Page 2
Copyright Act. Alteration or abridgement of without the express written consent of Wieland Electric GmbH. wienet is a trademark of Wieland Electric. Other names may in this assembly manual men- tioned product and brand- trademarks or registered trademarks of their respective owners could be used, whose use by third parties for their own purposes could violate the rights of the owners.
Page 3
Wieland Electric | BA000819 | 01/2012 (Rev. A)
This installation manual is valid for the products wienet VPN router, which are associated with this installation manual. The installation instructions accompanying the product is downloadable in the electronic catalog of Wieland. Be sure to always use the information provided in the current version of this installation manual. The version and revision level can be seen in the title page and the footer..
Refer to notes for special features of a device. NOTICE Instructions also tell you about a potentially harmful situation. If it is not avoided, the sys- tem can be damaged or something in their environment. Wieland Electric | BA000819 | 01/2012 (Rev. A)
For any other use, or changes to the equipment - even in the context of mounting and installation - any warranty claim against Wieland Electric Gmb expired. Wieland Electric | BA000819 | 01/2012 (Rev. A)
After green LED starts to blink it is possible to restore initial settings of the router by pres- sing button RST on front panel. If press button RST, configuration is restored to default and it is reboot (green LED will be on). Wieland Electric | BA000819 | 01/2012 (Rev. A)
It is possible to read status PPP connection from the network information. If the PPP con- nection is active, then it is in the system information shown as ppp0 interface. NOTICE For industrial router XR5i v2, interface ppp0 indicates PPPoE connection. Fig 2: Network status Wieland Electric | BA000819 | 01/2012 (Rev. A)
Computer name Fig 3: DHCP status NOTICE In the extreme, the DHCP status can display two records for one IP address. That could have been caused by resetting of network cards. Wieland Electric | BA000819 | 01/2012 (Rev. A)
After you place your cursor on the maximum or minimum signal strength, will show the last time when the signal strength reaching the router. In the middle part of window is shows information about transferred data and number of connection both SIM card, for each period Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 14
Configuration settings over web browser Item Desciption Table 7: Description of GSM traffic RX data Total volume of received data TX data The total volume of data sent Connections Number of PPP connection establishment Wieland Electric | BA000819 | 01/2012 (Rev. A)
Configuration settings over web browser The PPP Connection Log is in the bottom of window, where are information about the make-up of the PPP connection and problems in establishment. Fig 4: GPRS status Wieland Electric | BA000819 | 01/2012 (Rev. A)
Information on actual IPsec tunnel state can be called up in option IPsec in the menu. After correct build the IPsec tunnel, status display IPsec SA established (highlighted in red) in IPsec status information. Other information is only internal character. Fig 5: IPsec status Wieland Electric | BA000819 | 01/2012 (Rev. A)
DynDNS record is already up to date. DynDNS record successfully update. DNS error encountered. DynDNS server failure. NOTICE For correct function DynDNS, SIM card of router must have assigned public IP address. Wieland Electric | BA000819 | 01/2012 (Rev. A)
For starting syslogd with these options you could modify script "/etc/init.d/syslog" or add lines "killall syslogd" and "syslogd <options> &" into Startup Script. Example of logging into the remote daemon at 192.168.2.115 Fig 8: Example program syslogd start with parameter Wieland Electric | BA000819 | 01/2012 (Rev. A)
If this option is checked, can enable a static DHCP server. leases MAC Address MAC address of a DHCP client. IP Address Assigned IP address. Enable static DHCP If this option is checked, can enable a static DHCP server. leases Wieland Electric | BA000819 | 01/2012 (Rev. A)
The range of dynamic allocated addresses from 192.168.1.2 to 192.168.1.4. The address is allocated 600 second (10 minutes). Fig 9: Topology of example LAN configuration 1 192.168.1.2 GSM/GPRS 192.168.1.1 192.168.1.3 192.168.1.4 Fig 10: Example LAN configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 21
Client's with MAC address 01:54:68:18:ba:7e has IP address 192.168.1.11. Fig 11: Topology of example LAN configuration 2 192.168.1.2 192.168.1.3 192.168.1.4 GSM/GPRS 192.168.1.1 192.168.1.10 01-23-45-67-89-ab 192.168.1.11 01-54-68-18-ba-7e Fig 12: Example LAN configuration 2 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 22
