1. Manuals
  2. Brands
  3. Ursalink Manuals
  4. Gateway
  5. UG87-LW
  6. User manual

Ursalink UG87-LW User Manual

Industrial lorawan gateway
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
UG87-LW User Guide
1

Advertisement

Table of Contents
loading

Related Manuals for Ursalink UG87-LW

Summary of Contents for Ursalink UG87-LW

  • Page 1 UG87-LW User Guide...
  • Page 2 SIM cards, hardware watchdog, VPN, Gigabit Ethernet and beyond. This guide shows you how to configure and operate the UG87-LW industrial LoRaWAN . You can refer to it for detailed functionality and gateway configuration.
  • Page 3 UG87-LW User Guide Declaration of Conformity UG87-LW is in conformity with the essential requirements and other relevant provisions of the CE, FCC, and RoHS. For assistance, please contact Ursalink technical support: Email: support@ursalink.com Tel.: 86-592-5023060 Fax: 86-592-5023065 Revision History Date...

  • Page 4: Table Of Contents

    UG87-LW User Guide Contents Chapter 1 Product Introduction......................8 1.1 Overview..........................8 1.2 Advantages..........................8 1.3 Specifications........................10 Chapter 2 Installation........................13 2.1 General Packing List......................13 2.2 Product Overview....................... 14 2.3 LED Indicators........................15 2.4 Ethernet Port Indicators..................... 15 2.5 Reset Button........................16 2.6 PIN Definition........................
  • Page 5 UG87-LW User Guide 4.2.2.4 Device..........................43 4.2.2.5 Packet..........................44 4.3 Network..........................46 4.3.1 Interface........................46 4.3.1.1 Port....................... 46 4.3.1.2 WAN......................47 4.3.1.3 LAN........................50 4.3.1.4 VLAN Trunk....................51 4.3.1.5 Cellular......................52 4.3.1.6 Loopback.......................55 4.3.2 Firewall........................56 4.3.2.1 ACL........................ 56 4.3.2.2 DMZ.......................57 4.3.2.3 Port Mapping....................58 4.3.2.4 MAC Binding....................59 4.3.3 QoS...........................
  • Page 6 UG87-LW User Guide 4.4.3.2 MIB View...................... 89 4.4.3.3 VACM......................89 4.4.3.4 Trap....................... 90 4.4.3.5 MIB........................91 4.4.4 AAA...........................91 4.4.4.1 RADIUS......................91 4.4.4.2 TACACS+......................92 4.3.4.3 LDAP......................92 4.3.4.4 Authentication....................93 4.3.5 Device Management....................94 4.3.6 Events........................95 4.3.6.1 Events......................95 4.3.6.2 Events Settings..................... 96 4.5 Industrial Interface......................97 4.5.1 I/O..........................
  • Page 7 UG87-LW User Guide 5.7 Backup and Restore Configuration.................. 123 5.8 Restore Factory Defaults....................124 5.8.1 Via Web Interface....................124 5.8.2 Via Hardware......................126 5.9 Firmware Upgrade......................126 5.10 Events Application Example...................128 5.11 Schedule Application Example..................130 5.12Logs and Diagnostics....................... 130 5.13 SNMP Application Example................... 132 5.14 Cellular Connection......................

  • Page 8: Chapter 1 Product Introduction

    Adopting high-performance and low-power consumption industrial platform of 64-bit CPU and wireless module, the UG87-LW is capable of providing wire-speed network with a typical 2 W power consumption and ultra-small package to ensure the extremely safe and reliable connection to the wireless network.
  • Page 9 AAA (TACACS+, RADIUS, LDAP, local authentication) and multiple levels of user authority Easy Maintenance Ursalink DeviceHub provides easy setup, mass configuration, and centralized management of remote devices The user-friendly web interface design and various upgrading options help administrator...

  • Page 10: Specifications

    UG87-LW User Guide 1.3 Specifications Cellular Interfaces Connectors 2 × 50 Ω SMA (Center pin: female) SIM Slots LoRaWAN Connectors 1 × 50 Ω SMA (Center pin: female) Channel Frequency Band Supports EU 863-870, US 902-928, EU 433, AU 915-928, CN...
  • Page 11 UG87-LW User Guide Management Web, CLI, SMS, On-demand dial up RADIUS, TACACS+, LDAP, Local Authentication Multilevel Authority Multiple levels of user authority Reliability VRRP, Dual SIM Backup Serial Port Transparent (TCP Client/Server, UDP), Modbus Gateway (Modbus TCP to Modbus RTU), Modbus Master...
  • Page 12 UG87-LW User Guide Figure 1-2...

  • Page 13: Chapter 2 Installation

    UG87-LW User Guide Chapter 2 Installation 2.1 General Packing List Before you begin to install the UG87-LW, please check the package contents to verify that you have received the items below. 1 × UR87-LW Gateway 1 × Ethernet Cable 1 × Power Adapter 2 ×...

  • Page 14: Product Overview

    UG87-LW User Guide 2.2 Product Overview Main Cellular Antenna Reset Button A. Front Panel LED Indicator Area POWER: Power Indicator STATUS: Status Indicator : Signal Strength Indicator LORA：LoRa Indicator VPN: VPN Indicator SIM1: SIM1 Status Indicator SIM2: SIM2 Status Indicator Ethernet Port Indicator: Orange for data transmission;...

  • Page 15: Led Indicators

    UG87-LW User Guide 2.3 LED Indicators Indication Status Description The power is switched on POWER Power Status The power is switched off Static: Start-up Green Light Blinking slowly: the system is running STATUS System Status properly The system goes wrong Green Light Packet Forwarder mode is running well.

