timeout Operational connection status Application area Service type User Manual NB1600 Router Family Description This can be permanent dial on demand or disabled On demand links will be established as soon as outbound packets are routed to this interface The permanent method will up the mobile interface permanently In cas
7. OUT1 OUT2 6 1 1 Monitor the digital inputs and outputs Every digital input change triggers a message of the described format It also contains the valid states of the outputs 6 1 2 Set digital outputs In order to set the digital I O port states you may send the following pattern ASCII characters Pattern Description 00000000 Turn all digital outputs off 00000001 Turn output 2 on turn output 1 off 00000010 Turn output 1 on turn output 2 off 00000011 Turn output 1 on turn output 2 on 6 1 3 Get status of digital inputs and output To get the states of the digital I O ports you may send the following pattern ASCII characters Pattern Description 00010000 Request a message with all states User Manual NB1600 Router Family 11 Apr 2012 74 80 6 2 HTTP Service Interface net Module The HTTP service interface is designed to administrate the NetBox with a common http client It basically consists of a set of web pages PHP located in the root directory of the web server e login php used by HTTP clients to log in e logout php used by HTTP clients to log out e upload php can be used to upload configuration files e download php can be used to download log files e cli php the HTTP version of the CLI offers the same command set Further documentation and help for utilizing the HTTP service can be provided on demand 6 2 1 Command Set General Restrictions e When sending parameters within
8. Reference host 1 Reference host 1 which will be used for checking IP connectivity done via ICMP pings Reference host 2 Reference host which will be used for checking IP connectivity done via ICMP pings The test is considered successful if either host 1 or 2 answers Source IP address IP address to be used as source of the ping probes You can apply a spe cific interface address to force the usage of a particular link Monitoring interval The time to wait before sending the next probe in case the last probe was successful Retry interval The time to wait until sending the next probe in case the last probe was unsuccessful l Trials Number of consecutive unsuccessful probes that are required until a re covery action is initiated The recovery actions are e Trying to re establish a broken connection e Restart the internal modem e Restart the system User Manual NB1600 Router Family 11 Apr 2012 15 80 net Module WAN Link Management Connection Supervision MSS MTU Ethernet Link Settings Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Connection Supervision Administrative status Ping host 1 Pin
9. upload ok files re Upload ok the provided files e g placed reconfiguration OpenVPN certificates were updated the started user config cfg will be applied 1 upload ok files re No user config cfg provided but other placed files were updated e g OpenVPN certifi cates 0 upload failed lt er The upload failed rorMessage gt User Manual NB1600 Router Family 11 Apr 2012 76 80 6 2 3 HTTP Request Examples Command Query the NetBox Firmware Version via HTTP GET celi php status system nbs w HTTP 1 1 GET login php usr admin pwd lt password gt HTTP 1 1 Login GET cli php set user admin pa ssword lt password gt HTTP 1 1 Set the admin Pass word Upload new Configu ration Files POST upload php HTTP 1 1 Content Disposition form data name UserConfigFile filename user config zip Content Type applica tion x zip compressed Media GET download php file debuglo g HTTP 1 1 Download Debug Log Restart the NetBox GET cli php reboot HTTPZ T 1 Logout Start a local software GET update cli php swupdate path lt se rver path gt HTTP 1 1 User Manual NB1600 Router Family 11 Apr 2012 GET logout php HTTP 1 1 net Module Description Remember The dots must be re placed by colons A zip archive containing the user con figuration and other essential system files such as keys or expert configura tions 77 80 net EN Module 7 T
10. Authentication Number of ICMP probes 5 User Accounts Remote Authentication Timeout seconds File Configuration Max time to live Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support I Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 64 80 4 10 9 2 Log Files net Module Log files can be viewed a downloaded and reset here Please study them carefully in case of any issues net Module System Settings Time amp Region System Information Restart Authentication Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset M Troubleshooting Network Debugging Log Files Tech Support Software Update L Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 10 9 3 Tech Support http 192 168 1 1 admin systemInformation php HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Log Viewer Select log Debuglog Boot log Number of lines to be displayed all 9 last 100 lines Nov 25 02 05 01 netbox daemo
11. HTTP GET requests dots within variables must be replaced by colons Example The key name user admin password results in user admin password e Authentication is required for all commands except GET cli php status parameters HTTP Request Description GET cli php status parameters GET cli php get parameters GET cli php set parameters GET cli php sw update url lt URL gt GET cli php sw update path lt value gt GET cli php reboot GET login php usr lt user gt pwd lt password gt GET logout php GET download php file lt fileName gt POST upload php User Manual NB1600 Router Family Takes the same parameters asthe CLI Takes the same parameters as the CLI Takes the same parameters as the CLI Starts a software update by downloading the new soft ware from a server Supportes protocols include http https ftp tftp file Credentials can be specified as follows ftp user pass hostname port path Starts a local software update from a TFTP server only use it for backward compatibility Restarts the NetBox Login to the HTTP Service Interface with supplied cre dentials Logout from the HTTP Service Interface Download a file e Debug log file debuglog e Boot log file bootlog Takes a new configuration file as user config cfg or as user config zip The content of the file must be the same as provided for the Web Manager 11 Apr 2012 75 80 net Module 6 2 2 Responses
12. HTTP Request Responses String Description All HTTP Service Interface Com 0 device busy The NetBox is busy please try again later mands All HTTP Service Interface Com 0 login required This command requires authentication mands Please use login php first GET cli ohp status parameters lt status gt A single or multiline string with the re quested status information GET cli php get parameters lt parameterValue gt The value of the requested configuration parameter GET cli php set parameters 0 set failed HTTP transfer is ok but changing the configuration parameter failed 1 set ok GET cli php sw 1 sw update started Software update started Afterwards re update path lt value gt from lt path gt quest the Software version with cli php status to verifiy whether it was successful or nor not 0 maximum length of path is 26 characters 0 syntax error Wrong syntax after in sw update pa rameters GET cli php reboot 1 reboot initiated A restart has been initiated GET 1 already logged in login php usr lt user gt pwd lt pa ssword gt 1 already logged in but Already logged in but supplied creden supplied credentials do tials do not match not match Logged in successfully 0 login failed Login failed GET logout php Logout OK 1 already logged out You were not logged in GET 0 download file Download failed download php file lt fileName gt Name failed POST upload php 1
13. NetBox Wireless Router We x lad net gy Module System Settings Time amp Region System Information Restart Authentication Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Restart Message from webpage o Do you want to restart the device 11 Apr 2012 net Module 59 80 net Module 4 10 5 Authentication r Go e http 19216811 admin authenticatio Oy BOX e NetBox Wireless Router We X netz HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Authentication System Setti x ane Authentication method Authentication required n m Allowed login methods http https telnet ssh Restart Authentication Apply Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wirele
14. PPPOE1 MOBILE1 TUNI TUN2 TUN3 TUN4 TAP2 TAP3 v NB1600 NetBox Wireless Router So Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 33 80 net EN Module 4 5 2 2 NAPT Inbound Rules Inbound rules can be used to modify the target section of IP packets and for instance forward a service or port to an internal host By doing so they will expose the service and make it reachable e g from the Internet You may also establish 1 1 NAT to a complete host Parameter Description Description A meaningful description of this rule Incoming interface The interface from which matching packets are received Target address The destination address of matching packets optional Protocol The used protocol of matching packets Ports The used UDP TCP port of matching packets Redirect to The address to which matching packets shall be redirected Redirect port The port to which matching packets will be targeted BOX e NetBox Wireless Router We net Jj Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Add NAPT Rule For Inbound Packets Firewall Administration Rules Description NAPT Incoming interface ANY v Administration Inbound Rules Outbound Rules Protocol ANY Target address Ports to Redirect to Redirect port Same port Specify Cancel NB1600 NetBox Wireless Router So i ftware Version 3 5 0 6
15. Port Settings Device Server Digital O Profile and Fallback Management You don t know these settings Load them from our database Parameter Primary Profile Fallback Profile Phone number 99 14 99 18 User name Password Access point name Authentication method PAP CHAP PAP CHAP Call to ISDN IP header compression Software compression PPP DNS query Enable specific client IP address Specific client IP address Profile switch condition User Manual NB1600 Router Family ware Version 3 5 0 6 2004 2011 NetModule AG NB1600 NetBox Wireless Router 11 Apr 2012 21 80 4 3 4 3 SIM net EN Module This section can be used to configure your PIN code and SIM settings PIN protection can only be changed if you entered a correct PIN code before NetBox can only handle SIM cards if either the correct PIN code is provided or if PIN protection is dis abled Parameter PIN protection PIN code SMS center number Parameter Network selection User Manual NB1600 Router Family Description Enable or disable PIN protection The PIN code for the SIM card Number of Short Message Service Centre SMSC for sending Mobile Originating MO SMS messages Contact your mobile operator for obtaining the correct number A comprehensive database can also be found here http umtslink at sms smsc_rufnummern htm Description Choos
16. Software Update Parameter Description Status Enable disable automatic software update Time of day Every day at this time NetBox will do a check for updates URL The server URL where the software update package should be downloaded from Supported protocols are TFTP HTTP s and FTP Last software update The result of the last software update attempt j T E Go e http 192 168 11 admin autoUpdater BOX amp NetBox Wireless Router We X y net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Automatic Software Update System Settings E Time amp Region Status enabled System Information disabled Restart Time of day 00 00 Authentication URL PES Last software update No result data available Remote Authentication File Configuration Apply Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 66 80 net EN Module 4 10 10 2 Manual Software Update This menu can be used to run a manual software update of the system Parameter Description Update operation The update operation method being used You can upload the image download it from an URL
17. WLAN Outl Out2 Int In2 Colour State Function Presence blinking The device is busy due to startup software or configura Always tion update solid The device is ready The captions of the right bank apply solid The device is ready The captions of the left bank apply green on PPPoE connection is up NB1600 Wireline PPPoE connection is down NB1600 WLAN green on Mobile connection is up NB1600 UMTS blinking Mobile connection is down NB1600 LTE The colour of the LED represents the signal quality NB1600 WIAP red low yellow moderate green good green on VPN connection is up Always off VPN connection is down green on WLAN connection is up NB1600 WLAN off WLAN connection is down NB1600 WIAP The colour of the LED represents the signal quality red low yellow moderate green good yellow on Normally open output closed Always off Normally open output open yellow on Normally closed output is closed Always off Normally closed output is open yellow on Input set Always off Input not set yellow on Input set Always off Input not set Table 1 The NB1600 status indicators User Manual NB1600 Router Family 11 Apr 2012 8 80 net Module 2 2 Interfaces Panel Function Presence USB Front USB Host Port To be used as USB device server or for Always software configuration update Ethernet 1 Front First Ethernet Port Can be used as LAN or WAN Port Always Ethernet 2 Front First Ethernet Port Can be us
18. against the RADIUS server The port used for authentication The port used for accounting messages This option enables remotely defined users to access the Web Manager User Manual NB1600 Router Family 11 Apr 2012 61 80 net EN Module 4 10 8 File Configuration Configuration via the Web Manager becomes tedious for large volumes of devices NetBox therefore of fers automatic and manual file based configuration to automate things Once you have successfully set up the system you can back up the configuration and restore the system with it afterwards You can ei ther upload a single configuration file cfg or acomplete package zip containing the configuration file and a packed version of other essential files such as certificates 4 10 8 1 Automatic File Configuration Parameter Description Status Enable disable automatic configuration update Time of day Time of day when the system will check for updates URL The server URL where the configuration file should be retrieved from supported protocols are HTTP s TFTP FTP Last config update The result of the last configuration update attempt X N E http 192 168 1 1 admi e n fileConfig ph O amp C X NetBox Wireless Router We X net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Configuration Download System Settings Current configuration Time amp Region System Information Restart Configurat
