Unimax HSPA+ Ethernet Modem Router | MA-2025 Unimax 4G Ethernet Modem Router | MA-2025-4G Unimax Ethernet Modem Router MA-2025 | MA-2025-4G User Manual This manual is the sole and exclusive property of Maxon Australia. Not to be distributed or divulged without prior...
C O N T A C T I N F O R M A T I O N In keeping with Maxon's dedicated customer support policy, we encourage you to contact us. TECHNICAL: Hours of Operation: Monday to Friday 8.30am to 5.30pm* Telephone: +61 2 8707 3000 Facsimile:...
R F E X P O S U R E C O M P L I A N C E The use of this device in any other type of host configuration may not comply with the RF exposure requirements and should be avoided. During operation, a 20 cm separation distance should be maintained between the antenna, whether extended or retracted, and the user’s/bystander’s body (excluding hands, wrists, feet, and ankles) to ensure RF exposure compliance.
Page 8
Potentially Unsafe Areas Posted Facilities: Turn off this device in any facility or area when posted notices require you to do so. Blasting Areas: Turn off your device where blasting is in progress. Observe restrictions and follow any regulations or rules. Potentially Explosive Atmospheres: Turn off your device when you are in any area with a potentially explosive atmosphere.
R E V I S I O N H I S T O R Y Product UNIMAX+ Industrial Ethernet Router Model MA-2025, MA-2025-4G Document Type Current Version Number Status of the Document Public Release Revision Date July 2014 Total Number of Pages...
U N I M A X + U S E R M A N U A L All data and information contained in or disclosed by this document are confidential and proprietary information of Maxon Australia, and all rights therein are expressly reserved.
The Unimax+ Ethernet Router performs data communication functions between wired- LAN (Local Area Network) and wireless WAN (Wide Area Network) using LTE cellular station wirelessly (Unimax+ 4G) and HSPA cellular stations wirelessly (Unimax+ 3G). The Unimax+ has wide input voltage range from 9~30 [VDC] which provides compatibility for platforms utilizing various industrial applications.
Page 12
Periodic Reset Diagnostic Port Digital Inputs (5V tolerable) Digital Outputs (Supports up to 24V, 30mA with external I/O Board) L2TP/IPsec VPN Wide Range input Voltage range from 9 to 30[VDC] Flash USB 2.0 Socket (8MB) Memory SDRAM (32MB) Mini PCI Express USB2.0 GPIO...
Solid ON data communication Send/Receive Indicates connection mode with 500ms ON and 500ms OFF Data data communication Indicates Unimax+ is not connected to Internet Indicates main power is ON POWER Indicates main power is OFF [Table 1: LED Display] ...
Side Panel (Left) 1. Ethernet Port 2. Diagnostic Port (for debugging) 3. Digital I/O (Input: max 5VDC, Output: max 3.3VDC) PIN NUMBER DESCRIPTION 1 (VDD) 3.3V out 2 (D/I 1) Digital input (max 5VDC) 3 (D/I 2) Digital input (max 5VDC) 4 (D/O 1) Digital output (max 3.3VDC) 5 (D/O 2)
4 . P R O T O C O L S & E N C R Y P T I O N S PPP (Point-to-Point Protocol) PPP (Point-to-Point Protocol) is a protocol for communication between two computers using a serial interface, typically a personal computer connected by phone line to a server.
DHCP (Dynamic Host Configuration Protocol) DHCP (Dynamic Host Configuration Protocol) is a communication protocol that lets network administrators centrally manage and automate the assignment of Internet Protocol (IP) addresses in an organization's network. Using the Internet Protocol, each machine that connects to the Internet needs a unique IP address, which is assigned when an Internet connection is created for a specific computer.
A local IP address to one global IP address statically A local IP address to any of a rotating pool of global IP addresses that a company may have A local IP address plus a particular TCP port to a global IP address or one in a pool of them A global IP address to any of a pool of local IP addresses on a round-robin basis NAT is described in general terms in RFC 1631, which discusses NAT's relationship to...
servers are outfitted with the receivers and they use protocols such as SNTP to synchronize the clock times of networked computers. Degrees of separation from the UTC source are defined as strata. A radio clock (which receives true time from a dedicated transmitter or satellite navigation system) is stratum-0;...