  • Page 16: Reset Button

    UG87-LW User Guide 2.5 Reset Button Description Function STATUS LED Action Blinking Press and hold the reset button for about 5-15 seconds. Reboot Static Green Release the button and wait for system to reboot. Press and hold the reset button for more than 15 seconds.

  • Page 17: Cellular Antenna Installation

    The external cellular antenna should be installed vertically always on a site with a good cellular signal. Note: UG87-LW supports dual antennas with “Main” and “AUX” connectors. “Main” interface is for data receiving and transmission. “AUX” interface is for enhancing signal...

  • Page 18: Mounting The Gateway

    UG87-LW User Guide 2.9 Mounting the Gateway The gateway can be placed on a desktop or mounted to a wall or a DIN rail. 2.9.1 Wall Mounting (Measured in mm) Use 2 pcs of M3×6 flat head Phillips screws to fix the wall mounting kit to the gateway, and then use 2 pcs of M3 drywall screws to mount the gateway associated with the wall mounting kit on the wall.

  • Page 19: Connect The Gateway To A Computer

    UG87-LW User Guide 2.10 Connect the Gateway to a Computer 2.11 Installation of Power Supply and Protective Grounding 2.11.1 Power Supply Installation A. Take out the terminal from the gateway and unscrew the bolt on terminal. B. Screw down the bolt after inserting power cable into the terminal.
  • Page 20 Double check antenna connection. Double check if SIM card is correctly inserted and working perfectly. Power on the UG87-LW industrial LoRaWAN gateway and check indicators status. (1) If Status LED blinks slowly, the system is running properly. If SIM1 or SIM2 indicator is static green, the gateway is connected to network already.

  • Page 21: Chapter 3 Access To Web Gui

    3.1 PC Configuration for Web GUI Access to gateway Please connect PC to GE port of UG87-LW directly. PC can obtain an IP address, or you can configure a static IP address manually. The following steps are based on Windows 10 operating system for your reference.

  • Page 22: Access To Web Gui Of Gateway

    (Note: remember to click “OK” to finish configuration.) 3.2 Access to Web GUI of gateway Ursalink gateway provides Web-based configuration interface for management. If this is the first time you configure the gateway, please use the default settings below. Username: admin Password: password IP Address: 192.168.1.1...
  • Page 23 UG87-LW User Guide If the SIM card is connected to cellular network with public IP address, you can access WEB GUI remotely via the public IP address when remote access is enabled. If you enter the username or password incorrectly more than 5 times, the login page will be locked for 10 minutes.

  • Page 24: Chapter 4 Web Configuration

    UG87-LW User Guide Chapter 4 Web Configuration 4.1 Status 4.1.1 Overview You can view the system information of the gateway on this page. Figure 4-1-1-1 System Information Item Description Model Show the model name of gateway. Serial Number Show the serial number of gateway.

  • Page 25: Lora Wan

    UG87-LW User Guide 4.1.2 LoRa WAN You can view the LoRaWAN status of gateway on this page. Figure 4-1-4-4 LoRaWAN Status (Packet Forwarder Mode) Item Description Mode Show the working mode of LoRaWAN. Version Show the version of packet forwarder software.
  • Page 26 UG87-LW User Guide Push Data Acknowledged Percentage of acknowledged packets among Push Data Datagrams Sent. Pull Data Sent Show the number of keepalive packets sent to the server, and percentage of acknowledged packet regarding the keepalive packet from the server.

  • Page 27: Cellular

    UG87-LW User Guide Click to view the details of the connected gateway, as the following picture shows. Figure 4-1-4-6 LoRa WAN-Network Server-Status-Gateway Detail Item Description Gateway EUI Show the identifier of the gateway. IP Address Show the IP address of the gateway.
  • Page 28 UG87-LW User Guide Figure 4-1-2-1 Modem Information Item Description Status Show corresponding detection status of module and SIM card. Model Show the model name of cellular module. Current SIM Show the current SIM card used. Signal Level Show the cellular signal level.

  • Page 29: Network

    UG87-LW User Guide Figure 4-1-2-2 Network Status Item Description Status Show the connection status of cellular network. IP Address Show the IP address of cellular network. Netmask Show the netmask of cellular network. Gateway Show the gateway of cellular network.

  • Page 30: Vpn

    UG87-LW User Guide Show the information about how long the Ethernet cable has been connected to WAN port when WAN function is enabled. Duration Once WAN function is disabled or Ethernet cable is disconnected, the duration will stop. Table 4-1-3-1 LAN Status 4.1.5 VPN...

  • Page 31: Routing Information

    UG87-LW User Guide Figure 4-1-4-3 VPN Status Item Description Name Show the name of the VPN tunnel. Status Show the status of the VPN tunnel. Local IP Show the local tunnel IP of VPN tunnel. Remote IP Show the remote tunnel IP of VPN tunnel.

  • Page 32: Host List

    UG87-LW User Guide Destination Show the IP address of destination host or destination network. Netmask Show the netmask of destination host or destination network. Gateway Show the IP address of the gateway. Interface Show the outbound interface of the route.

  • Page 33: Lora

    UG87-LW User Guide 4.2 LoRa Figure 4-2-1-1 4.2.1 Packet Forwarder 4.2.1.1 General Figure 4-2-1-2 General Setting Item Description Default Enable Click to enable the Packet Forwarder mode. Enabled Generated from MAC address of Gateway EUI Show the identifier of the gateway.

  • Page 34: Radios

    UG87-LW User Guide register gateway on the remote network server, same with such as TTN. It is usually the same with gateway gateway EUI. EUI and can be changed. Enter the IP address of the LoRaWAN network Server Address Null server.
  • Page 35 UG87-LW User Guide Figure 4-2-1-4 Radios-Multi Channel Setting Item Description Default Enable Click to enable this channel to transmit packets. Enabled Index Indicate the ordinal of the list. Radio Choose Radio 0 or Radio 1 as center frequency. Radio 0...

