ProSoft Technology ICX35-HWC User Manual

ProSoft Technology ICX35-HWC User Manual

Industrial cellular gateway 3g/4g lte
Hide thumbs Also See for ICX35-HWC:
Table of Contents

Advertisement

Quick Links

ICX35-HWC
Industrial Cellular Gateway
3G/4G LTE
July 14, 2022
User Manual

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ICX35-HWC and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for ProSoft Technology ICX35-HWC

  • Page 1 ICX35-HWC Industrial Cellular Gateway 3G/4G LTE July 14, 2022 User Manual...
  • Page 2: Your Feedback Please

    Neither ProSoft Technology nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein. Information in this document including illustrations, specifications and dimensions may contain technical inaccuracies or typographical errors.
  • Page 3 Do not operate the ProSoft Technology Wireless products in any aircraft, whether the aircraft is on the ground or in flight. In aircraft, the ProSoft Technology Wireless products MUST BE POWERED OFF.
  • Page 4: Table Of Contents

    SIM Card Security ..................19 2.3.4 SIM Card PIN Verification ................19 2.3.5 Unblocking a SIM Card ................21 Connecting to the Internet Using the ICX35-HWC ........24 ICX35-HWC Webpage Status Tab ....................25 Configuration Tab ..................27 3.2.1 Basic ......................27 3.2.2...
  • Page 5 ICX35-HWC Diagnostic Data Retrieval ............. 82 6.3.2 ICX35-HWC Diagnostic Counter Reset ............. 84 6.3.3 Sending SMS Text Messages from the ICX35-HWC ........ 85 6.3.4 Retrieving SMS Text Messages from the ICX35-HWC ......87 6.3.5 Clearing SMS Text Messages from the ICX35-HWC ........ 88 6.3.6...
  • Page 6 Appendix A – Belden Horizon Remote Packet Capture Proxy ARP 13.1 Proxy ARP Sample Topology ..............124 13.2 Configuring Proxy ARP in ICX35-HWC ........... 125 13.3 Proxy ARP Status Check ................. 126 Support, Service & Warranty 14.1 Contacting Technical Support ..............127 14.2...
  • Page 7: Start Here

    3G. These devices include PAC/PLCs, RTUs, DCS systems, instruments, electronic billboards and communication towers. The ICX35-HWC is ideal for programming and maintenance of remote equipment, remote data collection, SCADA, and machine-to-machine (M2M) applications. It operates on LTE/GSM and CDMA networks with a single device The ICX35-HWC supports: ...
  • Page 8: Specifications

    10 to 30 VDC Peak Power Consumption < 6W Package Contents The following components are included with the ICX35-HWC and are required for installation and configuration. Important: Before beginning the installation, please verify all of the following items are present.
  • Page 9: Jumpers

    The custom username/password will also be reset to the defaults values. Reset (Power Cycle) Button The reset button is located at the bottom of the front panel of the ICX35-HWC. ProSoft Technology, Inc. Page 9 of 127...
  • Page 10: Power Requirements

    Note: The onsite chassis/earth connection derived from the AC side of the main system power supply should not be connected to either negative or any other power terminal of ICX35-HWC. ProSoft Technology, Inc. Page 10 of 127...
  • Page 11 ICX35-HWC ♦ Industrial Cellular Gateway Start Here 3G/4G LTE User Manual To use the connector lever, insert it into the connector as shown: Press down on the installation tool to use it as a lever to open the connector’s contacts to insert a wire. A properly-wired power connector is shown: ProSoft Technology, Inc.
  • Page 12: Connecting To The Icx35-Hwc

    Note: ProSoft Discovery Service can also be used set a temporary IP address. PDS is a free software utility used to allow your PC to find a ProSoft Technology Ethernet-based product on a local network. It allows you to change its default IP address without being on the same subnet. It can be downloaded from: www.prosoft-technology.com.
  • Page 13 Connecting to the ICX35-HWC 3G/4G LTE User Manual Note: For the initial or default ICX35-HWC login, after the default username and password are used, the user will be prompted to change the password. The new password must comply with the following rules: 1.
  • Page 14: Assigning A Lan Ip Address

    ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual After 5 consecutive failed login attempts, you will not be allowed to login for next 10 minutes. The details and status are logged in syslog and /psft/loginRecords.txt. The last 100 login attempts are logged.
  • Page 15 • DHCP Range – This allows you to enter a range of IP addresses that can be addressed. For example, if you have a number of devices connected to a remote ICX35-HWC, you can enter the DHCP range to use on devices connected to the remote ICX35-HWC.
  • Page 16 If NO, disable the DHCP Server option. d) On the laptop, set the TCP/IPv4 properties. Non-PC devices, such PLC’s, do not require the Preferred DNS Server entry. In the ICX35-HWC configuration webpage, click A . The page automatically PPLY redirects to the new IP address if the IP address is changed.
  • Page 17: Connecting To Your Cellular Provider

    SIM. 2.3.1 Connection Using GSM/GPRS The Subscriber Identity Module (SIM) in the ICX35-HWC is a smartcard that securely stores the key identifying a cellular subscriber. Generally, you will only need to install a SIM once in the life of the cellular gateway - and it may be pre-installed by your ProSoft Technology Representative.
  • Page 18: Connection Using Cdma

    Enter the APN (Access Point Name) in the Configuration > Basic section of the UI. The APN is provided by your cellular provider. After the ICX35-HWC reboots, it establishes a link to your cellular provider network, also called registering on the network, and then receives an IP address.
  • Page 19: Sim Card Security

    Most mobile devices offer SIM PIN protection. At startup, if the PIN security function is active, the user must enter a 4 to 8 digit PIN to enable the ICX35-HWC’s non- emergency functions. You can save the PIN code in the configuration in an encrypted format.
  • Page 20 (Example: AT&T). The next section discusses the unblocking process. When the SIM card is blocked, you will not be able to access the ICX35-HWC configuration webpage via the WAN connection. You can connect via the LAN (Ethernet) port until the SIM card is unblocked.
  • Page 21: Unblocking A Sim Card

    2.3.5 Unblocking a SIM Card If the wrong PIN Code is entered more than three times, the SIM card becomes blocked. During this time, ICX35-HWC WAN (cellular) connectivity is disabled. The SIM PIN status shows “SIM Blocked” on the Status > System Status webpage (WAN section).
  • Page 22 ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual The link takes you to the Configuration > Basic webpage (SIM Settings section). Contact your service provider to provide you with the PUK code. You will need the phone number that is assigned to the SIM card.
  • Page 23 ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual Upon success, the following message is displayed: The SIM Status is now Unlocked. PIN Verification can be enabled, as needed. ProSoft Technology, Inc. Page 23 of 127...
  • Page 24: Connecting To The Internet Using The Icx35-Hwc

    User Manual Connecting to the Internet Using the ICX35-HWC Internet connectivity through the ICX35-HWC is achieved using the following steps: Connect the laptop LAN port to the Ethernet port on the ICX35-HWC. On the laptop, set the TCP/IPv4 properties: Where: •...
  • Page 25: Icx35-Hwc Webpage

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual ICX35-HWC Webpage There are three main tabs of the ICX35-HWC webpages:  Status  Configuration  Administrator Status Tab The Status tab displays the current settings of the cellular gateway including up time, IP address, and cellular data usage.
  • Page 26 It counts each time the service has disconnected from the cellular service while the unit is running. IP address of the ICX35-HWC on the WAN Sent Bytes Number of sent bytes on the WAN port for this connection...
  • Page 27: Configuration Tab

    SIM Status Current state of SIM card. For more information, see SIM Card PIN Verification. Unlocked – The ICX35-HWC’s non-emergency functions are enabled. Locked – The non-emergency cellular functions are disabled and you must enter the PIN Verification to enable them.
  • Page 28: Advanced

