The naming of copyrighted trademarks in this manual, even when not specially indicated, should not be taken to mean that these names may be considered as free in the sense of the trademark and tradename protection law and hence that they may be freely used by anyone. c 2019 Hirschmann Automation and Control GmbH Manuals and software are protected by copyright.
Page 3
Open Source Information Open Source Software used in the product The product contains, among other things, Open Source Software files, as defined below, de- veloped by third parties and licensed under an Open Source Software license. These Open Source Software files are protected by copyright. Your right to use the Open Source Software is governed by the relevant applicable Open Source Software license conditions.
Used Symbols Danger – Information regarding user safety. Note – Problems that can arise in specific situations. Information – Useful tips or information of special interest. Example – Example of function, command or script. Safety Instructions WARNING UNCONTROLLED MACHINE ACTIONS To avoid uncontrolled machine actions caused by data loss, configure all the data transmis- sion devices individually.
About this Manual About this Manual This "Configuration" user manual contains the information you need to start operating the de- vice. It takes you step by step from the first startup operation through to the basic settings for operation in your environment. UM Configuration OWL LTE M12 Rel.
Basic Information 1 Basic Information 1.1 Configuration Configuring SmartFlex routers is made easy by name and password protected web interface. The interface provides detailed statistics about router activities, signal strength, system logs and more. The router supports both IPv4 IPv6 protocols, the creation of secure VPN tunnels using technologies IPsec, OpenVPN...
Basic Information 1.4 This Manual Describes For cellular IPv6 connection see Mobile WAN Configuration in Chapter 4.3.1. For IPv6 LAN configuration see LAN Configuration in Chapter 4.1, DHCPv6 server/client is also supported. IPv4 is the default, but IPv6 can be enabled or used with all features and protocols in the router, except for non-secured tunnels GRE, L2TP and PPTP, and VRRP.
Access to the Web Configuration 2 Access to the Web Configuration Wireless transmissions work only when you activate the SIM card for data traffic and insert it into the router. Remove the power source before inserting the SIM card. You may use the web interface to monitor, configure and manage the router. To do so, enter the router’s IP address in your browser.
Access to the Web Configuration 2.1 Certificates and Preventing the Security Message ing subchapter. The default username is "admin". The default password is "private". Change the default pass-word as soon as possible! For increased security of the network connected to the router, change the default router password.
Page 17
Access to the Web Configuration 2.1 Certificates and Preventing the Security Message Access the router via the new domain name address (E.g. https://00-11-22-33-44-55). If you see the security message, add an exception so the next time the message will not pop up (E.g.
Status 3.1 General Status 3 Status 3.1 General Status Selecting the General item will open a screen displaying a summary of basic information about the router and its activities. This page is also displayed when you login to the web in- terface.
Status 3.1 General Status 3.1.2 Primary LAN, Secondary LAN Items displayed in this part have the same meaning as items in the previous part. Moreover, the MAC Address item shows the MAC address of the corresponding router’s interface (Primary LAN – eth0, Secondary LAN – eth1). Visible information depends on configuration, see chapter 4.1.
Status 3.2 Mobile WAN Status 3.2 Mobile WAN Status The Mobile WAN menu item contains current information about connections to the mobile network. The first part of this page (Mobile Network Information) displays basic information about mobile network the router operates in. There is also information about the module, which is mounted in the router.
Status 3.2 Mobile WAN Status The value of signal strength is displayed in different color: in black for good, in orange for fair and in red for poor signal strength. Signal GPRS/EDGE/CDMA UMTS/HSPA strength (RSSI) (RSCP) (RSRP) good > -70 dBm >...
Status 3.3 Network Status 3.3 Network Status To view information about the interfaces and the routing table, open the Network item in the Status menu. The upper part of the window displays detailed information about the active interfaces only: Interface Description eth0, eth1 Firs and second network (Ethernet) interfaces...
Status 3.3 Network Status Continued from previous page Item Description packets – transmit packets errors – number of errors dropped – dropped packets overruns – outgoing packets lost because of overload. carrier – wrong outgoing packets with errors resulting from the physical layer.
Status 3.4 DHCP Status 3.4 DHCP Status Information about the DHCP server activity is accessible via DHCP item. The DHCP server provides automatic configuration of the client devices connected to the router. The DHCP server assigns each device an IP address, subnet mask, default gateway (IP address of router) and DNS server (IP address of router).
Status 3.4 DHCP Status Records in the DHCP Status window are divided into two separate parts according to IPv4 (DHCP) and IPv6 (DHCPv6) protocols – there are Active DHCP Leases (LAN) and Active DHCPv6 Leases (LAN) parts, see Figure 4. The table below explains information from the client list: Item Description...
Status 3.5 IPsec Status 3.5 IPsec Status Selecting the IPsec option in the Status menu of the web page will bring up the information for any IPsec Tunnels that have been established. If the tunnel has been built correctly, the screen will display ESTABLISHED and the number of running IPsec connections 1 up (orange highlighted in the figure below.) If there is no such text in log (e.g.
