Survey
* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
Download NTC-8000-01 User Guide
Document related concepts
National Broadband Plan (United States) wikipedia , lookup
Distributed firewall wikipedia , lookup
Point-to-Point Protocol over Ethernet wikipedia , lookup
Remote Desktop Services wikipedia , lookup
Recursive InterNetwork Architecture (RINA) wikipedia , lookup
Airborne Networking wikipedia , lookup
Computer network wikipedia , lookup
Network tap wikipedia , lookup
Wake-on-LAN wikipedia , lookup
Policies promoting wireless broadband in the United States wikipedia , lookup
Zero-configuration networking wikipedia , lookup
Wireless security wikipedia , lookup
Transcript
NTC-8000 User Guide NTC-8000-01 – M2M Multi-Port Network Gateway Copyright Copyright© 2015 NetComm Wireless Limited. All rights reserved. The information contained herein is proprietary to NetComm Wireless Limited. No part of this document may be translated, transcribed, reproduced, in any form, or by any means without prior written consent of NetComm Wireless Limited. Please note: This document is subject to change without notice. Save Our Environment When this equipment has reached the end of its useful life, it must be taken to a recycling centre and processed separately from domestic waste. The cardboard box, the plastic contained in the packaging, and the parts that make up this device can be recycled in accordance with regionally established regulations. Never dispose of this electronic equipment along with your household waste. You may be subject to penalties or sanctions under the law. Instead, ask for disposal instructions from your municipal government. Please be responsible and protect our environment. This manual covers the following products: NetComm Wireless NTC-8000-01 M2M Multi-Port Network Gateway DOCUMENT VERSION 1.0 Initial document release 1.1 Minor updates and corrections DATE November 2013 13 May 2015 Table 1 - Document Revision History NTC-8000 – M2M Multi-Port Network Gateway 2 UM-00006 v1.1 www.netcommwireless.com Table of Contents Overview ........................................................................................................................................................................................ 4 Introduction ................................................................................................................................................................................................... 4 Target Users .................................................................................................................................................................................................. 4 Prerequisites .................................................................................................................................................................................................. 4 Notation ........................................................................................................................................................................................................ 4 Product Introduction ..................................................................................................................................................................... 5 Product Overview .......................................................................................................................................................................................... 5 Package Contents ......................................................................................................................................................................................... 5 Product Features ........................................................................................................................................................................................... 5 Physical Dimensions and Indicators ................................................................................................................................................................ 6 LED Indicators ....................................................................................................................................................................................... 6 Physical Dimensions ...................................................................................................................................................................................... 7 Mounting Bracket (Optional) ........................................................................................................................................................................... 7 Interfaces ...................................................................................................................................................................................................... 8 Correct wiring of the 4-way mini fit connector ......................................................................................................................................... 9 NTC-8000-01 Default Settings .................................................................................................................................................... 10 Restoring factory default settings.................................................................................................................................................................. 11 Resetting to factory default condition .................................................................................................................................................... 11 Installation and Configuration of the NTC-8000-01 ................................................................................................................... 12 Connecting via an Ethernet cable ................................................................................................................................................................. 12 Accessing the Web-based User Interface ..................................................................................................................................................... 12 Status ......................................................................................................................................................................................................... 13 Advanced Status ......................................................................................................................................................................................... 15 Internet Settings........................................................................................................................................................................................... 17 Mobile Broadband ............................................................................................................................................................................... 17 LAN..................................................................................................................................................................................................... 23 Routing................................................................................................................................................................................................ 25 VPN .................................................................................................................................................................................................... 32 Wireless Settings ......................................................................................................................................................................................... 41 Basic ................................................................................................................................................................................................... 41 Advanced ............................................................................................................................................................................................ 43 MAC Filtering ....................................................................................................................................................................................... 50 Station List .......................................................................................................................................................................................... 51 Wireless Mode ..................................................................................................................................................................................... 51 Client Configuration.............................................................................................................................................................................. 52 Services ...................................................................................................................................................................................................... 53 Dynamic DNS ...................................................................................................................................................................................... 53 NTP..................................................................................................................................................................................................... 54 System Monitor ................................................................................................................................................................................... 55 SNMP ................................................................................................................................................................................................. 56 System ........................................................................................................................................................................................................ 57 Log ..................................................................................................................................................................................................... 57 Load / Save ......................................................................................................................................................................................... 58 Administration ...................................................................................................................................................................................... 63 System Configuration ........................................................................................................................................................................... 64 Appendix A: Tables ..................................................................................................................................................................... 66 Appendix B: Recovery mode ...................................................................................................................................................... 67 Legal and Regulatory .................................................................................................................................................................. 68 Contact ........................................................................................................................................................................................ 