Page 1
MLB-G420X MLB-G4201 Ethernet to 2G/3G Terminal MLB-G4202 Ethernet to LTE Terminal...
Page 2
WARNING: The MLiS GSM wireless terminal is a RF product intended for interfacing and operating with a host device. Local relevant RF regulations such as allowed frequencies and usage in commercial flights must be observed.
CONTENTS INTRODUCTION ..............................6 Description ..............................6 Highlights ..............................6 Functional Block diagram ........................11 Precautions ............................. 12 MECHANICAL DESCRIPTION ..........................13 Overview ..............................13 Dimensions.............................. 13 ELECTRICAL INTERFACE DESCRIPTIONS ......................15 Right side view (DB9 connector) ......................15 Left side view (DC Jack & Industry connector)..................16 Frond view (Antenna &...
Page 4
External input x2 ............................. 76 External Relay x1 ............................. 76 DB9 Connector ............................76 Install SIM card............................76 MLiS Cellular Control Protocol (MCCP) ......................77 SALES CONTACT ................................ 87 ORDERING INFORMATION ..........................88 List of Figures Figure 1: Functional Block Diagram for MLB-G420X ....................11 Figure 2: Chassis Dimension for MLB-G420X ......................
Page 5
Figure 6: SIM Card Holder for MLB-G420X ....................... 20 List of Tables Table 1: Chassis Dimensions and Mechanical Description for MLB-G420X ............. 14 Table 2: DB9 pins define for MLB-G420X ......................... 15 Table 3: Interfaces and Indicators Description of MLB-G420X ................16 Table 4: LED functions of MLB-G420X ........................
1 INTRODUCTION 1.1 Description The MLiS MLB-G4201 is a Ethernet to 3G wireless terminal designed for RJ45 communication over TCP/IP via any readily available 3G carrier network. Moreover, the MLiS MLB-G4202 is an Ethernet to LTE wireless terminal designed for RJ45 communication over TCP/IP via any readily available LTE carrier network.
Page 7
15 KV Event Trigger GPRS/Reboot/IO/Relay Port Forwarding IPSec OpenVPN MCCP/MCCU API:MLiS Cellular Control Protocol ( = MCCP) Utility:MLiS Cellular Configuration Utility ( = MCCU) Interfaces RF Antenna Socket 50 Ohm SMA Power Connector DC jack connector/ Terminal Block SIM Card Num...
Page 8
Ethernet Interface 2 x RJ45 connector for 10/100M Serial Interface DB9 connector (male) 8 x Working Status Indicator 3 x Network Status Indicator Reset HW Reset Approval Certification EN55022/24 FCC Part 15B IEC61000-4-2 IEC61000-4-3 IEC61000-4-4 IEC61000-4-5 IEC61000-4-6 EN301908-1 Safety EN60950-1...
Page 9
15 KV Port Forwarding IPSec OpenVPN Event Trigger GPRS/Reboot/IO/Relay MCCP/MCCU API:MLiS Cellular Control Protocol ( = MCCP) Utility:MLiS Cellular Configuration Utility ( = MCCU) Interfaces RF Antenna Socket 50 Ohm SMA Power Connector DC jack connector/ Terminal Block SIM Card Num...
1.3 Functional Block Diagram Figure 1: Functional Block Diagram for MLB-G420X The MLB-G420X consists of a fully certified (CE /NCC approved) GSM/GPRS engine, SIM card holder and power regulator. The wireless terminal is supplied with power via the DC jack and terminal block. The remaining RJ45 connector is used for data communications.
1.4 Precautions The MLB-G420X wireless terminal is designed for indoor use only. For outdoor use, it has to be integrated into a weatherproof enclosure. Do not exceed the environmental and electrical limits as specified in the user manual.
2 MECHANICAL DESCRIPTION 2.1 Overview The pictures below show the mechanical design of the wireless terminal along with the positions of the different connectors. 2.2 Dimensions Figure 2-1: Chassis Dimension for MLB-G4201...