Status 3.6 DynDNS Status 3.6 DynDNS Status The router supports DynamicDNS using a DNS server on www.dyndns.org. If Dynamic DNS is configured, the status can be displayed by selecting menu option DynDNS. Refer to www.dyndns.org for more information on how to configure a Dynamic DNS client. You can use the following listed servers for the Dynamic DNS service.
Status 3.7 System Log 3.7 System Log If there are any connection problems you may view the system log by selecting the System Log menu item. Detailed reports from individual applications running in the router will be dis- played. Use the Save Log button to save the system log to a connected computer. (It will be saved as a text file with the .log extension.) The Save Report button is used for creating detailed reports.
Status 3.7 System Log The following example (figure) shows how to send syslog information to a remote server at 192.168.2.115 on startup. Figure 8: Example program syslogd start with the parameter -R UM Configuration OWL LTE M12 Rel. 06.1.09 - 07/2019...
Configuration 4 Configuration 4.1 LAN Configuration To enter the Local Area Network configuration, select the LAN menu item in the Configuration section. The LAN item will expand in the menu on the left, so you can choose the proper Ethernet interface to configure: Primary LAN for the router’s first Ethernet interface (ETH0), Secondary LAN for the router’s second Ethernet interface (ETH1).
Configuration 4.1 LAN Configuration Item Description DHCP Client Enables/disables the DHCP client function. If in IPv6 column, the DHCPv6 client is enabled. DHCPv6 client supports all three meth- ods of getting an IPv6 address – SLAAC, stateless DHCPv6 and statefull DHCPv6. disabled –...
Configuration 4.1 LAN Configuration Item Description Bridged Activates/deactivates the bridging function on the router. no – The bridging function is inactive (default). yes – The bridging function is active. Media Type Specifies the type of duplex and speed used in the network. Auto-negation –...
Configuration 4.1 LAN Configuration Item Description Enable dynamic DHCP leases Select this option to enable a dynamic DHCP server. IP Pool Start Starting IP addresses allocated to the DHCP clients. Use proper notation in IPv4 and IPv6 column. IP Pool End End of IP addresses allocated to the DHCP clients.
Configuration 4.1 LAN Configuration Item Description Enable IPv6 prefix delegation Enables prefix delegation configuration filled-in below. Subnet ID The decimal value of the Subnet ID of the Ethernet inter- face. Maximum value depends on the Subnet ID Width. Subnet ID Width The maximum Subnet ID Width depends on your Site Prefix –...
Configuration 4.1 LAN Configuration 4.1.4 LAN Configuration Examples Example 1: IPv4 Dynamic DHCP Server, Default Gateway and DNS Server The range of dynamic allocated IPv4 addresses is from 192.168.1.2 to 192.168.1.4. The address is allocated for 600 second (10 minutes). Default gateway IP address is 192.168.1.20 DNS server IP address is 192.168.1.20 Figure 11: Network Topology for Example 1...
Configuration 4.1 LAN Configuration Example 2: IPv4 Dynamic and Static DHCP server The range of allocated addresses is from 192.168.1.2 to 192.168.1.4. The address is allocated for 600 seconds (10 minutes). The client with the MAC address 01:23:45:67:89:ab has the IP address 192.168.1.10. The client with the MAC address 01:54:68:18:ba:7e has the IP address 192.168.1.11.
Configuration 4.1 LAN Configuration Example 3: IPv6 Dynamic DHCP Server The range of dynamic allocated IPv6 addresses is from 2001:db8::1 to 2001:db8::ffff. The address is allocated for 600 second (10 minutes). The router is still accessible via IPv4 (192.168.1.1). Figure 15: Network Topology for Example 3 UM Configuration OWL LTE M12 Rel.
Configuration 4.2 VRRP Configuration 4.2 VRRP Configuration VRRP via IPv6 (VRRPv3) is not supported. Select the VRRP menu item to enter the VRRP configuration. VRRP protocol (Virtual Router Redundancy Protocol) allows you to transfer packet routing from the main router to a backup router in case the main router fails.
Configuration 4.2 VRRP Configuration interface for any packets different from a ping. If a response to the packet is received within the timeout specified by the Ping Timeout parameter, then the router knows that the connection is still active. If the router does not receive a response within the timeout period, it will attempt to test the mobile WAN connection using standard Ping commands.
Configuration 4.3 Mobile WAN Configuration 4.3 Mobile WAN Configuration Select the Mobile WAN item in the Configuration menu section to enter the cellular network configuration page. See Mobile WAN Configuration page in Figure 21. 4.3.1 Connection to Mobile Network If the Create connection to mobile network checkbox is checked, then the router will au- tomatically attempt to establish a connection after booting up.
