TeleWell SF300 User Manual
  1. Manuals
  2. Brands
  3. TeleWell Manuals
  4. Network Router
  5. SF300
  6. User manual

TeleWell SF300 User Manual

Industrial 4g lte cellular router
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
TeleWell SF300/SF301
Industrial 4G LTE Cellular Router

User Manual

Version 1.1

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SF300 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for TeleWell SF300

Summary of Contents for TeleWell SF300

  • Page 1: User Manual

    TeleWell SF300/SF301 Industrial 4G LTE Cellular Router User Manual Version 1.1...
  • Page 2 The information in this document has been checked carefully and is believed to be correct as of the date of publication. TeleWell Oy reserves the right to make changes in the product of specification, or both, presented in this publication at any time without notice.TeleWell Oys assumes no responsibility or liability arising from the specificat ion listed herein.TeleWell Oys make no representations that the...

  • Page 3: Table Of Contents

    6.2.1 LTE Configuration ......................6.2.2 LTE Ping Health ......................... WAN > Dual SIM ........................ WAN > Ethernet ......................... 6.4.1 WAN Ethernet Configuration ..................... 6.4.2 Ethernet Ping Health ......................WAN > IPv6 DNS ....................... TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 4 10.6 Virtual COM > Modbus RTU over TCP ................10.7 Modbus Gateway ....................... 10.8 Alarm Configuration ......................10.9 OpenVPN Configuration ..................... 10.9.1 OpenVPN Server Mode ....................10.9.2 OpenVPN Client Mode ....................TeleWell SF300/SFSF301 INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 5 10.9.3 OpenVPN Net-to-Net ......................94 10.9.4 OpenVPN 1:1 NAT ....................... 98 10.9.5 OpenVPN with third-party server ..................100 10.9.6 Install OpenVPN Access Server on Docker ..............102 10.9.7 Install Pritunl OpenVPN server on Docker ...............107 10.10 VRRP Topology ........................ 114 10.11 TR069 Server (GenieACS Installation) ................114...

  • Page 6: Introduction

    FDD/TDD LTE, WCDMA and GSM for a wide range of applications and vertical machine-to-machine (M2M) markets. To enhance reliability, SF300/SF301 series are equipped with dual SIM that support failover and roaming over to ensure uninterrupted connectivity for mission-critical cellular communications.

  • Page 7: Specifications

    OpenVPN, IPSec (3DES, AES128, AES196, 2 x SIM Card Slots AES256, MD5, SHA-1, SHA256) 1 x LAN 10/100 Mbps Ethernet port (Model: SF300) Wireless Connectivity: 3 x LAN 10/100 Mbps Ethernet ports (Model: SF301) Two SIM for failover/ roaming over/ back up...

  • Page 8: Hardware Panel Layout

    Industrial 4G LTE Cellular Router with GPS (1 x WAN + 1 x LAN + GPS) SF301-G Industrial 4G LTE Cellular Router with GPS (1 x WAN + 3 x LAN + GPS) [Front Panel View] Model: SF300 Model: SF301 TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 9: Front Panel View

    [Front Panel View] Model: SF300-G Model: SF301-G TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 10: Rear View

    [Top and Bottom View] [Rear View] TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 11 [Left Side View] [Right Side View] TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 12: Hardware Installation

    The WAN interface is a standard RJ45 connector. Description Function WAN TX+ 10/100 Mbps WAN, TX+ Pin WAN TX- 10/100 Mbps WAN, TX- Pin WAN RX+ 10/100 Mbps WAN, RX+ Pin WAN RX- 10/100 Mbps WAN, RX- Pin TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 13: Pin Description

    The Green LED indicates Link/ACT, and the Yellow LED indicates Speed. Status Description Connection is down Green (Link/ACT) Blink Data is being transmitted Connection is up 10 Mbps Mode Yellow (Speed) 100 Mbps Mode TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 14: Serial Port Com1 (Console)

    (1) Before inserting or removing the SIM card, ensure that the power has been turned off and the power connector has been removed from mobile router. (2) Press the button with a paper clip or suitable tool to eject the SIM card from the drawer. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 15: Reset Button

    The router requires a DC power supply in the range of 10~32V DC. Please ensure all components are earthed to a common ground before connecting any wiring. Power (10~32VDC) FRAME GROUND Negative Positive TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 16: Grounding The Router