3 ELECTRICAL INTERFACE DESCRIPTIONS 3.1 Buttom side view (DB9 connector) Figure 4:RS232/RS422/RS485 for MLB-G420X The table below defines the RS-232/422/485 pin configuration on the wireless terminal. Table 2: DB9 Pins Definition for MLB-G420X...
3.2 Top side view (DC Jack & Power Terminal block) Figure 5: DC and Terminal Block for MLB-G420X For power redundancy purpose, it is recommended to connect both DC jack and the wire power line to the corresponding power pinouts of terminal block to a DC power sources. The interfaces description and pinouts definition for MLB-G420X are as follows: Name Description...
Page 17
Note: The reset button is located on the top panel of MLB-G420X. You can reboot it to factory default settings by pressing the RESET button with a pointed object such as an un folded paper clip. System reboot: Hold the RESET button down for 1 second and then release Reset to factory default: Hold the reset button down for 30 seconds while the READY LED and SIM LED go off until READY LED starts bliking green.
ANT2, there would be no cellular signal received to establish the traffic communication. For optimum RF performance, the MLiS wireless terminal has to be connected to an external RF antenna matched to 50ohms. Please use a SMA Male connection for the wireless terminal.
SIM2 Amber On/Off SIM 2 is active or inactive. Blink SIM 2 is not inserted or PIN code is incorrect. MLB-G4202 Registered to a base station with cellular connection in LTE Amber mode Registered to a base station with cellular connection in UMTS...
3.4 Hardware Installation In the bottom, the MLB-G420X wireless terminal is provided with a SIM card reader designed for 1.8V and 3V SIM cards. It is the flip-up type which can be locked. It can be accessed through removing the cover as shown below.
Page 21
4. Install the screw to secure the SIM card slot cover. DIN-Rail Mounting The aluminum DIN-Rail attachment plate should already be fixed to the back panel of the MLB-G420X when you take it out of the box. 1. Insert the top of the DIN-Rail stiff metal spring into the slot.
Page 22
2. The top of stiff metal spring of the DIN-Rail mounting kit unit will snap into the Din rail rack as shown in the following illustration. To remove MLB-G420X from the DIN-Rail, simply reverse Steps 1 and 2.
Web Console Power on MLB-G420X and use Ethernet Cat cable to configure MLB-G420X. Web Console management ~ Factory default IP: 10.0.10.1 Subnet mask: 255.255.255.0 Please set PC & MLB-G420X into same subnetwork. The Default IP of MLB-G420X is 10.0.10.1/24. Please set up your PC with the same network segment, such as 10.0.10.2/24.
Overview This page displays the system information of MLB-G420X. 3.6.1 System Info Item Description Model name Display the model name Device name Display the device name Serial No Display the serial number System up time Display system run times Firmware version Display the Firmware version Firmware build time Display the Firmware build time...
3.6.2 LAN Info Item Description Device MAC address Display physical address IP address Display the IP address Subnet Mask Display the subnet mask 3.6.3 Cellular Info Item Description Cellular RSSI Signal Cellular WAN IP address Display the WAN IP address Cellular mode Display the cellular mode IMEI...
Basic Settings The Basic Settings group includes the most commonly used settings required by administrators to maintain and control the MLB-G420X. 3.7.1 Network Settings You can provide the Device Name and change the Lan settings as desired. Please click “Save” if you change the configuration and also wish to update the settings on this device. Save Item Description...
3.7.3 Cellular WAN Settings MLB-G420X supports Dual-SIM for cellular connection redundancy. Redundant: With Disable, SIM 1 is the only activate SIM interface; With Enable, the selected SIM # interface in the priority SIM menu would be the main one. The other SIM interface would be the backup one.
Page 28
Item Description Access Point Name Personal Identification Number Select authentication protocol if your service provider Authentication Protocol provided Enter the username for authentication if your service Username provider provided Enter the username for authentication if your service Password provider provided 1.Click to Apply all settings.
Item Description Access point name Personal identification number Select authentication protocol if your service provider Authentication Protocol provided Enter the username for authentication if your service Username provider provided Enter the username for authentication if your service Password provider provided 1.Click to Apply all settings.