Configuration 4.3 Mobile WAN Configuration Continued from previous page Item Description Maximum Receive Unit – maximum size of packet that the router can receive via Mobile WAN. The default value is 1500 B. Other settings may cause the router to receive data incorrectly. Minimal value in IPv4 and IPv4/IPv6 mode: 128 B.
Configuration 4.3 Mobile WAN Configuration 4.3.3 Check Connection to Mobile Network Configuration Enabling the Check Connection function for mobile networks is necessary for uninter- rupted and continuous operation of the router. If the Check Connection item is set to enabled or enabled + bind, this activates checking of the connection to the mobile network.
Configuration 4.3 Mobile WAN Configuration Figure 20: Example of Check Connection Configuration 4.3.5 Data Limit Configuration Item Description Data Limit Specifies the maximum expected amount of data transmitted (sent and received) over GPRS in one billing period (one month). Max- imum value is 2 TB (2097152 MB).
Configuration 4.3 Mobile WAN Configuration Continued from previous page Item Description Roaming State Configure the use of SIM cards based on roaming. This roaming feature has to be activated for the SIM card on which it is enabled! not applicable – It is possible to use the SIM card every- where.
Configuration 4.3 Mobile WAN Configuration Continued from previous page Item Description Initial State Specifies the action of the cellular module after the SIM card has been selected. online – establish connection to the mobile network after the SIM card has been selected (default). offline –...
Configuration 4.3 Mobile WAN Configuration 4.3.7 Examples of SIM Card Switching Configuration Example 1: Timeout Configuration Mark the Switch to default SIM card after timeout check box, and fill-in the following values: Figure 22: Configuration for SIM card switching Example 1 The first attempt to change to the default SIM card is carried out after 60 minutes.
Configuration 4.4 PPPoE Configuration 4.4 PPPoE Configuration PPPoE (Point-to-Point over Ethernet) is a network protocol which encapsulates PPP frames into Ethernet frames. The router uses the PPPoE client to connect to devices supporting a PPPoE bridge or server. The bridge or server is typically an ADSL router. To open the PPPoE Configuration page, select the PPPoE menu item.
Configuration 4.4 PPPoE Configuration Continued from previous page Item Description Specifies the Maximum Receiving Unit. The MRU identifies the max- imum packet size, that the router can receive via PPPoE. The default value is 1492 B (bytes). Other settings can cause incorrect data trans- mission.
Configuration 4.5 Backup Routes 4.5 Backup Routes Using the configuration form on the Backup Routes page, you can back up the primary con- nection with alternative connections to the Internet (mobile network) or enable Multiple WANs mode. It is also possible to prioritize each backup connection option. Switching between con- nections is carried out according to order of priority and the state of the connections.
Configuration 4.5 Backup Routes Item Description Enable backup The default route is selected according to the settings below. If dis- routes switching abled (unchecked), the backup routes system operates in the back- ward compatibility mode based on the default priorities of the network interfaces (listed below).
Configuration 4.5 Backup Routes Network interfaces belonging to individual backup routes are also checked before use for flags which indicate the state of the interface. (E.g. RUNNING on the Network Status page.) This prevents, for example, the disconnection of an Ethernet cable. You can fill-in one or both Ping IP Addresses (IPv4 and IPv6) –...
Configuration 4.6 Static Routes 4.6 Static Routes Static routes can be specified on the Static Routes configuration page. A static route provide fixed routing path through the network. It is manually configured on the router and must be updated if the network topology was changed recently. Static routes are private routers un- less they are redistributed by a routing protocol.
Configuration 4.7 Firewall Configuration 4.7 Firewall Configuration The first security element for incoming packets is a check of the enabled source IP addresses and destination ports. There is independent IPv4 and IPv6 firewall since there is dual stack IPv4 and IPv6 implemented in the router. If you click the Firewall item in the Configuration menu on the left, it will expand to IPv4 and IPv6 options and you can click IPv6 to enable and configure the IPv6 firewall –...
Configuration 4.7 Firewall Configuration access is permitted only to addresses allowed in the table. It is possible to specify up to eight remote IP addresses for access/denial. You can specify the following parameters: Item Description Source IP address the rule applies to. Use IPv4 address in IPv4 Firewall Configuration and IPv6 address in IPv6 Firewall Configuration.
Configuration 4.7 Firewall Configuration Continued from previous page Item Description Protocol Specifies the protocol the rule applies to: all – The rule applies to all protocols. TCP – The rule applies to TCP protocol. UDP – The rule applies to UDP protocol. GRE –...
Configuration 4.7 Firewall Configuration 4.7.1 Example of the IPv4 Firewall Configuration The router allows the following access: From IP address 171.92.5.45 using any protocol. From IP address 10.0.2.123 using the TCP protocol on port 1000. From IP address 142.2.26.54 using the ICMP protocol. from IP address 142.2.26.54 using the TCMP protocol on target ports from 1020 to 1040 See the network topology and configuration form in the Figures below.