    To prevent the noise and surge effect, please connect the router to the site ground wire by the ground screw before turning on the router. 2.9 Pin Assignments DI1/DI2 / Alarm Contacts / COM2 (RS-232) / COM3 (RS-485) TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 17: Connecting I/O Ports

    The unit has 2 terminals on the terminal block for the Alarm Contacts. Photo relay output with current capacity of 500mA/50VDC maximum. Description Alarm - Alarm negative signal output Alarm + Alarm positive signal output TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 18: Serial Port Com2 (Rs-232)

    COM2 Serial Port, TXD Signal (OUTPUT) COM2 Serial Port, Signal Ground 2.12 Serial Port COM3 (RS-485) The serial port COM3 is a RS-485 interface. Description COM3 Serial Port, Data- (B) wire COM3 Serial Port, Data+ (A) wire TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 19: Dip Switch

    Switch 3 enables or disables the termination resistor Pull High (510 ohm) / SW 1 (Pull Low) SW 2 (Pull High) Pull Low (510 ohm) Bias Resistor Enable Disable (Default) Termination Resistor (120 ohm) SW 3 Enable Disable (Default) TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 20: Configuration Via Web Browser

    After changing the User Name and Password, strongly recommend you to save them because another time when you login, the User Name and Password have to be used the new one you changed. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 21: Status

    Show the phone number of the current SIM or Backup SIM. Band Show current connected Band. Channel ID Show current connected channel ID. IPv4 Address LTE obtain IPv4 address. IPv4 Mask LTE IPv4 mask. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 22: Status > Gps

    For those GPS enabled router, you can see Location on the right-top banner of web interface when connecting your GPS function. After clicking this banner, a map will automatically display the current information of map according to location of router. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 23: Configuration > System

    Configure the time and date of router and NTP server. COM Ports Configure the COM Ports. Logging Configure the Logging. Alarm Configure the Alarm. Ethernet Ports Configure the Ethernet Ports. Modbus Configure the Modbus. Static Route Configure the Static Route. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 24: System > Time And Date

    II. Manual Set up the information of time and date, including year, month, date, and hour, minute, and second. Set up your local time zone. Click Apply to submit your configuration changes. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 25: System > Com Ports

    The COM 1 and COM 2 are RS232 interface, and the COM 3 is RS485 interface. (1) The default is Disable. You can click edit button to configure your settings. (2) Set up the configuration and Virtual COM. After configuring, click Save to confirm your settings. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 26 We suggest to enable at least 1 COM port as your console port and the default console port is COM 1. (4) The interface shows the setting information and click Apply to configure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 27: System > Logging

    This section allows Mobile Router to record the data and display the status of data. 5.3.1 Logging > Logging (1) Logging section provides you to control all logging records. (2) Users need to select Apply to confirm your settings. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 28: Logging > Log

    Show the date of log for each logging data. Group Show the group of software functions. Module Show the module of group of software functions. Message Show the messages for each logging data. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 29: System > Alarm

    (2) DI trigger "High" means High Trigger. (SW is On to trigger;SW is OFF in Normal state.) (3) DI trigger "Low" means Low Trigger. (SW is OFF to trigger;SW is ON in Normal state.) TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 30 Create your groups and edit your information of groups. Write your messages and the messages limit 150 English characters. (1) How to create your group Name a group Show your group name from the list of group. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 31 After submitting your setting, the interface shows the information that you edited. (3) How to View SMS Click to view the information, including the state, phone and date and time. Click to review your all messages. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 32: System > Ethernet Ports

    This section allows you to configure the Ethernet Ports. System > Ethernet Ports Item Description Status Show the connectivity status of LAN and WAN. Select from Auto, 100M Full, 100M Half, 10M Full, 10M Half Configurations and Disable. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 33: System > Modbus

    5.7 System > Static Route This section allows you to configure the Static Route. A static route is a pre-determined path that network information must follow to reach a specific host or network. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 34 (2) Input the IP address of destination/gateway from IPv4 and IPv6 at the same time. The interface is shown in Apply fail to notice. You should select either IPv4 or IPv6 as the address of destination/gateway. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 35 Show the status of destination from the setting section. Gateway Show the status of gateway from the setting section. Interface Show the status of interface from the setting section. Protocol Show the status of protocol from the setting section. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 36: Configuration > Wan

