COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT Preface CradlePoint reserves the right to revise this publication and to make changes in the content thereof without obligation to notify any person or organization of any revisions or changes. Manual Revisions...
Page 3
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT Trademarks CradlePoint and the CradlePoint logo are registered trademarks of CradlePoint, Inc. in the United States and other countries. All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies.
• Internet Explorer v6.0 or higher, Firefox v2.0 or higher, Safari v1.0 or higher 1.3 IBR600/IBR650 Overview The CradlePoint COR is a highly featured, compact, and robust router designed for deployment in critical business and enterprise applications that require 24x7 connectivity via Ethernet and/or WiFi. The router features a built-in high-speed modem (4G LTE, 3G EVDO, WiMAX, HSPA+, LTE/HSPA+) modem as well as support for wired networks such as DSL or Cable.
Page 7
• Supports both wireless and wired Internet connections (two Ethernet ports for either LAN/LAN or WAN/LAN) • Secure IPsec VPN (5 concurrent sessions maximum) • Centralize the administration and monitoring of distributed routers using CradlePoint Enterprise Cloud Manager ENHANCED WIFI (IBR600) • 500+ feet of WiFi Range •...
Page 9
1.3.4 Captive Portal (IBR600) The captive portal solution provided by CradlePoint routers enables businesses to provide their customers with a public WiFi hotspot with access controls. The controls can be as simple as requiring acceptance of a terms of service agreement, while advanced features allow administrators to control and monitor usage, require login, direct users to specific web pages, provide revenue through service fees or paid advertising, and more.
Page 10
2 Requires minimum order quantity (MOQ) CradlePoint products with the -EU and -INTL SKUs enable and disable WiFi channels to comply with EU law. The -EU and -INTL SKUs are not legal for use in North America. The -EU and -INTL versions also come with an adapter kit for non-USA/Canada power outlets (includes US, EU, and UK options).
Page 13
(Hardware version 1.3 changed from a micro USB port to a full-size Standard-A USB port.) WiFi Antennas (IBR600 only): The IBR600 comes with two 2.4 GHz WiFi antennas (Reverse SMA). These antennas are simple to attach and adjust for maximum WiFi broadcast.
Page 14
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT Modem Antennas: The CradlePoint COR comes with two modem antennas to enhance reception for the embedded modem. These antennas are simple to attach and adjust. Power On/Off: • I = On • O = Off Power LED: •...
Activate Your Modem A wireless broadband data plan must be added to your IBR600/IBR650. Wireless broadband data plans are available from wireless carriers such as AT&T, Sprint, Verizon, and Vodafone. A new line of service can be added or a data plan can be transferred from an existing account.
(this password is the last eight digits of the router’s MAC address, which can be found on the product box or on the product label). NOTE: If more than one IBR600 wireless router is visible, you can find the correct unit by checking for its SSID (service set identifier; the unique name of the local network). The default SSID of the primary network has the form IBR600-xxx, where “xxx”...
Page 21
Accessing the Administration Pages For most users the IBR600/IBR650 can be used immediately without any special configuration changes. If you would like to change your network name or password or configure any of the advanced features of your router, you will need to log in to the administration pages: •...
Page 22
If you used the First Time Setup Wizard, you might have changed the “WiFi Network Name” or the “Security Mode” password. If so, you will need to reconnect your device(s) to the IBR600 network. • Find the network. Look for your new personalized network name (or the default SSID of the form “IBR600-xxx”).
A wireless broadband data plan must be added to your IBR600/IBR650. Wireless broadband data plans are available from wireless carriers such as AT&T, Sprint, and Verizon. A new line of service can be added or a data plan can be transferred from an existing account.
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT 4 WEB INTERFACE – ESSENTIALS The CradlePoint COR has a Web interface for configuration and administration of all features. The interface is organized with 5 tabs at the top of the screen: • Getting Started •...
The Administrator Login page will appear. Log in using your administrator password. Initially, this password can be found on the bottom of the IBR600/IBR650 unit as the Default Password. This password is also the last eight digits of the unit’s MAC address.
Page 26
• Name: The name of the primary network. If you have more than one wireless network enabled, the additional network names will also be listed here. Modem Details • Manufacturer: The name of the modem manufacturer (CradlePoint). • Model: The name of the modem model (Internal LTE, for example). • Signal: The strength of the signal (dBm).
The First Time Setup Wizard will help you customize the name of your wireless network, change passwords to something you choose, and establish an optimal WiFi security mode. The CradlePoint COR comes out of the box with a unique password at WPA1/WPA2 WiFi security level.
Page 28
The router cannot use 802.11n modes if WEP is enabled; WiFi performance and range will be limited. • NONE (OPEN): Select this option if you do not want to activate any security features. CradlePoint recommends BEST (WPA2) WiFi security. Try this option first and switch only if you have a device that is incompatible with WPA2.
Page 29
Click NEXT. 7) Configuring Your Access Point Name (APN): If you are using a SIM-based modem (LTE/GSM/HSPA) with your CradlePoint router you may need to configure the APN before it will properly connect to your carrier. Wireless carriers offer several APNs, so check with your carrier to confirm the appropriate one to use.
