Neither ProSoft Technology nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein. Information in this document including illustrations, specifications and dimensions may contain technical inaccuracies or typographical errors.
Page 3
Do not operate the ProSoft Technology Wireless products in any aircraft, whether the aircraft is on the ground or in flight. In aircraft, the ProSoft Technology Wireless products MUST BE POWERED OFF.
SIM Card Security ..................19 2.3.4 SIM Card PIN Verification ................19 2.3.5 Unblocking a SIM Card ................21 Connecting to the Internet Using the ICX35-HWC ........24 ICX35-HWC Webpage Status Tab ....................25 Configuration Tab ..................27 3.2.1 Basic ......................27 3.2.2...
Page 5
ICX35-HWC Diagnostic Data Retrieval ............. 82 6.3.2 ICX35-HWC Diagnostic Counter Reset ............. 84 6.3.3 Sending SMS Text Messages from the ICX35-HWC ........ 85 6.3.4 Retrieving SMS Text Messages from the ICX35-HWC ......87 6.3.5 Clearing SMS Text Messages from the ICX35-HWC ........ 88 6.3.6...
Page 6
Appendix A – Belden Horizon Remote Packet Capture Proxy ARP 13.1 Proxy ARP Sample Topology ..............124 13.2 Configuring Proxy ARP in ICX35-HWC ........... 125 13.3 Proxy ARP Status Check ................. 126 Support, Service & Warranty 14.1 Contacting Technical Support ..............127 14.2...
3G. These devices include PAC/PLCs, RTUs, DCS systems, instruments, electronic billboards and communication towers. The ICX35-HWC is ideal for programming and maintenance of remote equipment, remote data collection, SCADA, and machine-to-machine (M2M) applications. It operates on LTE/GSM and CDMA networks with a single device The ICX35-HWC supports: ...
10 to 30 VDC Peak Power Consumption < 6W Package Contents The following components are included with the ICX35-HWC and are required for installation and configuration. Important: Before beginning the installation, please verify all of the following items are present.
The custom username/password will also be reset to the defaults values. Reset (Power Cycle) Button The reset button is located at the bottom of the front panel of the ICX35-HWC. ProSoft Technology, Inc. Page 9 of 127...
Note: The onsite chassis/earth connection derived from the AC side of the main system power supply should not be connected to either negative or any other power terminal of ICX35-HWC. ProSoft Technology, Inc. Page 10 of 127...
Page 11
ICX35-HWC ♦ Industrial Cellular Gateway Start Here 3G/4G LTE User Manual To use the connector lever, insert it into the connector as shown: Press down on the installation tool to use it as a lever to open the connector’s contacts to insert a wire. A properly-wired power connector is shown: ProSoft Technology, Inc.
Note: ProSoft Discovery Service can also be used set a temporary IP address. PDS is a free software utility used to allow your PC to find a ProSoft Technology Ethernet-based product on a local network. It allows you to change its default IP address without being on the same subnet. It can be downloaded from: www.prosoft-technology.com.
Page 13
Connecting to the ICX35-HWC 3G/4G LTE User Manual Note: For the initial or default ICX35-HWC login, after the default username and password are used, the user will be prompted to change the password. The new password must comply with the following rules: 1.
ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual After 5 consecutive failed login attempts, you will not be allowed to login for next 10 minutes. The details and status are logged in syslog and /psft/loginRecords.txt. The last 100 login attempts are logged.
Page 15
• DHCP Range – This allows you to enter a range of IP addresses that can be addressed. For example, if you have a number of devices connected to a remote ICX35-HWC, you can enter the DHCP range to use on devices connected to the remote ICX35-HWC.
Page 16
If NO, disable the DHCP Server option. d) On the laptop, set the TCP/IPv4 properties. Non-PC devices, such PLC’s, do not require the Preferred DNS Server entry. In the ICX35-HWC configuration webpage, click A . The page automatically PPLY redirects to the new IP address if the IP address is changed.
SIM. 2.3.1 Connection Using GSM/GPRS The Subscriber Identity Module (SIM) in the ICX35-HWC is a smartcard that securely stores the key identifying a cellular subscriber. Generally, you will only need to install a SIM once in the life of the cellular gateway - and it may be pre-installed by your ProSoft Technology Representative.