Default gateway IP address is 192.168.1.20 DNS server IP address is 192.168.1.20 Fig 13: Topologie of example LAN configuration 3 192.168.1.2 192.168.1.3 192.168.1.4 GSM/GPRS 192.168.1.1 192.168.1.20 Fig 14: Example LAN configuration 3 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Timeout. If Ping Timeout expires with no answer received then process of testing the ac- tive line continues the same way like in the case of standard testing process after first test message answer drops out. Wieland Electric | BA000819 | 01/2012 (Rev. A)
If the APN field is not filled in, the router automatically selects the APN by the IMSI code of the SIM card. If the PLMN (operator number format) is not in the list of APN, then default APN is “internet“. The mobile operator defines APN. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Parameter sets the day of the month in which the billing cycle starts SIM card used. Start of the billing period defines the opera- tor, which gives the SIM card. The router begin to count the trans- ferred data since that day Wieland Electric | BA000819 | 01/2012 (Rev. A)
APN of the SIM card, when binary input ‘bin0’ is active. ry input is active Switch to primary This parameter defines the method, how the router will try to SIM card after time- switch back to default SIM card or default APN. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Protocol (PPP) frames inside Ethernet frames. Allows you to create a PPPoE connection from the device behind router. For example from PC which is connected to ETH port router. There will be allot Ip address of SIM card to PC. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Configuration settings over web browser The changes in settings will apply after pressing the Apply button. Fig 18: : GPRS configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
SIM card is done after 60 minutes, the second after 40 minutes, the third after 50 minutes (40 +10)... Fig 21: : Example of GPRS configuration 3 Wieland Electric | BA000819 | 01/2012 (Rev. A)
(Maximum Transmission Unit) – it is the identifier of the maximum size of packet, which is possible to transfer in given environment. Default value is set to 1492 bytes. Other settings may cause incor- rect data transmission. Fig 22: : PPPoE configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
UDP - access is allowed by UDP ICMP access is allowed by ICMP Target Port The port number on which it is allowed to access the router. Caution! Firewall doesn’t filter via Ethernet. CAUT IO N Wieland Electric | BA000819 | 01/2012 (Rev. A)
from address 10.0.2.123 using TCP protocol on any ports from address 142.2.26.54 using ICMP protocol Fig 23: : Topology of example firewall configuration TCP/1000 10.0.2.123 ICMP 171.92.5.45 142.2.26.54 Fig 24: : Example of firewall configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
NAT. Enable remote HTTP If this item field and port number is filled in, then configuration of access on port the router over web interface is possible. Wieland Electric | BA000819 | 01/2012 (Rev. A)
IP address in this case is the address of the device behind the router. Connected equipment behind the router must have set Default Gateway on the router. Connected device replies, while PING on IP address of SIM card. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 36
Example of the configuration with more connected equipment: Fig 27: : Topology of example NAT configuration 1 SWITCH 162.209.13.222 10.0.0.1:81 ppp0 10.0.0.1 192.168.1.2:80 10.0.0.1:82 10.0.0.1:83 192.168.1.3:80 192.168.1.4:80 Fig 28: : Example of NAT configuration 2 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Ping Timeout Ping Timeout waits on message from off-side tunnel. For OpenVPN tunnel right verifies parameter Ping Timeout has to be Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 38
Authenticate Mode Username/Password. Extra Options By the help of parameter Extra Options it is possible to define addi- tional parameters of the OpenVPN tunnel, for example DHCP opti- ons etc. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Configuration settings over web browser The changes in settings will apply after pressing the Apply button. Fig 30: : OpenVPN tunnel configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 40
19.16.1.0 19.16.2.0 Remote Interface IP Address 19.16.2.0 19.18.1.0 Compression Authenticate mode none none Examples of different options for configuration and authentication of OpenVPN can be found in the configuration manual OpenVPN tunnel. Wieland Electric | BA000819 | 01/2012 (Rev. A)
