1. Welcome to NetModule Thank you for purchasing a NetModule Router. This document should give you an introduction to the router and its features. The following chapters describe any aspects of commissioning the device, installation procedure and provide helpful information towards configuration and maintenance.
Volts according to IEC 60950-1, TNV-1 circuit levels using safety approved components. NB3700 routers shall only be used with a certified (CSA or equivalent) power supply which must have a limited and SELV circuit output. They are basically designed for indoor use.
Council Directive 1999/5/EC. The signed version of the Declara- tions of Conformity can be found on the NetModule web page. 2.3. Waste Disposal In accordance with the requirements of the Council Directive...
NB3700 User Manual 3.8 2.5. Open Source Software We inform you that NetModule products may contain in part open-source software. We are distributing such open-source software to you under the terms of GNU General Public License (GPL) , GNU Lesser General Public License (LGPL)
• 2 digital outputs • 2 SIM card slots Due to its modular approach, the NB3700 router and its hardware components can be arbitrarily assembled according to its indented usage or application. Please contact us in case of special project requirements.
NB3700 User Manual 3.8 3.2. Operating Elements The following table describes the NB3700 status indicators. The color of the LED represents the signal quality for wireless links. red means low yellow means moderate green means good or excellent Label Color...
Normally closed output port 2 is closed. off Normally closed output port 2 is open. Input port 1 is set. off Input port 1 is not set. Input port 2 is set. off Input port 2 is not set. Table 3.2.: NB3700 Status Indicators...
NB3700 User Manual 3.8 3.3. Interfaces 3.3.1. Overview Label Panel Function SIM 1 Front SIM 1, it can be assigned dynamically to any modem by configuration. SIM 2 Front SIM 2, it can be assigned dynamically to any modem by configuration.
NB3700 User Manual 3.8 3.3.2. USB 2.0 Host Port The USB 2.0 host port has the following specification: Feature Specification Speed Low, Full & Hi-Speed Current max. 500 mA Table 3.4.: USB 2.0 Host Port Specification 3.3.3. M12 Ethernet Connectors Specification...
NB3700 User Manual 3.8 3.3.4. Power Supply Variant Pa (12 V to 60 V The power input has the following specifications: Feature Specification Power supply nominal voltages 24 V , 36 V and 48 V (according to EN 50155) Voltage range...
NB3700 User Manual 3.8 Pin Assignment M12, 4 poles, A-coded male Pin Signal Pinning V+ (12 60 V or 50 136 V Not connected Not connected Table 3.9.: Pin Assignments of Power Connector 3.3.5. Digital Inputs and Outputs Isolated Outputs The isolated digital output ports have the following specification:...
60 V , the router MUST be connected to an earth protection. 4.2. Installation of the Router NB3700 is designed for mounting it on a worktop or wall. Please consider the safety instructions and the environmental conditions in chapter 2.
NB3700 User Manual 3.8 4.3. Installation of the SIM Card SIM cards can be inserted by sliding it into one of the designated holes on the front panel. Insert any SIM card with the sloped corner towards the device and the contacts towards to bottom side.
3.8. 5.1. First Steps NetModule routers can be easily set up by using the HTTP-based configuration interface, called the Web Manager. It is supported by the latest web browsers (e.g. Microsoft Internet Explorer 11, Mozilla Firefox 28.0, Safari 7 and many others). Please ensure to have JavaScript turned on.
NB3700 User Manual 3.8 5.1.1. Initial Access In factory state you will be prompted for a new administrator password. Please choose a password which is both, easy to remember but also robust against dictionary attacks (such as one that contains numbers, letters and punctuation characters). The password shall have a minimum length of 6 characters.
NB3700 User Manual 3.8 5.1.2. Recovery Following actions might be taken in case the router has been misconfigured and cannot be reached anymore: 1. Factory Reset: You can initiate a reset back to factory settings via the Web Man- ager, by running the command factory-reset or by pressing the reset button.
NB3700 User Manual 3.8 5.2. HOME This page provides a status overview of enabled features and connections. Figure 5.2.: Home Summary This page offers a short summary about the administrative and operational status of the router’s interfaces. This page offers details about any enabled Wide Area Network (WAN) links (such as the IP addresses, network information, signal strength, etc.) The information about the...
Page 27
NB3700 User Manual 3.8 WLAN The WLAN page offers details about the enabled WLAN interfaces when operating in access-point mode. This includes the SSID, IP and MAC address and the currently used frequency and transmit power of the interface as well as the list of associated stations.
Page 28
This page provides information about Dynamic DNS. System Status The system status page displays various details of your NB3700 router, including system details, information about mounted modules and software release information. This section will list all webpages generated by SDK scripts.
NB3700 User Manual 3.8 5.3. INTERFACES 5.3.1. WAN Link Management Depending on your hardware model, WAN links can be made up of either Wireless Wide Area Network (WWAN), Wireless LAN (WLAN), Ethernet or PPP over Ethernet (PPPoE) connections. Please note that each WAN link has to be configured and enabled in order to appear on this page.
Page 30
NB3700 User Manual 3.8 In general, a link will be only dialed or declared as up if the following prerequisites are met: Condition WWAN WLAN ETH PPPoE Modem is registered Registered with valid service type X Valid SIM state Sufficient signal strength...
Page 31
NB3700 User Manual 3.8 We recommend to use the permanent operation mode for WAN links in general. How- ever, in case of time-limited mobile tariffs for instance, the switchover mode might be applicable. By using the distributed mode, it is possible to distribute outgoing traffic over multiple WAN links based on their weight ratio.
