Neither ProSoft Technology nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein. Information in this document including illustrations, specifications and dimensions may contain technical inaccuracies or typographical errors.
POWERED OFF. The ProSoft Technology Wireless products can transmit signals that could interfere with this equipment. Do not operate the ProSoft Technology Wireless products in any aircraft, whether the aircraft is on the ground or in flight. In aircraft, the ProSoft Technology Wireless products MUST BE POWERED OFF. When operating, the ProSoft Technology Wireless products can transmit signals that could interfere with various onboard systems.
ProSoft Technology product, regardless of the number of events, occurrences, or claims giving rise to liability, be in excess of the price paid by the purchaser for the ProSoft Technology product. WARNING – EXPLOSION HAZARD – DO NOT REPLACE ANTENNAS UNLESS POWER HAS BEEN SWITCHED OFF OR THE AREA IS KNOWN TO BE NON-HAZARDOUS.
Jumpers ........................9 Power Requirements ....................10 Connecting to the ICX35-HWC Configuration Webpage Setup ................12 Assigning a LAN IP Address to the ICX35-HWC ............ 13 Connecting to your Cellular Provider ..............17 2.3.1 Connection using GSM/GPRS ................17 ICX35-HWC Webpage Status ........................
Page 6
Contents ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE ICX35-HWC Tech Notes (Example Configurations) Pass-Thru Mode (End Device to End Device) ............65 6.1.1 ICX35-HWC Configuration Parameters ..............66 6.1.2 End Device Parameters ..................67 6.1.3 Obtaining Data from the End Device ..............67 Pass-Thru and OpenVPN Example ................
3G. These devices include PAC/PLCs, RTUs, DCS systems, instruments, electronic billboards and communication towers. The ICX35-HWC is ideal for programming and maintenance of remote equipment, remote data collection, SCADA, and machine-to-machine (M2M) applications. It operates on LTE/GSM networks with a single device.
Start Here 3G/4G LTE User Manual Package Contents The following components are included with the ICX35-HWC and are required for installation and configuration. Important: Before beginning the installation, please verify all of the following items are present. Qty. Part Name...
ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Power Requirements The ICX35-HWC accepts voltages between 10 and 30 VDC, with an average power draw of 3 watts or less. Page 10 of 79 ProSoft Technology, Inc. April 21, 2016...
Connecting to your Cellular Provider ............. 17 Configuration Webpage ................. 19 The configuration webpage is used to configure and manage the ICX35-HWC. First-time setup must be performed over a wired network, where provider-specific cellular configuration details are configured. Once initially set up, you can access the webserver over the LAN and cellular networks (unless LAN access is disabled).
Apply power to the module. Log into the radio's configuration webpage. The default IP address of the ICX35-HWC is 192.168.0.250. If your PC is on a different subnet, temporarily set the IP address of your PC to 192.168.0.xxx with a subnet of 255.255.255.0...
Enter a name for the module in the Module Name field. Enter the APN (Access Point Name). This information is provided by your cellular provider. Enter the LAN IP Address/Subnet Mask of the ICX35-HWC. ProSoft Technology, Inc. Page 13 of 79...
Page 14
DHCP Range – This allows you to enter a range of IP addresses that can be addressed. For example, if you have a number of devices connected to a remote ICX35-HWC, you can enter the DHCP range to use on devices connected to the remote ICX35-HWC.
Page 15
ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual b) For each End Device, set the TCP/IPv4 properties (Found at Control Panel\Network and Internet\Network Connections) as follows: If NO, Disable the DHCP option and enter an applicable End Device IP Address.
Page 16
Once the reboot is complete, reset your PC back to its original IP address. This IP address should now be on the same subnet as the ICX35-HWC. Close your browser and open a new session. Enter the new IP address of the ICX35-HWC to access the configuration web page.
SIM (Subscriber Identity Module) card to be installed in the radio. 2.3.1 Connection using GSM/GPRS The Subscriber Identity Module (SIM) in the ICX35-HWC is a smartcard that securely stores the key identifying a cellular subscriber. Generally, you will only need to install a SIM once in the life of the cellular gateway - and it may be pre- installed by your ProSoft Technology Representative.
Page 18
Remove the SIM Card Slot cover by removing the two screws holding it into place. Insert the SIM card into the ICX35-HWC and cycle power. The SIM card is read by the ICX35-HWC upon boot up. Re-attach the SIM Card Slot cover.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual ICX35-HWC Webpage There are three main tabs of the ICX35-HWC web pages: Status Configuration Administrator Status The Status tab displays the current settings of the cellular gateway including up time, IP address, and cellular data usage.
