Download
Share
Print this page
  1. Manuals
  2. Brands
  3. InHand Manuals
  4. Gateway
  5. InGateway902
  6. User manual

InHand InGateway902 User Manual

Hide thumbs

Advertisement

Quick Links

InGateway Documentation
Release 0.0.1
zhangning
Aug 24, 2020

Advertisement

loading
Need help?

Need help?

Do you have a question about the InGateway902 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for InHand InGateway902

Summary of Contents for InHand InGateway902

  • Page 1 InGateway Documentation Release 0.0.1 zhangning Aug 24, 2020...

  • Page 3: Table Of Contents

    1 InGateway Documentation Site Navigation InGateway902 Quick Start Manual ....... . .

  • Page 5: Ingateway Documentation Site Navigation

    CHAPTER InGateway Documentation Site Navigation The new IoT edge computing gateway of InHand aims to utilize IoT technologies to support the digital transformation of industries. The product features powerful edge computing capabilities, to reduce cloud- end computing resources, and realize data optimization, real-time response, agile connection and model analysis on the IoT edge, further advancing the development of digital networking in the AI era.
  • Page 6 InGateway Documentation, Release 0.0.1 – 3.2 Update Configuration File for App – 3.3 Update Python App version – 3.4 Enable the Debug Mode • 4. Device Manager • Appendix – Factory reset 1.1.1 1. Configure IG902 Network Parameters 1.1 Access the IG902 •...
  • Page 7 • Step 2: Launch the browser on the PC and access the IP address of GE 0/2. Enter the login user name and password. The default user name and password are adm and 123456 respectively. 1.1. InGateway902 Quick Start Manual...
  • Page 8 InGateway Documentation, Release 0.0.1 • Step 3: After successful login, you can see the web page as shown below: • Step 4: To change the user name and password for logging in to the web management interface of IG902, choose System > User Management page of IG902 and set the new user name and password. Chapter 1.
  • Page 9 – Step 1: Insert the SIM card. (Note: Before inserting or removing the SIM card, unplug the power cable; otherwise, the operation may cause data loss or damage the IG902.) After inserting the SIM card, connect the 4G LTE antenna to the ANT interface and power on the IG902. 1.1. InGateway902 Quick Start Manual...
  • Page 10 InGateway Documentation, Release 0.0.1 – Step 2: Choose Network > Network Interfaces > Cellular page of IG902 and select Enable Cellular and click Submit. Chapter 1. InGateway Documentation Site Navigation...
  • Page 11 IG902 has been connected to the Internet with the SIM card. • Method 2: Connect to the Internet by Ethernet – Step 1: Use the Ethernet cable to connect the GE 0/1 and GE 0/2 ports of the IG902 respectively, as shown below: 1.1. InGateway902 Quick Start Manual...
  • Page 12 InGateway Documentation, Release 0.0.1 – Step 2: Choose Network > Network Interface > Ethernet > Gigabit Ethernet 0/1 page of IG902 to configure the IP address of the GE 0/1 port and click Submit. (When the network type is a static IP address, you need to configure the IP, subnet mask, and other information according to the site network conditions.) Chapter 1.
  • Page 13 – Step 3: Choose Network > Static Routing > Configuration page of IG902 to add a static route for GE 0/1 port and click Submit. (Select “Gigabitethernet 0/1”for the interface item, and configure the other items according to the site network conditions.) 1.1. InGateway902 Quick Start Manual...
  • Page 14 InGateway Documentation, Release 0.0.1 – Step 4: Choose System > Network Tools page of IG902 and use the Ping tool to check whether the IG902 has successfully connected to the Internet. The following figure shows that IG902 have successfully connected to the Internet: 1.1.2 2.
  • Page 15 1.1.4 2.2 Upgrade the Python SDK of IG902. Choose Edge Computing > Python Edge Computing. Select Python Engine, select an Python SDK file, and click Upgrade; when the upgrade confirmation window pops up, click Confirm. Then the IG902 automatically performs the upgrade. 1.1. InGateway902 Quick Start Manual...
  • Page 16 InGateway Documentation, Release 0.0.1 1.1.5 2.3 Upgrade the Docker SDK of IG902. Choose Edge Computing > Docker Manager, close the Docker Manager and import the Docker SDK. After importing, IG902 will automatically install the Docker SDK. The installation process usually takes 1-2 minutes.
  • Page 17 To install and run Python App (App for short) in IG902, please refer to the following process: • Step 1: Install the App Before installing the App, you need to ensure that the Python Edge Computing Engine is enabled and 1.1. InGateway902 Quick Start Manual...
  • Page 18 InGateway Documentation, Release 0.0.1 the Python SDK is installed, as shown in the following figure: Choose Edge Computing > Python Edge Computing. click the Add button and select the App package file to be installed, then click OK. After importing, you can view the imported Apps, as shown in the following figure: Chapter 1.
  • Page 19 InGateway Documentation, Release 0.0.1 • Step 2: Run the App Select enable App and click Submit. Once enabled, the App automatically runs and will run every time the IG902 is started. 1.1. InGateway902 Quick Start Manual...
  • Page 20 InGateway Documentation, Release 0.0.1 3.2 Update Configuration File for App If the installed App supports importing configuration files to modify the running mode, you can update the App running configuration by referring to the following process: • Step 1: Choose Edge Computing > Python Edge Computing, click the Import Configuration button and select the configuration file to be imported, then click Confirm.
  • Page 21 Generally, if you need to update the Python App version, you only need to import the new version of the App on the Edge Computing > Python Edge Computing page. After the update is completed, as shown below： 1.1. InGateway902 Quick Start Manual...
  • Page 22 InGateway Documentation, Release 0.0.1 3.4 Enable the Debug Mode To run and debug Python code on IG902, you need to enable IG902’ s debug mode. Choose Edge Computing > Python Edge Computing, select Enable Debug Mode. After enabling, you can develop IG902 through VS Code.
  • Page 23 1.1.7 4. Device Manager The Device Manager developed by InHand supports functions such as monitoring IG902 status, remote maintenance of equipment, remote batch delivery of IG902 configuration, and IG902 batch upgrade, helping users to conveniently and efficiently manage IG902 and field devices. In order to enable the Device Manager to remotely manage the IG902 and field devices, the IG902 needs to be connected to the cloud platform.
  • Page 24 InGateway Documentation, Release 0.0.1 • Advanced settings: Contains configurations such as heartbeat interval. Generally, you can use the default configuration. After the IG902 is successfully connected to the Device Manager, the status is described as Connection Accepted. Chapter 1. InGateway Documentation Site Navigation...
  • Page 25 RESET key when the ERR light flashes; wait for the ERR light to go out, indicating that the factory reset was successful. • Software factory reset Choose System Management > Configuration Management, click the reset button and select OK. IG902 will complete the factory reset operation by itself. 1.1. InGateway902 Quick Start Manual...

