NavigateWorx NR500 Series User Manual

NavigateWorx NR500 Series User Manual

Industrial cellular vpn router

Advertisement

Industrial Cellular VPN Router
NR500 Standard User Manual
Guangzhou Navigateworx Technologies Co, Ltd
www.navigateworx.com

Advertisement

Table of Contents
loading

Summary of Contents for NavigateWorx NR500 Series

  • Page 1 Industrial Cellular VPN Router NR500 Standard User Manual Guangzhou Navigateworx Technologies Co, Ltd www.navigateworx.com...
  • Page 2 Information provided in this manual is intended to be accurate and reliable. However, Navigateworx Technologies assumes no responsibility for its use, or for any infringements on the rights of third parties that may result from its use.
  • Page 3 Operation in the presence of other electronic equipment may cause interference if equipment is • incorrectly protected. Follow recommendations for installation from equipment manufacturers. Declaration of Conformity NR500 Series products are in conformity with the essential requirements and other relevant provisions of the CE and RoHS. Page 2 / 78...
  • Page 4: Table Of Contents

    Industrial Cellular VPN Router NR500 Series User Manual Table of Contents Chapter 1. Product Overview ..........................5 Overview ..............................5 Features and Benefits .......................... 5 General Specifications ........................6 Mechanical Specifications ........................ 8 Package Checklist ..........................9 Order Information ..........................11 Chapter 2.
  • Page 5 Industrial Cellular VPN Router NR500 Series User Manual VPN ................................57 4.7.1 OpenVPN .............................. 57 4.7.2 IPSec ............................... 62 4.7.3 GRE ................................65 Maintenance ............................66 4.8.1 Upgrade ..............................66 4.8.2 System ..............................67 4.8.3 Configuration ............................71 4.8.4 Debug Tools ............................71 Appendix A -Glossary ...............................
  • Page 6: Chapter 1. Product Overview

    This router enables wireless data connectivity over public and private LTE cellular networks at 4G speeds. NR500 series router has dual SIM backup, 2 or 4 LAN ports, 1 port could be changed to Ethernet WAN connection (for fixed internet fail over to cellular). An optional 802.11 b/g/n Wi-Fi interface access point and client operations supports connectivity to IP applications in a variety of different connection scenarios.
  • Page 7: General Specifications

    Industrial Cellular VPN Router NR500 Series User Manual Easy to use and easy maintenance User-friendly web interface for human interaction • Easy configuration for deployment • Support 3rd Party remote management cloud • 1.3 General Specifications Cellular Interface Standards: FDD-LTE/TDD-LTE, WCDMA/UMTS/HSPA/HSPA+/EDGE/GPRS, •...
  • Page 8 Industrial Cellular VPN Router NR500 Series User Manual DI/DO Interface Type: 2 x DI + 2 x DO • Connector: terminal block • Isolation: 3KVDC or 2KVrms • Absolute maximum VDC: 36VDC • Absolute maximum ADC: 100mA • Other Interfaces 1×...
  • Page 9: Mechanical Specifications

    Industrial Cellular VPN Router NR500 Series User Manual 1.4 Mechanical Specifications Dimension: 104mm x 104mm x 38mm (excluding antenna) Page 8 / 78...
  • Page 10: Package Checklist

    Industrial Cellular VPN Router NR500 Series User Manual 1.5 Package Checklist NR500 series Router includes the parts shown in below, please verify your components. NOTE: if any of the below items is missing or damaged, please contact your sales representative. Included equipment 1 x Naviageteworx NR500 series Industrial Cellular VPN router (Wi-Fi optional) •...
  • Page 11 Industrial Cellular VPN Router NR500 Series User Manual 1 x Quick Start Guide • Optional Accessories (sold separately) 3G/4G cellular antenna • Stubby antenna Magnet antenna RP-SMA Wi-Fi antenna • Stubby antenna Magnet antenna 35mm Din-rail mounting kit • Page 10 / 78...
  • Page 12: Order Information

