4RF Aprisa LTE User Manual
  1. Manuals
  2. Brands
  3. 4RF Manuals
  4. Network Router
  5. Aprisa LTE
  6. User manual

4RF Aprisa LTE User Manual

Hide thumbs Also See for Aprisa LTE:
Table of Contents

Advertisement

Quick Links

Download this manual
User Manual
February 2021
Version 2.1 (released with software build 2.1.00811003)

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Aprisa LTE and is the answer not in the manual?

Questions and answers

Related Manuals for 4RF Aprisa LTE

Summary of Contents for 4RF Aprisa LTE

  • Page 1 User Manual February 2021 Version 2.1 (released with software build 2.1.00811003)
  • Page 3 Copyright © 2021 4RF Limited. All rights reserved. This document is protected by copyright belonging to 4RF Limited and may not be reproduced or republished in whole or part in any form without the prior written permission of 4RF Limited.
  • Page 4 Changes or modifications not approved by the party responsible for compliance could void the user’s authority to operate the equipment. Equipment authorizations sought by 4RF are based on the Aprisa LTE router being installed at a fixed restricted access location and operated within the environmental profiles defined in Table 1; operation outside these criteria may invalidate the authorizations and / or license conditions.
  • Page 5 Compliance United States of America FCC The Aprisa LTE router may contain an LTE module and/or a WLAN Network module certified to Federal Communications Commission (FCC) specifications defined in Table 2: Table 2 USA Compliance HOST ONLY This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules.
  • Page 6 Compliance Canada ISED (future compliance) Aprisa LTE User Manual 2.1...
  • Page 7 WARNING: EXPLOSION HAZARD - Do not connect or disconnect while circuits are live unless area is known to be non-hazardous. The following text is printed on the Aprisa LTE where the end user is in Canada: AVERTISSEMENT: RISQUE D'EXPLOSION - Ne pas brancher ou débrancher tant que le circuit est sous tension, à...
  • Page 8 Symbols ISO 7000-0434B Exposure Warning Avertissement d'exposition IEC 60417-5041 Potential hot surface hazard Risque potentiel de surface chaude ISO 7000-0434B Read the instructions Lis les instructions Aprisa LTE User Manual 2.1...
  • Page 9 Important: Airborne operations in LTE Band 48 are prohibited. Standalone refers to LTE operation where the Wi-Fi module is not fitted. Antenna gain above the collocated maximum gain value must not be used when the Wi-Fi module is fitted. Aprisa LTE User Manual 2.1...

  • Page 11: Table Of Contents

    Network Modules ................38 Processor ..................38 Power Supply ................39 Tamper Protection ................ 39 Tethered ..................40 Wi-Fi Region ................40 LTE Accessories ................... 41 SFP Modules ................41 Antennas ..................42 Cables ..................43 Aprisa LTE User Manual 2.1...
  • Page 12 Cellular > General ..............83 Cellular > Carrier/Redundancy ........... 85 Cellular > SIM 1 & 2 ..............88 Cellular > SMS ............... 89 Location ..................90 Location > Summary ............... 90 Location > General ..............92 Interfaces/Networking ..............93 Aprisa LTE User Manual 2.1...
  • Page 13 Monitoring > Serial ............... 219 Monitoring > WiFi ..............220 Monitoring > VPN ..............221 Monitoring > DHCP ..............222 Monitoring > Firewall ............223 Monitoring > Routes .............. 224 Monitoring > Address Tables ............ 225 Aprisa LTE User Manual 2.1...
  • Page 14 SNMP Management ................235 SNMPv2c and TRAP/Informs ............235 SNMP MIB Structure ..............235 Standard SNMP MIBs Supported ............236 Aprisa LTE Proprietary MIBs Supported ..........236 Maintenance ................237 Spare Fuses ..................237 Alarm Events ................239 Alarm Events ................239 GNSS Alarm Events ..............

  • Page 15: Introduction

    Only such persons shall install and service the Aprisa LTE. Contact Us If you experience any difficulty installing or using Aprisa LTE after reading this manual, please contact Customer Support or your local 4RF representative. The 4RF New Zealand head office is:...

  • Page 16: What's In The Box

    ‘Power Supply’ on page 51. • One power connector, power retention clip and screw The Aprisa LTE Quick Start Guide is available on the 4RF website at the URL Aprisa LTE Quick Start Guide Aprisa LTE User Manual 2.1...

  • Page 17: Lte Product Overview

    Introduction | 17 LTE Product Overview The 4RF Aprisa LTE is a 3GPP LTE router for critical infrastructure monitoring and control for smart SCADA (e.g. electricity, water, oil and gas industries), transportation, smart city, backhaul, and industrial communication hardened for both mission and business critical applications.

  • Page 18: Front Panel Connections

    GNSS (Global Navigation Satellite System) antenna using 50 ohm QMA female connector. DIVERSITY Diversity cellular LTE MIMO antenna using 50 ohm QMA female connector. Wi-Fi 1 & Wi-Fi 2 For connection of Wi-Fi MU-MIMO antennas, see ‘Wi-Fi Antenna Requirements’ on page 57. (when Wi-Fi fitted) Aprisa LTE User Manual 2.1...

  • Page 19: Rear Panel Connections

    Introduction | 19 Rear Panel Connections The rear panel connections to the LTE are: Designator Description SIM cards 1 & 2 Removable plate for fitting of SIM cards. See ‘Installing a SIM’ on page 44 Aprisa LTE User Manual 2.1...

  • Page 20: Led Indicators

    20 | Introduction LED Indicators The Aprisa LTE LEDs indicate the following conditions: TX (LTE) RX (LTE) Wi-Fi Wi-Fi not USB disabled or Disabled, SFP enabled, Wifi no USB device No input power not fitted, no not linked (in detected and...

  • Page 21: Ethernet / Serial Port Led Indicators

    Right Link LED Port is disabled, or not connected, or link failed. Solid Green Port link detected and connected. Left Activity LED No data traffic detected on port. Flashing Orange Data traffic detected on port. Aprisa LTE User Manual 2.1...

  • Page 22: Interfaces

    1 x USB port using USB standard type C female connector Used for software upgrade, diagnostic reporting and configuration save / restore. SFP Module Socket • 1 x SFP Module Socket for fitting of optional SFP modules see ‘SFP Modules’ on page 41 Aprisa LTE User Manual 2.1...

  • Page 23: Lte Architecture Overview

    APN (Access Point Name) identifies a PDN Gateway (P-GW). It includes an APN network identifier which defines the PDN to which the UE requests connectivity and may also include an APN operator identifier which defines in which Public Land Mobile Network (PLMN) the P-GW is located. Aprisa LTE User Manual 2.1...
  • Page 24 A DRA (Diameter Routing Agent) enables the appropriate PCRF discovery and selections associate with subscriber. An OCS provides a real-time credit control and a charging functions based on volume, time and event. OFCS An OFCS provides CDR (Charging Data Record) based charging information. Aprisa LTE User Manual 2.1...

  • Page 25: Lte Applications

    Aprisa LTE is very flexible network device and can combine a router and a switch / bridge function, where each interface can be configured to be used as part of the router or the switch / bridge ports (with internal connectivity between the switch and router functions).
  • Page 26 26 | Introduction With the Aprisa LTE, smart SCADA can be supported with single or dual SIM / operator LTE connectivity using a routed active / standby protection for high availability as shown in Figure 2 and Figure 3. In both cases, the user can exploit the option to use wireless LAN (WLAN) for local office connectivity or for local secure device management.
  • Page 27 Introduction | 27 Smart SCADA high availability can be achieved by using any of the Aprisa LTE interfaces as an alternate / protected path to the LTE cellular path as shown in Figure 4 (and as alternative to dual SIM/operator high availability solution).
  • Page 28 (e.g. theft) / auditing (including GNSS location, speed, and heading) and read online self-diagnostics and reporting / alerts state of the vehicle when the vehicle ODB II (On-Board Diagnostics II) interface is connected via an adapter (e.g. USB, Wi-Fi) to the Aprisa LTE as shown in Figure 7.

  • Page 29: Transportation Applications

    ✓ Public safety - communication platform for public safety ambulance, police and firefighter forces. The Aprisa LTE in a public transportation application provides the commuters a local Wi-Fi WLAN communication to connect to the public internet and provide the public management center the ability to track the train / bus location on a map, view the security cameras and read the bus diagnostic and alerts status as shown in Figure 8.
  • Page 30 30 | Introduction The Aprisa LTE in a public safety application provides the ambulance, police and firefighter forces the ability to track their vehicles on a map (including GNSS location, speed, and heading), read online vehicles self- diagnostics and reporting / alerts state (when ODB II interface is connected via an adapter (e.g. USB, Wi-Fi) to the Aprisa LTE).