70 UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 3 Overview Introduction This document provides you all the information you need to set up, configure and use the NTC-8000-01 network gateway. Target Users This document is intended to be used by system integrators or experienced hardware installers who are comfortable with all aspects of IP based networking and have an understanding of wireless technologies. Prerequisites Before continuing with the installation of your NTC-8000-01, please confirm that you meet the minimum system requirements below. Device that can connect via Ethernet or Wireless interface. Web interface access will require a web browser such as Internet Explorer®, Mozilla Firefox® or Google Chrome™. Notation The following symbols are used in this installation manual: The following note requires attention. The following note provides a warning. The following note provides relevant information. NTC-8000 – M2M Multi-Port Network Gateway 4 UM-00006 v1.1 www.netcommwireless.com Product Introduction Product Overview Industrial-grade fixed wireless gateway with extended temperature tolerance Designed for rugged deployments in industrial applications Tested for vehicular applications Class 5M2 and MIL-STD-810F Method 516.5 Ideal for providing primary and backup wireless connectivity over 3G UMTS networks Embedded high-performance Cinterion PHS8 HSPA+ cellular machine-to-machine (M2M) module 802.11n WiFi, configurable as access point or network client, with 2x2 MIMO antenna technology Powerful processor for optimal performance on advanced 3G UMTS networks 8x Ethernet 10/100 connectivity for universal deployment Flexible DC power input to suit diverse installation environments Power save mode with minimum current draw Built-in VPN clients for a secure connection over a public cellular network Embedded Linux OS and Software Development Kit (SDK) Remote diagnostics, configuration and firmware upgrade capabilities Management and configuration via web user interface, TR-069 (optional), SNMP or SMS Optional mounting bracket (HDW-0022) for easy mounting/installation Package Contents The NTC-8000-01 series package consists of: 1 x M2M Multi-Port Network Gateway 2 x 3G antennas 2 x WiFi antennas 1 x 1.5m yellow Ethernet cable 8P8C 1 x Power and ignition cable 1 x WiFi Security Card 1 x quick start guide and safety manual (not pictured) A mounting bracket (HDW-0022) is available as an optional accessory. If any of these items are missing or damaged, please contact NetComm Wireless Support immediately by visiting the NetComm Wireless Support website at: http://www.netcommwireless.com/contact-forms/support/ Product Features The NTC-8000-01 series gateway is designed to provide a secure and powerful connection to multiple devices in a broad range of applications. With an embedded 3G module, the device can connect to the speed and coverage of wireless networks, allowing broadband connectivity to remote sites, mobile vehicles and locations without a fixed broadband connection. Its industrial design includes a robust mounting bracket, extended temperature tolerances and is also vibration tested for rugged deployments. The device features WiFi (802.11n) so users can create a WiFi network for connectivity to wireless enabled devices and equipment. Its 8 LAN Ethernet ports allows connectivity for a further 8 wired connections. Its open embedded Linux platform provides the ability to customize specific software applications via the Software Development Kit (SDK). UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 5 Physical Dimensions and Indicators LED Indicators The NTC-8000-01 has 6 LEDs to display the current system and connection status. Note: 3G signal strength lower than -109dBm is considered too low for data connection. When signal strength is below this level, both signal strength LEDs will stay off. ITEM ICON DEFINITION Power Indicates the gateway is powered correctly. WLAN Indicates the ON/OFF status of the wireless (WLAN) radio. Mobile Broadband Indicates when Internet data connection is established. Solid ON: Indicates UMTS/HSPA available coverage Service Type Blinking: Indicates EDGE available coverage Off: Indicates GSM/GPRS available coverage Signal Strength Low Strength Left LED illuminated Medium Strength Right LED illuminated High Strength Both left and right LEDs illuminated Table 2 - NTC-8000-01 LEDs NTC-8000 – M2M Multi-Port Network Gateway 6 UM-00006 v1.1 www.netcommwireless.com Physical Dimensions The following page lists the physical dimensions of the NTC-8000-01, as well as the physical dimensions of the antennas and the optional mounting bracket which can be used to attach the NTC-8000-01 to a pole or to provide a wall / ceiling mount. DIMENSIONS WITHOUT MOUNTING BRACKET Length 187 mm Depth 122 mm Height 39.5 mm Weight 550 g Table 3 - Device Dimensions DIMENSIONS WITH MOUNTING BRACKET Length 193.7 mm Depth 122 mm Height 57.9 mm (without antennas) Weight 970 g Table 4 - Mounting Bracket Dimensions Optional Mounting Bracket (HDW-0022) The NTC-8000-01 can be put into a mounting bracket to ensure it is secured to a fixture. This mounting bracket is especially useful for installations in vehicles where extra stability is required. Figure 1 – NTC-8000-01 Mounting Bracket UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 7 Interfaces The following interfaces are available on the NTC-8000-01: 1 2 2 3 4 1 5 Figure 2 - NTC-8000-01 Rear panel interfaces ITEM INTERFACE FUNCTION 1 3G Antenna Connectors (SMA) Connection point for the mobile broadband main and auxiliary antennas 2 WiFi Antenna Connectors (Reverse polarity SMA) Connection point for the reverse polarity SMA female WiFi antennas 3 Ethernet Ports 8 x 10/100 Base-TX Ethernet RJ-45 ports. Press the reset button once to reboot the gateway. 4 Reset Press and hold the reset button for between 3 and 10 seconds, then release to boot the gateway in recovery mode. Press and hold the reset button for more than 10 seconds to return the gateway to factory default settings. 5 Power NTC-8000 – M2M Multi-Port Network Gateway 8 9-36V DC, 4-way mini fit power connection with ignition switch detection. See diagram below for correct wiring of the 4-way mini fit connector. Table 5 - Integrated Interfaces UM-00006 v1.1 www.netcommwireless.com Correct wiring of the 4-way mini fit connector The diagram below illustrates the correct wiring of the 4-way mini fit connector. 3 4 1 2 Figure 3 - Correct wiring of the 4-way mini fit connector PIN NUMBER Power 2 Ignition 3 4 UM-00006 v1.1 www.netcommwireless.com WIRE 1 Ground Not used Table 6 - 4-way mini fit connector wiring NTC-8000 – M2M Multi-Port Network Gateway 9 NTC-8000-01 Default Settings The following tables list the default settings for the NTC-8000-01. LAN (MANAGEMENT) IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.1.1 Table 7 - LAN Management Default Settings WIFI (DOES NOT APPLY IN CLIENT MODE) SSID: Remote AP Name Security: WPA2-PSK Security Key: a1b2c3d4e5 Table 8 – WiFi Default Settings WEB INTERFACE ACCESS Username: admin or root Password: admin Table 9 - Web Interface Default Settings Note: The admin account is restricted to accessing mobile profile settings; band/provider selection and most system configurations via the web interface. The root account has full access to all configuration options via the web interface. NTC-8000 – M2M Multi-Port Network Gateway 10 UM-00006 v1.1 www.netcommwireless.com Restoring factory default settings There might be occasions where you need to restore the factory defaults on your NTC-8000-01 such as: You have lost your username and password and are unable to log in to the web configuration page; You are asked to perform a factory reset by support staff. Resetting to factory default condition There are two methods you can use to restore factory default settings on your NTC-8000-01: Using the web-based user interface To restore your NTC-8000C to its factory default settings, please follow these steps. 1. Log in to the gateway’s web interface as described in the Accessing the web-based user interface section. 2. Navigate to System > Load/Save > Settings. 3. Under the Restore Factory Defaults section, click the Restore button. The gateway reboots to the factory default settings. Using the reset button on the rear panel of the gateway Hold the reset button down for more than 10 seconds (until the LEDs on the front panel stop flashing) and then release the button. The gateway restarts with factory default settings. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 11 Installation and Configuration of the NTC-8000-01 Connecting via an Ethernet cable 1. Connect the Ethernet cable provided to one of the Ethernet ports on the rear of the NTC-8000-01. 2. Connect the other end of the yellow Ethernet cable to your computer. 3. Wait approximately 30 seconds for the connection to establish. Accessing the Web-based User Interface There are two system management accounts for maintaining the system, root and admin, which have slightly different management capabilities. The root manager account has full permission privileges and can use every command option available to the gateway. The admin manager (administrator) account has access to the majority of gateway settings except for the gateway’s system options that can alter or copy the gateway’s firmware (software). The system options not available to an admin user are: Firmware Upgrade – The ability to install an upgraded version of the gateway’s software. Device Configuration Backup – the option of saving the gateway’s current settings, useful for configuring multiple NTC8000-01 gateways. Upload - Uploading previously saved settings to the gateway. Restore Factory Defaults - Setting the gateway to factory default settings, essential after a firmware upgrade. System Configuration settings – The TCP Keepalive function can be used to ensure the current live mobile broadband connection is still alive even when no packet data is being transmitted. It does this by periodically sending a ping (ICMP) request message to a WAN IP address or a well-known internet domain host such as www.google.com. Once the internet connection is deemed to be down the gateway will attempt to reconnect to the WWAN mobile broadband provider. To log in to the management console, view the status and make changes to your NTC-8000-01, please follow the steps below: 1. Open a web browser (e.g. Internet Explorer/Firefox/Safari) and navigate to https://192.168.1.1 2. Enter admin or root as the username and admin as the password and press the Submit button. Figure 4 - Login prompt for the Web based User Interface When you have successfully logged in, the Status page is displayed. NTC-8000 – M2M Multi-Port Network Gateway 12 UM-00006 v1.1 www.netcommwireless.com Status The status page provides system related information and is displayed when you login to the NTC-8000-01 management console. By default, the status page will show System Information, Ethernet Port Status, WWAN Status, IPsec Status and the 3G service connection details. Figure 5 - The Status Page ITEM DEFINITION System Uptime The current uptime of the gateway. Router Version The firmware version running on the gateway. Router Serial Number The serial number of the gateway. Phone Module The type of phone module, the firmware version of the module and the current module temperature. MAC Address The MAC Address is a unique 12 digit hexidecimal network identifier assigned to the NTC-8000-01. Mobile Broadband (MBB) The current connection profile, Interface, status, APN, local and remote addresses of the WWAN connection. WLAN The current wireless network clients or wireless access points that are connected with the NTC-8000-01. Connection Up Time The time in hours, minutes and seconds that the current mobile broadband connection has been active. Provider The current mobile broadband service provider detected and in use with the on-board SIM card.. Coverage The type of mobile broadband connection available for use. IMEI The IMEI (International Mobile Equipment Identity) that identifies the NTC-8000-01 on the mobile broadband network. Frequency The frequency band currently in use. Signal Strength (dBm) The strength of the 3G signal detected SIM Status The status of the SIM currently inserted into the gateway. Ethernet Port Status The current speed and status of the Ethernet port. Table 10 - Status page items UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 13 The LAN, PPPoE, PPTP and IPsec statuses are hidden from view by default. To show them on the status screen, click on the respective link below the green menu bar. To view them all, click on the All Status link. Figure 6 - Status Page - LAN Details ITEM IP DEFINITION The current LAN IP Address and Subnet Mask. MAC Address The current MAC Address of the LAN port. Table 11 - Status Page - LAN Details Figure 7 - Status Page - PPPoE Details ITEM PPPoE Status PPPoE IP Address DEFINITION The current status of the PPPoE connection. The current PPPoE IP Address in use. Table 12 - Status Page - PPPoE Details Figure 8 - Status Page - PPTP Details ITEM DEFINITION No. The number of the PPTP connection. Profile Name The user-created Profile name of the PPTP connection. Remote Server Address The PPTP Remote Gateway Address. P-t-P Local The local IP address of the PPTP connection. P-t-P Remote The remote IP address of the PPTP connection. Status The current status of the PPTP connection. Table 13 - Status Page - PPTP Details Figure 9 - Status Page - IPSec Details ITEM No. The IPsec tunnel number. Profile Name The name assigned to the IPsec profile. Interface The current interface used by the IPsec tunnel. Local LAN The local IP address making up one end of the IPsec tunnel. Remote Gateway The WAN gateway of the other end of the IPsec tunnel. Remote LAN The WAN IP Address that the IPsec tunnel is connecting to. Status NTC-8000 – M2M Multi-Port Network Gateway 14 DEFINITION The current condition of the IPsec tunnel. Table 14 - Status Page - IPSec Details UM-00006 v1.1 www.netcommwireless.com Advanced Status To view further information regarding the phone module on-board the NTC-8000-01 and the mobile broadband configuration, press the “Advanced Status” button. Figure 10: Advanced Status Page UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 15 ITEM The phone module name, hardware and firmware version Module Boot version The installed boot loader version of the phone module. Module PRID The Protocol ID of the phone module. System Up Time The time