1. Manuals
  2. Brands
  3. Proxicast Manuals
  4. Network Router
  5. LAN-Cell 3
  6. User manual

Proxicast LAN-Cell 3 User Manual

Hide thumbs Also See for LAN-Cell 3:
Table of Contents

Advertisement

Quick Links

Download this manual
LAN-Cell 3
4G / 3G Cellular Router + VPN + Firewall
User's Guide
Version 5.4

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the LAN-Cell 3 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Proxicast LAN-Cell 3

Summary of Contents for Proxicast LAN-Cell 3

  • Page 1 LAN-Cell 3 4G / 3G Cellular Router + VPN + Firewall User’s Guide Version 5.4...

  • Page 2: Table Of Contents

    Multi-Function Mounting Base ........................5 Figure 3: Mounting Base Front ..........................5 Modem-SAFE ............................5 Hardware Setup ............................8 CHAPTER 3: ACCESSING THE LAN-CELL 3 ......................9 Start-up and Login .............................9 Navigating the User Interface ......................... 10 Menu Structure ............................11 CHAPTER 4: QUICK SETUP ..........................12 USB Modem Configuration ........................
  • Page 3 WAN Advanced ............................30 LAN................................. 32 Static Routing ............................33 DHCP Server ............................36 DDNS ..............................37 MAC Address Clone ..........................39 VLAN ..............................40 Time ................................ 41 CHAPTER 7: WIRELESS (WI-FI) MENU ......................42 Basic Setup ............................42 Advanced Setup ............................. 46 WDS Setup .............................
  • Page 4 APPENDIX ................................96 Common Tasks ..............................96 Troubleshooting ..............................97 Common Carrier Specific Issues ........................99 Specifications ..............................100 LAN-Cell 3 Default Settings ..........................102 Legal Information ............................103 Certifications ..............................103 Proxicast Limited Warranty ..........................105 Customer Support ............................106...

  • Page 5: Document Revision History

    Version 5.2: Revised for latest firmware features and Modem-SAFE base April 2, 2012 Version 5.1: Initial release Related Documents & Resources LAN-Cell 3 Quick Start Guide http://www.proxicast.com/support/files/LAN-Cell-3-QuickStartGuide.pdf LAN-Cell 3 Firmware Release Notes http://www.proxicast.com/support/files/Release-Notes.pdf LAN-Cell 3 Application Tech Notes http://www.proxicast.com/support/TechNotes.htm Proxicast Knowledgebase http://www.proxicast.com/AbsoluteFM/afmmain.aspx...

  • Page 6: About This User's Guide

    About This User's Guide Intended Audience This manual is intended for user who need to configure the LAN-Cell 3 using the device’s embedded web interface. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation Quick Start Guide •...

  • Page 7: Safety Warnings

    Safety Warnings Do NOT use this product near water. • • Do NOT expose your device to dampness, dust or corrosive liquids. Do NOT store things on the device. • Do NOT install, use, or service this device during a thunderstorm. •...

  • Page 8: Chapter 1: Introduction

    The LAN-Cell 3 also has a built-in IEEE 802.11 b/g/n Wi-Fi radio that functions as both an access point and a WAN bridge. This allows Wi-Fi devices to securely communicate with the LAN-Cell and access the wired network or Internet.

  • Page 9: Package Contents

    • IPsec Server & Client The LAN-Cell 3’s embedded IPSec VPN features allow remote users to make secure connections to devices which normally cannot run VPN software. The LAN-Cell can also establish site-to-site IPSec tunnels to existing corporate VPN servers for enterprise-level data security.

  • Page 10: Chapter 2: Hardware

    CHAPTER 2: HARDWARE Front LEDs Figure 1: LAN-Cell 3 Front Panel LABEL LED STATE DESCRIPTION USB 2.0 port for 4G/3G USB modems only MODEM USB modem is initializing – or – Flashing USB modem is not registered on the carrier network –...

  • Page 11: Rear Panel

    Rear Panel Figure 2: LAN-Cell 3 Rear Panel LABEL DESCRIPTION Wi-Fi (B) Attach one of the supplied cylindrical Wi-Fi antennas to this RP-SMA (reverse polarity) connector if using the LAN-Cell’s integrated 802.11 b/g/n radio. LAN 1-4 Connect equipment to these ports with Ethernet cables. These ports are auto-negotiating (supporting (yellow) 10, 100, 1000 Mbps) and auto-sensing (adjusts to the Ethernet cable type: straight-through vs.