  • Page 31: Smart City Applications

    ✓ A communication platform for city service, streetlight, traffic light, and video security. The Aprisa LTE in a smart city application provides communication to city security video cameras (connected via Ethernet or Wi-Fi), traffic lights and streetlight for city control center.

  • Page 32: Network Backhaul Applications

    ✓ AMI/AMR backhauling ✓ DMR backhauling The Aprisa LTE in a network backhauling application provides LTE backhauling communication network to smart SCADA licensed / unlicensed radio network and to AMI/AMR network as shown in Figure 12. Figure 12 Network Backhauling Application...

  • Page 33: Industrial Communication Applications

    ✓ Underground / sewerage Wi-Fi communication platform The Aprisa LTE in an industrial communication application provides a networking switch / router device functionality in a substation or industrial site and / or a terminal server device to connect a legacy serial device (e.g.

  • Page 34: Leased Line Applications

    ✓ Supports any endpoint interface to any endpoint interface (e.g. Ethernet (fiber/copper) → Serial) The Aprisa LTE in a leased line application provides the required connectivity between endpoints with different interfaces across the LTE network with the ability to control the bandwidth and enforce QoS on this service as shown in Figure 14.

  • Page 35: Dmvpn Service Applications

    Introduction | 35 DMVPN Service Applications The Aprisa LTE support the DMVPN service application. DMVPN is a service connectivity solution for organizations requiring secure full mesh/PMP VPNs between main corporate site/s (Hub) and remote sites (Spoke) over the internet with full networking and failover capabilities as shown in Figure 15.

  • Page 36: Dynamic Routing Applications

    36 | Introduction Dynamic Routing Applications The Aprisa LTE support dynamic routing application over MP/BGP and OSPF or as interoperable routing domain between BGP and OSPF. MP/BGP MP/BGP is an EGP (Exterior Gateway Protocol) routing protocol designed for scale and used to connect different routing domains.

  • Page 37: Ospf

    More Information on DMVPN, BGP, OSPF Setup Applications For more information on setting up basic BGP network, DMVPN network, DMVPN behind NAT network, DMVPN over BGP network, basic OSPF network, and DMVPN over OSPF network see the ‘Aprisa LTE Dynamic Routing Protocols’ network configuration guide.

  • Page 38: Lte Product Options

    38 | Introduction LTE Product options LTE Modules The Aprisa LTE provides the following LTE Module options: e.g. APLT-M001-N01-P0-V0-T0A0 Downlink Uplink Cat/CA** Peak Cat/CA** Peak Bands Code LTE Module Mbit/s Mbit/s M000 Not Fitted Cat 12 / B1, B2, B3, B4, B5, B7, B8, B9, 3CA &...

  • Page 39: Power Supply

    Tamper Protection fitted to the LTE APLT-M001-N01-P0-V1-T0A0 The Aprisa LTE tamper protection provides electronic and physical tamper detection to prevent unauthorized LTE operation and access to stored information. If a tamper is detected, this device will immediately erase the encryption key in the battery backed tamper protected memory.

  • Page 40: Tethered

    40 | Introduction Tethered The Aprisa LTE tethered options: Option Function Part Number Option Tethered to no carrier APLT-M001-N01-P0-V0-T0A0 Tethered to AT&T APLT-M001-N01-P0-V0-T1A0 Tethered to Verizon APLT-M001-N01-P0-V0-T2A0 Wi-Fi Region The Aprisa LTE region options: Option Function Part Number Option No Region...

  • Page 41: Lte Accessories

    Introduction | 41 LTE Accessories SFP Modules The following Small Form-factor Pluggable (SFP) Modules are available from 4RF as accessories: Part Number Description Aprisa LTE SFP Module APLB-MSFP-ETH Ethernet 1000BASE-T Connector RJ45 Aprisa LTE SFP Module Data Rate 1 Gbit/s...

  • Page 42: Antennas

    The following antennas are available from 4RF as accessories: Part Number Description Aprisa LTE cellular multiband antenna GNSS x1 / LTE x2 / WiFi x2 Dimensions - (LxWxH) 202.3mm x 88.5mm x 45mm (7.96 in x 3.48 in x 1.77 in)

  • Page 43: Cables

    Introduction | 43 Cables The following cables are available from 4RF as accessories: Part Number Description Aprisa LTE power cable fitted with 4 pin Molex Micro-Fit 3.0 female connector and wire ended Cable length 1m Pin 1 Red +ve Power Input APLB-PPWR-X01...

  • Page 44: Lte Router Installation

    Once power source is connected, the OK LED on the front panel will light solid green indicating correct operation. For a VDC power source not within the specification of the Aprisa LTE VDC input range, or the power source is AC, use an appropriate DC/DC or AC/DC converter power supply.

  • Page 45: Installing An Sfp Module

    LTE Router Installation | 45 Installing an SFP Module The Aprisa LTE can accommodate one standard SFP module. See ‘SFP Modules’ on page 41 for SFP Module available from 4RF. To install an SFP in the Aprisa LTE router: 1. Fit the SFP module in the LTE SFP socket (connector facing up).

  • Page 46: Basic Software Setup

    See ‘Connecting to SuperVisor’ on page 65. First Time Setup When you log in for the first time to Aprisa LTE router, configure any of the following: • Time Zone – navigate to ‘Services > Date & Time’ and set the date, time, zone, and format.

  • Page 47: Software Upgrade

    If the file transfer fails, check the Events History Log page (see ‘Events > History Log’ on page 194) for more details of the transfer. 5. Activate the software on the Aprisa LTE (see ‘Software > Manager’ on page 212). The router will reboot automatically.
  • Page 48 Load Only New software will be uploaded from a USB flash drive in to the Aprisa LTE. The software will need to be manually activated later (see ‘Software > Manager’ on page 212). 3. Insert the USB flash drive into the LTE host port .
  • Page 49 1. Open the CLI interface (see ‘Command Line Interface’ on page 226). 2. Type: copy flash:available-firmware flash:active-firmware Software Downgrade Aprisa LTE software can also be downgraded if required. The downgrade process is the same as the upgrade process. Aprisa LTE User Manual 2.1...

  • Page 50: Bench Setup

    50 | LTE Router Installation Bench Setup Before installing in the field, it is recommended that you bench-test the Aprisa LTE. A suggested setup for basic bench testing is shown below: Setup the bench equipment as follows: • Connect the LTE earth point to a protection earth •...

  • Page 51: Power Supply

    LTE Router Installation | 51 Power Supply The input voltage for the Aprisa LTE is +9 to +32 VDC. The maximum power input is 15 W. The power connector required is a Molex Micro-Fit 3.0 4 pin female connector. The power supply input connects to pin 1 +ve and pin 2 -ve.

  • Page 52: Cooling

    Si l’Aprisa LTE fonctionne dans un environnement où la température ambiante dépasse 50 ° C, l’Aprisa LTE doit être installé dans un endroit à accès restreint de manière à éviter tout contact humain avec le dissipateur de chaleur du boîtier.

  • Page 53: Earthing

    LTE Earthing The Aprisa LTE has an earth connection point on the top left of the enclosure. A M4 8mm pan pozi machine screw and M4 lock washer is supplied fitted to the router. This screw is used to earth the enclosure to a protection earth.

  • Page 54: Mounting Options

    54 | LTE Router Installation Mounting Options The Aprisa LTE has four threaded holes (M4) in the enclosure base and two holes (5.2 mm) through the enclosure for mounting. Mounting options include: • DIN rail mounting with the Aprisa LTE DIN Rail Mounting Bracket •...

  • Page 55: Din Rail Mounting

    4RF LTE Acc, Mounting, Bracket, DIN Rail The Aprisa LTE is mounted into the DIN rail mounting bracket using the four M4 threaded holes in the Aprisa LTE enclosure base. Four 8 mm M4 pan pozi machine screws are supplied with the bracket.

  • Page 56: Antenna Selection

    Must not exceed antenna gains due to RF exposure and ERP/EIRP limits, as listed in the module’s FCC grant. See Table 3 Antenna Compliance Requirements Isolation between Main > 10 dB and Diversity (S21) Power handling > 1 W (30 dBm) Aprisa LTE User Manual 2.1...

  • Page 57: Gnss Antenna Requirements

    The Wi-Fi antenna must be installed such that at least 20 cm is maintained between the antenna and users. • The required antenna impedance is 50 Ohms. • To get maximum throughput when operating at MIMO 2x2, two antennas with at least 25 dB isolation are recommended. Aprisa LTE User Manual 2.1...

  • Page 58: Rf Connector Adapters

    58 | LTE Router Installation RF Connector Adapters Part Number Description APLB-AQMM-SMF QMA Male to SMA Female Adapter APLB-AQMM-SMP QMA Male to SMA Male Adapter - reverse outer conductor Aprisa LTE User Manual 2.1...