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.2.2 Advanced The Configuration > Advanced tab allows you to configure the following:  Cellular Interface  Cellular Usage Tracking  DDNS   Serial / Encapsulation  NTP – Network Time Protocol ...
  • Page 29 *IPsec *Pass Through (End Device Address parameter is cleared) *Port Forwarding (All existing rules are cleared) Note: Excluding the Keep Alive parameter, the ICX35-HWC reboots when updating other WAN parameters (by clicking Apply). ProSoft Technology, Inc. Page 29 of 127...
  • Page 30 You can select Disabled Reached or Enabled. If you select Disabled, the ICX35-HWC will attempt to transfer data even if the Plan Size is exceeded, but the cellular data service provider may halt data, reduce the data rate, or charge additional fees.
  • Page 31 Important: For providers like DynDNS.org, the Time to Live (TTL) value may affect how long it takes an ICX35-HWC to see a change in IP address (for example, the IP address changes because of a reboot). It may take the ICX35-HWC upwards of 30 minutes to see the new address.
  • Page 32 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Client drop-down list includes the following options:  Disable  OpenVPN  IPSec OpenVPN The Virtual Private Network (VPN) Tunnel allows you to access a private local network through the ICX35-HWC.
  • Page 33 IP address or hostname of the VPN server. This is the IP Address that you are creating the tunnel to. In the previous example, this is the public IP Address of the ICX35-HWC in pass through mode that is being used as the default connection to the Linux server.
  • Page 34 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Verification Once the client and server are configured, the client creates a VPN tunnel through the server to the LAN where the server resides. The Status webpage will indicate that an OpenVPN connection is established.
  • Page 35 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual IPSec The VPN Tunnel Internet Protocol Security (IPsec) feature consists of protocols used for authentication and encryption. Important: IPSec tunnel does not work with Public Dynamic IP’s and DDNS names.
  • Page 36 LAN-based devices that allow you to set the IP Address and Gateway IP address. Two ICX35-HWC radios and two PCs are used. Once the IPSec tunnel is created, communications can occur between the two PCs. IPSec uses the concept of Local ID and RemoteID to identify each device.
  • Page 37 LAN Device #2 (Connected to ICX35 #2) Parameter Description IP Address 192.168.0.30 (ICX35-HWC #2's end device IP address) Gateway 192.168.0.230 (ICX35-HWC #2's LAN IP address) Verification Once all four devices are configured, the status webpage in both of the ICX35- HWC’s will indicate that an IPSec VPN connection is made.
  • Page 38 This parameter sets the scheme for the serial port (RS-232 only). Note: For RS-422/485 network connectivity, an RS-232 to RS-422/485 converter is recommended. Baud Rate Baud rate used on the ICX35-HWC serial port Data Bits Number of data bits per character for the serial port Parity Parity type used on the serial port.
  • Page 39 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Generic The Generic option sends all serial data to a single destination. Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave) Timeout Bits Length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data.
  • Page 40 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus RTU The Modbus RTU option displays the following additional parameters: Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
  • Page 41 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual If Slave is selected, the Encapsulation table is not visible. You can add an entry to the Client Table list. Click on the A button. NTRY LIENT ABLE The R button selects and removes entries from this list.
  • Page 42 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus ASCII The Modbus ASCII option displays the following additional parameters: Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
  • Page 43 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus RTU to TCP The Modbus RTU to TCP option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits...
  • Page 44 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus ASCII to TCP The Modbus ASCII to TCP option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits...
  • Page 45 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual DF1 Half-Duplex The DF1 Half-Duplex option displays the following parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
  • Page 46 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual DF1 Full-Duplex The DF1 Full-Duplex option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
  • Page 47 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual DF1 Radio Modem The DF1 Radio Modem option displays the following additional parameters: Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Amount of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
  • Page 48 NTP Server Server time updates for the ICX35-HWC. Example: pool.ntp.org NTP Mode Client - NTP process will query NTP server and update ICX35-HWC system time. Client/Server - NTP process will query NTP server and update ICX35-HWC system time and resolve NTP requests from the LAN clients.
  • Page 49 3G/4G LTE User Manual EIP – EtherNet/IP The ICX35-HWC can run as an explicit message server and will respond to requests received on the LAN. An SMS message can be sent to user(s) upon alarm. ProSoft Technology, Inc. Page 49 of 127...
  • Page 50 3G/4G LTE User Manual Modbus TCP Agent The ICX35-HWC can run as a Modbus TCP/IP server to remote Modbus TCP/IP device(s). Enabling the Modbus TCP Agent is a prerequisite for Diagnostics & SMS features. See Modbus TCP/IP Communications for more information.
  • Page 51 ICX35-HWC Webpage 3G/4G LTE User Manual Connection Recovery The Connection Recovery is used to trigger a reboot of the ICX35-HWC when there is a loss of connectivity or if the ICX35-HWC stops communicating. The reboot trigger conditions are:  Loss of communications to a known endpoint WAN IP ...
  • Page 52 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Proxy ARP Proxy ARP is a technique in which a proxy server on a given network answers the Address Resolution Protocol (ARP) queries for an IP address that is not on that network.
  • Page 53: Firewall

    HWC LAN. Port Forwarding allows a remote client device to access multiples server devices connected to the ICX35-HWC LAN by associating each one of these devices to an ICX35-HWC port number. Up to 10 mappings can be created. Pass Through...
  • Page 54 Exception Ports Lists the ports included in the From Port Range interval that are already in use by services running on the ICX35-HWC, and will not be forwarded to the end device connected to the LAN port. When the fields above are complete, click the A button to load the parameters into the table.
  • Page 55: Administrator Tab