Configuration 4.8 NAT Configuration 4.8 NAT Configuration To configure the address translation function, click on NAT in the Configuration section of the main menu. There is independent IPv4 and IPv6 NAT configuration since there is dual stack IPv4 and IPv6 implemented in the router. The NAT item in the menu on the left will expand to IPv4 and IPv6 options and you can click IPv6 to enable and configure the IPv6 NAT –...
Configuration 4.8 NAT Configuration Item Description Public Port(s) The public port numbers range for NAT. Enter the initial and final port numbers separated by the hyphen mark. One static port is allowed as well. Private Port(s) The private port numbers range for NAT. Enter the initial and final port numbers separated by the hyphen mark.
Configuration 4.8 NAT Configuration Continued from previous page Item Description Masquerade outgoing packets Activates/deactivates the network address tran- slation function. Table 31: Remote Access Configuration Enable remote HTTP access on port activates the redirect from HTTP to HTTPS proto- col only. The router doesn’t allow unsecured HTTP protocol to access the web configura- tion.
Configuration 4.8 NAT Configuration 4.8.1 Examples of NAT Configuration Example 1: IPv4 NAT Configuration with Single Device Connected It is important to mark the Send all remaining incoming packets to default server check box for this configuration. The IP address in this example is the address of the device behind the router.
Configuration 4.8 NAT Configuration Example 2: IPv4 NAT Configuration with More Equipment Connected In this example, using the switch you can connect more devices behind the router. Every device connected behind the router has its own IP address. Enter the address in the Server IPv Address field in the NAT dialog.
Configuration 4.9 OpenVPN Tunnel Configuration 4.9 OpenVPN Tunnel Configuration Select the OpenVPN item to configure an OpenVPN tunnel. The menu item will expand and you will see four separate configuration pages: 1st Tunnel, 2nd Tunnel, 3rd Tunnel and 4th Tunnel. The OpenVPN tunnel function allows you to create a secure connection between two separate LAN networks.
Page 72
Configuration 4.9 OpenVPN Tunnel Configuration Continued from previous page Item Description Remote Interface Specifies the IPv6 address of the interface of opposite side of the IPv6 Address tunnel. Ping Interval Time interval after which the router sends a message to opposite side of tunnel to verify the existence of the tunnel.
Configuration 4.9 OpenVPN Tunnel Configuration Continued from previous page Item Description DH Parameters Specifies the protocol for the DH parameters key exchange which you can use for X.509 Certificate authentication in the server mode. Local Certificate Specifies the certificate used in the local device. You can use this authentication certificate for the X.509 Certificate authentication mode.
Configuration 4.10 IPsec Tunnel Configuration 4.10 IPsec Tunnel Configuration To open the IPsec Tunnel Configuration page, click IPsec in the Configuration section of the main menu. The menu item will expand and you will see four separate configuration pages: 1st Tunnel, 2nd Tunnel, 3rd Tunnel and 4th Tunnel.
Page 77
Configuration 4.10 IPsec Tunnel Configuration Continued from previous page Item Description Remote Protocol/Port Specifies Protocol/Port of remote side of the tunnel. The general form is protocol/port, for example 17/1701 for UDP (protocol 17) and port 1701. It is also possible to enter only the number of protocol, however, the above mentioned format is preferred.
Page 78
Configuration 4.10 IPsec Tunnel Configuration Continued from previous page Item Description IKE Reauthentication Enable or disable IKE reauthentication (IKEv2 only). XAUTH Enabled Enable extended authentication (for IKEv1 only). XAUTH Mode Select XAUTH mode (client or server). XAUTH Username XAUTH username. XAUTH Password XAUTH password.
Configuration 4.10 IPsec Tunnel Configuration Continued from previous page Item Description Local Certificate Certificate for X.509 authentication or PubKey for public key sig- PubKey nature authentication. Local Private Key Private key for X.509 authentication. Local Passphrase Passphrase used during private key generation. Debug Choose the level of verbosity to System Log.
Configuration 4.10 IPsec Tunnel Configuration We recommend that you maintain the default settings. When you set key exchange times higher, the tunnel produces lower operating costs, but the setting also provides less security. Conversely, when you reducing the time, the tunnel produces higher operating costs, but pro- vides for higher security.
Configuration 4.11 GRE Tunnels Configuration 4.11 GRE Tunnels Configuration GRE is an unencrypted protocol. GRE via IPv6 is not supported. To open the GRE Tunnel Configuration page, click GRE in the Configuration section of the main menu. The menu item will expand and you will see four separate configuration pages: 1st Tunnel, 2nd Tunnel, 3rd Tunnel and 4th Tunnel.
Configuration 4.11 GRE Tunnels Configuration Figure 39: GRE Tunnel Configuration 4.11.1 Example of the GRE Tunnel Configuration Figure 40: Topology of GRE Tunnel Configuration Example UM Configuration OWL LTE M12 Rel. 06.1.09 - 07/2019...