  • Page 26: Ingateway902 User Manual

    InGateway Documentation, Release 0.0.1 1.2 InGateway902 User Manual • 1. Equipment Introduction – 1.1 Overview – 1.2 Packing List – 1.3 Panel Introduction and Structure Size * 1.3.1 Panel Introduction * 1.3.2 Structure Size – 1.4 Panel Indicators * 1.4.1 LED Indicator * 1.4.2 Signal Status Indicator...
  • Page 27 · 3.3.2.1.2 DHCP Relay · 3.3.2.2 DNS · 3.3.2.3 GPS · 3.3.2.4 Host List 3.3.3 Routing · 3.3.3.1 Routing Status · 3.3.3.2 Static Routing 3.3.4 Firewall · 3.3.4.1 ACL · 3.3.4.2 NAT – 3.4 Edge Computing 1.2. InGateway902 User Manual...
  • Page 28 InGateway Documentation, Release 0.0.1 3.4.1 Python Edge Computing * 3.4.2 Docker Manager – 3.5 System 3.5.1 System Time * 3.5.2 Log 3.5.3 Configuration Management * 3.5.4 Device Manager 3.5.5 Firmware Upgrade * 3.5.6 Access Tools 3.5.7 User Management 3.5.8 Reboot * 3.5.9 Network Tools * 3.5.10 3rd Party Notification –...
  • Page 29 4.4.4.1 OpenVPN Client · 4.4.4.2 OpenVPN Server 4.4.5 Certificate Management – 4.5 Industrial Interfaces 4.5.1 DTU · 4.5.1.1 Serial Port · 4.5.1.2 DTU1 · 4.5.1.3 DTU2 * 4.5.2 I/O Interfaces – 4.6 Wizards 4.6.1 New LAN 1.2. InGateway902 User Manual...
  • Page 30 1.2.1 1. Product Introduction 1.1 Overview The InGateway902 (IG902 for short) series is a new-generation series of 4G edge computing gateways de- veloped by InHand Networks for the Industrial IoT sector. It provides omnipresent, uninterrupted Internet access over globally deployed 3G or 4G wireless networks and various broadband services. With superb edge...
  • Page 31 The panel introduction of IG902 is shown in the figure below (The IG900 series product is applicable to multiple panel appearances, as they have the same installation method. Refer to the actual product during operation.): 1.3.2 Structure and Dimensions The structural and dimensions of IG902 are shown in the following figure: 1.2. InGateway902 User Manual...
  • Page 32 InGateway Documentation, Release 0.0.1 1.4 Panel Indicators Chapter 1. InGateway Documentation Site Navigation...
  • Page 33 The following figure shows the indicator for SIM card 1. 1.4.2 Signal Status Indicator Signal: 1–9, there might be a signal problem. Check whether the antenna is installed properly and whether the signal quality in the operating area is good. 1.2. InGateway902 User Manual...
  • Page 34 InGateway Documentation, Release 0.0.1 Signal: 10–19, indicating that signal and device operation are normal. Signal: 20–31, indicating good signal. 1.2.2 2. Installation 2.1 Precautions • Power supply requirements: 24 V DC (12–48 V DC). Pay attention to the voltage class. The rated current is 0.6 A (1.2–0.3 A).
  • Page 35 • Step 1: Select an installation place and reserve enough space for installation. • Step 2: Install the wall mounting bracket on the back of the device by using a screwdriver, as shown in following figure. 1.2. InGateway902 User Manual...
  • Page 36 InGateway Documentation, Release 0.0.1 • Step 3: Take out the screws (packaged with the wall mounting bracket), fasten the screws in the installation positions by using the screwdriver, and pull down the device to make it secure, as shown in following figure. 2.3.2 Uninstalling in Wall-mounted Mode Procedure: Hold the device with one hand and unfasten the screws that fix the upper end of the device with the other hand, to remove the device from the installation place.
  • Page 37 Note: • IG902 supports dual antenna: ANT antenna and AUX antenna. The ANT antenna sends and receives data. The AUX antenna only increases the antenna signal strength and cannot be used independently for data transmission. 1.2. InGateway902 User Manual...
  • Page 38 InGateway Documentation, Release 0.0.1 • Only the ANT antenna is used in normal cases. It is used with the AUX antenna only when signal is poor and signal strength must be improved. 2.6 Installing the Power Supply Procedure: • Step 1: Remove the terminal from the gateway. •...
  • Page 39 During installation, remove the terminals from the device, unfasten the locking screws on the terminals, connect cables to the corresponding terminals, and fasten the screws. Sort the cables in order. Note: This section is only applicable to IG902 with industrial interfaces. 1.2.3 3. Device Configuration 1.2. InGateway902 User Manual...
  • Page 40 InGateway Documentation, Release 0.0.1 3.1 Gateway Access • Step 1: Set an IP address for your PC, which is on the same network segment as the IP address of interface GE 0/2 on the IG902. The default IP address of GE 0/2 is 192.168.2.1. –...
  • Page 41 The factory default user name and password of the IG902 are adm and 123456, respectively. • Step 3: After logging in, you will see the web page as shown in the following figure. 1.2. InGateway902 User Manual...
  • Page 42 InGateway Documentation, Release 0.0.1 3.2 Overview The Overview page displays information about the IG902, such as its network connection status, system information, and data usage. You can quickly obtain the IG902 running status on this page.After you log in to the IG902 web page, the Overview page appears by default. You can also click Overview to display this page.
  • Page 43 • Data Usage Monitoring: shows the usage of data traffic in the last 24 hours. One data record is produced every hour. • CPU Load: shows the CPU usage in the last 1 minute, 5 minutes, and 15 minutes. • Memory: shows the current memory usage. 1.2. InGateway902 User Manual...
  • Page 44 InGateway Documentation, Release 0.0.1 • System Information: You can click the Edit icon to change name of the IG902. 3.3 Network 3.3.1 Network Interfaces 3.3.1.1 Cellular The Cellular page displays the configuration and status of the IG902’s dial-up interface. You can set dial-up interface parameters to connect the IG902 to a cellular network or view details about the dial-up interface on this page.
  • Page 45 Within this duration, the number of dial-up attempts is counted. When the connection duration exceeds the set value, the number of dial-up attempts is reset. When the value is set to 0, this function is disabled. 1.2. InGateway902 User Manual...
  • Page 46 InGateway Documentation, Release 0.0.1 – Backup SIM Timeout: specifies the timeout period of the backup SIM card used currently. The gateway switches to the main SIM card when the timeout period of the backup SIM card is reached. • Network Type: specifies a network type for the SIM card. Options are Auto, 3G, 4G, and 2G. You can select a specific network type suitable for your gateway and SIM card or choose the auto mode, in which the gateway automatically registers to the suitable network.
  • Page 47 The Ethernet page displays the configuration and status of Ethernet interfaces on the IG902. You can set Ethernet interface parameters or view details about the Ethernet interfaces on this page. Follow these steps to configure the Ethernet interfaces: 1.2. InGateway902 User Manual...
  • Page 48 InGateway Documentation, Release 0.0.1 1. Choose Network > Network Interfaces > Ethernet to display the Ethernet page and click the Gigabitethernet 0/1 tab. 2. Select a network type for interface GE 0/1. 3. Select options or enter values for the parameters. For details about these parameters, see Ethernet parameter description.
  • Page 49 InGateway Documentation, Release 0.0.1 The following figure shows the configuration of GE 0/2, with Network Type set to Static IP. 1.2. InGateway902 User Manual...
  • Page 50 InGateway Documentation, Release 0.0.1 The Ethernet parameters are described as follows: • Network Type (Static IP by default) – Static IP: uses a manually configured IP address, matching subnet mask, and other information for the Ethernet interface. – Dynamic Address (DHCP): configures the interface as a DHCP client to obtain an IP address, the matching subnet mask, and other information through DHCP.
  • Page 51 2. Select Enable Wi-Fi, and then select options or enter values for the parameters. For details about these parameters, see WLAN parameter description. 3. Click Submit to complete the WLAN configuration. The following figure shows the configuration of the gateway as a wireless access point (AP). 1.2. InGateway902 User Manual...
  • Page 52 InGateway Documentation, Release 0.0.1 The following figure shows the configuration of the gateway as a wireless client. Chapter 1. InGateway Documentation Site Navigation...
  • Page 53 SSID broadcasting to hide this SSID. When the SSID is hidden, beacon frames sent from the AP do not contain the SSID. In this case, a wireless client can connect to the AP only after the SSID is manually specified on the client. 1.2. InGateway902 User Manual...
  • Page 54 InGateway Documentation, Release 0.0.1 – AP Isolate: enables or disables client isolation on the AP. After this feature is enabled, the AP does not forward L2 packets between the clients connected to it. – Bridge: enables or disables bridging of the radio interface to the bridge interface. –...
  • Page 55 2. Set parameters for the bridge interface. For details about these parameters, see bridge interface pa- rameter description. 3. Click Submit to save the configuration. As shown in the following figure, the radio interface is bridged with interface GE 0/2. 1.2. InGateway902 User Manual...
  • Page 56 InGateway Documentation, Release 0.0.1 The bridge interface parameters are described as follows: • Primary IP: specifies the primary IP address of the bridge interface. • Netmask: specifies the subnet mask of the bridge interface. • Secondary IP Setting: allows you to set up to 10 secondary IP addresses in addition to the primary IP address.
  • Page 57 3. Set the parameters. For details about these parameters, see DHCP server parameter description. 4. Click OK to save the configuration, and then click Submit to apply the configuration. The following figure shows the DHCP server configuration. 1.2. InGateway902 User Manual...
  • Page 58 InGateway Documentation, Release 0.0.1 • The DHCP server parameters are described as follows: – Enable DHCP Service: enables or disables the DHCP service. Caution: The DHCP server and DHCP relay features cannot be enabled at the same time. – Interface: specifies the interface on which the DHCP service is enabled. You can select Gi- gabitethernet 0/1, Gigabitethernet 0/2, Bridge 1, or Dot11radio 1.