    Configuration Restore * button allows you to locate and select the configuration file to be restored. The Restore button restores the file. Restores the ICX35-HWC to factory defaults – the previous Reset Gateway to Default Configuration configuration is lost. A countdown timer is used during the reset. When the countdown is complete, the webpage will be redirected to the factory default webpage address 192.18.0.250.
  • Page 56: Access Control

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.2 Access Control Parameter Description Web Access Web Port Web access port number Web Protocol HTTP or HTTPS Web Access on WAN Allows or blocks webpage access from the WAN.
  • Page 57 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Adding Entries to the Whitelist Click on the A NTRY TO ELLULAR NTERFACE HITELIST button. This displays a line entry in which you can enter an IP address. Whitelist entries can either be single IP addresses (e.g., 50.40.20.15) or IP addresses followed by a CIDR netmask (e.g., 50.40.20.0/8) allowing subnets to be...
  • Page 58 Depending on your browser, you may encounter a warning message. It warns that the page was not securely loaded due to the unknown verification of a ProSoft site certificate. You may need to add an exception in your browser to proceed to the ICX35-HWC webpage. Google Chrome Click on the A link.
  • Page 59 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Firefox Click on the A link. DVANCED … link. Click on the A XCEPTION In the Add Security Exception window, click on the C ONFIRM ECURITY button. XCEPTION ProSoft Technology, Inc.
  • Page 60 ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Internet Explorer Click on the C link. ONTINUE TO THIS WEBSITE Safari Click on the C button. ONTINUE ProSoft Technology, Inc. Page 60 of 127...
  • Page 61: Logs

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.3 Logs Parameter Description System Log Level (1 to 8) Specifies how much information is saved to the log file. Lower numbers limit the log entries to more critical information, while higher numbers include information useful for troubleshooting.
  • Page 62: Sms

    ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.4 SMS The SMS text message contents of the ICX35-HWC buffer can be viewed using this feature. You can also send an SMS text message to a valid SMS recipient. SMS Settings Parameter Description Message Center This is used to configure the Message Center Number used to send SMS.
  • Page 63 SMS text message to be sent, up to 160 characters. It supports the GSM Basic Character Set. Note: Messages stored in the ICX35-HWC are retrieved using the FIFO rule: The first message received is the first to be retrieved, and so on.
  • Page 64: Ping

    WAN IP address or hostname to be pinged and click the P button. 3.3.6 License This section contains a list of the software contained in the ICX35-HWC. It includes the Open Source Software and its license terms. ProSoft Technology, Inc.
  • Page 65: Belden Horizon

    ProSoft Technology cellular radios on the network. Activation Belden Horizon requires you to activate the ICX35-HWC upon initial use. On the Configuration webpage, click on Administrator > System. Under the Belden Horizon section, click on the A button.
  • Page 66 Once logged in, you can take a tour of the features of the Belden Horizon utility. When ready, activate the ICX35-HWC within the tour, or you can click on the button at the top of the screen. It will prompt you for the ATEWAY Activation Key.
  • Page 67: Hardware Installation

    Caution: The ICX35-HWC has a hardened enclosure, and is designed for use in industrial and extreme environments. Unless you are using cables expressly designed for such environments, they can fail if exposed to the same conditions the ICX35-HWC can withstand.
  • Page 68: Connecting The Radio To A Network Device

    ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual Connecting the Radio to a Network Device The application ports are located on the front of the radio.  The Ethernet port uses a standard RJ45 connector  The serial port uses a standard DB9 connector for serial connectivity ProSoft Technology, Inc.
  • Page 69: Ethernet Cable Specifications

    ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual 5.2.1 Ethernet Cable Specifications The recommended Ethernet cable is category 5 or better. A category 5 cable has four twisted pairs of wire that are color-coded and cannot be swapped. The module only uses two of the four pairs when running at 10 MBit or 100 MBit speeds.
  • Page 70: Serial Port Basics

    ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual 5.2.2 Serial Port Basics RS-232 The use of hardware handshaking (control and monitoring of signal lines) depends on the requirements of the networked device. If no hardware handshaking will be...
  • Page 71: Led Indicators