NB3700 User Manual 3.8 WAN Settings This page can be used to configure WAN specific settings like the Maximum Segment Size (MSS). The MSS corresponds to the largest amount of data (in bytes) that the router can handle in a single, unfragmented TCP segment. In order to avoid any negative side effects the number of bytes in the data segment and the headers must not add up to...
NB3700 User Manual 3.8 Supervision Network outage detection on a per-link basis can be performed by sending pings on each link to some authoritative hosts. A link will be declared as down in case all trials have failed and only as up if at least one host can be reached.
Page 34
NB3700 User Manual 3.8 Parameter Supervision Settings Ping interval The interval in seconds at which pings are transmitted on each interface Retry interval The interval in seconds at which pings are re-transmitted in case a first ping failed Max. number of failed...
NB3700 User Manual 3.8 5.3.2. Ethernet NB3700 routers ship with an Ethernet switch (ETH1-ETH5) which can be linked via M12 connectors. ETH1 usually forms the LAN1 interface which should be used for LAN purposes. Other interfaces can be used to connect other LAN segments or for configuring a WAN link.
NB3700 User Manual 3.8 Ethernet Link Settings Figure 5.7.: Ethernet Link Settings Link negotiation can be set for each Ethernet port individually. Most devices support auto-negotiation which will configure the link speed automatically to comply with other devices in the network. In case of negotiation problems, you may assign the modes manually but it has to be ensured that all devices in the network utilize the same settings then.
NB3700 User Manual 3.8 VLAN Management NetModule routers support Virtual LAN according to IEEE 802.1Q which can be used to create virtual interfaces on top of an Ethernet interface. The VLAN protocol inserts an additional header to Ethernet frames carrying a VLAN Identifier (VLAN ID) which is used for distributing the packets to the associated virtual interface.
Page 38
NB3700 User Manual 3.8 Parameter VLAN Priority Levels Excellent Effort Critical Applications Video (< 100 ms latency and jitter) Voice (< 10 ms latency and jitter) Internetwork Control Network Control...
NB3700 User Manual 3.8 IP Settings This page can be used to configure IP addressing for your LAN/WAN Ethernet inter- faces. In addition to the primary IP address/subnet mask you may define an additional IP address alias on the interface.
Page 40
NB3700 User Manual 3.8 Parameter LAN IP Settings IP address The IP interface address Subnet mask The subnet mask for this interface Alias IP address The alias IP interface address Alias subnet mask The alias subnet mask for this interface When running in WAN mode, the interface may be configured with the following settings:...
NB3700 User Manual 3.8 5.3.3. Mobile SIMs Figure 5.10.: SIMs The SIM page gives an overview about the available SIM cards, their assigned modems and the current state. Once a SIM card has been inserted, assigned to a modem and successfully unlocked, the card should remain in state ready and the network registration status should have turned to registered.
Page 42
NB3700 User Manual 3.8 Configuration A SIM card is generally assigned to a default modem but might be switched, for instance if you set up two WWAN interfaces with one modem but different SIM cards. Close attention has to be paid when other services (such as SMS or Voice) are operating on that modem, as a SIM switch will naturally affect their operation.
Page 43
NB3700 User Manual 3.8 mentary Service Data (USSD) requests, e.g. for querying the available balance of a prepaid account.
NB3700 User Manual 3.8 WWAN Interfaces This page can be used to manage your WWAN interfaces. The resulting link will pop up automatically as WAN link once an interface has been added. Please refer to chap- 5.3.1 for how to manage them.
Page 45
NB3700 User Manual 3.8 link is being dialed. Generally, the connection settings are derived automatically as soon as the modem has registered and the network provider has been found in our database. Otherwise, it will be required to configure the following settings manually:...
NB3700 User Manual 3.8 5.3.4. WLAN WLAN Management In case your router is shipping with a WLAN (or Wi-Fi) module you can operate it either as client or access point. As a client it can create an additional WAN link which for instance can be used as backup link.
NB3700 User Manual 3.8 Running as access point, you can further configure the following settings: Parameter WLAN Management Operation type Specifies the desired IEEE 802.11 operation mode Radio band Selects the radio band to be used for connections, depending on your module it could be 2.4 or 5 GHz Channel Specifies the channel to be used...
NB3700 User Manual 3.8 WLAN Configuration Running in client mode, it is possible to connect to one ore more remote access-points. The system will switch to the next network in the list in case one goes down and return to the highest-prioritized network as soon as it comes back. You can perform a WLAN network scan and pick the settings from the discovered information directly.
Page 49
NB3700 User Manual 3.8 This section can be used to configure security-related settings. Parameter WLAN Configuration SSID The network name (called SSID) Security mode The desired security mode. WPA-PSK provides password- based authentication, WPA-RADIUS can be used to au- thenticate against a remote RADIUS server which can be configured in chapter...
NB3700 User Manual 3.8 WLAN IP Settings This section lets you configure the TCP/IP settings of your WLAN network. A client interface can be run over DHCP or with a statically configured address and default gateway. Figure 5.14.: WLAN IP Configuration The access point networks can be bridged to any LAN interface for letting WLAN clients and Ethernet hosts operate in the same subnet.
Page 51
NB3700 User Manual 3.8 Parameter WLAN IP Settings IP address / netmask In routing-mode, the IP address and netmask for this WLAN network...
NB3700 User Manual 3.8 5.3.5. USB NetModule routers ship with a standard USB host port which can be used to connect a storage, network or serial USB device. Please contact our support in order to get a list of supported devices.