  • Page 59 • Enable DHCP Relay: enables or disables the DHCP relay feature. The DHCP relay and DHCP server features cannot be enabled at the same time. • DHCP Server: specifies the IP address of the DHCP server. 1.2. InGateway902 User Manual...
  • Page 60 InGateway Documentation, Release 0.0.1 • Relay Interface: specifies the network interface that serves as the DHCP relay. 3.3.2.2 DNS A domain name system (DNS) is a distributed database used for TCP/IP applications and provides trans- lation between domain names and IP addresses. DNS allows users to access some applications by using easy-to-remember, meaningful domain names, which are then translated into the correct IP addresses by a DNS server on the network.
  • Page 61 3. Configure the parameters. For details about these parameters, see GPS IP forwarding parameter description and GPS serial forwarding parameter description. (The GPS serial forwarding and DTU features cannot be used at the same time. Therefore, you must disable DTU before enabling GPS 1.2. InGateway902 User Manual...
  • Page 62 InGateway Documentation, Release 0.0.1 serial forwarding.) 4. Click Submit to save the configuration. The following figure shows the configuration of GPS IP forwarding. The following figure shows the configuration of GPS serial forwarding. Chapter 1. InGateway Documentation Site Navigation...
  • Page 63 * Min Reconnect Interval: specifies the connection interval at the beginning of TCP connection setup. The interval increases every 30 seconds until it reaches the maximum value. * Max Reconnect Interval: specifies the maximum retry interval for TCP connection setup. 1.2. InGateway902 User Manual...
  • Page 64 InGateway Documentation, Release 0.0.1 * Source Interface: specifies the interface of which the IP address is used by the gateway to establish a TCP connection to the server. * Reporting Interval: specifies the interval at which the gateway reports GPS data. * Include RMC: specifies whether the GPS data sent from the gateway includes PMC data.
  • Page 65 3.3.2.4 Host List You can view information about hosts connected to the IG902 on the Host List page. Choose Network > Network Services > Host List to display the Host List page, as shown in the following figure. 1.2. InGateway902 User Manual...
  • Page 66 InGateway Documentation, Release 0.0.1 3.3.3 Routing 3.3.3.1 Routing Status Choose Network > Routing > Routing Status to display the Routing Status page. This page displays information about static routes configured on the IG902, as shown in the following figure. 3.3.3.2 Static Routing You can configure static routes on the Static Routing page.
  • Page 67 IP address or account) based on a series of matching rules to filter the data reaching a network inter- face. You can configure a data filtering policy for a network interface on the ACL page. The configuration procedure is as follows: 1.2. InGateway902 User Manual...
  • Page 68 InGateway Documentation, Release 0.0.1 1. Choose Network > Firewall > ACL to display the ACL page. 2. Click the Add icon under Access Control Policy to add an access control policy. 3. Set the parameters. For details about these parameters, see access control policy parameter description. 4.
  • Page 69 InGateway Documentation, Release 0.0.1 The following figure shows the configuration of an access control list. 1.2. InGateway902 User Manual...
  • Page 70 InGateway Documentation, Release 0.0.1 • Parameters of a standard access control policy are described as follows: – ID: specifies the ID of an ACL rule, in the range of 1-99. A smaller value indicates a higher priority of the rule. –...
  • Page 71 4. Click OK to save the configuration, and then click Submit to apply the configuration. As shown in the following figure, the NAT rule allows hosts connected to the IG902 to connect to the Internet by using the IP address of interface GE 0/2. 1.2. InGateway902 User Manual...
  • Page 72 InGateway Documentation, Release 0.0.1 Parameters of the NAT rule are described as follows: • Action – SNAT: uses the source network address translation feature that translates source IP addresses of data packets into another IP address. Generally, this feature is used for data packets sent to the Internet through the router.
  • Page 73 4. In the Configure area, import the app package and select Enable. For details about the configuration, see app configuration function description. 5. Click Submit to apply the configuration. The following figure shows the configuration of the Python development environment on the IG902. 1.2. InGateway902 User Manual...
  • Page 74 InGateway Documentation, Release 0.0.1 The following figure shows the app running status (HelloWorld as an example). The app configuration functions are described as follows: • App status – Start all: starts all the enabled apps. – Stop all: stops all the enabled apps. –...
  • Page 75 • User Name: specifies the user name used to log in to the Portianer. • Password: specifies the password used to log in to the Portianer. • Port: specifies the port number used to access the Portianer. The default port number is 9000. 1.2. InGateway902 User Manual...
  • Page 76 InGateway Documentation, Release 0.0.1 • Docker Image: allows you to import a Docker image. 3.5 System 3.5.1 System Time To enable the IG902 to cooperate with other devices properly, you may need to set an accurate system time for it. For this purpose, set the system time on the System Time page and enable the NTP protocol to implement clock synchronization among all clock-supporting devices on the network.
  • Page 77 The following figure shows how to select a time zone or set a system time manually. The following figure shows how to enable SNTP clients. The following figure shows how to enable the NTP server to synchronize time to other devices. 1.2. InGateway902 User Manual...
  • Page 78 InGateway Documentation, Release 0.0.1 SNTP client parameters are described as follows: • Enable SNTP Clients: enables or disables SNTP clients. If the cellular interface is selected as the source interface, the SNTP service will not be enabled when the gateway fails to dial up to a network. •...
  • Page 79 The IG902 filters out invalid commands in the imported configuration file, and then saves the valid commands as the startup configuration. The system will execute these commands sequentially after a reboot. If 1.2. InGateway902 User Manual...
  • Page 80 IG902. 3.5.4 Device Manager The Device Manager developed by InHand Networks allows you to monitor the status of IG902 gateways, maintain on-site devices remotely, configure and upgrade a batch of IG902 gateways at the same time remotely, and perform other management operations to manage IG902 gateways and on-site devices more conveniently and efficiently.
  • Page 81 – Interval: specifies the interval between heartbeat packets exchanged with the DM platform. The valid value range is 30-86400. – Dataflow Upload Interval: specifies the interval for reporting traffic information. The valid value range is 3600-86400. 1.2. InGateway902 User Manual...
  • Page 82 InGateway Documentation, Release 0.0.1 3.5.5 Firmware Upgrade You can upgrade the firmware version for the IG902 on the Firmware Upgrade page, so that the IG902 can provide new functions or better user experiences. Follow these steps to upgrade the firmware version: 1.
  • Page 83 The following figure shows the configuration of Telnet-based management. The following figure shows the configuration of SSH-based management. The HTTPS parameters are described as follows: 1. Listen IP Address: specifies the listening IP address. Options include Any, 127.0.0.1, and other IP addresses. 1.2. InGateway902 User Manual...
  • Page 84 InGateway Documentation, Release 0.0.1 2. Port: specifies the listening port number of HTTPS. 3. Web Login Timeout: specifies the timeout period of web page login. The valid value range is 0-3600. 4. Remote Control: enables or disables remote access to the IG902 through HTTPS. If no remote control network is specified, the IG902 can be remotely controlled through any network.
  • Page 85 The following figure shows the configuration of a ping test. The traceroute tool can be used to determine the route used to transmit IP datagrams to a destination. The following figure shows the configuration of a traceroute test. 1.2. InGateway902 User Manual...
  • Page 86 InGateway Documentation, Release 0.0.1 The Tcpdump tool can be used to capture packets transmitted on a specified interface. The following figure shows the Tcpdump configuration. 3.5.10 3rd Party Notification Choose System > 3rd Party Notification to display the 3rd Party Notification page. You can view the statement about the third-party software used for the IG902.
  • Page 87 • Authorization: authorizes the user to use certain services. • Accounting: records the usage of network resources by the user. Note: When RADIUS, TACACS+, and local modes are all configured, they are used following the preference order of 1 > 2 > 3. 1.2. InGateway902 User Manual...
  • Page 88 InGateway Documentation, Release 0.0.1 4.1.2.1 Radius The RADIUS protocol uses the client/server (C/S) model. A network access server (NAS) is a RADIUS client that transmits user authentication information to a specified RADIUS server and processes the response packets received from the RADIUS server. The RADIUS server receives users’ access requests, authenticates their identities, and sends the required configuration information for users to the client.
  • Page 89 • Local authorization (local): Users are authorized based on the attributes of local accounts configured on the NAS. • TACACS+ authorization: Users are authorized by a TACACS+ server. • Authorization after RADIUS authentication: Authentication and authorization are bound together, and RADIUS authentication cannot be performed separately. • LDAP authorization 1.2. InGateway902 User Manual...
  • Page 90 InGateway Documentation, Release 0.0.1 Caution: Authentication method 1 must be consistent with authorization method 1. Authentication method 2 must be consistent with authorization method 2. Authentication method 3 must be consistent with authorization method 3. 4.1.3 Alarm The alarm function allows you to discover exceptions on the gateway in real time, so that you can fix the exceptions quickly.