Page 30
Item Description DHCP server Select “Enable” or “Disable” by drop-down list Default gateway Set default gateway Subnet mask Set subnet mask Primary DNS server Set IP address of the primary DNS server. Second DNS server Set IP address of the secondary DNS server. Start IP address Enter the starting IP address in the IP address pool.
The user can check if the specific MAC network device gets the corresponding IP address successfully in the windows command. Item Description 1. Input MAC address and assign IP address. Static DHCP mapping 2. Enable the mapping setting. 3. Click Apply to save settings. 1.Click to Apply all settings.
Item Description 1. Select Protocol and input Public Port, Internal IP, and Internal Port. Port Forwarding 2. Enable the mapping setting. 3. Click Apply to save settings. 1. Click to Apply all settings. 2. Go to “Save” then click on the save button if you Apply &...
Page 34
Item Description 1. Select Working Mode which is Console mode or Transport Mode, 2. Select Serial Interface, Baud-Rate, Parity, Data Bits, Stop Bits. COM Port settings 3. Select Operation Mode; Input IP address & Port # for TCP/Client & UDP mode. Input Port # for TCP/Server mode.
3.8.2 SNMP Agent Simple Network Management Protocol (SNMP) is an OSI application layer protocol that facilitates management information between network devices. SNMP is based on the manager/agent model of a network management architecture. An SNMP-managed network consists of three key roles: SNMP Manager, agents, and managed devices. SNMP commands are typically issued by a network management station which is called a network manager and are responded to by a network management agent within each managed device.
Page 37
Item Description 1. Enable the SNMP Agent setting. 2. Click Apply to save settings. 3. Need to go to “Save” then click on the save button Enable to complete the process Save Indicates the community read access string to permit access to SNMP agent. The allowed string length is 0 to 255, and the allowed content is the ASCII characters from 33 to 126.
3.8.1 IPSec-based VPN Setting VPN (Virtual Private Network) provides private network security over Internet by establishing secure tunnels, so that data can be exchanged in a secure manner. IPSec is layer 3 protocol with authentication and encryption implementation. Item Description IPSec Enable Select “Enable”...
Page 39
IPSec Settings Item Description Connection name Enter a descriptive name for the VPN tunnel. Select Start in Initial to set the MLB-G420X to initiate Startup mode a connection with the remote VPN gateway. Enter the remote VPN server subnet IP of the local Local network network.
Page 40
Item Description IKE Proposal Select IKEv1 or IKEv2 Select main mode or aggressive mode to configure Operation Mode the standard negotiation parameters for IKE Phase 1 of the VPN Tunnel. Authentication Mode Select Pre-shared key authentication mode to for Pre-shared Key phase 1 key exchange.
Page 41
Item Description Select the DES, 3DES or AES128 algorithm for the VPN Encryption Algorithm: ISAKMP phase 2 encryption mode. Select the MD5 or SHA-1 VPN key exchange phase 2 Hash Algorithm: hash mode. When you enable the Dead Peer Detection (DPD) feature, the OnCell G3470A-LTE performs one of the following actions when connection to a remote IPSec tunnel is down:...
Page 42
IPSec Secure Tunnel Setup Example MLB-G420X_A Configuration MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 43
MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 44
The user can go to IPSec log to check the IPSec connection status. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 46
The user can go to IPSec log to check the IPSec connection status. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 47
Note: You can verify the IPSec connection by running the ICMP Ping command. In the above setup example scenario, PC A can ping PCB (192.168.0.100) and PC B can ping PC A (10.0.10.100) to verify if IPSec tunnel connection is successfully established. MLB-G420X Wireless Terminal User Manual Rev 1.1...