Page 20
It counts each time that the service has disconnected from the cellular service while the unit is running. IP address of the ICX35-HWC on the WAN Sent Bytes Number of sent bytes on the WAN port for this connection...
Access Point Name of the network path for cellular connectivity LAN Settings Parameter Description LAN IP Address / Subnet Mask IP address of the ICX35-HWC ethernet port Enable DHCP Enables/Disables DHCP functionality End Device IP Address Used when DHCP is disabled. IP address of end device.
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE 3.2.2 Advanced The Configuration > Advanced tab allows you to configure the following: Cellular Usage Tracking DDNS Serial/Encapsulation Parameter Description User Name (optional) User Name for the connection...
Page 23
Reached cellular data if it reaches its data plan limit. You can select Disabled or Enabled. If you select Disabled, the ICX35-HWC will attempt to transfer data even if the Plan Size is exceeded, but the cellular data service provider may halt data, reduce the data rate, or charge additional fees.
Page 24
(Disabled, DynDNS.org, No-IP.com) Important: For providers like DynDNS.org, the Time to Live (TTL) value may affect how long it takes an ICX35-HWC to see a change in IP address (for example, the IP address changes because of a reboot). It may take the ICX35-HWC upwards of 30 minutes to see the new address.
Page 25
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Client drop-down list includes the following options: Disable OpenVPN IPSec Select Disable to disable VPN functionality. ProSoft Technology, Inc. Page 25 of 79 April 21, 2016...
Page 26
IP address of the VPN server. This is the IP Address that you are creating the tunnel to. In the previous example, this is the public IP Address of the ICX35-HWC in pass-through mode that is being used as the default connection to the Linux server.
Page 27
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Parameter Description Certificate Authority - VPN authentication that issues certificates for Credential Files VPN, Secure Internal Communication (SIC), and users. Client Certificate - Issued by a certificate authority as proof of identity.
Page 28
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE IPSec The VPN Tunnel Internet Protocol Security (IPsec) feature consists of protocols used for authentication and encryption. The IPSec option from the Client drop-down list displays the following parameters:...
Page 29
LAN-based devices that allow you to set the IP Address and Gateway IP address. Two ICX35-HWC radios and two PCs are used. Once the IPSec tunnel is created, communications can occur between the two PCs. IPSec uses the concept of Local ID and RemoteID to identify each device.
Page 30
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE LAN Device #1 (Connected to ICX35 #1) IP Address 192.168.1.155 (ICX35 #1 end device IP address Gateway 192.168.1.150 (ICX35 #1 LAN IP address Preferred DNS (if applicable) 192.168.1.150 (ICX35 #1 LAN IP Address ICX35 #2 "East"...
Page 31
Port Mode This parameter sets the scheme for the serial port (RS-232, RS-485, or RS-422) Baud Rate Baud rate used on the ICX35-HWC serial port Data Bits Number of data bits per character for the serial port Parity Parity type used on the serial port. None, Odd, Even, Mark, Space.
Page 32
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Generic The Generic option sends all serial data to a single destination. Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave) Timeout Bits Length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data.
Page 33
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Master role contains an additional parameter: Parameter Description Remote IP IP address of the Remote connection to which the encapsulated data will be sent. ProSoft Technology, Inc. Page 33 of 79...
Page 34
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Modbus RTU The Modbus RTU option displays the following additional parameters: Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 35
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Master role contains additional parameters: Add Entry to Client Table List Remove Selected Entries If Slave is selected, the Encapsulation table is not visible. You can add an entry to the Client Table list.
Page 36
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Modbus ASCII The Modbus ASCII option displays the following additional parameters: Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 37
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Master role contains additional parameters: Add Entry to Client Table List Remove Selected Entries If Slave is selected, the Encapsulation table is not visible. You can add an entry to the Client Table list.
Page 38
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Modbus RTU to TCP The Modbus RTU to TCP option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits This parameter sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 39
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Master role contains additional parameters: Add Entry to Client Table List Remove Selected Entries If Slave is selected, the Encapsulation table is not visible. You can add an entry to the Client Table list. Click on the Add Entry to Client Table List button.
Page 40
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Modbus ASCII to TCP The Modbus ASCII to TCP option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits...
Page 41
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Master role contains additional parameters: Add Entry to Client Table List Remove Selected Entries If Slave is selected, the Encapsulation table is not visible. You can add an entry to the Client Table list. Click on the Add Entry to Client Table List button.
Page 42
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE DF1 Full Duplex The DF1 Full-Duplex option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 43
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Remove Selected Entries button selects and removes entries from this list. ProSoft Technology, Inc. Page 43 of 79 April 21, 2016...