  • Page 91 InHand SLA is implemented in the following way: 1. Object tracking: This module traces the reachability of a specified object. 2. SLA probe: The object tracking module uses the InHand SLA function to send different types of probes to the specified object. 3. Policy-based routing using a route mapping table: This module associates tracking results with routing processes.
  • Page 92 InGateway Documentation, Release 0.0.1 4.2.2 Track Module The track module implements the association function together with application modules and monitoring modules. Located between application and monitoring modules, the track module shields the difference in monitoring modules and provides the same interface for application modules.Parameters of the track module are described as follows: •...
  • Page 93 The router dynamically maintains a routing table to record the current network topology and updates routing information based on link information received from other routers on the network. 1.2. InGateway902 User Manual...
  • Page 94 InGateway Documentation, Release 0.0.1 4.3.1 Static Routing Static routes are manually configured. After you configure a static route to a destination address, packets destined for this address will be forwarded along this route. Generally, you do not need to configure static routes.Parameters of a static route are described as follows: •...
  • Page 95 * ACL Name: specifies the name of the access control list referenced in the route filtering policy. – Filter Policy * Policy Type: specifies the type of the route filtering policy. Options are access-list and prefix-list. * Policy Name: specifies the name of the prefix list. 1.2. InGateway902 User Manual...
  • Page 96 InGateway Documentation, Release 0.0.1 * Policy In/Out: specifies the direction to which the route filtering policy is applied. Options are In and Out. * Interface: specifies the interface to which the route filtering policy is applied. * Filter Out (Permit Default Route-Interface): allows only transmission to the default router interface.
  • Page 97 * Priority: specifies the priority of OSPF on the interface. * Authentication: specifies the authentication method used in the OSPF area. If you select simple authentication, you need to set a password for simple authentication and confirm the 1.2. InGateway902 User Manual...
  • Page 98 InGateway Documentation, Release 0.0.1 password. If you select MD5 authentication, you need to set an MD5 key and a password and confirm the password. * Key ID: specifies the ID of the key for MD5 authentication. This parameter takes effect only for MD5 authentication.
  • Page 99 ASBR to the destination IP address of the external route. – Route Map: This parameter is not configurable currently. – Redistribution Advanced Options * Always Redistribute Default Route: enables the router to advertise the redistributed default route after startup. 1.2. InGateway902 User Manual...
  • Page 100 InGateway Documentation, Release 0.0.1 * Redistribute Default Route Metric: specifies the metric of the redistributed default route advertised by the router. * Redistribute Default Route Metric Type: 1 or 2. * Default Metric: specifies the default metric used for route redistribution. * Distance Management ·...
  • Page 101 – Upstream Interface: specifies the interface connected to the upstream network device. 4.4 VPN A VPN is a virtual private communication network established over the Internet depending on an Internet service provider (ISP) and a network service provider (NSP). A virtual network refers to a logical network. 1.2. InGateway902 User Manual...
  • Page 102 InGateway Documentation, Release 0.0.1 4.4.1 IPsec IPsec is a group of open network security protocols formulated by the IETF, which provide data source authentication, data encryption, data integrity check, and anti-replay on the IP layer to ensure the security of data transmission over the Internet. IPsec lowers the risk of data leakage and interception, ensures data integrity and confidentiality, and protects security of service data transmission.
  • Page 103 * ESP: provides all functions of the AH protocol and encrypts payload of IP packets. The ESP protocol can protect data in IP headers of IP packets. 1.2. InGateway902 User Manual...
  • Page 104 InGateway Documentation, Release 0.0.1 – Authentication: specifies the algorithm used for authentication. Options are MD5, SHA1, SHA2- 256, SHA2-384, and SHA2-512. * MD5: generates a 128-bit message digest for a message of any length. * SHA1: generates a 160-bit message digest for a message of a length less than 128 bits. * SHA2-256: generates a 256-bit message digest.
  • Page 105 DPD request to check whether the IKE peer is available. The valid value range is 10-3600, and the unit is second. * XAUTH: specifies the XAUTH user name and password. – IPsec Advance (Phase 2) 1.2. InGateway902 User Manual...
  • Page 106 InGateway Documentation, Release 0.0.1 * PFS: enables or disables Perfect Forward Secrecy (PFS), a feature that ensures security of other keys when a key is encrypted, because these keys are not derived from one another. The key used in phase-2 IPsec negotiation is derived from the key generated in phase 1. If the phase -1 key for IKE negotiation is intercepted by an attacker, the attacker may collect sufficient information to derive the phase-2 key for IPsec SA negotiation.
  • Page 107 IKE SA by using a pre-shared key. • IKE Advance (Phase 1) – Local ID: specifies the local ID of the specified type. 1.2. InGateway902 User Manual...
  • Page 108 InGateway Documentation, Release 0.0.1 – Remote ID: specifies the peer ID of the specified type. – IKE Keepalive (DPD): enables or disables dead peer detection (DPD). * DPD Timeout: specifies the timeout period of a DPD probe. After the receiving end triggers a DPD probe by sending a DPD request to the peer, it waits for a DPD response.
  • Page 109 The Layer 2 Tunneling Protocol (L2TP) is a virtual private dial-up network (VPDN) tunneling protocol that extends Point-to-Point Protocol (PPP) applications. It is an important VPN technology that enables users to dial up to headquarters networks of their enterprises remotely. 1.2. InGateway902 User Manual...
  • Page 110 InGateway Documentation, Release 0.0.1 4.4.3.1 L2TP Client The parameters of an L2TP client are described as follows: • L2TP Class – Name: specifies the name of an L2TP class. – Authentication: enables or disables peer authentication before network connection setup. –...
  • Page 111 • Max Retries for Link Detection: specifies the maximum number of L2TP link detection failures. The L2TP establishes a new connection after link detection fails for the maximum number of times. The valid value range is 0-100. • Enable MPPE: enables or disables Microsoft Point-to-Point Encryption (MPPE). • Enable Tunnel Authentication 1.2. InGateway902 User Manual...
  • Page 112 InGateway Documentation, Release 0.0.1 – Challenge Secrets: specifies the key used for authentication during L2TP tunnel setup. The same key must be set on both ends of the tunnel. – Server Name: specifies the name of the L2TP server. – Client Name: specifies the name of the L2TP client connected to the server. •...
  • Page 113 The parameters of an OpenVPN server are described as follows: • Enable: enables or disables the OpenVPN server. • Config Mode: specifies whether to complete the configuration manually or import a configuration file. – Manual Config * Authentication Type: specifies the authentication method used. 1.2. InGateway902 User Manual...
  • Page 114 InGateway Documentation, Release 0.0.1 * Local IP Address: specifies the virtual IP address of the OpenVPN server interface. * Remote IP Address: specifies the virtual IP address of the OpenVPN client. * Description: specifies the description of the OpenVPN tunnel. * Show Advanced Options: enables or disables display of advanced options.
  • Page 115 • Domain: specifies the qualified domain name of the certificate. • Serial Number: specifies the serial number of the certificate. • Challenge: specifies the challenge code of the certificate, which is required for certificate revocation (optional). 1.2. InGateway902 User Manual...
  • Page 116 InGateway Documentation, Release 0.0.1 • Challenge Confirm: Enter the challenge code again to confirm the setting. • Unstructured address: specifies the IP address of the certificate. • RSA Key Length: specifies the length of the RSA key. The valid value range is 128-2048, and the unit is bit.
  • Page 117 TCP keepalive packets for the specified number of times, it initiates a TCP connection again. The valid value range is 1-100. • Serial Buffer Frame: specifies the buffer size on the serial port. The default value is 4K. 1.2. InGateway902 User Manual...
  • Page 118 InGateway Documentation, Release 0.0.1 • Packet Size: specifies the size of each frame sent from the serial port. The serial port starts frame transmission when the frame size reaches this value. The valid value range is 1-1024, and the unit is byte.
  • Page 119 * Dry Connect: determines the I/O interface status based on whether the input is on or off. * Wet Connect: determines the I/O interface status based on the input voltage. • Analog Input – Mode: Options are Shutdown, 0-20mA, 4-20mA, 0-5V, and 0-10V. 1.2. InGateway902 User Manual...
  • Page 120 InGateway Documentation, Release 0.0.1 * Shutdown: disables the I/O interface. * 0-20mA: indicates that the range of current is 0-20 mA. * 4-20mA: indicates that the range of current is 4-20 mA. * 0-5V: indicates that the range of voltage is 0-5 V. * 0-10V: indicates that the range of voltage is 0-10 V.
  • Page 121 – Destination Address: specifies the destination IP address of the tunnel. – Negotiation Mode: specifies the tunnel negotiation mode. Options are Main Mode and Aggressive Mode. The main mode is used generally. – Local Subnet: specifies the source subnet address of the flow protected by IPsec. 1.2. InGateway902 User Manual...
  • Page 122 InGateway Documentation, Release 0.0.1 – Local Netmask: specifies the source subnet mask of the flow protected by IPsec. – Remote Subnet: specifies the destination subnet address of the flow protected by IPsec. – Remote Netmask: specifies the destination subnet mask of the flow protected by IPsec. •...