    LTE Only: The priority is only LTE. ETH Only: The priority is only Ethernet. 6.2 WAN > LTE Config 6.2.1 LTE Configuration You can set up the LTE Configuration and LTE Ping Health. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 37: Lte Ping Health

    Connect to 2G network only. 6.2.2 LTE Ping Health For LTE connection, you can enable “LTE Ping Health” to keep alive to avoid base station kicking out the device in idle time. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 38 Input the address of IPv4 Host 2. IPv6 Host 1 Input the address of IPv6 Host 1. IPv6 Host 2 Input the address of IPv6 Host 2. Hint Show the usage descriptions. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 39: Wan > Dual Sim

    SIM PUK: If you has typed wrong SIM PIN code and retried more than 3 times, the SIM Card will become the blocked mode. In this case, you have to type PUK and new SIM code to unlock SIM Card. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 40 Change SIM PIN ： If you want to change SIM PIN code, you can click Change button and type old SIM PIN code and new SIM PIN code. Please aware not to exceed the retry number (PIN remaining number and PUN remaining number). TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 41 Already Used Data (MB) Display current used throughput. Max Data Limitation (MB) Configure max throughput. Monthly Reset Set up the reset time during the month. Now Time Show the current time of system. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 42: Wan > Ethernet

    When selecting “DHCP Client”, you can set up DNS Server Configuration. For IPv4 DNS Server, it provides three options to set up and each option has provided with “From ISP”, “User Defined” and “None” to configure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 43 When you select User Defined, the IPv4 DNS server IP is input by user. When you select PPPoE Client, the interface shows the item of configuration to fill in your User Name and Password. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 44 Fill in the IP Mask. Gateway Address Fill in Gateway Address. DNS Server Configuration IPv4 DNS Server #1 IPv4 DNS Server #2 The IPv4 DNS server IP is input by user. IPv4 DNS Server #3 TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 45: Ethernet Ping Health

    In addition, you can check which WAN is actually using from “Status” page. The interface will be shown check mark (✓ symbol) on the connection title. For IPv6 address, the status will be displayed on LAN Etherent Interface when IPv6 is using as WAN connection. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 46: Wan > Ipv6 Dns

    This section allows you to set up IPv6 DNS Server Configuration. For IPv6 DNS Server, it provides three options to set up and each option has provided with “From ISP”, “User Defined” and “None” to configure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 47 When you select From ISP, the IPv6 DNS server IP is IPv6 DNS Server #2 obtained from ISP. IPv6 DNS Server #3 When you select User Defined, the IPv6 DNS server IP is input by user. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 48: Configuration > Lan

    This section allows you to configure LAN IPv4 and LAN IPv6. 7.1 LAN > IPv4 Set up your IP Address and IP Mask. Also, fill in the information of DHCP Server Configuration. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 49: Lan > Ipv6

    IPv6 prefix information in router advertisements periodically Assign Setup and in response to router solicitations. DHCPv6 clients. Stateful: The mobile router uses IPv6 stateful auto configuration. The LAN IPv6 clients can obtain IPv6 addresses through DHCPv6. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 50: Configuration > Service

    SNMP, IP Filter, MAC Filter, URL Filter, VRRP and MQTT. 8.1 Service > Configuration OpenVPN 8.1.1 Edit OpenVPN Connection (1) This section allows you to configure the OpenVPN parameters. The default mode is Disable. Click button to edit OpenVPN Connection. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 51 (2) From Setting tab, you can set up the connection of OpenVPN. From Log tab, the interface will be shown the status of connection to make you follow the suitation whenever is successful or fail connection. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 52 Select Disable or Enable to compress the data stream. The VPN Compression default is Disable. Select from two different kinds of authentication ways: Certificate or pkcs#12 Certificate. Authentication The pkcs#12 option is only available on the VPN client mode. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 53: Set Up Openvpn Client

    OpenVPN server. The private key file is for OpenVPN client, which could downloaded from OpenVPN server. The PKCS#12 file is for OpenVPN client, which could be downloaded from OpenVPN server. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 54: Set Up Openvpn Server

    When selecting the On option of Route Client Networks, the OpenVPN server will route the client traffic or not. You should fill in the client IP and netmask when this option is enabled. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 55: Set Up Openvpn Custom

    Internet and save the document into your server or PC. After importing the file, the interface will show button to click for displaying the information and to click for downloading the file. For third-party OpenVPN configuration, suggest from http://www.vpngate.net/en/ TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 56: Service > Configuration Ipsec

