InHand IR615-S Series User Manual
  1. Manuals
  2. Brands
  3. InHand Manuals
  4. Network Router
  5. IR615-S Series
  6. User manual

InHand IR615-S Series User Manual

Industrial cellular router
Hide thumbs
Table of Contents

Advertisement

Quick Links

Industrial Cellular Router
IR615

User Manual

InHand Networks
www.inhandnetworks.com
Version: v1.1
October 2016

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the IR615-S Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for InHand IR615-S Series

Summary of Contents for InHand IR615-S Series

  • Page 1: User Manual

    Industrial Cellular Router IR615 User Manual InHand Networks www.inhandnetworks.com Version: v1.1 October 2016...

  • Page 2: Technical Support

    The content in this manual is subject to change without notice. This manual is only used as the guidance. InHand makes every effort to provide accurate information in this manual, but InHand does not guarantee that there is no error in the manual. All statements, information and recommendations in this manual do not constitute any expressed or implied warranty.
  • Page 3 Preface This user manual will guide you on installing and configuring InHand IR6XX-S industrial router. Audience This manual is for:  Network Planner  Field technical support  Network administrators Conventions This manual uses the following conventions: Conventions Indication <>...

  • Page 4: Table Of Contents

    1.1 Overview ............................ 1 1.2 Packing List ..........................1 1.2.1 Applicable to IR611-S series ........................ 1 1.2.2 Applicable to IR615-S series ........................ 2 1.3 Panel Introduction ........................2 1.3.1 Applicable to IR611-S Series ........................ 2 1.3.2 Applicable to IR6X5-S Series ........................ 3 1.
  • Page 5 3.1.9 Reboot ............................... 13 3.1.10 Logout ............................. 14 3. 2 Network ........................... 15 3.2.1 Dialup/Cellular Connection ....................... 15 3.2.2 WAN (Only Applicable to IR615-S Series) ..................16 3.2.3 Link Backup ............................19 3.2.4 LAN ..............................19 3.2.5 Switch of WLAN Mode ........................20 3.2.6 WLAN Client (AP Mode) ........................
  • Page 6 3.4.5 Virtual IP Mapping..........................32 3.4.6 DMZ ..............................32 3.4.7 MAC-IP Binding ..........................33 3.5 QoS ............................33 3.5.1 Bandwidth Control ..........................33 3.5.2 IP Bandwidth Limit ..........................34 3.6 VPN ............................34 3.6.1 IPSec Settings ............................ 35 3.6.2 IPSec Tunnels ............................. 36 3.6.3 GRE Tunnels ............................

  • Page 7: Contents

    Reliable VPN technology secures sensitive data. The IR6XX-S also utilizes remote management tools such as a CLI, a web interface and InHand Device Manager Cloud platform for batch configuration and monitoring. IR6XX-S series is ideal for large-scale Internet of Things (IoT) applications including kiosks, vending machines, medical equipment and industrial control systems.

  • Page 8: Preface

    Hanger mounting accessory To fix device 1.2.2 Applicable to IR615-S series Standard Accessories Accessories Quantity Description IR615-S IR615-S series industrial router DIN rail DIN35 rail Power Terminal 7PIN 3.81mm industrial terminal Cable 1. 5m cable Product Information CD and printed Quick Guide...

  • Page 9: Applicable To Ir6X5-S Series

    1.3.2 Applicable to IR6X5-S Series IR6XX-S series has a variety of panel appearances, but all of the installation methods are the same. The specific panel condition should be subject to the real object. 1. 4 Introductions to Status LED 1.4.1 Applicable to IR611-S series POWER STATUS WARN...

  • Page 10: Applicable To Ir615-S Series

    Signal strength 20-31 (signal strong) WLAN LED and description: WLAN Green LED Description Enable WLAN Disable WLAN Blinking Reset Succeed 1.4.2 Applicable to IR615-S series POWER STATUS WARN ERROR Description (Red) (Green) (Yellow) (Red)

  • Page 11: Installation Of Device

    Please be sure there is 3G/4G network coverage and there is no shield on site. 220V AC or 9~26VDC shall be provided on site. First installation shall be done under direction of the engineer recognized by InHand Networks.  1 PC...

  • Page 12: Installation Of Sim/Uim Card

    2.5 Installation of Power Supply Upon installation of the antenna, connect the device to 9~26V DC power and see if the Power LED on the panel of the device is on. If not, please contact technical support of InHand Networks immediately.