  • Page 123: Ingateway902 Command Line Instructions

    4. When the WARN indicator turns off, hold down the RESET key for 1s and release it. 5. When you see the WARN indicator blink three times and turn off, the factory settings of the device have been restored. 1.3 InGateway902 Command Line Instructions • Command Line Instructions –...
  • Page 124 InGateway Documentation, Release 0.0.1 6.2 hostname 6.3 clock timezone 6.4 clock set 6.5 sntp-client – 7. System Management Commands 7.1 reboot 7.2 enable password 7.3 username 1.3.1 Command Line Instructions 1. Help Command You can enter help or a question mark (?) on the console to obtain help information about commands. When typing in a command, you can enter ? anytime to obtain help information about the current command or parameters of the command.
  • Page 125 View: all views Parameters: none Example: • In the configuration view, enter: exit The super user view is displayed. • In the ordinary user view, enter: exit You exit from the console. 1.3. InGateway902 Command Line Instructions...
  • Page 126 InGateway Documentation, Release 0.0.1 3. System Status Display Commands 3.1 show version Command: show version Function: displays the version information of the IG902, such as the product model and software version. View: all views Parameters: none Example: • Enter: show version The following information is displayed: Model: indicates the model of the IG902.
  • Page 127 Function: displays the list of users on the IG902. View: all views Parameters: none Example: • Enter: show users Information similar to the following is displayed: 3.6 show startup-config Command: show startup-config Function: displays the startup configuration of the IG902. 1.3. InGateway902 Command Line Instructions...
  • Page 128 InGateway Documentation, Release 0.0.1 View: super user view, configuration view Parameters: none Example: • Enter: show startup-config The startup configuration of the system is displayed. 4. Network Status Display Commands 4.1 show interface Command: show interface Function: displays the status of interfaces on the IG902. View: all views Parameters: none Example:...
  • Page 129 • port: specifies the port number of the Telnet service. • source <ip>: specifies the IP address used for Telnet login. Example: • Enter: telnet 192.168.1.1 You log in to the host at 192.168.1.1 through Telnet. 1.3. InGateway902 Command Line Instructions...
  • Page 130 InGateway Documentation, Release 0.0.1 5.3 traceroute Command: traceroute <hostname> [maxhops <n>] [timeout <n>] Function: traces the route to a specified host. View: all views Parameters: • hostname: specifies the IP address or domain name of the host to be tested. •...
  • Page 131 • In the configuration view, enter: default clock timezone The time zone of the IG902 is restored to the factory setting. 6.4 clock set Command: clock set <YEAR/MONTH/DAY>-<HH:MM:SS> Function: sets the date and time for the IG902. View: configuration view 1.3. InGateway902 Command Line Instructions...
  • Page 132 InGateway Documentation, Release 0.0.1 Parameters: • <YEAR/MONTH/DAY>: specifies a date, in the format of year-month-day. • <HH:MM:SS>: specifies a time, in the format of hours-minutes-seconds. Example: • In the configuration view, enter: clock set 2009.10.5-10:01:02 The time of the IG902 is set to 10:01:02 AM on October 5, 2009. 6.5 sntp-client Command: •...
  • Page 133 • username <name> [password [<password>]] • no username <name> Function: sets a user name and its password. View: configuration view Parameters: • <name>: specifies a user name. • <password>: specifies the password of the user. Example: 1.3. InGateway902 Command Line Instructions...

