Page 2
Disclaimer Information in this document is subject to change without notice and does not represent an obligation on the part of InHand Networks. This user manual may include intentional technical or typographical errors. Changes are periodically made to the manual to correct such errors, and these changes are not informed in new editions.
The design of the InRouter6x5 series fully incorporated the requirements of industrial users, adopted multi-level software detection mechanism, and supporting InHand Device Manager Cloud, which facilitates remote management, ensuring stable operation of devices, achieving intelligent management. Multiple VPN protocol ensures security in data transmission, preventing malicious access and tampering of data.
Important Safety Information This product is not intended for use in the following circumstances Area(s) where radio transmission equipment (such as cell phone) are not permitted. Hospitals, health care facilities and area(s) where cell phones are restricted by law. ...
We put each InRouter 6x5 cellular router in a box with standard accessories. Additionally, there’re optional accessories can be ordered. When you receive our package, please check carefully, and if there’re items missing or appearing to be damaged, please contact with your InHand Networks sales representative. Items in package include:...
1.3.2 Functions Support VPDN/APN, fast access to virtual private dial-up network (VPDN) provided by mobile operator, ensure high-security data transmission. Support CHAP/PAP/MS-CHAP/MS-CHAP V2 authorization Support Connection Detection, auto-recovery, auto-link, ensure reliable communication. Support On-demand connection, SMS Activity Wi-Fi (Optional) Wireless: 150Mbps 802.11b/g/n Work mode: AP/Client Authentication: open, WEP, WPA/WPA-2(Personal), PA/WPA-2(Enterprise) Dynamic IP Support DHCP, applied as Server/Client...
1.3.3 Environmental Limits Operating Temperature: -20 to 70° C (-4 to 158° F) Operating Humidity: 5 to 95% RH Storage Temperature: -40 to 85° C (-40 to 167° F) 1.3.4 Power Requirements Power Inputs: 1 terminal block, including power jack and serial. Input Voltage: 9~26 VDC 1.3.5 Physical Characteristics Housing: Steel, providing IP30 protection...
1.3.6 Advanced Industrial Characteristics Physical Characteristics: Shell: Metal, IP30 1.3.7 Device Management Software Device Manager: Centralized management solution for InHand Networks Devices 1.3.8 Warranty Warranty Period: 1 year (Optional service for 3 years) 8 / 65...
Page 13
1.4 Product Models The models are classified according to main differences on Network Type, VPN support and interfaces. Model IR6x5 Part Number IR6<X>5-<N>-<W>-<P>-<S> 0: ordinary router (Option VPN) 9: advanced VPN(IPSec/SSL/PPTP/L2TP/GRE) + X.509 CA support UE00: No wireless module (Network) PH09: Quad band HSPA+/HSPA/UMTS: 850/900/1900/2100MHz Quad band GSM: 850/900/1800/1900MHz VZ01: EVDO(800MHz/1900MHz.
Quick Installation Guide Typical Application ◆ Panel Layout ◆ Quick Connect to Internet ◆ Quick IPSec VPN Configuration ◆ Reset to Factory Defaults ◆ 2.1 Typical Application 10 / 65...
Page 15
InRouter 6x5 series can be used to connect your device (with RS232/485/Ethernet Interface) to Internet via GPRS/ 3G cellular network. Meanwhile, to ensure the security and access, InRouter 6x5 series support VPN, enabling remote access and secure data transmission through Internet.
2.2 Panel Layout The Reset bottom, SIM card slot and power supply are on above panel. Description of LED Legend: On-- Off-- Blink-- Power on Start to run firmware Begin dial to Internet Connect to internet Upgrading firmware Restore factory default 12 / 65...
Signal Status LED Description ----- Signal: 1-9 (poor signal level, router cannot work, please check the antenna and local signal level) ------ Signal: 10-19 (Router can work under this signal level) ------ Signal: 20-31 (Perfect signal level) 13 / 65...