  • Page 13: Login Router

    2.6 Login Router Upon installation of hardware, be sure the Ethernet card has been mounted in the supervisory PC prior to logging in the page of Web settings of the router. I. Automatic Acquisition of IP Address (Recommended) Please set the supervisory computer to "automatic acquisition of IP address" and "automatic acquisition of DNS server address"...

  • Page 14: Web Configuration

    III. Web Configuration Prior to use, the device shall be effectively configured. This chapter will introduce how to configure your router via Web. 3. 1 System The system configuration process involves ten steps, including basic setup, system time, serial port, admin access, system Log, configuration management, task schedule, update, reboot and logout.

  • Page 15: Serial Port

    so as to provide multiple applications based on synced time. From the navigation tree, select System >> Time, then enter the “Time” webpage, as shown below. Click <Sync Time> to synchronize the time of the gateway with the system time of the host.

  • Page 16: Admin Access

    3.1.4 Admin Access Admin services include HTTP, HTTPS, TELNET and console. HTTP HTTP (Hypertext Transfer Protocol) is used for transferring web pages on Internet. After enabling HTTP service on device, users can log on via HTTP and access and control the device using a web browser.

  • Page 17: System Log

    Amin functions Service Port Service port of HTTP/HTTPS/TELNET/Console 80/443/23 Enable - Allow local LAN to administrate the router with Local Access corresponding service (e.g. HTTP) Enable Disable - Local LAN cannot administrate the router with corresponding service (e.g. HTTP) Enable - Allow remote host to administrate the router Remote with corresponding service (e.g.

  • Page 18: Configuration Management

    Kiwi Syslog Daemon, a necessity on the host. Kiwi Syslog Daemon is free log server software for Windows. It can receive, record and display logs from host (such as gateway, exchange board and Unix host). After downloading and installing Kiwi Syslog Daemon, it must be configured through the menus “File >> Setup >> Input >> UDP. From the navigation tree, select System >>...

  • Page 19: Task Schedule

    Validity and order of imported configurations should be ensured. The good configs will later be serially executed in order after system reboot. If the configuration files didn’t be arranged according to effective order, the system won’t enter the desired state. In order not to affect the operation of the current system, when performing an import configuration and restore default configuration, users need to restart the device to make the new configuration to take effect.

  • Page 20: Logout

    be lost after reboot. To reboot the system, please click the System>>Reboot, then click <OK>. 3.1.10 Logout To logout, click System >> Logout, and then click <OK>.

  • Page 21: Network

    3. 2 Network Network settings include Dialup/Cellular, WAN (only for IR615-S series), Link Backup, LAN, WLAN Mode Switch, WLAN, DNS, DDNS and Static Routes. 3.2.1 Dialup/Cellular Connection SIM card dial out through dial access to achieve the wireless network connection function of router.

  • Page 22: Wan (Only Applicable To Ir615-S Series)

    0:00-0:00 Description Set description content 3.2.2 WAN (Only Applicable to IR615-S Series) WAN supports three types of wired access including static IP, dynamic address (DHCP) and ADSL (PPPoE) dialing. DHCP adopts Client/Server communication mode. Client sends configuration request to Server which feeds back corresponding configuration information, including distributed IP address to the Client to achieve the dynamic configuration of IP address and other information.
  • Page 23 Router cannot access to the Internet via Router. Default route Enable default route Enable 00:18:05:08:07:3D (provided MAC Address MAC Address of the device InHand Networks), provided for device manufacturer IP Address Set IP address of WAN 192.168.1.29 255. 255. 255.
  • Page 24 Default route Enable default route Enable 00:18:05:08:07:3D (provided MAC Address MAC Address of the device InHand Networks), provided for device manufacturer Max. transmission unit, default/manual default (1500) settings Table 3-2-2-3 ADSL Dialing (PPPoE) Parameters of WAN WAN - ADSL Dialing (PPPoE) Function description: Set ADSL dialing parameters.

  • Page 25: Link Backup

    Enable IP header Click to enable IP header compression Disable compression Use Peer DNS Click to enable use peer DNS Enable Link detection interval Set link detection interval 55 s Link detection Max. Retries Set link detection max. retries Enable Debug Click to enable debug Disable Expert Option...

  • Page 26: Switch Of Wlan Mode

    Function description: LAN is the gateway address of router. Parameters Description Default MAC Address MAC Address of the device LAN 00:18:05:08:15:77 (provided by InHand Networks), provided for device manufacturer IP Address Set IP address of LAN 192.168.2.1 (New IP address of LAN needs to be entered after modification...

  • Page 27: Wlan Client (Sta Mode)

    Table 3-2-7 Parameters of WLAN Client WLAN Client Function description: Support WiFi function and access to wireless LAN access as client. Parameters Description Default Mode Support many modes including 802.11b/g/n 802.11b/g/n SSID Name of the SSID to be connected inHand...