  • Page 134: Ingateway501 Quick Start Manual

    InGateway Documentation, Release 0.0.1 • In the configuration view, enter: username abc password 1234567 An ordinary user abc is created, and its password is set to 1234567. Or the password of ordinary user abc is changed to 1234567. • In the configuration view, enter: no username abc The ordinary user abc is deleted.
  • Page 135 InGateway Documentation, Release 0.0.1 – Method 1: Enable the PC to obtain an IP address automatically (recommended) – Method 2: Set a fixed IP address Select Use the following IP address, enter an IP address (By default,any from 192.168.1.2 to 192.168.1.254), subnet mask (By default,255.255.255.0), default gateway (By default,192.168.1.1), and DNS server address, and click OK.
  • Page 136 InGateway Documentation, Release 0.0.1 • Step 2: Launch the browser on the PC and access the IP address of FE 0/1. Enter the login user name and password. The default user name and password are adm and 123456 respectively. • Step 3: After successful login, you can see the web page as shown below: Chapter 1.
  • Page 137 InGateway Documentation, Release 0.0.1 • Step 4: To change the user name and password for logging in to the web management interface of IG501, choose System > User Management page of IG501 and set the new user name and password. •...
  • Page 138 InGateway Documentation, Release 0.0.1 1.2 Connect IG501 to the Internet • Step 1: Insert the SIM card. (Note: Before inserting or removing the SIM card, unplug the power cable; otherwise, the operation may cause data loss or damage the IG501.) After inserting the SIM card, connect the 4G LTE antenna to the ANT interface and power on the IG501.
  • Page 139 InGateway Documentation, Release 0.0.1 When the network connection status is Connected and an IP address has been allocated, the IG501 has been connected to the Internet with the SIM card. 1.4.2 2. Update the Software To obtain the latest software version of IG501 and updated functions, contact the customer service center. To update the IG501 software version, do as follows.
  • Page 140 InGateway Documentation, Release 0.0.1 2.2 Upgrade the Python SDK of IG501. Choose Edge Computing > Python Edge Computing. Select Python Engine, select an Python SDK file, and click Upgrade; when the upgrade confirmation window pops up, click Confirm. Then the IG501 automatically performs the upgrade.
  • Page 141 InGateway Documentation, Release 0.0.1 3.1 Install and run Python App To install and run Python App (App for short) in IG501, please refer to the following process: • Step 1: Install the App Before installing the App, you need to ensure that the Python Edge Computing Engine is enabled and the Python SDK is installed, as shown in the following figure: Choose Edge Computing >...
  • Page 142 InGateway Documentation, Release 0.0.1 • Step 2: Run the App Select enable App and click Submit. Once enabled, the App automatically runs and will run every time the IG501 is started. Chapter 1. InGateway Documentation Site Navigation...
  • Page 143 InGateway Documentation, Release 0.0.1 3.2 Update Configuration File for App If the installed App supports importing configuration files to modify the running mode, you can update the App running configuration by referring to the following process: • Step 1: Choose Edge Computing > Python Edge Computing, click the Import Configuration button and select the configuration file to be imported, then click Confirm.
  • Page 144 InGateway Documentation, Release 0.0.1 3.3 Update Python App version Generally, if you need to update the Python App version, you only need to import the new version of the App on the Edge Computing > Python Edge Computing page. After the update is completed, as shown below： Chapter 1.
  • Page 145 InGateway Documentation, Release 0.0.1 3.4 Enable the Debug Mode To run and debug Python code on IG501, you need to enable IG501’ s debug mode. Choose Edge Computing > Python Edge Computing, select Enable Debug Mode. After enabling, you can develop IG501 through VS Code.
  • Page 146 1.4.4 4. Device Manager The Device Manager developed by InHand supports functions such as monitoring IG501 status, remote maintenance of equipment, remote batch delivery of IG501 configuration, and IG501 batch upgrade, helping users to conveniently and efficiently manage IG501 and field devices. In order to enable the Device Manager to remotely manage the IG501 and field devices, the IG501 needs to be connected to the cloud platform.
  • Page 147 InGateway Documentation, Release 0.0.1 • Advanced settings: Contains configurations such as heartbeat interval. Generally, you can use the default configuration. After the IG501 is successfully connected to the Device Manager, the status is described as Connection Accepted. 1.4. InGateway501 Quick Start Manual...
  • Page 148 InGateway Documentation, Release 0.0.1 1.4.5 Appendix Factory reset There are two ways to restore the IG501 to factory settings: hardware factory reset and software factory reset. • Hardware factory reset – Step 1: After the device is powered on and the ERR light is off, press and hold the RESET key; –...