Enter the APN (Access Point Name) in the Configuration > Basic section of the UI. The APN is provided by your cellular provider. After the ICX35-HWC reboots, it establishes a link to your cellular provider network, also called registering on the network, and then receives an IP address.
Most mobile devices offer SIM PIN protection. At startup, if the PIN security function is active, the user must enter a 4 to 8 digit PIN to enable the ICX35-HWC’s non- emergency functions. You can save the PIN code in the configuration in an encrypted format.
Page 20
(Example: AT&T). The next section discusses the unblocking process. When the SIM card is blocked, you will not be able to access the ICX35-HWC configuration webpage via the WAN connection. You can connect via the LAN (Ethernet) port until the SIM card is unblocked.
2.3.5 Unblocking a SIM Card If the wrong PIN Code is entered more than three times, the SIM card becomes blocked. During this time, ICX35-HWC WAN (cellular) connectivity is disabled. The SIM PIN status shows “SIM Blocked” on the Status > System Status webpage (WAN section).
Page 22
ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual The link takes you to the Configuration > Basic webpage (SIM Settings section). Contact your service provider to provide you with the PUK code. You will need the phone number that is assigned to the SIM card.
Page 23
ICX35-HWC ♦ Industrial Cellular Gateway Connecting to the ICX35-HWC 3G/4G LTE User Manual Upon success, the following message is displayed: The SIM Status is now Unlocked. PIN Verification can be enabled, as needed. ProSoft Technology, Inc. Page 23 of 127...
User Manual Connecting to the Internet Using the ICX35-HWC Internet connectivity through the ICX35-HWC is achieved using the following steps: Connect the laptop LAN port to the Ethernet port on the ICX35-HWC. On the laptop, set the TCP/IPv4 properties: Where: •...
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual ICX35-HWC Webpage There are three main tabs of the ICX35-HWC webpages: Status Configuration Administrator Status Tab The Status tab displays the current settings of the cellular gateway including up time, IP address, and cellular data usage.
Page 26
It counts each time the service has disconnected from the cellular service while the unit is running. IP address of the ICX35-HWC on the WAN Sent Bytes Number of sent bytes on the WAN port for this connection...
SIM Status Current state of SIM card. For more information, see SIM Card PIN Verification. Unlocked – The ICX35-HWC’s non-emergency functions are enabled. Locked – The non-emergency cellular functions are disabled and you must enter the PIN Verification to enable them.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.2.2 Advanced The Configuration > Advanced tab allows you to configure the following: Cellular Interface Cellular Usage Tracking DDNS Serial / Encapsulation NTP – Network Time Protocol ...
Page 29
*IPsec *Pass Through (End Device Address parameter is cleared) *Port Forwarding (All existing rules are cleared) Note: Excluding the Keep Alive parameter, the ICX35-HWC reboots when updating other WAN parameters (by clicking Apply). ProSoft Technology, Inc. Page 29 of 127...
Page 30
You can select Disabled Reached or Enabled. If you select Disabled, the ICX35-HWC will attempt to transfer data even if the Plan Size is exceeded, but the cellular data service provider may halt data, reduce the data rate, or charge additional fees.
Page 31
Important: For providers like DynDNS.org, the Time to Live (TTL) value may affect how long it takes an ICX35-HWC to see a change in IP address (for example, the IP address changes because of a reboot). It may take the ICX35-HWC upwards of 30 minutes to see the new address.
Page 32
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual The Client drop-down list includes the following options: Disable OpenVPN IPSec OpenVPN The Virtual Private Network (VPN) Tunnel allows you to access a private local network through the ICX35-HWC.
Page 33
IP address or hostname of the VPN server. This is the IP Address that you are creating the tunnel to. In the previous example, this is the public IP Address of the ICX35-HWC in pass through mode that is being used as the default connection to the Linux server.
Page 34
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Verification Once the client and server are configured, the client creates a VPN tunnel through the server to the LAN where the server resides. The Status webpage will indicate that an OpenVPN connection is established.
Page 35
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual IPSec The VPN Tunnel Internet Protocol Security (IPsec) feature consists of protocols used for authentication and encryption. Important: IPSec tunnel does not work with Public Dynamic IP’s and DDNS names.
Page 36
LAN-based devices that allow you to set the IP Address and Gateway IP address. Two ICX35-HWC radios and two PCs are used. Once the IPSec tunnel is created, communications can occur between the two PCs. IPSec uses the concept of Local ID and RemoteID to identify each device.