NB3700 User Manual 3.8 If the USB/IP device server has been enabled you can discover the mounted USB devices and attach them to the USB/IP server. Enabled devices can now be exported to a remote host. You will need an additional driver on the client for which we provide Windows or Linux drivers.
Page 54
NB3700 User Manual 3.8 Parameter USB Devices Module The USB module and type of driver to be applied for this device Any ID must be specified in hexadecimal notation, wildcards are supported (e.g. AB[0-1][2-3] or AB*) A USB network device will be referenced as LAN10.
The serial port will be exposed over a TCP/IP port and can be used to implement a Serial/IP gateway. The serial port will be reserved for SDK scripts. Figure 5.17.: Serial Port Administration An RS232 serial port is optional on NB3700.
NB3700 User Manual 3.8 Running a device server, the following settings can be applied: Figure 5.18.: Serial Port Settings Parameter Serial Settings Physical protocol Selects the desired physical protocol on the serial port Baud rate Specifies the baud rate run on the serial port Data bits Specifies the number of data bits contained in each frame...
Page 57
NB3700 User Manual 3.8 Parameter Serial Settings Hardware flow control You may enable RTS/CTS hardware flow control, so that the RTS and CTS lines are used to control the flow of data Protocol on TCP/IP You may choose the IP protocols Telnet or TCP raw for the...
NB3700 User Manual 3.8 5.3.7. Digital I/O The Digital I/O page displays the current status of the I/O ports and can be used to turn output ports on or off. Figure 5.19.: Digital I/O Ports You can apply the following settings:...
NB3700 User Manual 3.8 5.3.8. GNSS Administration The GNSS page lets you enable or disable the GNSS modules present in the system and can be used to configure the daemon that can be used to share access to receivers without contention or loss of data and to respond to queries with a format that is substantially easier to parse than the NMEA 0183 emitted directly by the GNSS device.
Page 60
NB3700 User Manual 3.8 Position This pages provides further information about the satellites in view and values derived from them: Parameter GNSS Information Latitude The geographic coordinate specifying the north-south posi- tion Longitude The geographic coordinate specifying the east-west position...
Page 61
NB3700 User Manual 3.8 Parameter GNNS Supervision Emergency action The corresponding emergency action. You can either let just restart the server which also re-initializes GPS on the module or also reset the module in severe cases. Please note that this might also have effect any running WWAN/SMS...
NB3700 User Manual 3.8 5.4. ROUTING 5.4.1. Static Routes This menu shows all routing entries of the system. They are typically formed by an address/netmask couple (represented in IPv4 dotted decimal notation) which specify the destination of a packet. The packets can be directed to either a gateway or an interface or both.
NB3700 User Manual 3.8 Parameter Static Route Configuration Netmask The subnet mask which forms, in combination with the des- tination, the network to be addressed. A single host can be specified by a netmask of 255.255.255.255, a default route corresponds to 0.0.0.0.
NB3700 User Manual 3.8 5.4.2. Extended Routing Extended routes can be used to perform policy-based routing, they generally precede static routes. Figure 5.21.: Extended Routing In contrast to statis routes, extended routes can be made up, not only of a destination address/netmask, but also a source address/netmask, incoming interface and the type of service (TOS) of packets.
Page 65
NB3700 User Manual 3.8 Parameter Extended Route Configuration Type of service The TOS value within the header of the packet Route to Specifies the target interface or gateway to where the packet should get routed to...
NB3700 User Manual 3.8 5.4.3. Multipath Routes Multipath routes will perform weighted IP-session distribution for particular subnets across multiple interfaces. Figure 5.22.: Multipath Routes At least two interfaces have to be defined to establish multipath routing. Additional interfaces can be added by pressing the plus sign.
Effectively, any WAN link switch causes very small outages during switchover while keeping all IP connections alive. Moreover, NetModule routers also support NAT-Traversal for mobile nodes running behind a firewall (performing NAT), which makes mobile nodes even there accessible from a central office via their home address, and thus, bypassing any complicated VPN...
Page 68
NB3700 User Manual 3.8 If MIP is run as a mobile node, the following settings can be configured: Parameter Mobile IP Configuration Primary home agent ad- The address of the primary home agent dress Secondary home agent The address of the secondary home agent. The mobile node...
NB3700 User Manual 3.8 If MIP is run as a home agent, you will have to set up a home address and network mask for the home agent first. Then you will need to add the configuration for all mobile nodes which is made up of the following settings: Figure 5.23.: Mobile IP...
NB3700 User Manual 3.8 5.4.5. Quality Of Service NetModule routers are able to prioritize and shape certain kinds of IP traffic. This is currently limited on egress, which means that only outgoing traffic can be stipulated. The current QoS solution is using Stochastic Fairness Queueing (SFQ) classes in com- bination with Hierarchy Token Bucket (HTB) qdiscs.
Page 71
NB3700 User Manual 3.8 Parameter QoS Default Queues A low priority queue which may hold less-critical services for which shaping is intended Each queue can be configured as follows: Parameter QoS Queue Parameters Name The name of the QoS queue...
NB3700 User Manual 3.8 5.4.6. Multicast NetModule routers ship with an IGMP proxy which is able to maintain multicast groups on a particular interface and distribute incoming multicast packets towards the down- stream interfaces on which hosts have joined the groups.
NB3700 User Manual 3.8 5.5. FIREWALL 5.5.1. Administration NetModule routers use Linux’s netfilter/iptables firewall framework (see http://www. for more information) which supports stateful inspection, that is, grant- netfilter.org ing the same permissions for inherited connections within an IP session (e.g. FTP which builds up a control and data connection).