  • Page 149: Ingateway501 User Manual

    InGateway Documentation, Release 0.0.1 1.5 InGateway501 User Manual • 1. Equipment Introduction – 1.1 Overview – 1.2 Packing List – 1.3 Panel Introduction and Structure Size * 1.3.1 Panel * 1.3.2 Structure and Dimensions • 2. Installation – 2.1 Precautions –...
  • Page 150 InGateway Documentation, Release 0.0.1 • 3. Device Configuration Instructions – 3.1 Gateway Access – 3.2 Overview – 3.3 Network * 3.3.1 Network Interfaces · 3.3.1.1 Cellular · 3.3.1.2 Ethernet · 3.3.1.3 Loopback * 3.3.2 Network Services · 3.3.2.1 DHCP · 3.3.2.1.1 DHCP Server ·...
  • Page 151 1.5.1 1. Product Introduction 1.1 Overview The InGateway501 (IG501 for short) series is a compact-sized edge computing gateway developed by InHand Networks for the Industrial IoT sector. IG501 provides omnipresent, uninterrupted Internet access over globally deployed 3G or 4G wireless networks and various broadband services. With superb edge computing capabilities and comprehensive features such as security guarantee and wireless services, IG501 is able to connect tens of thousands of devices and provide high-speed data channels for IT-based device management.
  • Page 152 Check the received product against the packing list carefully. If any accessory is missing or damaged, contact the InHand sales personnel promptly.InHand provides customers with optional accessories based on the characteristics of different sites. For details, see the optional accessories list.
  • Page 153 InGateway Documentation, Release 0.0.1 1.5.2 2. Installation 2.1 Precautions • Power supply requirements: 12 V DC (9–35 V DC). Pay attention to the voltage class. The rated current is 0.6 A (1.2–0.3 A). • Environment requirements: operating temperature –25°C to 75°C; storage temperature –40°C to 85°C; relative humidity 5% to 95% (non-condensing).
  • Page 154 InGateway Documentation, Release 0.0.1 2.2.2 Uninstalling in Wall-mounted Mode Procedure: Hold the device with one hand and unfasten the screws that fix the upper end of the device with the other hand, to remove the device from the installation place. 2.3 Installing a SIM Card Hold down SIM pop-up button will pop up the card holder, load the SIM card .
  • Page 155 InGateway Documentation, Release 0.0.1 Note: • IG501 supports dual antenna: ANT antenna and AUX antenna. The ANT antenna sends and receives data. The AUX antenna only increases the antenna signal strength and cannot be used independently for data transmission. • Only the ANT antenna is used in normal cases. It is used with the AUX antenna only when signal is poor and signal strength must be improved.
  • Page 156 InGateway Documentation, Release 0.0.1 2.7 Connecting Terminals Terminals provide the RS232 and RS485 interface modes. Connect cables to the corresponding terminals before using the interfaces. During installation, remove the terminals from the device, unfasten the locking screws on the terminals, connect cables to the corresponding terminals, and fasten the screws. Sort the cables in order.
  • Page 157 InGateway Documentation, Release 0.0.1 1.5.3 3. Device Configuration 3.1 Gateway Access • Step 1: Set an IP address for your PC, which is on the same network segment as the IP address of interface FE 0/1 on the IG501. The default IP address of FE 0/1 is 192.168.1.1. –...
  • Page 158 InGateway Documentation, Release 0.0.1 – Method 2: Use a fixed IP address. Select Use the following IP address, enter an IP address (any value between 192.168.1.2 and 192.168.1.254 by default), subnet mask (255.255.255.0 by default), default gateway (192.168.1.1 by default), and DNS server address, and click OK. Chapter 1.
  • Page 159 InGateway Documentation, Release 0.0.1 • Step 2: Start the browser to visit the IP address of FE 0/1 on the IG501, and enter the user name and password on the login page that appears. The factory default user name and password of the IG501 are adm and 123456, respectively.
  • Page 160 InGateway Documentation, Release 0.0.1 3.2 Overview The Overview page displays information about the IG501, such as its network connection status, system information, and data usage. You can quickly obtain the IG501 running status on this page.After you log in to the IG501 web page, the Overview page appears by default. You can also click Overview to display this page.
  • Page 161 InGateway Documentation, Release 0.0.1 • Data Usage Monitoring: shows the usage of data traffic in the last 24 hours. One data record is produced every hour. • CPU Load: shows the CPU usage in the last 1 minute, 5 minutes, and 15 minutes. •...
  • Page 162 InGateway Documentation, Release 0.0.1 • System Information: You can click the Edit icon to change name of the IG501. 3.3 Network 3.3.1 Network Interfaces 3.3.1.1 Cellular The Cellular page displays the configuration and status of the IG501’s dial-up interface. You can set dial-up interface parameters to connect the IG501 to a cellular network or view details about the dial-up interface on this page.
  • Page 163 InGateway Documentation, Release 0.0.1 3. Set the parameters (default settings recommended). For details about these parameters, see cellular network parameter description. 4. Click Submit to complete the configuration of the dial-up interface. The cellular network parameters are described as follows: •...
  • Page 164 InGateway Documentation, Release 0.0.1 • Roaming: enables the roaming function to allow the gateway to dial up in roaming state or disables the roaming function to prevent the gateway from dialing up in roaming state. When a local SIM card is used, its dial-up capability is not affected whether this option is selected or deselected.
  • Page 165 InGateway Documentation, Release 0.0.1 It sends ICMP probe packets only when the dial-up interface is idle. • Advanced Settings – Initial Commands: specifies some AT commands used to check the module status. – RSSI Poll Interval: specifies the interval at which the gateway checks the signal status after dialing up successfully.
  • Page 166 InGateway Documentation, Release 0.0.1 The following figure shows the configuration of FE 0/1, with Network Type set to Static IP. The Ethernet parameters are described as follows: • Network Type (Static IP by default) – Static IP: uses a manually configured IP address, matching subnet mask, and other information for the Ethernet interface.
  • Page 167 InGateway Documentation, Release 0.0.1 • Static IP mode – Primary IP: specifies the IP address of the Ethernet interface. By default, the IP address of FE 0/1 is 192.168.1.1. – Netmask: specifies the subnet mask of the Ethernet interface. – MTU: specifies the maximum transmit unit, which is expressed in bytes. The default value is 1500.
  • Page 168 InGateway Documentation, Release 0.0.1 4. Click Submit to complete the configuration of the loopback interface. As shown in the following figure, a secondary IP address 127.0.0.2 is set for the loopback interface. Caution: You can set a maximum of 10 secondary IP addresses for the loopback interface. 3.3.2 Network Services 3.3.2.1 DHCP 3.3.2.1.1 DHCP Server...
  • Page 169 InGateway Documentation, Release 0.0.1 • The DHCP server parameters are described as follows: – Enable DHCP Service: enables or disables the DHCP service. Caution: The DHCP server and DHCP relay features cannot be enabled at the same time. – Interface: specifies the interface on which the DHCP service is enabled. You can select Fasteth- ernet 0/1.
  • Page 170 InGateway Documentation, Release 0.0.1 3.3.2.1.2 DHCP Relay A DHCP relay (or DHCP relay agent) can process and forward DHCP information between subnets and physical network segments. You can configure a DHCP relay and view its configuration on the DHCP Relay page. Follow these steps to configure a DHCP relay: 1.
  • Page 171 InGateway Documentation, Release 0.0.1 • DHCP Server: specifies the IP address of the DHCP server. • Relay Interface: specifies the network interface that serves as the DHCP relay. 3.3.2.2 DNS A domain name system (DNS) is a distributed database used for TCP/IP applications and provides trans- lation between domain names and IP addresses.
  • Page 172 InGateway Documentation, Release 0.0.1 3.3.2.3 Host List You can view information about hosts connected to the IG501 on the Host List page. Choose Network > Network Services > Host List to display the Host List page, as shown in the following figure. 3.3.3 Routing 3.3.3.1 Routing Status Choose Network >...
  • Page 173 InGateway Documentation, Release 0.0.1 3.3.3.2 Static Routing You can configure static routes on the Static Routing page. Then, packets sent to a specific destination are forwarded through the specified route. (Generally, you do not need to configure static routes.) Follow these steps to configure a static route: 1.
  • Page 174 InGateway Documentation, Release 0.0.1 Parameters of a static route are described as follows: • Destination: specifies the destination IP address to which packets are sent. • Netmask: specifies the subnet mask of the destination IP address. • Interface: specifies the interface through which data packets are forwarded to the destination network. •...
  • Page 175 InGateway Documentation, Release 0.0.1 2. Click the Add icon under Access Control Policy to add an access control policy. 3. Set the parameters. For details about these parameters, see access control policy parameter description. 4. Click the Add or Edit icon under ACL to add an access control list on a specified interface. 5.
  • Page 176 InGateway Documentation, Release 0.0.1 The following figure shows the configuration of an access control list. Chapter 1. InGateway Documentation Site Navigation...
  • Page 177 InGateway Documentation, Release 0.0.1 • Parameters of a standard access control policy are described as follows: – ID: specifies the ID of an ACL rule, in the range of 1-99. A smaller value indicates a higher priority of the rule. –...
  • Page 178 InGateway Documentation, Release 0.0.1 – Source Wildcard: specifies the wildcard mask of the source IP address in the ACL rule. – Source Port: specifies the source port number of packets. The value any indicates that TCP/UDP packets with any source ports match the rule. This parameter is available only when the TCP or UDP protocol is selected.
  • Page 179 InGateway Documentation, Release 0.0.1 Parameters of the NAT rule are described as follows: • Action – SNAT: uses the source network address translation feature that translates source IP addresses of data packets into another IP address. Generally, this feature is used for data packets sent to the Internet through the router.
  • Page 180 InGateway Documentation, Release 0.0.1 – IP PORT to IP PORT – ACL to INTERFACE – ACL to IP • Access Control List (unavailable for 1:1 NAT): specifies the ACL rule used to match the packets of which the IP addresses are translated. •...
  • Page 181 InGateway Documentation, Release 0.0.1 The following figure shows the app running status (HelloWorld as an example). The app configuration functions are described as follows: • App status – Start all: starts all the enabled apps. – Stop all: stops all the enabled apps. –...
  • Page 182 InGateway Documentation, Release 0.0.1 – Export: allows you to export an app configuration file. – Import: allows you to import an app configuration file. After you import a configuration file and restart the app, the app runs with the imported configuration file. –...
  • Page 183 InGateway Documentation, Release 0.0.1 1. Choose System > System Time to display the System Time page. 2. Select Enable SNTP Server. 3. Set the parameters. For details about these parameters, see NTP server parameter description. 4. Click Submit to apply the configuration. The following figure shows how to select a time zone or set a system time manually.
  • Page 184 InGateway Documentation, Release 0.0.1 SNTP client parameters are described as follows: • Enable SNTP Clients: enables or disables SNTP clients. If the cellular interface is selected as the source interface, the SNTP service will not be enabled when the gateway fails to dial up to a network. •...
  • Page 185 InGateway Documentation, Release 0.0.1 supports synchronization of up to 16 strata of clocks, namely, stratum 0 to stratum 15. Synchronization cannot be implemented for more than 16 strata of clocks. • Source Interface: specifies the interface through which the IG501 sends NTP packets. The source interface and source address cannot be used at the same time.
  • Page 186 IG501. 3.5.4 Device Manager The Device Manager developed by InHand Networks allows you to monitor the status of IG501 gateways, maintain on-site devices remotely, configure and upgrade a batch of IG501 gateways at the same time remotely, and perform other management operations to manage IG501 gateways and on-site devices more conveniently and efficiently.
  • Page 187 InGateway Documentation, Release 0.0.1 Parameters of the Device Manager are described as follows: • Enable Device Manager: enables or disables the DM platform. • Server Address: specifies the server address of the DM platform to be connected. • Registered Account: specifies an account registered on the DM platform. •...
  • Page 188 InGateway Documentation, Release 0.0.1 valid value range is 30-86400. – Dataflow Upload Interval: specifies the interval for reporting traffic information. The valid value range is 3600-86400. 3.5.5 Firmware Upgrade You can upgrade the firmware version for the IG501 on the Firmware Upgrade page, so that the IG501 can provide new functions or better user experiences.
  • Page 189 InGateway Documentation, Release 0.0.1 The following figure shows the configuration of Telnet-based management. The following figure shows the configuration of SSH-based management. The HTTPS parameters are described as follows: 1. Listen IP Address: specifies the listening IP address. Options include Any, 127.0.0.1, and other IP addresses.
  • Page 190 InGateway Documentation, Release 0.0.1 2. Port: specifies the listening port number of HTTPS. 3. Web Login Timeout: specifies the timeout period of web page login. The valid value range is 0-3600. 4. Remote Control: enables or disables remote access to the IG501 through HTTPS. If no remote control network is specified, the IG501 can be remotely controlled through any network.
  • Page 191 InGateway Documentation, Release 0.0.1 3.5.9 Network Tools Choose System > Network Tools to display the Network Tools page. You can diagnose network problems of the IG501 on this page. You can enter some extension options in the Expert Options area. For example, expert option -t for the ping tool enables the IG501 to ping a specified host continuously until you stop the ping.The ping tool can be used to check whether a network is reachable.
  • Page 192 InGateway Documentation, Release 0.0.1 The Tcpdump tool can be used to capture packets transmitted on a specified interface. The following figure shows the Tcpdump configuration. 3.5.10 3rd Party Notification Choose System > 3rd Party Notification to display the 3rd Party Notification page. You can view the statement about the third-party software used for the IG501.