  • Page 59: Interface Connection And Cabling

    Receive- Input Orange Green BI+_D4 Bi-directional+ Bi-directional Brown/white Brown/white BI-_D4 Bi-directional- Bi-directional Brown Brown Fibre Optic Connections SFP modules available as accessories from 4RF with several different interface types (see ‘SFP Modules’ on page 41). Aprisa LTE User Manual 2.1...

  • Page 60: Serial Rs-232 Interface Connections

    60 | LTE Router Installation Serial RS-232 Interface Connections The Aprisa LTE RS-232 Serial Interface is always configured as a DCE: RJ45 Pin Function Direction TIA-568A Wire TIA-568B Wire Pin Number Colour Colour Input Green / white Orange/white Input Green...

  • Page 61: Serial Rs-422 / Rs-485 Interface Connections

    RS-422 Serial Interface pinout RJ45 Pin Function Pin Number Ground RS-485 Serial Interface pinout RJ45 Pin Function Pin Number Full Duplex Half Duplex TX/RX- TX/RX+ Ground Ground The LTE USB connector is a standard USB type C connector. Aprisa LTE User Manual 2.1...

  • Page 62: Gpio

    Pin3 of the Molex Micro-Fit connector used for the following functions: • Programmable ignition turn on and turn off delays • Programmable sleep modes • Input sensing for protection systems GPIO Digital Output Pin 4 of the Molex Micro-Fit Aprisa LTE User Manual 2.1...

  • Page 63: Spares

    4RF LTE Spare, Fuse, Nano SMF, 454 Series, 5A, 10 Items APLS-FNAN-454-05-50 4RF LTE Spare, Fuse, Nano SMF, 454 Series, 5A, 50 items Power Connectors Part Number Part Description APLS-CML4-FEM-01 4RF LTE Spare, Connector, Molex 4 Pin Micro-Fit 3.0, Female, 1 item Aprisa LTE User Manual 2.1...

  • Page 64: Managing The Lte

    Managing the LTE SuperVisor The Aprisa LTE contains an embedded web server application (SuperVisor) to enable element management with any major web browser (such as Google Chrome, Mozilla Firefox or Microsoft® Edge). SuperVisor enables operators to configure and manage the Aprisa LTE.

  • Page 65: Supervisor Management Overview

    The recommended management connection to the Aprisa LTE router is with an Ethernet interface using standard IP networking. The Aprisa LTE has a factory default IP address of 192.168.4.1 with a subnet mask of 255.255.255.0. To change the Aprisa LTE IP address: 1.

  • Page 66: Login To Supervisor

    255.255.255.0. The Aprisa LTE has a randomly generated unique self-signed ECC256 security certificate which may cause the browser to prompt a certificate warning. The valid certificate is ‘Issued By: 4RF-APRISA’ which can be viewed in the browser.

  • Page 67: Logout Of Supervisor

    If the SuperVisor window is closed without logging out, the LTE router will automatically log the user out after a timeout period of 3 minutes. To logout of SuperVisor: Click on the ‘Logout’ button on the Menu Bar. Aprisa LTE User Manual 2.1...

  • Page 68: Supervisor Page Layout

    68 | Aprisa LTE User Manual SuperVisor Page Layout The following shows the components of the SuperVisor page layout for the LTE router: SuperVisor Branding Bar The branding bar at the top of the SuperVisor frame shows the branding of SuperVisor on the left and the product branding on the right.

  • Page 69: Supervisor Menu Access

    Read-Write Read-Write Security > HTTPS No Access No Access Read-Write Read-Write Security > SNMPv2c/v3 No Access No Access Read-Write Read-Write Maintenance > Summary Read-Only Read-Only Read-Only Read-Only Maintenance > Files No Access Read-Write Read-Write Read-Write Aprisa LTE User Manual 2.1...
  • Page 70 70 | Aprisa LTE User Manual Menu Item View Technician Engineer Admin Maintenance > Cellular No Access Read-Write Read-Write Read-Write Maintenance > Networking No Access Read-Write Read-Write Read-Write Events > Alarm Summary Read-Only Read-Only Read-Only Read-Only Events > History Log...

  • Page 71: Supervisor Menu Items

    Click the ‘Save’ button to apply the changes or ‘Cancel’ button to restore the current value. Terminal Terminal > Summary TERMINAL SUMMARY This page displays the current settings for the Terminal parameters Terminal > Details on page 72 and Terminal > Device on page 74 for setting details. Aprisa LTE User Manual 2.1...

  • Page 72: Terminal > Details

    72 | Aprisa LTE User Manual Terminal > Details This page displays the current device hardware details. MANUFACTURING DETAILS Serial Number This parameter displays the Serial Number of the device (shown on the enclosure label). Part Number This parameter displays the LTE part number.
  • Page 73 A new device from the factory will display ‘None’ for the Previous SW Version. WiFi MAC Address This parameter displays the WiFi MAC Address octet string if a WiFi network module is fitted to the LTE. Aprisa LTE User Manual 2.1...

  • Page 74: Terminal > Device

    3. Enter the device Location of the router. 4. Enter a Contact Name. 5. Enter the Contact Details. 6. Enter the Group Id. This is the Aprisa LTE router virtual group for NMS visual purpose or group operational purpose. The default value is ‘0’.

  • Page 75: Cellular

    2. Setup the APN for cellular connection and its APN backup connection if required. This is discussed in this section. 3. Setup of VPNs, for secure connection to the customer data center and/or to another Aprisa LTE router over a public / private cellular network. This is discussed under the ‘Security > VPN’ section.
  • Page 76 76 | Aprisa LTE User Manual switch to the next lower priority enabled PDN under the ‘PDN Profile Settings’ (see ‘Cellular > General’).
  • Page 77 IP version and roaming and enable the service connection. Enabling roaming allows the Aprisa LTE being used outside the range of its home network operator and connects to another available cellular network operator (high charges might apply).

  • Page 78: Cellular > Summary

    78 | Aprisa LTE User Manual Cellular > Summary This page displays current Cellular settings. MODEM Manufacturer Displays the modem manufacturer. Model Displays the modem model number. IMEI Displays the International Mobile Equipment Identifier (IMEI), a unique 15 or 17 digit code used to identify...
  • Page 79 Displays the cellular modem state. The values can be; Failed, Unknown, Initializing, Locked, Disabled, Disabling, Enabling, Enabled, Searching, Registered, Disconnecting, Connecting, Connected. Fail Reason Displays the reason for modem failure. If for some reason modem failed connection to network, then the reason is stated here. Aprisa LTE User Manual 2.1...
  • Page 80 80 | Aprisa LTE User Manual ACTIVE SIM IMSI The International Mobile Subscriber Identifier (IMSI), a unique 15-digit code used to identify an individual user on a GSM/LTE network. This number is stored in SIM card. ICCID This object indicates the Integrated Circuit Card ID (ICCID). The ICCID is defined by the ITU-T recommendation E.118.
  • Page 81 Displays the current Mobile Country Code (MCC) 3 digits e.g. 530 for New Zealand. Mobile Network Code (MNC) Displays the current Mobile Network Carrier (MNC) 2 or 3 digits. The MNC uniquely identifies a mobile network operator. Aprisa LTE User Manual 2.1...
  • Page 82 82 | Aprisa LTE User Manual E-UTRAN Cell ID (ECI) E-UTRAN Cell Identifier (ECI) is a decimal number used to identify a cell uniquely within an operator mobile network (or Public Land Mobile Network (PLMN)). The ECI has a length of 28 bits and contains the eNodeB- IDentifier (eNB-ID) and the cell sector (i.e.

  • Page 83: Cellular > General

    One or more PDNs can be associated / attached with a SIM card slots 1 or 2. One or more PDN profiles can be used as a backup PDN connection to another. The Aprisa LTE will try first to connect to the highest priority PDN and switching between PDN due to connection failure is controlled by the ‘Redundancy Settings’...
  • Page 84 This parameter enables the switching from the home network (i.e. the SIM operator network) to the roaming network when the Aprisa LTE is being used outside the range of its home network and connects to another available cellular network (the roaming network). When on the roaming network, charges may be applied per customer contract.

  • Page 85: Cellular > Carrier/Redundancy

    If after reverting, the primary PDN network is not available for the ‘initial scan timeout’ duration, then the connection return to the secondary PDN network for another revert timeout time. The revert timeout value is unlimited. The default value is 3,600 seconds (60 minutes). Aprisa LTE User Manual 2.1...
  • Page 86 86 | Aprisa LTE User Manual Initial Scan Timeout (s) This parameter sets the timeout to wait for a successful connection after switching to a new PDN network profile. If this times out with unsuccessful connection, then next lower priority PDN profile is used. If there are no lower priority PDNs, then first (highest priority) PDN profile is used.
  • Page 87 This alarm may also be used for switching to the secondary link. Ping Test Duration (s) This parameter sets the time in seconds that a single health check test runs for. Number Of Pings (s) This parameter sets the Number of Pings per health check test. Aprisa LTE User Manual 2.1...