NB3700 User Manual 3.8 5.5.3. Rules In general, the firewall is set up of a range of rules which control each packet’s permis- sion to pass the router. Please note that the rules are processed by order, that means traversing the list from top to bottom until a matching rule is found. Packets which are not matching any of the rules configured will be ALLOWED.
Page 75
NB3700 User Manual 3.8 Parameter Firewall Rule Configuration Destination The destination address of matching packets, can be any, local (addressed to the system itself) or specified by ad- dress/network Incoming interface The interface on which matching packets are received Protocol...
NB3700 User Manual 3.8 5.5.4. NAPT This page can be used to configure Network Address and Port Translation (NAPT) for packets traversing the system. NAPT hereby modifies IP addresses or/and TCP/UDP ports in matching IP packets. By tracking those connections, it will also automatically adjust the returning packets of an IP session.
NB3700 User Manual 3.8 Figure 5.27.: Inbound NAPT...
Page 78
NB3700 User Manual 3.8 Please note that the specified rules are processed by order, that means, traversing the list from top to bottom until a matching rule is found. If there is no matching rule found, the packet will pass as is.
Figure 5.28.: OpenVPN Administration Tunnel Configuration NetModule routers support one single server tunnel and up to four client tunnels. You can specify tunnel parameters either in standard configuration or upload an expert mode file which has been created in advance. Refer to chapter 5.6.1...
NB3700 User Manual 3.8 Figure 5.29.: OpenVPN Configuration...
Page 81
NB3700 User Manual 3.8 If the tunnel is operated in client mode, the following settings can be applied: Parameter OpenVPN Client Configuration Peer selection Specifies how the remote peer shall be selected, besides a single server you may configure multiple servers which can, in case of failures, either be selected sequently (i.e.
Page 82
NB3700 User Manual 3.8 Parameter OpenVPN Options use compression Enable or disable LZO packet compression use keepalive Can be used to send a periodic keepalive packet in order to keep the tunnel up despite of inactivity redirect gateway By redirecting the gateway, all packets will be directed to the VPN tunnel.
NB3700 User Manual 3.8 Parameter Server Expert Files ca.crt Root certificate authority file server.crt Certificate file server.key Private key file dh1024.pem Diffie-Hellman parameters file A directory containing client-specific configuration files Keep in mind that a certificate becomes valid once its validity time has been reached, thus an accurate system has to be set prior to creating certificates and establishing a...
Page 84
NB3700 User Manual 3.8 Please note that, if you intend to use a fixed address for a particular client, you would have to apply fixed addresses to the other ones as well. You may specify the network behind the clients as well as the routes to be pushed to each client.
NB3700 User Manual 3.8 5.6.2. IPsec IPsec is a protocol suite for securing IP communications by authenticating and encrypt- ing each packet of a communication session and thus establishing a secure virtual private network. IPsec includes various cryptographic protocols and ciphers for key exchange and data encryption and can be seen as one of the strongest VPN technologies in terms of security.
NB3700 User Manual 3.8 Administration This page can be used to enable/disable IPsec, you may also specify whether NAT- Traversal should be used. NAT-Traversal is mainly used for connections which traverse a path where a router modifies the IP address/port of packets. It encapsulates packets in UDP and therefore requires a slight overhead which has to be taken into account when running over small- sized MTU interfaces.
Page 88
IKE Authentication NetModule routers support IKE authentication through pre-shared keys (PSK) or certifi- cates within a public key infrastructure. Extended Authentication (XAUTH) leverages RADIUS-like authentication and can be used to apply user level access control over IPSec.
Page 89
NB3700 User Manual 3.8 Parameter IPsec XAUTH Settings User name The name of the XAUTH user User password The password of the XAUTH user Group name The group ID Group password The group secret IKE Proposal This section can be used to configure the phase 1 settings:...
Page 90
NB3700 User Manual 3.8 Parameter IPsec Proposal Settings Authentication algo- The desired IKE authentication method (we prefer SHA1 rithm over MD5) SA life time The lifetime of Security Associations Networks When creating Security Associations, IPsec will keep track of routed networks within the tunnel.
NB3700 User Manual 3.8 5.6.3. PPTP The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual private networks between two hosts. PPTP is easy to configure and widely deployed amongst Microsoft Dial-up networking servers. However, due to its weak encryption algorithms, it is nowadays considered insecure but it still provides a straightforward way for establishing tunnels.
NB3700 User Manual 3.8 Parameter PPTP Server Settings Listen address Specifies on which IP address should be listened for incom- ing client connections Server address The server address within the tunnel Client address range Specifies a range of IP addresses assigned to each client PPTP Client Management PPTP clients for a server tunnel need to be configured here.
NB3700 User Manual 3.8 5.6.4. GRE The Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of network layer protocols inside virtual point-to-point links over IP. GRE is defined in RFC 1701, 1702 and 2784. It does not provide encryption nor authorization but can be used on an address-basis on top of other VPN techniques (such as IPsec) for tunneling purposes.
NB3700 User Manual 3.8 5.6.5. Dial-In On this page you can configure the Dial-In server in order to establish a data connection over GSM calls. Thus, one would generally apply a required service type of 2G-only, so that the modem registers to GSM only. Naturally, a concurrent use of outgoing WWAN interfaces and Dial-In connection is not possible.
Page 96
NB3700 User Manual 3.8 which shall be allowed to dial-in. Please note that Dial-In connections are generally discouraged. As they are implemented as GSM voice calls, they suffer from unreliability and poor bandwidth.