  • Page 193: Ingateway501 Command Line Instructions

    InGateway Documentation, Release 0.0.1 3.6.2 Logging Out To log out from the IG501, click the user name in the upper right corner. 3.6.3 Changing the Language You can click the globe icon in the upper right corner to change the language of web pages. The IG501 supports simplified Chinese and English.
  • Page 194 InGateway Documentation, Release 0.0.1 – 3. System Status Display Commands 3.1 show version 3.2 show system 3.3 show clock 3.4 show log 3.5 show users 3.6 show startup-config – 4. Network Status Display Commands 4.1 show interface 4.2 show ip route 4.3 show arp –...
  • Page 195 InGateway Documentation, Release 0.0.1 or parameters of the command. If the character string you have entered matches a unique command or parameter, the command or parameter will be displayed automatically after you enter ?. 1.1 ? Command: [<cmd>] ? Function: provides help information about a command. View: all views Parameters: , which specifies a command name Example:...
  • Page 196 InGateway Documentation, Release 0.0.1 View: super user view, configuration view Parameters: none Example: • In the super user view, enter: disable The ordinary user view is displayed. 2.3 exit Command: exit Function: exits from the current view and returns to the previous view. (If the current view is the ordinary user view, you will exit from the console after running this command.) View: all views Parameters: none...
  • Page 197 InGateway Documentation, Release 0.0.1 Bootloader version: indicates the Bootloader version running on the IG902. 3.2 show system Command: show system Function: displays the system information of the IG902. View: all views Parameters: none Example: • Enter: show system Information similar to the following is displayed: 09:26:45 up 5 days, 14:33, 1 users, load average: 0.00, 0.01, 0.04 3.3 show clock Command: show clock...
  • Page 198 InGateway Documentation, Release 0.0.1 • Enter: show log The latest 100 logs are displayed. • Enter: show log lines 10 The latest 10 logs are displayed. 3.5 show users Command: show users Function: displays the list of users on the IG902. View: all views Parameters: none Example:...
  • Page 199 InGateway Documentation, Release 0.0.1 • Enter: show interface The status of all interfaces is displayed. 4.2 show ip route Command: show ip route Function: displays the routing table of the IG902. View: all views Parameters: none Example: • Enter: show ip route The routing table of the system is displayed.
  • Page 200 InGateway Documentation, Release 0.0.1 • count <n>: specifies the number of probes. • size <n>: specifies the size (bytes) of each probe datagram. • source <ip>: specifies the source IP address of probe datagrams. Example: Enter: ping www.baidu.com count 5 size 32 A ping test is initiated to www.baidu.com, and the test result is displayed.
  • Page 201 InGateway Documentation, Release 0.0.1 6. Configuration Commands You can run the configure terminal command in the super user view to switch to the configuration view, and run configuration commands in this view to manage the IG902. Some configuration commands support both the no and default forms.
  • Page 202 InGateway Documentation, Release 0.0.1 6.3 clock timezone Command: • clock timezone <timezone>-<n> • default clock timezone Function: sets the time zone for the IG902. View: configuration view Parameters: • <timezone>: specifies a time zone name consisting of three uppercase English letters. •...
  • Page 203 InGateway Documentation, Release 0.0.1 • sntp-client source interface <interface> <slot/port> • sntp-client server <hostname> [<port>] <n> Function: configures the IG902 as a Simple Network Time Protocol (SNTP) client. View: configuration view Parameters: • update-interval <n>: specifies the time synchronization interval. The valid value range is 60-2592000. •...
  • Page 204 InGateway Documentation, Release 0.0.1 7.2 enable password Command: enable password [<password>] Function: changes the password of the super user. View: configuration view Parameters: <password>, which specifies the new password of the super user Example: • In the configuration view, enter: enable password The password of the super user is changed.

This manual is also suitable for:

Ingateway501