  • Page 88: Cellular > Sim 1 & 2

    88 | Aprisa LTE User Manual Cellular > SIM 1 & 2 This page provides setup of the SIM 1 & 2 settings. The SIMs are installed via the rear panel on the LTE (see ‘Installing a SIM’ on page 44).

  • Page 89: Cellular > Sms

    The password is used to verify commands sent to the Aprisa LTE over SMS. SMS messages must be sent in the format of <password> <space> <command>. e.g. if password is ‘passabc’, then the command to reboot the Aprisa LTE using SMS will be ‘passabc reboot’. Aprisa LTE User Manual 2.1...

  • Page 90: Location

    90 | Aprisa LTE User Manual Location Location > Summary This page displays the current GNSS values. LOCATION SUMMARY Position Coordinates The current GNSS latitude, longitude and altitude. Heading (degrees) The current direction in degrees. Speed (kph) The current speed in kilometers per hour Last Updated The last time the GNSS data was updated.
  • Page 91 Status The last know GNSS status. This will show if last known position is an automatic fix or a manually configured position. Aprisa LTE User Manual 2.1...

  • Page 92: Location > General

    92 | Aprisa LTE User Manual Location > General This page provides setup of the GNSS port parameters. GNSS SETTINGS GNSS Enable This parameter enables / disables GNSS. Active Antenna This parameter enables / disables the GNSS antenna power (3.3V).

  • Page 93: Interfaces/Networking

    Managing the LTE | 93 Interfaces/Networking Interfaces/Networking > Summary This page displays the current settings for all interfaces and the status of the ports. See the Interfaces/Networking pages for settings. Aprisa LTE User Manual 2.1...

  • Page 94: Interfaces/Networking > Ethernet

    94 | Aprisa LTE User Manual Interfaces/Networking > Ethernet This page provides setup of the Ethernet port parameters. ETHERNET PORT SETTINGS Name This parameter sets the port name which can be up to 32 characters. This name is only to aid customer and is not used by the LTE other than for display.
  • Page 95 Managing the LTE | 95 Duplex This parameter controls the transmission mode of the Ethernet port. The default setting is Auto. Option Function Auto Provides auto selection of Ethernet Port duplex setting. Aprisa LTE User Manual 2.1...

  • Page 96: Interfaces/Networking > Sfp

    96 | Aprisa LTE User Manual Interfaces/Networking > SFP This page provides setup of the SFP module if fitted to the LTE. SFP PORT SETTINGS Name This parameter sets the port name which can be up to 32 characters. Mode This parameter controls the enable/disable of the Ethernet port.

  • Page 97: Interfaces/Networking > Serial

    Mode This parameter defines the mode of operation of the serial port. The default setting is Standard. Option Function Disabled The serial port is not required. Terminal Server Serial traffic is encapsulated in IP packets. Aprisa LTE User Manual 2.1...
  • Page 98 98 | Aprisa LTE User Manual Port Type This parameter defines the mode of operation of the serial port. The default setting is Standard. Option Function RS-232 RS-232 provides asynchronous communication between two devices over unbalanced TX, RX and control lines.
  • Page 99 An alarm event indicates if the value is set larger than the maximum for the serial mode selected. Terminating Resistor (ohms) Used for Port Types of RS-422 and RS-485. When enabled, the RX port, or the TX/RX port for RS-485 half-duplex port is terminated in 120 ohms. The default setting is disabled. Aprisa LTE User Manual 2.1...
  • Page 100 100 | Aprisa LTE User Manual Link LED This parameter defines the operation serial port Link LED (left LED on RJ45 connector). The default setting is Auto. Option Function Auto For RS232 mode only, the link LED is on if either CTS or DSR is asserted by peer device, or if data has been received in last 10 seconds.
  • Page 101 If the TCP keep alive is disabled, the LTE relies on the Inactivity Timeout to detect a TCP connection failure. The default setting is disabled. Note: An active TCP keep alive will generate a small amount of extra network traffic. Aprisa LTE User Manual 2.1...
  • Page 102 102 | Aprisa LTE User Manual Listening Address This parameter sets the serial Terminal Server local IP address. Listening Port This parameter sets the TCP or UDP port number of the local serial port. Exclusions can be set by other enabled services – tcp ports 80 (http), 443 (https), and 22 (ssh), udp ports 161 and 162 (snmp).

  • Page 103: Interfaces/Networking > Usb

    This parameter defines the mode of operation of the USB port. The default setting is USB Host. Option Function Disabled The USB port is not required. USB Host The USB port is active for software upgrades etc. Aprisa LTE User Manual 2.1...

  • Page 104: Interfaces/Networking > Wifi

    104 | Aprisa LTE User Manual Interfaces/Networking > WiFi This section provides setup of the WiFi port parameters. Scan Button The Scan Button scans for Wi-Fi networks. Edit Button The Edit Button edits the Wi-Fi device configuration.
  • Page 105 SSID but usually unaware to which BSSID they are currently connected. ESSID The Extended Service Set Identifier (ESSID) consists of all the BSSIDs in the network. For practical purposes, the ESSID identifies the same network as the SSID. Aprisa LTE User Manual 2.1...
  • Page 106 106 | Aprisa LTE User Manual INTERFACE CONFIGURATION WiFi Interface Configuration > General Setup This page provides setup of the WiFi General Setup. Mode This parameter sets the WiFi mode. The default setting is Access Point. Option Function Access Point In Access Point (AP) mode, the LTE provides connectivity to other Wi-Fi clients, and can share its network connections with them.
  • Page 107 WPA-EAP WPA with Extensible Authentication Protocol (EAP). Often called WPA-Enterprise, it is based on the 802.1X standard. WPA2-EAP WPA2 with Extensible Authentication Protocol (EAP). Often called WPA-Enterprise, it is based on the 802.1X standard. Aprisa LTE User Manual 2.1...
  • Page 108 This parameter confines and restricts clients connected to the Wi-Fi network. When enabled, clients cannot communicate with each other or with wired network when the WiFi interface is bridged with other interfaces. They can only access routed networks (such as the Internet) through the Aprisa LTE. The default setting is Inactive.

  • Page 109: Interfaces/Networking > Logical Interfaces

    IPv4 private address spaces (192.168/16, 172.16/12 and 10/8). This is normally a /48 prefix within the fd00::/8 range defined in RFC4192. The default value is randomly generated and different on each Aprisa LTE. If your organization uses ULA addressing, this should be modified to the appropriate prefix.
  • Page 110 110 | Aprisa LTE User Manual...
  • Page 111 Allows automatic configuration of IPv6 from any combination of stateless DHCPv6, stateful DHCPv6, DHCPv6-PD and SLAAC. Create a bridge over multiple interfaces If this parameter is selected, a bridge (virtual switch), can be created by selecting multiple physical interfaces. Aprisa LTE User Manual 2.1...
  • Page 112 ‘eth2.200’ and ‘sfp1.200’. Note: It is not necessary to assign an IP address to every bridge interface. If the Aprisa LTE only needs to do L2 switching on a given VLAN, and not participate in any conversations, then it is normal to use Static protocol, and leave the Address, Netmask etc blank/unassigned.
  • Page 113 IP address is used both in Bridge mode and in Router mode. The default IP address is 192.168.4.1. IPv4 netmask Set the Subnet Mask of the radio (Management and Ethernet ports) using the standard format xxx.xxx.xxx.xxx. The default subnet mask is 255.255.255.0. Aprisa LTE User Manual 2.1...
  • Page 114 114 | Aprisa LTE User Manual IPv4 gateway Set the Gateway address of the radio, if required, using the standard format xxx.xxx.xxx. A default gateway is the node on the network that traffic is directed to when an IP address does not match any other routes in the routing table.
  • Page 115 1500. The default setting is 1500. Use gateway metric Any gateways on this interface, either statically assigned or automatically discovered (e.g. through DHCP) will be assigned this metric when added to the routing table. The default setting is 10. Aprisa LTE User Manual 2.1...
  • Page 116 116 | Aprisa LTE User Manual Static Address > Physical Settings This page configures the physical settings of a static address interface. VLAN outer Tag/S-Tag This parameter allows setting the use of a single VLAN (C-VLAN) or double VLAN (S-VLAN) for this interface.
  • Page 117 Managing the LTE | 117 Interface Select the physical interface (e.g. ETH1, ETH2 or SFP) that this logical interface covers. If ‘Bridge interfaces’ is selected, then you may select multiple. Aprisa LTE User Manual 2.1...
  • Page 118 118 | Aprisa LTE User Manual Static Address > Firewall Settings This page configures the firewall settings of a static address interface. Create / Assign firewall zone Choose the firewall zone you want to assign to the interface. Select unspecified to remove the interface...
  • Page 119 Allows automatic configuration of IPv6 from any combination of stateless DHCPv6, stateful DHCPv6, DHCPv6-PD and SLAAC. Hostname to send when requesting DHCP If it is blank (default) then the hostname set in Terminal > Device > Hostname will be used. Aprisa LTE User Manual 2.1...
  • Page 120 120 | Aprisa LTE User Manual DHCP Client > Advanced Settings This page configures the advanced settings of a DHCP Client interface. Use builtin IPv6-management This parameter sets if IPv6 address ranges allocated to this interface will be delegated to other downstream facing interfaces.
  • Page 121 IGMP (Internet Group Management Protocol) packets. When disabled, multicast packets are sent to all ports in the same way as broadcast packets. This helps to reduce traffic going to links not involved in the multicast conversation. Aprisa LTE User Manual 2.1...
  • Page 122 122 | Aprisa LTE User Manual DHCP Client > Firewall Settings This page configures the firewall settings of a DHCP Client interface. Create / Assign firewall zone Choose the firewall zone you want to assign to the interface. Select unspecified to remove the interface...
  • Page 123 Request the specified prefix length. Typical values are 56, 60 or and 128 Automatic The Aprisa LTE will determine an appropriate prefix to request. Disabled No prefix will be requested, and only a single IPv6 will be allocated to this device (meaning no delegation can occur for IPv6 routing from other interfaces).
  • Page 124 124 | Aprisa LTE User Manual DHCPv6 Client > Advanced Settings This page configures the advanced settings of a DHCPv6 Client interface. Use builtin IPv6-management This parameter sets if IPv6 address ranges allocated to this interface will be delegated to other downstream facing interfaces.
  • Page 125 IGMP (Internet Group Management Protocol) packets. When disabled, multicast packets are sent to all ports in the same way as broadcast packets. This helps to reduce traffic going to links not involved in the multicast conversation. Aprisa LTE User Manual 2.1...
  • Page 126 126 | Aprisa LTE User Manual DHCPv6 Client > Firewall Settings This page configures the firewall settings of a DHCPv6 Client interface. Create / Assign firewall zone Choose the firewall zone you want to assign to the interface. Select unspecified to remove the interface...
  • Page 127 DHCP lease. The lease time can be set in hours (h) or minutes (m). The minimal amount of time that can be specified is 2 minutes. The default value is 12h. Aprisa LTE User Manual 2.1...
  • Page 128 128 | Aprisa LTE User Manual DHCP Server > Advanced Settings This page configures the DHCP advanced settings. IPv4-Netmask This parameter overrides the LAN netmask sent to DHCP clients. The default value is 255.255.255.0. DHCP-Options This parameter allows additional options to be sent by the DHCP server to clients. For example, with...
  • Page 129 Announced DNS domains This parameter indicates the DNS domains to announce in Router Advertisement and DHCPv6 messages. Can be appended by clients to a bare domain name to form a FQDN (fully qualified domain name). Aprisa LTE User Manual 2.1...
  • Page 130 130 | Aprisa LTE User Manual...