NB3700 User Manual 3.8 5.7. SERVICES 5.7.1. SDK NetModule routers are shipping with a Software Development Kit (SDK) which offers a simple and fast way to implement customer-specific functions and applications. It consists of: 1. An SDK host which defines the runtime environment (a so-called sandbox), that...
Page 98
NB3700 User Manual 3.8 /* We are going to eavesdrop on the first serial port * and turn on lights via a digital I / O output port , * otherwise we d have to send a short message .
Page 99
NB3700 User Manual 3.8 16. Create your own web pages 17. Voice control functions 18. SNMP functions 19. CAN socket functions 20. Various network-related functions 21. Other system-related functions The SDK API manual (which can be downloaded from the router) provides an overview but also explains all functions in detail.
Page 100
NB3700 User Manual 3.8 wanlink.0.mode wanlink.0.name wanlink.0.prio wanlink.0.weight Running the CLI in interactive mode, you will be also able to step through possible configuration parameters by the help of the TAB key.
Page 101
NB3700 User Manual 3.8 Here is an example how one might adopt those functions: /* check current city and enable the second WAN link */ location = nb_status ( " location " ( location ) { city = struct_get ( location , "...
NB3700 User Manual 3.8 Figure 5.37.: SDK Administration...
Page 103
NB3700 User Manual 3.8 Administration This page can be used to control the SDK host and apply the following settings: Parameter SDK Administration Settings Parameter Description Administrative status Specifies whether SDK scripts should run or not Scheduling priority Specifies the process priority of the sdkhost, higher priorities...
Page 105
NB3700 User Manual 3.8 Parameter SDK Script Parameters Name A meaningful name to identify the script Description An optional description of the script Arguments An optional set of arguments passed to the script (supports quoting) Action You may either edit a script, upload it to the system or...
Page 106
NB3700 User Manual 3.8 /* arguments : schnick schnack " s c h n u c k " for ( i = 0; i < argc ; i ++) { printf (" argv % d : % s \ n " , i , argv [ i ]) ;...
NB3700 User Manual 3.8 Command Action disconnect Will disable the first WAN link configured on the system reboot Initiates a reboot of the system output 1 on Turns on the first digital output port output 1 off Turns off the first digital output port...
NB3700 User Manual 3.8 5.7.2. DHCP Server This section can be used to individually configure the Dynamic Host Configuration Protocol (DHCP) service for each LAN interface which will serve dynamic IP addresses to hosts in the local network. You may also have a look to the status page where you can find an overview about negotiated client addresses.
NB3700 User Manual 3.8 5.7.3. DNS Server The DNS server can be used to proxy DNS requests towards servers on the net which have for instance been negotiated during WAN link negotiation. By pointing DNS requests to the router, one can reduce outbound DNS traffic as it is caching already resolved names but it can be also used for serving fixed addresses for particular host names.
Page 111
NB3700 User Manual 3.8 names. Please remember to point local hosts to the router’s address for resolving them.
NB3700 User Manual 3.8 5.7.4. NTP Server This section can be used to individually configure the Network Time Protocol (NTP) server function. Figure 5.41.: NTP Server The following settings for each interface can be applied then: Parameter NTP Server Settings Administrative status Specifies whether the NTP server is enabled or not...
We provide support for a bunch of common DynDNS operators but it is also possible to define a custom update URL. Please note that your NetModule router can operate as DynDNS server on its own, provided that you have your hosts pointed to the DNS service of the router.
Page 114
NB3700 User Manual 3.8 Parameter DynDNS Settings Provider You can choose one of the listed providers or provide a cus- tom URL Dynamic address Specifies whether the address is derived from the hot-link or via an external service Hostname The host-name provided by your DynDNS service (e.g. my- box.dyndns.org)
NB3700 User Manual 3.8 5.7.6. E-Mail The E-Mail client can be used to send notifications to a particular E-Mail address upon certain events or by SDK scripts. Figure 5.43.: E-Mail Settings It can be enabled by applying the following settings.
NB3700 User Manual 3.8 5.7.7. Events By using the event manager you can notify one or more recipients by SMS or E-Mail upon certain system events. The messages will contain a description provided by you and a short system info.
5.7.8. SMS Administration On NetModule routers it is possible to receive or send short messages (SMS) over each mounted modem (depending on the assembly options). Messages are received by query- ing the SIM card over a modem, so prior to that, the required assignment of a SIM card to a modem needs to be specified on the SIMs page.
NB3700 User Manual 3.8 Figure 5.44.: SMS Configuration...
Page 119
NB3700 User Manual 3.8 prefix. On the other hand, you can also define rules to drop outgoing messages, for instance, when you want to avoid using any expensive service or international numbers. Both types of rules form a list will be processed by order, forwarding outgoing messages over the specified modem or dropping them.
NB3700 User Manual 3.8 5.7.9. SSH/Telnet Server Apart from the Web Manager, the SSH and Telnet services can be used to log into the system. Valid users include root and admin as well as additional users as they can be created in the User Accounts section.
Page 121
NB3700 User Manual 3.8 The following parameters can be applied to the SSH service: Parameter SSH Server Settings Administrative status Whether the SSH service is enabled or disabled Server port The TCP port of the service (usually 22) Disable password-based...
NB3700 User Manual 3.8 SNMP Configuration Figure 5.46.: SNMP Agent The following parameters can be used to configure the SNMP agent: Parameter SNMP Configuration Administrative status Enable or disable the SNMP agent Operation mode Specifies if agent should run in compatibilty mode or for...