  • Page 12: Multi-Function Mounting Base

    Figure 4: Mounting Base Rear Modem-SAFE The LAN-Cell 3’s patent-pending Modem-SAFE system is a mechanism for securing a USB modem to prevent it from being removed or coming loose in mobile applications. The slotted mounting plate and Velcro strip design allows for infinite flexibility in mounting a wide variety of USB modems.
  • Page 13 Figure 6: Locking Velcro Strip Figure 5: Inserting Velcro Strip • Loop the tapered end of the Velcro strip up through an adjacent slot and secure through the hole in the top of the Velcro strip (Figure 6). It is critical that you pull the strip tightly against the mounting plate. Hold the wide-end of the Velcro strip against the mounting plate for leverage when cinching this loop.
  • Page 14 Align the top of the Multi-Function base so that the vertical slot is facing the LAN-Cell 3’s LEDs and the three cable tie posts are facing the Ethernet ports. Attach the top of base to the bottom of the LAN-Cell 3 using the 4 corner screw holes and the provided #6-32 screws.

  • Page 15: Hardware Setup

    Power On Plug one end of the provided power adapter into LAN-Cell 3’s DC power port and the other end into a power outlet. Depress the Power push-button on the rear of the unit. After about 60 seconds, the LAN-Cell 3 will be operational when its PWR LED and STAT LED are both constantly on.

  • Page 16: Chapter 3: Accessing The Lan-Cell 3

    CHAPTER 3: ACCESSING THE LAN-CELL 3 Initial setup of the LAN-Cell 3 must be done using an Ethernet cable – the internal Wi-Fi Access Point is disabled by default as a security precaution. Configure your PC to receive an automatic its IP address information automatically (DHCP) or set your PC’s IP address to 192.168.1.2, netmask= 255.255.255.0 and default gateway=192.168.1.1.

  • Page 17: Navigating The User Interface

    Figure 11: Router Status Screen Navigating the User Interface The LAN-Cell’s web management interface is divided into 3 sections (Figure 12): 1. Drop-down Navigation Menus 2. The Status Summary Column Configuration Parameters...

  • Page 18: Menu Structure

    To expand a drop-down menu, click on the menu title. Then select the desired sub-menu. Chapters 5 through 11 provide details on each of the LAN-Cell 3’s menu options. The Status Summary column is shown on the right side of every screen to provide a quick overview of the LAN-Cell’s key operating parameters.

  • Page 19: Chapter 4: Quick Setup

    Please refer to the LAN-Cell 3 Firmware Release Notes for the list of currently supported modems. The USB modem may need to be activated with a cellular service provider before it can used in the LAN-Cell 3 Follow the service provider or modem manufacturer’s instructions for activating, testing, and updating the firmware on the USB modem before attempting to use it in the LAN-Cell 3.

  • Page 20: Wan Configuration

    WAN Configuration The bottom half of the SETUP > WAN screen (Figure 14) is used to configure the LAN-Cell 3’s Wired Ethernet WAN interface. For most Ethernet connections, the default DHCP client mode is sufficient. If your WAN interface has been assigned a static IP address, select “Static IP”...

  • Page 21: Lan Configuration

    LAN Configuration If you need to change the LAN-Cell 3’s default LAN subnet (192.168.1.1 / 255.255.255.0), go to the Setup > LAN screen (Figure 15) and enter the IP address to assign to the LAN-Cell and select the desired subnet mask from the drop-down list.

  • Page 22: Password

    Security Mode to prevent authorized access to your Internet connection. The LAN-Cell 3 also supports a second SSID. This is most often used when you wish to provide “guest” access to your Internet service, but maintain guest devices on a different LAN subnet than your other devices.

  • Page 23: Chapter 5: Status Menu

    CHAPTER 5: STATUS MENU Router Figure 18: Router Status...
  • Page 24 Firmware Version The firmware version this device is running. Current Time Current system time Running Time The period of time LAN-Cell 3 has been running. 5.1.2 WAN (USB Modem) MAC Address MAC Address of the USB Modem (Direct IP modems only)
  • Page 25 5.1.4 MAC Address MAC Address of the LAN switch IP Address Internal IP Address of the LAN-Cell 3 Subnet Mask Subnet mask in the internal network DHCP Service DHCP service enabled or disabled DHCP Start IP Address DHCP Start IP address...

  • Page 26: Traffic

    Traffic Click on Status > Traffic and then choose the graph scale from two hours, one day, one week, and one month. You will see the graph in Figure 19. You can monitor your download and upload throughput. Figure 19: Traffic Status Graph...

  • Page 27: Session

    Session Click on Status > Session and choose the graph scale from two hours, one day, one week, and one month. You will now see the graph in Figure 20. TCP, UDP, ICMP, and total session information is displayed. Figure 20: Session Status...