    8.2.1 IPSec > General setting For General setting, you can set up IKE, Encryption and Authentication. The General setting for the local and remote side should be the same when using Net-to-Net application. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 57 Select from sha1 (default), md5 or sha256. DH Group Select from modp1536 (default), modp768, modp1024, modp2048, modp3072, modp4096, modp6144 or modp8192. Authentication Auth Type Select from psk or rsa. Auth Scret The password is for psk authentication type. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 58: Ipsec > Connections

    8.2.2 IPSec > Connections For Connections tab, the web UI provides the overview for each connection. Click button to edit IPSec connection and set up the local and remote side. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 59 Remote Fill in he granted remote IP. If no limitation, keep blank. Host Fill in he granted remote subnet. If no limitation, keep blank. Subnet The connection ID of IPSec Remote side. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 60: Ipsec > The Setting Of X.509 Certificates

    8.2.4 IPSec > Net-to-Net Configuration In this case, the IPSec VPN tunnel uses the two LAN side subnet clouds and makes them communicate each other. There are two part settings for the Mobile Router IPSec feature. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 61: General Setting

    The first part is the general setting, it provides the IPSec basic setting and authentication configuration. The psk (Pre-shared key) is as an authentication option to simplify the progress. The general setting for the local and remote side should be used the same setting. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 62 In this case, the IDs for the local and remote side are named as @local and @remote respectively. Note: The ID should be started with @ symbol. The above settings will make the traffic between 192.168.1.0/24 and 10.0.0.0/24. They can be forwarded by IPSec tunnel. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 63 CN field for the both sides. For the Mobile Router IPSec certificate generation, it generates the local and remote side certificates with @local.ipsec and @remote.ipsec. (The certificate information can be queried the information button.) TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 64 1. Root CA (Local side) -> Import Remote CA (Remote side) 2. Remote Cert (Local side) -> Import Local Cert (Remote side) 3. Remote Key (Local side) -> Import Local Key (Remote side) TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 65 For Connection setting, the mapping of connection IDs like the following table. Certificate IPSec local side IPSec remote side Local @local.ipsec @remote.ipsec Remote @remote.ipsec @local.ipsec Local Side Remote Side TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 66: Service > Configuration Port Forwarding

    8.3 Service > Configuration Port Forwarding This section allows you to set up Port Forwarding and click edit button to configure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 67: Service > Dynamic Dns

    Fill in the beginning of private destination port. Destination Port End Fill in the end of private destination port. 8.4 Service > Dynamic DNS This section allows you to set up Dynamic DNS. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 68 Register password. Service provider freedns.afraid.org Host Name Register hostname, e.g. tester.mooo.com Username Register username. Password Register password. Service provider dyndns.org Host Name Register hostname, e.g. tester.dyns.com Username Register username. Password Register password. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 69: Service > Dmz

    Select from Disable or Enable. The default is Disable. Host IP Address Fill in your Host IP Address. 8.6 Service > SNMP 8.6.1 SNMP configuration This section allows you to set the SNMP configuration. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 70: Snmp V3 User Configuration

    For SNMP version 3, you need to register authentication and allow a receiver that confirm the packet was not modified in transit. There are three options to set up SNMP v3 configuration. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 71: Snmp V3 User Configuration

    Authentication Password Fill in your authentication password. Authentication Protocol Select from MD5 or SHA. Privacy Password Fill in your privacy password. Privacy Protocol Select from DES or AES. Access Select from Read-Only or Read-Write. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 72: Snmp Trap Configuration

    This section allows you to set up the SNMP trap configuration when you select the SNMP trap function from Alarm output of system for your router. With SNMP trap setting, you can know the status of remote device. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 73: Service > Tr069

    ACS attempts to communicate with the CPE connecting. Connection Request Fill in the connection request password to authenticate the ACS if Password the ACS attempts to communicate with the CPE connecting. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 74: Service > Ip Filter

    8.8 Service > IP Filter This section allows you to configure IP Filter. After clicking button, you can edit your IP protocol, source/port and destination/port. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 75 (4) For Source Port, there are two types to input your source port that depends on your requirement, including single port (e.g.1234) or giving a range of ports (e.g.1234:5678). Note: Setting up a range of source ports, please use : colon symbol to mark your ranged ports. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 76: Service > Mac Filter