    ICX35-HWC is powered off Status) Solid Green ICX35-HWC has a connection to cellular tower Blinking Green ICX35-HWC is attempting to connect to cellular tower Solid Red Duplicate IP (EtherNet/IP) / Non-recoverable network fault Blinking Red Established connection timeout (EtherNet/IP) / Minor network fault (*) The MS and NS LED’s are only enabled if the Ethernet/IP parameter is enabled in...
  • Page 72 It is not an indicator of a logical connection state. There may be a situation when you may see a “Disconnect, will retry” indicator on the ICX35-HWC webpage, even when the WWAN LED light is on (solid green). This indicates that the module was able to make a physical connection to the tower, but the logical connection was not made between the ICX35-HWC and the cellular provider.
  • Page 73: Ethernet/Ip And Sms Text Messaging

    LAN directly connected to a PLC. The PLC code can monitor the values and if/when a value is out of range, and SMS message is sent to a user via the ICX35-HWC. The user can then send a SMS back to the PLC to clear the notification.
  • Page 74: Creating A New Rslogix 5000 Project

    ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Creating a New RSLogix 5000 Project Open the File menu and select New. Select your controller Type. Select the Revision of your controller. (Revision 16 or newer only) Enter a Name for your controller, such as "My_Controller".
  • Page 75: Eds Installation

    Integration with the Logix family in Studio 5000 makes use of the EDS Add-On- Profile (AOP). Using RSLinx, the EDS file can be uploaded from the ICX35-HWC. When complete, the EDS Hardware Installation Tool is invoked to complete the registration.
  • Page 76 ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual This action opens the Select Module Type dialog box. Select the 1756-ENBT under the Communication Module Type Category and click the C REATE button. Enter the Name, Slot, Revision, and IP Address of the 1756-ENBT module and click OK.
  • Page 77: Ethernet Bridge Network Setup

    BRIDGE module under the Communication directory and click the C REATE button. This opens the New Module dialog box. Enter ‘ICX35’ as the Name. Enter the LAN IP address of the ICX35-HWC. This is the connection to the outside world for the 1756-ENBT. Click OK. ProSoft Technology, Inc.
  • Page 78 ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual The ETHERNET-BRIDGE now appears in the Controller Organizer window under the 1756-ENBT module. Double click the ETHERNET-BRIDGE icon in the Controller Organizer window to open the Module Properties window. Click on the Connection tab and check the Inhibit Module box.
  • Page 79: Importing The Aoi

    User Manual Importing the AOI Note: When importing an ICX35-HWC AOI file into a new project, use the ICX35-HWC AOI v1.6 file from www.prosoft-technology.com. Also, the ICX35-HWC firmware version must be v1.2.2 or later. In the Controller Organizer window, expand the Tasks folder and subfolders until you reach the MainProgram folder.
  • Page 80 ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Navigate to the location on your PC where you saved the Add-On Instruction (for … button. example, Desktop). Select the .L5X file and click the I...
  • Page 81 ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Click OK to confirm the import. RSLogix will indicate that the import is in progress: When the import is complete, the new rung with the Add-On Instruction will be visible as shown in the following illustration.
  • Page 82: Ethernet/Ip And Sms Text Message Features

    User Manual EtherNet/IP and SMS Text Message Features 6.3.1 ICX35-HWC Diagnostic Data Retrieval The ICX35-HWC AOI can retrieve the ICX35-HWC status from the radio and display it in RSLogix 5000. Enter ‘1’ in the ICX35.CONTROL.Get_Status controller tag and press E NTER The ICX35.STATUS array populates with the ICX35-HWC status.
  • Page 83 ICX35-HWC IMEI number * These parameters can be reset to 0. These tags provide a placeholder value when the ICX35-HWC WAN/LAN is disconnected or in a Connecting state. Tip: To check if a new SMS text message is received, monitor the ICX35.STATUS.SMS_MSGs_Received controller tag.
  • Page 84: Icx35-Hwc Diagnostic Counter Reset

    ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual 6.3.2 ICX35-HWC Diagnostic Counter Reset The following ICX35-HWC status parameters can be reset to 0. They cannot be individually reset. ICX35.STATUS.Min_RSSI ICX35.STATUS.Max_RSSI ICX35.STATUS.Cell_Net_Disconnects ICX35.STATUS.LAN_KBytes_Sent ICX35.STATUS.LAN_KBytes_Received ICX35.STATUS.WAN_KBytes_Sent ICX35.STATUS.WAN_KBytes_Received...
  • Page 85: Sending Sms Text Messages From The Icx35-Hwc