Internet Key Exchange (IKE or IKEv2) is the protocol used to set up a security association (SA) in the IPSec protocol suite. IKE uses a Diffie-Hellman key exchange to set up a shared session secret, from which cryptographic keys are derived. Public key techniques or, alternatively, a pre-shared key, are used to mutually authenticate the communicating parties.
4.11 Encapsulating Security Payload (ESP) is a member of the IPSec protocol suite. In IPSec, it provides origin authenticity, integrity, and confidentiality protection of packets. ESP also supports encryption-only and authentication-only configurations, but using encryption without authentication is strongly discouraged because it is insecure. Unlike Authentication Header (AH), ESP does not protect the IP packet header.
Unimax+ can be configured through its web interface. [Figure 2: Web-based configuration of Unimax+] Power ON the Unimax+ Router and connect to a computer using an Ethernet cable. To launch the web interface of the Unimax+, open a web browser such as Internet Explorer...
Operation time after power up System Time System time acquired from modem F/W Version Current firmware version of Unimax+ Router Current Firmware version of the cellular module inside Module Version Unimax+ Router Current operation mode i.e. Modem Router or Bridge...
Page 24
Packets billing purposes. Unimax+ IP address Netmask Subnet Mask assigned by Unimax+ for LAN MAC address of Unimax+ LAN adaptor Send/Receive Status of Incoming and Outgoing LAN data packets Packets [Table 6: Status Page Information] ...
5.1.2 The LAN page allows configuring the IP address of Unimax+, DHCP range and viewing information of the clients connected on the Unimax+ LAN port. [Figure 6: LAN Page] ITEM DESCRIPTION Unimax+ can be configured with a Static IP or...
5.1.2 The WAN page allows configuring network authentication information, connection retrial and Scheduler timers. [Figure 7: WAN Page] ...
Page 27
LAN. Disconnecting client from LAN will also force Unimax+ to disconnect WAN connection with this setting disabled Unimax+ will start a back off algorithm on power up as set by these times instead of constantly retrying PPP connection. Unimax+ will reset if PPP connection is not successful after 2 retrial timer has expired and start again.
5.4.15. 5.1.4 Password The Password page allows changing the authentication information required to access the Unimax+ web page. If new authentication details are applied, you will be prompted to re-enter those details as a confirmation. ITEM DESCRIPTION...
5.2.3 DoS Filters This page allows the user to congfigure the Unimax to be blocked from DoS attack. Using the DoS filter features, TCP SYN packets, TCP/UDP New Connections and ICMP requested can be filtered to avoid DoS attacks. In order to use this feature, the user should upgrade their device with a firmware later then 5.4.23...
Check box to enable DMZ IP Address of the target device. If DMZ is set, all DMZ Host IP traffic addressed to Unimax+ WAN IP is passed Address to the host with this IP address only. Web interface of the Unimax+ will not be accessible.
The Port forwarding page allows for setting up a firewall that will allow remote access for specific ports and protocols to designated hosts. When remote users send requests for accessing the local server, Unimax+ can forward those requests to the appropriate server(s).
5.2.6 IP Filtering The IP filtering page provides simply a mechanism that decides which types of IP datagram’s should be processed or discarded. ITEM DESCRIPTION Enable IP Check box to enable IP Filtering Filtering IP Address IP address of the target device Filtering Protocol: Select protocol TCP, UDP or both [Table 14: IP Filtering Page Information]...
DESCRIPTION Enable MAC Check the box to enable MAC Filtering filtering Select Access or Deny. Access - Allows access to Unimax+ web page Rule but denies internet access. Deny – Denies access to Unimax+ web page and internet. Input MAC address to determine deny or MAC Address access to the internet.
