Page 1
Industrial Cellular VPN Router NR500 Standard User Manual Guangzhou Navigateworx Technologies Co, Ltd www.navigateworx.com...
Page 2
Information provided in this manual is intended to be accurate and reliable. However, Navigateworx Technologies assumes no responsibility for its use, or for any infringements on the rights of third parties that may result from its use.
Page 3
Operation in the presence of other electronic equipment may cause interference if equipment is • incorrectly protected. Follow recommendations for installation from equipment manufacturers. Declaration of Conformity NR500 Series products are in conformity with the essential requirements and other relevant provisions of the CE and RoHS. Page 2 / 78...
Industrial Cellular VPN Router NR500 Series User Manual Table of Contents Chapter 1. Product Overview ..........................5 Overview ..............................5 Features and Benefits .......................... 5 General Specifications ........................6 Mechanical Specifications ........................ 8 Package Checklist ..........................9 Order Information ..........................11 Chapter 2.
Page 5
Industrial Cellular VPN Router NR500 Series User Manual VPN ................................57 4.7.1 OpenVPN .............................. 57 4.7.2 IPSec ............................... 62 4.7.3 GRE ................................65 Maintenance ............................66 4.8.1 Upgrade ..............................66 4.8.2 System ..............................67 4.8.3 Configuration ............................71 4.8.4 Debug Tools ............................71 Appendix A -Glossary ...............................
This router enables wireless data connectivity over public and private LTE cellular networks at 4G speeds. NR500 series router has dual SIM backup, 2 or 4 LAN ports, 1 port could be changed to Ethernet WAN connection (for fixed internet fail over to cellular). An optional 802.11 b/g/n Wi-Fi interface access point and client operations supports connectivity to IP applications in a variety of different connection scenarios.
Industrial Cellular VPN Router NR500 Series User Manual Easy to use and easy maintenance User-friendly web interface for human interaction • Easy configuration for deployment • Support 3rd Party remote management cloud • 1.3 General Specifications Cellular Interface Standards: FDD-LTE/TDD-LTE, WCDMA/UMTS/HSPA/HSPA+/EDGE/GPRS, •...
Page 8
Industrial Cellular VPN Router NR500 Series User Manual DI/DO Interface Type: 2 x DI + 2 x DO • Connector: terminal block • Isolation: 3KVDC or 2KVrms • Absolute maximum VDC: 36VDC • Absolute maximum ADC: 100mA • Other Interfaces 1×...
Industrial Cellular VPN Router NR500 Series User Manual 1.5 Package Checklist NR500 series Router includes the parts shown in below, please verify your components. NOTE: if any of the below items is missing or damaged, please contact your sales representative. Included equipment 1 x Naviageteworx NR500 series Industrial Cellular VPN router (Wi-Fi optional) •...
Industrial Cellular VPN Router NR500 Series User Manual AC/DC power adapter (12VDC, 1.5A; EU/US/UK/AU plug optional) • 1.6 Order Information Model Part Number Description 4G LTE, Dual SIMs, 2 x Eth, 1 x RS232 (3 PIN), 1 x RS485, A502433...
Industrial Cellular VPN Router NR500 Series User Manual Chapter 2. Installation 2.1 Product Overview Front Panel • ① Wi-Fi Antenna ② MAIN Cellular Antenna ③ LED Indicator ④ Serial port & DIDO ⑤ Ethernet port ⑥ Wi-Fi Antenna ⑦ AUX Cellular Antenna Left Side Panel •...
Page 14
Industrial Cellular VPN Router NR500 Series User Manual Page 13 / 78...
Industrial Cellular VPN Router NR500 Series User Manual 2.2 LED Indicators Name Color Status Description Operating normally Slow Blinking (500ms duration) Fast Blinking System initialing Green Power is off Register to Highest priority network service (depend on Radio, e.g. Radio support LTE as Highest priority network).
Industrial Cellular VPN Router NR500 Series User Manual 2.3 Ethernet Port Indicator Name Status Description Connection is established Blinking Data is being transmitted Link indicator Connection is not established NOTE:There are two LED indicators for each Ethernet port. Due to the chipset design NR500 router would only light up the green one(Link indicator) on left side, the right LED is Off without meaning.