Connect InRouter to power supply with the power supply cord in the package, observe whether the Power LED on the panel of InRouter goes on. If not, please contact InHand for technical support. You can start to configure IR6X1 after the Power LED turns on.
Page 19
Choose “Internet Protocol (TCP/IP)”, click “properties” button, ensure your PC can obtain IP and DNS address automatically. (Or you can set your PC in the subnet: 192.168.2.0/24, for example, set IP: 192.168.2.10, Net Mask: 255.255.255.0, Default Gateway: 192.168.2.1) Click “OK”, InRouter will allocate an IP address: 192.168.2.x, and a gateway: 192.168.2.1(the default address of IR6x5). After configure TCP/IP protocols, you can use ping command to check whether the link between PC and Router is built correctly.
Then the PC and InRouter are correctly connected. Else if it shows: The connection is not built, you need to check step by step starting from Section 2.3.4. 2.3.6 Start to configure your InRouter 6x5(Optional) After you have finished the former steps, you can configure the InRouter: 1) Open IE browser, input the default IP address of the Router: http://192.168.2.1, you can see the login page as below: Input “username”...
Click “Network”=>“LAN”, change the IP address to 192.168.1.254: 3) Click “Apply”, then you will see: Now the IP address of IR6x5 has been reset, and in order to enter the configuration page, you need to set your PC in the same subnet as InRouter, for example: 192.168.1.10/24 then input the updated IP address (192.168.1.254) in your IE Browser.
Page 22
Please check the APN, Dialup Number, Username and Password: Dialup Number, Username and Password are provided by local mobile operator. The following examples show parameters provided by China Mobile, Vodafone. Please contact with local operator for details. 1: China Mobile APN: CMNET Phone Number: *99# User Name:...
If you need to build a VPN tunnel to access to your remote PLC through Internet or you need to ensure security of the data transmission, here’s a quick configuration guide of IPSec for InRouter 6x5 Series. Connect PC with Router to enter router configuration interface, select “VPN” => “IPSec setting”: Enable NAT-Traversal (NATT): select enable.
Page 24
Basic Parameters: basic parameters of IPSec tunnel. Tunnel Name: name IPSec tunnel, the default is IPSec_tunnel_1. Destination Address: set to VPN server IP/domain, e.g.: the domain provided by GJJ is gjj-ovdp.3322.org. Startup Modes: select Auto Activated. Negotiation Mode: optional between Main Mode and Aggressive Mode. Generally, select Main Mode. IPSec Protocols: optional among ESP, AH.
Now you have successfully built a high-security IPSec tunnel. Here’s an example. We set an IPSec Tunnel from subnet: 192.168.220.0/24 to subnet: 192.168.123.0/24, when it succeeds, the screen will show: And the PC in IPSec client subnet can get access to the server’s subnet. Open command in your PC, then ping a PC in the server’s subnet: 2.5 Reset to Factory Defaults 2.5.1 Hardware Approach...
3) After a few seconds, the ERROR LED will turn off, now press RESET button again: 4) Then you will see ERROR and STATUS LED blink, which means reset to factory defaults succeed! Factory default settings: IP: 192.168.2.1 Net Mask: 255.255.255.0 Serial parameter: 19200-8-N-1 2.5.2 Web Approach 1) Login the web interface of IR6x5, select “System””Config Management”:...
Advanced Configuration Configuration on Web ◆ CLI Configuration ◆ 3.1 Configuration on Web InRouter must be correctly configured before use. This chapter will show you how to configure InRouer via Web interface. 3.1.1 Preparation First, connect your devices to IR6x5 with a cable or a HUB (switch), then set the IP of PC and IR6x5 in the same subnet, for example: Set PC IP to 192.168.2.50, net mask: 255.255.255.0, gateway (default IP of IR6x5: 192.168.2.1 ): Open IE browser, input the IP address of IR6x5: http://192.168.2.1...
Click “Login” to enter configure interface: 3.1.2 System System settings include the 9 parts: Basic Setup, Time, Serial Port, Admin Access, System Log, Config Management, Update, Reboot and Logout. (1) Basic Setup Parameters Name Description Default Example 24 / 65...
