Cradlepoint CBR450 Product Manual

Cradlepoint CBR450 Product Manual

Compact broadband router with vpn support
Hide thumbs Also See for CBR450:

Advertisement

Quick Links

Advertisement

Table of Contents
loading

Summary of Contents for Cradlepoint CBR450

  • Page 2: Manual Revisions

    CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT Preface CradlePoint reserves the right to revise this publication and to make changes in the content thereof without obligation to notify any person or organization of any revisions or changes. Manual Revisions Revision...
  • Page 3: Table Of Contents

    5.3 GPS ................. 29 8.3 M ) ASK YOUR ANAGED ERVICES DVANCED ODE ONLY 5.4 GRE T ) ........ 30 UNNELS DVANCED ODE ONLY CRADLEPOINT SALES REPRESENTATIVE FOR DETAILS ... 109 5.5 I ............31 NTERNET ONNECTIONS 8.4 S ............. 110 YSTEM ONTROL...
  • Page 4 YSTEM OFTWARE 9 GLOSSARY..............112 10 APPENDIX ..............126 10.1 R ..........126 EGULATORY NFORMATION 10.2 W ..........126 ARRANTY NFORMATION 10.3 S .............. 127 PECIFICATIONS © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 2...
  • Page 5: Introduction

    The CBR450 is a feature-rich business router in a small package. Built for secure applications that require absolutely no WiFi broadcast, such as for PCI or HIPAA compliance, you can rely on CradlePoint's advanced networking features like WiPipe Security, VPN Termination, and Failover/Failback (which protects your network in case the primary data service fails) to keep your business online.
  • Page 6 WiPipe Central 1.3.1 CradlePoint‘s cloud-based router management service allows for remote monitoring, configuration, and firmware updates of deployed routers like the CBR450. WiPipe Central drastically simplifies router administration for businesses using multiple routers. WiPipe Central can be purchased separately at http://cradlepoint.com/support/wipipe-central.
  • Page 7: Hardware Overview

    CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT 2 HARDWARE OVERVIEW © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 5...
  • Page 8: Ports , Buttons , Ands

    Ethernet Port: By default, the Ethernet port is configured as a LAN (Local Area Network) port to connect to local devices. Power 12v DC: Connect the included power supply to the wall and your CBR450. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 9 CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT ExpressCard Modem Port: Insert a modem with an active data plan as one possible internet source. ExpressCard Lock: Switch to lock an ExpressCard modem in place. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 10 USB or ExpressCard modems. The signal strength is shown for 10 seconds if the modem does not support concurrent data connection and signal strength measurement. Tapping this button will toggle the Modem Signal Strength display on and off. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 11: Leds

     No light = Router off Ethernet:  Green = Ethernet connected  Blinking green = Ethernet activity  No light = Ethernet disconnected or link failure © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 9...
  • Page 12 Additional LED Indications: Factory reset button detected USB and ExpressCard LEDs blink amber twice Error during USB firmware upgrade USB and ExpressCard LEDs blink red © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 10...
  • Page 13: Quick Start

    Data Modem Not Included. This Product Requires an Activated Data Modem or Phone with Data Plan for Full Functionality. See your Cellular/3G/4G Service Provider for Details on Coverage and Data Plan Options © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 14 First Time Setup Wizard. Follow the Getting Started – instructions given with the Wizard or see First Time Setup for more information about using the First Time Setup Wizard. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 12...
  • Page 15: Common Problems

    CBR450. Insert your USB data modem into your PC and access the internet using the software provided by your cellular carrier. Follow the directions provided to complete the update. Once you have updated your USB data modem, reconnect the cellular device to your CradlePoint router and connect to the internet.
  • Page 16 Then log in to the router administration pages and manually upload the firmware. Go to System Settings → System Software and click on ―Manual Firmware Upload‖.  If you are still unable to access the internet after following the above directions, contact CradlePoint Technical Support for further assistance. © 2011 CRADLEPOINT, INC.
  • Page 17: Web Interface -- Essentials

    4.1 Administrator Login 4.2 Getting Started – First Time Setup 4.3 Quick Links 4.4 Basic Mode vs. Advanced Mode 4.5 Network Settings vs. Internet © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 15...
  • Page 18: Administrator Login

    The Administrator Login page will appear. Log in using your administrator password. Initially, this password can be found on the bottom of the CBR450 unit as the last eight digits of the unit’s MAC address. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 19 The Administrator Login page includes a section that shows the following Router Details:  Model Number: CBR450  Internet Connection: Connected/Disconnected  Signal Strength: (Expressed as a percentage) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 20: Getting Started - Firstt