3.8.2 OpenVPN OpenVPN is an open-source software application that implements virtual private network (VPN) techniques for creating secure site-to-site connections in routed configurations and remote access facilities.It allows the MLB-G420X LAN network connection have access capability to the network behind the VPN server. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 49
Note: 1. Please make sure that the firewall setting is OFF on both PC A and PC B. 2. Please make sure that IPSec-based VPN setting function is OFF. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 50
3.8.3 X.509 Certificate X.509 is a digital certificate method mostly used for IPSec Authentication. MLB-G420X can generate a trusted Root Certification and then generate the certificate to export in order to import on the remote VPN router gateway. IPSec secure tunnel with X.509 Authentication Method Setup Example MLB-G402X_A Configuration Steps MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 51
Note: 1. Please make sure to delete the previous root CA before generating the new one. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 52
The user can go to the IP-based VPN setting to enable the IPSec function also to create the IPSec connection session by clicking on the tab of Edit. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 53
Note: 1. Please make sure that the function of OpenVPN is disabled first. The user has to change the authentication mode also select the local certificate and remote certificate carefully. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 54
MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 55
Note: 1.Click to Apply all settings. 2.Go to “Save” then click on the save button if you wish to update the configuration settings. The user can go to IPSec log to check the IPSec with X.509 authentication connection status. Note: You can verify the IPSec connection with X.509 authentication method by running the ICMP Ping command.
Page 57
MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 58
The user can go to the IP-based VPN setting to enable the IPSec function also to create the IPSec connection session by clicking on the tab of Edit. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 59
Note: 1. Please make sure that the function of OpenVPN is disabled first. The user has to change the authentication mode also select the local certificate and remote certificate carefully. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 60
MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 61
Note: 1.Click to Apply all settings. 2.Go to “Save” then click on the save button if you wish to update the configuration settings. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 62
The user can go to IPSec log to check the IPSec with X.509 authentication connection status. Note: You can verify the IPSec connection with X.509 authentication method by running the ICMP Ping command. In the above setup example scenario, PC A can ping PC B (192.168.0.100) and PC B can ping PC A (10.0.10.100) to verify if IPSec tunnel connection is successfully established.
Maintenance 3.9.1 Ping The ping function provides the user to a useful diagnosis tool for troubleshooting network problems by using the ICMP ping command. Simply input the desired IP address in the Destination field, and then press Ping button to issue the Ping command from the Web console interface. You can ping from MLB-G420X to any desired IP addresses of hosts reside on the Cellular WAN side.
Page 64
Item Description Inputting a node’s IP address in the Destination field, Destination you can use the ping command to make sure it exists and whether or not the access path is available. Ping Click to ping. Note: Please note that the TCP ports of 22, 80 is not available on cellular’s WAN port. Also the cellular’s WAN port of MLB-G420X would not resond to ICMP ping command.
This function of the AT Commands allows the external application to obtain various status information from MLB-G420X series. For detailed AT commands syntax description, please contact Service and Support for such requests. E-Mail: support.mlis@schmidtelectronics.com Item Description Command Input AT command in the command field.
3.9.3 Password You can change the password as desired in the field. Item Description Current Password Input current password. New password Input new password. Confirm the new password Input new password again. Click Apply to change password. Apply & Save Need to go to “save”...
3.9.4 User management MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 68
Item Description Current Password Input current password. New password Input new password. Confirm the new password Input new password again. Click Apply to change password. Apply & Save Need to go to “save” then click on the save button to complete the process.
3.10 Update FW The MLB-G420X can be enhanced with more value-added functions by installing firmware upgrades. Please download the latest release firmware from MLiS website. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 70
Item Description Firmware File Click to load the firmware file Upload Click to upgrade the firmware Note: Do Not power down the device during the firmware upgrade process. MLB-G420X Wireless Terminal User Manual Rev 1.1...
3.11 Reset to Default All the configuration will be reset to the factory default value. Item Description Reset Click to reset MLB-G420X to default. MLB-G420X Wireless Terminal User Manual Rev 1.1...