  • Page 28: User/Dhcp

    User/DHCP Displays a table of the system LAN users and their IP addresses, MAC addresses and remaining DHCP lease times. Figure 21: User/DHCP Status Name DHCP client name IP Address IP address which is assigned to this client MAC Address MAC address of this client Expiration Time The remaining time of the IP assignment...

  • Page 29: Current Users

    Current Users Displays a table of the system LAN and WAN users and their IP addresses. Figure 22: Current Users IP Address IP address assigned by Static ARP matching MAC Address MAC address in the Static ARP matching ARP Type Static or dynamic...

  • Page 30: Chapter 6: Setup Menu

    CHAPTER 6: SETUP MENU 6.1.1 WAN (USB Modem) Figure 23: Setup WAN USB Modem...
  • Page 31 Select Enable/Disable to enable/disable USB WAN Connection Type PPP or DirectIP modems Modem Brand Choose your modem’s brand. Select Auto for automatic detection. Modem Model Choose your modem’s model number. Select Auto for automatic detection. Choose Auto to use an APN preo-programmed into your USB modem. Select by APN Type Service Provider for to the ISP you use, or otherwise choose Manual to assign desired APN.
  • Page 32 6.1.2 WAN (Ethernet) LAN-Cell 3 supports four WAN connection types in addition to the USB Modem: DHCP, Static, PPPoE, Wi-Fi-Client. Select the appropriate connection type from the pull-down menu. The screen will expose the related fields for each type of WAN connection.
  • Page 33 Select Enable/Disable to enable/disable WAN Connection Type DHCP Some ISP and DHCP servers ask for the Host Name of the DHCP client before assigning an Host Name IP address. In this case, enter your Host Name. Maximum Transmission Unit (1500 is the default for Ethernet) Bigpond Login If you are using the “Bigpond”...
  • Page 34 Select Enable / Disable to enable/disable WAN. Connection Type Static IP External IP Address The external IP addresses assigned by the ISP. Netmask The netmask assigned by the ISP. Gateway The gateway assigned by the ISP. Static DNS 1 The static DNS 1 assigned by the ISP. Static DNS 2 The static DNS 2 assigned by the ISP.
  • Page 35 Wi-Fi Client The LAN-Cell 3’s built-in Wi-Fi radio can be used as a WAN interface to establish a connection to an external Wi-Fi network. Whenever the LAN-Cell 3 detects the target Wi-Fi network, it will automatically make a connection to this network.
  • Page 36 Select Enable/Disable to enable/disable WAN Connection Type Wi-Fi Client Target SSID Enter the SSID of the external target Wi-Fi network to connect to. Target BSSID (MAC) Enter the BSSID to connect to. The BSSID is optional if you set the target SSID. Wireless Channel Select the Wi-Fi channel number used by the target Wi-Fi network.

  • Page 37: Wan Advanced

    WAN Advanced The WAN Advanced screen configures several advanced WAN settings including: • Fail-Over • Load Balancing • Keep-Alive The settings are the same for both the USB and Ethernet WAN interfaces. Figure 29: Setup WAN Advanced Always On: WAN connection is always established and routes traffic as required. Backup Standby: WAN connection is always established but only routes traffic Connection Mode when primary WAN is down (route on demand)
  • Page 38 Fail-Over Connectivity Enable/disable the use of ICMP (ping) packets to determine if a WAN interface is Check (ping) currently up. Consecutive Failure The number of consecutive pings that must fail to be acknowledged before the Tolerance interface is marked as down. The maximum number of seconds to wait for each ping to be acknowledged Max Reply Wait Time (maximum latency) before assuming the ping to have failed.

  • Page 39: Lan

    Figure 30: Setup LAN Sets the internal LAN IP address of the LAN-Cell 3. Internal IP Address Note: The LAN-Cell’s built-in DHCP Server will automatically adjust to the IP address and subnet entered. Subnet Mask Select the appropriate subnet mask from the list.

  • Page 40: Static Routing

    Static Routing 6.4.1 Static Routing Settings Figure 31: Setup Static Routing Static Routing Choose Enable/Disable to enable/disable the static routing feature. 6.4.2 Add Routing Rule Click on the [Add] button. The screen shown in Figure 32 will open. Figure 32: Add Static Routing Rule...
  • Page 41 Sequence Number This defines the sequence of the Routing rules. If a packet fits the conditions set by the Routing rules, the packet will then be sorted according to the first Routing rule from the top of the list. Rule Name Descriptive name of the Routing rule.
  • Page 42 Static Gateway Gateway IP 12.85.33.147 You can combine the Static Routing Rules with the LAN-Cell 3’s WAN Load-Balancing Weights and the Quality of Service (QoS) Bandwidth Management features to gain precise control over which devices and protocols use specific interface resources.