Page 124
NB3700 User Manual 3.8 SNMP Authentication When running in SNMPv3, it is possible to configure the following authentication set- tings: Parameter SNMPv3 Authentication Authentication Defines the authentication (MD5 or SHA) Encryption Defines the privacy protocols to use (DES or AES In general, the admin user can read and write any values.
Page 125
NB3700 User Manual 3.8 Typical SNMP Commands Setting MIB values and triggering extensions is generally limited to the SNMPv3 admin user. It is possible to specify an administrative host for SNMP v1/2c. The SNMP extensions can be read and triggered as follows: Getting the software version of the system: snmpget -v 3 -u admin -n ""...
Page 126
NB3700 User Manual 3.8 The return value can be one of: succeeded (1), failed (2), inprogress (3), notstarted (4). Setting digital OUT1: snmpset -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1 .1.3.6.1.4.1.31496.10.53.10.0 i 0 snmpset -v 3 -u admin -n ""...
NB3700 User Manual 3.8 5.7.11. Web Server This page can be used to configure different ports for accessing the Web Manager via HTTP/HTTPS. We strongly recommend to use HTTPS when accessing the web service via a WAN interface as the communication will be encrypted and thus avoids any misuse of the system.
NB3700 User Manual 3.8 5.7.12. Redundancy This page can be used to set up a redundant pair of NetModule routers (or other systems) by running the Virtual Router Redundancy Protocol (VRRP) between them. A typical VRRP scenario defines a first host playing the master and another the backup device, they both define a virtual gateway IP address which will be distributed by gratuitous...
Page 129
NB3700 User Manual 3.8 Parameter Redundancy Configuration Administrative status Administrative status Role The role of this system (either master or backup) The Virtual Router ID (you can theoretically run multiple instances) Interface Interface on which VRRP should be performed Virtual gateway address The virtual gateway address formed by the participating hosts We assign a priority of 100 to the master and 1 to the backup router.
NB3700 User Manual 3.8 5.7.13. Voice Gateway Depending on your hardware, you can set up a voice gateway on the router which can be used to connect mobile calls to VoIP clients and vice versa. Administration Figure 5.49.: Voice Gateway Administration...
Page 131
NB3700 User Manual 3.8 Parameter Voice Gateway Administration Settings SIP interface Specifies the interface (LAN or WAN) on which the agent should listen for incoming calls SIP port Specifies the agent’s listening port SIP user name Specifies the username used in from headers SIP register expires Specifies the registration interval in seconds...
NB3700 User Manual 3.8 Voice Endpoints Figure 5.50.: Voice Gateway Endpoint Configuration On this page you can activate the endpoints used for voice communication, the following types are supported: Parameter Voice Gateway Endpoint Types Voice-Over-Mobile Endpoint for GSM/UMTS/LTE calls (can be used for calls...
Page 133
NB3700 User Manual 3.8 Based on your equipment, we recommend to adjust the modem’s audio profile for a better sound experience. The following profiles are available: Parameter Voice-Over-Mobile Audio Profiles Handset Provides a mild echo, short delay (less than 16-ms disper- sion).
Page 134
NB3700 User Manual 3.8 Parameter Endpoint Settings Voice-Over-Mobile Modem Specifies the modem which will be used for voice-over-mobile calls Audio profile Specifies the modem’s audio profile Volume level Specifies the modem’s volume level - 1 = low Parameter Endpoint Settings SIP (registrar)
NB3700 User Manual 3.8 Voice Routing This page can be used to configure generic voice routing between the endpoints. Figure 5.51.: Voice Gateway Routing Configuration Enhanced routing facilities are provided via the SDK interface which is able to dispatch voice calls based on their attributes (such as phone numer) and other system related status information (e.g.
Page 136
NB3700 User Manual 3.8 Parameter Voice Gateway Routing Settings Destination Specfies the target endpoint (i.e. where to call is routed to) Client Configuration Any SIP client must be configured to use the router as its registrar/proxy. Parameter X-Lite Configuration User ID SIP username used in from headers (i.e.
NB3700 User Manual 3.8 5.8. SYSTEM 5.8.1. System System Settings Figure 5.52.: System The following system parameters can be set: Parameter System Settings Local hostname The hostname of the system Application area The desired application area which influences the system behaviour such as registration timeouts or other adaptions when operating in mobile enviroments.
Page 138
(e.g. automatically switching from summer to winter time) for your specific time zone. NetModule routers can synchronize their system time by using one or more servers by the help of the Network Time Protocol (NTP) or via GPS. If enabled, the time synchronization is usually triggered after a WAN link has come up but before starting any VPN connections.
Page 139
NB3700 User Manual 3.8 Parameter Time & Region NTP server 2 Optionally, the address of a second NTP server Sync time from GPS Derive time from first GPS device (if enabled) Reboot This page can be used to set up a periodic automatic reboot but also to trigger a manual...
NB3700 User Manual 3.8 5.8.2. Authentication This page can be used to define the access model for all management interfaces (e.g. GUI, SSH/telnet server). Parameter Authentication Methods Authentication required Users can login via HTTP/telnet if authentication succeeds Secure authentication Users can only login via HTTPS/ssh...
Page 142
NB3700 User Manual 3.8 Manager and other administrative services and is used by several services as default user. Keep in mind that the admin password will be also applied to the root user which is able to enter a system shell.
NB3700 User Manual 3.8 Figure 5.55.: Remote Authentication...
Page 144
NB3700 User Manual 3.8 5.8.3. Software Update Manual Software Update This menu can be used to run a manual software update of the system. Parameter Manual Software Update Update operation The update operation method being used. You can upload the image, download it from an URL or use the latest version...