  • Page 28: Dns

    Authentication method Keep consistent with the access point to Open type be connected Encryption Keep consistent with the access point to NONE be connected 3.2.8 DNS DNA (Domain Name System) is a DDB used in TCP/IP application programs, providing switch between domain name and IP address.

  • Page 29: Static Route

    the application of this function, a domain name shall be applied for and registered on a proper website such as www. 3322. org. IR611-S &IR615-S DDNS service types include QDNS (3322)-Dynamic, QDNS(3322)-Static, DynDNS-Dynamic, DynDNS-Static, DynDNS-Custom and No-IP.com. To set DDNS, click the "Network >> Dynamic Domain Name" menu in the navigation tree, then enter “Dynamic Domain Name”...

  • Page 30: Service

    Static Route Function description: Add/delete additional static rote of router. Generally, it's unnecessary for users to set it. Parameters Description Default Destination Set IP address of the destination Address 255. 255. Subnet Mask Set subnet mask of the destination 255. 0 Gateway Set the gateway of the destination Select LAN/CELLULAR/WAN (only applicable to IR615-S...

  • Page 31: Dns Relay

    automatically, then such service must be activated. Static designation of DHCH allocation could help certain host to obtain specified IP address. Parameters Description Default Enable DHCP Enable DHCP service and dynamically allocate IP Enable address IP Pool Starting Address Set starting IP address of dynamic allocation 192.

  • Page 32: Vrrp: Virtual Router Redundancy Protocol

    When enabling DHCP, the DHCP relay is also enabled automatically. Relay cannot be disabled without disabling DHCP. 3.3.3 VRRP: Virtual Router Redundancy Protocol VRRP (Virtual Router Redundancy Protocol) adds a set of routers that can undertake gateway function into a backup group to form a virtual router. The election mechanism of VRRP will decide which router to undertake the forwarding task and the host in LAN is only required to configure the default gateway for the virtual router.

  • Page 33: Device Manager

    router with highest priority becomes the gateway for the transmission task. From navigation tree, select "Network >>VRRP" menu, then enter “VRRP” page. Table 3-3-3 VRRP Parameters VRRP Function description: Configure parameters of VRRP. Parameters Description Default Enable VRRP-I Click to enable VRRP function Disable Group ID Select ID of router group (range: 1-255)

  • Page 34: Dtu

    Set name of equipment supplier Default Equipment ID Set ID of router 611341234 Server Set address of device manager server to which c.inhand.com.cn the router will access Port Set default server port 20003 Login Retry Times Set login retry times...

  • Page 35: Sms

    Max. Reconnect Set the max. reconnect interval 180 s Interval DTU ID Set DTU ID. Source address Set the Source IP. Report DTU ID interval Set report of DTU ID interval Multi-Server Set server address and port 3.3.6 SMS SMS permits message-based reboot and manual dialing. Configure Permit to Phone Number and click <Apply and Save>.

  • Page 36: Basic Setup

    3.4.1 Basic Setup From the navigation tree, select Firewall >> Basic Setup, then enter the “Basic Setup” page. Table 3-4-1 Firewall - Basic Setup Parameters Basic Setup of Firewall Function description: Set basic firewall rules. Parameters Description Default Default Filter Policy Select accept/block Accept Filter PING detection from Internet...

  • Page 37: Filtering

    Click to enable log and the log about access control will be Disable recorded in the system. Description Convenient for recording parameters of access control 3.4.3 Filtering Configuration of mapping rules is generally used to disable access to network settings. From navigation tree, select "Firewall>>Filtering"...

  • Page 38: Virtual Ip Mapping

    External address Set external address/tunnel name of port mapping (optional) Description For recording significance of each port mapping rule 3.4.5 Virtual IP Mapping Both router and the IP address of the host of intranet can correspond with one virtual IP. Without changing IP allocation of intranet, the extranet can access to the host of intranet via virtual IP.

  • Page 39: Mac-Ip Binding

    The IR6x1's management port should never be mapped to the device port by this function. 3.4.7 MAC-IP Binding If the default process in the basic setting of firewall is disabled, only hosts specified in MAC-IP can have an access to outer net. From the navigation tree, select Firewall >>...

  • Page 40: Ip Bandwidth Limit

    100000kbit/s Select CELLULAR/WAN (WAN port is only Control port of flow CELLULAR applicable to IR615-S series) 3.6 VPN VPN is for building a private dedicated network on a public network via the Internet. 'Virtuality" is a logical network. Two Basic Features of VPN: ...