    FIRST TIME SETUP WIZARD. (Otherwise, go to Getting Started → First Time Setup). 4) CradlePoint recommends that you change the router‘s ADMINISTRATOR PASSWORD, which is used to log in to the administration pages. 5) You can select your TIME ZONE from a dropdown list. (This may be necessary to properly show time in your router log, but typically your router will automatically determine your time zone through your browser.) Click NEXT.
  • Page 21  Time Warner Cable - mobile.rr.com  Comcast - mob.comcast.net NOTE: If you use a 3G or LTE modem you can safely skip this step. Click NEXT. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 19...
  • Page 22 Please record these settings for future access. You may need this information to configure other wireless devices. Click APPLY to save the settings and update them to your router. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 23: Quick Links

    CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT 4.3 Quick Links The CradlePoint logo in the upper left-hand corner of all the administration pages is a link to the Dashboard (Status → Dashboard), which displays fundamental information about the router. The black bar across the top provides quick access to important information and controls.
  • Page 24: Basic Mode Vs . Advanced

    Since Advanced Mode includes all features found in both modes, MANUAL WILL ASSUME YOU ARE IN ADVANCED MODE. If an expected feature is missing from the user interface, be sure to check that you are using Advanced Mode. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 25: Network Settings Vs. Internet

    Settings tab.  If you have multiple internet sources (a USB modem and an ExpressCard modem) for which you would like to set priority levels, go to the Internet tab. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 26: Status

     Dashboard  GPS  GRE Tunnels  Internet Connections  Statistics  System Logs  VPN Tunnels (GRE Tunnels and VPN Tunnels: Advanced Mode only) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 24...
  • Page 27: Client List

     IP: The ―IP address,‖ or ―Internet Protocol address,‖ specifies a location for each device.  MAC: This is the "MAC address", a factory-assigned identifier used to identify a specific attached computer or device. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 28: Ashboard

    After the initial setup of the router, every time you log in you will automatically be directed to this Dashboard. Also, you can click on the CradlePoint logo in the upper left-hand corner to return to the Dashboard from any page.
  • Page 29 WAN type.  Internet → Modem Settings The IP address and gateway describe your active WAN source. For DNS server configuration options, see Network Settings → DNS. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 30 Route Mode: NAT (Network Address Translation), Standard (NAT-less), IP Passthrough, or Disabled. o Access: Admin Access, LAN Isolation, UPnP (Universal Plug and Play), and/or DHCP. To configure a network, see Network Settings → Local Networks. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 31: Gps

    GPS satellites. By default, Sprint usually supports GPS on USB data modems and Verizon usually does not. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 32: Gre Tunnels

    View the status of configured GRE Tunnels. To set up or edit a GRE tunnel, go to Internet → GRE Tunnels. Included information:  Name  Status  Transmit (packets/bytes)  Receive (packets/bytes) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 30...
  • Page 33: Internet Connections

    Depending on the device, possible information will be in the following sections: Diagnostics, General Information, IP Information, and Statistics. For modems, the Diagnostics section provides specific information about how the modem is communicating with its carrier. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 34  Model Nokia Internet Stick CS-18  Type modem  Port  Manufacturer Nokia IP Information  Netmask  IP Address  Gateway Statistics  Outgoing Bits/Second © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 32...
  • Page 35 CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT  Incoming Bits/Second  Incoming Bytes  Outgoing Bytes © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 33...
  • Page 36  Port  Manufacturer Novatel Wireless Inc. IP Information  Netmask  IP Address  Gateway Statistics  Outgoing Bits/Second  Incoming Bits/Second  Incoming Bytes © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 34...
  • Page 37 CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT  Outgoing Bytes © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 35...
  • Page 38  Modem Firmware Version  CINR  Connection State (connected, idle, etc.) General Information  Product U300 – 4G  Protocol Ethernet Static  Unique Identifier  MAC © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 36...
  • Page 39 CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT  Type WiMAX  Port  Manufacturer Franklin Wireless Corporation Statistics  Outgoing Bits/Second  Incoming Bits/Second  Incoming Bytes  Outgoing Bytes © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 37...
  • Page 40  Service Display LTE  Primary Home Agent  Carrier Status  Profile  MN-AAA SPI  PIN Status  MN-AAA SS  Connection State (connected, idle, etc.) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 38...
  • Page 41  Manufacturer Pantech, Incorporated IP Information  Netmask  IP Address  Gateway Statistics  Outgoing Bits/Second  Incoming Bits/Second  Incoming Bytes  Outgoing Bytes © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 39...
  • Page 42: Statistics