Configuration 4.11 GRE Tunnels Configuration GRE tunnel configuration: Configuration Remote IP Address 10.0.0.2 10.0.0.1 Remote Subnet 192.168.2.0 192.168.1.0 Remote Subnet Mask 255.255.255.0 255.255.255.0 Table 38: GRE Tunnel Configuration Example Examples of different options for configuration of GRE tunnel can be found in the "GRE Tun- nel"...
Configuration 4.12 L2TP Tunnel Configuration 4.12 L2TP Tunnel Configuration L2TP is an unencrypted protocol. L2TP via IPv6 is not supported. To open the L2TP Tunnel Configuration page, click L2TP in the Configuration section of the main menu. The L2TP tunnel function allows you to create a password protected connection between 2 LAN networks.
Configuration 4.12 L2TP Tunnel Configuration 4.12.1 Example of the L2TP Tunnel Configuration Figure 42: Topology of L2TP Tunnel Configuration Example Configuration of the L2TP tunnel: Configuration Mode L2TP Server L2TP Client Server IP Address — 10.0.0.1 Client Start IP Address 192.168.2.5 —...
Configuration 4.13 PPTP Tunnel Configuration 4.13 PPTP Tunnel Configuration PPTP is an unencrypted protocol. PPTP via IPv6 is not supported. Select the PPTP item in the menu to configure a PPTP tunnel. PPTP tunnel allows password protected connections between two LANs. It is similar to L2TP. The tunnels are active after selecting Create PPTP tunnel.
Configuration 4.13 PPTP Tunnel Configuration 4.13.1 Example of the PPTP Tunnel Configuration Figure 44: Topology of PPTP Tunnel Configuration Example Configuration of the PPTP tunnel: Configuration Mode PPTP Server PPTP Client Server IP Address — 10.0.0.1 Local IP Address 192.168.1.1 —...
Configuration 4.14 Services 4.14 Services 4.14.1 DynDNS The DynDNS function allows you to access the router remotely using an easy to remem- ber custom hostname. This DynDNS client monitors the IP address of the router and up- dates the address whenever it changes. In order for DynDNS to function, you require a pub- lic IP address, either static or dynamic, and an active Remote Access service account at www.dyndns.org.
Configuration 4.14 Services 4.14.2 FTP FTP protocol (File Transfer Protocol) can be used to transfer files between the router and another device on the computer network. Configuration form of TP server can be done in FTP configuration page under Services menu item. By ticking Enable FTP service item the FTP server on the router is enabled.
Configuration 4.14 Services 4.14.3 HTTP HTTP protocol (Hypertext Transfer Protocol) is internet protocol used for exchange of hyper- text documents in HTML format. This protocol is used for accessing the web server used for user’s configuration of the router. Recommended usage however is of HTTPS protocol, which used encryption for secure exchange of transferred data.
Configuration 4.14 Services 4.14.4 NTP The NTP configuration form allows you to configure the NTP client. To open the NTP page, click NTP in the Configuration section of the main menu. NTP (Network Time Protocol) allows you to periodically set the internal clock of the router. The time is set from servers that provide the exact time to network devices.
Configuration 4.14 Services 4.14.5 SNMP The SNMP page allows you to configure the SNMP v1/v2 or v3 agent which sends informa- tion about the router (and its expansion ports) to a management station. To open the SNMP page, click SNMP in the Configuration section of the main menu. SNMP (Simple Network Man- agement Protocol) provides status information about the network elements such as routers or endpoint computers.
Configuration 4.14 Services Activating the Enable I/O extension function allows you monitor the binary I/O inputs on the router. Selecting Enable M-BUS extension and entering the Baudrate, Parity and Stop Bits lets you monitor the meter status connected via MBUS interface. MBUS expansion port is not currently supported, but it is possible to use an external RS232/MBUS converter.
Configuration 4.14 Services The list of available and supported OIDs and other details can be found in the "SNMP Object Identifier" application note. You can download the PDF on the Internet at: https://www.doc. hirschmann.com. Figure 50: SNMP Configuration Example UM Configuration OWL LTE M12 Rel.
Configuration 4.14 Services Figure 51: MIB Browser Example In order to access a particular device enter the IP address of the SNMP agent which is the router, in the Remote SNMP agent field. The dialog displayed the internal variables in the MIB tree after entering the IP address.
Configuration 4.14 Services 4.14.6 SMTP Use the SMTP form to configure the Simple Mail Transfer Protocol client (SMTP) for sending e-mails. IPv6 e-mail servers are supported. Item Description SMTP Server Address IPv4 address, IPv6 address or domain name of the mail server. SMTP Port Port the SMTP server is listening on.
Page 99
Configuration 4.14 Services Commands and parameters can be entered only in lowercase. Example of sending an e-mail: email –t john@doe.com –s "System Log" -m "Attached" -a /var/log/messages The command above sends an e-mail to address john@doe.com with the subject "System Log", body message "Attached"...