Page 29
Language Choose language of configuration web Chinese English Router Name Set name of InRouter Router My InRouter Host Name Name the device/PC linked with IR6x5 Router My InRouter (2) Time Name Description Default Router Time Display router time 2000-01-01 8:00:00 PC Time Display PC time (or the time of device linked with router)
Page 30
(4) Admin Access Name Description Default Username/Password Username Username for configuration web login Old Password To change the password, you need to input the old one 123456 New Password Input new password Confirm New Password Input the new password again Management HTTP/HTTPS/TELNET/SSHD/Console Enable...
Page 31
Name Description Default Log to Remote System Enable remote log server Disable IP address/Port (UDP) Set the IP and Port of remote log server Port: 514 Log to Console Enable remote log server Disable (6) Config Management Name Description Router Configuration Import/Backup configuration file Restore default configuration Click to reset IR6x5 (to enable RESET, you need to reboot IR6x5)
Click “update”, and then click “sure” to begin update, the window will show as below. Upgrade firmware succeed, and click “reboot” to restart IR6x5. (8) Reboot If you need to reboot system, please click ”System”=>”Reboot”, then click ”OK” to restart system. (9) Logout If you need to logout system, click “System”=>”Logout”, and then click “OK”.
Page 33
(1) Dialup Name Description Default Enable Enable PPP dialup Enable Time Schedule Set time for online and offline SHARED Enabled—device linked with Router Can access to internet. Enable Disable—device Can NOT access to internet via Router. Select local ISP, if not listed here, please select ”Customer” Customer Network Select Type Choose mobile network type...
Page 34
Static IP Enable Static IP if your SIM card can get static IP address Disable Connection Mode Optional Always Online, Always Online Redial Interval When Dial fails, InRouter will redial after the interval 30 seconds Show Advanced Options Enable configure advanced options Disabled Initial Commands Used for advanced parameters...
Page 35
Time Range 1 Set Time Range 1 9:00-12:00 Time Range 2 Set Time Range 2 14:00-18:00 Time Range 3 Set Time Range 3 0:00-0:00 Description Describe configuration Blank (2) WAN This page is to set the type of WAN port: Name Description Default...
Page 36
Net Mask Set Net Mask Blank Description Describe the settings Blank WAN—Dynamic Address (DHCP) Name Description Default Type Dynamic Address (DHCP) SHARED Enabled—the local device linked with Router can get access to Enable internet. Disable—the local device can’t get access to internet via Router. MAC Address Set MAC Address Set Max transmission unit, optional between default and manual...
Page 37
Name Description Default MAC Address The MAC address in LAN 00:10:A1:86:95:02 (Provided by InHand) , for manufactures IP Address Set IP Address in LAN 192.168.2.1 (If Changed, you need to input the new address for entering the configuration web) Net Mask Set Net Mask of LAN 255.255.255.0...
Page 38
SSID name. Mode Selection Support 802.11b/g/n modes, etc. 802.11b/g/n Channel Selection Select channel SSID Self-define SSID name Inhand Authentication Support Open, Shared Key, and Auto Select WEP, Open Method WPA-PSK, WPA, WPA2-PSK, WPA2, WPA/WPA2, WPAPSK/WPA2PSK. Encryption Scheme Based on authentication method, support NONE, WEP, NONE TKIP, AES, and TKIP/AES.
Page 39
Enable “WLAN Client” port Enable Enable Mode Support 802.11b/g/n modes, etc. Enable SSID Fill in the accessed SSID name. inhand Auth Mode Support Open, Shared, WPA-PSK , WPA2-PSK, Open Encryption Method Support NONE, WEP, TKIP, AES NONE Bridge Enable bridge, the Access Point will assign a local IP NONE address for your device.