  • Page 43: Dhcp Server

    DHCP Server Figure 33: Setup DHCP Services DHCP Server Select Enable/Disable to enable/disable DHCP Server. The DHCP starting IP address offered by the DHCP Server. The DHCP Server is DHCP Starting IP limited to a Class-C (/24) subnet and automatically adopts the subnet that the Address LAN-Cell’s LAN interface is assigned to.

  • Page 44: Ddns

    As a service to its customers, Proxicast operates a Dynamic DNS service which is automatically updated each time a LAN-Cell WAN IP changes. The DDNS host name is the serial number of the LAN-Cell 3 in the”proxidns.com” domain. For example: 00501863C748.proxidns.com This “permanent”...
  • Page 45 Select Enable to enable DDNS service. DDNS Service Select Disable to disable DDNS service. DDNS Service Select the desired DDNS service provider from the list. Provider Enter your username for your DDNS service provider account. We recommend User Name avoiding special characters (#, $, &, @, etc) in your password. Enter your password for your DDNS service provider account.

  • Page 46: Mac Address Clone

    Clone WAN MAC If your ISP does not enforce access control, please select Disable. If the PC you use to configure LAN-Cell 3 is the device which has the MAC address MAC Address authorized to access the internet, press Get My MAC button. Or you can type in the...

  • Page 47: Vlan

    (LAN), but it allows for end stations to be grouped together even if they are not located on the same network switch. Port-based VLAN function is provided in LAN-Cell 3 for users to assist with managing the LAN and WLAN groups, for example to reduce broadcast traffic that might be sent from the Ethernet LAN to Wi-Fi clients.

  • Page 48: Time

    Time Figure 37: Setup Time Servers & Automatic Reboot Time Synchronization Select Enable/Disable to enable/disable Time Synchronization Select to use a pre-defined pool of time servers on the Internet or your Time Server Type own time server. Time Server Area If Server Pool is selected, choose the Time Server by location.

  • Page 49: Chapter 7: Wireless (Wi-Fi) Menu

    CHAPTER 7: WIRELESS (Wi-Fi) MENU Basic Setup The LAN-Cell 3’s multiple simultaneous SSIDs provide the ability to create separate security mode and key settings for both convenience and increased protection. For example, internal users can configure their network devices to access the first SSID with the WPA2 PSK (Pre-Shared Key), while visitors can be assigned to the second SSID with a WEP key that changes periodically.

  • Page 50: Ssid Settings

    Enter name you would like to assign to this SSID. Name LAN-Cell 3 broadcasts SSID periodically. Select Enable to turn it on or Disable to turn it off. Wireless SSID Enabling SSID Broadcasting makes it convenient for users to find and connect to the Broadcasting LAN-Cell 3.
  • Page 51 7.1.3 Figure 40: WEP Settings WEP Key Index WEP Key Index indicates which WEP key is used for data encryption. 64-bit WEP: type 10 hexadecimal digits or 5 ASCII characters WEP Key (1~4) 128-bit WEP: type 26 hexadecimal digits or 13 ASCII characters. 7.1.4 WPA/WPA2 Pre-shared Key Figure 41: WPA/WPA2 PSK Settings...
  • Page 52 7.1.5 WPA/WPA2 Radius Figure 42: WPA/WPA2 Radius Settings Radius Server IP Address Enter the RADIUS server’s IP address. Radius Server Port Enter the RADIUS server’s port number. The default port is 1812. Radius Key Enter the RADIUS server’s Key. Encryption Method Select TKIP or AES for the packet encryption.

  • Page 53: Advanced Setup

    Advanced Setup Figure 44: Wi-Fi Advanced Settings...
  • Page 54 Region Choose the region in which the LAN-Cell is currently operating (sets channels). Fragmentation Enter the fragmentation bytes. The default value is 2346 bytes. Enter the RTS seconds. The default value is 2347 seconds. DTim Enter the DTim seconds. The default value is 1. Beacon Interval Enter the interval to send a beacon.

  • Page 55: Wds Setup

    802.11 network. It allows a wireless network’s coverage area to be expanded using multiple access points without a wired backbone to link the APs. The LAN-Cell 3 supports 2 modes of WDS operation: • Bridging: APs communicate only with each other and don't allow wireless clients to access them.

  • Page 56: Universal Repeater Setup

    Select Enable to enable WDS function. Select Disable to disable WDS function. Enter the MAC addresses of the other bridged wireless devices. Maximum of 4 MAC Address [1~4] devices are allowed to be bridged together. Make sure of the following in order for WDS to work correctly: (1) All WDS devices must use the same radio channel.