This item enables the individual tunnels. Description This item displays the name of the tunnel specified in the configu- ration of the tunnel. Edit Configuration IPsec tunnel. Fig 32: : IPsec tunnels configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Random time, after which it will re-exchange of new keys are defined: NOTICE Lifetime - (Rekey margin + random value in range (from 0 to Rekey margin * Rekey Fuzz/100)) Wieland Electric | BA000819 | 01/2012 (Rev. A)
Conversely, reducing the time, tunnel has higher operating costs and higher safety of the tunnel. The changes in settings will apply after pressing the Apply button. Fig 33: : IPsec tunnel configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 44
Local Subnet Mas: 255.255.255.0 255.255.255.0 Authenticate mode pre-shared key pre-shared key Pre-shared key test test Examples of different options for configuration and authentication of IPsec can be found in the configuration manual IPsec tunnel. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Using this key, the data do not provide a tunnel through. GRE tunnel doesn’t connect itself via NAT. The changes in settings will apply after pressing the Apply button. CAUT IO N Fig 36: : GRE tunnel configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Mask Username Username for login to L2TP tunnel Password Password for login to L2TP tunnel Apply The changes in settings will apply after pressing the button. Fig 38: : L2TP tunnel configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Client Start IP Address 192.168.1.2 Client End IP Address 192.168.1.254 Local IP Address 192.168.1.1 Remote IP Address Remote Subnet 192.168.2.0 192.168.1.0 Remote Subnet Mask 255.255.255.0 255.255.255.0 Username username username Password password password Wieland Electric | BA000819 | 01/2012 (Rev. A)
(Server). If this item is left blank, the default server is used. Example of the DynDNS client configuration with domain wieland.dyndns.org, username wieland, password wieland and default server http://members.dyndns.org: Fig 40: : Example of DynDNS configuration Wieland Electric | BA000819 | 01/2012 (Rev.
Yes - time shift is allowed Example of the NTP configuration with set primary (ntp.cesnet.cz) and secondary (tik.cesnet.cz) NTP server and with daylight saving time: Fig 41: : Example of NTP configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
odd - Data will be sent with odd parity. Stop Bits Number of stop bit. Parameters Enable XC-CNT extension and Enable M-BUS extension can not be checked together. CAUT IO N Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 52
1. VIF – value information field .1.3.6.1.4.1.30140.2.2.<address>.9.0 1. measured value … .1.3.6.1.4.1.30140.2.2.<address>.100.0 47. VIF – value information field .1.3.6.1.4.1.30140.2.2.<address>.101.0 47. measured value The meter address can be from range 0..254 when 254 is broadcast. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 53
. After enter the IP address is in a MIB tree part is possible show object identifier. The path to objects is: iso->org->dod->internet->private->enterprises->wieland->protocols. The path to information about router is: -> -> -> internet -> mgmt -> mib-2 -> system Wieland Electric | BA000819 | 01/2012 (Rev. A)
CAUT IO N jack@google.com subject” This command sends e-mail to address with the subject “ , body message “message” and annex “abc.doc” right from the directory c:\directory\ and 5 at- tempts to send. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Control SMS message doesn’t change the router configuration. If the router is switched to offline mode by the SMS message the router will be in this mode up to next restart. This behavior is the same for all control SMS messages. Wieland Electric | BA000819 | 01/2012 (Rev. A)
AT+CMGR=<index> Read of the definite SMS (all SMS has our index) AT+CMGD=<index> SMS delete according to index AT+CMGL=ALL List of all SMS messages AT+CMGR=<index> Read of the definite SMS (all SMS has our index) Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 57
It is possible to read the new SMS message by command AT+CMGR=<index>. AT+CMGR=1 Enter +CMGL: <index>, <status>,<sender number>, ,<date>,<time> SMS text. +CMGL: 1,“REC READ“,“+491604758944“, ,“12/01/12, 9:48:04+04“ Hello World! Received SMS is possible to delete by command AT+CMGD=<index>. AT+CMGD=1 Enter Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 58
After PPP disconnect, at introduction of the telephone number comes SMS in the form: Router (Unit ID) has lost PPP connection. IP address xxx.xxx.xxx.xxx Configuration of sending this SMS is following: Fig 45: : Example of SMS configuration 1 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 59