19. be used in the 5 GHz band higher throughput in 20 40 MHz mode can be achieved in 802 11n Select the band to be used depends on your WLAN module The channel to be used If automatic is selected the system will automatically scan your neighbouring networks and choose the less interfering channel ac cording to your configuration Qo User Manual NB1600 Router Family gt amp http 192 168 1 1 admin wlanManage JO BS X e NetBox Wireless Router We X t Module s 5 HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WLAN Management WAN Link Management tM 7 Connection Supervision Administrative status 9 enabled MSS MTU disabled Ethernet Link Settings Operational mode Client Port Settings Access Point IP Settings Number of antennas 2 Mobile Administration Configuration Operation type 80211b SIM Radio band 24GHz WLAN Administration Channel auto v Configuration IP Settings Apply USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router So 6 ftware Version 3 5 0 2004 2011 NetModule AG 11 Apr 2012 23 80 net EN Module 4 3 5 2 WLAN Configuration The WLAN interface can be operated in client or access point mode In client mode it can be used as an additional WAN link and added to the WAN Link Management In access point mode you can define up to 4 networks being offered The networks ca
20. device like a DSL modem PPPoE user name to be used for authenticating at the access device PPPoE password to be used for authenticating at the access device Specifies the service name set of the access concentrator Leave it blank unless you have many services and need to specify the one you need to connect to This may be left blank and the client will connect to any access con n QC e http 192 168 1 1 admin lanlp php ANE D BS X NetBox Wireless Router We X net Module D HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WAN Link Management Connection Su MSS MTU Ethernet Link Settings Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital O LAN2 IP Settings LAN1 LAN1 pervision Mode LAN WAN Static Configuration IP address 192 168 1 1 Subnet mask 255 255 255 0 NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG centrator x User Manual NB1600 Router Family 11 Apr 2012 19 80 4 3 4 1 Mobile 2G 3G For setting up a Mobile connection it s always a good idea to proceed as follows Verify the card net Module 3G 4G status in the SIM section and enter your PIN code in case your SIM card is using PIN protection
21. getting engaged User Manual NB1600 Router Family 11 Apr 2012 11 80 net Module 4 Configuration via Web Manager Recommended If you are new to NetBox we recommend the configuration using the Web Manager For batch configura tions you may upload configuration files either using the Web Manager or triggered via SNMP telnet or SSH Advanced users can use the Command Line Interface chapter 5 The Web Manager supports the latest web browser e g Microsoft Internet Explorer 9 Mozilla Firefox 8 0 and many others Please ensure to have JavaScript turned on By default the IP address of the Ethernet port 1 is set 192 168 1 1 and the DHCP server is turned on Please apply the following steps for establish ing your first Web Manager session Step Description 1 If not yet enabled please enable the Dynamic Host Configuration Protocol DHCP so that your computer can lease an IP address from NetBox This usually takes some time until your PC has received the corresponding parameters IP address subnet mask default gateway DNS server 2 Please connect the Ethernet 1 port of NetBox with the Ethernet port of your computer You may take a look to your network control panel and check if your PC has correctly retrieved an IP address 3 Start a Web Browser on your PC and point it to the NetBox by entering the IP address in the address bar http 192 168 1 1 4 Please follow the instructions of the Web Manager in order to configure the d
22. img cfg lt SERIALNO gt zip e g cfg 00112B000815 zip Description isable auto run feature n n Go hitp 192 168 1 1 admin autorun net Module WAN Link Management Connection Supervision MSS MTU Ethernet Link Settings Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Interfaces Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router V 5 0 6 2004 2011 NetModule AG f php O BOX ie NetBox Wireless Router We lt a vs HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT USB Autorun This feature can be used to automatically perform a software config update as soon as an USB storage stick has been plugged in The following files must exist in the root directory of a FAT16 32 formatted stick For authentication autorun key download For a software update sw update img For a configuration update Cfg SERIALNO zip e g cfg 00112B000815 zip Enable autorun feature The autorun key file must hold valid access keys to perform any actions when the storage device is plugged in The keys are made up of your admin password They can be generated and downloaded You may also define multiple keys in this file line after line in case your admin password differs if applied to multiple NetBox routers User
23. net Module System Settings Time amp Region System Information i Restart Authentication Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG http 192 168 1 1 admin techSupport php User Manual NB1600 Router Family HOME r m Go amp http 192 168 11 admin techSupport JO BG X ie NetBox Wireless Router We X um Tech Support You can generate and download a tech support file here INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT We strongly recommend to provide this when getting in touch with our support team either by E Mail or via our online support form as it would significantly speed up the process of analyzing and resolving your problem 11 Apr 2012 65 80 net EN Module 4 10 10 Software Update Software upgrade from the last official software release to the current release published on www netmodule com is supported For further details please consult the release note Software downgrade is not supported Software downgrade may lead to loss of configuration and inac cessibility of the device 4 10 10 1 Automatic
24. or use the latest version from our server URL The server URL where the software update image should be downloaded from Supported protocols are TFTP HTTP s and FTP S http 192 168 1 1 admin manualUpdat BS X amp NetBox Wireless Router We net IS HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Manual Software Update System Settings Time amp Region System Information Upload image Restart Download from URL Download latest image from server Update operation Authentication Authentication User Accounts Upload image Browse Remote Authentication File Configuration Upload Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG http 192 168 1 1 admin restart php User Manual NB1600 Router Family 11 Apr 2012 67 80 net Module 4 10 11 Licensing This menu allows you to view and update the license status of your system Note that some features are disabled if no valid license is provided C E y mM m Go e http 192 168 1 1 admin licensing php BO X amp NetBox Wireless Router We X net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT L
25. radio receivers and per sonal computers After configuration it is recommended that you should create a copy or backup of the configuration set tings that are stored in the memory of the device The configuration data can be downloaded using the Web Manager Do not work at the antenna installation during a lightning Always keep a distance bigger than 40cm from the antenna in order to reduce your exposure to electro magnetic fields below the legal limits This distance applies to Lambda 4 and Lambda 2 antennas Bigger distances apply for antennas with higher gain If not mounted on a DIN rail the device must be installed so that one of the entirely closed case sides points towards ground All connections of the 15 pin connector must be plugged All threaded holes must be provided with screws or covered with metal Consult the manual for the installation Adhere to the instructions documented in the user manual User Manual NB1600 Router Family 11 Apr 2012 5 80 net Module 1 2 Declaration of Conformity NetModule declares that under our own responsibility the products NetBox Wireless Routers comply with the relevant standards following the provisions of the Council Directive 1999 5 EC The signed Declarations of Conformity can be found under the following addresses NB1600 http www netmodule com store products nb1600 conformity declaration e pdf 1 3 Waste Disposal In accordance with the requirements of the council direct
26. you want to have different subnets per port or use one port as WAN interface If it is desired to have both ports in the same LAN you may assign them to the same interface Please note that the ports will be bridged by soft ware and operated by running the Spanning Tree Protocol i l CEN HUE a oe http 192 168 1 1 admin lanPorts php 8 X amp NetBox Wireless Router We X net oS Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Ethernet Port Settings WAN Link Management s EO Network interface for Ethernet 1 LANI o Network interface for Ethernet 2 LAN2 Ethernet Link Settings i Port Settings i IP Settings Mobile Administration Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router ftware Version 3 5 0 6 amp 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 18 80 4 3 3 3 IP Settings Parameter Mode WAN mode User name Password Service name Access concentrator name net EN Module Description Define whether this interface is being used for LAN or WAN DHCP client means that the IP configuration will be retrieved from a DHCP server in the network Thus no further configuration is required Static configuration allows you to set the IP parameters manually PPPoE is the preferred protocol when communicating with another WAN access
27. 1 4 9 12 4 10 4 10 1 4 10 2 4 10 3 4 10 4 4 10 5 4 10 6 4 10 7 4 10 8 4 10 9 4 10 10 4 10 11 4 10 12 7 1 7 3 8 1 8 2 net Module DRAC EINS num am TT 45 E MAC SE en 46 EVEN NA E A 47 sl M 50 redu OMS ON eee ee een 51 NNP AOC ll nen 51 UDP Message RECEIVEM ccssssssssscssessessssssssscsscssessesssssssssssnssscssessessesssssucsncencsssssesssssucsussuceaseasssscascaucsuceacenceaeesesascsscesceneess 54 Unstructured Supplementary Services Data USSD ns 54 LEERE E E E E E iamen inten Wat eem aga ep WO MEE MIU E 55 Rodun cie ei PNE E LR 56 NS LOT re Een 57 I II RR 57 TANG ANG REO Meera E a a aa 58 SVSIeRm TDEIOD Nt IDT ee ee rer 59 OS REN m m m 59 PUTER SUM U T Em 60 USO ACCOUNT 60 Remote Authentication NT 61 EE Conngu aUo sinai TEAN one 62 WOUNE OO E E E EE H 64 SON NAO A OM 66 CSA re NAA T 68 Keys and Certificates sise 68 LOGO en ae N A N E A E E E AAE 68 Configuration via Command Line Interface Advanced 69 CERE C m 69 CERB I EEVEREEEEEERG 70 SolbWare UNCC CS ciiin iiis Erro ERIEERI DRE ENS EHI ERIT ee een 74 PAD TO SS SU PE 74 Monito
28. 1 1 1 3 6 1 4 1 31496 10 40 10 0 i 1 run configuration update snmpset v 3 u admin n authNoPriv a MD5 x DES A adminO1adminO1 192 168 1 1 1 3 6 1 4 1 31496 10 40 11 0 s http server directory REMARK configUpdate expects a zip file named serial number zip in the specified directory which contains at least a user config zip Supported protocols are TFTP HTTP s and FTP Specifying a username password or port is not yet supported get configuration update status snmpget v 3 u snmpadmin n authNoPriv a MD5 x DES A snmpadmin 192 168 1 1 1 3 6 1 4 1 31496 10 40 12 0 The return value can be one of 1 succeeded 2 failed 3 inprogress 4 notstarted run software update snmpset v 3 u admin n authNoPriv a MD5 x DES A adminO1adminO1 192 168 1 1 1 3 6 1 4 1 31496 10 40 13 0 s http server directory get software update status snmpget v 3 u snmpadmin n authNoPriv a MD5 x DES A snmpadmin 192 168 1 1 1 3 6 1 4 1 31496 10 40 14 0 The return value can be one of 1 succeeded 2 failed 3 inprogress 4 notstarted Parameter Description SNMP agent status Enable or disable the SNMP agent Listening Port SNMP agent port Community An SNMP community string corresponding to the group that devices and management stations running SNMP belong to Contact System maintainer contact information User Manual NB1600 Router Family 11 Apr 2012 52 80 net EN Module
29. 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 34 80 net EN Module 4 5 2 3 NAPT Outbound Rules Outbound rules will modify the source section of IP packets and can be for instance used for 1 1 NAT Parameter Description Incoming interface Source address Protocol Ports Rewrite source address Rewrite source port Description A meaningful description of this rule The outgoing interface on which matching packets are leaving the router The source address of matching packets optional The used protocol of matching packets The used UDP TCP port of matching packets The address to which the source address of matching packets shall be rewritten The port to which the source port of matching packets shall be rewritten r gt http 19216811 admin naptout php BOX le NetBox Wireless Router We X net lt 5 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Add NAPT Rule For Outbound Packets Firewall Administration Rules Description NAPT Outgoing interface ANY v i Source address Inbound Rules i Outbound Rules Protocol ANY Source ports to Rewrite source address to Rewrite source port to Same port Specify Cancel NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 35 80 net Module 4 6 VPN 4 6 1 OpenVPN 4 6 1 1 Open