  • Page 57: Wps Setup

    "representant" of the network (other AP or client device). • Push-Button-Method: The user simply has to push the button on the LAN-Cell 3 screen and either an actual or virtual one on the new wireless client device.

  • Page 58: Guest Hotspot

    Guest Hotspot The Guest Hotspot feature allows the LAN-Cell 3 to provide Wi-Fi access to guest wireless devices. This feature segregates the guest devices into their own subnet (like the Guest LAN feature), but also automatically redirects Wi-Fi users to a “splash” page and prevents them from accessing the Internet until they “login” to the hotspot and optionally agree to a Terms of Use.
  • Page 59 Subnet Mask Enter the subnet mask which corresponds to the desired DHCP pool size. Splash Page – redirects users to a LAN-Cell 3 generated web page which requires them to click a “login” button and optionally agree to Terms of Use.
  • Page 60 Terms of Use or Splash screens. White List URLs NOTE: proxicast.com will give users access to any server in the proxicast.com domain, whereas www.proxicast.com/graphics would provide access only to a specific directory on the www site.
  • Page 61 Figure 50: Hotspot Pages Setting...
  • Page 62 Web Page Title Title text of browser’s window/tab Text that will be inserted between the <HEAD> elements of the HTML splash Hotspot Page HEAD screen. These can include CSS style definitions, javascript functions, or links to Elements external CSS/JS files, etc. See the list of Splash screen DIV names below. Header Content Text shown at the top of the Splash, Terms and Success screens.
  • Page 63 7.6.3 Hotspot Operation Prior to logging in, the Wi-Fi Guest will have no access to the Internet (other than White Listed URLs). Before users can make connections with VPN clients, Android/iOS apps or other non-browser applications, they must use a web browser to access the Splash screen and login.

  • Page 64: Chapter 8: Security Menu

    “inbound” connections from WAN devices are blocked, except for TCP Port 8080 which is used by the LAN-Cell 3’s web management interface. The LAN-Cell 3 will automatically open other ports for inbound access as you define VPN, Port-Forwarding, and Virtual Host rules (see the Applications menu). You do not need to explicitly define firewall rules for remote access purposes.
  • Page 65 LAN-Cell will experience a high number of interruptions and consumption of computing resources. The LAN-Cell 3 is able to stop responding to ICMP broadcasting echo packets in order to avoid a potential ICMP broadcasting DoS attack. ICMP Redirect Protection Check to enable ICMP Redirect Protection.

  • Page 66: Ip Access Control

    Each rule defines a custom Access Control List (ACL) that the LAN-Cell 3 uses to determine if a packet is to be routed or not. By default, the LAN-Cell 3 allows all LAN devices to connect to all external ports on any WAN interface.
  • Page 67 8.2.2 ACL Rules Click on the [Add] button to display the following screen: Figure 53: IP ACL Rule Setup Sequence Number This defines the sequence of the ACL rules. Packets are matched against the rules in the order displayed until a match is found. Rule Name Name of the ACL rule.
  • Page 68 Assume for example that a company does not wish to allow employees to use the MSN Windows Live Messenger system over the USB WAN interface. The LAN-Cell 3 administrator can set up an ACL Deny action rejecting the traffic going out to the external IP address range used by MSN.

  • Page 69: Outbound Mac Acl

    Similar to IP Access Control, Outbound MAC ACL Control is used to either allow or deny specific devices identified by their unique Media Access Control (MAC) addresses from making “outbound” connections. The MAC rules also enable you to “statically” assign an IP address from the LAN-Cell 3’s DHCP pool to a specific MAC address. 8.3.1...
  • Page 70 8.3.2 MAC ACL Rules Click on the [Add] button to display the following screen: Figure 56: MAC ACL Rule Setup Sequence Number This defines the sequence (priority) of all the MAC ACL actions. Rule Name Name of the MAC access rule. Spaces are not allowed. Set up the MAC Address to which you would like to enable the MAC ACL action.
  • Page 71 8.3.3 MAC ACL Rule Example Assume that you have an IP camera that only accepts DHCP addresses and you need to assign it a static IP address (192.168.1.40) so that it can be remotely accessed. Figure 57: MAC ACL Rule Example Sequence Number Rule Name Static-IP-For-Camera...

  • Page 72: Opendns

    OpenDNS OpenDNS is a leading provider of security and infrastructure services including integrated Web content filtering, anti-phishing and DNS. OpenDNS services can secure networks from online threats and enforce Internet-use policies. Please refer to http://www.opendns.com for more information and to establish an account. Figure 58: OpenDNS Settings OpenDNS Service Choose Enable/Disable to enable/disable OpenDNS...