Page 44
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE DF1 Radio Modem The DF1 Radio Modem option displays the following additional parameters: Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits This parameter sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 45
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Remove Selected Entries button selects and removes entries from this list. ProSoft Technology, Inc. Page 45 of 79 April 21, 2016...
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE 3.2.3 Firewall The Configuration > Firewall tab displays the following fields for Port Forwarding. Up to 10 mappings can be created. Enable this feature by selecting Enable in the dropdown menu.
Page 47
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Port Forwarding Parameter Description Application Name of particular mapping Protocol Packet delivery method (TCP, UDP, both) LAN IP Address IP address of the destination LAN device From Port Range...
The Administrator tab allows you to configure the password, record logs, update firmware, etc. 3.3.1 System The ICX35-HWC configuration can be saved to a file for backup. The file can also be loaded back into the ICX35-HWC. Restoring to factory defaults is accomplished here as well.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.2 Access Control Parameter Description Web Access Web Port Web access port number Web Protocol HTTPS or HTTP Web Access on WAN Allows or blocks web page access from the WAN...
Page 50
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Adding Entries to the Whitelist Click on the Add Entry to WAN Whitelist button. This unit displays a line entry in which you can enter an IP address. Whitelist entries can either be single IP addresses (e.g., 50.40.20.15) or IP addresses followed by a CIDR netmask (e.g., 50.40.20.0/8) allowing subnets to...
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.3 Logs Parameter Description System Log Level Specifies how much information is saved to the log file. Lower numbers limit the log entries to more critical information, while higher numbers include information useful for troubleshooting.
ICX35-HWC Webpage ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE 3.3.4 Ping You can ping a remote device to determine whether you can connect to it. Enter the WAN IP address or hostname to be pinged and click Ping.
ProSoft Connect 3G/4G LTE User Manual ProSoft Connect ProSoft Connect is a secure webpage interface to activate, setup VPN clients, invite team members, and manage multiple ProSoft cellular radios on the network. Activation ProSoft Connect requires you to activate the ICX35-HWC upon initial use.
Page 54
Or open a new tab in your web browser, enter www.prosoft.io, then press Enter. Enter or create an account in the ProSoft Connect log-in screen. Once logged in, you can take a tour of the features of the ProSoft Connect utility. Page 54 of 79 ProSoft Technology, Inc.
Page 55
ProSoft Connect 3G/4G LTE User Manual When ready, activate the ICX35-HWC within the tour, or you can click on the Activate a Gateway button at the top of the screen. It will prompt you for the Activation Key. Once the ICX35-HWC is activated, you can navigate to each tab on the left- hand side of the page.
Page 56
ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Page 56 of 79 ProSoft Technology, Inc. April 21, 2016...
Caution: The ICX35-HWC is in a hardened case, and designed for use in industrial and extreme environments. However, unless you are using cables expressly designed for such environments, they can fail if exposed to the same conditions the ICX35-HWC can withstand.
Hardware Installation ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Connecting the Radio to a Network Device The application ports are located on the front of the radio. The Ethernet port uses a standard RJ45 connector The serial port uses a standard DB9 connector for serial connectivity 5.2.1 Ethernet Cable Specifications...
ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual Ethernet Cable Configuration Note: The standard connector view shown is color-coded for a straight-through cable. Crossover cable Straight- through cable RJ-45 PIN RJ-45 PIN RJ-45 PIN RJ-45 PIN 1 Rx+...
Page 60
Hardware Installation ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE If hardware handshaking is required, the cable to connect to the port is as shown below: RS422 The RS-422 interface requires a single four or five wire cable. The Common connection is optional, depending on the RS-422 network devices being used.
Page 61
ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual RS-485 Application Port(s) The RS-485 interface requires a single two or three wire cable. The Common connection is optional, depending on the RS-485 network devices used. The cable required for this instance is shown in the following diagram: ProSoft Technology, Inc.
MS (Module Status) ICX35-HWC is powered off Solid Green Initialization complete / OK Blinking Green ICX35-HWC is in the process of configuring Solid Red Unrecoverable error Blinking Red Reading config/minor error/No SIM NS (Network Status)
Page 63
*About 3 Hz (333 ms) blink rate Note: The WWAN LED indicates a physical connection state between the ICX35-HWC and the cell tower. It is not an indicator of a logical connection state. There may be a situation when you may see a “Disconnect, will retry”...
Page 64
ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Page 64 of 79 ProSoft Technology, Inc. April 21, 2016...