Industrial Cellular VPN Router NR500 Series User Manual Power Input • Description V+ (Red line) Positive V- (Yellow line) Negative PGND 2.5 Reset Button Function Action Press the RST button within 3s under operation status Reboot Press the RST button between 3s to 10s, all LED blink few times then Factory Reset reboot automatically.
Industrial Cellular VPN Router NR500 Series User Manual 2.7 Install Antenna Connect the cellular antenna to the MAIN and AUX connector on the unit. • NOTE: NR500 router supports dual antennas with MAIN and AUX connectors. MAIN connector is for data receiving and transmission.
Industrial Cellular VPN Router NR500 Series User Manual 2.8 DIN-rail Mounting Use 4 pcs of M3x6 flat head phillips screws to fix the DIN-rail to the router. Insert the upper lip of the DIN-rail into the DIN-rail mounting kit. Press the router towards the DIN-rail until it snaps into place.
Industrial Cellular VPN Router NR500 Series User Manual 2.10 Power Supply Installation Remove the pluggable connector from the unit, then loosen the screws for the locking flanges as needed. Connect the wires of the power supply to the terminals. 2.11 Power On The Router Connect one end of the Ethernet cable to the LAN port on the unit and the other end to a LAN port on a PC.
Industrial Cellular VPN Router NR500 Series User Manual Chapter 3. Access to Web page 3.1 PC Configuration NR500 router contains a DHCP server which will automatically assign an IP address to your PC, however in some cases the user may need to change the network settings on their PC to accept the IP address from the NR500.
Industrial Cellular VPN Router NR500 Series User Manual Set to a static IP address • click "Use the following IP address" to assign a static IP manually within the same subnet of the router. NOTE:Default gateway and DNS server is not necessary if PC not routing all traffic go through NR500 router.
Industrial Cellular VPN Router NR500 Series User Manual 3.3 Login to Web Page 1. Start a Web browser on your PC (Chrome and IE are recommended), enter 192.168.5.1 into the address bar of the web browser. 2. Then use the default username and password(admin/admin), to log in to the router.
Industrial Cellular VPN Router NR500 Series User Manual Chapter 4. Web Configuration 4.1 Web Interface The NR500 router Web interface is divided into two sections. In the left pane is the main navigation menu. On the right is the content area for each page.
Page 25
Industrial Cellular VPN Router NR500 Series User Manual Reboot: reset the router within power disconnect. • Logout: logout to web authorization page. • Save: save the configuration on current page. • Apply: apply the changes on current page immediately. •...
Industrial Cellular VPN Router NR500 Series User Manual 4.2 Overview 4.2.1 Status You can view the system information of the router on this page. System Information Device Module • Displays the model name of router System Uptime • Displays the duration the system has been up in hours, minutes and seconds.
Page 27
Industrial Cellular VPN Router NR500 Series User Manual Active Link Information Link Type • Current interface for internet access. IP Address • Displays the IP address assigned to this interface. Netmask • Displays the subnet mask of this interface. Gateway •...
Industrial Cellular VPN Router NR500 Series User Manual 4.2.2 Syslog Syslog Information Download Diagnosis • Download the Diagnosis file for analysis. Download Syslog • Download the complete syslog since last reboot. Clear • Clear the current page syslog printing. Refresh •...
Industrial Cellular VPN Router NR500 Series User Manual Link Management This section shows you the setup of link management. 4.3.1 Connection Manager Connection Manager->Status Type • Displays the connection interface Status • Displays the connection status of this interface. IP Address •...
Page 30
Industrial Cellular VPN Router NR500 Series User Manual Connection Manager->Connection Priority • Displays the priority list of default routing selection. Enable • Displays the connection enable status. Connection Type • Displays the name of this interface. Description • Displays the description of this connection.
Page 31
Industrial Cellular VPN Router NR500 Series User Manual Interval • The duration of each ICMP detection in seconds. Retry Interval • The interval in seconds between each ping if no packets have been received. Timeout • Enter timeout for received ping reply to determine the ICMP detection failure.
Industrial Cellular VPN Router NR500 Series User Manual 4.3.2 Cellular NR500 Router main function is connecting to Internet by cellular modem. Cellular->Status Modem • Displays the model of the modem used by this WWAN interface. Registration • Displays the registration status of SIM card.
Page 33
Industrial Cellular VPN Router NR500 Series User Manual Displays the current PLMN ID, including MCC, MNC, LAC and Cell ID. Local Area Code • Displays the location area code of the SIM card. Cell ID • Displays the Cell ID of the SIM card location.