  • Page 41: Ipsec Settings

    meanwhile can be used by unauthorized VPN users so that what VPN users obtained is only a logistic private network. This public network is regarded as VPN Backbone. Build a credible and secure link by connecting remote users, company branches, partners to the network of the headquarters via VPN so as to realize secure transmission of data.

  • Page 42: Ipsec Tunnels

    dangers such as password and bank account information stolen and tampered, user identity imitated, suffering from malicious network attack, etc. After disposal of IPSec on the network, it can protect data transmission and reduce risk of information disclosure. IPSec is a group of open network security protocol made by IETF, which can ensure the security of data transmission between two parties on the Internet via data origin authentication, data encryption, data integrity and anti-replay function on the IP level.
  • Page 43 Parameters Description Default Click to enable advanced Disable (open advanced Show Advanced Options options options after enabling) Basic parameters Tunnel Name User defines tunnel name IPSec_tunnel_1 Set destination IP address or Destination Address 0. 0. 0. 0 domain name Select Auto Activated/Triggered Startup Modes...

  • Page 44: Gre Tunnels

    username User defines XATUTH XATUTH password password MODECFG Click to enable MODECFG Disable Phase II Parameters IPSec Strategy Multiple strategies available 3DES-MD5-96 IPSec Life Cycle Set IPSec life cycle 3600 s Perfect Forward Secrecy Select disable/Group 1/Group Disable (this needs to match (PFS) (Advanced Option) 2/Group 5 the server)
  • Page 45 Along with the extensive application of IPv4, to have messages from some network layer protocol transmitted on IPv4 network, those messages could by encapsulated by GRE to solve the transmission problems between different networks. In following circumstances GRE tunnel transmission is applied: ...

  • Page 46: L2Tp Client

    Enable Click to enable GRE Enable Name User defines name of GRE tunnel tun0 Local visual IP Set local virtual IP 0. 0. 0. 0 Destination Address Set remote IP address 0. 0. 0. 0 Peer visual IP Set peer virtual IP 0.
  • Page 47 Enterprise Enterprise Branch Headquarter L2TP Tunnel Dialling User L2TP Tunnel Mobile Office Staff (L2TP Dialling Software) From navigation tree, select VPN>>L2TP Client, enter "L2TP Client" and click <add>. Table 3-6-4 Parameters of L2TP Client 3 L2TP Client Function description: Configure parameters of L2TP client. Parameters Description Default...

  • Page 48: Pptp Client

    Expert Option (not Set expert option, not recommended recommended) 3.6.5 PPTP Client From navigation tree, select VPN>>PPTP Client, enter "PPTP Client" and click <add>. Table 3-6-5 Parameters of PPTP Client 4 PPTP Client Function description: Configure parameters of PPTP client. Parameters Description Default...
  • Page 49 SSLv3/TLSv1 protocol are massively used. In OpenVPN, if a user needs to access to a remote virtual address (address family matching virtual network card), then OS will send the data packet (TUN mode) or data frame (TAP mode) to the visual network card through routing mechanism. Upon the reception, service program will receive and process those data and send them out through outer net by SOCKET, owing to which, the remote service program will receive those data and carry out processing, then send them to the virtual network card, then application software receive and accomplish a complete...

  • Page 50: Openvpn Advanced

    Expert Option (not Set expert option, not recommended recommended) 3.6.7 OpenVPN Advanced From navigation tree, select "VPN>>OpenVPN Advanced" and enter "OpenVPN Advanced" interface. Table 3-6-7 Configuration Parameters of OpenVPN Advanced OpenVPN Advanced Function description: Configure parameters of OpenVPN Advanced. Parameters Description Default Enable Client-to-Client...

  • Page 51: Tools

    cannot be changed an enrollment Server URL Set server URL Common Name Set common name FQDN Set FQDN Unit 1 Set unit 1 Unit 2 Set unit 2 Domain Set domain Serial Number Set serial number Challenge Set challenge Challenge Confirm Challenge confirm Protect Key Set protect key...

  • Page 52: Link Speed Test

    “Traceroute” page. Table 3-7-2 Traceroute Parameters Traceroute Function description: Applied for network routing failures detection. Parameters Description Default Address of the destination host which to Host be detected is required. Max. Hops Set the max. hops for traceroute Timeout Set the timeout of traceroute Protocol ICMP/UDP Advanced parameter for traceroute is...

  • Page 53: Network Connections

    3.8.3 Network Connections From navigation tree, select Status >> Network Connections, then enter “Network Connections” page to see the connections status. This page shows the basis information of dialup and LAN. Dialup includes connection type, IP address, netmask, gateway, DNS, MTU, status and connection time.