This chapter does not go into End Device configuration procedures since it is assumed the user knows how to configure End Devices. However, examples are provided to show how the End Device is configured along with the ICX35-HWC. Pass-Thru Mode (End Device to End Device) The following diagram illustrates a pass-thru mode configuration example: In this scenario, the user on the laptop wants to communicate with a CLX.
Log in to the ICX35-HWC built-in web server. Navigate to Configuration > Basic. Using the previous example, the LAN IP of the ICX35-HWC is 192.168.1.100. This is configured in the LAN IP Address/Subnet Mask field as shown. The End Device IP Address (also known as the pass-thru IP) is the IP Address of the device connected to the ICX35-HWC (193.168.1.10).
Address/Subnet Mask address of the ICX35-HWC. 6.1.3 Obtaining Data from the End Device A user trying to reach the end device through the ICX35-HWC must address the WAN ID (in this case, 166.132.10.56 provided by the cellular provider). Pass-Thru and OpenVPN Example The following diagram illustrates using a pass-thru scenario with OpenVPN: ProSoft Technology, Inc.
In this scenario, Virtual OpenVPN addresses are assigned by the VPN server. If the end device 172.020.000.220 wants to communicate with 192.168.000.211, it must address the device through the ICX35-HWC VPN address. The ICX35- HWC routes the request as it would a pass-thru device.
The Gateway parameter must match the VPN IP address for the ICX35-2 once connected. 6.2.4 Configuring OpenVPN Parameters You must now configure OpenVPN parameters on both ICX35-HWC radios. Navigate to Configuration > Advanced. Click on the VPN link. ProSoft Technology, Inc.
Page 70
ICX35-HWC Tech Notes (Example Configurations) ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE Select OpenVPN from the drop-down list box. Enter the in seconds in the TLS Time field. Enter the OpenVPN server’s IP Address in the Server IP field.
Page 71
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes (Example Configurations) 3G/4G LTE User Manual Choose the Credential files. Your Server Administrator will provide three certificate files. Browse to the location of these files and select for all three fields. Your Server Administrator will specify which files should be uploaded to the appropriate fields.
ICX35-HWC Tech Notes (Example Configurations) ICX35-HWC ♦ Industrial Cellular Gateway User Manual 3G/4G LTE OpenVPN with DHCP Enabled (Example) The following diagram illustrates the use of OpenVPN with DHCP enabled. Page 72 of 79 ProSoft Technology, Inc. April 21, 2016...
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes (Example Configurations) 3G/4G LTE User Manual 6.3.1 ICX35-1 Configuration The ICX35-1 shown in the diagram is configured in the ICX35-1 web page as follows. Login to the ICX35-1 web server. Navigate to Configuration > Basic.
6.3.3 End Device Configuration End devices must be configured based on the DHCP assignments. The Gateway settings must match the LAN IP of the ICX35-HWC. This must be done on both ICX35-HWC radios. When setting up Ethernet Bridges, set the IP address to the DHCP assigned addresses.
ICX35-HWC ♦ Industrial Cellular Gateway GSM Communication (AT&T®) 3G/4G LTE User Manual ® GSM Communication (AT&T Many GSM Networks have been upgraded to support HSUPA. GSM Networks use SIM cards which are smart cards containing the account holder's details. A SIM can generally be moved from one device to another allowing for account flexibility.
GPRS. EDGE can carry data at speeds typically up to 384 kbit/s in packet mode. When EDGE is not available, your ICX35-HWC will fall back to GPRS for the connection to your cellular provider to provide continued connectivity.
Details about the serial, Ethernet or Fieldbus devices interfaced to the module, if any. Note: For technical support calls within the United States, ProSoft’s 24/7 after-hours phone support is available for urgent plant-down issues. Detailed contact information for all our worldwide locations is available on the following page.
E-mail: brasil@prosoft-technology.com Languages spoken include: Portuguese, English Warranty Information For complete details regarding ProSoft Technology’s TERMS & CONDITIONS OF SALE, WARRANTY, SUPPORT, SERVICE AND RETURN MATERIAL AUTHORIZATION INSTRUCTIONS please see the documents on the ProSoft Solutions DVD or go to www.prosoft-technology.com/legal...
About the ICX35-HWC Industrial Cellular Gateway • 7 ProSoft Cloud Connect • 53 Administrator • 48 Antenna Installation • 57 Assigning a LAN IP Address to the ICX35-HWC • 13 Serial / Encapsulation • 31 Serial Port Basics • 59 Specifications • 8 Cellular Usage Tracking •...
Need help?
Do you have a question about the ICX35-HWC and is the answer not in the manual?
Questions and answers