5.2.8 The VPN page allows configuring VPN Server/Client mode in the Unimax+. The Unimax+ VPN supports only L2TP OVER IPSec protocol. [Figure 15: VPN Page] ITEM DESCRIPTION VPN Gateway (L2TP/IPSec): Unimax+ acts as a VPN Server VPN Client (L2TP/IPSec Mode...
Message designated phone numbers when an input INPUT changes state This is the message that will switch the outputs on when received only from the designated Message phone numbers. The Unimax+ will ignore the OUTPUT message received from different phone numbers than the designated on this page.
The SNMP page is used to configure SNMP agent. If this option is enabled then a remote SNMP manager can connect to the SNMP agent and acquires network information. The Unimax+ supports SNMPV2. Please contact Maxon for the most up to date MIB.
LAN, WAN and VPN interfaces. Using this feature the user can communicate in both directions once a VPN is established. Configuration Page Descriptions – Administrator 5.3.3 The AT page allows for sending commands to the Unimax+ module. [Figure 21: AT Commands Page] ...
File configurations to a file Load Settings Allows the user to restore configurations from from File a saved file Restore to Allows setting the Unimax+ configurations to Factory Default factory default Table 24: Backup Page Information] Figur Syst Logs The System page allows for viewing the system logs plus enabling the remote syslog function and the IP address of the remote syslog server.
Page 42
ITEM DESCRIPTION Enable Logs Check the box to enable Syslogs Enable Remote Check the box to enable Remote Syslog Syslog function Log Server IP Enter the IP address of remote server address Refresh the system logs or Clear the system Refresh / Clear logs data [Table 25: System Logs Page Information]...
Maxon does not recommend enabling the NTP server when using the scheduler function on WAN page, as the Unimax+ does not contain a real time clock. On the other hand (network time) will remain in the same time zone as the carrier.
5.3.7 Upgrade Firmware Upgrade Firmware page is used to upgrade the firmware of Unimax+. Please note that this option doesn’t upgrade the cellular module firmware. This process can take several minutes (when upgrading locally connected via LAN to the Unimax+) and the device should not be switched off during the upgrade process.
Modem Router Mode In Modem Router Mode, the Unimax+ acquires the IP from the ISP, keeps it and shares it with connected Host PC's via NAT. Unimax+ gets public/private IP (IP-2) from ISP via the cellular network whereas the host PC's get each private IPs (IP-1) from the DHCP server of the Unimax+.
Page 48
[Figure 30: Setting Host PC] Right click on “Local Area Connection” under Network Connections and select Properties. [Figure 31: Local Area Connection] Double click on the “Internet Protocol [TCP/IP]” item. [Figure 32: Internet Protocol TCP/IP] Check “Obtain an IP address automatically” and then click the OK button. ...
WAN IP address and the Send/Receive Data LED will blink. Bridge Mode In Bridge mode, the host PC acquires an IP from the ISP directly through the Unimax+. The Unimax+ has a PPPoE Authenticator internally that communicates with PPPoE on client PC or other Router.
Page 50
PPPoE connection should be created on the host PC as follows: For Windows XP, right click on “My Network Places” icon and select Properties. [Figure 35: Setting Host PC] For establishing PPPoE connection, click on “Create a new connection” [Figure 36: Create a new connection] A New Connection Wizard will appear.
Page 51
[Figure 38: Connect to the Internet] Check the “Set up my connection manually” icon and then click Next. [Figure 39: Set up my connection manually] If your connection requires a username and password then check “Connect using a broadband connection that requires a user name and password” item, otherwise click “Connect using a broadband connection that is always on”.
Page 52
[Figure 41: ISP Name] Enter user Username/Password and confirm password details provided by the ISP and then click Next. [Figure 42: Username/Password details] Check “Add a shortcut to this connection to my desktop” and click on Finish to close the wizard. [Figure 43: Shortcut for the connection] Click the PPPoE shortcut icon on the desktop and then click “Connect”...