    User Manual 6.3.3 Sending SMS Text Messages from the ICX35-HWC Using the ICX35-HWC AOI, SMS text messages can be sent from the ICX35-HWC to SMS text devices. AT&T Users: For SMS texting functionality, you must power up the ICX35-HWC with the SIM installed within 72 hours after AT&T activates the SIM card.
  • Page 86 ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Enter the SMS text message recipient/phone number(s) in the ICX35.SMS.WRITE.Phone_Number_x controller tag(s). Example: To send an SMS text message to phone number (800)111-2222, the format should be entered into the ICX35.SMS.WRITE.Phone_Number_x controller tag array as follows: +18001112222 To trigger the SMS text messages, enter ‘1’...
  • Page 87: Retrieving Sms Text Messages From The Icx35-Hwc

    User Manual 6.3.4 Retrieving SMS Text Messages from the ICX35-HWC Using the ICX35-HWC AOI, SMS text messages that have been sent to the ICX35- HWC from remote devices can be transferred into RSLogix 5000. AT&T Users: For SMS texting functionality, you must power up the ICX35-HWC with the SIM installed within 72 hours after AT&T activates the SIM card.
  • Page 88: Clearing Sms Text Messages From The Icx35-Hwc

    3G/4G LTE User Manual Warning: The ICX35-HWC should not receive SMS messages faster than once every 30 seconds; otherwise it may repeatedly disconnect from the cellular network. Warning: The ICX35-HWC must not buffer more than 500 received SMS messages before transmission to RSLogix 5000;...
  • Page 89: Rebooting The Icx35-Hwc

    3G/4G LTE User Manual 6.3.6 Rebooting the ICX35-HWC This controller tag reboots the ICX35-HWC. Note: This feature requires ICX35-HWC v1.4.78 firmware or later. Enter ‘1’ in the ICX35.CONTROL.Reboot controller tag and press E NTER ProSoft Technology, Inc. Page 89 of 127...
  • Page 90: Modbus Tcp/Ip Communications

    Diag.IMEI 30072 to 30081 SINT[20] ICX35-HWC IMEI number * These parameters can be reset to 0. These tags provide a placeholder value when the ICX35-HWC WAN/LAN is disconnected or in a Connecting state. ProSoft Technology, Inc. Page 90 of 127...
  • Page 91: Icx35-Hwc Diagnostic Counter Reset

    Diag.SMS_MSGs_Sent Diag.SMS_MSGs_Received Diag.SMS_MSGs_Rx_Free_Buffer_Counter Use Modbus Function Code 6 write a value of ‘1’ to 40001 in the ICX35-HWC. Sending SMS Text Messages to the ICX35-HWC Using the Modbus Function Codes 6 and 16, a Modbus TCP/IP Client can send SMS text message contents to the ICX35-HWC.
  • Page 92: Retrieving Sms Text Messages From The Icx35-Hwc

    Using the Modbus Function Code 4, a Modbus TCP/IP Client can read the SMS text message contents, date/time, and its phone number origination. Below is a table of the ICX35-HWC Modbus addresses used to read the SMS text message information.
  • Page 93: Watchdog

    Watchdog 3G/4G LTE User Manual Watchdog The Connection Recovery watchdog mechanism is used to reboot the ICX35-HWC when there is a loss of connectivity or halts for any other reason. There are multiple scenarios for the watchdog functionality:  No Belden Horizon connection due to no data plan left ...
  • Page 94: Watchdog Scenarios

    ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual Watchdog Scenarios There are several scenarios in which the watchdog is triggered: A. No Belden Horizon connection due to no data plan left. This scenario is activated if:  The device is active in Belden Horizon;...
  • Page 95 ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual B. No Belden Horizon connection and data plan left. This scenario is activated if:  The device is active in Belden Horizon;  The number of attempts to reach Belden Horizon are less than the configured threshold (watchdog/percentatagefail);...
  • Page 96 ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual D. No Belden Horizon connection and usage monitoring disabled. This scenario is activated if:  The device is active in Belden Horizon;  The number of attempts to reach Belden Horizon are less than the configured threshold;...
  • Page 97 ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual F. No Belden Horizon connection while endpoint address is reachable. The default endpoint address present in the configuration file is 8.8.8.8 (watchdog/endpointaddr=8.8.8.8). This scenario is activated if:  The device is active in Belden Horizon;...
  • Page 98: Watchdog Configuration From Export File