  • Page 131: Interfaces/Networking > Static Routes

    This parameter sets the gateway IP address where packets will be forwarded to a router with this IP address when no other route specification in routing table matches the destination IP address of a packet. Aprisa LTE User Manual 2.1...
  • Page 132 132 | Aprisa LTE User Manual Metric This parameter specifies the metric (or priority) of a route. If two routes can reach the same target, the one with the lower metric is used. This can be used for failover between routes – where the preferred route gets lower metric, but it the interface goes down, then the second route with higher metric will be used.
  • Page 133 Same as for IPv4. Target If the target is a single address, specify it directly (eg 2402:2380:305:3100::834) If it is a network, specify in CIDR notation (eg 2402:2380:305:3100::/64). Gateway Same as for IPv4. Metric Same as for IPv4 Aprisa LTE User Manual 2.1...

  • Page 134: Interfaces/Networking > Dhcp And Dns

    134 | Aprisa LTE User Manual Interfaces/Networking > DHCP and DNS DHCP and DNS > General Settings This page provides setup of the DHCP and DNS servers. Authoritative When enabled, this parameter relaxes strict RFC behaviour to speed up clients obtaining leases but should...
  • Page 135 This is a list of DNS servers to forward requests to, optionally specifying the domains that are forwarded. ‘4.4.4.4’ would forward all requests to 4.4.4.4, but ‘/4rf.com/4.4.4.4’ would forward only requests for 4rf.com to the 4.4.4.4 server. Note that any DNS servers obtained through DHCP, DHCPv6 and IPv6-RA will automatically be used.
  • Page 136 136 | Aprisa LTE User Manual DHCP and DNS > Advanced Settings This page provides setup of DHCP advanced settings. Maximum active leases Specifies the number of leases the DHCP server will allocate to clients simultaneously. The default value is...

  • Page 137: Interfaces/Networking > Firewall

    This section defines the main policies of the firewall function. It matches packet against all defined firewall chain rules. If no rule matches, an Action [Accept, Drop, and Reject] is performed. Drop invalid packets If enabled, packets that are determined to be invalid will be dropped. Aprisa LTE User Manual 2.1...
  • Page 138 138 | Aprisa LTE User Manual Input, Output, Forward These parameters define the firewall chain and their associated action options. Firewall chain Default Action Function Input Accept Perform “Action” (see below) on packets pass input firewall chain Output Accept Perform “Action” on packets pass output firewall chain...
  • Page 139 This section defines network/port zones and their exposer to other zones. Network/port zones entities are defined in ‘Interfaces/Networking > Logical Interfaces’ per port, network or group of ports. Zone Forwarding (Inter-Zone Forwarding) ⇒ Control the forwarding policies between the specified source and destination zones. The forwarding rule is unidirectional. Aprisa LTE User Manual 2.1...
  • Page 140 140 | Aprisa LTE User Manual Input, Output, Forward Input / output define the traffic policies in the zone and forward defines the traffic policy between different networks within the zone Masquerading If enabled, NAT function is applied MSS clamping...
  • Page 141 Toggles the rule ON or OFF. If unchecked, the rule will not be deleted, but it also will not be loaded into the firewall. Name Name of the rule, used purely for easier management purposes. Aprisa LTE User Manual 2.1...
  • Page 142 142 | Aprisa LTE User Manual Protocol Specifies to which protocols the rule should apply. Default value is TCP+UDP. Source zone The source zone from which data packets will redirected from. Default value is wan: ppp Source MAC address Matches incoming traffic from these MACs only.
  • Page 143 Firewall > Traffic Rules This page provides setup of traffic rules which define policies for packets traveling between different zones, for example to reject traffic between certain hosts or to open WAN ports on the router. Aprisa LTE User Manual 2.1...
  • Page 144 Source zone Packets arriving from the specified source zone will match this rule. The special ‘device’ zone matches packets that originate from the Aprisa LTE. Any Zone may also be specified. Default value is wan: ppp Source Address The source zone from which data packets will redirected from.

  • Page 145: Interfaces/Networking > Qos

    This parameter sets any interface using * or interface or group of interfaces configured at ‘Interfaces/Networking > Logical Interfaces’ on page 109 in the selected profile classification rules. For example, LAN, WAN and WAN6 interfaces. Aprisa LTE User Manual 2.1...
  • Page 146 146 | Aprisa LTE User Manual Ingress DSCP This parameter sets the Differentiated Services (Diffserv) Code Point (DSCP) in the selected profile classification rules. It is a QoS priority value which resides within the IP header (in TOS byte) and can be used to set an IP packet with Diffserv priority.
  • Page 147 IP packet with DIffserv priority. The default DSCP can be set to -1 for no change or any valid DSCP value 0 – 63. See commonly used DSCP table on the ‘ingress DSCP’ description. Aprisa LTE User Manual 2.1...
  • Page 148 148 | Aprisa LTE User Manual QoS > Policy This page provides setup of QoS policies which determine the rules that the policy engine follows per egress interface, deciding which traffic is given priority to the selected egress port. Policy Name...

  • Page 149: Services

    Managing the LTE | 149 Services Services > Summary Aprisa LTE User Manual 2.1...

  • Page 150: Services > Supervisor

    150 | Aprisa LTE User Manual Services > SuperVisor This page provides setup of SuperVisor. GENERAL SuperVisor Polling Period (s) This parameter sets the rate at which SuperVisor refreshes page information and LED states. SuperVisor Inactivity Timeout (min) This parameter sets the period of user inactivity before SuperVisor automatically logs out of the LTE.

  • Page 151: Services > Ddns

    IP address. The DDNS service periodically updates the IP address information of the hostname, making sure that the device remains reachable via the same hostname even in cases when its IP address has changed. Aprisa LTE User Manual 2.1...

  • Page 152: Services > Date & Time

    152 | Aprisa LTE User Manual Services > Date & Time This page sets the device Date and Time. DATE AND TIME Sets the device Date and Time. This information is controlled from a software clock. Time Set Method This parameter sets the method for setting the Date and Time. The default setting is Manual.
  • Page 153 Time Format This parameter sets the time format for all time based results. The default setting is 24 Hours. Date Format This parameter sets the date format for date based results. The default setting is DD/MM/YYYY. Aprisa LTE User Manual 2.1...
  • Page 154 154 | Aprisa LTE User Manual Controls Synchronize Now This Synchronize Now button provides manual Synchronization.