    MAC Address Fill in your MAC address. Note: Setting up MAC address, please use : colon symbol (e.g. xx : xx : xx: xx) or – hyphen symbol to mark (e.g. xx- xx–xx-xx). TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 77: Service > Url Filter

    Service > URL Filter Item Description Mode Select from Disable or Enable. The default is Disable. Filter Select from Key or Full. The default is Key. Key/Full Fill in your Key/Full information. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 78: Service > Vrrp

    By default, the router does not allow anonymous to read/write the MQTT topic or channel. Thus, you need to create the account with username and password for MQTT client in the web UI. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 79 Fill in the password of manage user. ACLs Allow to specify what topic should be limited. Select the users and identify their authority to read or write the User MQTT topic/channel. Topic Name the topic of MQTT message. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 80 Additionally, we also allow the subscribers sub1 and sub3 to read the critical topic. Thus, only the sub1 and sub3 can receive it when pub1 sending the message. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 81: Management

    Show the current software version. Software MCSV Show the current software MCSV. Hardware MCSV Show the current hardware MCSV. Modem Firmware Show the current firmware version. Version System Uptime Show the current system uptime. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 82: Administration

    This section supports you to export or import the configuration file. (1) Click Backup the running configurations button to export your current configurations. Click Select the configuration file to restore button to import the configuration file. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 83: Load Factory

    This section supports you to load the factory default configuration and restart the device immediately. You can click the Load Factory and Restart button. Restart This section allows you to click Restart button and the router will restart immediately. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 84: Configuration Applications

    Ethernet. The reason is Ethernet that is low price and stable. However, in case Ethernet is unplug or not able to access Internet (check by ping), the router would route network packages through LTE network. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 85 (2) WAN Priority > LTE Only: In this mode, the router only routes network packages through LTE. (3) WAN Priority > ETH Only: In this mode, the router only routes network packages through Ethernet. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 86: Lan > Ipv4/Ipv6 Dual Stack

    Since IPv6 is global IP, there is no NAT between WAN site and LAN site. One device only needs one global IPv6. There is IPv6 firewall protection in the router by default. Only the IPv6 packages come from LAN site device and got reply back. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 87 The router automatically detects IPv6 environment and query IP. After the IP is obtained successfully, it will distribute to LAN site hosts. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 88: Mqtt Broker

    For example, we set the publisher pub1 to write the critical topic. Additionally, we also the subscribers sub1 and sub3 can read the critical topic. Thus, when pub1 is sending the message only the sub1, the sub3 can receive it. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 89: Virtual Com > Remote Management

    You can use the web UI to set up the serial settings and open the Virtual COM server feature for COM2. First, you need to navigate to the System -> COM ports. The web UI shows the following picture. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 90 (2) For the Virtual COM, you need to change the mode to Server and specify the Protocol, Port to reach the remote management feature. (Note: In this case, we use the TCP and port 6000 to be the Virtual COM server settings.) TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 91 VCOM to be the Virtual COM software.) (5) And set up the virtual serial port by 192.168.1.1 (The default is LAN IP), TCP client and Remote Port 6000 as the following picture. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 92: Virtual Com > Remote Alarm

    Client mode. Also, you need to specify the remote host and the port. The web UI of router shows the below picture. After the above setup, the warning center will receive the data when the alarm device sent the data/message. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 93: Virtual Com > Modbus Rtu Over Tcp

    You need to configure the RS-485(COM3) like the remote management (serial settings, Virtual COM settings). After above setup, you can use the Modbus software which supported the Modbus RTU over TCP to control the Modbus sensor/device. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 94: Modbus Gateway

    System -> COM ports web UI and set up this feature in the System -> Modbus web UI. After above setup, the Modbus software can use the Modbus TCP protocol to control the Modbus sensor/device. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 95: Alarm Configuration

    In case of DO is selected, please make sure your DO is connected to your alarm device. In case of SNMP trap is selected, please make sure you enable SNMP trap (Service→SNMP) and fill our server IP. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 96 TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 97: Openvpn Configuration

    To generate the OpenVPN client files, you need to type the password to create it. The password will be used in the OpenVPN client when the client use PKCS#12 to authenticate the VPN connection. After the generation, the web UI shows the below picture. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 98: Openvpn Client Mode