    Industrial Cellular VPN Router NR500 Series User Manual AC/DC power adapter (12VDC, 1.5A; EU/US/UK/AU plug optional) • 1.6 Order Information Model Part Number Description 4G LTE, Dual SIMs, 2 x Eth, 1 x RS232 (3 PIN), 1 x RS485, A502433...
  • Page 13: Chapter 2. Installation

    Industrial Cellular VPN Router NR500 Series User Manual Chapter 2. Installation 2.1 Product Overview Front Panel • ① Wi-Fi Antenna ② MAIN Cellular Antenna ③ LED Indicator ④ Serial port & DIDO ⑤ Ethernet port ⑥ Wi-Fi Antenna ⑦ AUX Cellular Antenna Left Side Panel •...
  • Page 14 Industrial Cellular VPN Router NR500 Series User Manual Page 13 / 78...
  • Page 15: Led Indicators

    Industrial Cellular VPN Router NR500 Series User Manual 2.2 LED Indicators Name Color Status Description Operating normally Slow Blinking (500ms duration) Fast Blinking System initialing Green Power is off Register to Highest priority network service (depend on Radio, e.g. Radio support LTE as Highest priority network).
  • Page 16: Ethernet Port Indicator

    Industrial Cellular VPN Router NR500 Series User Manual 2.3 Ethernet Port Indicator Name Status Description Connection is established Blinking Data is being transmitted Link indicator Connection is not established NOTE:There are two LED indicators for each Ethernet port. Due to the chipset design NR500 router would only light up the green one(Link indicator) on left side, the right LED is Off without meaning.
  • Page 17: Reset Button

    Industrial Cellular VPN Router NR500 Series User Manual Power Input • Description V+ (Red line) Positive V- (Yellow line) Negative PGND 2.5 Reset Button Function Action Press the RST button within 3s under operation status Reboot Press the RST button between 3s to 10s, all LED blink few times then Factory Reset reboot automatically.
  • Page 18: Install Antenna

    Industrial Cellular VPN Router NR500 Series User Manual 2.7 Install Antenna Connect the cellular antenna to the MAIN and AUX connector on the unit. • NOTE: NR500 router supports dual antennas with MAIN and AUX connectors. MAIN connector is for data receiving and transmission.
  • Page 19: Din-Rail Mounting

    Industrial Cellular VPN Router NR500 Series User Manual 2.8 DIN-rail Mounting Use 4 pcs of M3x6 flat head phillips screws to fix the DIN-rail to the router. Insert the upper lip of the DIN-rail into the DIN-rail mounting kit. Press the router towards the DIN-rail until it snaps into place.
  • Page 20: Power Supply Installation

    Industrial Cellular VPN Router NR500 Series User Manual 2.10 Power Supply Installation Remove the pluggable connector from the unit, then loosen the screws for the locking flanges as needed. Connect the wires of the power supply to the terminals. 2.11 Power On The Router Connect one end of the Ethernet cable to the LAN port on the unit and the other end to a LAN port on a PC.
  • Page 21: Chapter 3. Access To Web Page

    Industrial Cellular VPN Router NR500 Series User Manual Chapter 3. Access to Web page 3.1 PC Configuration NR500 router contains a DHCP server which will automatically assign an IP address to your PC, however in some cases the user may need to change the network settings on their PC to accept the IP address from the NR500.
  • Page 22: Factory Default Settings

    Industrial Cellular VPN Router NR500 Series User Manual Set to a static IP address • click "Use the following IP address" to assign a static IP manually within the same subnet of the router. NOTE:Default gateway and DNS server is not necessary if PC not routing all traffic go through NR500 router.
  • Page 23: Login To Web Page

    Industrial Cellular VPN Router NR500 Series User Manual 3.3 Login to Web Page 1. Start a Web browser on your PC (Chrome and IE are recommended), enter 192.168.5.1 into the address bar of the web browser. 2. Then use the default username and password(admin/admin), to log in to the router.
  • Page 24: Chapter 4. Web Configuration

    Industrial Cellular VPN Router NR500 Series User Manual Chapter 4. Web Configuration 4.1 Web Interface The NR500 router Web interface is divided into two sections. In the left pane is the main navigation menu. On the right is the content area for each page.
  • Page 25 Industrial Cellular VPN Router NR500 Series User Manual Reboot: reset the router within power disconnect. • Logout: logout to web authorization page. • Save: save the configuration on current page. • Apply: apply the changes on current page immediately. •...
  • Page 26: Overview