3.12 Status 3.12.1 IO/Relay Status Item Description Click GET to obtain the status of DI1. Click GET to obtain the status of DI2. Relay Trigger the Relay to enable/disable relay. Note: The default status of Relay is “Normal Open”. MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 74
Syslog Please provide us the syslog in the text file upon request for further diagnosis and analysis purpose. Item Description IPSec Log Record the IPSec log. OpenVPN Log Record the OpenVPN log. Syslog Record the syslog. MLB-G420X Wireless Terminal User Manual Rev 1.1...
3.13 Save Please make sure to complete this step in order to update all the configuration changes after you click on apply on each function’s setting page. Item Description Click Save button to save all setting you configure. Then Save MLB-G420X will reboot.
4 OPERATING NOTE 4.1 Power on the Modem After plugin the power adapter, the modem is usually fully operational within 60 seconds, after powering it up. Depending on the signal strength of the network in the area, logging into a network may take longer and is outside the control of the modem.
5 MLiS Cellular Control Protocol (MCCP) MLiS user can remotely control MLB-G420X through MLiS Cellular Control Protocol. MLiS Cellular Control Protocol is open to MLiS user. The MCCP should be converted to hexadecimal then count with checksum. If any question about MCCP, please feel free to contact us.
Page 78
MCCP Setting Process via Internet/RS-232 MCCP Setting Process via SMS (using admin phone number) MLB-G420X Wireless Terminal User Manual Rev 1.1...
Page 79
Connection Profile Command Header MLB-CONNECTIONPROFILE 1. Transparent Client Packing Mode 2. Transparent Client Fast Mode 3. Transparent Server Packing Mode Connection Type 4. Transparent Server Fast Mode 5. Socket UDP Client Mode 6. Socket TCP Client Mode 7. Socket TCP Server Mode Connection Index 0 ~ 4 Write...
Page 81
5. 9600 6. 4800 7. 2400 8. 1200 9. 300 10. 110 1. None Parity Bit 2. ODD 3. EVEN 1. 1-bit Stop Bit 2. 2-bit 0. Disable HW Flow Control 1. Enable 1. High Level DTR Level 2. Low Level 1.
Page 82
Internet Setting Command Header MLB-INTERNETSETTING User Name Maximum 31 chars Password Maximum 31 chars 1. Transparent Client Packing Mode 2. Transparent Client Fast Mode 3. Transparent Server Packing Mode Internet Service Type 4. Transparent Server Fast Mode 5. Socket UDP Client Mode Write 6.
Page 84
Reconnect Setting Command Header MLB-RECONNECTSETTING: 0. No Retry Connection Retry Time 9999. No limitation Write Range (0 ~ 9999) Retry Time Interval Range (1 ~ 50) Minute End Tag Command Header MLB+RECONNECTSETTING: End Tag Response format Response +: { Retry Time }, { Retry Time Interval } Read Example: Send -->...
Page 85
Heartbeat Setting Command Header MLB-HEARTBEATSETTING 0. No Heart Beat Heart Beat Time Range (0 ~ 9999) Second Write Heart Beat String Maximum 15 chars 0. Send to profile 0 Sending Type 1. Send to all profiles End Tag Command Header MLB+RECONNECTSETTING: End Tag Response format...
Page 86
Report DIO Setting Command Header MLB-REPORTDIOXSETTING 1. Via SMS Write Report path 2. Via Internet End Tag Command Header MLB+REPORTDIOXSETTING End Tag Response Format Response +: { Retry Time }, { Retry Time Interval } Read Example: Send --> MLB+REPORTDIOXSETTING: Z Response +: SMS (The DIO status will be reported via SMS) Get DIO...
6 ORDERING INFORMATION MLiS Product MLB-G420X: The MLIS Dual-Band 2G/3G wireless terminal Power Adaptor MLA-PSP-100: Input: AC 100 ~ 240V Output: 9V/1.3A DC jack 5.5/2.1 MLA-PSP-101: US Adapter Plug MLA-PSP-104: British Adapter Plug MLA-PSP-103: European Adapter Plug MLA-PSP-102: Australia Adapter Plug MLA-CAB-001: DC Jack power line 5.5/2.1...
Need help?
Do you have a question about the MLB-G4202 and is the answer not in the manual?
Questions and answers