    When the files are imported, the web UI is as shown in the right-bottom picture. Same as OpenVPN server part, you can use the info/download buttons to get the information of file or download the file to PC. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 99: Openvpn Net-To-Net

    You can use the OpenVPN VPN tunnel to make the PC1 and PC2 communicate each other. (1) OpenVPN server configuration For the OpenVPN server side, the basic setting is as shown in below figure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 100 User 1 certificate information. You can check it by clicking the information button, the web UI will display the window as the below figure. information user certificate is as shown in the subject field. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 101 When all settings set up properly, the status will change from Idle to Running. When OpenVPN tunnel is created, the status shows Connected and the information for IP address and the time. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 102 (3) OpenVPN net-to-net result We use the screenshot from PC2 to verify the VPN tunnel by ping command. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 103: Openvpn 1:1 Nat

    For the OpenVPN server side, we fill up the Network be 192.168.10.0 and Netmask 255.255.255.0. The setting will make the router convert the OpenVPN server side LAN network from 192.168.1.0/24 to 192.168.10.0/24 when the VPN traffic is coming. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 104 For the OpenVPN client side, same as server side but we fill up the Network as 192.168.11.0. The setting will make router convert the OpenVPN client side LAN network from 192.168.1.0/24 to 192.168.11.0/24 when the VPN traffic is coming. The PC2 ping result: TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 105: Openvpn With Third-Party Server

    Additionally, use the OpenVPN custom import button to import it. The result is as the below figure. If the .ovpn configuration file is correct, the web UI will show Apply OK. If the third-party OpenVPN server is reachable, the VPN tunnel will be established. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 106 IP address and the time. In this moment, the PC1 can visit the http://www.vpngate.net and the web UI should indicate the PC1 in the Japan at now as the below figure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 107: Install Openvpn Access Server On Docker

    -p /openvpn-as sudo docker create --name=openvpn-as \ -v /openvpn-as:/config \ -e TZ="Asia/Taipei" \ -e INTERFACE=enp3s0 \ --net=host --privileged linuxserver/openvpn- as sudo start openvpn-as Check the OpenVPN Access Server by visiting https://<server_ip_or_domain>:943 TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 108 Setup OpenVPN Access Server for Mobile Router The admin page is https://<server_ip_or_domain>:943/admin The default administrator username and password is admin/password. Login page: After logged, please change the user authentication type to Local like the following figure. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 109 And switch to the User Permission page to create the user for Mobile Router. (In this case, we use the test/test to be the example.) Also check the Access From all other VPN clients to make the Mobile Router could be reachable. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 110 Setup Mobile Router OpenVPN client Use the user test/test to login https://<server_ip_or_domain>:943 Please make sure to change the type from Connect to Login. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 111 Upload the .ovpn configuration to Mobile Router OpenVPN custom mode, and input the username and password. When the VPN tunnel established, the Mobile Router can be managed/accessed by the other VPN clients. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...

  • Page 112: Install Pritunl Openvpn Server On Docker

    (2) Copy and paste the following content to docker- compose.yml. version: '2' services: pritunl: image: jippi/pritunl volumes: - pritunl:/var/lib/pritunl - mongo:/var/lib/mongodb privileged: true network_mode: "host" ports: - "1194:1194/tcp" - "1194:1194/udp" - "80:80/tcp" - "443:443/tcp" volumes: mongo: pritunl: TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 113 The default username/password is pritunl/pritunl. Login Page: After logged, the server will ask you to do the initial setup. You can change the username and the password setting in this page. Initial Setup: TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 114 (In this document, we use theTeleWell to be the organization example.) When the organization be created, the Users page should be like the following figure. Then add the OpenVPN user by click the Add User button. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 115 In this OpenVPN server, the PIN must contain only digits. Note: In this document, we use the test/123456 OpenVPN user to be the example. OpenVPN server setup Please navigate to the Server page to setup the OpenVPN server. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 116 And click the Add Server button to create the OpenVPN server. Note: Please click the Advanced tab and make sure the Inter-Client Communication be checked When the OpenVPN server created, the Servers page should like the following figure.
  • Page 117 And click Attach Organization button to setup the OpenVPN server. Start the OpenVPN server by click Start Server button. TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 118 Mobile Router setup First, please navigate to the Users page and download the user configuration file and extract it. Note: In this document, you should get theTeleWell_test_router.ovpn file. And visit the Mobile Router OpenVPN custom page then import the .ovpn file. Fill up the username/password which be setup in OpenVPN user setup part.