Page 53
[Figure 44: PPPoE connection screen] Connecting to the internet [Figure 45: Connecting Unimax+ on the internet] Verifying username and password [Figure 46: Verifying username and password] Host PC acquires the WAN IP and PPPoE connection is successful.. [Figure 47: Registering PC on the network] ...
A digital input is a switch and a voltage sending device. Depending on the switch's open/closed status, the Unimax+ detects a voltage or no voltage condition, which in turn generates a logical 0 or 1, ON or OFF, alarm or normal or similar a defined state.
Please note that no external circuit is required when using the inputs at 3.3 V. Factory Default Function Following are the two methods to set Unimax+ back to factory default: Hard Reboot Press the factory reset switch, located on the left end plate next to the power switch, and hold in for 5 seconds.
Page 56
SMS Syntax for enabling dyndns.org : UNIMAX.PARK.DDNS1 1 SMS Syntax Disable dyndns.org : UNIMAX.PARK.DDNS1 0 ConCConfiguration Syntrax for DYNDNS: UNIMAX.PARK.DDNS2 domain name,username,password Custom DYNDNS 1. SMS Syntax for enabling Custom : UNIMAX.PARK.DDNS1 3 2. Service Provider setting syntrax : UNIMAX.PARK.DYNDNS1 3, Service ...
Ethernet port. SIM card with SMS enabled. Setup Log into the Unimax+ Web page using the gateway IP address. Default is 192.168.0.1 Web page username and password is admin by default. Enable Telnet into the web page of the Unimax+ router.
Page 58
Username and password for the telnet session is: Username: admin Password: admin Send SMS without Disconnecting Internet Connection: [root@INEWDC]# echo “destination number in international format, Type message to be sent” > /var/tmp/cmdsndsms1 <Carriage return to send> Read SMS [root@INEWDC]# cd /var/tmp/ [root@INEWDC]# cat SMSRes Check file size: [root@INEWDC]# ls -al SMSRes...
[root@INEWDC]#rm SMSRes WAN Connection – Signal Level The Unimax+ will drop WAN connection if the signal (CSQ) level drops below 4 or the response is 99. This is not dBm. The Unimax+ will initiate WAN connection if the signal (CSQ) level is between 4 ~ 31 dBm.
Once the PowerSNMP finds the Unimax+ as an SNMP Agent then add the Unimax+ as an agent by enabling the check box. Figure 54: Unimax+ as SNMP Agent] PowerSNMP will run as follows after the Unimax+ has been added as a SNMP Agent. ...
Page 61
Figure 56: PowerSNMP Free Manager] You can load the Unimax+ MIB file provided by Maxon in order to identify • the old values. ...
Advanced Settings User can connect the Unimax+ to other network devices as follows: Connecting to a HUB If a user wants to connect a Unimax+ to a HUB then the Unimax+ should be configured in Modem Router Mode. Port Forwarding The port forwarding page allows for setting up a firewall that will allow ...
Page 68
Note: If you forward port 80 to a web server/camera, you will not be able to access the Unimax+ web page unless you change the Web Access port on the Unimax+ from 80 to 8080 (for example). It is recommended that this is done first.
Page 69
[Figure 60: Port Forwarding] Figure 61:System] ...
The DMZ page sets one IP address in a Zone which is exposed to internet without sacrificing unauthorized access to the local private network. [Figure 62: Unimax+ connected to a server and a PC via DMZ Host] To set an IP address in the DMZ, click on the DMZ page under Advanced.
192.168.0.100 using the DHCP server. To set a static IP address on a PC, you can use an IP from the DHCP range of the Unimax+ which is not used by any other device on the network. Also you need to assign the Unimax+ IP as the default gateway on that PC.
Page 72
(POP3 incoming) are used for Mail Server. You can get more information by viewing the documentation provided with the server you installed. APPLICATION PORT PROTOCOL IP ADDRESS Web server 192.168.0.200 VPN IPSEC 192.168.0.2 SMTP 192.168.0.202 POP3 192.168.0.202 FTP server 192.168.0.50 [Table 30: Example of Port Forwarding] I can’t connect to any server or any other application.