  • Page 54: Appendix A Faq

    Appendix A FAQ 1. InRouter is powered on, but can't access Internet through it? Please first check:  Whether the InRouter is inserted with a SIM card.  Whether the SIM card is enabled with data service, whether the service of the SIM card is suspended because of an overdue charge.
  • Page 55 server, but the center can't connect to your PC under InRouter? Please make sure the firewall of your computer is disabled. 7. After InRouter establishes VPN with the VPN server, your PC under InRouter can't connect to the server ping? Please make sure “Shared Connection”...

  • Page 56: Appendix B Instruction Of Command Line

    settings. Appendix B Instruction of Command Line 1Help Command Help command can be obtained after entering help or “?” into console, “?” can be entered at any time during the process of command input to obtain the current command or help from command parameters, and command or parameters can be automatically complemented in case of only command or command parameter.
  • Page 57 inputting will be given in case of no entering. [Example] Enter exit in ordinary user view: enable 123456 Switchover to super users and the password 123456. 2.2 Disable [Command] Disable [Function] Exit the privileged user level. [View] Super user view, configure view [Parameter] No [Example] Enter in super user view:...
  • Page 58 : display the current factory type of equipment Serial number : display the current factory serial number of equipment Description : www.inhand.com.cn Current version : display the current version of equipment Current version of Bootloader: display the current version of equipment 3.
  • Page 59 Example: 00:00:38 up 0 min, load average: 0.00, 0.00, 0.00 3. 3 show clock [Command] Show clock [Function] Display the system time of router [View] All views [Parameter] No [Example] Enter: show clock Display the following information: For example Sat Jan 1 00:01:28 UTC 2000 3.
  • Page 60 [Function] Display the log of router system and display the latest 100 logs in default. [View] All views [Parameter] Lines <n> limits the log numbers displayed, wherein, n indicates the latest n logs in case that it is positive integer and indicates the earliest n logs in case that it is negative integer and indicates all the logs in case that it is 0.
  • Page 61 Enter: show startup-config Display the starting configuration of system. 3. 8 Show running-config [Command] Show running-config [Function] Display the operational configuration of router [View] Super user view and configuration view [Parameter] No [Example] Enter: show startup-config Display the operational configuration of system. 4 Check Network Status Command 4.
  • Page 62 Display system ip status 4. 3 Show route [Command] Show route [Function] Display the routing list of router [View] All views [Parameter] No [Example] enter: show route Display the routing list of system 4. 4 Show arp [Command] Show arp [Function] Display the ARP list of router [View] All views [Parameter] No...
  • Page 63 [Example] Enter: ping www.g.cn Test www. g. cn and display the testing results 5. 2 Telnet [Command] Telnet <hostname> [<port>] [source <ip>] [Function] Telnet logs in the appointed mainframe [View] All views [Parameter] <hostname> in need of the address or domain name of mainframe logged in. <port>telnet port source <ip>...
  • Page 64 management. Some setting command can support no and default, wherein, no indicates the setting of canceling some parameter and default indicates the recovery of default setting of some parameter. 6. 1 Configure [Command] Configure terminal [Function] Switchover to configuration view and input the equipment at the terminal end. [View] Super user view [Parameter] No [Example]...
  • Page 65 [Command] Clock timezone <timezone><n> default clock timezone [Function] Set the time zone information of the router. [View] Configure view. [Parameter] <timezone> timezone name, 3 capitalized English letters <n> time zone deviation value, -12~+12 [Example]  Enter in configured view: clock timezone CST -8 The time zone of IG601is east eighth area and the name is CST (China's standard time).
  • Page 66 [Function] Set the customer end of Internet time server [View] Configure view. [Parameter] <hostname> address or domain name of mainframe of time server [Example]  Enter in configured view: ntp server pool.ntp.org Set the address of Internet time server pool. ntp. org. ...
  • Page 67 The config. is imported. 7 System Management Command 7. 1 Reboot [Command] Reboot [Function] System restarts. [View] Super user view and configuration view [Parameter] No [Example] Enter in super user view: reboot System restarts. 7. 2 Enable username [Command] Enable password [<name>] [Function] Modify the username of super user.
  • Page 68 Enter password according to the hint. 7. 4 Username [Command] Username <name> [password [<password>]] no username <name> default username [Function] Set user name, password [View] Configure view. [Parameter] No [Example]  Enter in configured view: username abc password 123 Add an ordinary user, the name is abc and the password is 123. ...
  • Page 69 FCC warning:    Any Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

Table of Contents

Save PDF