     LAN, or Local Area Network, is the network you have created through the CBR450 attached to the Ethernet port.  WAN, or Wide Area Network, is the internet source the CBR450 is using to create a new LAN. Possible WAN sources include USB modems and ExpressCard modems. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 43: System Logs

    Level: Select/Deselect from the following levels to filter messages by priority.  Critical  Error  Warning  Info NOTE: The logs are erased whenever the router is rebooted or loses power. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 41...
  • Page 44: Vpn Tunnels

    View the status of configured VPN tunnels. To set up or edit a VPN tunnel, go to Internet → VPN Tunnels. Included information:  Name  Connections  Status  Protocols  Transferred  Direction  Time Online © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 42...
  • Page 45: Network Settings

     DHCP Server  DNS  Firewall  Local Networks  Routing  WiPipe QoS (DHCP Server, DNS, Firewall, Routing, and WiPipe QoS: Advanced Mode only) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 43...
  • Page 46: Content Filtering

    Enable Whitelist: Domain / URL filters allow you to block access from your network to any external domain or website. Enabling this as a Whitelist will allow access to only those sites in the list. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 47 Once you have an OpenDNS account, enter your account information in order to use your Custom OpenDNS settings. Custom OpenDNS settings use the DNS-O-MATIC (an OpenDNS Service) API to update the IP address of your © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 48 OpenDNS is configured to access, port 53, which will prevent OpenDNS filtering. If OpenDNS does not appear to be working correctly, enabling this will attempt to bypass those ports when using an OpenDNS content filtering level. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 49: Dhcp Server (Advanced Mode Only)

    While you have the option to manually input the information to reserve an IP address (Hostname, Hardware Addr, IP Addr), it is much simpler to select a device under the Active Leases section and click ―Reserve.‖ The selected device‘s information will automatically be added under Reservations. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 50: Dns (Advanced Mode Only)

    CRADLEPOINT 6.3 DNS (Advanced Mode only) DNS, or Domain Name System, is a naming system that translates between domain names (www.cradlepoint.com, for example) and internet IP addresses (206.207.82.197). A DNS server acts as an internet phone book, translating between names that make sense to people and the more complex numerical identifiers. The DNS page for the CBR450 has these distinct functions: ...
  • Page 51 User name: Enter the user name or key provided by the Dynamic DNS service provider. If the Dynamic DNS provider supplies only a key, enter that key for both the User name and Password fields. Password: Enter the password or key provided by the Dynamic DNS service provider. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 52 IP address should not change. To ensure that the device keeps the same IP address, go to the ―Reservations‖ section under Network Settings → DHCP Server and reserve the IP address for the device. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 53: Firewall (Advanced Mode Only)

    Add New Port Forwarding Rule: page 1  Name: Name your rule.  Description: Enter a short description of this rule for future reference.  Click ―Next‖ to continue. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 51...
  • Page 54  Protocol: Select from the following options in the dropdown menu: o TCP o UDP o TCP & UDP  Click Add Rule to save your completed port forwarding rule. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 52...
  • Page 55 Someone, Johnny, is abusing that opening, so you would like to restrict his access. Create a rule that will deny Johnny‘s IP address.  Name: No more Johnny  Direction: Incoming  Action: Deny © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 53...
  • Page 56 Start Port: 80  End Port: 80  Network Address: 172.22.24.160 (Johnny‘s IP address)  Subnet Mask: 255.255.255.255 (This subnet mask restricts the rule to one single address). © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 54...
  • Page 57 Static NAT Ports: If enabled the source port does not translate in TCP and UDP packets during NAT. Some NAT traversal protocols such as STUN(T) require that the source port stay the same when traversing the firewall. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 58: Local Networks