  • Page 73: Web Filtering

    Web Filtering Web filtering allows the LAN-Cell 3 administrator to restrict access to various web resources based on keywords as well as to restrict certain types of potentially dangerous web page content such as ActiveX and Java. 8.5.1 Web Filtering Setup...
  • Page 74 8.5.2 Added Web Filtering Rules Click on the [Add] button to display the following screen: Figure 60: Add Web Filtering Rule Sequence Number This defines the sequence (priority) of all the Web Filtering rules Rule Enable Choose Enable/Disable to enable/disable this Web Filtering rule Filter Keyword Enter the Keyword Filter Type...

  • Page 75: Vpn / Pptp

    LAN-Cell 3 is acting as a PPTP “server” allowing connections from remote PPTP clients such as Windows PC’s. The LAN-Cell 3 can also act as a PPTP “client” – see the PPTP section under each WAN interface.
  • Page 76 PPTP Choose Enable/Disable to enable/disable the PPTP Server. Enter MTU value. The default value is 1482 bytes. VPN Start IP Address Enter the VPN start IP address. The default value is 192.168.39.1. Max VPN Clients Enter the max number of VPN clients allowed. Auto DNS Choose Enable/Disable to enable/disable Auto DNS.

  • Page 77: Vpn / Ipsec

    Protocol Suite. It can be used to protect data flows between a pair of security gateways (Net-to-Net Mode), or between a security gateway and a remote device (Remote User Mode). The LAN-Cell 3 supports both modes and is interoperable with a wide variety of IPSec-compliant software and hardware products from numerous vendors.
  • Page 78 8.7.2 Add VPN / IPsec Net-to-Net Rule In this example, a Net-to-Net VPN connection will be established between an existing VPN concentrator on the Headquarters network and a LAN-Cell 3 at a remote office location. Figure 65: Net-to-Net IPSec Example...
  • Page 79 Enabled = Traffic can flow to Internet addresses outside of IPSec tunnel (default). Initiator = The LAN-Cell 3 directs all traffic into the IPSec tunnel. The VPN device on the other side is responsible for routing the traffic to its final destination.
  • Page 80 Add VPN / IPsec Remote User Rule In this example, a Remote User VPN connection will be established between with the LAN-Cell 3 functioning as the VPN Server and remote PC as the client using the Proxicast IPSec VPN Client for Windows software. The...
  • Page 81 Figure 67: Remote User IPSec Example Click on the [Add] button to display the following screen and select VPN Mode = Remote User: Figure 68: IPSec Remote User VPN Settings The settings for a Remote User VPN are essentially the same as for a Net-to-Net VPN except that the Remote Gateway and Network information is not required since the remote will be a single unknown IP address.

  • Page 82: Chapter 9: Applications Menu

    When the LAN-Cell 3 receives an external request to access any one of the configured external ports, it will redirect the request to the corresponding internal server and change its destination port to one of the internal ports specified.
  • Page 83 9.1.1 Port Forward Settings Figure 69: Port Forwarding Settings Port Forwarding Select Enable / Disable to enable/disable Port Forwarding 9.1.2 Add Port Range Forwarding Rule Click on the [Add] button to display the following screen: Figure 70: Add Port Forward Rule...

  • Page 84: Dmz Settings

    WAN port / Public IP. DMZ IP Address Note: Be sure to add a Port Forward rule for the LAN-Cell 3’s remote management interface port (default=8080) before forwarding all WAN packets to a DMZ host.

  • Page 85: Virtual Hosts

    Virtual Hosts Virtual Hosts function similarly to DMZ hosts, except that Virtual Hosts enable different WAN IP addresses to be mapped to different LAN IP addresses. This is most useful when your WAN has been assigned multiple static public IP addresses (not common for cellular connections). If you have only 1 WAN IP address, use DMZ. 9.2.1 Virtual Host Settings Figure 72: Virtual Host Settings...
  • Page 86 Sequence Number This defines the sequences (priorities) of the Virtual Host rules. Rule Name Enter the name of the Virtual Host rule. Must not contain spaces. Rule Enabled Check/Uncheck to enable/disable this rule. External Interface Choose USB or Ethernet WAN as the External interface External IP Address Enter one of the IP addresses assigned to the WAN by your ISP.

  • Page 87: Streaming / Pass-Through

    You can enhance your media streaming quality by enabling RTSP, MSS, and H.323 protocols. Also, the LAN-Cell 3’s VPN Pass-through functionality can also be enabled on this screen. All of these features are enabled by default. Disable unused settings to reduce system overhead.