Configuration 4.14 Services 4.14.7 SMS Open the SMS page in the Services submenu of the Configuration section of the main menu. The router can automatically send SMS messages to a cell phone or SMS message server when certain events occur. The form allows you to select which events generate an SMS message.
Configuration 4.14 Services Remote Control via SMS After you enter a phone number in the Phone Number 1 field, the router allows you to config- ure the control of the device using an SMS message. You can configure up to three numbers for incoming SMS messages.
Configuration 4.14 Services Continued from previous page Description reboot The router reboots get ip The router responds with the IP address of the SIM card Table 52: Control SMS Note: Every received control SMS is processed and then deleted from the router! This may cause a confusion when you want to use AT-SMS protocol for reading received SMS (see section below).
Configuration 4.14 Services Choosing Enable AT-SMS protocol on expansion port 2 and Baudrate makes it possible to use AT-SMS protocol on the serial Port 2. Item Description Baudrate Communication speed on the expansion port 2 Table 54: Send SMS on the serial Port 2 Setting the parameters in the Enable AT-SMS protocol over TCP frame, you can enable the router to use AT-SMS protocol on a TCP port.
Configuration 4.14 Services Continued from previous page AT Command Description AT+CSCS Selects the character set AT+CSQ Returns the signal strength of the registered network AT+GMI Returns the manufacturer specific identity AT+GMM Returns the manufacturer specific model identity AT+GMR Returns the manufacturer specific model revision identity AT+GSN Returns the product serial number Determines whether or not the device echoes characters...
Configuration 4.14 Services Examples of SMS Configuration Example 1 Sending SMS Configuration After powering up the router, the phone with the number entered in the dialog receives an SMS in the following form: Router (Unit ID) has been powered up. Signal strength –xx dBm. After connecting to mobile network, the phone with the number entered in the dialog receives an SMS in the following form: Router (Unit ID) has established connection to mobile network.
Configuration 4.14 Services Example 2 Sending SMS via Serial Interface on the Port 1 Figure 54: SMS Configuration for Example 2 Example 3 Control the Router Sending SMS from any Phone Number Figure 55: SMS Configuration for Example 3 UM Configuration OWL LTE M12 Rel.
Configuration 4.14 Services Example 4 Control the Router Sending SMS from Two Phone Numbers Figure 56: SMS Configuration for Example 4 UM Configuration OWL LTE M12 Rel. 06.1.09 - 07/2019...
Configuration 4.14 Services 4.14.8 SSH SSH protocol (Secure Shell) allows to carry out a secure remote login to the router. Configu- ration form of SSH service can be done in SSH configuration page under Services menu item. By ticking Enable SSH service item the SSH server on the router is enabled. Item Description Enable SSH service...
Configuration 4.14 Services 4.14.9 Syslog Configuration of system log, called syslog, can be done on this configuration page. Size of this log can be restricted by maximal number of its rows. Optionally, the IP address and UDP port can be configured for the real-time log distribution. Položka Popis Log Size...
Configuration 4.14 Services 4.14.10 Telnet Telnet is a protocol used to provide a bidirectional interactive text-oriented communication facility with the router. Configuration form of Telnet service can be done in Telnet configuration page under Services menu item. By ticking Enable Telnet service item the Telnet server on the router is enabled.
Configuration 4.15 Expansion Port (RS232) 4.15 Expansion Port (RS232) Configuration of RS232 interface is accessible on Expansion Port page. In the upper part of the configuration window, the port can be enabled and the type of the connected port is shown in the Port Type item.
Configuration 4.15 Expansion Port (RS232) Figure 60: Expansion Port Configuration If you mark the Reject new connections check box, then the router rejects any other connec- tion attempt. This means that the router no longer supports multiple connections. If you mark the Check TCP connection check box, the router verifies the TCP connection. Item Description Keepalive Time...
Configuration 4.15 Expansion Port (RS232) When you mark the Use DTR as control of TCP connection check box, the router uses the data terminal ready (DTR) single to control the TCP connection. The remote device sends a DTR single to the router indicating that the remote device is ready for communications. Description server Description client Active...
Configuration 4.15 Expansion Port (RS232) 4.15.1 Examples of the Serial Interface Configuration Figure 61: Example of Ethernet to serial communication Figure 62: Example of serial interface extension UM Configuration OWL LTE M12 Rel. 06.1.09 - 07/2019...
Configuration 4.16 USB Port 4.16 USB Port You can use a USB to RS232 converter to send data out of the serial port from the Ethernet network in the same manner as the RS232 expansion port function. To specify the values for the USB port parameters, click USB Port in the Configuration section of the main menu.
Configuration 4.16 USB Port If you mark the Reject new connections check box, then the router rejects any other connec- tion attempt. This means that the router no longer supports multiple connections. If you mark the Check TCP connection check box, the router verifies the TCP connection. Item Description Keepalive Time...