  • Page 36: Advanced

    UG87-LW User Guide Figure 4-2-1-6 Radios-FSK Channel Setting Item Description Default Enable Disabled Click to enable this channel to transmit packets. Radio Choose Radio 0 or Radio 1 as center frequency. Radio 0 The default frequency is set Enter the frequency of this channel.
  • Page 37 UG87-LW User Guide Advanced Item Description Default Enter the interval of keepalive packet which is sent from gateway to Keep Alive LoRaWAN network server to keep the connection Interval stable and alive. Range: 1-3600. Enter the interval to update the network server with Stat Interval gateway statistics.

  • Page 38: Custom

    UG87-LW User Guide 4.2.1.4 Custom Figure 4-2-1-8 When Custom Configuration mode is enabled, you can write your own packet forwarder configuration file in the edit box to configure packet forwarder. Click “Save” to save your custom configuration file content, and click “Apply” to take effect. You can click “Clear” to erase all content in the edit box.
  • Page 39 UG87-LW User Guide Figure 4-2-1-9 Item Description Refresh Click to obtain the latest data. Clear Click to clear all data. Rfch Show the channel of this packet. Direction Show the direction of this packet. Time Show the receiving time of this packet.

  • Page 40: Network Server

    UG87-LW User Guide 4.2.2 Network Server 4.2.2.1 General Figure 4-2-2-1 Item Description Default General Setting Enable Click to enable Network Server mode. Disabled NetID Enter the network identifier. 01023 Enter the interval time between the end-device sends a Join_request_message to network...
  • Page 41 UG87-LW User Guide datarates. Available channel plans depend on the gateway’s vatiant. Enabled frequencies are controlled using channel mask. Leave it blank means using the default standard usable channels which are specified in the LoRaWAN regional parameters document. Null. Null means using...

  • Page 42: Application

    UG87-LW User Guide 4.2.2.2 Application Devices can communicate with applications that they’ve been registered. To register a device, you’ll first need to create an application (define the method you want to decode the data sent from end-device ) and a device profile (define the join-type and LoRaWAN classes). You don’t have to create new application profile and device profile when you add a new device which its “Payload Codec”, “Join Type”, “Class Type”...

  • Page 43: Related Configuration Example

    UG87-LW User Guide Figure 4-2-2-4 Item Description Name Show the name of the device profile. Max Tx power Show the Tx power of the device profile. Join Type Show the join type of the device profile. Class Type Show the class type of the device profile.

  • Page 44: Packet

    UG87-LW User Guide 4.2.2.5 Packet Figure 4-2-2-6 Item Description Device EUI Show the EUI of the device. Frequency Show the used frequency to transmit packets. Datarate Show the used datarate to transmit packets. Show the signal-noise ratio. RSSI Show the received signal strength indicator.
  • Page 45 UG87-LW User Guide Figure 4-2-2-7 Item Description Dev Addr Show the address of the device. GwEUI Show the EUI of the gateway. AppEUI Show the EUI of the application. DevEUI Show the EUI of the device. True: Device may transmit an explicit (possibly empty)

  • Page 46: Network

    UG87-LW User Guide is receiving the uplink messages False: Otherwise True: This frame is ACK. False: This frame is not ACK. Show the frame-counter of this packet.The network server tracks the Fcnt uplink frame counter and generates the downlink counter for each end-device.

  • Page 47: Wan

    UG87-LW User Guide Port Users can define the Ethernet ports according to their needs. Status Set the status of Ethernet port; select "up" to enable and "down" to disable. Property LAN. User cannot change this setting. Set the Ethernet port's speed. The options are "auto", "1000 Mbps", "100 Speed Mbps", and "10 Mbps".
  • Page 48 UG87-LW User Guide Primary DNS Set the primary DNS. Null Server Secondary DNS Set the secondary DNS. Null Server Enable or disable NAT function. When enabled, a Enable NAT Enable private IP can be translated to a public IP. Table 4-3-1-2 WAN Parameters 1.
  • Page 49 UG87-LW User Guide Figure 4-3-1-4 DHCP Client Item Description Obtain peer DNS automatically during PPP dialing. DNS is Use Peer DNS necessary when user visits domain name. Table 4-3-1-4 DHCP Client Parameters 3. PPPoE PPPoE refers to a point to point protocol over Ethernet. User has to install a PPPoE client on the basis of original connection way.

  • Page 50: Lan

    Table 4-3-1-5 PPOE Parameters 4.3.1.3 LAN LAN setting is used for managing local area network devices connected to LAN port of the UG87-LW, allowing each device to access the Internet. Click to delete the existing LAN port setting. Click to add a new LAN port setting.

  • Page 51: Vlan Trunk

    UG87-LW User Guide Figure 4-3-1-6 Item Description Default Port Select LAN port. IP Address Set IP address of LAN port. 192.168.1.1 Netmask Set Netmask of LAN port. 255.255.255.0 Set the maximum transmission unit of LAN port. 1500 Range: 68-1500. Table 4-3-1-6 4.3.1.4 VLAN Trunk...

  • Page 52: Cellular

    A typical use case would be to have SIM1 configured as the primary cellular interface and SIM2 as a backup. If the UG87-LW cannot connect to the network via SIM1, it will automatically fail over to SIM2.
  • Page 53 UG87-LW User Guide General Settings Item Description Default Enable Check the option to enable the corresponding SIM card. Enable Select from "Auto", "4G First", "4G Only", "3G First", "3G Only", "2G Frist", and "2G Only". Auto: connect to the network with the strongest signal Network Type automatically.
  • Page 54 UG87-LW User Guide Figure 4-3-1-10 Item Description Connection Mode Connection Mode Select from "Always Online" and "Connect on Demand". Connect on "Connect on Demand" includes "Triggered by Call", "Triggered by Demand SMS", and "Triggered by IO". The gateway will switch from offline mode to cellular network...