30. B AG amp 1 1 i eiti 100000 un g 9 a c Z S UMTS LTE Wireline net Module User Manual NB1600 Router Family 11 Apr 2012 net Module Table of Content 1 Safety and GonformlbV zes ns 5 1 1 Seien A UUM 620 0 d RIT 5 1 2 D claration Or CON TOME aa ea ma RR 6 13 SD t 6 1 4 NADIA oan 6 1 4 1 BLEU m Rm 6 1 4 2 LE 6 1 4 3 AS u e 6 1 4 4 LK a 0 10 0 met H 6 1 4 5 OMAN ee ee ae 7 1 4 6 DD DE ESEL AUION RR 7 1 4 7 Re a A 7 2 Hardware SPECHICAUONS ee een net 8 2 1 CDS OUI SOON en an ea nee nme 8 2 2 lae as Cs een een 9 2 3 FTAA PAS SUA UA m 10 2 3 1 ELIA BLOCK RE Oe 10 2 3 2 d ne a don 10 3 BDSM Re ee 11 3 1 Environmental CONIIONS samir dansant dawned 11 3 2 installation of the ROUtE M m ali then aida 11 3 2 1 installation of the SIMCA a een aa 11 3 2 2 Installation of the GSM UMTS Antenna sssssscsssscscsssssssssssssessssssesssssessssssessssssesssssessssssessssssesssessesssesseses 11 3 2 3 Installation of the WLAN Antennas wow cscsssssscscscstssssssesssssssssssssssssscsssssssssstsessssssssesesssssseseses
31. Dial in Server Address 0000 Mobile IP Server address 192 168 200 1 Client address range 192 168 200 10 to 192 168 200 13 NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 41 80 net EN Module 4 8 Dial in Server On this page you can configure the Dial in server answering data calls over a mobile connection Users that are allowed to dial in are defined under the section User Accounts Note that a concurrent use of Mobile Dial Out and Dial In is not possible Also ensure that the service type must be set to GSM only under INTERFACES gt Mobile gt Administration 4 8 1 Dial in Server Administration Parameter Description Dial in administrative status You can specify the administrative status whether incoming call shall be an swered or not Dial in operational status Shows whether a connection is active or not 4 8 2 Dial in Server Configuration Parameter Description Address range start Start address of range of clients connecting to the dial in server Address range size Number of client addresses connecting to the server m NNNM uns XB nttp 192168 1 1 admin dialin php Pr 8 X amp NetBox Wireless Router We Module S HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Dial in Server Administration OpenVPN Administration A z p Tunnel Configuration Dial in administ
32. E mail Client Apply Event Manager Events Subscribers Event Processor GPS Settings I Data SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 55 80 net Module 4 9 12 Redundancy This section can be used to set up a redundant pair of boxes or other systems by running the Virtual Router Redundancy Protocol VRRP among them A typical VRRP scenario defines a first host playing the master and another the backup device they both define a virtual gateway IP address which will be dis tributed by gratuitous ARP messages for updating the ARP cache of all LAN hosts and thus redirecting the packets accordingly A takeover will happen within approximately 3 seconds as soon as the partner is not reachable anymore checked via multicast packets This may happen when one device is rebooting or the Ethernet link went down Same applies when the WAN link goes down In case DHCP has been activated please keep in mind that you will need to reconfigure the DHCP gate way address offered by the server and let them point to the virtual gateway address In order to avoid conflicts you may turn off DHCP on the backup device or even better split the DHCP lease range in order to prevent any lease duplication Parameter Description Administrative status Administrativ
33. FIREWALL VPN SERVICES SYSTEM LOGOUT EZ Configuration of IPsec Tunnel 1 OpenVPN Ad trati E General IKE Proposal IPsec Proposal Tunnel Configuration IPsec Peer Information Administration Configuration Peer address L PPTP Server Dead Peer Detection DPD Dial in Server Mobile IP Administrative status 7 Detection cycle 30 seconds Failure threshold 3 Q NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 7 PPTP Server The Point to Point Tunnelling Protocol PPTP is a method for implementing virtual private networks be tween two hosts PPTP is easy to configure and widely deployed amongst Microsoft Dial up networking servers However it is nowadays considered insecure You will need to define users that are allowed to connect to the PPTP server in the User Accounts section Parameter Description PPTP state Enable disable PPTP server PPTP address range start Address range start for PPTP clients PPTP address range size Address range size E Go amp http 19216811 admin pptp php Pr BS X amp NetBox Wireless Router We x M met 25 HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT PPTP Server Administration OpenVPN Administration Se Tunnel Configuration PPTP administrative status enabled 9 disabled IPsec Ad trati san PPTP Server Configuration Configuration PPTP Server Server listen address Any
34. ICES SYSTEM LOGOUT SMS Administration DHCP Server DNS Proxy Server SMS notification enabled 9 disabled Dynamic DNS Client SMS control enabled disabled vel Subscribers pply SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 50 80 net Module 4 9 7 SSH Telnet Server Parameter Description Administrative status Whether the SSH Telnet service should be enabled disabled Port SSH Telnet server port r re xd e http 192 168 1 1 admin sshTelnetSe n amp C X NetBox Wireless Router We X net 25 HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT SSH Server Administration DHCP Server DNS Proxy Server Administrative status enabled Dynamic DNS Client disabled E mail Client ee 22 Event Manag Events Telnet Server Configuration Subscrib Event Processor Administrative status enabled GPS disabled Server port 23 SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router Software Version 3 5 0 2004 2011 NetModule AG http 192 168 1 1 admin dynDNS php 4 9 8 SNMP Agent The box is equipped with a SNMP daemon supporting basic MIB tables such as ifTable plus additional enterprise MIBs to manage
35. Manual NB1600 Router Family 11 Apr 2012 26 80 4 3 6 2 USB Device Server Parameter Administrative status Description Enable or disable USB device server Go et Module WAN Link Management Connection Supervision MSS MTU Ethernet Link Settings Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Interfaces Configuration IP Settings USB Autorun Device Server Serial Port Digital VO NB1600 NetBox Wireless Router Software Version 3 5 0 6 e NetBox Wireless Router We X al nttp 19216811 admin usbipphp Or BOX HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT USB Device Server The USB device server can be used to access attached USB devices over TCP IP Administrative status enabled 9 disabled net EN Module As soon as the USB device server has been enabled you can refresh the discovered USB devices plugged in and attach them to the USB IP server Enabled device can now be exported to a remote host You will need an additional driver on the remote site and further installation instructions which we will happily provide on demand User Manual NB1600 Router Family 11 Apr 2012 27 80 net Module 4 3 7 Serial Port 4 3 7 1 Serial Port Settings Parameter Description Physical protocol NB1600 currently only supports RS232 Baud rate This property specifies the bau
36. SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router 6 ftware Version 3 5 0 2004 2011 NetModule AG http 192 168 1 1 admin gps php User Manual NB1600 Router Family 11 Apr 2012 44 80 net EN Module 4 9 3 Dynamic DNS The dynamic DNS client on this box x is generally compatible to various DynDNS services in the Internet running by means of definitions by the DynDNS organization see www dyndns com for server implemen tations Parameter Dynamic DNS status Service type Host name Server address Server port User name Password Support e mail Description Enable or disable the Dynamic DNS Client The DynDNS service type and protocol being used The provided DynDNS name e g mybox dyndns org Server IP address or host name typically members dyndns org Server port of the DynDNS server Username used for authenticating at the service Password used for authentication Support e mail address required for some services gt e NetBox Wireless Router We gm Go amp http 19216811 admin dynDNS php O B X net Sy Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Dynamic DNS Administration DHCP Server DNS Proxy Server Dynamic DNS status enabled disabled Dynamic DNS Client E E mail Client Dynamic DNS operational status disabled Event Manager Dynamic DNS Conf
37. VPN Administration Parameter Description OpenVPN administrative status Enable or disable OpenVPN If enabled OpenVPN client configurations will be started whenever a WAN link has been established Server configurations will be started immediately after boot up e http 19216811 admin openVpnAdn D B X e NetBox Wireless Router We X netz HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT OpenVPN Administration OpenVPN Administration Tunnel Configuration OpenVPN administrative status enabled disabled IPsec Administration Restart on link change 7 Configuration PPTP Server Dial in Server OpenVPN Status Mobile IP Tunnel 1 disabled Tunnel 2 disabled Tunnel 3 disabled Tunnel 4 disabled NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG http 192 168 1 1 admin openVPN php User Manual NB1600 Router Family 11 Apr 2012 36 80 net EN Module 4 6 1 2 OpenVPN Tunnel Configuration The router supports a single server tunnel and up to 4 client tunnels You can specify tunnel parameters in standard configuration or upload an expert mode file which has been created in advance Refer to sec tion OpenVPN Client Management to learn more about how to manage clients and generate the files Parameter Operation mode Primary server address Primary server port Secondary server address Secondary server port Type Netwo
38. Wireless Router We X mu netz HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT IPsec Administration OpenVPN Administration AS P Tunnel Configuration IPsec administrative status enabled disabled IPsec Administration Propose NAT traversal V Configuration PPTP Server Dial in Server IPsec Status Mobile IP L Tunnel 1 disabled Tunnel 2 disabled Tunnel 3 disabled Tunnel 4 disabled NB1600 NetBox Wireless Router Software Version 3 5 0 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 39 80 4 6 2 2 Parameter Remote server address Remote LAN address Remote LAN subnet mask NAT Traversal Preshared Key PSK IKE mode IKE encryption IKE hash IKE Diffie Hellman Group Perfect Forward Secrecy PFS Local ID Remote ID ESP encryption ESP hash Status Detection cycle sec Failure count User Manual NB1600 Router Family IPsec Configuration net Module Description IP address or host name of IPsec peer responder server The remote private network provided by an IP address in dotted decimal notation The remote private network provided by a subnet mask in dotted decimal notation Enable or disable NAT Traversal NAT Traversal is mainly used for connec tions which traverse a path where a router modifies the IP address port of packets It encapsulates packets in UDP and therefore requires a slight overhead
39. _USER DIN_IP LOGIN_USER DIO_SOURCE UDP_MESSAGE RESTART_REASON DST_IN1 DST_IN2 DST_OUT1 DST_OUT2 4 9 5 2 Subscribers Description The current IP address on the mobile interface pppO Error message in case of mobile connection failure The current address of the OpenVPN interface IPsec or OpenVPN The IP address which has been sent to the DNS server User name which the dial in connection has been authenticated against The IP address of the dial in peer Name of the user who tried to log on to the Web Manager Source that triggered an output change Text message that has been received by the message receiver Reason why a restart happened Status of digital input 1 possible values include on off Status of digital input 2 possible values include on off Status of digital output 1 possible values include on off Status of digital output 2 possible values include on off By setting up subscribers you can specify the recipients of SMS or E Mail event notifications It is possible to create groups and populate them with users and other groups By doing so you can send event notifications to multiple destinations users n N 3 Go amp http 19216811 admin notifi cationA O BOX amp NetBox Wireless Router We X net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT DHCP Server DNS Proxy Server Dynamic DNS Client E mail C
40. and controlled via the Web Manager or by software See section 6 1 Digital I O Server on how to control inputs and outputs by software Go B http 19216811 admin digitalO php BS X amp NetBox Wireless Router We net lt 9 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Administration WAN Link Management Connection Supervision OUT1 x MSS MTU OUT2 f Ethernet Link Settings IN Port Settings IN2 IP Settings Mobile DIO Configuration Administration Configuration OUT1 after reboot O on O of keep state SIM OUT after reboot O on O of keep state WLAN Administration Interfaces Configuration IP Settings DIO Server Configuration Administrative status enabled FT 9 disabled Device Server TCP server port 2158 Serial Port Listen on ANY v Settings Device Server Apply Digital VO NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 30 80 net EN Module 4 4 Routing This menu shows all routing entries of the system which can consist of active and configured ones Netmasks can be specified in CIDR notation i e 24 expands to 255 255 255 0 Parameter Description Destination The destination network or host provided by IP addresses in dotted decimal Netmask The subnet mask which forms in combination with the destination the net work to be addressed A single host can b