Configuration 4.16 USB Port Figure 63: USB configuration 4.16.1 Examples of USB Port Configuration Figure 64: Example 1 – USB port configuration UM Configuration OWL LTE M12 Rel. 06.1.09 - 07/2019...
Configuration 4.17 Scripts 4.17 Scripts There is possibility to create your own shell scripts executed in the specific situations. Go to the Scripts page in the Configuration section in the menu. The menu item will expand and there are Startup Script, Up/Down IPv4 and Up/Down IPv6 scripts you can use – there is IPv4 and IPv6 independent dual stack.
Configuration 4.17 Scripts 4.17.3 Up/Down Scripts Use the Up/Down IPv4 and Up/Down IPv6 page to create scripts executed when the Mobile WAN connection is established (up) or lost (down). There is independent IPv4 and IPv6 dual stack implemented in the router, so there is independent IPv4 and IPv6 Up/Down script. IPv4 Up/Down Script runs only on the IPv4 WAN connection established/lost, IPv6 Up/Down Script runs only on the IPv6 WAN connection established/lost.
Configuration 4.18 Automatic Update Configuration 4.18 Automatic Update Configuration Use the Automatic Update menu to configure the automatic update settings. The router can be configured to automatically check for firmware and configuration updates from a HTTP(S) or FTP(S) server. IPv6 sites/servers are supported. Used protocol is specified by an address in Base URL field: HTTP, HTTPS, FTP or FTPS.
Page 122
Configuration 4.18 Automatic Update Configuration The configuration file name consists of Base URL, hardware MAC address of ETH0 inter- face and cfg extension. Hardware MAC address and cfg extension are added to the file name automatically and it isn’t necessary to enter them. When the parameter Unit ID is enabled, it de- fines the concrete configuration name which will be downloaded to the router, and the hardware MAC address in the configuration name will not be used.
Configuration 4.18 Automatic Update Configuration 4.18.1 Example of Automatic Update The following example the router checks for new firmware or configuration file each day at 1:00 a.m. This example is given for the Hirschmann router. Firmware file: https://example.com/OWL-4G-EUANZ.bin Configuration file: https://example.com/test.cfg Figure 68: Example of Automatic Update 1 UM Configuration OWL LTE M12...
Configuration 4.18 Automatic Update Configuration 4.18.2 Example of Automatic Update Based on MAC The following example checks for new firmware or configurations each day between 1:00 a.m. and 3:00 a.m. The configuratin file is encrypted, therefore the decryption password was config- ured.
Programming and compiling of modules is described in the "Programming of User Modules" application note. You can get the PDF at: https://hirschmann-support.belden.com. Figure 71: Added user module User modules can be custom-programmed. Some typical user modules are prepared by Hirchmann and are available on the web site for the download.
Administration 6 Administration 6.1 Users This configuration function is only available for users assigned the admin role! To assign roles and manage user accounts open the Users form in the Administration section of the main menu. The first frame of this configuration form contains an overview of available users.
Administration 6.2 Change Profile Ordinary users are not able to access router via Telnet, or SFTP. Read only FTP access is allowed for these users. Figure 72: Users 6.2 Change Profile In addition to the standard profile, up to three alternate router configurations or profiles can be stored in router’s non-volatile memory.
Administration 6.3 Change Password 6.3 Change Password Use the Change Password configuration form in the Administration section of the main menu for changing your password used to log on the device. Enter the new password in the New Password field, confirm the password using the Confirm Password field, and press the Apply button.
Administration 6.5 Set SMS Service Center Address 6.5 Set SMS Service Center Address The function requires you to enter the phone number of the SMS service center to send SMS messages. To specify the SMS service center phone number use the Set SMS Service Center configuration form in the Administration section of the main menu.
Administration 6.7 Unblock SIM Card 6.7 Unblock SIM Card On this page you can unblock the SIM card after 3 wrong PIN attempts or change the PIN code of the SIM card. To unblock the SIM card, go to Unblock SIM Card administration page. In both cases enter the PUK code into SIM PUK field and new SIM PIN code into New SIM PIN field.
Administration 6.9 Backup Configuration 6.9 Backup Configuration Keep in mind potential security issues when creating backup, especially for user accounts. Encrypted configuration or secured connection to the router should be used. You can save actual configuration of the router using the Backup Configuration item in the Administration menu section.
Administration 6.10 Restore Configuration 6.10 Restore Configuration Due to the different format it is not possible to import user accounts backed up on a router of v1 product line (and older) to a router of v2 product line (and newer). The same limmi- tation is for opposite direction.
Administration 6.11 Update Firmware 6.11 Update Firmware Select the Update Firmware menu item to view the current router firmware version and load new firmware into the router. There is current firmware version and firmware filename written out. When loading the new firmware, it has to have this name. To load new firmware, browse to the new firmware file and press the Update button to begin the update.
Administration 6.12 Reboot After the firmware update, the router will automatically reboot: A mechanism to prevent multiple startups of the firmware update is included. Firmware up- date can cause incompatibility with the user modules. It is recommended to update user mod- ules to the most recent version.