    Industrial Cellular VPN Router NR500 Series User Manual 4.2 Overview 4.2.1 Status You can view the system information of the router on this page. System Information Device Module • Displays the model name of router System Uptime • Displays the duration the system has been up in hours, minutes and seconds.
  • Page 27 Industrial Cellular VPN Router NR500 Series User Manual Active Link Information Link Type • Current interface for internet access. IP Address • Displays the IP address assigned to this interface. Netmask • Displays the subnet mask of this interface. Gateway •...
  • Page 28: Syslog

    Industrial Cellular VPN Router NR500 Series User Manual 4.2.2 Syslog Syslog Information Download Diagnosis • Download the Diagnosis file for analysis. Download Syslog • Download the complete syslog since last reboot. Clear • Clear the current page syslog printing. Refresh •...
  • Page 29: Link Management

    Industrial Cellular VPN Router NR500 Series User Manual Link Management This section shows you the setup of link management. 4.3.1 Connection Manager Connection Manager->Status Type • Displays the connection interface Status • Displays the connection status of this interface. IP Address •...
  • Page 30 Industrial Cellular VPN Router NR500 Series User Manual Connection Manager->Connection Priority • Displays the priority list of default routing selection. Enable • Displays the connection enable status. Connection Type • Displays the name of this interface. Description • Displays the description of this connection.
  • Page 31 Industrial Cellular VPN Router NR500 Series User Manual Interval • The duration of each ICMP detection in seconds. Retry Interval • The interval in seconds between each ping if no packets have been received. Timeout • Enter timeout for received ping reply to determine the ICMP detection failure.
  • Page 32: Cellular

    Industrial Cellular VPN Router NR500 Series User Manual 4.3.2 Cellular NR500 Router main function is connecting to Internet by cellular modem. Cellular->Status Modem • Displays the model of the modem used by this WWAN interface. Registration • Displays the registration status of SIM card.
  • Page 33 Industrial Cellular VPN Router NR500 Series User Manual Displays the current PLMN ID, including MCC, MNC, LAC and Cell ID. Local Area Code • Displays the location area code of the SIM card. Cell ID • Displays the Cell ID of the SIM card location.
  • Page 34 Industrial Cellular VPN Router NR500 Series User Manual SIM Card Settings SIM Card • Displays the current SIM card settings. Auto APN • Check this box enable auto checking the Access Point Name provided by the carrier. Authentication Type •...
  • Page 35: Ethernet

    Industrial Cellular VPN Router NR500 Series User Manual 4.3.3 Ethernet The same instructions apply to settings for all Ethernet interfaces. Ethernet->Status Ethernet Port Information • Displays the port physical connected states. Interface Information • Displays the name and MAC address of Ethernet interface.
  • Page 36 Industrial Cellular VPN Router NR500 Series User Manual Ethernet->Port Settings Port • Indicate the current configurate port. Interface • Select belong subnet for current configurate port. Ethernet->WAN Connection Type • If you select DHCP Client, external DHCP server will assign an IP address to this unit.
  • Page 37 Industrial Cellular VPN Router NR500 Series User Manual Ethernet->WAN->Static IP or PPPoE IP Address • Static address for this interface. It must be on the same subnet as the gateway. Netmask • Will be assigned by the gateway. Gateway •...
  • Page 38 Industrial Cellular VPN Router NR500 Series User Manual Ethernet->LAN Interface • Select the configurate LAN port of this subnet. IP Address • Enter LAN IP address for this interface. Netmask • Enter subnet mask for this subnet. • Maximum Transmission Unit, maximum packet size allowed to be transmitted. Should be left as default value of 1500 in most cases.
  • Page 39 Industrial Cellular VPN Router NR500 Series User Manual Relay Server • Enter the IP address of DHCP relay server. IP Pool Start • External LAN devices connected to this unit will be assigned IP address in this range when DHCP is enabled.
  • Page 40: Wi-Fi