Page 145
A firmware package (ZIP) usually consists of a flash utility and a firmware file. Please follow http://www.netmodule.com/support/supportform.aspxin order to get the latest version. 5.8.5. Software Profiles The system consists of two root partitions which can hold different software versions and this menu can be used to switch between them.
NB3700 User Manual 3.8 5.8.6. Configuration Configuration via the Web Manager becomes tedious for larger volumes of devices. The router therefore offers automatic and manual file-based configuration to automate things. Once you have successfully set up the system you can back up the configuration and restore the system with it afterwards.
NB3700 User Manual 3.8 Automatic File Configuration This menu can be used to run an automatic configuration update of the system. It is configured as follows: Parameter Automatic File Configuration Status Enable/disable an automatic configuration update Time of day Time of day when the system should check for updates The URL where the configuration file should be retrieved...
Page 149
NB3700 User Manual 3.8 Ethernet interface back to 192.168.1.1. You will be able to communicate again with the device using the default network parameters. You may store the currently running configuration as factory defaults which will reside active even when a factory reset has been initiated (e.g.
NB3700 User Manual 3.8 5.8.7. Troubleshooting Network Debugging Log Files You can view the system log here by selection the option Debug log or if you are interested in the boot log select Boot log. Another way to see what is going on on the box is opening a SSH or Telnet session as root and typing tail-log.
NB3700 User Manual 3.8 analysis of potential configuration issues. Figure 5.60.: Tech Support File It is possible to trace any IP interface and inspect individual packet flows between hosts. This can be achieved by logging onto the box and start a network packet capture by using the tool tcdump.
NB3700 User Manual 3.8 5.8.8. Keys and Certificates The key and certificate page lets you generate required files for securing your services (such as HTTP and SSH server) but also to implement authentication and encryption for certificate-based VPN tunnels and WLAN clients.
NB3700 User Manual 3.8 Type Description OpenVPN Server or client keys and certificates for running OpenVPN tunnels. IPsec Server or client keys and certificates for running IPsec tun- nels. WLAN Keys and certificates for implementing certificate-based WLAN authentication (e.g. WPA-EAP-TLS).
NB3700 User Manual 3.8 Configuration Figure 5.62.: Certificate Configuration This page provides some general configuration options which will be applied when op- erating on keys and certificates. If keys, certificates and signing requests are generated locally, the following settings will...
Page 155
NB3700 User Manual 3.8 Parameter Certificate Configuration Common Name (CN) The certificate owner’s common name, mainly used to iden- tify a host E-Mail The certificate owner’s email address Expiry period The number of days a certificate will be valid from now on...
Page 156
NB3700 User Manual 3.8 Parameter SCEP Configuration Request timeout The max. polling time in seconds for a certificate request When enrolling certificates, the CA certificate will be initially fetched from the specified SCEP URL using the getca operation. It will be shown on the configuration page and it has to be verified that it belongs to the correct authority.
NB3700 User Manual 3.8 5.8.9. Licensing Certain features of NetModule routers require a valid license to be present in the system, some of them also depend on the mounted modules. Please contact us for getting a valid license for available components and we will provide a license file based on your serial number which can be installed to the router afterwards.
Page 158
5.8.10. Legal Notice OSS Notice We inform you that NetModule products may contain in part open-source software. We are distributing such open-source software to you under the terms of GNU General Public License (GPL), GNU Lesser General Public License (LGPL) or other open-source licenses.
Page 159
NB3700 User Manual 3.8 5.9. LOGOUT Please use this menu to log out from the Web Manager.
6. Command Line Interface The Command Line Interface (CLI) offers a generic control interface to the router and can be used to get/set configuration parameters, apply updates, restart services or per- form other system tasks. It will be started automatically in interactive mode when logging in as admin user or by running cli -i.
Page 161
NB3700 User Manual 3.8 Key Sequence Action Clear the screen leaving the current line at the top of the CTRL-l screen; with an argument given, refresh the current line without clearing the screen Fetch the previous command from the history list, moving...
Page 162
NB3700 User Manual 3.8 Usage : help [<command >] Available commands : Get config parameters Set config parameters update Update system facilities cert Manage keys and certificates status Get status information scan Scan networks send Send message , mail , techsupport or ussd...
Page 163
NB3700 User Manual 3.8 Usage : set [ hv ] <parameter>= <value> [<parameter>= <value > . . ] Options : validate config parameter 6.5. Getting Status Information The status command can be used to get various status information of the system.
Page 164
NB3700 User Manual 3.8 SMS status firewall Firewall status QoS status neigh Neighborhood status location Current Location 6.6. Scanning Networks The scan command can be used to scan for available WWAN and WLAN networks. > scan Usage : scan [ hs ] <interface>...
Page 165
NB3700 User Manual 3.8 Options : reboot after update force update don t reset missing config values with factory defaults show update status Available update targets : software Perform software update firmware Perform module firmware update config Update configuration license...
Page 166
NB3700 User Manual 3.8 Usage : restart [ h ] <service> Available services : configd Configuration daemon dnsmasq DNS / DHCP server dropbear SSH server firewall Firewall and NAPT gpsd GPS daemon GRE connections ipsec IPsec connections lighttpd HTTP server...
Page 167
NB3700 User Manual 3.8 link manager mobile node qmid qosd scripts sdkhost ser2net smsd surveyor swupdate system voiced watchdog wwan manager wwanmd 6.12. Resetting System The reset command can be used to reset the router back to factory defaults. > reset...