    Both of these will use the Ethernet port for connectivity, but they can be set to have separate VLAN settings. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 59 IP Settings: Name: This primarily helps to identify this network during other administration tasks. Hostname: [Default: cp (for CradlePoint)] The hostname is the DNS name associated with the router's local area network IP address. NOTE: You can access the router‘s administration pages by typing the hostname into your browser, so if you change ―cp‖...
  • Page 60  IP Passthrough: IP Passthrough passes the IP address given by the modem WAN through the router. The Ethernet port must be in LAN mode or Disabled mode, and VPN and GRE must be disabled.  Disabled: Disable this network. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 61 Play) option if you want to enable the UPnP Gateway service for computers on this network.  Admin Access: When enabled, users may access these administration pages on this network. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 62 Lease Time: [Default: 720 minutes (12 hours)] The lease time specifies how long DHCP-enabled computers will wait before requesting a new DHCP lease. Smaller values are better suited to busy environments. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 63 MUST REMAIN ON THE “LOCAL NETWORK (LAN)” SETTING. Most CradlePoint routers allow different settings for the Ethernet ports, but the CBR450 only has one option for LAN. You will lose connection to your router if you change this setting. Link Speed: Default setting is Auto. The Auto setting is preferred in most cases.
  • Page 64 CRADLEPOINT Ethernet Port Group Editor Port groups are less relevant for the CBR450 than for some other CradlePoint routers because it has only one port. However, you can still change the port group ID for your Ethernet port. Port Group ID: The Port Group ID field provides a reference for a port group to be used in other parts of the router configuration.
  • Page 65 VLAN ID from a dropdown list. Your Ethernet group must be created separately under Ethernet Port Configuration. Click Submit to save your configured VLAN. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 63...
  • Page 66: Routing (Advanced Mode Only)

    Gateway: Specifies the next hop to be taken if this route is used. A gateway of 0.0.0.0 implies there is no next hop, and the IP address matched is directly connected to the router on the interface specified: LAN or WAN. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 67: Wipipe Qos (Advanced Mode Only)

    A Traffic Shaping Rule identifies a specific message flow and assigns a priority to that flow. For most applications, automatic classification will be adequate, and specific Traffic Shaping Rules will not be required. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 68  Priority: 15 To lower the priority of your children‘s computer, you might use these settings:  Name: Kids‘ Computer  Protocol: Any  Priority: 2 © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 66...
  • Page 69 Example (continued from previous page): To select your computer or your kids‘ computer, you only need to input the Local IP Address. You can ignore the other settings on this page. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 70 Example (continued from previous page): Since the goal is simply to control which devices in your network get priority, you can ignore all of the remote settings. Leave them blank to include all possibilities. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 71: Internet

     Ethernet Settings  GRE Tunnels  Load Balance  Modem Settings  VPN Tunnels (Data Usage, GRE Tunnels, Load Balance, and VPN Tunnels: Advanced Mode only) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 69...
  • Page 72: Connection Manager

    WAN interface consecutively. Selecting Load Balance will automatically start the WAN interface and add it to the pool of WAN interfaces to use for data transfer. Turning off Load Balance for an active WAN interface may require the user to restart any current browsing session. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 73 ICMP Ping Check and Ping IP Address: Enable and configure an IP address that the router will use to check if the WAN connection is available. For best results, select an established public IP address. For example, you might ping Google Public DNS at 8.8.8.8 or Level 3 Communications at 4.2.2.2. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 74 Immediate failback returns you to the use of your preferred internet source more quickly which may have advantages such as reducing the cost of a failover data plan, but it may cause more interruptions in your network than Usage or Time modes. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 75: Data Usage (Advanced Mode Only)

    CBR450 may not perfectly match those of your carrier: CradlePoint cannot be held responsible. You must accept the agreement by clicking Yes in order to begin creating data usage rules.
  • Page 76 Assigned Usage in MB: Enter a cap amount in megabytes. 1024 megabytes equals 1 gigabyte. Rule Enabled: (Default: Enabled.) Click to disable. Click Next to continue to page 2. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 77 Percent of Usage (1-1000): If selected, a custom alert will be sent when your data usage reaches this percentage of your usage cap. For example, you could set this at 90 percent so that you know when your usage is nearing 100 percent of the cap. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 78 Data Usage Rules. See the section above for additional information about how to configure your template usage rules. Since the CBR450 does not have WiFi, the Ethernet port must be used as a LAN port. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 79 Enter the date of usage by using the pop-up calendar. Then enter the total data in MB—both in and out—to update the usage amounts. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 80: Gre Tunnels (Advanced Mode Only)

     Optionally, you might also want to enable the tunnel Keep Alive feature to monitor the status of a tunnel and more accurately determine if the tunnel is alive or not. Click Add to configure a new GRE tunnel. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 81 Remote Gateway: This is the public facing, WAN-side IP address of the network that the local gateway is going to connect to. Tunnel Enabled: Select to activate the tunnel. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 82 Netmask of 255.255.255.255. Click Save to record each new route. When you have finished adding routes, click Finish to save your GRE tunnel configuration. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 83: Load Balance (Advanced Mode Only)