  • Page 55: Loopback

    UG87-LW User Guide SIM card when the one fails to connect with cellular network. connection fails Switch to backup The gateway will switch to the backup SIM card when the primary SIM card when one is roaming. roaming is detected...

  • Page 56: Firewall

    UG87-LW User Guide 4.3.2 Firewall This section describes how to set the firewall parameters, including ACL, DMZ, Port Mapping and MAC Binding. The firewall implements corresponding control of data flow at entry direction (from Internet to local area network) and exit direction (from local area network to Internet) according to the content features of packets, such as protocol style, source/destination IP address, etc.

  • Page 57: Dmz

    UG87-LW User Guide Action Select from "Permit" and "Deny". Protocol Select protocol from "ip", "icmp", "tcp", "udp", and "1-255". Source IP Source network address (leaving it blank means all). Source Wildcard Mask Wildcard mask of the source network address. Destination IP Destination network address (0.0.0.0 means all).

  • Page 58: Port Mapping

    UG87-LW User Guide Item Description Enable Enable or disable DMZ. DMZ Host Enter the IP address of the DMZ host on the internal network. Set the source IP address which can access to DMZ host. Source Address "0.0.0.0/0" means any address.

  • Page 59: Mac Binding

    UG87-LW User Guide 4.3.2.4 MAC Binding MAC Binding is used for specifying hosts by matching MAC addresses and IP addresses that are in the list of allowed outer network access. Figure 4-3-2-4 MAC Binding List Item Description MAC Address Set the binding MAC address.

  • Page 60: Dhcp

    4.3.4.1 DHCP Server The UG87-LW can be set as a DHCP server to distribute IP address when a host logs on and ensures each host is supplied with different IP addresses. DHCP Server has simplified some previous network management tasks requiring manual operations to the largest extent.
  • Page 61 UG87-LW User Guide Figure 4-3-4-1 DHCP Server Item Description Default Enable Enable or disable DHCP server. Enable Interface Select interface, e.g. GE. Start Define the beginning of the pool of IP addresses which 192.168.1.100 Address will be leased to DHCP clients.

  • Page 62: Dhcp Relay

    UG87-LW User Guide 4.3.4.2 DHCP Relay The UG87-LW can be set as DHCP Relay to provide a relay tunnel to solve the problem that DHCP Client and DHCP Server are not in the same subnet. Figure 4-3-4-2 DHCP Relay Item...

  • Page 63: Link Failover

    UG87-LW User Guide Hostname Enter the hostname for DDNS. Append IP Append your current IP to the DDNS server update path. Table 4-3-5-1 DDNS Parameters 4.3.6 Link Failover This section describes how to configure link failover strategies, such as VRRP strategies.

  • Page 64: Track

    UG87-LW User Guide exceeded. Detection start time; select from "Now" and blank Start Time character. Blank character means this SLA detection doesn't start. Table 4-3-6-1 SLA Parameters 4.3.6.2 Track Track setting is designed for achieving linkage among SLA module, Track module and Application module.

  • Page 65: Vrrp

    UG87-LW User Guide SLA ID Defined SLA ID. Interface Select the interface whose status will be detected. cellular0 When interface is down or SLA probing fails, it will wait according to the time set here before actually Negative Delay (s) changing its status to Down.

  • Page 66: Wan Failover

    UG87-LW User Guide The VRRP priority range is 1-254 (a bigger number indicates a Priority higher priority). The router with higher priority will be more likely to become the gateway router. Heartbeat package transmission time interval between Advertisement Interval (s) routers in the virtual ip group.

  • Page 67: Vpn

    Virtual Private Networks, also called VPNs, are used to securely connect two private networks together so that devices can connect from one network to the other network via secure channels. The UG87-LW supports DMVPN, IPsec, GRE, L2TP, PPTP, OpenVPN, as well as GRE over IPsec and L2TP over IPsec. 4.3.7.1 DMVPN...
  • Page 68 UG87-LW User Guide Figure 4-3-7-1 Figure 4-3-7-2 DMVPN Item Description Enable Enable or disable DMVPN. Hub Address The IP address or domain name of DMVPN Hub. Local IP address DMVPN local tunnel IP address. GRE Hub IP Address GRE Hub tunnel IP address.

  • Page 69: Ipsec

    UG87-LW User Guide Negotiation Mode Select from "Main" and "Aggressive". Authentication Select from "DES", "3DES", "AES128", "AES192" and "AES256". Algorithm Encryption Algorithm Select from "MD5" and "SHA1". Select from "MODP768_1", "MODP1024_2" and DH Group "MODP1536_5". Enter the preshared key. Local ID Type Select from "Default", "ID", "FQDN", and "User FQDN"...
  • Page 70 UG87-LW User Guide Figure 4-3-7-3 IPsec Item Description Enable Enable IPsec tunnel. A maximum of 3 tunnels is allowed. IPsec Gateway Address Enter the IP address or domain name of remote IPsec server. IPsec Mode Select from "Tunnel" and "Transport".
  • Page 71 UG87-LW User Guide Figure 4-3-7-4 IKE Parameter Item Description IKE Version Select from "IKEv1" and "IKEv2". Negotiation Mode Select from "Main" and "Aggressive". Encryption Algorithm Select from "DES", "3DES", "AES128", "AES192" and "AES256". Authentication Select from "MD5" and " SHA1"...