Page 34
Industrial Cellular VPN Router NR500 Series User Manual SIM Card Settings SIM Card • Displays the current SIM card settings. Auto APN • Check this box enable auto checking the Access Point Name provided by the carrier. Authentication Type •...
Industrial Cellular VPN Router NR500 Series User Manual 4.3.3 Ethernet The same instructions apply to settings for all Ethernet interfaces. Ethernet->Status Ethernet Port Information • Displays the port physical connected states. Interface Information • Displays the name and MAC address of Ethernet interface.
Page 36
Industrial Cellular VPN Router NR500 Series User Manual Ethernet->Port Settings Port • Indicate the current configurate port. Interface • Select belong subnet for current configurate port. Ethernet->WAN Connection Type • If you select DHCP Client, external DHCP server will assign an IP address to this unit.
Page 37
Industrial Cellular VPN Router NR500 Series User Manual Ethernet->WAN->Static IP or PPPoE IP Address • Static address for this interface. It must be on the same subnet as the gateway. Netmask • Will be assigned by the gateway. Gateway •...
Page 38
Industrial Cellular VPN Router NR500 Series User Manual Ethernet->LAN Interface • Select the configurate LAN port of this subnet. IP Address • Enter LAN IP address for this interface. Netmask • Enter subnet mask for this subnet. • Maximum Transmission Unit, maximum packet size allowed to be transmitted. Should be left as default value of 1500 in most cases.
Page 39
Industrial Cellular VPN Router NR500 Series User Manual Relay Server • Enter the IP address of DHCP relay server. IP Pool Start • External LAN devices connected to this unit will be assigned IP address in this range when DHCP is enabled.
Industrial Cellular VPN Router NR500 Series User Manual 4.3.4 Wi-Fi NR500 router could only be set to function as either a Wi-Fi Client or a Wi-Fi Access Point, but not both simultaneously. Select Wi-Fi (Access Point) from the main navigation menu to Wi-Fi (default as Access Point) page, which contains tabs for configuration of the Wi-Fi Access Point interface.
Page 41
Industrial Cellular VPN Router NR500 Series User Manual Wi-Fi AP Wi-Fi AP settings page as below. Wi-Fi->Wi-Fi AP Enable • Check this box will enable the Wireless interface. SSID • The SSID is the name of the wireless local network. Devices connecting to the Nr500 router WiFi access will identify the Access Point by this SSID.
Page 42
Industrial Cellular VPN Router NR500 Series User Manual Channel • Select the Wi-Fi channel the module will transmit on. If there are other Wi-Fi devices in the area the NR500 router should be set to a different channel than the other access points. Channels available for selection depend on the selected Band.
Page 43
Industrial Cellular VPN Router NR500 Series User Manual Wi-Fi Client Wi-Fi Client settings page as below. Page 42 / 78...
Page 44
Industrial Cellular VPN Router NR500 Series User Manual Wi-Fi->Wi-Fi Client Enable • Check this box will enable the Wireless interface. Connect to Hidden SSID • Check this box will enable connect to hidden SSID. SSID • The SSID of external access point.
Industrial Cellular VPN Router NR500 Series User Manual 4.4 Industrial Interface The Industrial page contains tabs for making configuration settings for Serial RS232 and RS485, Digital input and output. Select Serial & Digital IO from the main navigation menu to navigate to this page.
Page 46
Industrial Cellular VPN Router NR500 Series User Manual Serial->Connection Enable • Displays status of current serial function. Port • Displays the serial type of COM port. Baud Rate • Displays the serial port baud rate. Data Bits • Displays the serial port Data Bits.
Page 47
Industrial Cellular VPN Router NR500 Series User Manual Serial->Connection Settings Baud Rate • Select the serial port baud rate. Supported values are 2400, 4800, 9600, 19200, 38400, 57600, or 115200. Data Bits • Select the values from 5, 6, 7 or 8.
Page 48
Industrial Cellular VPN Router NR500 Series User Manual Below window displays different settings when you select UDP on Protocol. Serial->Connection Settings Local IP Address • Enter the IP Address of the local endpoint. Local Port • The port number assigned to the serial IP port on which communications will take place.