    Industrial Cellular VPN Router NR500 Series User Manual 4.3.4 Wi-Fi NR500 router could only be set to function as either a Wi-Fi Client or a Wi-Fi Access Point, but not both simultaneously. Select Wi-Fi (Access Point) from the main navigation menu to Wi-Fi (default as Access Point) page, which contains tabs for configuration of the Wi-Fi Access Point interface.
  • Page 41 Industrial Cellular VPN Router NR500 Series User Manual Wi-Fi AP Wi-Fi AP settings page as below. Wi-Fi->Wi-Fi AP Enable • Check this box will enable the Wireless interface. SSID • The SSID is the name of the wireless local network. Devices connecting to the Nr500 router WiFi access will identify the Access Point by this SSID.
  • Page 42 Industrial Cellular VPN Router NR500 Series User Manual Channel • Select the Wi-Fi channel the module will transmit on. If there are other Wi-Fi devices in the area the NR500 router should be set to a different channel than the other access points. Channels available for selection depend on the selected Band.
  • Page 43 Industrial Cellular VPN Router NR500 Series User Manual Wi-Fi Client Wi-Fi Client settings page as below. Page 42 / 78...
  • Page 44 Industrial Cellular VPN Router NR500 Series User Manual Wi-Fi->Wi-Fi Client Enable • Check this box will enable the Wireless interface. Connect to Hidden SSID • Check this box will enable connect to hidden SSID. SSID • The SSID of external access point.
  • Page 45: Industrial Interface

    Industrial Cellular VPN Router NR500 Series User Manual 4.4 Industrial Interface The Industrial page contains tabs for making configuration settings for Serial RS232 and RS485, Digital input and output. Select Serial & Digital IO from the main navigation menu to navigate to this page.
  • Page 46 Industrial Cellular VPN Router NR500 Series User Manual Serial->Connection Enable • Displays status of current serial function. Port • Displays the serial type of COM port. Baud Rate • Displays the serial port baud rate. Data Bits • Displays the serial port Data Bits.
  • Page 47 Industrial Cellular VPN Router NR500 Series User Manual Serial->Connection Settings Baud Rate • Select the serial port baud rate. Supported values are 2400, 4800, 9600, 19200, 38400, 57600, or 115200. Data Bits • Select the values from 5, 6, 7 or 8.
  • Page 48 Industrial Cellular VPN Router NR500 Series User Manual Below window displays different settings when you select UDP on Protocol. Serial->Connection Settings Local IP Address • Enter the IP Address of the local endpoint. Local Port • The port number assigned to the serial IP port on which communications will take place.
  • Page 49: Digital Io

    Industrial Cellular VPN Router NR500 Series User Manual 4.4.2 Digital IO This section allows you to set the Digital IO parameters. The Digital input could be used for triggering alarm, and Digital output could be used for controlling the slave device by digital signal.
  • Page 50 Industrial Cellular VPN Router NR500 Series User Manual Digital IO->Digital Output Enable • Check this box to enable digital output function. Alarm Source • Select from “Digital Input1” or “Digital Input2”, Digital output triggers the related action when there is alarm comes from Digital Input.
  • Page 51: Network

    Industrial Cellular VPN Router NR500 Series User Manual 4.5 Network 4.5.1 Firewall Firewall rules are security rule-sets to implement control over users, applications or network objects in an organization. Using the firewall rule, you can create blanket or specialized traffic transit rules based on the requirement.
  • Page 52 Industrial Cellular VPN Router NR500 Series User Manual Firewall->ACL Description • Add a description for this rule. Protocol • Any: Any protocol number. TCP: The TCP protocol. UDP: The UDP protocol. TCP & DUP: both TCP and UDP protocol ICMP: The ICMP protocol.
  • Page 53: Route

    Industrial Cellular VPN Router NR500 Series User Manual Local Port • Sets the LAN port number range used when forwarding to the destination IP address. Firewall->DMZ Enable • Check this box to enable DMZ function. Remote Address • Optionally restricts DMZ access to only the specified WAN IP address.
  • Page 54: Vrrp