Page 40
(7) DDNS (Dynamic DNS) Name Description Default Current Address Show the current IP address Blank Service Type Select DDNS Provider Disabled Name Description Default Service Type DynDNS - Dynamic http://www.dyndns.com/ Username Registered username for DDNS Password Registered password for DDNS Hostname Registered hostname for DDNS (8) Static Route...
Net Mask Set subnet Mask of destination 255.255.255.0 Gateway Set the gateway of destination Blank Interface Optional LAN/WAN port access to destination Blank Description Describe static route Blank 3.1.4 Service Service settings include DHCP Service, DNS Forwarding, VRRP and other related parameters. (1) DHCP Service Name Description...
Page 42
Host Set the name of IP address <=> DNS couples Blank Description Describe IP address <=> DNS couples Blank (3) VRRP Name Description Default VRRP-1 Select to enable VRRP Disable Group ID Select group id of routers (range 1-255) Priority Select priority for router (range 1—254) 10 (bigger number stands for higher priority) Advertisement Interval...
Page 43
Name Description Default Mode Only SMS Query SMS Interval Set how long to check SMS 24 hours Trust Phone List Add trust Cell Phone List Name Description Default Mode SMS+IP Mode Vendor Set Vendor Name Default Device ID Set Device ID Server Set Device Manager Server IP Port...
Page 44
(5) DTU Name Description Default Enable Click to enable DTU Disable DTU Protocol Set DTU protocol, Please see more in related Quick Guide Transparent Protocol Optional between TCP/UDP Mode Set DTU as client or server Client Frame Interval Set Frame Interval Serial Buffer Frames Set Serial Buffer Frames Multi-Server Policy...
Status Query Set Status Query SMS, and you can see status of router by send SMS (e.g.: show status). Reboot Let the router reboot SMS Access Control Default Policy Block or Accept control SMS from certain Phone Block Phone List Include phone numbers accepted or blocked to send SMS to router Notice: Before using this function, please make sure you have a SIM card in the InRouter that has SMS function.
Page 46
(3) Port Mapping Name Description Default Enable Click Enable Port Mapping Disable Source To fill with source IP 0.0.0.0/0 Service Port Fill the port of service 8080 Internal Address Set the internal IP for mapping Blank Internal Port Set the Port mapping to internal 8080 Click to enable log about port mapping.
Name Description Default Enable DMZ Click to Enable DMZ Disable DMZ Host Set host IP of DMZ Blank Source Address Range Set IP address with restrict IP access Blank (6) MAC-IP Bundling When firewall denies all access to the external network, only PC with MAC-IP Bundling can access external network Name Description Default...
Enable Click to enable Disable IP Address Set IP Address Blank Rate Set Rate 100 kbit/s Priority Set the Priority Medum Description Describe this configuration Blank 3.1.7 VPN This page introduces the parameters in InRouter615’s Web. (For IR615 only) (1) IPSec Settings To build an IPSec VPN Tunnel, you need to first set IPSec properties on this page, then go to IPSec Tunnels to add your VPN: IPSec Settings...
Page 49
Name Description Default Show Advanced Options Click to enable advanced options Disable Basic Parameters Tunnel Name To name the tunnel IPSec_tunnel_1 Destination Address Set the destination address of IPSec VPN Server Blank Startup Mode Auto Activate/Trigged by Data/Passive/Manually Activated Enable Negotiation Mode Optional: Main Mode or Main Mode...
Page 50
IPSec Mode Optional: Tunnel Mode or Transport Mode Tunnel Mode (Enable Advanced options) Tunnel Type Optional: Subnet——Subnet Mode Host——Host, Host——Subnet, Subnet——Host, Subnet——Subnet Local Subnet Set IPSec Local Protected Subnet 192.168.2.1 Local Subnet Net Mask Set IPSec Local Protected Subnet Net Mask 255.255.255.0 Remote Subnet Address Set IPSec Remote Protected Subnet...