Page 168
NB3700 User Manual 3.8 6.15. Working with History The history command will print the list of entered commands on a per-user basis. > history Usage : history [ c ] It can be cleared by history -c. 6.16. CLI-PHP CLI-PHP, the HTTP frontend to the CLI application, can be used to configure and control the router remotely.
Page 169
NB3700 User Manual 3.8 command=get&arg0=admin . password&arg1=admin . debug&arg2=admin . access will lead to cli being called as : cli get " admin . password " " admin . debug " " admin . access " It supports whitespaces but please be aware that any special...
Page 173
NB3700 User Manual 3.8 send - Send TechSupport Key usage : command=send&arg0=techsupport&arg1=stdout command=send&arg0=techsupport&arg1=<address>&arg2=<subject> Notes : The address has to be a valid E Mail address such as abc@abc . com ( the at sign can be encoded with \%40) . The E Mail client must be properly configured prior to using that function .
7. Technical Support NetModule’s mission statement is to provide you with state of the art products, technolo- gies and services for your embedded applications. This certainly includes a professional and friendly team of support engineers which will be pleased to offer consultancy, pro- vide assistance and deliver solutions in case of technical issues.
NetModule does not warrant that this document is error-free. NetModule and NB3700 are trademarks and the logo is a service mark of NetModule AG, Switzerland. All other products or company names mentioned herein are used for identification pur- poses only and may be trademarks or registered trademarks of their respective owners.
Page 177
A. Appendix A.1. Abbrevations Parameter Description ETHx Corresponds to Ethernet interfaces (either single or switched ones) LANx LAN interfaces which are generally based on Ethernet in- terfaces (including bridges) WLANx Refers to a Wireless LAN interface which will be represented as additional LAN interface when configured as access point WWANx Refers to a Wireless Wide Area Network (2G/3G/4G) con-...
Page 178
NB3700 User Manual 3.8 Parameter Description The Location Area Code corresponds to an identifier of a set of base stations that are grouped together to optimize signaling The Location Area Identity is a globally unique number that identifies the country, network provider and location area...
NB3700 User Manual 3.8 Parameter Description Mobile Country Code Mobile Network Code Cell-ID MSISDN Mobile Subscriber Integrated Services Digital Network Number ICCID Integrated Circuit Card Identifier MEID Mobile Equipment Identifier IMSI International Mobile Subscriber Identity IMEI International Mobile Station Equipment Identity Table A.1.: Abbreviations...
Page 180
NB3700 User Manual 3.8 Event Description openvpn-up OpenVPN connection came up openvpn-down OpenVPN connection went down ipsec-up IPsec connection came up ipsec-down IPsec connection went down pptp-up PPTP connection came up pptp-down PPTP connection went down dialin-up Dial-In connection came up...
NB3700 User Manual 3.8 Event Description ddns-update- Dynamic DNS update succeeded succeeded ddns-update-failed Dynamic DNS update failed usb-storage-added USB storage device has been added usb-storage- USB storage device has been removed removed usb-eth-added USB Ethernet device has been added usb-eth-removed...
Page 182
NB3700 User Manual 3.8 A.3. Factory Configuration The factory configuration including default values for any configuration parameter can be derived from the file /etc/config/factory-config.cfg on the router. You may also call cli get -f <parameter> for obtaining a specific default value.
Page 186
NB3700 User Manual 3.8 SYNTAX DisplayString MAX - ACCESS read - only STATUS current DESCRIPTION " The network name to which the WWAN modem is currently registered " ::= { nbWwanEntry 7 } w w a n L o c a l A r e a I d e n t i f i c a t i o n OBJECT - TYPE...
Page 187
NB3700 User Manual 3.8 gnssSystem OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS read - only STATUS current DESCRIPTION " GNSS system used by the device " ::= { nbGnssEntry 3 } gnssLat OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS...
Page 188
NB3700 User Manual 3.8 ::= { nbWlanEntry 2 } wlanModuleTy pe OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS read - only STATUS current DESCRIPTION " WLAN module type " ::= { nbWlanEntry 3 } wlanNumClien ts OBJECT - TYPE...
Page 190
NB3700 User Manual 3.8 ipsec - down NOTIFICATION - TYPE STATUS current DESCRIPTION " IPsec connection went down " ::= { events 404 } pptp - up NOTIFICATION - TYPE STATUS current DESCRIPTION " PPTP connection came up " ::= { events 406 }...
Page 191
NB3700 User Manual 3.8 sms - sent NOTIFICATION - TYPE STATUS current DESCRIPTION " SMS has been sent " ::= { events 601 } sms - notsent NOTIFICATION - TYPE STATUS current DESCRIPTION " SMS has not been sent "...
Page 192
NB3700 User Manual 3.8 A.5. SDK Examples Event Description best-operator.are This script will scan for operators on startup and choose the one with the best signal candump.are This script can be used to receive CAN messages config-summary.are This script shows a summary of the currently running con- figuration.
Page 193
NB3700 User Manual 3.8 Event Description modbus-tcp-rtu- This script implements a Modbus TCP RTU gateway gateway.are mount-media.are This script can be used to mount an USB storage stick. ping-supervision.are This script will supervise a specified host. read-config.are This script can be used to read a configuration parameter.
NB3700 User Manual 3.8 Event Description sms-to-serial.are This script can be used to write a received SMS to the serial port. snmp-agent.are This script extends MIB entries of the SNMP agent snmp-cmd.are This script issues SNMP set/get commands snmp-trap.are This script can be used to send SNMP traps status.are...
Need help?
Do you have a question about the NB3700 and is the answer not in the manual?
Questions and answers