  • Page 155: Services > Management

    Disabled As soon as power is applied on pin 1 and 2 of power connector (see ‘Power Supply’ on page 39), the Aprisa LTE will turn on and stay This setting ignores the ignition sense pin behavior (i.e. power supply pin 3 is not controlling the power on/off of the Aprisa LTE.
  • Page 156 156 | Aprisa LTE User Manual OPERATING VOLTAGE SETTINGS Power supply input voltage thresholds are used to trigger LTE sleep mode to reduce power consumption. The difference between the two thresholds Turn On and Turn Off defines the detection hysteresis.

  • Page 157: Security

    Managing the LTE | 157 Security Security > Summary This page displays the current security settings. Aprisa LTE User Manual 2.1...

  • Page 158: Security > Setup

    This parameter sets the password for ‘Severity Level = Strong’. It uses AES-256-CBC encryption. The password is converted to AES key using the PBKDF2 (Password-Based Key Derivation Function 2) key derivation algorithm. This key is also used to encrypt the configuration file of the Aprisa LTE router.

  • Page 159: Security > Users

    • is easy to remember, for instance by means of a key sentence Aprisa LTE User Manual 2.1...
  • Page 160 160 | Aprisa LTE User Manual Security > Users > Accounts Note: You must login with ‘admin’ privileges to add, disable, delete a user or change a password. Shows a list of the current user accounts setup in the LTE.
  • Page 161 See ‘SuperVisor Menu Access’ on page 69 for the list of SuperVisor menu items versus user privileges. When the password is changed, you will be prompted for confirmation of the password to avoid mistypes. The Status will show PENDING until the entry is saved. 5. Click Save. Aprisa LTE User Manual 2.1...

  • Page 162: Security > Radius

    162 | Aprisa LTE User Manual Security > RADIUS This page enables setup of the LTE RADIUS server. RADIUS - Remote Authentication Dial In User Service RADIUS is a client / server system that secures the LTE against unauthorized access. It is based on open standard RFCs: RFC 2865/6, 5607, 5080 and 2869.
  • Page 163 This parameter sets the initial time to wait before the retry mechanism starts when the server is not responding. Default Transaction Timeouts (MRT) (seconds) This parameter sets the maximum time between retries. Maximum Retries This parameter sets the maximum number of retry attempts when the server is not responding. Aprisa LTE User Manual 2.1...
  • Page 164 164 | Aprisa LTE User Manual Maximum Retries Duration (s) This parameter sets the maximum duration it will attempt retries when the server is not responding. Unknown Transaction Attributes This parameter sets the LTE’s response to unknown attributes received from the radius server.

  • Page 165: Security > Vpn

    Secure VPN to data center and multipoint (peer to peer) VPNs Setting up a secure connection to the customer data center or to other multiple Aprisa LTE (peer to peer) requires setting up a VPN connection to the required end point/s. The Aprisa LTE allows a few VPN connection options, non-secure and secure PTP VPNs and Multi-Point (MP) VPNs, which are listed list below: 1.
  • Page 166 166 | Aprisa LTE User Manual 8. Set ‘TTL = 255’ for max hop count and MTU to any max MTU required size (recommended 1500 byte). Note that the MTU must be lower than the operator ‘Cellular MTU’ shown in Cellular > Summary page.
  • Page 167 GRE can provide that. Thus, it is more common to use GRE tunnel inside an IPsec for a secure VPN that can carry any protocol. The Aprisa LTE can act as a GRE-over-IPsec VPN endpoint.
  • Page 168 168 | Aprisa LTE User Manual Note: after GRE-over-IPsec VPN setup, the Aprisa LTE is connected directly to the data center and in terms of routing, the hop count is considered as a single hop count event though there are multiple routers across...
  • Page 169 This defines the IPv4 address and netmask of the virtual interface used for routing. Not valid for Ethernet over GRE/GREv6. Tunnel IPv6 address/prefix This defines the IPv6 address and prefix of the virtual interface used for routing. Not valid for Ethernet over GRE/GREv6. Aprisa LTE User Manual 2.1...
  • Page 170 170 | Aprisa LTE User Manual Tunnel Key An optional setting, to enables an ID key for a GRE tunnel interface. The tunnel key specifies a number from 0 to 4,294,967,295 that identifies the tunnel key. Note: The tunnel key must be set to the same value on all hubs and spokes that are in the same DMVPN network.
  • Page 171 An IPv4 or IPv6 address/prefix. Packets with source address matching this will be sent on the tunnel Remote Subnet An IPv4 or IPv6 address/prefix. Packets with destination address matching this will be sent on the tunnel Aprisa LTE User Manual 2.1...
  • Page 172 172 | Aprisa LTE User Manual IP Protocol Number The type of protocol to tunnel. Drop down menu includes GRE, TCP, UDP, ICMP and specific protocol (number) or any protocol to allow all protocols to be tunneled. DMVPN typically uses GRE for IPSec+GRE tunneling (so other traffic like pings are unencrypted).
  • Page 173 VPN > IPSec Connection This page provides VPN IPSec connection configuration of the remote gateway address, and the algorithms used for authentication between gateways. IPSEC CONNECTION SETTINGS IKE Connection Name Name of the IKE connection Aprisa LTE User Manual 2.1...
  • Page 174 174 | Aprisa LTE User Manual Remote Gateway The public IP address or FQDN of the gateway to establish a connection with. Use 0.0.0.0 if the remote end will initiate the connection, and any remote address may connect. IKE Version The protocol version to allow.
  • Page 175 Default value is Always On Role Responder waits for connection from peer. Initiator initiates the connection. IKE SA Lifetime Specifies the number of seconds an IKE SA (security association) will live before expiring. Aprisa LTE User Manual 2.1...
  • Page 176 176 | Aprisa LTE User Manual VPN > Certificate This page provides IPSec Certificate configuration provides the method to upload certificates for IPSec. These are then selected in the IPSec tunnel/connection pages when configuring. File Type Option Function ROOT CA This is a public key that identifies a root certificate authority and is used to verify the identity of a remote device.

  • Page 177: Security > Ssh

    Generates a new random private key for SSH server identity. ECDSA/RSA Public key This is the server identity. For extra security, users may configure their SSH client to only connect to servers with this identity. Aprisa LTE User Manual 2.1...

  • Page 178: Security > Https

    178 | Aprisa LTE User Manual Security > HTTPS This page provides HTTPS configuration. HTTPS Enables HTTPS operation. HTTP Port Number This parameter sets the HTTP Port Number. The default value is 80 HTTPS Port Number This parameter sets the HTTPS Port Number. The default value is 443.
  • Page 179 Any file name may be used – only the extension (.crt and .key) of the two files is important. Allowed certificate algorithms are RSA (1024, 2048 or 4096 bit) or ECDSA (256 bit), with hashes of SHA-1, SHA-256, SHA-384 or SHA-512. Aprisa LTE User Manual 2.1...

  • Page 180: Security > Snmpv2/V3

    180 | Aprisa LTE User Manual Security > SNMPv2/v3 This page provides SNMPv2/v3 configuration. SNMPv2/v3 > Setup PROTOCOL SECURITY SETTINGS SNMP Agent Enables SNMP agent. SNMP Protocol Version This parameter sets the SNMP Protocol Version. The default value is All Versions...
  • Page 181 The default value is public. Read/Write This parameter sets the Community String when SNMPv1/v2c is used and Context Name when SNMPv3 is used for read/write objects. The default value is private. Aprisa LTE User Manual 2.1...
  • Page 182 182 | Aprisa LTE User Manual SNMPv2/v3 > SNMP V3 Users User Name This parameter sets the User Name which can be between 8 and 64 characters. Security Level Option Function None No Security Auth Only Use secure SNMPv3 authentication protocol only...
  • Page 183 AES-192 privacy (encryption) protocol is used with SNMPv3 transaction AES-256 AES-256 privacy (encryption) protocol is used with SNMPv3 transaction Priv Password This parameter sets the Privacy (encryption) protocol password which can be between 8 and 64 characters. Aprisa LTE User Manual 2.1...

  • Page 184: Maintenance

    184 | Aprisa LTE User Manual Maintenance Maintenance > General This page controls the LTE reboot and reset to defaults. Reboot Reboots the LTE software. Note this reboot is traffic affecting. To reboot the radio: 1. Tick the ‘Reboot’ checkbox.
  • Page 185 Restore Factory Defaults When activated, all router parameters will be set to the factory default values. This includes resetting the router LAN IP address to the default of 192.168.4.1. Note: Take care using this command. Aprisa LTE User Manual 2.1...