Page 51
Tunnel Name Set GRE Tunnel Name tun0 Local Virtual IP Set Local Virtual IP 0.0.0.0 Remote Address Set Remote Address 0.0.0.0 Remote Virtual IP Set Remote Virtual IP 0.0.0.0 Remote Subnet Address Set Remote Subnet Address 0.0.0.0 Remote Subnet Net Mask Set Remote Subnet Net Mask 255.255.255.0 Set Tunnel Key...
Page 52
Set MTU parameters 1500 Set MRU parameters 1500 Enable Debug Mode Click Enable Debug Mode Disable Expert Options Set Expert Options Blank (5) PPTP Clients Name Description Default Enable Click Enable Enable Tunnel Name Set Tunnel Name PPTP_TUNNEL_1 PPTP Server Set PPTP Server Address Blank Username...
Page 53
Enable Debug Mode Click Enable Debug Mode Blank Expert Options For InHand R&D only Blank (6) OpenVPN Settings This page is to configure the OpenVPN settings, including Tunnel Name, Work Mode, Protocol, Port No. and other items. Name Description Tunnel name...
Page 54
CA needed: Client: root CA (ca.crt), public key (pub.crt), private key (pri.key) Server: root CA (ca.crt), public key (pub.crt), private key (pri.key) (5) X.509 Cert -----CA mode for host to host tunnel CA needed: Client: root CA (ca.crt), public key (pub.crt), private key (pri.key) Server: root CA (ca.crt), public key (pub.crt), private key (pri.key) (6) User+X.509 mode------username + password + CA certificate CA needed: Client: root CA (ca.crt), public key (pub.crt), private key (pri.key)
(2) Trace Route Name Description Default Host Destination for Trace Route Blank Max Hops Set Max Hops Time Out Set Time Out 3 sec Protocol Optional: ICMP/UDP Expert Options Advanced parameters Blank (3) Link Speed Test Test link speed via unload or download 3.1.9 Status Status contains System, Modem, WLAN, Network Connections, Route Table, Device List and Log.
Page 57
(2) Modem Status This page shows the status of Modem, including signal level. (3) WLAN (Only STA Series) This page show joinable access point. (4) Network Connections This page shows the network connections via WAN or LAN 53 / 65...
Page 58
Under certain situation when there’re problems that can’t be diagnosed at the moment, you’ll be asked to provide the diagnose log to InHand engineers, you may click “Download System Diagnosing Data” and then send the diagnose log to 54 / 65...
3.2 CLI Configuration This chapter will show you how to configure via CLI. 3.2.1 CLI Operation Step 1: Input telnet LAN IP to login CLI configuration. For example: Step 2: After connection is succeed, input username and password of IR6x5. The default username/password is adm/123456 Attention: password will not be showed.
Page 60
This screenshot is the config-view of IR700. Step 4: enter privileged mode, password is 123456 Step 5: Login to privileged mode successfully 56 / 65...
Step 6: Enter configured mode, then you could configure parameters you want to set up. 3.2.2 CLI command Configure username and password Enable serial function Configure serial port parameters, like baudrate, parity, stop bit and so on. Enable advanced options of dialup Configure ICMP server Configure LAN IP Enable DHCP function...
Page 62
Enable HTTP local access Enable HTTP remote access Check device ID After configuration, please don’t forget to commit and reboot router! 58 / 65...
InRouter is powered on, but can not access Internet through it? Please check: Whether the InRouter is inserted with a SIM card. Whether the SIM card is enabled with data service, whether the service of the SIM card is suspended because of an overdue charge.
Page 64
InRouter is powered on, but the Network LED is not on when connected to PC? When the PC and InRouter are connected with a network cable, please check whether a network crossover cable is used. Check if the network cable is in good condition. ...
Page 65
Support In case you have problems with the installation and use, please address them to us by e-mail: support@inhandnetworks.com. InHand Networks Headquarters US Office West Wing, 11 Floor, Qi Ming International Mansion 7926 Jones Branch Dr. Suite 110 Wang Jing Science Park, Chao Yang District...
Need help?
Do you have a question about the InRouter 6x5 Series and is the answer not in the manual?
Questions and answers