in hours, minutes and seconds that the gateway has been up. Provider The current connection’s mobile broadband provider. Country Code Each country has a unique code that helps to identify the mobile broadband network. Network code Each mobile broadband provider has a unique network code that identifies their network. Coverage The coverage type of mobile broadband service the current connection is using. Connection Status The current status of the gateway’s connection. IMEI The International Mobile Equipment Identity number unique to each cellular network device. Frequency The frequency of the current connection. Signal Strength The signal strength of the mobile broadband connection measured in decibels. Signal Quality (Ec/Io) A measurement of the portion of the received signal that is usable. This is basically the signal strength minus the signal noise level. Received Signal Code Power (RSCP) The power level of the signal on the current connection’s channel. HSUPA Category Displays the HSUPA category (1-9) for the current uplink. HSDPA Category Displays the HSDPA category (1-8) for the current downlink. SIM ICCID The Integrated Circuit Card Identifier of the SIM card used with the gateway, a unique number up to 19 digits in length. Primary Scrambling Code (PSC) The Primary Scrambling Code for the current signal. Location Area Code (LAC) The ID of the cell tower grouping the current signal is broadcasting from. Routing Area Code (RAC) The Routing Area Code is a subset of the Location Code and helps to identify the group of or individual cell towers the current connection’s is broadcasting from. IMSI The International Mobile Subscriber Identity is a unique identification for the current mobile broadband connection. Cell ID A unique code that identifies the base station from within the Location Area where the current 3G signal. Channel Number (UARFCN) NTC-8000 – M2M Multi-Port Network Gateway 16 DEFINITION Phone Module The channel number of the current 3G connection. Table 15 - Advanced Status Settings UM-00006 v1.1 www.netcommwireless.com Internet Settings This section describes how to set up the gateway to initiate a mobile broadband connection, create routing rules and set up a virtual private network. Mobile Broadband Connection Click on the Internet Settings menu followed by Mobile Broadband and then the Connection menu item on the right. Figure 11 - Connection Settings To connect using a Connection profile The gateway supports multiple APN profiles; these profiles allow you to configure the settings that the gateway will use to connect to the Mobile Broadband network. The gateway is configured by default to automatically configure the mobile broadband connection. This automatically detects the most appropriate APN from the inserted SIM. You can also manually enter the connection details by performing the following steps: 1. Clear the Automatically Configure my Mobile Broadband option next to the profile name. 2. Using the Profile Name drop down list, select the profile that you wish to configure. 3. In the APN Name field, enter the APN (Access Point Name). 4. For the Mobile Broadband Connection option, select Enable. 5. In the Username and Password fields, enter the username and password if required. 6. Use the Authentication Type option to select either CHAP or PAP. 7. In the Reconnect Delay field, enter the Reconnect Delay. This is the time the gateway will wait to re-establish the mobile broadband connection if it is dropped. The Reconnect Delay must be between 30 and 65535 seconds. 8. In the Reconnect Retries field, enter the number of Reconnection attempts the gateway should make. To configure the gateway to attempt to reconnect until a connection is made, set this to 0. Otherwise, the Reconnect Retries value must be between 1 and 65535 seconds. 9. Use the Metric field to specify a network metric for the connection. The metric value helps the gateway to prioritise routes and must be a number between 1 and 65535. The default value is 20 and should not be modified unless you are aware of the effect your changes will have. 10. In the MTU field, enter the MTU setting for the current Mobile Broadband connection. The MTU must be an integer between 1400 and 1430. 11. Use the NAT Masquerading option to select to enable or disable NAT Masquerading for the connection. 12. Click the Save button. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 17 To confirm the connection status Click on the Status menu item at the top of the page to return to the Status page. In the Mobile Broadband section, the connected profile is displayed with the Status field showing as “Up” and the IP Address field shows the current IP address that the network has allocated for the gateway. The gateway’s internet connection has now been established. NTC-8000 – M2M Multi-Port Network Gateway 18 UM-00006 v1.1 www.netcommwireless.com WLAN Failover Backup The WLAN Failover Backup feature of the NTC-8000-01 is designed to provide a backup mobile broadband internet connection in case the primary WLAN connection should fail. Figure 12 - WLAN Failover Settings: CONNECTION OPTION DESCRIPTION WLAN Only The failover function is completely disabled and the gateway always uses the WLAN connection only. The Mobile Broadband (MBB) connection will not be used. MBB Only The WLAN failover is completely disabled and the gateway always uses a Mobile Broadband (MBB) connection only. MBB Failover if WLAN Link down The gateway uses a WLAN connection as the primary connection and a Mobile Broadband (MBB) connection as a backup connection. When the WLAN connection is down the gateway will start using the MBB connection. The gateway uses a WLAN connection as the primary connection and a Mobile Broadband (MBB) connection as a backup connection. When the server(s) entered below does not respond to the configured ping requests, the gateway will start using the MBB connection. MBB Failover with Ping The NTC-8000-01 sends ping requests to the specified Destination and Second Address to verify whether the internet connection is online and functioning. The Fail Count specifies how many successive ping attempts can fail before the NTC-8000-01 fails over to the Mobile Broadband Internet WAN connection while the Success Count specifies how many ping attempts must succeed in order to reset the Fail counter. To use this feature you will need both a WLAN and MBB connection. The Periodic PING Timer is the time between ping requests to the first and second destination addresses and must be an integer between 3 and 65535 seconds. The Periodic PING Accelerated Timer is the time between pings to the first and second destination addresses after the gateway gets 3 consecutive ping failures. Fail Count and Success Count must be an integer between 1 and 65535 seconds. Table 16 - WLAN Failover Settings When the Mobile Broadband (MBB) connection is set to Always On the MBB connection will always be online as a backup connection even through the gateway may not be using it when the WLAN connection is available. This allows the gateway to failover quickly to the existing MBB connection. When the Mobile Broadband (MBB) connection is set to Dial when required the gateway will only dial the MBB connection when the WLAN connection fails. The gateway will also automatically disconnect the MBB connection once the WLAN connection is restored UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 19 PPPoE The PPPoE page is used to configure a transparent PPPoE connection. This can be used to provide a bridged connection. To enable PPPoE mode, first ensure that all Mobile Broadband Connection profiles are set to Disable. To disable all Mobile Broadband Connection profiles: 1. 2. Click on the Internet Settings menu followed by Mobile Broadband and then the Connection menu item. Uncheck Automatically configure my mobile broadband then use the Profile Name drop down list to select the currently enabled profile (you can see it in the Profile list at the bottom of the screen) and set Mobile Broadband Connection to Disable. Click Save to store the updated settings. Figure 13 - PPPoE Settings To configure PPPoE: 1. Set the PPPoE option to Enable. 2. In the APN Name field, specify the APN supplied by your 3G provider. 3. In the Service Name field you may enter a Service Name. This is particularly useful if you have more than one PPPoE gateway or modem on a single Ethernet network. 4. Click Save to save your settings and enable PPPoE. NTC-8000 – M2M Multi-Port Network Gateway 20 UM-00006 v1.1 www.netcommwireless.com Band / Provider The band settings page enables you to select which frequency band you will use for your connection and enables you to scan for available network operators in your area. Figure 14 - Band / Provider Selection You may want to do this if you’re using the gateway in a country with multiple frequency networks that may not all support HSPA. You can configure the gateway to only connect on the network frequencies that suit your requirements. Make your selection from the Change Band drop down list. In most cases, the default setting of All bands is appropriate. You can also scan for available 3G service providers in your area by setting the Current Operator Selection Mode to Manual and then clicking the Scan button. Figure 15 - Manual Operator Selection A list of the detected mobile broadband service carriers in your area will be displayed. Select the most appropriate mobile broadband service from the list shown and click Apply. In most cases, the default setting of Automatic is appropriate. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 21 SIM Security In most cases, the NTC-8000-01 comes with SIM cards which are soldered to the main board. These units will not request a SIM PIN and must be activated by the network operator based on the IMSI number printed on the Product ID label. For units with a SIM card slot, if the SIM card is locked you will need to unlock it with a PIN provided with your SIM card. You can find out if the SIM is locked by viewing the SIM Status on the Status page: Figure 16 - SIM Security - Status Page Warning If the SIM Status is SIM PIN Locked as above, perform the following: a) Click on the Internet Settings menu at the top of the page and then the Mobile Broadband menu item and finally select the SIM Security item. Figure 17 - SIM Security - SIM PIN Needed b) In the PIN field, enter the PIN code for the SIM and then enter it again in the Confirm PIN field for confirmation. Note: You can also select Remember PIN so that entering the PIN code each time the SIM is inserted is not required. Alternatively you can also disable SIM PIN protection by selecting to Disable PIN from the PIN Protection drop down menu. c) Click the Save button. Entering a PUK code After three incorrect attempts at entering the PIN code, you are requested to enter a PUK code. Note: You will need to contact your mobile broadband provider to obtain this number. Your carrier will issue you a PUK code to enable you to unlock the SIM and enter a new PIN code. Enter the new PIN and PUK codes and click the Save button. Figure 18 - SIM Security - SIM PUK Needed Remember PIN This feature allows the gateway to automatically send the PIN to the SIM each time the SIM asks for it (usually at power up). This enables the SIM to be PIN Locked (to prevent unauthorised re-use of the SIM elsewhere), while still allowing the gateway to connect to the cellular service. When the Remember PIN feature is enabled, the user-entered PIN is encrypted and stored locally in the gateway. The next time the SIM asks the gateway for the PIN the gateway decrypts the PIN and automatically sends it to the SIM without user intervention. When this feature is disabled and the SIM is PIN locked, the PIN must be manually entered via the gateway‘s configuration interface. This is not desirable where the gateway is unattended. NTC-8000 – M2M Multi-Port Network Gateway 22 UM-00006 v1.1 www.netcommwireless.com LAN IP Setup The IP Setup page is used to configure the LAN Settings of the gateway and to enable or disable DNS Masquerade. Figure 19 - IP Setup Settings The default IP of the gateway is 192.168.1.1 with subnet mask 255.255.255.0. To change these settings, enter the new IP Address and Subnet mask then click the Save button. You can also assign a Hostname to the gateway to identify it on the network and for easy access. Note: If the IP address has changed you will have to re-enter the new IP address configured in your browser to access the configuration pages. DNS Masquerading DNS masquerading allows the gateway to forward DNS requests to dynamically assigned DNS servers. Clients on the gateway’s LAN can then use the gateway as a DNS server without needing to know of the dynamically assigned DNS servers assigned by the cellular network. To disable DNS Masquerading select Disable and click the Save button. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 23 DHCP The DHCP page is used to adjust the DHCP settings used by the gateway. The DHCP settings are then passed onto any device connecting via DHCP. You can manually set the DHCP Start and End range, the DHCP Lease time, the default Domain name suffix, Primary and Secondary DNS Server, the Primary and Secondary WINS Server, as well as the NTP, TFTP and Option 150/Option 160 (VoIP options) settings. Note: The DHCP Lease Time must not be less than 120 seconds. Figure 20 - DHCP Settings After entering the applicable details, click the Save button. You can also assign a particular IP address to a specific device every time that device makes a DHCP request as follows: Figure 21 - DHCP Settings - Fixed Mapping 1. Click the Add button. 2. In the Computer Name field, enter a name for the computer or device. 3. In the MAC Address field, enter the MAC Address of the computer or device. 4. In the IP Address fields, enter the IP address you wish to assign to the device. 5. Select the Enable checkbox to enable the rule. 6. Click the Save button to save the new settings. NTC-8000 – M2M Multi-Port Network Gateway 24 UM-00006 v1.1 www.netcommwireless.com Routing Static The Static Route page is used to add or delete static routes. Static routes can be used to facilitate communication between devices on different networks. Figure 22 - Static Route Settings Some routes are added by the gateway on initialisation such as the Ethernet subnet route for routing to a device on the Ethernet subnet. A PPP route is also added upon obtaining a WAN PPP connection. Adding Static Routes 1. Enter the required values in the fields (as shown above) for the route being added. 2. Click the Add button. Editing a Static Route entry 1. Enter the Item No. of the entry you want to edit into the Item No. field. 2. Enter the required values in the fields. Deleting Static Routes Click the Delete Entry text (in blue) corresponding to the route you want to delete. The Static Routing table at the bottom shows the new route added and the route also appears in the Active Routing Table. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 25 RIP RIP (Routing Information Protocol) is used for advertising routes to other gateways. Thus all the routes in the gateway’s routing table will be advertised to other nearby gateways. For example, the route for the gateway’s Ethernet subnet could be advertised to a Gateway on the PPP interface side so that a Gateway on this network will know how to route to a device on the gateway’s Ethernet subnet. Add the routes as appropriate in the Static Routes section – see Adding Static Routes. Note: Some gateways will ignore RIP. Figure 23 - RIP Settings 1. Next to the RIP option, select the Enable option. 2. In the Version drop down list, select the RIP version you wish to use. 3. Use the Interface drop down list to select the interface for the RIP function. 4. Click the Save button to save the settings. NTC-8000 – M2M Multi-Port Network Gateway 26 UM-00006 v1.1 www.netcommwireless.com VRRP Virtual Router Redundancy Protocol (VRRP) is a non-proprietary redundancy protocol designed to increase the availability of the default gateway servicing hosts on the same subnet. This increased reliability is achieved by advertising a “virtual router” (an abstract representation of master and backup routers acting as a group) as a default gateway to the host(s) instead of one physical router. Two or more physical routers are then configured to stand for the virtual router, with only one doing the actual routing at any given time. If the current physical router that is routing the data on behalf of the virtual router fails, an arrangement is made for another physical router to automatically replace it. The physical router that is currently forwarding data on behalf of the virtual router is called the master router. Master routers have a priority of 255 and backup router(s) can have priority between 1 and 254. A virtual router must use 00-00-5E-00-01-XX as its (MAC) address. The last byte of the address (XX) is the Virtual Router Identifier (VRID), which is different for each virtual router in the network. This address is used by only one physical router at a time, and is the only way that other physical routers can identify the master router within a virtual router. Figure 24 - VRRP Settings 1. Next to the VRRP Enable option select Enable to activate the VRRP service. 2. In the Virtual Device ID field, enter the VRRP Device ID which is different for each virtual gateway on the network. As there is a maximum of 255 virtual routers, the Virtual Device ID must be an integer between 1 and 255. 3. In the Router Priority field enter the priority for the virtual router – a higher value is a higher priority. The Router Priority must be a value between 1 and 255. 4. In the Virtual IP Address field, enter the virtual IP address that both virtual routers share. 5. Click the Save button to save the new settings. Note: Configuring VRRP changes the MAC address of the Ethernet port and therefore if you want to resume with the web configuration you must use the new IP address (VRRP IP) or on a command prompt type: arp –d <ip address> (i.e. arp –d 192.168.1.1) to clear the arp cache.(old MAC address). UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 27 NAT The NAT page is used to configure the Network Address Translation rules currently in use on the gateway. The gateway is in NAT mode by default. This is only needed if you need to map inbound requests to a specific port on the WAN IP address to a device connected on the Ethernet interface. Figure 25 - NAT Settings OPTION DEFINITION Item Number Number to identify the port mapping, numbered from 1 to 65535. Protocol Specify the protocol to use for the port mapping. Options include TCP, UDP or All protocols. Source IP Address This field specifies either a “Friendly” IP address that is allowed to access the gateway or a wildcard IP address of 0.0.0.0 that allows all IP addresses to access the gateway. Incoming Port Range This field specifies the external port(s) on which to listen. Must be a value between 1 and 65535. Destination IP Address The Local Area Network Address of device to forward inbound requests to. Destination Port Range The Local Area Network Port(s) to forward connections to. Must be a value between 1 and 65535. Table 17 - NAT Configuration Items Creating a Port Forwarding rule 1. Use the Protocol drop down list to select the protocol for the new rule. 2. In the Source IP Address field, enter the IP address from the source side. 3. In the Incoming Port Range fields, enter the range of incoming ports to forward. 4. In the Destination IP Address field, enter the IP address on the destination side to receive the forwarded packets. 5. In the Destination Port Range fields, enter the range of ports to be forwarded to the destination IP address. 6. Click the Save button to save any changes to the settings. Note: If the Incoming Port Range specifies a single port, the destination port can be set to any port. If the Incoming Port Range specifies a range of port numbers, the Destination Port Range MUST be the same as the Incoming Port Range. Editing a Port Forwarding rule 1. In the Item Number field, enter the number of the rule that you want to change. 2. Make the required changes to the IP addresses and port ranges. 3. Click the Save button. Deleting a Port Forwarding rule To delete a port forwarding rule, click on the corresponding Delete Entry link from the list of IP Mappings. NTC-8000 – M2M Multi-Port Network Gateway 28 UM-00006 v1.1 www.netcommwireless.com DMZ The Demilitarised Zone (DMZ) enables a device to use a direct connection to the WAN. This means any incoming connections are forwarded directly to this device. The DMZ page is used to specify the IP Address of the device to allow direct incoming connections. Figure 26 - DMZ Settings To configure a device as DMZ Host: 1. Under DMZ Settings, select the Enable option. 2. In the DMZ IP Address field, enter the IP Address of the device you wish to become the DMZ host. 3. Click the Save button. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 29 MAC / IP / Port Filter The MAC/IP/Port filter feature allows you apply a policy to the traffic that passes through the gateway, both inbound and outbound, so that network access can be controlled. When the filter is enabled with a default rule of “Accepted”, all connections will be allowed except those listed in the “Current MAC / IP / Port filtering rules in effect” list. Conversely, when the default rule is set to “Dropped”, all connections are denied except for those listed in the filtering rules list. Figure 27 - Wireless Settings – MAC / IP / Port Filter Note: When enabling MAC / IP / Port filtering and setting the default rule to Dropped, you should ensure that you have first added a filtering rule which allows at least one known MAC/IP to access the gateway, otherwise you will not be able to access the user interface of the gateway without resetting the gateway to factory default settings. Creating a MAC / IP / Port filtering rule To create a filtering rule: 1. From the MAC / IP / Port Filtering drop down list, select Enable. 2. Using the Default Policy drop down list, select the default action for the gateway to take when traffic reaches it. By default, this is configured to Dropped. 3. Under the MAC / IP / Port Filter Settings section, enter the details for the rule you want to create. 4. Click the Save button to confirm the default rule. NTC-8000 – M2M Multi-Port Network Gateway 30 UM-00006 v1.1 www.netcommwireless.com OPTION DEFINITION Basic Settings MAC / IP / Port Filtering Use the drop down list to Enable or Disable the MAC / IP / Port Filtering function. Default Policy Sets the default action to take for packets which do not match the configured rules below. Allow HTTP Port Always Enables or Disables access to the web-based interface via HTTP Allow HTTPS Port Always Enables or Disables access to the web-based interface via HTTPS Allow SSH/SFTP Port Always Enables or Disables access to the SSH/SFTP port. Allow Telnet Port Always Enables or Disables access to the Telnet port on the LAN side. MAC / IP / Port Filter Settings Source MAC Address The MAC address of the device for which you are creating a filtering rule. Source IP Address(/Subnet Mask) The IP address and subnet mask of the device for which you are creating a filtering rule. Source Port Range The range of ports on the source side (LAN/WAN) for which the rule will apply. To use a single port, enter the port number in the first and second fields. Destination IP Address(/Subnet Mask) The IP address and subnet mask of the destination for the filtering rule. Destination Port Range The range of ports on the destination side (LAN/WAN) for which the rule will apply. To use a single port, enter the port number in the first and second fields. Protocol Specify the protocol to use for the port mapping. Options include TCP, UDP and All protocols. Action Use the drop down list to select whether to Accept or Drop packets based on the above settings. Comment You may optionally enter a comment in this field to identify the rule on the gateway. Enter the required details for your rule and click the Save button. The details of the rule appear in the bottom section of the screen. After rules have been added, you can select individual rules and delete them. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 31 VPN A Virtual Private Network (VPN) is a tunnel providing a private link between two networks or devices over a public network. Data to be sent via a VPN tunnel needs to be encapsulated and as such is generally not visible to public networks. The advantages of a VPN connection include: Data Protection Access Control Data Origin Authentication Data Integrity The following pages detail how to configure a VPN connection using IPsec, OpenVPN, PPTP-Client and GRE protocols. IPSec IPSec operates on Layer 3 of the OSI model and as such can protect higher layer protocols. IPSec is used for both Site to Site VPN and Remote Access VPN. The NTC-8000-01 M2M Multi-Port Network Gateway supports IPsec end points and can be configured with Site to Site VPN tunnels with third party VPN routers. How to configure an IPSec VPN connection From the menu at the top of the screen, click Internet Settings then VPN and IPSec. A list of configured IPSec VPN connections is displayed. Figure 28 - IPSec VPN List Click the Add button to begin configuring an IPSec VPN connection. NTC-8000 – M2M Multi-Port Network Gateway 32 UM-00006 v1.1 www.netcommwireless.com Figure 29 - VPN Connection Settings – IPSec The table on the following page describes each of the fields of the IPSec VPN Connection Settings page. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 33 IPSec VPN Connection Settings – Item Details ITEM DEFINITION Enable This IPSec Profile Enable or Disable the VPN connection. Profile Name A name used to identify the VPN connection Remote IPSec Gateway The IP address that the IPSec server is running on. Road Warrior Click this to configure the VPN connection for Road Warrior (connection from a dynamic IP Address) use. Remote Address/Net to Join Enter the Remote IP address or Network for use on the VPN connection. Remote Address/Net Mask Enter the Netmask in use on the remote network Local Address/Net to Join Enter the Local IP address or Network for use on the VPN connection. Local Address/Net Mask Enter the Netmask in use on the local network. Encap Protocol Select the encapsulation protocol to use with the VPN connection. IKE Mode Select the IKE mode to use with the VPN connection. PFS Select whether or not to use PFS for the VPN connection. IKE Encryption Select the IKE encryption type to use with the VPN connection. IKE Hash Select the IKE Hash type to use for the VPN connection. IPSec Encryption Select the IPSec encryption type to use with the VPN connection. IPSec Hash Select the IPSec Hash type to use for the VPN connection. DH Group Select the appropriate DH Group for use with the VPN connection. DPD Action Select the appropriate DPD Action to use on the VPN connection. DPD Keep Alive Time Enter the time in seconds for DPD to keep alive. DPD Timeout Enter the time in seconds for DPD to timeout. IKE Rekey Time Enter the appropriate IKE Rekey time for the VPN connection. Must be a value between 0 and 78400. SA Life Time Enter the appropriate SA Life time for the VPN connection. Must be a value between 0 and 78400. Select the type of key mode in use for the VPN connection. You can select from: Key Mode - Pre Shared Key RSA Keys Certificates Each type of Key mode requires different configuration options. For more information, please refer to the VPN Document available from the NetComm Wireless Website. Table 18 - IPSec Configuration Items NTC-8000 – M2M Multi-Port Network Gateway 34 UM-00006 v1.1 www.netcommwireless.com OpenVPN OpenVPN is an open source virtual private network (VPN) program for creating point-to-point or server-to-multi-client encrypted tunnels between host computers. It can traverse network address translation (NAT) and firewalls and allows authentication by certificate, pre-shared key or username and password. OpenVPN works well through proxy servers and can run over TCP and UDP transports. Support for OpenVPN is available on several operating systems, including Windows, Linux, Mac OS, Solaris, OpenBSD, FreeBSD, NetBSD and QNX. Configuring an OpenVPN VPN connection From the menu at the top of the screen, click Internet Settings then VPN and OpenVPN. A list of configured OpenVPN VPN connections is displayed. Figure 30 - OpenVPN VPN List Click the Add button to begin configuring an OpenVPN VPN connection. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 35 Figure 31 - VPN Connection Settings – OpenVPN ITEM DEFINITION Enable OpenVPN Enable or Disable the OpenVPN connection. Profile Name A name used to identify the VPN connection. OpenVPN Type Select the type of OpenVPN session to use. Server Port Enter the port the OpenVPN server is running on. VPN Network Address Enter the network address for use on the VPN connection. VPN Network Mask Enter the network mask for use on the VPN connection. Diffie-Hellman parameters Generate the server and client keys used by the VPN connection. Server Certificates Enter the applicable details to identify the OpenVPN server and create a CA certificate based on this information. Select the type of authentication in use for the VPN connection. You can select from: Authentication Type - Certificate - User Name / Password Each type of Key mode requires different configuration options. For more information, please refer to the VPN Document available from the NetComm Wireless Website. Table 19 - OpenVPN Configuration Items NTC-8000 – M2M Multi-Port Network Gateway 36 UM-00006 v1.1 www.netcommwireless.com PPTP-Client The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual private networks using a TCP and GRE tunnel to encapsulate PPP packets. PPTP operates on Layer 2 of the OSI model and is included on Windows computers. Configuring PPTP-Client VPN connection From the menu at the top of the screen, click Internet Settings then VPN and PPTP-Client. A list of configured PPTP-Client VPN connections is displayed. Figure 32 - PPTP Client List Click the Add button to begin configuring a PPTP-Client VPN connection. Figure 33 - VPN Connection Settings - PPTP The table on the following page describes each of the fields of the PPTP-Client VPN Connection Settings page. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 37 PPTP-Client VPN Connection Settings – Item Details ITEM DEFINITION Enable PPTP Client Enable or Disable the VPN connection. Profile Name A name used to identify the VPN connection. PPTP Server Address The IP Address on which the VPN server is running. Username The username required to login to the VPN service. Password The password required to login to the VPN service. Authentication Type The authentication type required for connecting to the VPN service. Metric The route metric to apply to the VPN connection. The metric must be a value between 0 and 65535. Use peer DNS Select whether to use the VPN server DNS settings or not. NAT Masquerading Select whether to use NAT Masquerading for the VPN connection. Set Default Route to PPTP Make the VPN connection the default route for traffic to use. Enable MPPE Select to enable Microsoft Point-to-Point Encryption (MPPE). Extra options The extra options field allows you to enter an option from the pppd daemon. You may enter multiple options separated by a space. To remove an option, delete it from the field. Verbose Logging Enable extended logging information for the VPN connection. Reconnect Delay The delay before attempting to reconnect to the VPN service. The Reconnect Delay must be an integer between 30 and 65535. Reconnect Retries The number of times to attempt to reconnect to the VPN service. The Reconnect Retries must be a value between 0 and 65535. A value of 0 sets the gateway to reconnect indefinitely until a connection is made. Table 20 - PPTP Configuration Items NTC-8000 – M2M Multi-Port Network Gateway 38 UM-00006 v1.1 www.netcommwireless.com GRE The Generic Route Encapsulation (GRE) protocol creates a point-to-point connection similar to a VPN between clients and servers or between clients only. GRE is used to encapsulate the data or payload. Configuring a GRE VPN connection From the menu at the top of the screen, click Internet Settings then VPN and GRE. A list of configured GRE VPN connections is displayed. Figure 34 - GRE VPN List Click the Add button to begin configuring a GRE VPN connection. Figure 35 - GRE VPN Settings page The table on the following page describes each of the fields of the GRE VPN Connection Settings page. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 39 GRE VPN Connection Settings – Item Details ITEM DEFINITION Enable VPN Enable or Disable the VPN connection. Profile Name A name used to identify the VPN connection. GRE Server Address The IP Address on which the GRE VPN server is running. Local Tunnel Address The Local IP address of the VPN tunnel. Remote Tunnel Address The Remote IP address of the other end of the VPN tunnel. Remote Network Enter the remote network address and subnet mask. TTL The Time To Live field, an 8-bit field used to remove an undeliverable data packet from a network to avoid unnecessary network traffic across the internet. The default value of 255 is the upper limit on the time that an IP datagram can exist. The value is reduced by at least one for each hop the data packet takes to the next router on the route to the datagram’s destination. If the TTL field reaches zero before the datagram arrives at its destination the data packet is discarded and an error message is sent back to the sender. Verbose Logging Enable extended logging information for the VPN connection. Reconnect Delay The delay before attempting to reconnect to the VPN service. The Reconnect Delay must be an integer between 30 and 65535. Reconnect Retries The number of times to attempt to reconnect to the VPN service. The Reconnect Retries must be a value between 0 and 65535. A value of 0 sets the gateway to reconnect indefinitely until a connection is made. Table 21 - VPN - GRE Settings NTC-8000 – M2M Multi-Port Network Gateway 40 UM-00006 v1.1 www.netcommwireless.com Wireless Settings Basic The Basic setup page allows you to configure the gateway’s access point settings. Figure 36 - Wireless Settings - Basic OPTION DEFINITION Radio On/Off WiFi is turned on by default. Changing this option to OFF will turn OFF the wireless functionality on the NTC-8000-01 and you will not be able to connect wirelessly. Country Select the country where the gateway is operating. Depending on the capability of your wireless device’s wireless network card select the network mode to use. There are 5 available options. They are: • 11 b/g mixed mode Network Mode • 11b only • 11g only • 11n only • 11 b/g/n mixed mode If you are not sure which protocol to use set this option to 11 b/g/n mixed mode. Frequency (Channel) The frequency or wireless channel that the gateway is broadcasting with. Recommended channels are 1, 6 or 11. SSID The SSID (Service Set Identifier) aka network name in use for the wireless network. Activate this SSID Enables or disables the wireless network selected in the SSID field. Broadcast SSID Enables or disables the broadcasting of the SSID name. If this is disabled, clients must know the exact SSID name to connect. Network Authentication The wireless security settings for the gateway. Please see below for further details. WPA Pre-Shared Key The wireless password in use by the gateway. WPA Group Rekey interval This is the time in seconds before a new key is generated. WPA Encryption The type of WPA encryption used with the wireless security settings. Table 22 - Wireless Settings - Basic UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 41 SSID and Security Settings You may choose from the following wireless security options: Open Shared WPA WPA-PSK WPA2 WPA2- PSK WPA-PSK-WPA2-PSK WPA1-WPA2 WPA1/WPA2 WPA (WiFi Protected Access) authentication is suitable for enterprise applications. It must be used in conjunction with an authentication server such as RADIUS to provide centralized access control and management. It provides a stronger encryption and authentication solution. Figure 37 - Advanced View – WiFi Security Settings - WPA1/WPA2 WPA-PSK/WPA2-PSK A newer type of security is WPA-PSK (TKIP) and WPA2-PSK (AES). This type of security gives a more secure network compare to WEP. Use TKIP Encryption Type for WPA-PSK and AES for WPA2-PSK. After that, please enter the key in the Passphrase field. The key needs to be more than 8 characters and less than 63 characters and it can be any combination of letters and numbers. Note that the configuration for WPA2, WPA-PSK-WPA2-PSK, WPA-PSK and WPA2-PSK is identical. Figure 38 - Advanced View – WiFi Security Settings - WPA-PSK/WPA2-PSK Note: Your NTC-8000-01 uses WPA2-PSK by default. Check the Wireless Security Card or the device label on the bottom of the NTC-30WV for your default SSID and Security key to begin connecting your wireless devices. NTC-8000 – M2M Multi-Port Network Gateway 42 UM-00006 v1.1 www.netcommwireless.com Advanced The Advanced page is used to modify the advanced wireless settings for the gateway. These settings should not be changed unless you are aware of what effect they will have. Figure 39 - Wireless Settings – Advanced OPTION DEFINITION BG Protection Mode A protective measure designed to prevent collisions among 802.11b/g modes. Mode options include Auto, On, or Off. Client Idle Timeout The time in seconds that a wireless client session can be idle before the gateway cancels the session and defines the wireless client as not connected. Beacon Interval: Interval of time in which the wireless gateway broadcasts a beacon which is used to synchronize the wireless network. Frequency (Channel) The frequency or wireless channel that the gateway is broadcasting with. Recommended channels are 1, 6 or 11. Data Beacon Rate (DTIM) Interval of time in which the wireless gateway broadcasts a beacon which is used to synchronize the wireless network. Fragmentation Threshold This specifies the maximum size of a packet during the fragmentation of data to be transmitted. If you set this value too low, it will result in bad performance. RTS Threshold When the packet size is smaller than the RTS threshold, the wireless gateway will not use the RTS/CTS mechanism to send this packet. TX Power This determines the output power of the antenna. Short Preamble Enable or disable short preambles in use on the wireless network. Using short preambles should improve throughput, however some wireless network adapters must use long preambles. Broadcast Network Name (SSID) Use this to show or hide the SSID (wireless network name) of your gateway. Table 23 - Wireless Settings - Advanced Configuration Items Click the “Save” button to save any changes to the settings. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 43 WDS Mode The NTC-8000-01 supports the configuration of a Wireless Distribution System (WDS). WDS allows you to expand your wireless network with multiple access points. There are two WDS modes available: Bridged Mode and Repeater Mode. In Bridged mode, the WDS access points communicate with each other but do not communicate with wireless clients. Bridged mode is best used in situations where the client machines connect via Ethernet cable. In Repeater mode, the WDS access points communicate with each other and with wireless clients. Below is an example of how to configure two NTC-8000-01 gateways to use the Repeater mode WDS feature. In this example, Access Point 1 is connected to a mobile broadband network and Access Point 2 and its clients will connect to the internet through Access Point 1. Access Point 1 – Mobile Broadband Connected 1. Establish a Mobile Broadband connection with Access Point 1: Figure 40 - WDS - Access Point 1 Status 2. Configure the LAN IP Address of Access Point 1. In this example, it is set to the default address of 192.168.1.1: Figure 41 - WDS - Access Point 1 LAN IP Setup NTC-8000 – M2M Multi-Port Network Gateway 44 UM-00006 v1.1 www.netcommwireless.com 3. Enable the DHCP Server on Access Point 1: Figure 42 - WDS - Access Point 1 DHCP Server Settings 4. Click Wireless Settings and then Basic. Enter the required details as listed in the table below: Figure 43 – WDS - Access Point 1 Repeater Mode Setup OPTION DEFINITION Radio On/Off The Wireless Radio must be turned on in order to use WDS. Set this to ON. Country Select the country where the gateway is operating. Depending on the capability of your wireless device’s wireless network card select the network mode to use. There are 5 available options. They are: Network Mode 11 b/g mixed mode 11b only 11g only 11n only 11 b/g/n mixed mode If you are not sure which protocol to use set this option to 11 b/g/n mixed mode. Frequency (Channel) The frequency or wireless channel that the gateway is broadcasting with. Recommended channels are 1, 6 or 11. Frequency (Channel) The frequency or wireless channel that the gateway is broadcasting with. Recommended channels are 1, 6 or 11. You may use any channel except AUTO in order to use WDS. SSID The SSID (Service Set Identifier) or network name in use for the wireless network. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 45 Network Authentication The wireless security settings for the gateway. Refer to the Basic Wireless Settings section for more information on the available options. When you have entered the required information, click Save. 5. Click Wireless Settings and then WDS. Set WDS Mode to Repeater Mode and enter an Encryption Key and the MAC address of Access Point 2. Figure 44 - Access Point 1 - WDS Settings OPTION DEFINITION WDS Mode Selects the WDS Mode to use. Available modes are Disabled, Bridged Mode and Repeater Mode. In this example we are using Repeater Mode which allows client machines to connect wirelessly. In Bridged Mode, an Ethernet connection to the client access point is required. Encrypt Type Shows the encryption method currently in use. AP MAC Address1-4 Enter the MAC Address of Access Point 2 and any other client access points in to these fields to inform the server of their addresses. Click Save when you have finished. NTC-8000 – M2M Multi-Port Network Gateway 46 UM-00006 v1.1 www.netcommwireless.com Access Point 2 – No connection to mobile broadband 1. Access Point 2 will act as a repeater for and provide internet access to its clients through Access Point 1 and therefore does not require a Mobile Broadband connection to be established. Figure 45 – WDS - Aceess Point 2 Status 2. Configure the LAN IP Address of Access Point 2. In this example, it is set to the default address of 192.168.1.2: Figure 46 - WDS - Access Point 2 LAN IP Setup UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 47 3. Set the DHCP Server on Access Point 2 to Disable: Figure 47 - WDS - Access Point 2 DHCP Settings 4. Under Wireless Setup > Basic, select the same frequency channel as you did for Access Point 1. Enter an SSID to identify Access Point 2 and set Network Authentication and all other Security Settings to be the same as the settings from Access Point 1. Figure 48 - WDS - Access Point 2 - Basic Settings NTC-8000 – M2M Multi-Port Network Gateway 48 UM-00006 v1.1 www.netcommwireless.com 5. Navigate to Wireless Settings > WDS and set WDS Mode to Repeater Mode , then enter the same Encrypt Key and the MAC address of Access Point 1 in the AP MAC Address1 field. The MAC address of Access Point 1 is listed on its Status page. When you have entered the required information, click Save: Figure 49 - WDS – Access Point 2 Repeater Mode Setup The Wireless Distribution System setup is now complete. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 49 MAC Filtering The MAC Filtering page allows you to configure a list of MAC addresses that are either allowed or denied access to the selected network. Figure 50 - MAC Filtering To create a MAC filter: 1. In the Please select a SSID number to configure drop down list, select the wireless network for which you want to configure a rule. 2. In the Filtering Policy drop down list, select whether to allow or block the MAC address. 3. In the Add a MAC address to the filtering list fields, enter the MAC address that you want to allow or block. 4. Click the Apply button. The rule is added to the list at the bottom of the screen. NTC-8000 – M2M Multi-Port Network Gateway 50 UM-00006 v1.1 www.netcommwireless.com Station List The Station List page displays a list of wireless clients connected to the access point of the gateway. Figure 51 - Station List Wireless Mode The Wireless Mode page is where you can switch the gateway between Access Point and Wireless Client mode. In Access Point mode, the gateway allows wireless clients to connect to it for network and internet access. In Client mode, the gateway can connect to another Access Point. Figure 52 - Wireless Mode When changing the wireless mode, ensure that you click the Apply button to confirm the change. When Wireless Mode is set to “Client”, the Wireless Settings menu options change. See below for the Client mode menu option descriptions. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 51 Client Configuration The M2M Multi-Port Network Gateway can be configured to connect to another wireless access point as a wireless client. The client configuration page is used to define the basic wireless settings for the NTC-8000-01 such as the SSID and Wireless Security in use as well as scanning for and connecting to Wireless Local Area Network Access Points. Figure 53 - Wireless Configuration – Client Configuration OPTION DEFINITION Radio On/Off WiFi is turned on by default. Changing this option to OFF will turn OFF the wireless functionality on the NTC-8000-01 and you will not be able to connect wirelessly. SSID To Connect Pressing the Scan button will bring up a list of detected Access Points at the bottom of the page. By selecting the Connect link in the Action field the NTC-8000-01 can connect to the Access Point if the network authentication type and wireless security key are correct. AP’s BSSID The MAC Address of the wireless access point to which the NTC-8000-01 will connect. This field determines the type of wireless security that the NTC-8000-01 will use. Options include: Network Authentication Open Shared WPA WPA-PSK WPA2 WPA2-PSK WPA-PSK-WPA2-PSK WPA1-WPA2 802.1x The following page will describe the security settings in further detail. Auto Roaming Auto Roaming Threshold Using the Auto Roaming feature the NTC-8000-01 can automatically detect when there's a stronger Access Point within range and transparently switch to the access point with the stronger wireless signal. The auto roaming threshold is a measure (in signal strength) defining the point at which the the NTC8000-01 searches for a new Access Point. If set too low, the NTC-8000-01 will not switch in an optimal fashion when an AP with greater signal strength is detected. If the threshold is set too high the NTC-8000-01 will waste resources searching for a new AP too often. It is recommended to use the default threshold of 25. Table 24 - Wireless Configuration Details Click Apply to save any changes to the settings. NTC-8000 – M2M Multi-Port Network Gateway 52 UM-00006 v1.1 www.netcommwireless.com Services Dynamic DNS The Dynamic DNS page is used to configure the Dynamic DNS feature of the gateway. Dynamic DNS provides a method for the gateway to update an external name server with the current WAN IP address. You may select from a number of dynamic DNS host providers. Figure 54 - DDNS Settings To configure dynamic DNS: 1. Set the DDNS Configuration option to Enable. 2. From the Server Address drop down list, select the Dynamic DNS service that you wish to use. The available DDNS services available are: www.dhs.org www.dyndns.org www.dyns.cx www.easydns.com www.justlinux.com www.ods.org www.tzo.com www.zoneedit.com 3. In the Host Name, Username and Password fields, enter your dynamic DNS account credentials. 4. Click the Save button to save the settings. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 53 NTP The NTP page is used to configure NTP Synchronisation or to select the NTP server used for synchronisation. Figure 55 - NTP Settings Using the time zone settings the gateway’s current time can be adjusted according to its global position while the NTP (Network Time Protocol) settings allow your gateway to synchronise its internal clock with a global Internet Time server. This setting will affect functions such as System Log entries and Firewall settings where the current system time is displayed. You can use the default NTP server or enter one manually if required. NTC-8000 – M2M Multi-Port Network Gateway 54 UM-00006 v1.1 www.netcommwireless.com System Monitor The system monitor is a feature which monitors the gateway for anomalies and restarts the gateway if an anomaly occurs preventing its normal operation. When configured, the system monitor transmits controlled ping packets to 1 or 2 user specified IP addresses to confirm an active connection. If the system monitor does not receive responses to the pings after a specified number of failures, it reboots the device in a last resort attempt to restore connectivity. Figure 56 - System Monitor Settings This system monitor works as follows: a) The gateway sends 3 consecutive pings to the first destination address at the interval specified in the Periodic Ping Timer field. b) If all 3 pings to the first destination address fail, the gateway sends 3 consecutive pings to the second destination address at the Periodic Ping Timer interval. c) If all 3 pings to the second destination address fail, the gateway sends 3 pings to the first destination address using the Periodic Ping Accelerated Timer interval. d) If all 3 accelerated pings to the first destination address fail, the gateway sends 3 pings to the second destination address at the Periodic Ping Accelerated Timer interval. e) If all 3 accelerated pings to the second destination address fail, the gateway registers this as a fail and returns to step C. f) When the number of failures reaches the number configured in the Fail Count field, the gateway reboots. If any ping succeeds, the gateway returns to step A and does not reboot. Note: The Periodic Ping Timer should not be set to a value of less than 300 seconds to allow the gateway time to reconnect to the cellular network following a reboot. Note: The traffic generated by the periodic ping feature is counted as chargeable usage, please keep this in mind when selecting how often to ping. Disabling the System Monitor To disable the System Monitor set Fail Count to 0. Configuring a Periodic Reboot The gateway can be configured to automatically reboot after a period of time specified in minutes. While this is not necessary, it does ensure that in the case of remote installations, the gateway will reboot if some anomaly occurs. 1. In the Force reboot every field, enter the time in minutes between forced reboots. The default value is 0 which disables the Periodic reboot function. The minimum period between reboots is 5 minutes while the maximum value is 65535 minutes. 2. Click the Save button to save the settings. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 55 SNMP The SNMP page is used to configure the SNMP features of the gateway. Figure 57 - SNMP Settings SNMP (Simple Network Management Protocol) is used to remotely monitor the gateway for conditions that may warrant administrative attention. It can be used to retrieve information from the gateway such as the signal strength, the system time, the interface status, etc. To configure SNMP: 1. Set the Enable SNMP option to Enable. 2. Use the Read-Only Community Name and Read-Write Community Name fields to specify your own community names. You may leave them at the default setting if you do not wish to customise them. Community names are used as a type of security to prevent access to reading and/or writing to the gateways configuration. It is recommended that you change the Community names to something other than the default settings when using this feature. 