    Industrial Cellular VPN Router NR500 Series User Manual Displays the gateway of this interface. This is used for routing packets to remote networks. Interface • Displays the outbound interface of this route. Route->Static Route Settings Description • Enter the description of current static route rule.
  • Page 55 Industrial Cellular VPN Router NR500 Series User Manual Network->VRRP Enable • Check this box will enable VRRP. Interface • Select the interface of Virtual Router. Virtual Router ID • User-defined Virtual Router ID. Range: 1-255. Authentication Type • Select the authentication type for VRRP.
  • Page 56: Applications

    Industrial Cellular VPN Router NR500 Series User Manual 4.6 Applications 4.6.1 DDNS DDNS is a system that allows the domain name data of a computer with a varying (dynamic) IP addresses held in a name server to be updated in real time in order to make it possible to establish connections to that machine without the need to track the actual IP addresses at all times.
  • Page 57: Schedule Reboot

    Industrial Cellular VPN Router NR500 Series User Manual Check IP Path • Check IP Path for custom type. Enable SSL • Enable SSL for connection. Username • Enter the user name used when setting up the account. Used to login to the Dynamic DNS service.
  • Page 58: Vpn

    Industrial Cellular VPN Router NR500 Series User Manual 4.7 VPN 4.7.1 OpenVPN OpenVPN is an open source virtual private network (VPN) product that offers a simplified security framework, modular network design, and cross-platform portability. You could review all OpenVPN connection as below.
  • Page 59 Industrial Cellular VPN Router NR500 Series User Manual VPN->OpenVPN Enable • Check this box to enable OpenVPN tunnel. Description • Enter a description for this OpenVPN tunnel. Mode • Select from “Client” or “P2P”. Protocol • Select from “UDP” or “TCP Client”.
  • Page 60 Industrial Cellular VPN Router NR500 Series User Manual Authentication Method • Select from "X.509", "Pre-shared", "Password", and "X.509 And Password". Encryption Type • Select from "BF-CBC", "DE-CBC", "DES-EDE3-CBC", "AES-128-CBC", "AES-192-CBC" and "AES-256-CBC". Username • Enter the username for authentication when selection from “Password” or “X.509 And Password”.
  • Page 61 Industrial Cellular VPN Router NR500 Series User Manual VPN->OpenVPN->Advanced Settings Enable NAT • Check this box to enable NAT, the source IP of host behind router will be disguised before accessing the remote end. Enable PKCS#12 • It is an exchange of digital certificate encryption standard, used to describe personal identity information.
  • Page 62 Industrial Cellular VPN Router NR500 Series User Manual VPN->OpenVPN->X.509 Certificate Connection Index • Displays the current connection index for OpenVPN channel. CA Certificate • Import CA certificate file. Local Certificate File • Import Local Certificate file. Local Private Key •...
  • Page 63: Ipsec

    Industrial Cellular VPN Router NR500 Series User Manual 4.7.2 IPSec IPSec facilitates configuration of secured communication tunnels. The various tunnel configurations will be displayed in the Tunnel Table at the bottom of the page. All tunnels are create using the ESP (Encapsulating Security Payload) protocol.
  • Page 64 Industrial Cellular VPN Router NR500 Series User Manual VPN->IPSec Enable • Select Enable will launch the IPSec process. Description • Enter a description for this IPSec VPN tunnel. Remote Gateway • Enter the IP address of the remote endpoint of the tunnel.
  • Page 65 Industrial Cellular VPN Router NR500 Series User Manual VPN->IPSec Encryption Algorithm (IKE) • Select 3DES AES-128, AES-192, or AES-256 encryption. Hash Algorithm (IKE) • Select from MD5, SHA1, SHA2 256, SHA2 384 or SHA2 512 hashing. Diffie-Hellman Group (IKE) •...
  • Page 66: Gre

    Industrial Cellular VPN Router NR500 Series User Manual 4.7.3 GRE Generic Routing Encapsulation (GRE) is a protocol that encapsulates packets in order to route other protocols over IP networks. It’s a tunneling technology that provides a channel through which encapsulated data message could be transmitted and encapsulation and decapsulation could be realized at both ends.
  • Page 67: Maintenance