  • Page 72: Gre

    UG87-LW User Guide DPD Interval Time(s) Set DPD interval time to detect if the remote side fails. DPD Timeout(s) Set DPD timeout. Range: 10-3600. IPsec Advanced Enable Compression The head of IP packet will be compressed after it's enabled. Select from "NONE", "GRE" and "L2TP" to enable VPN over IPsec VPN Over IPsec Type function.

  • Page 73: L2Tp

    UG87-LW User Guide Remote IP Address Enter the real remote IP address of GRE tunnel. Local IP Address Set the local IP address. Local Virtual IP Address Set the local tunnel IP address of GRE tunnel. Netmask Set the local netmask.
  • Page 74 UG87-LW User Guide "MS-CHAPv2". Global Traffic All of the data traffic will be sent out via L2TP tunnel after this Forwarding function is enabled. Remote Subnet Enter the remote IP address that L2TP protects. Remote Subnet Mask Enter the remote netmask that L2TP protects.

  • Page 75: Pptp

    UG87-LW User Guide failure. Range: 0-10. User can enter some other PPP initialization strings in this Expert Options field and separate the strings with blank space. Table 4-3-7-6 L2TP Parameters 4.3.7.5 PPTP Point-to-Point Tunneling Protocol (PPTP) is a protocol that allows corporations to extend their own corporate network through private "tunnels"...
  • Page 76 UG87-LW User Guide Figure 4-3-7-9 PPTP Advanced Settings Item Description Local IP Address Set IP address of PPTP client. Peer IP Address Enter tunnel IP address of PPTP server. Enable NAT Enable the NAT faction of PPTP. Enable MPPE Enable MPPE encryption.

  • Page 77: Openvpn Client

    UG87-LW User Guide 4.3.7.6 OpenVPN Client OpenVPN is an open source virtual private network (VPN) product that offers a simplified security framework, modular network design, and cross-platform portability. Advantages of OpenVPN include: Security provisions that function against both active and passive attacks.

  • Page 78: Openvpn Server

    Set the local route's IP address. Subnet Mask Set the local route's netmask. Table 4-3-7-9 OpenVPN Client Parameters 4.3.7.7 OpenVPN Server The UG87-LW supports OpenVPN server to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities.
  • Page 79 UG87-LW User Guide Figure 4-3-7-11 Figure 4-3-7-12 OpenVPN Server Item Description Enable Enable/disable OpenVPN server. Protocol Select from TCP and UDP. Port Fill in listening port number. Range: 1-65535. Enter WAN IP address or LAN IP address. Leaving it blank Listening IP refers to all active WAN IP and LAN IP address.

  • Page 80: Certifications

    UG87-LW User Guide Remote Virtual IP The remote tunnel address of OpenVPN's tunnel. Client Subnet Local subnet IP address of OpenVPN client. Client Netmask Local netmask of OpenVPN client. Renegotiation Interval(s) Set interval for renegotiation. Range: 0-86400. Max Clients Maximum OpenVPN client number. Range: 1-128.
  • Page 81 UG87-LW User Guide Import/Export CA certificate file. Public Key Import/Export public key file. Private Key Import/Export private key file. Import/Export TA key file. Preshared Key Import/Export static key file. PKCS12 Import/Export PKCS12 certificate file. Table 4-3-7-11 OpenVPN Client Certification Parameters...

  • Page 82: System

    UG87-LW User Guide IPsec Item Description Import/Export CA certificate. Client Key Import/Export client key. Server Key Import/Export server key. Private Key Import/Export private key. Import/Export certificate recovery list. Table 4-3-7-13 IPsec Parameters 4.4 System This section describes how to configure general settings, such as administration account, access service, system time, common user management, SNMP, AAA, event alarms, etc.

  • Page 83: Account Management

    UG87-LW User Guide Port Set port number of the services. Range: 1-65535. Remote Access the gateway remotely. Disable Users can log in the device locally via HTTP to access and HTTP control it through Web after the option is checked.

  • Page 84: System Time

    UG87-LW User Guide Related Configuration Example Account Info Management 4.4.1.3 System Time This section explains how to set the system time including time zone and time synchronization type. Note: to ensure that the gateway runs with the correct time, it’s recommended that you set the system time when configuring the gateway.

  • Page 85: Smtp

    UG87-LW User Guide Current Time Show the current system time. Time Zone Click the drop down list to select the time zone you are in. Sync Type Click the drop down list to select the time synchronization type. Sync with Browser Synchronize time with browser.

  • Page 86: Phone

    UG87-LW User Guide Email Address Enter the sender's email account. Password Enter the sender's email password. SMTP Server Address Enter SMTP server's domain name. Port Enter SMTP server port. Range: 1-65535. Enable TLS Enable or disable TLS encryption. Email Recipients Email Address Add recipients' email address.

  • Page 87: User Management

    UG87-LW User Guide Phone Item Description Phone Number List Number Enter the telephone number. Digits, "+" and "-" are allowed. Description The description of the telephone number. Phone Group Group ID Set number for phone group. Range: 1-100. Description The description of the phone group.

  • Page 88: Snmp

    Configure MIB View. Configure VCAM. Related Configuration Example SNMP Application Example 4.4.3.1 SNMP The UG87-LW supports SNMPv1, SNMPv2c and SNMPv3 version. SNMPv1 and SNMPv2c employ community name authentication. SNMPv3 employs authentication encryption by username and password. Figure 4-4-3-1 SNMP Settings...

  • Page 89: Mib View

    UG87-LW User Guide SNMP Version Select SNMP version; support SNMP v1/v2c/v3. Location Information Fill in the location information. Contact Information Fill in the contact information. Table 4-4-3-1 SNMP Parameters 4.4.3.2 MIB View This section explains how to configure MIB view for the objects.