    The watchdog parameters can be manually edited by exporting the configuration file from the ICX35-HWC. Export the configuration file from the ICX35-HWC. In the newly exported configuration file, look for the watchdog parameters. They are pointed out in the example below (marked in bold):...
  • Page 99 ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual C. watchdog/enabled=1 By default the watchdog mechanism is enabled in the configuration file (1=enabled; 0=disabled). Note: The watchdog/enabled=1 has no effect if watchdog/armed is set to 0. D. watchdog/percentagefail=10 This parameter shows the percentage of successful attempts to: - Ping the configured endpoint address (check watchdog/endpointaddr parameter;...
  • Page 100: Watchdog Configuration On Icx35-Hwc Webpage

    Watchdog 3G/4G LTE User Manual Watchdog Configuration on ICX35-HWC Webpage A number of the Watchdog parameters are found on the ICX35-HWC webpage. They can be found at: Configuration > Advanced > Connection Recovery. You have the options to:  Enable/disable the...
  • Page 101: Firmware Procedures

    Warning: If you are using an ICX35-HWC with ProSoft Technology’s Add-on Instruction for Rockwell Automation Studio 5000 and wish to install the ICX35-HWC firmware to v1.2.2 or later, the AOI v1.5 will no longer work. After the firmware install, you will also need to update the PLC program with the new AOI v1.7.
  • Page 102: Gateway Firmware Install

    Gateway Firmware Install Important: If the current firmware is older than v1.1 (Example: 766, 1.0, etc.), you will need to upgrade to v1.1 first, then to latest firmware available. Please contact ProSoft Technology technical support for the v1.1 firmware file.
  • Page 103: Radio Firmware Install

    ICX35-HWC ♦ Industrial Cellular Gateway Firmware Procedures 3G/4G LTE User Manual Radio Firmware Install On the ICX35-HWC webpage, click on ADMINISTRATOR > SYSTEM. Under the Radio Firmware Install section, click the C button. HOOSE Browse to the *.spk firmware file location and click OK.
  • Page 104: Verizon Support

    To install the internal radio software, follow the steps in the Radio Firmware Install section. Note: You can select to have ICX35-HWC radios shipped in the Verizon (CDMA) mode by ordering part number ICX35-VZW when placing the order for the ICX35-HWC-A.
  • Page 105: Icx35-Hwc Tech Notes

    This chapter does not go into End Device configuration procedures since it is assumed the user knows how to configure End Devices. However, examples are provided to show how the End Device is configured along with the ICX35-HWC. ProSoft Technology, Inc.
  • Page 106: Pass Through Mode (End Device To End Device) Example

    The following diagram illustrates a Pass Through mode configuration example: In this scenario, the laptop wants to communicate with a ControlLogix rack. To configure the ICX35-HWC, you must supply:  WAN IP – This number is supplied by the cellular provider.
  • Page 107: Icx35-Hwc Configuration Parameters

    Log in to the ICX35-HWC built-in web server. Navigate to Configuration > Basic. Enter the Gateway Name and APN of your network. Using the previous example, the ICX35-HWC IP Address is 192.168.1.100. This is configured in the IP Address and Subnet Mask fields. Click the A button.
  • Page 108: Enable Pass Through

    Address and Subnet Mask addresses. 10.1.4 Obtaining Data from the End Device A user trying to reach the end device through the ICX35-HWC must address the WAN ID (in this case, 166.132.10.56 provided by the cellular provider). ProSoft Technology, Inc.
  • Page 109: Pass Through And Openvpn Example

    In this scenario, Virtual OpenVPN addresses are assigned by the VPN server. If the end device 172.020.000.220 wants to communicate with 192.168.000.211, it must address the device through the ICX35-HWC VPN address. The ICX35-HWC routes the request as it would a Pass Through device.
  • Page 110: Icx35-1 Configuration Parameters

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.2.1 ICX35-1 Configuration Parameters In this scenario, configure the ICX35-1 for Pass Through. Log in to the ICX35-1 built-in web server. Navigate to Configuration > Basic. Enter the Gateway Name and APN of the network.
  • Page 111: Enable Pass Through

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.2.2 Enable Pass Through Navigate to Configuration > Firewall. Enable the Status parameter under the Pass Through heading. Enter the IP Address of the device connected to the ICX35-1 (172.020.000.220) in the End Device Address parameter...
  • Page 112: Configuring Openvpn Parameters

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.2.5 Configuring OpenVPN Parameters You must now configure OpenVPN parameters on both ICX35-HWC radios. Navigate to Configuration > Advanced. Click on the VPN link. Select O VPN from the drop-down list box.
  • Page 113: Openvpn With Dhcp Enabled Example