41. ations or utilization of accessories that have not been approved may void the warranty The NetBox Wireless Routers must not be opened Only the replacement of the SIM card is permitted All circuits connected to the interfaces of the NetBox Wireless Router must comply with the requirements of SELV Safety Extra Low Voltage circuits and are for indoor use only Interconnections must not leave the building nor penetrate the body shell of a vehicle Possible antenna circuits must be limited to over voltage transient levels below 1500 Volts according to IEC 60950 1 TNV 1 circuit levels using safety ap proved components Use only with certified CSA or equivalent power supply which must have a limited and SELV circuit out put The NetBox Wireless Routers are designed for indoor use Do not expose the communication module to extreme ambient conditions Protect the communication module against dust moisture and high tem perature We remind the users of the duty to observe the restrictions concerning the utilization of radio devices at petrol stations in chemical plants or in the course of blasting works in which explosives are used Switch off the communication module when travelling by plane You must proceed with increased caution when using the communication module in close proximity of personal medical devices such as cardiac pacemakers or hearing aids NetBox Wireless Routers may cause interference if it is in the proximity of TV sets
42. cli status overview services sms send state cli status overview services email state cli status overview services dig in cli status overview services dig out cli status system cli status system prod name Cli status system prod type Cli status system hw ver cli status system serial User Manual NB1600 Router Family net Module Usage and Return Value cli status returns both cli status overview and cli status system concatenated The option hml is used to query a HTML version of the status information show the status of all interfaces networks and services show the status of all interfaces show the state of the SIM Card show the state of the PIN show the actual signal strength show the state of the wireless connection show the type of the wireless connection show the mode of the network selection show the current network provider show the amount of received and transmitted data show the actual down and upstream rates show the last reset date of data counter show the status of all networks show the state of the NAPT service on the mobile if show the state of the NAPT service on the vpn if show the state of the OpenVPN connection show the state of the IPsec connection show the state of the PPTP server show the status of all services show the state of the Dynamic DNS client show the state of the Dial in service show the state of the DHCP server show the state of the DNS Proxy serv
43. d rate of the COM port Data bits This property specifies the number of data bits contained in each frame Parity This property specifies the parity used with every frame that is transmitted or re ceived Stop bits This property specifies the number of stop bits used to indicate the end of a frame Software support In XON XOFF software flow control either end can send a stop XOFF or start XON character to the other end to control the rate of incoming data Hardware flow control In RTS CTS hardware flow control the computer and the modem use the RTS and CTS lines respectively to control the flow of data r SN IT net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Serial Port Settings WAN Link Management Connection Supervision Physical protocol RS232 MSS M TM Baud rate 115200 Ethernet Link Settings Data bits 8 data bits Port Settings Parity IP Settings ty None Mobile Stop bits 1 stop bit Software flow control Hoan Configuration SIM E Hardware flow control None WLAN Administration Appl Interfaces Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router ware Version 3 5 0 6 User Manual NB1600 Router Family 11 Apr 2012 28 80 4 3 7 2 Serial Device Server net Module Parameter Description Server status Enable or disable serial device se
44. d to SIM1 The information returned includes the Local Area Identity LAI Usage network sim1 sim2 Example cli network sim2 192 168 1 1 PuTTY hash 2 05b cli network sim Wireless network lei ion mode automatic L ed aunri selec Current network select Available networks Name Sunrise Swisscom CHE Telez Switzerland orange CH 22803 Op hash z 5h ct Y to 1L Operator forbidden forbidden ayallable fl m D Pr AR OR i x m ct oct amp oO oO eo mR n ci ct c n P Note The following commands are identical cli network and cli network sim1 cli select cli select automatic sets the network selection mode for the specified SIM card automatic to automatic Usage select automatic sim1 sim2 User Manual NB1600 Router Family 11 Apr 2012 70 80 net Module Command Usage and Return Value Note The following commands are identical cli select automatic and cli select automatic sim Note The following commands have the same effect cli select automatic sim1 and cli set networkselection mode automatic cli select automatic sim2 and cli set networkselection sim2 mode automatic cli select manual cli select manual selects the network provider defined by the supplied Local Area Identity LAI for the specified SIM card Usage select manual lt LAI gt sim1 sim2 Note The following commands are identical cl
45. de Listening port Community Contact Location Trap target host Trap target port Mobile signal strength trap threshold Mobile signal strength trap reactivation threshold amp NetBox Wireless Router We pe enabled 9 disabled v1 v2c v3 v3 only 161 public 162 113 dbm 51 dbm User Manual NB1600 Router Family 11 Apr 2012 53 80 net X Module 4 9 9 UDP Message Receiver Parameter Description Port UDP message receiver port The UPD Message Receiver is a service that listens on the configured port default 2157 for arriving UDP packets with a string in the payload Once an UPD packet has arrived the event Arriving UDP Message is fired see chapter 4 9 5 1 Events Use the Event Manager 4 9 5 Event Manager to forward the message UDP payload to a SMS or E mail destination NEM Ri Zu ec 192168 11 admin messageRece Or BOX e NetBox Wireless Router We X net 9 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT UDP Message Receiver Configuration DHCP Server DNS Proxy Server Administrative status enabled di Dynamic DNS Client disabled Port E mail Client 2157 Listen on ANY Event Manager Events Subscribers Event Processor GPS Settings Data SMS SSH Telnet Server SNMP Agent UDP Message Receiver f USSD Web Server Redundancy NB1600 NetBox Wireless Router Software Version 6
46. e between automatic or manual provider network selections For manual selection you will need to specify the provider n Go e http 192 168 1 1 admin sim php P BCX amp NetBox Wireless Router We X netz HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT SIM WAN Link Management p Configuration Network Selection Connection Supervision MSS MTU SIM state SIM missing Ethernet Link Settings PIN protection enabled Port Settings disabled IP Settings PIN code Mobile Administration SMS center number use from SIM Card n a Configuration configure SIM WLAN Administration Configuration IP Settings Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 11 Apr 2012 22 80 4 3 5 WLAN net Module 4 3 5 1 WLAN Administration Parameter Administrative status Operational mode Number of antennas Operation type Radio band Channel Description Enable or disable WLAN Choose whether the WLAN card should operate in access point or client mode Configure the number of attached WLAN antennas At least one antenna must be attached to We generally recommend using a second antenna for better coverage and throughput For higher throughput rates in 802 11n a sec ond antenna is mandatory You can specify the desired type of IEE 802 11 operation 802 11a can
47. e cli help message usage Ctrl C void Abort a command Exit from CLI User Manual NB1600 Router Family 11 Apr 2012 69 80 net Module 5 2 CLI Usage Command Usage and Return Value cli get cli get is used to read values from configuration parameters Arguments include all configuration keys as described in chapter 3 2 Usage cli get lt key1 gt amp lt key2 gt Example cli get user admin password The return value is the value of the queried parameter 192 168 1 1 PuTTY hash 2 05b8 cli get user admin password adminOl hash 2 O05h Note cli get lt invalidKey gt returns no error message cli set cli set is used to assign values to configuration parameters Arguments include all configuration keys as described in chapter 3 2 Usage set lt key1 gt lt value1 gt amp lt key2 gt lt value2 gt Example cli set user admin password admin02 192 168 1 1 PuTTY hbash z 5hf8 cli set user admin password admin z bash z 5h Z cli set produces no return value and no error message To check if the modifica tion took place use cli get Note cli set lt invalidKey gt lt correctValue gt returns no error message Note cli set lt validKey gt lt inCorrectValue returns no error message no range check is performed cli network cli network provides mobile network information on the optionally specified SIM card If no SIM card is specified the command is applie
48. e of a disconnect or any link loss the connection will be re established by the WAN link manager Number of redialling attempts prior to switching to the next profile Time in minutes after an on demand connection will be discon nected Shows whether the connection is up or not You can define your application area here which is either mobile or stationary Roaming or moving applications are often affected by coverage outage and dead spots the system therefore applies op timizations for stabilising the link A fixed service type can be set here for instance to bypass any flap ping issues between different networks G 19216811 D amp O X B NetBox Wireless Router We net PS Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Admnistrston Applicaton area mobil Aes 11 Apr 2012 20 80 4 3 4 2 Configuration Parameter Phone number User Name Password Access point name Authentication method Call to ISDN IP Header Compression Software Compression PPP DNS query Enable Specific Client IP Address Specific Client IP Address Profile switch condition net Module Description The phone number being dialled Packet switched connections for services like GPRS UMTS usually use 99 1 for initializing the modem For circuit switched connections you can enter the fixed phone number to dial in in ternational format e g 41xx The username provided by
49. e specified by a netmask of 255 255 255 255 a default route corresponds to 0 0 0 0 Gateway The next hop which operates as gateway for this network can be omitted on peer to peer links Interface The network interface on which a packet will be transmitted in order to reach the gateway or network behind Metric The routing metric of the interface default 0 The routing metric is used by routing protocols higher metrics have the effect of making a route less fa vourable metrics are counted as additional costs to the destination network Flags A ctive P ersistent H ost Route N etwork Route D efault Route i 2 zu Go e http 192168 11 admin routesphp BOX amp NetBox Wireless Router We X LE net 0y Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Static Routes Static Routes This menu shows all routing entries of the system which can consist of active and configured ones The flags are as follows A ctive P ersistent H ost Route N etwork Route D efault Route j Netmasks can be specified in CIDR notation Destination Netmask Gateway Interface Metric Flags 192 168 1 0 255 255 255 0 0 0 0 0 LAN1 0 AN 192 168 2 0 255 255 255 0 0 0 0 0 LAN2 0 AN NB1600 NetBox Wireless Router So 6 ft 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 31 80 net EN Module 4 5 Firewall This router uses Linux s netfilter iptables firewall f
50. e status Role The role of this system either master or backup VID The Virtual Router ID you can theoretically run multiple instances Interface Interface on which VRRP should be performed Virtual gateway address The virtual gateway address formed by the participating hosts n oe http 192 168 1 1 admin redundancy O BOX e NetBox Wireless Router We a net 0y Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Redundancy DHCP Server DNS Proxy Server Administrative status i Dynamic DNS Client disabled U E mail Client Event Manager Role master v ents Subscribers VID 100 Interface LANT Settings Virtual gateway address 192 168 1 10 sus SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy User Manual NB1600 Router Family 11 Apr 2012 56 80 4 10 System 4 10 1 Settings Parameter Local host name Syslog redirect address LED Settings net EN Module Description The local host name of the system The host where system log messages should be forwarded to A tiny system log server for Windows is included in TFTP32 which can be downloaded from our website You can configure the behaviour of the status LEDs on the front panel of your device They are usually divided into two banks left right on NB1600 top bottom on NB2700 and are either indica tion the connection status or the digital IO port status You may con
51. ed as LAN or WAN Port Always Front SMA female connector for GSM UMTS antenna NB1600 UMTS NB1600 WIAP WLAN 1 Front SMA female connector for first WLAN antenna main NB1600 WLAN NB1600 WIAP WLAN 2 Front SMA female connector for second WLAN antenna diver NB1600 WLAN sity NB1600 WIAP op Earth protection connector Always Earthing is optional If used connect a yellow green marked cable with at least 6 mm cupper area Avoid cor rosion Protect the screws against loosening This con nection is combined with the ground of the power sup ply Venp Top Power supply 12 48V Pin 1 2 Always Additional power supply redundancy 12 48V Pin 3 4 Power RS 232 Top Serial interface Pins 5 7 which can be used for console Always administration serial device server or other serial based communication applications Digital outputs Pins 4 11 Always Digital inputs Pins 12 15 Always Reset Top Reset button press at least 3 seconds for reboot and at Always least 5 second for factory reset The initiation of the fac O c ct TD c un Top Top tory reset is confirmed with all LEDs lighting up for a moment Then you can release the button Table 2 The NB1600 interfaces User Manual NB1600 Router Family 11 Apr 2012 9 80 2 3 Pin Assignments 2 3 1 Terminal Block Pin Signal Van V1 12 48V Venp V2 12 48V RxD TxD GND Out1 Dry contact relay Normally open _ Pow