  • Page 119: Vrrp Topology

    10.10 VRRP Topology Basic VRRP Topology Base on this topology and VRRP Parameter settings, Router A and Router B will offer a virtual router service with virtual IP = 192.168.1.200 for the client. 10.11 TR069 Server (GenieACS Installation) Server OS: Ubuntu 14.04 on Virtualbox Installation: 1) Login ubuntu 2) Change to root by 'su -' and enter your root password.
  • Page 120 ./configure make && make install 6) Install ruby cd /opt wget http://cache.ruby-lang.org/pub/ruby/2.4/ruby- 2.4.1.tar.gz tar xvzf uby-2.4.1.tar.gz cd ruby-2.4.1 ./configure make && make install ruby -v ruby 2.4.1p111 (2017-03-22 revision 58053) [i686-linux] cd /opt gem install rails --no-ri --no-rdoc gem install bundle --no-ri --no-rdoc 7) Install node.js cd /opt wget http://nodejs.org/dist/v8.2.1/node-...
  • Page 121 ACS stimulate connection will fail. 11) Install genieACS-Gui git clone https://github.com/zaidka/genieacs-gui cd genieacs-gui bundle gem install json bundle update rm -f db/*.sqlite3 rake db:create RAILS_ENV=development rake db:migrate cd /opt cd genieacs-gui/config cp index_parameters-sample.yml index_parameters.yml TELEWELL SF300/SF301INDUSTRIAL 4G LTE ROUTER - UM V1.1...
  • Page 122 cp parameter_renderers-sample.yml parameter_renderers.yml cp parameters_edit-sample.yml parameters_edit.yml cp roles- sample.yml roles.yml cp summary_parameters-sample.yml summary_parameters.yml cp users-sample.yml users.yml cp graphs-sample.json.erb graphs.json.erb GenieACS startup script: #!/bin/sh GENIE_PATH=/opt/genieacs/bin GENIE_GUI_PATH=/opt/genieacs-gui echo "start mongod." pidof mongod if [ $? != 0 ]; then /opt/mongodb-linux-i686-3.3.3/bin/mongod --dbpath /data/db --journal --storageEngine=mmapv1 --fork --syslog echo "start North Bound/RESTful Interface service."...
  • Page 123 2) GenieACS Operation Input http://GenieACS server IP:3000 on browser url bar and Enter. Press Home tab to refresh Online devices status. 2.1) Login Username and Password are admin/admin.
  • Page 124 3) Device information Press Devices tab Move mouse to line end of your device, the Show link show up. Press Show link, the device information show up.
  • Page 125 4) Access parameters Scroll up/down on Device parameters list, the Refresh Edit link show up at line end of parameter. For Readable parameter Readable and Writable parameter 4.1) Get parameter value Press on the Refresh link,the Pending tasks window will popup on right top to ask you to allow or Cancel this action.
  • Page 126 Press Commit to get this parameter value. Note: If the GenieACS can reach the device, the parameter value will be updated immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. Note: To update the whole tree, refresh the root parameter (InternetGatewayDevice.).
  • Page 127 Input new value and press OK. The Pending tasks window will pop up to ask you to allow or Cancel this action.
  • Page 128 Press Commit to set this parameter value. Note: If the GenieACS can reach the device, the parameter value will be set immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 5) Reboot device Press Reboot link.
  • Page 129 The Pending tasks window will popup to ask you to allow or Cancel this action. Press Commit to reboot device. Note: If the GenieACS can reach the device, the device will reboot immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS. 6) Reset to default Similar to Reboot device except pressing on Factory reset...
  • Page 130 The link will redirect to Files tab Press File: browse button, select the firmware, and then press Upload button. The firmware will be added to Listing files as below. 7.2) Upgrade Move mouse to the Push file>> link, the upgrade firmware name will pop up as below picture.
  • Page 131 Move mouse to the upgrade firmware name and press it. The Pending tasks window will pop up to ask you to allow or Cancel this action. Press Commit, then firmware upgrade started. Note: If the GenieACS can reach the device, the firmware upgrade will be started immediately. Otherwise, this request will be queued on Task queue list until next time device connect to GenieACS.

This manual is also suitable for:

Sf301

Table of Contents