    You have the ability to set these minimum rates for:  4G Modem  3G Modem © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 81...
  • Page 84: Modem Settings

    To update or activate a modem, select the checkbox next to the device and click ―Update / Activate‖. The modem does not support Update/Activate methods: A message will state that there is no support for PRL Update, Activation, or FUMO. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 85 Process Timeout: If the process fails an error message will display. Activation has a 3-minute timeout, PRL update has a 4-minute timeout, and FUMO has a 10-minute timeout. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 86 This section allows you to create simple or complex rules that affect how individual modems or classes of modems (perhaps all WiMAX modems or all modems from Sierra Wireless) behave in the router. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 84...
  • Page 87  Unique ID Value: If you chose Port or Type, select from the dropdown list. If you chose Manufacturer, Model, Serial Number, MAC Address, or Unique ID, you will need to manually input the information. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 88 TTLS Username: Username for TTLS authentication. TTLS Password: Password for TTLS authentication. WiMAX Authentication Identity: User ID on the network. Leave this blank unless your provider tells you otherwise. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 89  Force LTE: Connect to LTE only (do not attempt to connect to CDMA/GSM).  Force EVDO: Connect to CDMA EVDO network only.  Force 1xRTT: Connect to CDMA 1xRTT network only. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 90  Default: Let the router choose an APN automatically.  Manual: Enter an APN by hand.  Select: Select from a dropdown menu of the profiles already on the SIM. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 88...
  • Page 91: Unnels (Advanced Mode Only )

    The VPN tunnel status page allows you to view the state of the VPN tunnels. If a tunnel fails to connect to the remote site, check the System Logs for more information. You may double click on a cell to directly edit that information. Click Add to configure a new VPN tunnel. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 92 WAN becomes available. On Demand is used if you want the tunnel to initiate a connection if and only if there is data traffic bound for the remote side of the tunnel. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 93 NOTE: The remote network IP address must be different from the local network IP address. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 91...
  • Page 94 Phase 1 keys. Encryption, Hash, and DH Groups: Each IKE exchange uses one encryption algorithm, one hash function, and one DH group to make a secure exchange. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 95 The algorithms are listed in order by priority. You can reorder this priority list by clicking and dragging algorithms up or down. Any selected algorithm may be used for IKE exchange, but the algorithms on the top of the list are more likely to be used more often. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 96 Phase 2 has the same selection of Encryption, Hash, and DH Groups as Phase 1, but you are restricted to only one DH Group. Phase 2 and Phase 1 selections do not have to match. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 97 Additionally, you can specify how many Maximum Requests to send at the selected time interval before the tunnel is considered dead. You must click Finish to save your VPN tunnel. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 98 DH Groups  DPD Click Yes at the bottom of the Tunnel Summary page to save your configuration changes. This will cause active tunnels to restart. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 96...
  • Page 99  NAT-T KeepAlive Interval: Default: 20 seconds. Range: 0-3600 seconds. 20 seconds will be sufficient in almost all cases.  Tunnel Connect Retry: Default: 30 seconds. Range: 10-255 seconds. 30 seconds will be sufficient in almost all cases. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 100 2. The Tunnel Name for the side of the tunnel that is not behind the NAT firewall must be ―anonymous‖. 3. The VPN tunnel must be initiated from the side that is behind the NAT firewall. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 101: System Settings

    The System Settings tab has 6 submenu items that provide access to tools for broad administrative control of the CBR450:  Administration  Device Alerts  Managed Services  System Control  System Software (Device Alerts and Managed Services: Advanced Mode only) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 99...
  • Page 102: Administration

    You then have the option of selecting an NTP server and adjusting the NTP server port. Any of the given NTP servers will be sufficient unless, for example, you need to synchronize your router‘s time with other devices in a network. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 103 UPnP can simplify the use of special applications or devices that require network configuration, but can also allow unprivileged users to manipulate network configuration. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 104 SSH protocol. Use the username "admin" and the standard system password to login.  SSH Server Port: Default: 22.  Allow Remote SSH Access Technical Support Access: Only enable this option if instructed by a CradlePoint support agent. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 105 Report only over specific time interval: Restricts the NMEA sentence reporting to a remote server to a specific time interval. The following GPS spec is copied from http://aprs.gids.nl/nmea/ © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 106 Used by program to check for transmission errors Courtesy of Brian McClure, N8PQI. Global Positioning System Fix Data. Time, position, and fix related data for a GPS receiver. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 104...
  • Page 107 10 = Meters (Antenna height unit) 11 = Geoidal separation (Diff. between WGS-84 earth ellipsoid and mean sea level. -=geoid is below WGS-84 ellipsoid) 12 = Meters (Units of geoidal separation) © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 108 Syslog Settings Enabling this option will send log messages to a specified Syslog server. After enabling, type the Hostname or IP address of the Syslog server. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 106...
  • Page 109: Device Alerts (Advanced Mode Only)