    Industrial Cellular VPN Router NR500 Series User Manual Remote Gateway • Enter the remote IP address of peer GRE tunnel. Local Virtual IP • Enter the local tunnel IP address of GRE tunnel. Local Virtual Netmask • Enter the local virtual netmask of GRE tunnel.
  • Page 68: System

    Industrial Cellular VPN Router NR500 Series User Manual 4.8.2 System This section allows you to review the device system settings. System->General Hostname • User-defined router name, which might be use for IPSec local ID identify. User LED Type • Defined the User LED behavior.
  • Page 69 Industrial Cellular VPN Router NR500 Series User Manual System->Account Administrator • Displays the name of current administrator, default as “admin”. Old Password • Enter the old password of administrator. New Password • Enter the new password of administrator. Confirm Password •...
  • Page 70 Industrial Cellular VPN Router NR500 Series User Manual Syslog displays system logs that are stored in the log buffers. System->Syslog Log Location • Select the log store location from “RAM” or “Flash”. Log Level • Select the log output level from “Debug”, “Notice”, “Info”, “Warning” or “Error”.
  • Page 71 Industrial Cellular VPN Router NR500 Series User Manual System->Telnet Telnet Port • Enter the port for telnet access. A well-known port for HTTP is port 23. System->SSH SSH Port • Enter the port for SSH access. A well-known port for HTTP is port 22.
  • Page 72: Configuration

    Industrial Cellular VPN Router NR500 Series User Manual Check this box to allow remote Telnet access. Remote SSH Access • Check this box to allow remote SSH access. 4.8.3 Configuration The Unit Configuration tab allows you to save parameters (settings in the Web interface) to a file.
  • Page 73 Industrial Cellular VPN Router NR500 Series User Manual Debug Tools->Traceroute Host Address • Enter a host IP address or domain name for traceroute. Max Hops • Enter the max hops for traceroute. Page 72 / 78...
  • Page 74: Appendix A -Glossary

    Industrial Cellular VPN Router NR500 Series User Manual Appendix A -Glossary APN: Access Point Name GPRS: General Packet Radio Service HSPA: High Speed Packet Access HSDPA: High-Speed Downlink Packet Access HSUPA: High-Speed Uplink Packet Access LTE: 3GPP Long Term Evolution...
  • Page 75: Appendix B -Q&A

    Industrial Cellular VPN Router NR500 Series User Manual Appendix B -Q&A No Signal Phenomenon NR500 Router modem status show no signal. Possible Reason Antenna installation is wrong. • Modem failure. • Solution Check the LTE antenna or replace with new one.
  • Page 76: Ipsec Vpn Established, But Lan To Lan Cannot Communicate

    Industrial Cellular VPN Router NR500 Series User Manual IPSec VPN established, but LAN to LAN cannot communicate Phenomenon IPSec VPN established, but LAN to LAN cannot communicate Possible Reason Both subnets are not match the interested traffic. • IPSec second phase (ESP) settings is not match.
  • Page 77: Appendix C -Digital Io Scenario

    Industrial Cellular VPN Router NR500 Series User Manual Appendix C -Digital IO Scenario Digital Input Typical Application Diagram DI ELECTRICAL CHARACTERISTICS 1、galvanic isolation; 2、Over-Voltage Protection: 36 VDC 3、Over-Current Protection:100mA per channel @ 25°C Dry Contact Typical Application PGND Switch ON(Short to V-):...
  • Page 78: Appendix D - Cli

    Industrial Cellular VPN Router NR500 Series User Manual Appendix D - CLI Command-line interface (CLI) is a software interface that provide another configurable way to set parameters on our router. We could use Telnet or SSH connect to our router for CLI input.
  • Page 79 Industrial Cellular VPN Router NR500 Series User Manual 64 bytes from 14.215.177.38: seq=1 ttl=54 time=10.284 ms 64 bytes from 14.215.177.38: seq=2 ttl=54 time=10.073 ms 64 bytes from 14.215.177.38: seq=3 ttl=54 time=10.031 ms 64 bytes from 14.215.177.38: seq=4 ttl=54 time=10.347 ms --- www.baidu.com ping statistics ---...

This manual is also suitable for:

Nr500-s4gNr500-s3gNr500-p4gNr500-p3g

Table of Contents