  • Page 90: Trap

    UG87-LW User Guide VACM Item Description SNMP v1 & v2 User List Community Set the community name. Permission Select from "Read-Only" and "Read-Write". MIB View Select an MIB view to set permissions from the MIB view list. Network The IP address and bits of the external network accessing the MIB view.

  • Page 91: Mib

    UG87-LW User Guide 4.4.3.5 MIB This section describes how to download MIB files. The last MIB file “URSA-gateway-MIB.txt” is for the UG87-LW. Figure 4-4-3-5 Item Description MIB File Select the MIB file you need. Download Click "Download" button to download the MIB file to PC.

  • Page 92: Tacacs

    UG87-LW User Guide RADIUS Item Description Enable Enable or disable RADIUS. Server IP Address Fill in the RADIUS server IP address/domain name. Server Port Fill in the RADIUS server port. Range: 1-65535. Fill in the key consistent with that of RADIUS server in order to get connected with RADIUS server.

  • Page 93: Authentication

    UG87-LW User Guide Figure 4-3-4-3 LDAP Item Description Enable Enable or Disable LDAP. Fill in the LDAP server's IP address/domain name. The maximum count Server IP Address is 10. Server Port Fill in the LDAP server's port. Range: 1-65535 Base DN The top of LDAP directory tree.

  • Page 94: Device Management

    UG87-LW User Guide Figure 4-3-4-4 Authentication Item Description Console Select authentication for Console access. Select authentication for Web access. Telnet Select authentication for Telnet access. Select authentication for SSH access. Table 4-3-4-4 Authentication Parameters 4.3.5 Device Management You can connect the device to the DeviceHub on this page so as to manage the gateway centrally and remotely.

  • Page 95: Events

    UG87-LW User Guide DeviceHub. Click this button to disconnect the gateway from the Disconnected DeviceHub. Activation Server Address IP address or domain of the DeviceHub. DeviceHub Server The URL address for the device to connect to the DeviceHub, Address e.g. http://220.82.63.79:8080/acs.

  • Page 96: Events Settings

    UG87-LW User Guide “Unread”. Type Show the event type that should be alarmed. Time Show the alarm time. Message Show the alarm content. Table 4-3-6-1 Events Parameters 4.3.6.2 Events Settings In this section, you can decide what events to record and whether you want to receive email and SMS notifications when any change occurs.

  • Page 97: Industrial Interface

    Events Application Example 4.5 Industrial Interface The UG87-LW is capable of connecting with terminals through industrial interface so as to realize wireless communication between terminals and remote data center. There are two types of the gateway’s industrial interface: serial port RS232 and I/O(digital input and digital output).

  • Page 98: I/O

    UG87-LW User Guide 4.5.1 I/O 4.5.1.1 DI This section explains how to configure monitoring condition on digital input, and take certain actions once the condition is reached. Figure 4-5-1-1 Item Description Enable Enable or disable DI. Mode Options are "High Level", "Low Level", and "Counter".
  • Page 99 UG87-LW User Guide Related Topics DO Setting Email Setting Connect on Demand 4.5.1.2 DO This section describes how to configure digital output mode. Figure 4-5-1-2 Item Description Enable Enable or disable DO. Mode Select from "High Level", "Low Level", and "Pulse".

  • Page 100: Serial Port

    UG87-LW User Guide 4.5.2 Serial Port Serial 1 is used for RS232. This section explains how to configure serial port parameters to achieve communication with serial terminals, and configure work mode to achieve communication with the remote data center, so as to achieve two-way communication between serial terminals and remote data center.
  • Page 101 UG87-LW User Guide Figure 4-5-2-2 DTU Mode Item Description Default Select from "None", "Transparent", "Modbus", and "TCP server". Transparent: the routed is used as TCP client/UDP and transmits data transparently. TCP server: the gateway is used as TCP server and transmits Protocol data transparently.
  • Page 102 UG87-LW User Guide the serial frame interval. Table 4-5-2-2 DTU Parameters Item Description Default Transparent Protocol Select "TCP" or "UDP" protocol. After TCP client is connected with TCP server, the client Keepalive will send heartbeat packet by TCP regularly to keep alive.

  • Page 103: Modbus Master

    UG87-LW User Guide 4.5.3 Modbus Master UG87-LW can be set as Modbus Master to poll the remote Modbus Slave and send alarm according to the response. 4.5.3.1 Modbus Master You can configure Modbus Master’s parameters on this page. Figure 4-5-3-1...
  • Page 104 UG87-LW User Guide from the gateway in different conditions. Figure 4-5-3-2 Channel Setting Item Description Name Set the name to identify the remote channel. It cannot be blank. Slave ID Set Modbus slave ID. Address The starting address for reading.

  • Page 105: Maintenance

    UG87-LW User Guide Alarm Setting Item Description Set the same name with the channel name to identify the remote Name channel. Condition The condition that triggers alert. Min. Set the min. value to trigger the alert. When the actual value is less than Threshold this value, the alarm will be triggered.

  • Page 106: Traceroute

    UG87-LW User Guide PING Item Description Ping outer network from the gateway. Host Table 4-6-1-1 IP Ping Parameters 4.6.1.2 Traceroute Traceroute tool is used for troubleshooting network routing failures. Figure 4-6-1-2 Traceroute Item Description Host Address of the destination host to be detected.

  • Page 107: Log

    UG87-LW User Guide Schedule Item Description Schedule Select schedule type. Reboot Reboot the gateway regularly. Frequency Select the frequency to execute the schedule. Hour & Minute Select the time to execute the schedule. Table 4-5-2-1 Schedule Parameters Related Configuration Example Schedule Application Example 4.6.3 Log...