3. Click the Save button to save the settings. To download the MIB file, click the Download link. Note that in some browsers, this may open the MIB file directly in the browser. If this happens, you may need to right-click and select Save Link As.. to save it to your computer. ITEM DEFINITION Trap Destination (IP Address) The IP Address that SNMP data is to be sent to. Heartbeat Interval (seconds) The number of seconds between SNMP heartbeats. Trap Persistence Time (seconds) The length of time an SNMP trap persists. Trap Retransmission Time (seconds) The length of time between SNMP trap retransmissions can be configured here. Table 25 - SNMP Configuration Options You can trigger an SNMP Heartbeat manually by clicking the Send Heartbeat Now button. NTC-8000 – M2M Multi-Port Network Gateway 56 UM-00006 v1.1 www.netcommwireless.com System Log The Log page is used to download or display the current System Log of the gateway. Figure 58 - System Log The System Log enables you to troubleshoot any issues you may be experiencing with your gateway. Use the Display Level drop down list to select a logging level. The Display Level filters the messages according to the severity of the message and shows all messages at the selected level and lower. The display levels are described and listed in order of severity below: LOG LEVEL DEFINITION All Display all system log messages. Error Show error condition messages only. Warning Show warning messages only. Notice Show normal system logging information. Info Show informational messages only. Debug Show extended system log messages with full debugging level details. Table 26 - System Log Detail Levels The current System Log may be downloaded to your computer for offline viewing. To do this, click the Download Log File link at the bottom of the page. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 57 Load / Save Note: the Load/Save menu is only available to users logged in to the gateway using the user name root. To perform a firmware upgrade, device configuration backup or reset the gateway to factory defaults, you must be logged in with the root administrator account. Settings The settings page is used to backup or restore the gateway’s configuration settings or can be used to reset the gateway to factory default settings. Figure 59 - Load / Save Configuration Page Note: In order to perform an update, you must be logged into the gateway as the root user (see the Accessing the web based configuration section for more details). To save a copy of the gateway’s configuration Enter the root manager password and click the Save button. This will download a copy of the current settings from the gateway to your PC. Note: The following conditions apply: - It is NOT possible to edit the contents of the file downloaded; if you modify the contents of the configuration file in any way you will not be able to restore it later. You may change the name of the file if you wish but the filename extension must remain “.cfg” To restore a copy of the gateway’s configuration 1. In the Restore saved settings section, click the Browse… button. 2. Select the previously saved configuration file that you wish to restore to the gateway. 3. Click the Restore button. To restore the gateway’s configuration to factory default settings Under the Restore Factory Defaults section, click the Restore button to restore the gateway to factory default settings. The gateway restarts with the factory default configuration loaded. NTC-8000 – M2M Multi-Port Network Gateway 58 UM-00006 v1.1 www.netcommwireless.com Upload The firmware update process involves first updating the recovery image firmware, rebooting into the recovery mode of the gateway and then updating the main firmware image. Note: In order to perform an update, you must be logged into the gateway with the root manager account (see the Accessing the Web based User Interface section for more details). To update the gateway’s firmware: 1. Click on the System menu, select Load/Save and then Upload. Click the Browse button. Locate the recovery firmware image file on your computer and click Open. 2. Click the Upload button. The recovery firmware image is uploaded to the storage on the gateway. Figure 60 - File upload The recovery firmware image is listed in the Uploaded files section. Click the Install link to begin installing the recovery firmware image and then click OK on the confirmation window that appears. Figure 61 - Uploaded files UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 59 3. The recovery firmware image is flashed and when it is complete, the gateway displays “The firmware update was successful” and returns to the main Upload screen. Figure 62 - Recovery firmware flash process 4. Press and hold the reset button on the interface panel of the gateway for between 3 and 10 seconds until the all LEDs on the front of the gateway start to flash on and off then release it. The gateway boots into the system recovery mode. 5. When the gateway has finished booting into recovery mode, navigate to http://192.168.1.1/ in your web browser. The gateway recovery console is displayed. Note: The DHCP Server on the gateway does not function in recovery mode. You may need to configure your computer to be in the 192.168.1.X subnet in order to access the gateway while it is in recovery mode. Figure 63 – NWL Series Gateway Recovery Console banner 6. Click the Application installer link from the menu bar at the top then click the Browse button. Locate the main firmware image file on your computer and click Open. Click the Upload button to begin the firmware upload. Figure 64 - Recovery console - Upload main firmware image NTC-8000 – M2M Multi-Port Network Gateway 60 UM-00006 v1.1 www.netcommwireless.com 7. When the upload has completed, the screen refreshes to display the list of files on the gateway’s storage. Click the Install link to the right of the main firmware image you uploaded and then click OK to confirm that you want to continue with the installation. 8. The installation is complete when you see the words “Installation successful!” as per the screenshot below. Figure 65 - Recovery console – installing main firmware image 9. Click the Reboot menu item from the top menu bar then click the Reboot button. Click OK to confirm the reboot of the gateway. The M2M Multi-Port Network Gateway boots up with the updated firmware. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 61 Package Manager The Package Manager page is used to provide details of any user installed packages on the gateway. Figure 66 - Package Manager Items The Package Name, Version, Architecture and Installed time are shown and the package content details are available by clicking on the blue Package Details link. Alternatively, if you want to remove a package, click the blue Uninstall link. Note: For more information on creating software packages for the NTC-8000-01, please contact M2M technical support at http://www.netcommwireless.com/contact-forms/support NTC-8000 – M2M Multi-Port Network Gateway 62 UM-00006 v1.1 www.netcommwireless.com Administration The Administration page is used to enable or disable the firewall, remote administration, telnet access and ping responses. Figure 67 - Administration Configuration Items OPTION DEFINITION Firewall Enable or disable the in-built firewall on the gateway. Enable HTTP Enable or disable remote HTTP access to the gateway. You can also set the port you would like remote HTTP access to be available on. Enable Telnet Enable or disable telnet (command line) access to the gateway from the WWAN connection. Enable Ping Enable or disable ping responses on the WWAN connection. Web User Interface Account Username Select the username you would like to change the password for. Root users have write permissions for both the root and admin accounts. Admin users can only update the admin password. Password Enter the new password for the selected user account. Confirm Password Re-enter the new password for the selected user account. Telnet Account User Name The Telnet Account settings are only available when logged into the gateway as the ‘root’ user. Password Enter the new password for the root telnet user account. Confirm Password Re-enter the new password for the root telnet user account. Table 27 - Administration Configuration Items Note: The password will only be changed if you enter two matching passwords. It is not necessary to change the password if you are only changing the incoming port number. To access the gateway’s configuration pages remotely from a remote computer, perform the following steps: 1. Open a new browser window (e.g. Internet Explorer, Firefox, Safari). 2. In the address bar, enter the gateway’s WAN IP address and assigned port number, e.g. “10.10.10.10:8080”. Note: You can find the gateway’s WAN IP address by clicking on the Status menu. The Local field in the WWAN section shows the gateway’s WAN IP address. 3. Click Login and type admin or root in the Username and admin in the Password fields. Then click on Submit. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 63 System Configuration The System configuration page provides the ability to configure an external syslog server, TCP Keepalive settings, the power saving feature and SFTP login credentials. Figure 68 - System Configuration Items The TCP Keepalive function can be used to ensure the WWAN connection does not disconnect due to inactivity, while the Power Save mode can help ensure that the gateway does not cause battery drain which is especially useful when the gateway is installed in a vehicle. Lastly, the SFTP username and password can be entered on this page. OPTION DEFINITION IP / Hostname [:PORT] The IP address and port of the external syslog server to which logging information should be sent. Log to file Enables or disables the logging of system events. Keepalive Enable or Disable the TCP Keepalive function. Keepalive Time The interval between the last packet sent and the first TCP keepalive packet being sent. This must be an integer between 60 and 65535 seconds. Keepalive Interval The time between subsequent TCP Keepalive packets. This must be an interval between 10 and 28800 seconds. Keepalive Probes The number of TCP Keepalive packets to send. This must be a value between 1 and 1000. Power Save Mode Enables or disables the power saving feature of the gateway. Remote SFTP Username The SFTP username for the SFTP account. Remote SFTP Password The SFTP password for the SFTP account. Table 28 - System Configuration Items NTC-8000 – M2M Multi-Port Network Gateway 64 UM-00006 v1.1 www.netcommwireless.com Logoff The logoff item logs you out of your web configuration session. Figure 69 - Logoff Reboot The reboot item reboots the gateway. This can be useful if you have made configuration changes you want to implement or want to reboot the gateway. Figure 70 - Reboot Gateway UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 65 Appendix A: Tables Table 1 - Document Revision History ............................................................................................................................................... 2 Table 2 - NTC-8000-01 LEDs .......................................................................................................................................................... 6 Table 3 - Device Dimensions............................................................................................................................................................ 7 Table 4 - Mounting Bracket Dimensions ........................................................................................................................................... 7 Table 5 - Integrated Interfaces ......................................................................................................................................................... 8 Table 6 - 4-way mini fit connector wiring .......................................................................................................................................... 9 Table 7 - LAN Management Default Settings .................................................................................................................................. 10 Table 8 – WiFi Default Settings ....................................................................................................................................................... 10 Table 9 - Web Interface Default Settings ........................................................................................................................................ 10 Table 10 - Status page items ......................................................................................................................................................... 13 Table 11 - Status Page - LAN Details ............................................................................................................................................. 14 Table 12 - Status Page - PPPoE Details......................................................................................................................................... 14 Table 13 - Status Page - PPTP Details ........................................................................................................................................... 14 Table 14 - Status Page - IPSec Details .......................................................................................................................................... 