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT 4.3 Quick Links The CradlePoint logo in the upper left-hand corner of all the administration pages is a link to the Dashboard (Status → Dashboard), which displays fundamental information about the router.
Page 34
LAN (Local Area Network) Examples: • If you want to change the content filtering settings for the network created by the IBR600/IBR650, go to the Network Settings tab. • If you have multiple Internet sources (such as the embedded modem and an Ethernet connection) for which you would like to set priority levels, go to the Internet tab.
CRADLEPOINT 4.5 Enterprise Cloud Manager Registration To register your device with CradlePoint Enterprise Cloud, navigate to Getting Started → Enterprise Cloud Manager Registration. Input your ECM Username and ECM Password and click Register. You have now registered the device with Enterprise Cloud Manager.
Wireless and Wired clients. Wireless Clients. For each device using a wireless connection to your IBR600, the following information is displayed: Hostname, IP, MAC, Connection, and Time Online. Wired Clients. For each device using a wired connection to your router, the following information is displayed: Hostname, IP, and MAC.
After the initial setup of the router, every time you log in you will automatically be directed to this Dashboard. Also, you can click on the CradlePoint logo in the upper left-hand corner to return to the Dashboard from any page.
Page 42
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT Router Information: “Detailed Info” links to System Settings → Administration. • Product: IBR600/IBR650 • Serial: The product serial number. • Firmware: Gives the number of the current firmware version. • Build Date: Year-month-day-hours-minutes-seconds for the most recent firmware upgrade.
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT 5.6 Hotspot Clients (IBR600) View the status of the clients that have logged in through the Hotspot/Captive Portal. View: • Hostname • IP address • MAC address • Data Usage (both IN and OUT) •...
The Internet Connections submenu option provides a list of attached WAN devices used as the Internet source for the IBR600/IBR650. Select one of these devices to see detailed information about that particular device. For each type of device, different information will be included in the Device Information section. Possible devices...
Page 53
Internal HSPA+ Diagnostics • Product Internal HSPA+ • Modem Firmware Version • DEFPDP • Model Internal LTE/EVDO • Manufacturer CradlePoint Inc. • Carrier ID • Service Display HSPA • Signal Strength (dBm) • GSN • PIN Status • Connection Type General Information •...
DNS, or Domain Name System, is a naming system that translates between domain names (www.cradlepoint.com, for example) and Internet IP addresses (206.207.82.197). A DNS server acts as an Internet phone book, translating between names that make sense to people and the more complex numerical identifiers. The DNS page for the IBR600/IBR650 has these distinct functions: •...
Page 77
IPv6 providers, but it cannot be used effectively in all situations. The primary purpose for CradlePoint’s NPT implementation is for failover/failback and load balancing setups. LAN clients can potentially retain the original IPv6 lease information and may experience a more seamless transition when WAN connectivity changes than if not utilizing NPT.
Page 88
• Enabled: Click to enable/disable the policy. (Default: enabled.) Network Areas: Areas are identified by an ID number. As of 4.1.1, CradlePoint only supports area 0. Use the IP address and netmask fields to associate a network with this policy. Also, choose whether to select Passive (active by default).
They will have to reconnect to the network. The user can set up multiple networks on the IBR600/IBR650, each with its own unique configuration and its own selection of interfaces. Each local network can be...
Page 97
Name: This primarily helps to identify this network during other administration tasks. Hostname: [Default: cp (for CradlePoint)] The hostname is the DNS name associated with the router's local area network IP address. NOTE: You can access the router’s administration pages by typing the hostname into your browser, so if you change “cp”...
Page 110
• Wireless (WiFi) Network Settings • Ethernet Port Configuration • VLAN Interfaces Wireless (WiFi) Network Settings The IBR600 can broadcast two SSIDs (service set identifiers — the names for WiFi networks). One primary WiFi network is enabled by default, while you may have enabled a second guest network when using the First Time Setup Wizard.
Page 111
This name is referred to as the SSID (service set identifier). For security purposes, CradlePoint highly recommends that you change this from the pre-configured name. Hidden: This shows whether the router broadcasts its SSID.
Page 112
NOTE: If you don’t know whether you should choose Personal or Enterprise, assume Personal since you need to know RADIUS authentication for Enterprise. In order to protect your network from hackers and unauthorized users, CradlePoint highly recommends WPA2/AES for security if your attached devices can support it. WEP and WPA/TKIP are obsolete and have been replaced by WPA/AES.
Page 114
Since the IBR600/IBR650 has only 2 Ethernet ports, this feature will rarely be necessary. It is possible, however, to set both ports as LAN ports (or both ports as WAN ports) and then either separate them or group them together.
Page 143
• Force 3G (EVDO, UMTS, HSPA): Connect to 3G network only. • Force 2G (1xRTT, EDGE, GPRS): Connect to 2G network only. See the following tables for a breakdown of the technologies used with various CradlePoint COR models when any Modem Connection Mode is selected.