  • Page 108: Log Settings

    UG87-LW User Guide System Log Item Description Download Download log file. View recent (lines) View the specified lines of system log. Clear Log Clear the current system log. Table 4-6-3-1 System Log Parameters 4.6.3.2 Log Settings This section explains how to enable remote log server and local log setting.

  • Page 109: Upgrade

    UG87-LW User Guide 4.6.4 Upgrade This section describes how to upgrade the gateway firmware via web. Generally you don’t need to do the firmware upgrade. Note: any operation on web page is not allowed during firmware upgrade, otherwise the upgrade will be interrupted, or even the device will break down.

  • Page 110: Reboot

    UG87-LW User Guide Figure 4-6-5-1 Backup and Restore Item Description Click "Browse" button to select configuration file, and then click "Import" Config File button to upload the configuration file to the gateway. Backup Click "Backup" to export the current configuration file to the PC.

  • Page 111: App

    UG87-LW User Guide Figure 4-5-6-1 4.7 APP 4.7.1 Python Python is an object-oriented programming language that has gained popularity because of its clear syntax and readability. As an interpreted language, Python has a design philosophy that emphasizes code readability, notably using whitespace indentation to delimit code blocks rather than curly brackets or keywords, and a syntax that allows programmers to express concepts in fewer lines of code than it’s used in other languages such as C++ or Java.

  • Page 112: App Manager Configuration

    UG87-LW User Guide Figure 4-7-1-1 Python Item Description Show AppManager's running status, like "Uninstalled", AppManager Status "Running" or "Stopped". SDK Version Show the version of the installed SDK. SDK Path Show the SDK installation path. Available Storage Select available storage such as Micro SD or SSD to install SDK.

  • Page 113: Python App

    UG87-LW User Guide After enabling Python AppManager, user can click "View" Enable button on the "Python" webpage to view the application status managed by AppManager. App Management Show the ID of the imported App. App Command Show the name of the imported App.

  • Page 114: Chapter 5 Application Examples

    UG87-LW User Guide Chapter 5 Application Examples 5.1 Application configuration You can create a new application on this page, mainly used for defining the method to decode the data sent from end-device. The configuration procedures are listed as below. 1. Go to “LoRaWAN” > “Network Server” > “Application”.

  • Page 115: Device Profiles Configuration

    UG87-LW User Guide 5.2 Device Profiles Configuration Device Profiles Setting Item Description Default Enter the Name of the application profile. Name Null E.g. Smoker-sensor-app. The TXPower indicates power levels relative to the Max EIRP level of Enter the maximum transmit power.
  • Page 116 UG87-LW User Guide accept procedure. Select from: “A” and “C”. A: Class A operation is the lowest power end-device system for applications that only require downlink communication from the server shortly after the end-device has sent an uplink transmission. Class Type...

  • Page 117: Device Configuration

    UG87-LW User Guide Enter the time for confirmed downlink ACK Timeout transmissions. Only class C. 5.3 Device Configuration Go to “LoRaWAN” > “Network Server” > “Device” You can edit the device configuration by clicking or create a new device by clicking , as shown：...
  • Page 118 UG87-LW User Guide ABP stands for Authentication By Personalisation. It means that the encryption keys are configured manually on the device and can start sending frames to the Gateway without needing a 'handshake' procedure to exchange the keys (such as the one performed during an OTAA join procedure).
  • Page 119 UG87-LW User Guide Users cloud reset the a personalized end-device manually, then the frame counters on the end-device and the frame counters on the network server for that end-device will be reset to 0. OTAA stands for Over The Air Activation. With this method the end-device sends a Join request to the gateway using the Application Key, Application Key is a shared secret key unique to your device to generate the session keys that prove its identity to the network.

  • Page 120: Account Info Management

    5.4 Account Info Management It is strongly recommended that you change the default username and password of the administrator account when you log in Ursalink gateway’s WEB GUI page at first time for the sake of security. Example: change the username and password of administrator account to “uradmin” and “URpassword”.

  • Page 121: Common User Management

    Account Management 5.5 Common User Management The UG87-LW is capable of creating up to 5 common user accounts that have different authorities, including “Read-Only” and “Read-Write” to manage the gateway. “Read-Only” refers to the authority that user is only allowed to view the configuration;...

  • Page 122: System Time Management

    UG87-LW User Guide 5.6 System Time Management There are 3 ways to synchronize the system time: “Sync with Browser”, “Set up Manually”, and “Sync with NTP Server”. Note: to ensure that the gateway runs with correct time, it’s recommended that you set the system time when you configure the gateway.

  • Page 123: Backup And Restore Configuration

    UG87-LW User Guide Configure an available NTP server address such as “time.windows.com”. Click “Save” button. Related Topic System Time Setting 5.7 Backup and Restore Configuration A. Backup Configuration Go to “Maintenance > Backup and Restore > Backup and Restore”. Click “Backup” button under “Backup running-config”.

  • Page 124: Restore Factory Defaults

    UG87-LW User Guide Restore Configuration Go to “Maintenance > Backup and Restore > Backup and Restore”. Click “Browse” button under the “Restore” to select configuration file from PC. Click “Import” to import the selected configuration file to the gateway. Related Topic Backup and Restore 5.8 Restore Factory Defaults...
  • Page 125 UG87-LW User Guide Then the gateway will reboot and restore to factory settings immediately.

  • Page 126: Via Hardware

    The gateway is now reset to factory defaults. 5.9 Firmware Upgrade It is suggested that you contact Ursalink technical support first before you upgrade gateway firmware. After getting firmware file from Ursalink technical support, please refer to the following steps...
  • Page 127 UG87-LW User Guide Go to “Maintenance > Upgrade”. Click “Browse” and select the correct firmware file from the PC. Click “Upgrade” and the gateway will check if the firmware file is correct. If it’s correct, the firmware will be imported to the gateway, and then the gateway will start to upgrade.