  • Page 186: Maintenance > Files

    186 | Aprisa LTE User Manual Maintenance > Files This page enables LTE configuration / log files to be saved to a PC. MAINTENANCE FILES There are four maintenance file types which can saved to your PC. The Configuration Settings can be...
  • Page 187 To open the configuration file, perform the following steps: 1. Unzip the ‘AprisaLTE-<serialnumber>-config.tar.gz’ file with compression applications like WinZip or 7-ZIP to a new directory. It includes multiple configuration files for each configuration section of the LTE radio. Aprisa LTE User Manual 2.1...
  • Page 188 188 | Aprisa LTE User Manual 2. The files in the config path are all text files that can be viewed if required by right clicking on the file and using ‘Open With’ your text file editor. This is the ‘System’ file opened with Notepad ++.
  • Page 189 This saves the Support Information with a filename of ‘AprisaLTE-<serialnumber>-support’ (for Standard security) or ‘AprisaLTE-<serialnumber>-support.enc’ (for Strong security) to your PC ‘downloads’ directory. If you wish to open the support file, check the security level is set to ‘Standard’ in ‘Security > Setup’. Aprisa LTE User Manual 2.1...

  • Page 190: Maintenance > Cellular

    190 | Aprisa LTE User Manual Maintenance > Cellular This page enables Cellular profile setup. Force PDN Profile Switch To Forces switch to the selected PDN. The PDN must be enabled in Cellular->General PDN Profile Lock Enable Setting Function Enables the PDN Profile Lock...
  • Page 191 How much time is left for active PDN to go back to unlock state. Carrier Search Max Timeout (s) When Carrier search is started using the ‘start’ button then this time specifies the maximum time to scan for networks. Aprisa LTE User Manual 2.1...

  • Page 192: Maintenance > Networking

    192 | Aprisa LTE User Manual Maintenance > Networking This page enables networking setup. Ping Sends an ICMP or ICMPv6 echo request to the specified address. Traceroute Sends packets with gradually increasing TTL values, to discover the route that a packet takes to reach a destination.

  • Page 193: Events

    The Events menu contains the setup and management of the alarms, alarm events and traps. Events > Alarm Summary There are two types of events that can be generated on the Aprisa LTE. These are: 1. Alarm Events Alarm Events are generated to indicate a problem on the LTE.

  • Page 194: Events > History Log

    194 | Aprisa LTE User Manual Events > History Log This page displays the log of all Alarm events. EVENT HISTORY The last 1500 events are stored in the LTE. The complete event history list can be downloaded to your PC (see ‘File - Event Log History’...

  • Page 195: Events > Setup

    This page allows alarm event parameters to be configured for all alarm events (see ‘Alarm Events’ on page 239). EVENTS SETUP All active alarms for configured alarm events will be displayed on the Monitoring pages (see ‘Monitoring’ on page 214). Aprisa LTE User Manual 2.1...
  • Page 196 196 | Aprisa LTE User Manual Severity The Severity parameter sets the alarm severity. Severity Function Critical The Critical severity level indicates that a service affecting condition has occurred and an immediate corrective action is required. Such a severity can be reported, for example, when a managed object becomes totally out of service and its capability must be restored.

  • Page 197: Events > Action Setup

    This parameter sets the action type that will be activated on the LTE for the condition defined in Action Threshold Criteria. Option Function None This action setup does not activate any alarm output Activate Alarm Output 1 This action setup activates alarm output 1 Hardware Reset This action resets the LTE hardware Aprisa LTE User Manual 2.1...
  • Page 198 198 | Aprisa LTE User Manual Action Threshold Criteria This parameter sets the LTE event that will trigger the action output. Option Function None No action output. Equal Critical Activates the action output when an LTE alarm is critical alarm...

  • Page 199: Events > Trap Setup

    Events > Trap Setup This page enables the setup of SNMP traps to capture LTE alarm events. TRAPS SETUP All events can generate SNMP traps. The types of traps that are supported are defined in the ‘Notification Mode’. Aprisa LTE User Manual 2.1...
  • Page 200 200 | Aprisa LTE User Manual Destination Address This parameter sets the IP address of the server running the SNMP manager. Port This parameter sets the port number the server running the SNMP manager. Community String This parameter sets the community string which is sent with the IP address for security. The default community string is ‘public’.
  • Page 201 This parameter sets the time interval to wait for an acknowledgement before sending another retry. Maximum Retries This parameter sets the maximum number of retries to send the event without acknowledgement before it gives up. Enabled This parameter determines if the entry is used. Aprisa LTE User Manual 2.1...

  • Page 202: Events > Alarm I/O Setup

    202 | Aprisa LTE User Manual Events > Alarm I/O Setup This page provides control of the hardware alarm input and hardware alarm output provided on the power connector. The alarm inputs can be used for the following functions: •...
  • Page 203 The alarm is active high i.e. the active alarm state will drive the output with the same voltage as the LTE supply input. Current State The Current State shows the current state of the alarm. Aprisa LTE User Manual 2.1...

  • Page 204: Events > Syslog

    Events > Syslog This menu allows configuring events that are recorded in the History Log, to also be sent to remote servers using the syslog protocol (compliant with RFC 5224). Messages from the Aprisa LTE contain a MSG field with. Example message: <13>1 2020-04-09T01:08:45+00:00 AprisaLTE - 14 5000 - {"logId":"449","timestamp":"2020-04-...
  • Page 205 Address of the remote syslog server. May be IPv4 or IPv6 address. Destination Port The port to send to on the remote server. Defaults to 514. Enabled Syslog messages are only sent to enabled servers Aprisa LTE User Manual 2.1...

  • Page 206: Events > Defaults

    206 | Aprisa LTE User Manual Events > Defaults This page enables the restoring of setup events back to factory defaults. EVENT DEFAULTS Restore Defaults This parameter when activated restores all previously configured event parameters using ‘Events > Setup’ on page 195’ to the factory default settings.

  • Page 207: Software

    This parameter displays the software version that was running on the router prior to the current software being activated. Software Pack Version This parameter displays the software that has been uploaded to the router and is ready for activation. Aprisa LTE User Manual 2.1...
  • Page 208 208 | Aprisa LTE User Manual FILE TRANSFER Transfer Activity This parameter shows the status of the transfer, ‘Idle’, ‘In Progress’ or ‘Completed’. Method This parameter shows the file transfer method e.g. HTTPS File This parameter shows the software file source.

  • Page 209: Software > Setup

    New software will be loaded from a USB flash drive in to the Aprisa LTE. The software will need to be manually activated (see ‘Software > Manager’ on page 212). None Software will not be loaded from a USB flash drive into the Aprisa LTE. Aprisa LTE User Manual 2.1...

  • Page 210: Software > File Transfer

    210 | Aprisa LTE User Manual Software > File Transfer This page provides the mechanism to transfer new software from a file source into the router. SETUP FILE TRANSFER Method This parameter sets the method of file transfer. Option Function...
  • Page 211 The transfer completed, but the file was not valid. Check that the file uploaded was an Aprisa LTE software upgrade file. Note: To check that the Aprisa LTE software upgrade file (4nu) is valid, obtain the checksum (sha1) file for that software...

  • Page 212: Software > Manager

    212 | Aprisa LTE User Manual Software > Manager This page summarizes and manages the software versions available in the router. The manager is predominantly used to activate new software on the LTE. Both the previous software (if available) and Software Pack versions can be activated on the device from this page.
  • Page 213 The page will display a Status of ‘Activating’. Once started, activation cannot be cancelled. When the activation is completed, the device will reboot. This will cause the current SuperVisor session to expire. 3. Login to SuperVisor to check the result. Aprisa LTE User Manual 2.1...

  • Page 214: Monitoring

    214 | Aprisa LTE User Manual Monitoring Monitoring > Terminal This page displays the device diagnostic parameters. Monitored Parameter Function Normal Operating Limits Temperature (Celsius) Parameter to show the device internal –30 to +70 ˚C (–30 to +158 ˚F) temperature...

  • Page 215: Monitoring > Cellular

    (includes multicast/broadcast packets) RX Packets Parameter to show the total number of packets received by modem (includes multicast/broadcast packets) RX Bytes Parameter to show the total number of bytes received by modem Aprisa LTE User Manual 2.1...
  • Page 216 216 | Aprisa LTE User Manual Monitored Parameter Function Normal Operating Limits RX Multicast Packets Parameter to show the number of received packets that are multicast RX Dropped Packets Parameter to show the total number of receive packets dropped by modem...

  • Page 217: Monitoring > Ethernet

    Ethernet port TX Collisions Parameter to show the number of packet collisions on the data transmitted to the customer from the Ethernet port on a shared LAN Controls The Reset button clears the current results. Aprisa LTE User Manual 2.1...
  • Page 218 218 | Aprisa LTE User Manual This page displays the device performance monitoring parameters per Ethernet port received (RX) data in packet and byte level granularity, for Ethernet port high level statistics and troubleshooting. The results shown are since the page was opened and are updated automatically every 12 seconds.