52. er 12 48V LRS232 COON AIA BR WIN o 2 2 a Ld 2 ie J Out2 Dry contact relay Normally closed i ee N In1 UJ Ini In2 In2 UT D L inputs 2 3 2 Ethernet Pin Signal 00 terminal block TX ser RJ 12 Socket RX x COON AJA BL WIN Um RJ 12 Plug re 2 RJ45 User Manual NB1600 Router Family 11 Apr 2012 10 80 net Module 3 Installation 3 1 Environmental Conditions The following precautions must be taken before installing NB1600 Avoid direct solar radiation Protect the device from humidity steam and aggressive fluids Guarantee sufficient circulation of air around the device The device is for indoor use only Humidity 0 to 95 non condensing Altitude up to 4000m Overvoltage Category Il Pollution Degree 2 3 2 Installation of the Router NB1600 is designed for mounting it on a DIN rail or wall but it can also be put on a worktop Please con sider the safety instructions chapter 1 1 and the environmental conditions chapter 3 1 3 2 1 Installation of the SIM Card For installing a SIM card you will have to remove the SIM cover first The card holder is opened by sliding it slightly until it shifts up You can now insert the SIM card presses the holder and shift it back until it is locked Ensure to have the contacts placed correctly otherwise the holder will not lock The cover has to be closed again 3 2 2 Installa
53. er NTP state NTP server Description Enable disable time synchronization Host name of NTP server NTP server 2 optional Host name of an optional second NTP server Time zone Time zone Daylight saving changes This option can be used to reflect daylight saving changes e g switching from summer to winter time depending on the selected time zone 2 nttp 192 168 1 1 admin regionalSettir B X NetBox Wireless Router We X User Manual NB1600 Router Family net 5 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT System Time System Setting c Time amp Region cM T 2011 11 25 0221 20 System Information Restart Authentication Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router ware Version Time Synchronisation Time synchronisation NTP server NTP server 2 optional Time zone Time zone Daylight saving changes 9 enabled disabled 0 pool ntp org 1 pool ntp ora UTC 01 00 Amsterdam Berlin Bern Rome Stockholm v 11 Apr 2012 58 80 4 10 3 System Information The system information page displays various details of your box
54. er show the state of the GPS signal show the state of the Keep alive service show the state of the SMS receiving service show the state of the SMS sending service show the state of the E Mail service show the state of the digital inputs show the state of the digital outputs show NetBox systems information including hardware and software versions show the NetBox product name show the NetBox product type show the NetBox hardware version show the NetBox serial number 11 Apr 2012 72 80 Command cli status system os cli status system nbsw cli status system cpu cli status system wireless module cli status system ram cli status system flash help User Manual NB1600 Router Family net Module Usage and Return Value show the NetBox operating system show the NetBox software version show the NetBox CPU show the NetBox wireless module show the amount of RAM installed in the NetBox show the amount of flash installed in the NetBox Print the cli help message usage 11 Apr 2012 73 80 net Module 6 Software Interfaces 6 1 Digital 1 0 Server In order to manage digital inputs and outputs via TCP an additional piece of software is required on the host that handles the TCP connection and sets the ports respectively For test purposes telnet can be used The payload must contain the states of the four inputs outputs ports as follows The value O represents the state off the value 1 the state on IN1 IN2
55. essssesesesesesseseseses 11 3 2 4 Installation ot ihe Local Area N IWOrK nn a haha han a a eta ie es Civ Cos dev eate 11 3 2 5 Installation of the Power Supply nn 11 4 Configuration via Web Manager Recommended ssssssssssssssssssssssssssseee 12 4 1 Initial Access to the Web Manager and Setting the Administrator Password 12 4 2 FOTO a a a ad A ee 13 4 3 NICH ICE ea ee ee 14 4 3 1 Ethernet Port NS SIMMS Se es 14 4 3 2 NE PP EE EIEEE I PP OE ee nO EE EOE 14 4 3 3 mil dn INN 18 4 3 4 MoD 20 80 3GA C rn 20 4 3 5 NN 23 4 3 6 SR POR RERO ne 26 4 3 7 SAN wel RTT festessaeen E EAA EAE 28 4 3 8 DI ED ee 30 4 4 aio TING seen near 31 4 5 wii cum EE n 32 4 5 1 Firewall Administration and Rules AR rtis bebe haha hahaha 32 4 5 2 Wl E 33 4 6 EN N E AE AA E 36 4 6 1 PSRP m 36 4 6 2 RE AEAEE E AEA AAEE 39 4 7 PR Nee 41 4 8 Be gt m 42 4 8 1 Dial in Server Administration ass cdeventanesvesesdsvadaavetaaeisdentenrsiaendaladiviseriaiatundiavn divans 42 4 8 2 Dakin SEIVEL o iie E el rare 42 4 9 GONI o e ER Rum 43 4 9 1 DHOP SBIVEI reer ere re nee UE MMC UE 43 4 9 2 DNS ONC PF T 44 User Manual NB1600 Router Family 11 Apr 2012 3 80 4 9 3 4 9 4 4 9 5 4 9 6 4 9 7 4 9 8 4 9 9 4 9 10 4 9 1
56. evice Most of the menus are self explanatory further details are given below 4 1 Initial Access to the Web Manager and Setting the Administrator Password Please provide a password for the admin user account Choose something that is both easy to remember and a strong password such as one that contains numbers letters and punctuation The password shall have a minimum length of 6 characters It shall contain a minimum of 2 numbers and 2 letters Note The admin password will be also applied for the root user which can be used to access the device over telnet SSH and also to enter the boot loader With NetBox Software 3 5 you may also configure additional users which only have the permission to ac cess the Dial In PPTP servers and the home summary page User Manual NB1600 Router Family 11 Apr 2012 12 80 net Module r amp http 192 168 1 1 admin login php clr BG X NetBox Wireless Router We X MEKANE net oS Module Admin Password Setup Please set a password for the admin user account Choose something thatis both easy to remember and a strong password such as one that contains numbers letters and punctuation The password shall have a minimum length of 6 characters It shall contain a minimum of 2 numbers and 2 letters Username admin Enter new password Confirm new password Apply NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG The m
57. figure toggle mode so that the LEDs periodically show both bank States Go amp http 19216811 admin system php B X NetBox Wireless Router We pc CUN net 0y Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT System Settings Time amp Region System Information Restart Authentication Authentication User Account s Remote Authentication File Configuration System Settings Local hostname netbox Syslog redirect address Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting LED Settings Banks to be displayed right left both toggle mode Apply Network Debugging Log Files Tech Support Software Update Automatic Softwar e Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router ware Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 57 80 net EN Module 4 10 2 Time and Region The Network Time Protocol NTP is a protocol for synchronizing the clocks of computer systems over packet switched variable latency data networks NetBox can synchronize its system time with aNTP server or if available via GPS If enabled the time synchronization is usually triggered after aWAN link has come up but before starting any VPN connections Further time synchronizations are scheduled in background every 60 minutes Paramet
58. g host 2 Source IP address Monitoring interval Retry interval Trials enabled 9 disabled optional optional seconds seconds User Manual NB1600 Router Family 11 Apr 2012 net Module 16 80 4 3 2 3 MSS MTU TCP Maximum Segment Size net EN Module The maximum segment size MSS is the largest amount of data specified in bytes that a computer or communications device can handle in a single unfragmented TCP segment For optimum communica tions the number of bytes in the data segment and the headers must not add up to more than the num ber of bytes in the maximum transmission unit MTU Parameter Description MSS adjustment Maximum Transmission Unit Enable or disable MSS adjustment on WAN interfaces Maximum segment size Maximum number of bytes in a TCP data segment The Maximum Transmission Unit represents the largest amount of data that can be transmitted within one IP packet and can be defined for any WAN interface r N Go http 19216811 admin net i Module WAN Link Management Connection Supervision MSS MTU Ethernet Link Settings Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Configuration IP Settings USB Autorun Device Server Serial Port Digital 1 0 NB1600 NetBox Wireless Router Software Vi n 3 5 0 6 2004 2011 NetModule AG TCP Maximum Segment Size MSS adjustme
59. guration and initiating the factory reset again r 3 E 9 pa LE jae Se rn D _ ___ Go amp http 192 168 1 1 admin factoryReset O BOX amp NetBox Wireless Router We nen net gy Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Factory Reset System Sings This operation will restore all settings to factory defaults Your current configuration will be lost Time amp Region You may consider to backup the current configuration prior to running a reset System Information Restart Reset Authentication Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update i Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 10 9 Troubleshooting 4 10 9 1 Network Debugging Various tools reside on this page for further analysis of potential configuration issues GER i n oe http 192 168 1 1 admin networkDebu BG X le NetBox Wireless Router We i net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Network Debugging System Settings Time amp Region Command to execute ping v System Information Host Restart Authentication RER 40
60. ho request seq 14406 i IP netbox gt 192 166 0 20 icmp 40 echo reply seq 14406 gt 07 IP 192 165 0 20 gt netbox icmp 40 echo request seq 15174 5195 IP nethox gt 192 165 0 20 icmp 40 echo reply seq 15174 56 IP 192 155 0 20 gt nethox icmp 40 echo request seq 15942 IP netbox gt 192 168 0 20 icmp 40 echo reply seq 15942 236400 IP 192 165 0 20 gt netbox icmp 40 echo request seq 16710 IP nethox gt 192 155 0 20 icmp 40 echo reply seq 16710 User Manual NB1600 Router Family 11 Apr 2012 78 80 net Module 8 Customer Service 8 1 Technical Support Further technical support can be accessed via the NetModule Website at http www netmodule com support You will also find adownload area where you can download the latest software and documentation ma terial For support requests please use the support form available at http www netmodule com support supportform aspx 8 2 Feedback Your feedback is highly appreciated please send comments suggestions feature requests error reports or your personal user experience with NetBox wireless routers to netbox support netmodule com Remember to have fun The NetBox team and its supporters User Manual NB1600 Router Family 11 Apr 2012 79 80 net X Module 9 Notes User Manual NB1600 Router Family 11 Apr 2012 80 80
61. i select manual lt lai gt and cli select manual sim1 lt lai gt Note The following commands have the same effect cli select manual lt lai gt sim1 and cli set networkselection network_lai lt lai gt cli select manual lai sim2 and cli set networkselection sim2 network_lai lt lai gt User Manual NB1600 Router Family 11 Apr 2012 71 80 Command cli status cli status overview cli status overview interfaces cli status overview interfaces sim_state cli status overview interfaces pin_state cli status overview interfaces signal_strength cli status overview interfaces con_state cli status overview interfaces con_type cli status overview interfaces net sel mode cli status overview interfaces net sel prov cli status overview interfaces data_rxtx cli status overview interfaces stream_updown cli status overview interfaces last_reset cli status overview networks cli status overview networks napt_state_mob cli status overview networks napt state ovpn cli status overview networks openvpn state cli status overview networks ipsec state cli status overview networks pptp state cli status overview services cli status overview services dyndns state cli status overview services dialin state cli status overview services dhcp state cli status overview services dns state cli status overview services gps state cli status overview services keepalive state cli status overview services sms rec state
62. icensing Status System Settings zm RE x Time amp Region Feature E Hardware availability E Licensing Status System Information GPS Restart licensed GSM i licensed Authentication LTE Authentication User Accounts MOBILEIP licensed Remote Authentication UMTS unlicensed licensed File Configuration WLAN j licensed Automatic File Configuration ani FN CARR License status A valid license is installed Factory Reset Troubleshooting License Installation Network Debugging Log Files Choose one ofthe following methods to install new licenses Tech Support License file Br Software Update Automatic Software Update Manual Software Update URL to license file Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 10 12 Keys and Certificates The key and certificate page lets you generate required files for securing your services such as the HTTP and SSH server Keep in mind that you will need to create keys and certificates for OpenVPN in case of certificate based authentication You can also revoke and invalidate certificates again for instance if they have been compromised or lost de 9 6 nttp 192 168 11 admin certificatesp O B X NetBox Wireless Router We X net 9 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT System Root CA SSH Settings Time amp Regio
63. iguration Events Subscribers Event Processor Service type Dynamic DNS Y GPS Hostname Server address Data SMS Server port SSH Telnet Server Un mom SNMP Agent Password UDP Message Receiver Support e mail optional USSD Apply Web Server Redundancy NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 45 80 4 9 4 E mail Client net Module The E Mail client can be used to send notifications to a particular E Mail address upon certain events Parameter E mail client status From e mail address Server address Server port Authentication method User name Password Data Description Administrative status of the E Mail client E Mail address of the sender SMTP server address SMTP server port typically 25 against the SMTP server User name used for authentication Password used for authentication Choose the required authentication method which is used to authenticate n Go http 19216811 admin email php P net gy Module DHCP Server DNS Proxy Server Dynamic DNS Client E mail Client Event Manager Events Subscribers Event Processor GPS Settings SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router ftw n 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family BOX E mai