  • Page 128: Events Application Example

    UG87-LW User Guide 5.10 Events Application Example Example In this section, we will take an example of sending alarm messages by email when the following events occur and recording the event alarms on the Web GUI. Events Actions to make events occur (for test) Cellular network is connected.
  • Page 129 UG87-LW User Guide To test the functionality of Alarm, please take the corresponding actions listed above. It will send an alarm e-mail to you when the relevant event occurs. Refresh the web GUI, go to “Events > Events”, and you will find the events records.

  • Page 130: Schedule Application Example

    UG87-LW User Guide 5.11 Schedule Application Example Through schedule configuration, the UG87-LW can be set to reboot at preset time every day. Example Configure gateway to reboot at 0:00 every day. Configuration Steps Go to “Maintenance > Schedule > Schedule”.
  • Page 131 UG87-LW User Guide Application 2 Send the system log to the remote syslog server. Server IP: 110.22.14.43; Port: 514 Go to “Maintenance > Log > Log Settings” to configure the parameters as below. Then click “Save” and “Apply” button. Related Topic...

  • Page 132: Snmp Application Example

    Before you configure SNMP parameters, please download the relevant “MIB” file from the UG87-LW’s WEB GUI first, and then upload it to any software or tool which supports standard SNMP protocol. Here we take “ManageEngine MibBrowser Free Tool” as an example to access the gateway to query cellular information.
  • Page 133 UG87-LW User Guide Go to “System > SNMP > SNMP” on the gateway’s WEB GUI. Check “Enable” option, then click “Save” button. Go to “System > SNMP > MIB View”. Click to add a new MIB view and define the...
  • Page 134 UG87-LW User Guide Go to “System > SNMP > VACM”. Click to add a new VACM setting to define the access authority for the specified view from the specified outside network. Click “Save” and “Apply” to make the changes take effect.

  • Page 135: Cellular Connection

    If both cellular interfaces are enabled, SIM1 interface takes precedence as default. Example We are about to take an example of inserting a SIM card into SIM1 slot of the UG87-LW and configuring the gateway to get Internet access through cellular. Configuration Steps Go to “Network >...
  • Page 136 UG87-LW User Guide Click “Save” and “Apply” for configuration to take effect. Note: If you select “Auto”, the gateway will obtain ISP information from SIM card to set APN, Username, and Password automatically. This option will only be taken effect when the SIM card is issued from well-known ISP.

  • Page 137: Dual Sim Backup Application Example

    5.15 Dual SIM Backup Application Example Example In this section we will take an example of inserting two SIM cards into the UG87-LW. When one SIM fails, gateway will try to connect with the other SIM as backup link. Configuration Steps Go to “Network >...
  • Page 138 UG87-LW User Guide Enable “Dual SIM Strategy”, and configure the corresponding options as below. ICMP server can be configured as any reachable IP address. Then click “Save” and “Apply” button. Go to “Status > Cellular”, and you will see the gateway is connected to the network via...
  • Page 139 UG87-LW User Guide You can remove SIM1 to make the gateway fail to connect to network via it. Go to “Status > Cellular” again, and you will see the gateway is connected to the network through SIM2. Now SIM2 becomes the main SIM, and SIM1 runs as the backup.

  • Page 140: Nat Application Example

    Port Mapping 5.18 Access Control Application Example Application Example GE port of the UG87-LW is set as LAN with IP 192.168.1.0/24. Then configure the gateway to deny accessing to Google IP 198.98.108.64 from local device with IP 192.168.1.12. Configuration Steps Go to “Network >...

  • Page 141: Dtu Application Example

    Configure interface list. Then click “Save” and “Apply” button. Related Topic 5.18 DTU Application Example Example PLC is connected with the UG87-LW via RS232. Then enable DTU function of the UG87-LW to make a remote TCP server communicate with PLC. Refer to the following topological graph.
  • Page 142 UG87-LW User Guide Serial Parameters of the PLC Baud Rate 9600 Data Bit Stop Bit Parity None Configuration Steps Go to “Industrial > Serial Port” and configure serial port parameters. The serial port parameter shall be kept in consistency with those of PLC, as shown in figure below.
  • Page 143 Once you complete all configurations, click “Save” and “Apply” button. Start TCP server on PC. Take “Netassist” test software as example. Make sure port mapping is already done. Connect the UG87-LW to PC via RS232 for PLC simulation. Then start “sscom” software...
  • Page 144 UG87-LW User Guide on the PC to test communication through serial port. After connection is established between the UG87-LW and the TCP server, you can send data between sscom and netassit. PC side TCP server side...

  • Page 145: Pptp Application Example

    Serial Port 5.19 PPTP Application Example Example Configure the UG87-LW as PPTP client to connect to a PPTP server in order to have data transferred securely. Refer to the following topological graph. Configuration Steps Go to “Network > VPN > PPTP”, configure PPTP server IP address, username and...
  • Page 146 UG87-LW User Guide Note: If you want to have all data transferred through VPN tunnel, check “Global Traffic Forwarding” option. If you want to access peer subnet such as 192.168.3.0/24, you need to configure the subnet and mask to add the route.
  • Page 147 UG87-LW User Guide If the PPTP server assigns fixed tunnel IP to the client, then you can fill in the local tunnel IP and remote tunnel IP, shown as below. Otherwise PPTP server will assign tunnel IP randomly. Click “Save” button when you complete all settings, and then the advanced settings will be hidden again.

Table of Contents