Page 150
Use Manual Firmware Upgrade to instead manually upload firmware from a local computer or device. NOTE: Only CradlePoint integrated modems have this firmware upgrade option. Reset the Modem Click on the Reset button to power cycle the modem. This will have the same effect as unplugging the modem.
Generic Routing Encapsulation (GRE) tunnels can be used to create a connection between two private networks. The IBR600/IBR650 is enabled for either GRE or VPN tunnels. GRE tunnels are simpler to configure and more flexible for different kinds of packet exchanges, but VPN tunnels are much more secure.
The IBR600/IBR650 uses IPsec (Internet Protocol security) to authenticate and encrypt packets exchanged across the tunnel. To set up a VPN tunnel with the IBR600/IBR650 on one end, there must be another device (usually a router) that also supports IPsec on the other end.
Page 172
Tunnel Enabled: Enabled or Disabled. MBR1200 Quick Connect: VPN tunnels in the IBR600/IBR650 have more choices than they do in the MBR1200, so it is more complex to configure. Check this box to simplify setup by streamlining your options.
Page 176
In Phase 1, only one DH group can be selected while using Aggressive exchange mode. By default, all the algorithms (encryption, hash, and DH groups) supported by the IBR600/IBR650 are checked, which means they are allowed for any given exchange. Deselect these options to limit which algorithms will be accepted. Be sure to check that the router (or similar device) at the other end of the tunnel has matching algorithms.
Page 182
WiFi as WAN uses another WiFi network as its Internet source and then rebroadcasts its own local network. For example, the IBR600 can create a private LAN using the public WiFi from a hotel as its WAN. WiFi Bridge functions similarly, but it rebroadcasts the original network.
Page 183
When in WiFi Bridge mode with a configured profile, a WiFi Bridge device will be added to the local network interfaces, providing a way to bridge two LANs over a WiFi connection. For example, two separate CradlePoint routers linked through WiFi Bridge mode allows you to have one WiFi-connected network in two separated sections of a large office building.
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT 8 SYSTEM SETTINGS The System Settings tab has the following submenu options that provide access to tools for broad administrative control of the CradlePoint COR: • Administration • Device Alerts • GPIO Connector •...
Page 203
This list is blank by default, which means that the router will accept SMS messages from any phone number. Leaving this blank is unsecure, so CradlePoint recommends that you add phone numbers to this list. Once any numbers are listed, only those numbers have the ability to connect to the router via SMS.
Page 209
If this occurs, disable this option. Log to attached USB stick: Only enable this option if instructed by a CradlePoint support agent. This will write a very verbose log file to the root level of an attached USB stick. Please disable the feature before removing the USB stick, or you may lose some logging data.
Page 212
8.2.1 SMTP Mail Server Since the IBR600/IBR650 does not have its own email server, to receive alerts you must enable an SMTP server. This is possible through most email services (Gmail, Yahoo, etc.). Each SMTP server will have different specifications for setup, so you have to look those up separately. The following is an example using Gmail: •...
COR | USER MANUAL Firmware ver. 5.0.0 CRADLEPOINT 8.4 Enterprise Cloud Manager CradlePoint ECM is a cloud-based management service for configuring, monitoring, and organizing your CradlePoint routers. Key features include: • Group based configuration management • Health monitoring of router connectivity and data usage •...
CRADLEPOINT 8.5 Feature Licenses Some CradlePoint features may require a license. These features are disabled by default. To obtain a feature license, contact your CradlePoint sales representative. Once you have obtained the feature license file, upload the file to enable the feature. A reboot is required after uploading a feature license file.
Network Settings → WiFi / Local Networks. NOTE: Although any network can be a hotspot, the IBR600 allows only one hotspot. Hotspot Mode: Choose from the following dropdown options: •...
SNMP, or Simple Network Management Protocol, is an Internet standard protocol for remote management. You might use this instead of CradlePoint Enterprise Cloud Manager if you want to remotely manage a set of routers that include both CradlePoint and non-CradlePoint products.
This allows the administrator to load new firmware onto the router to add new features or fix defects. If you are happy with the operation of the router, you may not want to upgrade just because a new version is available. Check the firmware release notes (www.cradlepoint.com/firmware) for information to decide if you should upgrade. Current Firmware Version: Shows the number of the current firmware and the date it was updated.
Page 245
ALL TIMES (since the device otherwise could transmit signals that might interfere with various onboard systems on such aircraft). Furthermore, under no circumstances should the IBR600/IBR650 device be used by the driver or operator of any vehicle. Such use of the device will detract from the driver or operator’s control of that vehicle. In some jurisdictions, use of the IBR600/IBR650 device while driving or operating a vehicle constitutes a civil and/or criminal offense.
Page 246
CradlePoint, Inc. warrants this product against defects in materials and workmanship to the original purchaser (or the first purchaser in the case of resale by an authorized distributor) for a period of one (1) year from the date of shipment. This warranty is limited to a repair or replacement of the product, at CradlePoint’s discretion. CradlePoint does not warrant that the operation of the device will meet your requirements or be error free.