64. inimum additional configuration steps for setting up a mobile connection conclude Defining the admin password Entering the PIN code for the SIM card Configuring the Access Point Name APN Start the mobile connection pos m 4 2 Home This page provides a status overview of established connections and enabled features It offers a sum mary and you can also get further details such as the IP address signal strength data rates etc r e SE http 192 168 1 1 admin index php p ROX e NetBox Wireless Router We que net gy Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT E Connection Summary Description Administrative Status Operational Status am Active Link unknown Mobile disabled down WLAN disabled down OpenVPN disabled down IPsec disabled down Mobile IP disabled down PPTP Dial in disabled down Mobile Dial in disabled down GPS disabled down NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 13 80 net Module 4 3 Interfaces The interfaces section can be used to set up the physical interfaces and hardware features of NetBox 4 3 1 Ethernet Port Assignments The Netbox contains 2 external Ethernet ports named Ethernet 1 and Ethernet 2 Those ports have to be mapped to the internal logical names LAN1 and LAN2 This is done to have more flexibility at the external cable wiri
65. interface address PPP_IP PPP connection down PPP failure to connect Error reported PPP_ERR See manual and logs to identify the problem WLAN connection up interface address WLAN_IP WLAN connection down VPN connection up tun0 tap0 interface address VPN_IP VPN connection down VPN failure to connect See logs to identify the problem Dial in connection establish user DIN_USER from DIN_IP Dial in connection terminated user DIN_USER from 96DIN P926 Dial in failure to connect DYNDNS update with DYNDNS_IP address DynDNS failure to reach server Log in to the Configuration GUI by the user LOGIN_USER Failed attempt to log in to the Configuration GUI by the user LOGIN_USER Restart after power up Restart due to a software exception Restart due to Web Manager Startup completed UDP_MESSAGE This is a test GPS position is available GPS position is not available Input change IN1 is On Input change IN1 is Off Input change IN2 is On Input change IN2 is Off Output change OUT1 is On changed from DIO_SOURCE Output change OUT1 is Off changed from DIO_SOURCE Output change OUT2 is On changed from DIO_SOURCE Output change OUT2 is Off changed from DIO_SOURCE 11 Apr 2012 47 80 net Module The following event variables will be replaced within event texts as follows Event Variables PPP_IP PPP_ERR VPN_IP VPN_TYPE DYNDNS_IP DIN
66. ion Upload Configuration mode missing config directives will be replaced with factory defaults isar Accounta missing config directives will be ignored Remote Authentication New configuration file Upload File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router S Versi oftware Version 3 5 0 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 62 80 net EN Module 4 10 82 Manual File Configuration This section can be used to download the currently running system configuration including essential files such as certificates Parameter Description In order to restore a particular configuration you can upload a configuration previously downloaded You can choose between missing configuration directives set to factory defaults or getting ignored that means potentially existing configuration directives will be kept at the system m n Go amp hitp 192 168 1 1 admin autoConfig p Pr BAG X e NetBox Wireless Router We X net Module System Settings N Time amp Region Status enabled System Information 9 disabled Restart HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Automatic File Configuratio
67. ive 2002 96 EC on waste electrical and electronic equipment WEEE ensure that at end of life you separate this product from other waste and scrap and deliver it to the WEEE collection system in your country for recycling 1 4 National Restrictions This product may be used in all EU countries and other countries following the EU directive 1999 5 EC without any limitation except for the countries mentioned below 1 4 1 France In case the product is used outdoors the output power is restricted in some parts of the band See the table below or check http www art telecom fr for more details Frequency Range Power EIRP Restrictions MHz 2400 2454 100 mW 20 dBm Only for indoor applications 2454 2483 5 10 mW 10 dBm If used outdoors 5470 5725 Relevant provisions for the implementation of DFS mechanism described in ETSI standard EN 301 893 V1 3 1 and subsequent ver sions 1 4 2 Italy This product meets the National Radio Interface and the requirements specified in the National Fre quency Allocation Table for Italy Unless operating within the boundaries of the owner s property the use of this Wireless LAN product requires a general authorization Please check with http www comunicazioni it for more details 1 4 3 Latvia The outdoor usage of the 2 4 GHz band requires an authorization from the Electronic Communications Office Please check http www esd lv for more details 1 4 4 Luxemburg General author
68. ization required for network and service supply User Manual NB1600 Router Family 11 Apr 2012 6 80 net Module 1 4 5 Norway Frequency Range Restrictions 2400 0 2483 5 MHz This subsection does not apply for the geographical area within a radius of 20 km from WLAN b g the centre of Ny Alesund 1 4 6 Russian Federation Frequency Range Power EIRP Restrictions MHz 2400 0 2483 5 100 mW 20 dBm Only for indoor applications 5150 5250 100 mW 20 dBm Permitted to use only for indoor applications closed industrial and warehouse areas and on board aircraft 5250 5350 100 mW 20 dBm 1 Permitted to use for local networks of aircraft crew service communications on board aircraft in area of the airport and at all stages of flight 2 Permitted to use for public wireless access local networks on board aircraft during a flight at the altitude not less than 3000 m 5650 5825 100 mW 20 dBm Permitted to use on board aircraft during a flight at the altitude not less than 3000 m 1 4 7 Turkey Frequency Range Restriction 5470 5725 MHz Not implemented User Manual NB1600 Router Family 11 Apr 2012 7 80 2 net Module Hardware Specifications There are five different models of NB1600 available from left to right 2 1 NB1600 Wireline NB1600 UMTS NB1600 LTE NB1600 WLAN NB1600 WIAP Operating Elements The following table describes the NB1600 status indicators Label Status PPPoE Mobile VPN
69. l Client Administration E mail client status enabled disabled E mail Client Configuration From e mail address Server address Server port 25 Authentication method automatic User name Password 11 Apr 2012 amp NetBox Wireless Router We X mum HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT 46 80 4 9 5 Event Manager 4 9 5 1 Events net Module The system ships with a set of predefined system events This menu can be used to set up notification messages in order to send a text message SMS or E Mail to one or more recipients in case of such events Event Event Text PPP connection established PPP connection down PPP connection failure WLAN connection established WLAN connection down VPN connection established VPN connection down VPN connection failure Dial in connection established Dial in connection down Dial in connection failure Dynamic DNS registration Dynamic DNS failure to reach server Login to the Web Manager Failed to Login to the Web Manager Restart after power up Restart due to a software exception Restart due to Web Manager Startup completed Arriving UDP Message Test Event GPS reception on GPS reception off Digital Input 1 on Digital Input 1 off Digital Input 2 on Digital Input 2 off Digital Output 1 on Digital Output 1 off Digital Output 2 on Digital Output 2 off User Manual NB1600 Router Family PPP connection up ppp0
70. lient Event Manager Events SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router oftware Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family Subscribers Subscriber Name Phone Number E Mail Address Subscriber Groups Group Name Member Subscribers Member Groups 11 Apr 2012 48 80 4 9 5 3 Event Processor On this page you can configure how events shall be processed Go http gt m e NetBox Wireless Router We X User Manual NB1600 Router Family net Module DHCP Server DNS Proxy Server Dynamic DNS Client E mail Client Event Manager Events Subscribers Event Processor GPS Settings Data SMS SSH Telnet Server SNMP Agent UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Event Processor Selection Event Ho All Events Ada Delete Firetestevent 11 Apr 2012 net Module 49 80 net Module 4 9 6 SMS This page finally lets you turn on the SMS event notification service and enable remote control via SMS Parameter Description SMS notification Sending SMS can be enabled or disabled Disabling sending SMS means that no notification via SMS will be performed SMS control Receiving SMS ca
71. multiple systems The current range of system IDs NetBox Model ID NB1310 1 3 6 1 4 1 31496 10 10 50 NB1600 1 3 6 1 4 1 31496 10 10 46 NB2700 1 3 6 1 4 1 31496 10 10 47 NB3700 1 3 6 1 4 1 31496 10 10 48 Up to now the NetBox extensions contain support for rebooting the device updating to a new system software via FTP TFTP HTTP updating to a new system configuration via FTP TFTP HTTP getting the status of last software update getting the status of last configuration update User Manual NB1600 Router Family 11 Apr 2012 51 80 net Module Setting MIB values is limited to SNMPv3 and only the admin user is entitled to trigger the extensions ATTENTION must be paid to the fact that SNMP passwords have to be more than 8 characters long Shorter passwords will be doubled for SNMP which for instance means adminO1 becomes admin01admin01 The SNMP extensions can be read and triggered as follows get system software version snmpget v 3 u admin n authNoPriv a MD5 x DES A admin01admin01 192 168 1 1 1 3 6 1 4 1 31496 10 40 1 0 get kernel version snmpget v 3 u admin n authNoPriv a MD5 x DES A admin01admin01 192 168 1 1 1 3 6 1 4 1 31496 10 40 2 0 get serial number snmpget v 3 u admin n authNoPriv a MD5 x DES A admin01admin01 192 168 1 1 1 3 6 1 4 1 31496 10 40 3 0 restart the device snmpset v 3 u admin n authNoPriv a MD5 x DES A adminO1adminO1 192 168
72. n Time of day 00 00 Authentication Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset URL Last config update No result data available Troubleshooting Network Debugging M Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates I NB1600 NetBox Wireless Router Software Version 3 5 0 2004 2011 NetModule AG http 192 168 1 1 admin authentication php User Manual NB1600 Router Family 11 Apr 2012 63 80 net EN Module 4 10 8 3 Factory reset This menu can be used to reset the device to factory defaults Your current configuration will be lost This procedure can also be initiated by pressing and holding the Reset button for at least five seconds A successfully initiated factory reset can be noticed by all LEDs having been turned on The factory reset will set the IP address of the first Ethernet interface back to 192 168 1 1 You will be able to communicate again with the device using the default network parameters You may store the currently running configuration as factory defaults which will reside active even when a factory reset has been initiated e g by your service staff Please ensure that this corresponds to a work ing configuration A real factory reset to the default settings can be achieved by restoring the original fac tory confi
73. n Root CA System Information Restart EN Root CA certificate missing Authentication Root CA key missing Authentication User Accounts Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 11 Logout Log out from Web Manager User Manual NB1600 Router Family 11 Apr 2012 68 80 net EN Module 5 Configuration via Command Line Interface Advanced The command line interface is accessible after successful login to NetBox via telnet or Secure Shell SSH By default the telnet server answers on port 23 the SSH server on port 22 F 192 184 0 1 Pele Mile Telnet 192 168 1 1 Linux 2 6 14 4 nm1 nethox gt 4 netbox login admin Password p Wireless Router lt c 2007 NetModule AG Bus yBox v1 1 6 2667 11 27 69 61 6666 gt Built in shell Cash nter help for a list of built in commands T cli Usage get lt keyi gt amp lt key2 gt 0 1 set lt key1 gt lt ualue1 gt amp lt key2 gt lt ualue2 gt 0 11 toggle lt key1 gt lt upidown gt amp lt key2 gt lt upidown gt L 1 configure lt keyi gt l amp lt key2 gt 1 conf igureAll status overview system html netwo
74. n be enabled or disabled Disabling receiving SMS means that controlling NetBox via SMS will not be possible You may run the following commands on the box by simply sending a SMS to the phone number associ ated with the inserted SIM card Command Parameters Description status A SMS with the following information will be returned Signal strength Mobile connection state up down current IP address of the mobile interface current IP address of the VPN interface if enabled This will initiate a Dial out connection over GSM UMTS and the VPN con nection if enabled and trigger sending an SMS with the following infor mation current IP address of the PPP interface current IP address of the VPN interface if enabled The profile name is an optional parameter connect disconnect terminates all WAN connections including VPN reboot Initiates a system reboot method manual Set administrative status of the mobile connection to disabled permanent Set administrative status of the mobile connection to enabled permanent dialonde Set administrative status of the mobile connection to enabled dial on de mand mand output 1on Switch digital output 1 on 1 off Switch digital output 1 off 2on Switch digital output 1 on 2 off Switch digital output 2 off r oe http 192 168 1 1 admin sms php Pr BOX e NetBox Wireless Router We lt net 3 Module HOME INTERFACES ROUTING FIREWALL VPN SERV