Typical Situations 7 Configuration in Typical Situations Although routers have wide variety of uses, they are commonly used in the following ways. All the examples below are for IPv4 networks. 7.1 Access to the Internet from LAN Figure 84: Access to the Internet from LAN – sample topology In this example, a LAN connecting to the Internet via a mobile network, the SIM card with a data tariff has to be provided by the mobile network operator.
Typical Situations 7.1 Access to the Internet from LAN Figure 85: Access to the Internet from LAN – LAN configuration Figure 86: Access to the Internet from LAN – Mobile WAN configuration display information about the newly created network interface, usb0 (mobile connection). You should also see the IP address provided by the network operator, as well as the route table etc.
Typical Situations 7.2 Backup Access to the Internet from LAN 7.2 Backup Access to the Internet from LAN Figure 87: Backup access to the Internet – sample topology The configuration form on the Backup Routes page lets you back up the primary connection with alternative connections to the Internet/mobile network.
Typical Situations 7.2 Backup Access to the Internet from LAN Mobile WAN configuration To configure the mobile connection it should be sufficient to in- sert the SIM card into the SIM1 slot and attach the antenna to the ANT connector. (Depending on the SIM card you are using).
Typical Situations 7.2 Backup Access to the Internet from LAN Figure 90: Backup access to the Internet – Backup Routes configuration You can verify the configured network interfaces in the Status section in the Network item. You will see the active network interfaces: eth0 (connection to LAN), eth1 (wired connection to the Internet) and usb0 (mobile connection to the Internet).
Typical Situations 7.3 Secure Networks Interconnection or Using VPN 7.3 Secure Networks Interconnection or Using VPN Figure 91: Secure networks interconnection – sample topology VPN (Virtual Private Network) is a protocol used to create a secure connection between two LANs, allowing them to function as a single network. The connection is secured (encrypted) and authenticated (verified).
Typical Situations 7.3 Secure Networks Interconnection or Using VPN Mobile WAN configuration The mobile connection can be configured as described in the previous situations. (The router connects itself after a SIM card is inserted into SIM1 slot and an antenna is attached to the ANT connector.) Configuration is accessible via the Mobile WAN item the Configuration section.
Typical Situations 7.4 Serial Gateway 7.4 Serial Gateway Figure 93: Serial Gateway – sample topology The router’s serial gateway function lets you establish serial connectivity across the Internet or with another network. Serial devices (meters, PLC, etc.) can then upload and download data.
Typical Situations 7.4 Serial Gateway Figure 94: Serial Gateway – konfigurace Expansion Port 1 To communicate with the serial device (PLC), connect from the PC (Labeled as SCADA in Fig. 93) as a TCP client to the IP address 10.0.6.238, port 2345 (the public IP address of the SIM card used in the router, corresponding to the usb0 network interface).
Maintenance Maintenance Hirschmann is continually working on improving and developing their software. Check regularly whether there is an updated version of the software that provides you with additional benefits. You find information and software downloads on the Hirschmann product pages on the Internet (http://www.hirschmann.com).
Glossary and Acronyms Glossary and Acronyms Backup Routes Allows user to back up the pri- HTTP The Hypertext Transfer Protocol (HTTP) mary connection with alternative connections to is an application protocol for distributed, collab- the Internet/mobile network. Each backup con- orative, hypermedia information systems.
Page 146
Glossary and Acronyms tion, ESP Algorithm, ESP Encryption and much address information in IPv4 headers while in tran- more. It is possible to create four different tun- sit across a traffic routing device. nels. The simplest type of NAT provides a one-to-one translation of IP addresses.
Page 147
Glossary and Acronyms end and server-to-server. fault uses TCP port 25. The protocol for mail sub- mission is the same, but uses port 587. SMTP RADIUS Remote Authentication Dial-In User connections secured by SSL, known as SMTPS, Service (RADIUS) is a networking protocol that default to port 465.
Page 148
Glossary and Acronyms of the core members of the Internet protocol suite to a wide area network (WAN) link between the (the set of network protocols used for the Inter- sites. From a user perspective, the extended net- net). With UDP, computer applications can send work resources are accessed in the same way as messages, in this case referred to as datagrams, resources available from the private network.
Recommended Literature Recommended Literature Application Notes, the “Installation” user manual, and documentation of several OWL user modules can be found as PDF files for downloading on the Internet at: https://www.doc. hirschmann.com/. UM Configuration OWL LTE M12 Rel. 06.1.09 - 07/2019...
You find the addresses of our partners on the Internet at http://www.hirschmann.com. A list of local telephone numbers and email addresses for technical support directly from Hirschmann is available at https://hirschmann-support.belden.com. This site also includes a free of charge knowledge base and a software download section.
Need help?
Do you have a question about the Hirschmann OWL LTE M12 and is the answer not in the manual?
Questions and answers