Industrial Cellular VPN Router NR500 Series User Manual 4.4.2 Digital IO This section allows you to set the Digital IO parameters. The Digital input could be used for triggering alarm, and Digital output could be used for controlling the slave device by digital signal.
Page 50
Industrial Cellular VPN Router NR500 Series User Manual Digital IO->Digital Output Enable • Check this box to enable digital output function. Alarm Source • Select from “Digital Input1” or “Digital Input2”, Digital output triggers the related action when there is alarm comes from Digital Input.
Industrial Cellular VPN Router NR500 Series User Manual 4.5 Network 4.5.1 Firewall Firewall rules are security rule-sets to implement control over users, applications or network objects in an organization. Using the firewall rule, you can create blanket or specialized traffic transit rules based on the requirement.
Page 52
Industrial Cellular VPN Router NR500 Series User Manual Firewall->ACL Description • Add a description for this rule. Protocol • Any: Any protocol number. TCP: The TCP protocol. UDP: The UDP protocol. TCP & DUP: both TCP and UDP protocol ICMP: The ICMP protocol.
Industrial Cellular VPN Router NR500 Series User Manual Local Port • Sets the LAN port number range used when forwarding to the destination IP address. Firewall->DMZ Enable • Check this box to enable DMZ function. Remote Address • Optionally restricts DMZ access to only the specified WAN IP address.
Industrial Cellular VPN Router NR500 Series User Manual Displays the gateway of this interface. This is used for routing packets to remote networks. Interface • Displays the outbound interface of this route. Route->Static Route Settings Description • Enter the description of current static route rule.
Page 55
Industrial Cellular VPN Router NR500 Series User Manual Network->VRRP Enable • Check this box will enable VRRP. Interface • Select the interface of Virtual Router. Virtual Router ID • User-defined Virtual Router ID. Range: 1-255. Authentication Type • Select the authentication type for VRRP.
Industrial Cellular VPN Router NR500 Series User Manual 4.6 Applications 4.6.1 DDNS DDNS is a system that allows the domain name data of a computer with a varying (dynamic) IP addresses held in a name server to be updated in real time in order to make it possible to establish connections to that machine without the need to track the actual IP addresses at all times.
Industrial Cellular VPN Router NR500 Series User Manual Check IP Path • Check IP Path for custom type. Enable SSL • Enable SSL for connection. Username • Enter the user name used when setting up the account. Used to login to the Dynamic DNS service.
Industrial Cellular VPN Router NR500 Series User Manual 4.7 VPN 4.7.1 OpenVPN OpenVPN is an open source virtual private network (VPN) product that offers a simplified security framework, modular network design, and cross-platform portability. You could review all OpenVPN connection as below.
Page 59
Industrial Cellular VPN Router NR500 Series User Manual VPN->OpenVPN Enable • Check this box to enable OpenVPN tunnel. Description • Enter a description for this OpenVPN tunnel. Mode • Select from “Client” or “P2P”. Protocol • Select from “UDP” or “TCP Client”.
Page 60
Industrial Cellular VPN Router NR500 Series User Manual Authentication Method • Select from "X.509", "Pre-shared", "Password", and "X.509 And Password". Encryption Type • Select from "BF-CBC", "DE-CBC", "DES-EDE3-CBC", "AES-128-CBC", "AES-192-CBC" and "AES-256-CBC". Username • Enter the username for authentication when selection from “Password” or “X.509 And Password”.
Page 61
Industrial Cellular VPN Router NR500 Series User Manual VPN->OpenVPN->Advanced Settings Enable NAT • Check this box to enable NAT, the source IP of host behind router will be disguised before accessing the remote end. Enable PKCS#12 • It is an exchange of digital certificate encryption standard, used to describe personal identity information.
Page 62
Industrial Cellular VPN Router NR500 Series User Manual VPN->OpenVPN->X.509 Certificate Connection Index • Displays the current connection index for OpenVPN channel. CA Certificate • Import CA certificate file. Local Certificate File • Import Local Certificate file. Local Private Key •...
Industrial Cellular VPN Router NR500 Series User Manual 4.7.2 IPSec IPSec facilitates configuration of secured communication tunnels. The various tunnel configurations will be displayed in the Tunnel Table at the bottom of the page. All tunnels are create using the ESP (Encapsulating Security Payload) protocol.