75. n be individually bridged to a LAN interface or operate as dedicated interfaces in routing mode 4 3 5 3 WLAN Configuration Client Running in client mode you can select the network to which you want to connect to and enter the re quired authentication settings You may also perform a WLAN network scan and pick the settings from the discovered information directly The credentials can be obtained by the administrator of your WLAN access point r a Oc http 192 168 1 1 admin wlaninterface BS X lie NetBox Wireless Router We gt I Be xt net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WLAN Interfaces WAN Link Management 2 Connection Supervision SSID i END Current Interface 4 MSS MTU Ethernet Link Settings 0 0 Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Interfaces Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router ware ion 3 5 0 6 2004 2011 NetModule AG See T Tr 3 O s 2 E http 192 168 1 1 admin wlanConfigur D B X lie NetBox Wireless Router We gt 95 net 5 Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WLAN Client Configuration WAN Link Management Connection Supervision MSS MTU SSID Security mode WPA PSK v Ethernet Link Settings
76. n err ntpdate 13409 Can t find host 0 pool ntp org Name or service not known 2 25 02 05 01 netbox daemon err ntpdate 13409 Can t find host 1 pool ntp org Name or service not known 2 25 02 05 01 netbox daemon err ntpdate 13409 no servers can be used exiting Nov Nov Nov 172 Nov 172 Nov for Nov 25 02 19 58 netbox daemon info dnsmasq dhcp 13028 20 72 56 00 21 9b 80 7b 26 25 02 19 58 netbox daemon info dnsmasq dhcp 13028 20 72 56 00 21 9b 80 7b 26 eulach 25 02 21 57 netbox user warn parrot parrot command admin set to 4 25 02 21 57 netbox user warn parrot command admin application started Nov Nov for Nov 25 02 21 57 netbox user warn parrot 25 02 23 36 netbox user warn parrot parrot command admin set to 4 25 02 23 36 netbox user warn parrot command admin application started Nov 25 02 23 36 netbox user warn parrot Download Reset You can generate and download a tech support file here command admin 13540 command admin 13540 command admin 13540 command admin 13562 command_admin 13562 command admin 13562 DHCPINFORM lan0 DHCPACK 1an0 Log level terminating Log level 4 kama terminating We strongly recommend providing this file when getting in touch with our support team either by e mail or via our online support form as it would significantly speed up the process of analyzing and resolving your problem
77. ng Afterwards the logic port names needs to be assigned to the functional area of the ports WAN or LAN 4 3 2 WAN 4 3 2 1 Link Management This menu can be used to define and prioritize your WAN links Depending on your hardware you can choose from Mobile GSM UMTS WLAN Ethernet and PPPoE WAN links have to be configured and enabled before adding them In case a link goes down the system will automatically switch over to the next link in the priority list You can configure each link to be either established when the switch occurs or permanently in order to mini mize link downtime Parameter Description 1 priority This link will be used whenever ever possible 2 priority The first fallback link It can be enabled permanently or at the point of time when Link 1 goes down 3 priority The second fallback technology It can be enabled permanently or at the point of time when Link 2 goes down 4 priority The third fallback technology It can be enabled permanently or at the point of time when Link 3 goes down The switch over behaviour can be refined with the following settings Parameter Description Mobile The required signal strength for GSM UMTS in order to qualify the link as a fallback alternative The link will not be dialled if the signal is below the configured threshold WLAN The required signal strength for WLAN in order to qualify the link as a fall back alternative The link will not be dialled if the
78. nt Maximum Transmission Unit Ethernet WLAN PPPOE Mobile MobilelP Apply User Manual NB1600 Router Family http 192 168 1 1 admin connectionSupervision ph enabled disabled 9 Use default 9 Use default 9 Use default 9 Use default 9 Use default 11 Apr 2012 HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Specify Specify Specify Specify Specify 17 80 net EN Module 4 3 3 Ethernet 4 3 3 1 Link Settings The link negotiation can be set for each Ethernet port individually Most devices support auto negotiation which will configure the link speed automatically according to the existing devices in the i ze wu N amp http 192168 11 admin lanLinkphp O BOX amp NetBox Wireless Router We X inm net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Ethernet Link Settings WAN Link Management Connection Supervision MSS MTU Link speed for Ethernet 1 auto negotiated v Link speed for Ethernet 2 auto negotiated Ethernet Link Settings Port Settings Apply IP Settings Mobile Administration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router Software n 3 5 0 6 2004 2011 NetModule AG 4 3 3 2 Port Settings This menu can be used to individually assign each Ethernet port to a LAN interface in case
79. r the digital inputs AN OUTDUIS une a 74 SO CO OE DTI nennen E een ee 74 Get Status or digital INPUTS and OBIDUIL ernennen 74 ATTE DEVICE EET 75 COMMON SR een ee ae en nn 75 FU SS 76 Sa C2 1 CPR E N ve eer ere eee Tener rene 77 IFOUDIESHOOUNG EOM ETT 78 Eror NGS SAC ETT 78 System tog end Log Fl are am re a ec mous 78 Network Protocol ANA YZE man nan anneau 78 GUS TOME SOP VICE rere cossvccccvassesesvesvsacevetessdevasvecesucsnestsvesveaseuesecetesseuasesseevettsussvecesuaace 79 MSTA AE SOON cesses ee een ne 79 mizizlelercle CR RE EEE 79 11 Apr 2012 4 80 User Manual NB1600 Router Family net Module 1 Safety and Conformity Thank you for purchasing a NetBox Wireless Router from NetModule This chapter gives you an introduc tion to the router and its features The following chapters describe the installation procedure and provide helpful information for configuration 1 1 Safety Instructions NetBox Wireless Routers must be used in compliance with any and all applicable international and na tional laws and in particular with any special restrictions regulating the utilization of communication modules in prescribed applications and environments It is highly recommended to use only the original accessories to prevent possible injury to health and damage to appliances and to ensure that all the relevant provisions have been complied with Unauthor ized modific
80. ramework see http www netfilter org for more infor mation It is set up of a range of rules which control each packet s permission to pass the router Packets not matching any of the rules are per default allowed 4 5 1 Firewall Administration and Rules 4 5 1 1 Firewall Administration Rules Parameter Description Administrative status Enable or disable packet filtering Enable WAN access This shortcut will create rules for allowing access to the management services on the WAN link NetBox Wireless Router We X met 5 HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Firewall Administration Firewall Administration a Rules Administrative status enabled disabled NAPT Administration Inbound Rules Outbound Rules NB1600 NetBox Wireless Router ftware Version 3 5 0 6 2004 2011 NetModule AG 4 5 1 2 Firewall Rules Parameter Description Description A meaningful description about the purpose of this rule Mode Whether the packets of this rule should be allowed or denied Source The source address of matching packets can be any or a source network host Incoming interface The interface on which matching packets are received Protocol The used IP protocol of matching packets Destination port s The destination port of matching packets You can specify a single port or a a of ports here Note that protocol must be set to UDP TCP when using port User Manual NB1600 Ro
81. rative status enabled 9 disabled IPsec E Administration Dial in operational status no active connection Configuration Dial in Server Configuration PPTP Server Dial in Server Address range start 192 168 254 1 Mobile IP Address range size 254 y U NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 42 80 net EN Module 4 9 Services 4 9 1 DHCP Server This section can be used to individually configure a DHCP service for each LAN interface Parameter Description Operation mode The Dynamic Host Configuration Protocol DHCP server can be enabled or dis abled If enabled it will answer to DHCP requests from hosts in the LAN First lease address First address for DHCP clients Last lease address Last address for DHCP clients DNS server 1 Manually configured first DNS server optional DNS server 2 Manually configured second DNS server optional Persistent leases By turning on this option the router will remember give leases even after a re boot which can be used to ensure the same IP addresses being assigned to a par ticular host DHCP options By default the DHCP will hand out the interface address as default gateway and DNS server address if not configured else wise You can specify different ad dresses here n Q net Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT DHCP Se
82. recommend to set up the networks in routing mode separately in order to avoid unwanted access and traffic between the in terfaces You can configure a dedicated DHCP server on each network in the DHCP Server section Parameter Network mode Bridge interface IP address netmask Description Choose between bridged or routed mode You can specify the LAN interface here to which the network should be bridged Configure the IP address and netmask for this WLAN interface n Go http 19216811 admi x E P BS X NetBox Wireless Router We X D LE n wlanlp php c Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WLAN IP Settings Connection Supervision x DHCP client NB1600 NetBox Wireless Router Running in client mode you can specify here whether you want to obtain your IP address automatically via DHCP you may also configure a fixed address if you want to bypass DHCP negotiation User Manual NB1600 Router Family 11 Apr 2012 25 80 4 3 6 USB Port 4 3 6 1 USB Autorun This feature can be used to automatica stick has been plugged in net EN Module lly perform a software config update as soon as an USB storage The following files must exist in the root directory of a FAT16 32 formatted stick e For authentication o e Fora configuration update Parameter Enable auto run feature Enable ord autorun key For a software update sw update
83. rk select automatic select manual lt LAI gt help exit get key values set key values toggle up down key value conf igure configure system for keys configureAll configure system for all keys status show a status overview network show a network selection info and all available networks select set the network selection method to automatic or manual with the prefered LAI lt GSM Location Area Identification network help print this help message exit exit config Logon via SSH with PuTTY Logon via Telnet via Windows Telnet Client After authentication type cli help into the Shell to learn about the usage of the command line interface CLI will stop after every call You have to include cli for every new call 5 1 CLI Overview The Command Line Interface mainly provides functions to read and write values of the NetBox configura tion parameters In addition the CLI provides functions to query status information Command Return Description cli get string Read values of one or more specified configuration parameters cli set void Write values of one or more specified configuration parameters cli network string Show available networks including Location Area Identities LAIs cli select void Select the network provider defined by the supplied Local Area Identity LAI or set the network selection method to automatic cli status string Show a status overview of NetBox cli help string Print th
84. rk mode Cipher Use compression Use keep alive Redirect gateway Protocol Authentication Description Choose client or server mode for this tunnel Primary OpenVPN server address for clients The OpenVPN server port 1194 by default Secondary OpenVPN server address optional for clients to switch over in case the primary address cannot be reached Secondary OpenVPN server port optional for clients The VPN device type which can be either TUN typically used for routed connec tions or TAP used for bridged networks Defines how the packets should be forwarded can be routed or bridged from or to a particular interface The required cipher mechanism used for encryption Enable or disable OpenVPN compression Can be used to send a periodic keep alive packet in order to keep the tunnel up despite of inactivity By redirecting the gateway all packets will be directed to the VPN tunnel Please ensure that essential services such as DNS or NTP servers can be reached at the network behind the tunnel In doubt create an extra static route pointing to the correct interface The OpenVPN tunnel protocol to be used You can choose between no authentication credential based where you have to specify a username and password and based on keys and certificates Note that keys certificates have to be created under SYSTEM gt Keys Certificates You may also uploaded files which you have generated on your host system