Configuration settings over web browser Example of the router configuration for SMS sending via serial interface on the PORT1: Fig 46: : Example of SMS configuration 2 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 60
Configuration settings over web browser Example of the router configuration for controlling via SMS from every phone numbers: Fig 47: : Example of SMS configuration 3 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 61
Configuration settings over web browser Example of the router configuration for controlling via SMS from two phone numbers: Fig 48: : Example of SMS configuration 4 Wieland Electric | BA000819 | 01/2012 (Rev. A)
When you select items Use CD as indicator of the TCP connection is activated function indication TCP connection using signal CD (DTR on the router). Table 54: CD signal Desciption description Active TCP connection is on Nonactive TCP connection is off Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 63
Nonactive The router does not permit estab- Router stops TCP connection. lishing a TCP connection. Apply The changes in settings will apply after pressing the button. Fig 49: : Expansion port configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 64
10.0.0.2 RS232 ppp0 10.0.0.1 RS232 Settings in the router Settings in the router Mode: TCP server Mode: TCP client Server Address: - Server Address: 10.0.0.2 TCP Port: 2000 TCP Port: 2000 Wieland Electric | BA000819 | 01/2012 (Rev. A)
When you select items Use CD as indicator of the TCP connection is activated function indication TCP connection using signal CD (DTR on the router). Table 58: CD signal Desciption description Active TCP connection is on Nonactive TCP connection is off Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 66
Supported USB/RS232 converters: NOTICE FTDI Prolific PL2303 Silicon Laboratories CP210× (Podporován od firmware verze 3.0.1) Apply The changes in settings will apply after pressing the button Fig 52: : USB configuration Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 67
Equipment ppp0 10.0.0.2 USB/RS232 ppp0 10.0.0.1 Settings in the router Settings in the router Mode: TCP server Mode: TCP client Server Address: - Server Address: 10.0.0.2 TCP Port: 2000 TCP Port: 2000 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Example of Startup script: When start the router, stop syslogd program and start syslogd with remote logging on address 192.168.2.115 and limited to 100 entries listing. Fig 56: : Example of Startup script Wieland Electric | BA000819 | 01/2012 (Rev. A)
Example of UP/Down script: After establishing or lost a PPP connection, the router sends an email with information about establishing or loss a PPP connection. Fig 58: : Example Up/Down script Wieland Electric | BA000819 | 01/2012 (Rev. A)
When using parameter Unit ID , hardware MAC address in configuration name will not be used. NOTICE Base URL, The firmware file name is from parameter type of router and bin extension. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Programming, compiling and upload of user modules are described in the application programming guide. Fig 61: : User modules Wieland Electric | BA000819 | 01/2012 (Rev. A)
PPP connection and the router creates a tunnel to the service center). Change the profile can then be done using a binary input, SMS or Web interface of the router. Wieland Electric | BA000819 | 01/2012 (Rev. A)
It is possible to solve this problem in the following steps: hand by selection communication rates 10 MB/s in property network cards, connect router over switch, start computer only after finalizing the start of the router. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Control SMS message doesn’t change the router configuration. If the router is swit- ched to offline mode by the SMS message the router will be in this mode up to next restart. This behaviour is the same for next all control SMS messages. Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 75
During cleaning of the router do not use aggressive chemicals, solvents and abrasive cleaners! Admission: Wieland Electric hereby declares that the router narrated in this user’s guide fits all basic demands of directive 1999/5/EC (R&TTE). Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 76
Fig 36: : GRE tunnel configuration ..................22 Fig 37: : Topology of GRE tunnel configuration ..............22 Fig 38: : L2TP tunnel configuration ..................22 Fig 39: : Topology of example L2TP tunnel configuration ........... 22 Wieland Electric | BA000819 | 01/2012 (Rev. A)
Page 77
Wieland Electric | BA000819 | 01/2012 (Rev. A)