Page 64
Industrial Cellular VPN Router NR500 Series User Manual VPN->IPSec Enable • Select Enable will launch the IPSec process. Description • Enter a description for this IPSec VPN tunnel. Remote Gateway • Enter the IP address of the remote endpoint of the tunnel.
Page 65
Industrial Cellular VPN Router NR500 Series User Manual VPN->IPSec Encryption Algorithm (IKE) • Select 3DES AES-128, AES-192, or AES-256 encryption. Hash Algorithm (IKE) • Select from MD5, SHA1, SHA2 256, SHA2 384 or SHA2 512 hashing. Diffie-Hellman Group (IKE) •...
Industrial Cellular VPN Router NR500 Series User Manual 4.7.3 GRE Generic Routing Encapsulation (GRE) is a protocol that encapsulates packets in order to route other protocols over IP networks. It’s a tunneling technology that provides a channel through which encapsulated data message could be transmitted and encapsulation and decapsulation could be realized at both ends.
Industrial Cellular VPN Router NR500 Series User Manual Remote Gateway • Enter the remote IP address of peer GRE tunnel. Local Virtual IP • Enter the local tunnel IP address of GRE tunnel. Local Virtual Netmask • Enter the local virtual netmask of GRE tunnel.
Industrial Cellular VPN Router NR500 Series User Manual 4.8.2 System This section allows you to review the device system settings. System->General Hostname • User-defined router name, which might be use for IPSec local ID identify. User LED Type • Defined the User LED behavior.
Page 69
Industrial Cellular VPN Router NR500 Series User Manual System->Account Administrator • Displays the name of current administrator, default as “admin”. Old Password • Enter the old password of administrator. New Password • Enter the new password of administrator. Confirm Password •...
Page 70
Industrial Cellular VPN Router NR500 Series User Manual Syslog displays system logs that are stored in the log buffers. System->Syslog Log Location • Select the log store location from “RAM” or “Flash”. Log Level • Select the log output level from “Debug”, “Notice”, “Info”, “Warning” or “Error”.
Page 71
Industrial Cellular VPN Router NR500 Series User Manual System->Telnet Telnet Port • Enter the port for telnet access. A well-known port for HTTP is port 23. System->SSH SSH Port • Enter the port for SSH access. A well-known port for HTTP is port 22.
Industrial Cellular VPN Router NR500 Series User Manual Check this box to allow remote Telnet access. Remote SSH Access • Check this box to allow remote SSH access. 4.8.3 Configuration The Unit Configuration tab allows you to save parameters (settings in the Web interface) to a file.
Page 73
Industrial Cellular VPN Router NR500 Series User Manual Debug Tools->Traceroute Host Address • Enter a host IP address or domain name for traceroute. Max Hops • Enter the max hops for traceroute. Page 72 / 78...
Industrial Cellular VPN Router NR500 Series User Manual Appendix A -Glossary APN: Access Point Name GPRS: General Packet Radio Service HSPA: High Speed Packet Access HSDPA: High-Speed Downlink Packet Access HSUPA: High-Speed Uplink Packet Access LTE: 3GPP Long Term Evolution...
Industrial Cellular VPN Router NR500 Series User Manual Appendix B -Q&A No Signal Phenomenon NR500 Router modem status show no signal. Possible Reason Antenna installation is wrong. • Modem failure. • Solution Check the LTE antenna or replace with new one.
Industrial Cellular VPN Router NR500 Series User Manual IPSec VPN established, but LAN to LAN cannot communicate Phenomenon IPSec VPN established, but LAN to LAN cannot communicate Possible Reason Both subnets are not match the interested traffic. • IPSec second phase (ESP) settings is not match.
Industrial Cellular VPN Router NR500 Series User Manual Appendix D - CLI Command-line interface (CLI) is a software interface that provide another configurable way to set parameters on our router. We could use Telnet or SSH connect to our router for CLI input.
Page 79
Industrial Cellular VPN Router NR500 Series User Manual 64 bytes from 14.215.177.38: seq=1 ttl=54 time=10.284 ms 64 bytes from 14.215.177.38: seq=2 ttl=54 time=10.073 ms 64 bytes from 14.215.177.38: seq=3 ttl=54 time=10.031 ms 64 bytes from 14.215.177.38: seq=4 ttl=54 time=10.347 ms --- www.baidu.com ping statistics ---...