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.3 OpenVPN with DHCP Enabled Example The following diagram illustrates the use of OpenVPN with DHCP enabled. ProSoft Technology, Inc. Page 113 of 127...
  • Page 114: Icx35-1 Configuration

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.3.1 ICX35-1 Configuration The ICX35-1 shown in the diagram is configured in the ICX35-1 webpage as follows: Login to the ICX35-1 web server. Navigate to Configuration > Basic.
  • Page 115: Icx35-2 Configuration

    10.3.3 End Device Configuration End devices must be configured based on the DHCP assignments. The Gateway settings must match the LAN IP of the ICX35-HWC. This must be done on both ICX35-HWC radios. When setting up Ethernet Bridges, set the IP address to the DHCP assigned addresses.
  • Page 116: Openvpn With Username And Password Authentication

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.4 OpenVPN with Username and Password Authentication 10.4.1 Configuring the Username/Password as the Only Method of Authentication Configuring the Client Enable U by checking the box. ASSWORD UTHENTICATION Enter the Username and Password.
  • Page 117: Configuring The Username And Password With Certificates

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.4.2 Configuring the Username and Password with Certificates Configuring the Client Enable U by checking the box. ASSWORD UTHENTICATION Enter the Username and Password. Provide the Certificate Authority, Client Certificate, and Client Key files.
  • Page 118: Connecting To Multiple Openvpn Servers

    ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.5 Connecting to Multiple OpenVPN Servers This section details the connection between an ICX35-HWC and two OpenVPN servers. Navigate to Configuration > Advanced. Click on the VPN link. Select O VPN from the drop-down list box.
  • Page 119: Troubleshooting Multiple Openvpn Servers

    UI, the uploaded certificate and key files will take precedence. Select Protocol to match the OpenVPN Server 2 protocol. 10.5.1 Troubleshooting Multiple OpenVPN Servers Below are items to consider when connecting the ICX35-HWC to multiple OpenVPN servers: ...
  • Page 120 GPRS. EDGE can carry data at speeds typically up to 384 kbit/s in packet mode. When EDGE is not available, your ICX35-HWC will fall back to GPRS for the connection to your cellular provider to provide continued connectivity.
  • Page 121 UMTS and EDGE. HSPDA (and HSUPA) falls back to UMTS, EDGE or GPRS (in order of precedence). This feature allows you to have seamless connectivity no matter where your ICX35-HWC is located. HSUPA HSUPA (High-Speed Uplink Packet Access) is a cellular technology which most closely resembles a broadband synchronous connection.
  • Page 122 ICX35-HWC ♦ Industrial Cellular Gateway Appendix A – Belden Horizon Remote Packet Capture 3G/4G LTE User Manual 12 Appendix A – Belden Horizon Remote Packet Capture A remote packet capture option is enabled from Belden Horizon to capture the tcpdump on LAN or WAN interface for a specified duration.
  • Page 123 ICX35-HWC ♦ Industrial Cellular Gateway Appendix A – Belden Horizon Remote Packet Capture 3G/4G LTE User Manual The captured tcpdump is stored in Belden Horizon. Once the file capture is complete, follow the prompts to save to your desktop. The file can be opened with Wireshark for analysis.
  • Page 124: Proxy Arp

    The example above has two subnets: 10.1.1.0 /24 and 10.2.2.0 /24. The routers (ICX35-HWC) are connected to both subnets via WAN connections. One ICX35- HWC network includes two hosts (H1 and H2), and the other ICX35-HWC network includes a server (S1).
  • Page 125: Configuring Proxy Arp In Icx35-Hwc

    2) H2 checks its ARP table to see if there is an entry for 10.2.2.100, if not it will send an ARP request. Since the S1 server is not on the 10.1.1.0 /24 subnet, the ICX35-HWC routers do not forward the broadcast and the ARP request never makes it to the S1 server.
  • Page 126: Proxy Arp Status Check

    ICX35-HWC ♦ Industrial Cellular Gateway Proxy ARP 3G/4G LTE User Manual 13.3 Proxy ARP Status Check To view the status of the Proxy ARP, go to Status > System Status > Proxy ARP. ProSoft Technology, Inc. Page 126 of 127...
  • Page 127: Support, Service & Warranty

    LED patterns  Details about the interfaced serial, Ethernet or Fieldbus devices Note: For technical support calls within the United States, ProSoft Technology’s 24/7 after-hours phone support is available for urgent plant-down issues. Europe / Middle East / Africa Regional Office North America (Corporate Location) Phone: +1.661.716.5100...

Table of Contents