    (Gmail, Yahoo, etc.) Each SMTP server will have different specifications for setup, so you have to look those up separately. The following is an example using Gmail: © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 110 Retry Attempts: The number of attempts made to send an alert to the mail server. After the attempts are exhausted, the alert is discarded. Retry Delay: The delay between retry attempts. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 111: Managed Services

    CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT 8.3 Managed Services (Advanced Mode only) ASK YOUR CRADLEPOINT SALES REPRESENTATIVE FOR DETAILS Managed Services allow you to centralize your router configuration using the WiPipe Central server. WiPipe Central services must be purchased separately.
  • Page 112: System Control

    Ping Test: A simple test to check internet connectivity. Type the Hostname or IP address of the computer you want to ping and press 'Enter' or click the 'Ping' button. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 113: System Software

    Backup Current Settings: Save your current settings to a file on a computer. Restore Settings: Restore your previous settings from a file on a computer. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/...
  • Page 114: Glossary

    The loss in strength of digital and analog signals. The Advanced Encryption Standard loss is greater when the signal is being transmitted over AES. Government encryption standard. long distances. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 112...
  • Page 115 A data frame by which one of the stations in a WiFi Cable provider. network periodically broadcasts network control data to other wireless stations. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 113...
  • Page 116 Default A predetermined value or setting that is used by a program when no user input has been entered for this value or setting. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 114...
  • Page 117 Domain Name System: Translates Domain Names to IP Email addresses. Electronic Mail is a computer-stored message that is Domain name transmitted over the internet. A name that is associated with an IP address. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 115...
  • Page 118 Programming that is inserted into a hardware device that H.323 tells it how to function. A standard that provides consistency of voice and video transmissions and compatibility for video conferencing devices. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 116...
  • Page 119 A networking device that connects multiple devices Internet Protocol together. The method of transferring data from one computer to ICMP another on the internet. Internet Control Message Protocol. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 117...
  • Page 120 LAN. A group of computers in a building that usually developed by Novell to enable their Netware clients and access files from a server. servers to communicate. Internet Service Provider. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 118...
  • Page 121 Determines what portion of an IP address designates the computer. Network and which part designates the Host. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 119...
  • Page 122 A logical channel endpoint in a network. A computer changes to the routing table are sent to all the other might have only one physical channel (its Ethernet © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 123 To restart a computer and reload its operating software A computer on a network that provides services and or firmware from nonvolatile storage. resources to other computers on the network. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES...
  • Page 124 Simple Network Management Protocol. TCP Raw SOHO A TCP/IP protocol for transmitting streams of printer data. Small Office/Home Office. TCP/IP Transmission Control Protocol/Internet Protocol. Stateful Packet Inspection. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 122...
  • Page 125 Sending voice information over the internet as opposed product. to the PSTN Upgrade VoIP To install a more recent version of a software or firmware Voice over IP. product. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 123...
  • Page 126 Wireless Fidelity. Used to describe any of the 802.11 A generic term for the family of digital subscriber line wireless networking specifications. (DSL) technologies, such as ADSL, HDSL, RADSL, and SDSL. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 124...
  • Page 127 CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT Yagi antenna A directional antenna used to concentrate wireless signals on a specific location. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 125...
  • Page 128: Appendix

    If the purchaser wishes to upgrade or convert to another CradlePoint, Inc. product within the thirty (30) day period, purchaser may return the product and apply the full purchase price toward the purchase of the other product. Any other return will be subject to CradlePoint, Inc.‘s existing return policy.
  • Page 129: Specifications

    WiPipe™ QoS, LAN port speed control, Modem Health Management (MHM) improves connectivity of 3rd-party USB and ExpressCard modems IPsec Termination and passthrough support for laptop- based VPN clients, includes GRE Tunneling © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 127...
  • Page 130 CBR450| USER MANUAL Firmware ver. 3.3.0 CRADLEPOINT http://www.cradlepoint.com/ Copyright © 2011 by CradlePoint, Inc. All rights reserved. © 2011 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 128...

Table of Contents