  • Page 88: Upnp

    UPnP Universal Plug and Play (UPnP) is a set of networking protocols that permits networked devices, such as personal computers, printers, Internet gateways, Wi-Fi access points and mobile devices to seamlessly discover each other's presence on the network and establish functional network services for communications. Figure 75: UPnP Setup UPnP Select Enable/Disable to enable/disable UPnP...

  • Page 89: Chapter 10: Quality Of Service (Qos) Menu

    10.1 Bandwidth Management The LAN-Cell 3’s Bandwidth Management feature provides two powerful and unique mechanisms to manage bandwidth: Static Bandwidth Management (SBM) and Dynamic Bandwidth Management (DBM). SBM provides users with the option to allocate a fixed amount of bandwidth for a specific computer or a particular application, while DBM intellectually manages the rest of the bandwidth while all the time satisfying the complicated bandwidth requirements/settings of SBM.
  • Page 90 Kbps. Divide megabytes/sec (MB/s) by 1000 to get Kbps. Upload Bandwidth Enter the value to customize upload bandwidth. Enter the value to provide bandwidth buffer for the LAN-Cell 3’s use. Do not Router Reserved set this value to 0 or the LAN-Cell may become inaccessible during periods Bandwidth of heavy traffic.

  • Page 91: Add Sbm Rules

    10.1.2 Add SBM Rules Click on the [Add] button to display the following screen: Figure 78: Add Static Bandwidth Rule In this example, 50% of the bandwidth on the USB WAN interface is being dedicated to the VNC application (TCP Port 5900).
  • Page 92 Use Additional Bandwidth Check this box if you wish to allow the traffic matching this SBM rule to be when Available able to utilize the whole bandwidth when the bandwidth is idle. Use Maximal Ratio Percentage of the WAN interface’s total bandwidth to apply to this rule. 10.1.3 Add DBM Rules Dynamic Bandwidth Rules define which LAN IP addresses are to be included in the dynamic bandwidth allocation...

  • Page 93: Throughput Optimizer

    10.2 Throughput Optimizer The LAN-Cell 3’s Throughput Optimizer feature transmits the defined high-priority packets types to optimize network utilization and minimize delays. All of the pre-defined packet types are enabled for optimization by default. Disable them only if performance of other applications is adversely affected.

  • Page 94: Ultra-Nat

    Ultra-NAT is designed to solve this problem by accelerating NAT performance allowing the LAN-Cell 3 to maximize the higher speed networks and to reserve system performance for other features such as ACL and VPN servers.

  • Page 95: Session Manager

    10.4 Session Manager Session manager will automatically recycle old/dead sessions to get better connection efficiency. Users can choose the recycle rate to optimize the connection efficiency especially for applications which rapidly open and close many ports (e.g. P2P downloads, games, etc.) Figure 82: Session Manager Settings Recycle Mode Select Fast/Regular/Slow recycle rate...

  • Page 96: Chapter 11: Admin Menu

    CHAPTER 11: ADMIN MENU 11.1 System Management The Management screen is used to perform various administrative tasks on the LAN-Cell 2 such as changing the login password, saving and restoring system settings, scheduling a reboot, and performing firmware upgrades. Figure 83: System Management Settings...
  • Page 97 Click Browse and Upgrade to load a firmware upgrade image. Note: You can combine the Interval and Daily reboot timers to have the LAN-Cell 3 restart under conditions. For example you may desire the LAN-Cell to restart every 8 hours and always at 1 AM UTC so that you have at least one known reboot time.

  • Page 98: Snmp

    IP networks. It is used by network management systems to monitor network-attached devices for conditions that warrant administrative attention. The SNMP Management Information Base (MIB) for the LAN-Cell 3 is available on the Proxicast Support web site. Figure 84: SNMP Settings SNMP Choose Enable/Disable to enable/disable the SNMP agent.

  • Page 99: System Utilities

    Select the interface through which to send the ping, ie. LAN, WAN. Interface Selecting “*” will send the ping to the best available interface based on the LAN-Cell 3’s current routing table. Target Host Enter the IP address to send the ping to.

  • Page 100: Trace Route

    The System Utilities page also contains a tool for sending “AT” commands directly to the attached USB modem and viewing the results. This tool is designed primarily for Proxicast Technical Support’s use when diagnosing modem issues. Commands can only be sent to the modem when the USB WAN interface does not have an active...

  • Page 101: Log

    Events are displayed in reverse chronological order (newest events are at the top of the log). The LAN-Cell 3 has a limited amount of space available for log events –...
  • Page 102 Syslog is a standard mechanism for transmitting and storing system log information from a device to a remote server. The LAN-Cell 3 can send its system event logs to another system which is running a Syslog server. The Syslog server can alert administrators of events and store event logs over long periods of time.