85. roubleshooting 7 1 Error Messages In general the Web Manager will throw error messages upon failures in the status bar located in the footer of the corresponding web page Common error messages are Error Message Problem Solving SIM missing Insert a SIM card PIN code required Insert the PIN code on the SIM page Connection failed See the Debug Log under Check APN phone number username password 7 2 System Log and Log Files Find more information about troubleshooting tools on page 64 The Web Manager also provides various debugging tools under SYSTEM Troubleshooting Hela Fet hinam hiui den A fs Ful t n de Mimin 502 7 3 Network Protocol Analyzer It is possible to trace any IP interface and inspect individual packet flows between hosts This can be achieved by logging onto the box and start a network packet capture by using the tool tcpdump It is suggested to use the n switch to bypass name resolution e g tcpdump n i lan0 You may also gen erate a dump in PCAP format with tcpdump n i lanO s 1500 w tmp dump copy the file e g via scp and perform further inspection with wireshark which is available at http www wireshark org 138 188 47 246 PuTTY Seles hash 2 05b tepdump r tcpdump verbose output suppressed use v or ww for full protocol decode listening on ethD0 link type EN1D0MB Ethernet capture size 96 bytes ua jo od IP 192 168 0 20 gt nethox icmp 40 ec
86. rver Protocol on TCP IP Telnet or TCP raw Protocol on serial port The protocol implicitly defined on the serial port Port The TCP port that is used by this application Time out Time out Go net gy Module WAN Link Management Connection Supervision MSS MTU Ethernet Link Settings Port Settings IP Settings Mobile Administration Configuration SIM WLAN Administration Interfaces Configuration IP Settings USB Autorun Device Server Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router So 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Serial Device Server Administration Server status enabled 9 disabled Serial Device Server Configuration Protocol on IP port Telnet Protocol on Serial port Serial raw TCP Configuration Time out endless numbered 600 seconds 11 Apr 2012 29 80 net EN Module 4 3 8 Digital 1 0 Parameter Description OUT1 after reboot Initial status of OUT1 after the system has booted OUT2 after reboot Initial status of OUT2 after the system has booted Administrative status Enable or disable the Digital 1 0 management server TCP server port TCP port of the Digital 1 0 management server Listen on Specify the interface where the I O monitor shall be accessible The digital inputs and outputs can be monitored
87. rver DNS Proxy Server DHCP Server Dynamic DNS Client Operation mode i xd E mail Client disabled Event Manager Events First lease address 192 168 1 100 Subscribers Event Processor Last lease address 192 168 1 199 GPS Gateway address Settings Data DNS server 1 SMS DNS server 2 SSH Telnet Server Persistent leases SNMP Agent Apply UDP Message Receiver USSD Web Server Redundancy NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG User Manual NB1600 Router Family 11 Apr 2012 43 80 net EN Module 4 9 2 DNS Proxy Server The DNS Proxy is able to forward DNS requests to the DNS server provided during WAN link negotiation but also caching already resolved entries and thus reducing outbound DNS traffic You may also specify static hosts for assigning fixed addresses to particular host names Parameter Description DNS proxy status Enabled or disabled Manual DNS server 1 The primary DNS server to be queried Manual DNS server 2 The secondary DNS server just in case the primary server is not available netz Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT DNS Proxy Server Administration DHCP Server DNS Proxy Server DNS proxy status enabled disabled Dynamic DNS Client E mail Client Configuration Event Manager Events Subscribers Event Processor Manual DNS server 1 Manual DNS server 2 Sets Data SMS
88. server key private key file e dh1024 pem Diffie hellman parameters file e adirectory with default name ccd containing client specific configuration files Keep in mind that OpenVPN tunnels usually require a correct system time Please ensure that all NTP servers are reachable Using host names also required a working DNS server 4 6 1 5 OpenVPN Client Management Once you have successfully set up an OpenVPN server tunnel you can manage and enable clients which can connect to your service the client s page also informs you about currently connected clients Further you can specify a fixed tunnel endpoint address of each client and its network behind You can also de fine routes to be pushed to each client if you want to redirect traffic for particular networks towards the server Finally you can generate and download all expert mode files to easily populate each client User Manual NB1600 Router Family 11 Apr 2012 38 80 net EN Module 4 6 2 IPsec IPsec is primarily used for securing Internet communications by authenticating and or encrypting IP packets within a data stream IPsec includes various cryptographic protocols and ciphers for key ex change and data encryption and can be seen as one of the strongest VPN technologies in terms of secu rity 4 6 2 1 IPsec Administration Parameter Description IPsec administrative status Enable or disable IPsec fi E Go e http 192 168 1 1 admin ipsecAdming B ex e NetBox
89. signal is below the con figured threshold User Manual NB1600 Router Family 11 Apr 2012 14 80 net EN Module a Bi oe http 192 168 1 1 admin wanLinks phr O BO X ie NetBox Wireless Router We X et Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WAN Link Management WAN Link Management This menu can be used to define and prioritize your WAN links Depending on your hardware you can choose from ange Supervision Mobile GSM UMTS WLAN Ethernet and PPPoE WAN links have to be configured and enabled before adding u them Ethernet In case a link goes down the system will automatically switch over to the next link in the priority list You can configure each link to be either established when the switch occurs or permanently in order to minimize link Link Settings downtime Port Settings i IP Settings Prioritization Settings Mobile Ad trati se Priority Link Name Establishment Mode D onfiguration SIM 1st priority None v permanent 2nd priority None 3rd priority None 4th priority None Serial Port Settings Device Server Digital VO NB1600 NetBox Wireless Router 2004 2011 NetModule AG 4 3 2 2 Connection Supervision Parameter Description Supervision status Enable or disable connection supervision Supervision method Currently only ICMP based ping supervision is supported
90. ss Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 10 6 User Accounts This page lets you manage the user accounts on the device The standard admin user is a built in power user that has permission to access the Web Manager the Dial in server and other administrative services Any other user only has permission to view the status page or can be used for dial in connections Parameter User name Enter password Re enter password Automatic File Configuration Description Define a user name Define a password Confirm the password Go amp http 192 168 1 1 admin userAccounts Pr ROX e NetBox Wireless Router We X n Module 25 HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT User Accounts System Settings The user admin is a built in power user with administrative privileges The password defined for admin will also be Time amp Region applied to the root user which may be used for SSH or Telnet access Additional users created below have only a ts permission to access the Dial in PPTP servers and the summary page esta Authentication Selection User Name Password Password confirmation Authentication admin RRR User Accounts Remote Authentication Create a new user File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Soft
91. tion of the GSM UMTS Antenna NetBox Wireless Routers will only operate efficiently in the cellular network if there is a good signal The provided stub antenna will be suitable for most applications However in some circumstances it might be necessary to use remote antennas together with an extended cable to reach a location which offers the best possible signal reception NetModule can supply a range of suitable antennas Keep in mind that effects caused by Faraday cages such as large metal surfaces elevators machine hous ings etc close meshed iron constructions and others can reduce signal reception significantly Mount the antenna or connect the antenna cable to the antenna connector SS 3 2 3 Installation of the WLAN Antennas Mount the WLAN antennas to the WLAN antenna connectors WLAN 1 The number of attached an tennas can be configured in the software If only one antenna is used it must be attached to WLAN 1 For better diversity and thus better throughput and coverage we recommend using both antennas 3 2 4 Installation of the Local Area Network Up to two 10 100 Mbps Ethernet devices can directly be connected to the NetBox 3 2 5 Installation of the Power Supply NetBox can be powered with the included power supply or another external source supplying between 12 and 48 Volts DC NetBox is to be used with certified CSA or equivalent power supply which must have a limited and SELV circuit output The router is now ready for
92. uter Family 11 Apr 2012 32 80 net EN Module n A GENES PA gt e http 192 168 11 admin firewallphp fJ BOX ie NetBox Wireless Router We X net oy Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT Add Firewall Rule Firewall Administration m Description Rule1 NAPT Mode DENY Administration Inbound Rules ANY Specify Outbound Rules Incoming interface ANY v Protocol Any v Add rule Cancel NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG 4 5 2 NAPT This page lets you set the options for Network Address and Port Translation NAPT NAPT translates IP addresses or TCP UDP ports and enables communication between hosts on a private network and hosts on a public network It generally allows a single public IP address to be used by many hosts from the pri vate LAN network 4 5 2 1 NAPT Administration This menu can be used to configure the interfaces on which outgoing NAT will be performed i GNE EN Zu oe http 192 168 1 1 admin naptAdmin p JO BG X e NetBox Wireless Router We x lal n gy Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT N NAPT Administration Firewall un This menu can be used to configure the interfaces on which outgoing NAT will be performed uies NAPT NAT active NAT inactive Administration iss Inbound Rules an ye Outbound Rules
93. ware Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router Software Version 3 5 0 6 2004 2011 NetModule AG http 192 168 1 1 admin systemInformation php User Manual NB1600 Router Family 11 Apr 2012 60 80 net EN Module 4 10 7 Remote Authentication A remote RADIUS server can be used to authenticate users This applies for the Web Manager the WLAN network and other services supporting RADIUS Parameter Administrative status RADIUS server RADIUS secret Authentication port Accounting port Use for login IE http 192 168 1 1 admin remoteAuthe O BG X le NetBox Wireless Router We X go Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT m Remote Authentication System Settings m z Time amp Region Administrative Status enabled System Information 9 disabled Restart Authentication RADIUS Server Authentication User Accounts RADIUS Secret Remote Authentication File Configuration Automatic File Configuration Manual File Configuration Factory Reset Troubleshooting Network Debugging Log Files Tech Support Software Update Automatic Software Update Manual Software Update Licensing Keys amp Certificates NB1600 NetBox Wireless Router So 6 ftwai n 3 5 0 2004 2011 NetModule AG Description Defines whether remote authentication should be used or not The RADIUS server address The secret used to authenticate
94. which has to be taken into account when running over small sized MTU interfaces The pre shared key PSK Choose a negotiation mode The default is main mode identity protection Aggressive mode has to be used when dealing with dynamic endpoint ad dresses It is however referred to be less secure compared to main mode as it reveals your identity to an eavesdropper IKE encryption method IKE hash method IKE Diffie Hellman Group Use Perfect Forward Secrecy This feature heavily increases security as PFS avoids penetration of the key exchange protocol and prevents compromisation of keys negotiated earlier Local ID Remote ID ESP encryption method ESP hash method Enable or disable Dead Peer Detection DPD will detect any broken IPSec connections in particular the ISAKMP tunnel and refresh the corresponding SAs Security Associations and SPls Security Payload Identifier for a faster re establishment of the tunnel Set the delay in seconds between Dead Peer Detection RFC 3706 keep alives R_U_THERE R_U_THERE_ACK that are sent for this connection de fault 30 seconds The number of unanswered DPD R_U_THERE requests until the IPsec peer is considered dead The router will then try to re establish a dead connection automatically 11 Apr 2012 40 80 net Module cH m e NetBox Wireless Router We X http 192168 11 admin ipsec php tur D BS X netz Module HOME INTERFACES ROUTING
95. your provider or mobile operator can be empty The password provided by your provider can be empty The Access Point Name provided by your provider may depend on your account In general you can find it in our database Use Challenge Handshake Authentication Protocol CHAP or Password Au thentication Protocol PAP Has to be enabled if the connection is talking to an ISDN modem Enable or disable Van Jacobson TCP IP Header Compression for PPP This feature will improve TCP IP performance over slow serial links Has to be supported by your provider Enable or disable PPP data compression Software compression reduces the size of PPP packets to improve throughput Has to be supported by your provider Being enabled the DNS servers are negotiated during PPP connection es tablishment Enable or disable a fixed IP address on the mobile interface Specify a fixed client IP address on the mobile interface Specifies the condition for a profile switch to the other profile ii E A oe http 192 168 1 1 admin mobileConfic O BG X e NetBox Wireless Router We lt tt net PS Module HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM LOGOUT WAN Mobile SIM WLAN USB Link Management Connection Supervision MSS MTU Ethernet Link Settings Port Settings IP Settings Administration Configuration Administration Configuration IP Settings Autorun Device Server Serial

NB1600 Router F User Manual NB1600 Router Family er

Contents

Download Pdf Manuals

Related Search

Related Contents