14 Table 15 - Advanced Status Settings ............................................................................................................................................. 16 Table 16 - WLAN Failover Settings ................................................................................................................................................. 19 Table 17 - NAT Configuration Items ............................................................................................................................................... 28 Table 18 - IPSec Configuration Items ............................................................................................................................................. 34 Table 19 - OpenVPN Configuration Items....................................................................................................................................... 36 Table 20 - PPTP Configuration Items ............................................................................................................................................. 38 Table 21 - VPN - GRE Settings ...................................................................................................................................................... 40 Table 22 - Wireless Settings - Basic ............................................................................................................................................... 41 Table 23 - Wireless Settings - Advanced Configuration Items ......................................................................................................... 43 Table 24 - Wireless Configuration Details ....................................................................................................................................... 52 Table 25 - SNMP Configuration Options ........................................................................................................................................ 56 Table 26 - System Log Detail Levels .............................................................................................................................................. 57 Table 27 - Administration Configuration Items ................................................................................................................................ 63 Table 28 - System Configuration Items .......................................................................................................................................... 64 NTC-8000 – M2M Multi-Port Network Gateway 66 UM-00006 v1.1 www.netcommwireless.com Appendix B: Recovery mode The NTC-8000-01 features two independent operating systems, each with its own file systems. These two systems are referred to as 'Main' and 'Recovery'. It is always possible to use one in order to restore the other in the event that one system becomes damaged or corrupted (such as during a firmware upgrade failure). Both systems have web interfaces that can be used to manipulate the other inactive system. The gateway starts up by default in the Main system mode, however the gateway may be triggered to start in recovery mode if desired. To start the gateway in recovery mode: 1. Power on the gateway and allow it to remain on for at least 1 minute to complete its boot procedure. 2. Press and hold the physical reset button on the rear interface panel of the gateway for between 3 and 10 seconds and then release the button. The gateway boots into recovery mode. 3. In your browser, navigate to http://192.168.1.1. The gateway’s recovery mode is hardcoded to use this address regardless of the IP address that was configured in the main system. The gateway’s recovery console is displayed. Figure 71 - Recovery console The recovery console provides limited functionality. Basic status information is available, as well as access to the System log for troubleshooting. The Application Installer can be used to upload and install different firmware, allowing you to roll back to a previous firmware in the event that an upgrade fails. The Settings menu provides the ability to reset the gateway to factory default settings and the Reboot tab allows you to perform a soft reboot of the gateway. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 67 Legal and Regulatory 1. Intellectual Property Rights All intellectual property rights (including copyright and trade mark rights) subsisting in, relating to or arising out this Manual are owned by and vest in NetComm Wireless Limited (ACN 002490486) (NetComm Wireless Limited) (or its licensors). This Manual does not transfer any right, title or interest in NetComm Wireless Limited (or its licensors) intellectual property rights to you. You are permitted to use this Manual for the sole purpose of using the NetComm Wireless product to which it relates. Otherwise no part of this Manual may be reproduced, stored in a retrieval system or transmitted in any form, by any means, be it electronic, mechanical, recording or otherwise, without the prior written permission of NetComm Wireless Limited. NetComm and NetComm Wireless are trademarks of NetComm Wireless Limited. All other trademarks are acknowledged to be the property of their respective owners. 2. Customer Information The Australian Communications & Media Authority (ACMA) requires you to be aware of the following information and warnings: 1. This unit may be connected to the Telecommunication Network through a line cord which meets the requirements of the AS/CA S008-2011 Standard. 2. This equipment has been tested and found to comply with the Standards for C-Tick and or A-Tick as set by the ACMA. These standards are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio noise and, if not installed and used in accordance with the instructions detailed within this manual, may cause interference to radio communications. However, there is no guarantee that interference will not occur with the installation of this product in your home or office. If this equipment does cause some degree of interference to radio or television reception, which can be determined by turning the equipment off and on, we encourage the user to try to correct the interference by one or more of the following measures: Change the direction or relocate the receiving antenna. Increase the separation between this equipment and the receiver. Connect the equipment to an alternate power outlet on a different power circuit from that to which the receiver/TV is connected. Consult an experienced radio/TV technician for help. 3. The power supply that is provided with this unit is only intended for use with this product. Do not use this power supply with any other product or do not use any other power supply that is not approved for use with this product by NetComm Wireless Limited. Failure to do so may cause damage to this product, fire or result in personal injury. 3. Consumer Protection Laws Australian and New Zealand consumer law in certain circumstances implies mandatory guarantees, conditions and warranties which cannot be excluded by NetComm Wireless Limited and legislation of another country's Government may have a similar effect (together these are the Consumer Protection Laws). Any warranty or representation provided by NetComm Wireless Limited is in addition to, and not in replacement of, your rights under such Consumer Protection Laws. If you purchased our goods in Australia and you are a consumer, you are entitled to a replacement or refund for a major failure and for compensation for any other reasonably foreseeable loss or damage. You are also entitled to have the goods repaired or replaced if the goods fail to be of acceptable quality and the failure does not amount to a major failure. If you purchased our goods in New Zealand and are a consumer you will also be entitled to similar statutory guarantees. NTC-8000 – M2M Multi-Port Network Gateway 68 UM-00006 v1.1 www.netcommwireless.com 4. Product Warranty All NetComm Wireless products have a standard one (1) year warranty from date of purchase, however, some products have an extended warranty option (refer to packaging and the warranty card) (each a Product Warranty). To be eligible for the extended warranty option you must supply the requested warranty information to NetComm Wireless Limited within 30 days of the original purchase by registering online via the NetComm Wireless web site at www.netcommwireless.com . For all Product Warranty claims you will require proof of purchase. All Product Warranties are in addition to your rights and remedies under applicable Consumer Protection Laws which cannot be excluded (see Section 3 above). Subject to your rights and remedies under applicable Consumer Protection Laws which cannot be excluded (see Section 3 above), the Product Warranty is granted on the following conditions: 1. the Product Warranty extends to the original purchaser (you / the customer) and is not transferable; 2. the Product Warranty shall not apply to software programs, batteries, power supplies, cables or other accessories supplied in or with the product; 3. the customer complies with all of the terms of any relevant agreement with NetComm Wireless Limited and any other reasonable requirements of NetComm Wireless Limited including producing such evidence of purchase as NetComm Wireless Limited may require; 4. the cost of transporting the product to and from NetComm Wireless Limited’s nominated premises is your responsibility; 5. NetComm Wireless Limited does not have any liability or responsibility under the Product Warranty where any cost, loss, injury or damage of any kind, whether direct, indirect, consequential, incidental or otherwise arises out of events beyond NetComm Wireless Limited’s reasonable control. This includes but is not limited to: acts of God, war, riot, embargoes, acts of civil or military authorities, fire, floods, electricity outages, lightning, power surges, or shortages of materials or labour; and 6. the customer is responsible for the security of their computer and network at all times. Security features may be disabled within the factory default settings. NetComm Wireless Limited recommends that you enable these features to enhance your security. Subject to your rights and remedies under applicable Consumer Protection Laws which cannot be excluded (see Section 3 above), the Product Warranty is automatically voided if: 7. you, or someone else, use the product, or attempt to use it, other than as specified by NetComm Wireless Limited; 8. the fault or defect in your product is the result of a voltage surge subjected to the product either by the way of power supply or communication line, whether caused by thunderstorm activity or any other cause(s); 9. the fault is the result of accidental damage or damage in transit, including but not limited to liquid spillage; 10. your product has been used for any purposes other than that for which it is sold, or in any way other than in strict accordance with the user manual supplied; 11. your product has been repaired or modified or attempted to be repaired or modified, other than by a qualified person at a service centre authorised by NetComm Wireless Limited; or 12. the serial number has been defaced or altered in any way or if the serial number plate has been removed. 5. Limitation of Liability This clause does not apply to New Zealand consumers. Subject to your rights and remedies under applicable Consumer Protection Laws which cannot be excluded (see Section 3 above), NetComm Wireless Limited accepts no liability or responsibility, for consequences arising from the use of this product. NetComm Wireless Limited reserves the right to change the specifications and operating details of this product without notice. If any law implies a guarantee, condition or warranty in respect of goods or services supplied, and NetComm Wireless Limited’s liability for breach of that condition or warranty may not be excluded but may be limited, then subject to your rights and remedies under any applicable Consumer Protection Laws which cannot be excluded, NetComm Wireless Limited’s liability for any breach of that guarantee, condition or warranty is limited to: (i) in the case of a supply of goods, NetComm Wireless Limited doing any one or more of the following: replacing the goods or supplying equivalent goods; repairing the goods; paying the cost of replacing the goods or of acquiring equivalent goods; or paying the cost of having the goods repaired; or (ii) in the case of a supply of services, NetComm Wireless Limited doing either or both of the following: supplying the services again; or paying the cost of having the services supplied again. To the extent NetComm Wireless Limited is unable to limit its liability as set out above, NetComm Wireless Limited limits its liability to the extent such liability is lawfully able to be limited. UM-00006 v1.1 www.netcommwireless.com NTC-8000 – M2M Multi-Port Network Gateway 69 Contact Address: NETCOMM WIRELESS LIMITED PO Box 1200, Lane Cove NSW 2066 Australia Phone: +61(0)2 9424 2070 Fax: +61(0)2 9424 2010 Website: www.netcommwireless.com Email: [email protected] , [email protected] NTC-8000 – M2M Multi-Port Network Gateway 70 UM-00006 v1.1 www.netcommwireless.com