  • Page 103: Appendix

    Setup > DDNS Select the preferred DDNS service provider and enter the required login settings information and host name. Each LAN-Cell 3 also has a unique permanent DNS name: serial#.proxidns.com Configure WAN keep-alive & Setup > WAN Set primary WAN, fail-over target and tolerance parameters to...

  • Page 104: Troubleshooting

    Troubleshooting PROBLEM CORRECTIVE ACTION None of the LEDs turn on Ensure that the correct power adapter is connected to the LAN-Cell and plugged in to an appropriate power source. If the LEDs still do not turn on, there may be a hardware failure.
  • Page 105 PROBLEM CORRECTIVE ACTION Wrong type of 4G/3G WAN IP The IP address assigned to the LAN-Cell’s WAN interface is controlled by the address is assigned cellular service provider. Confirm that the account has been provisioned for the proper type of IP address and that the connection parameters match those (i.e.

  • Page 106: Common Carrier Specific Issues

    Common Carrier Specific Issues CARRIER COMMENT Verizon Wireless By default Verizon Wireless’ 4G/LTE network provides NAT’d private IP addresses (10.x.x.x). 4G/LTE This prevents all Internet initiated inbound connections from reaching the LAN-Cell. Use the LAN-Cell’s VPN features to make an outbound connection to a VPN server on another network. Static public IP addresses which allow inbound initiated connections are available for an additional fee.

  • Page 107: Specifications

    Modem-SAFE 10.3 x 5.25 x 2.4 in 26.2 x 13.4 x 6.1 cm Mounting Base Mounting template is available for download from: http://www.proxicast.com/support/files/LAN-Cell-3-Mounting-Template.pdf Weight 1.5 lbs (0.7 kg) (excluding modem) with Mounting Base 3.2 lbs (1.4 kg) (excluding modem) Power Specification 12V DC @ 1.5 A (max) 2.1 mm jack (center pin positive)
  • Page 108 Software Functions 4G / 3G Features Plug & Play for Most CDMA/GSM/LTE Modems Over 130 USB Modems Supported Pre-defined Service Provider Profiles WAN to 3G/4G Fail-Over and Fall-Back 3G/4G Keep-Alive Packets Multiple External Antennas Supported Networking LAN DHCP Server, Cache, Proxy Server, Relay WAN DHCP Static IP, PPPoE, Wi-Fi Client WAN Fail-over Detection Limits &...

  • Page 109: Lan-Cell 3 Default Settings

    Firmware Upgrade and Downgrade SNMP Support Syslog Support Real-Time Logging Scheduled System Restarts Ping, ARPing, Traceroute Utilities LAN-Cell 3 Default Settings 192.168.1.1 LAN IP Address HTTP Management Access admin / 1234 on port 8080 LAN DHCP Server 192.168.1.33 to .65 Subnet mask 255.255.255.0...

  • Page 110: Legal Information

    Published by Proxicast, LLC. All rights reserved. Disclaimer Proxicast does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
  • Page 111 This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.

  • Page 112: Proxicast Limited Warranty

    Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be solely at the discretion of Proxicast. This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.

  • Page 113: Customer Support

    Customer Support Online Web Support Please refer to support.proxicast.com for additional support documentation and access to our Knowledgebase which contains many resources such as.TechNotes, Frequently Asked Questions, sample configurations and firmware updates. E-Mail Support Support E-mail: support@proxicast.com Please provide the following information when you contact customer support: •...

  • Page 114: Index

    INDEX DHCP ..9, 11, 13, 14, 18, 19, 22, 27, 35, 39, 51, 69, 109 DHCP Server ..............39 3G ................8, 106 DirectIP ..............18, 25 DSL ................... 8 Dynamic Domain Name Service ....... See DDNS 4G ................8, 106 Ethernet ............
  • Page 115 Load Balancing ............... 33 LTE ................106 Radius ................51 Rear Panel ................ 4 Reboot ................97 MAC Address ......18, 19, 22, 23, 43, 55, 68, 69 Reset ..............105, 109 Management Information Base (MIB)......98 RMA ................113 Menus ................
  • Page 116 VLAN ................44 Web Filtering ..............72 VPN ................74, 76 WEP ............47, 48, 49, 54, 107 Net-to-Net ..............77 Wi-Fi ..............9, 15, 47 Remote User .............. 79 Wi-Fi Client ............... 30, 31 VPN Pass-through............86 WMM ................48 WPA ................

Table of Contents