  • Page 219: Monitoring > Serial

    Parameter to show the number of bytes that were not received because the buffer was RX Dropped Bytes full Parameter to show the number of characters received on the serial port in error (for RX Errored Bytes example parity error or framing error) Aprisa LTE User Manual 2.1...

  • Page 220: Monitoring > Wifi

    220 | Aprisa LTE User Manual Monitoring > WiFi This page displays the device WiFi performance monitoring parameters. WIFI Overview shows the channel used and current connection speed, along with the encryption mode, and SSID and BSSID of the connection. The bar icon will also vary depending on the signal strength of the connection.

  • Page 221: Monitoring > Vpn

    The total number of bytes received/sent on this tunnel In/Out Pkts The total number of packets received/sent on this tunnel Last In/Out The time since last input/output packet was received/sent Type The type of this tunnel. Either Tunnel or Transport Aprisa LTE User Manual 2.1...

  • Page 222: Monitoring > Dhcp

    This page displays information on the active DHCP server leases that the router has issued to other DHCP clients on the network. Active DHCP Leases list shows the addresses that the DHCP server in the Aprisa LTE has assigned to other devices.

  • Page 223: Monitoring > Firewall

    Managing the LTE | 223 Monitoring > Firewall This page displays the router firewall performance monitoring parameters. This page shows the status and traffic counters for all firewall rules (including NAT translation). Aprisa LTE User Manual 2.1...

  • Page 224: Monitoring > Routes

    224 | Aprisa LTE User Manual Monitoring > Routes This page displays the router routing table. The routes displayed here will include configured static routes, routes to directly attached networks, along with routes discovered through discovery protocols (such as DHCP and IPv6 RA).

  • Page 225: Monitoring > Address Tables

    These mappings are discovered using the ARP (Address Resolution Protocol). The IPv6 Neighbours list shows mappings between IPv6 address and MAC address, and on which interface that mapping is present. These mappings are discovered using the ND (Neighbour Discovery) protocol. Aprisa LTE User Manual 2.1...

  • Page 226: Command Line Interface

    Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an unsecured network. It is used in the Aprisa LTE to provide a secure CLI remote access connection to the LTE router. SSH is operated in server client mode, where the LTE router is acting as the SSH server. The communication between the client and LTE router (server) is encrypted in SSHv2 (where SSHv2 vs SSHv1 uses a more enhanced security encryption algorithm).
  • Page 227 Security -> SSH page. This step is optional but provides a guarantee that you are correcting directly and there is no man in the middle attack occurring. 4. Login to the CLI with a default username ‘admin’ and password ‘admin’. Aprisa LTE User Manual 2.1...

  • Page 228: Cli Commands

    228 | Aprisa LTE User Manual CLI Commands The top level CLI command list is displayed by typing a ? at the command prompt. The following is a list of the top level CLI commands and their usage: CLI Command...
  • Page 229 <hostname> To see the next level CLI command list, type a ? at the command prompt: AprisaLTE> show ? To go back one level, type Exit at the prompt: AprisaLTE(config) > Exit Aprisa LTE User Manual 2.1...
  • Page 230 230 | Aprisa LTE User Manual Configure Commands Command Option Usage Maximum Access Allows execution of any non-configure view command unlock <code> Unlocks factory mode commands Admin only commit Once all the changes have been made, they can be committed using the “commit” command. If there is...
  • Page 231 Direct vtysh output to file ping Send echo messages quit Exit current mode and down to previous mode rpki Control rpki specific settings show Show running system information terminal Set terminal line parameters traceroute Trace route to destination Aprisa LTE User Manual 2.1...
  • Page 232 232 | Aprisa LTE User Manual Copy Commands copy <source> <destination> [include-keys] Source:Destination Usage Maximum Access system:startup-config Used to transfer the currently saved config to/from external backup. Admin only A warning is shown if the security level is high, but the...
  • Page 233 (manufacture, model, laser signal levels, etc) show device system Display information about router hardware such as part number, serial number, MAC addresses and what optional devices are present show device usb Status of USB port, including list of attached devices Aprisa LTE User Manual 2.1...
  • Page 234 234 | Aprisa LTE User Manual Command Option Level Description Show IP information Show ARP v4/v6 Table Examples: inet4 show IPv4 ARP table inet6 show IPv6 ARP table interface Show Specific Interface Details Examples: Display All Interface Details lan Show lan Interface details...

  • Page 235: Snmp Management

    NMS and Aprisa LTE where the Aprisa LTE provides this engine ID to the NMS, thus it is not a configurable parameter in Aprisa LTE. The engine ID must be unique per each device in the network and thus it is composed by a hash function of the Aprisa LTE MAC address.

  • Page 236: Standard Snmp Mibs Supported

    The Aprisa LTE supports specific SNMP MIBs that are written to support specific objects/OIDs (Object Identifiers) that are only supported in the 4RF Aprisa family of products. The format of the MIB files comply with ITU-T ASN.1 (Abstract Syntax Notation One) standard notation.

  • Page 237: Maintenance

    Maintenance Spare Fuses The Aprisa LTE router PBA contains two fuses in the power input with designators F1 and F2. Both the positive and negative power connections are fused. The fuse type is a Littlefuse 0453005.0MRSN with a rating of 5 A.
  • Page 238 Note: Is it critical that the screws are re-tightened to 0.8 Nm. The regulatory compliance of the LTE router may be affected if the screws are not tightened correctly. Additional spare fuses can be ordered from 4RF see ‘Spare Fuses’ on page 63.

  • Page 239: Alarm Events

    TX Packets SIMx Alarm Warning Alarm is cleared if values within clear upper/lower If max is 0 it is ignored No RX data When no data is received during the configured period Alarm Warning Aprisa LTE User Manual 2.1...

  • Page 240: Gnss Alarm Events

    240 | Aprisa LTE User Manual GNSS Alarm Events Event Event Function Event Type Default Severity gnssActivity Possible events: Informational Position set to the GNSS position e.g. ‘41.2362751, 174.8271497, 0M’ When manually stored position is updated Position fix lost (GPS Disabled)

  • Page 241: Product Specifications

    Frequency Range 2.4 to 2.495 GHz, 5.15 to 5.825 GHz Performance 802.11ac Wave 2 (2x2) MU-MIMO Encryption WPA / WPA2 Personal / Enterprise Mixed with options for TKIP and CCMP ciphers Modes Access Point and Client Aprisa LTE User Manual 2.1...

  • Page 242: Security

    242 | Aprisa LTE User Manual Security Symmetric Encryption 3DES AES 128, 192, or 256 CBC/CTR/CCM8- CCM16/GCM8-GCM16 Authentication MD5/SHA-1/SHA-256/SHA-384/SHA-512 DH Group DH-1/DH-2/DH-5/DH-14/DH-15/DH-19/DH- 20/DH-21 IKEv1 and IKEv2 Key Wrap AES Key Wrap Algorithm to RFC 3394 FIPS FIPS 197 (AES) and FIPS 140-2: Security...

  • Page 243: Interface Specifications

    Ethernet Interface (with SFP) The Aprisa LTE router has one SFP Module Socket for fitting of optional SFP modules see ‘SFP Modules’ on page 41. An Ethernet SFP module can be fitted in this socket. Operators can select from the following preset modes: •...

  • Page 244: Rs-232 Asynchronous Interface

    244 | Aprisa LTE User Manual RS-232 Asynchronous Interface The Aprisa LTE router’s ITU-T V.24 compliant RS-232 interface is configured as a Cisco® pinout DCE. The interface terminates to a DTE using a straight-through cable or to a DCE with a crossover cable (null modem).

  • Page 245: General Purpose I/O (Gpio) Pin Interface

    Maximum input current limit 2.7mA Output Interface Pin 4 of Molex Micro-Fit 3.0 Connector Output type Non-isolated ground referenced open collector output Output voltage VDC power input voltage Maximum drive current 200 mA Overload protection Internally protected Aprisa LTE User Manual 2.1...

  • Page 246: Power Specifications

    246 | Aprisa LTE User Manual Power Specifications Power Supply Input voltage +9 to +32 VDC negative earthed Sleep power < 40 mW Idle power < 3.5 W Peak power < 15 W Connector Pins 1 & 2 of Molex Micro-Fit 3.0 Male...

  • Page 247: Open Source License Statement

    Open Source License Statement | 247 Open Source License Statement This product contains open source software. Full details and license terms are provided in the separate document Aprisa LTE Open Source License Statement. This document is available at www.4rf.com/oss at www.github.com/4rf/lte.

  • Page 248: Product End Of Life

    EEE Waste Impacts the Environment and Health Electrical and electronic equipment (EEE) contains hazardous substances which have potential effects on the environment and human health. If you want environmental information on the Aprisa LTE router, contact us (on page 15).

Table of Contents

Save PDF