Page 37
LAN Device #2 (Connected to ICX35 #2) Parameter Description IP Address 192.168.0.30 (ICX35-HWC #2's end device IP address) Gateway 192.168.0.230 (ICX35-HWC #2's LAN IP address) Verification Once all four devices are configured, the status webpage in both of the ICX35- HWC’s will indicate that an IPSec VPN connection is made.
Page 38
This parameter sets the scheme for the serial port (RS-232 only). Note: For RS-422/485 network connectivity, an RS-232 to RS-422/485 converter is recommended. Baud Rate Baud rate used on the ICX35-HWC serial port Data Bits Number of data bits per character for the serial port Parity Parity type used on the serial port.
Page 39
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Generic The Generic option sends all serial data to a single destination. Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave) Timeout Bits Length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data.
Page 40
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus RTU The Modbus RTU option displays the following additional parameters: Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 41
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual If Slave is selected, the Encapsulation table is not visible. You can add an entry to the Client Table list. Click on the A button. NTRY LIENT ABLE The R button selects and removes entries from this list.
Page 42
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus ASCII The Modbus ASCII option displays the following additional parameters: Parameter Description Role Network role for the encapsulation process (Master, Slave, Master/Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 43
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus RTU to TCP The Modbus RTU to TCP option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits...
Page 44
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Modbus ASCII to TCP The Modbus ASCII to TCP option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits...
Page 45
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual DF1 Half-Duplex The DF1 Half-Duplex option displays the following parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 46
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual DF1 Full-Duplex The DF1 Full-Duplex option displays the following additional parameters. Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Sets the length of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 47
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual DF1 Radio Modem The DF1 Radio Modem option displays the following additional parameters: Parameter Description Role Specifies the network role for the encapsulation process (Master, Slave). Timeout Bits Amount of time the gateway will wait when no further serial data is received before encapsulating and transmitting data (0 to 65535).
Page 48
NTP Server Server time updates for the ICX35-HWC. Example: pool.ntp.org NTP Mode Client - NTP process will query NTP server and update ICX35-HWC system time. Client/Server - NTP process will query NTP server and update ICX35-HWC system time and resolve NTP requests from the LAN clients.
Page 49
3G/4G LTE User Manual EIP – EtherNet/IP The ICX35-HWC can run as an explicit message server and will respond to requests received on the LAN. An SMS message can be sent to user(s) upon alarm. ProSoft Technology, Inc. Page 49 of 127...
Page 50
3G/4G LTE User Manual Modbus TCP Agent The ICX35-HWC can run as a Modbus TCP/IP server to remote Modbus TCP/IP device(s). Enabling the Modbus TCP Agent is a prerequisite for Diagnostics & SMS features. See Modbus TCP/IP Communications for more information.
Page 51
ICX35-HWC Webpage 3G/4G LTE User Manual Connection Recovery The Connection Recovery is used to trigger a reboot of the ICX35-HWC when there is a loss of connectivity or if the ICX35-HWC stops communicating. The reboot trigger conditions are: Loss of communications to a known endpoint WAN IP ...
Page 52
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Proxy ARP Proxy ARP is a technique in which a proxy server on a given network answers the Address Resolution Protocol (ARP) queries for an IP address that is not on that network.
HWC LAN. Port Forwarding allows a remote client device to access multiples server devices connected to the ICX35-HWC LAN by associating each one of these devices to an ICX35-HWC port number. Up to 10 mappings can be created. Pass Through...
Page 54
Exception Ports Lists the ports included in the From Port Range interval that are already in use by services running on the ICX35-HWC, and will not be forwarded to the end device connected to the LAN port. When the fields above are complete, click the A button to load the parameters into the table.
Configuration Restore * button allows you to locate and select the configuration file to be restored. The Restore button restores the file. Restores the ICX35-HWC to factory defaults – the previous Reset Gateway to Default Configuration configuration is lost. A countdown timer is used during the reset. When the countdown is complete, the webpage will be redirected to the factory default webpage address 192.18.0.250.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.2 Access Control Parameter Description Web Access Web Port Web access port number Web Protocol HTTP or HTTPS Web Access on WAN Allows or blocks webpage access from the WAN.
Page 57
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Adding Entries to the Whitelist Click on the A NTRY TO ELLULAR NTERFACE HITELIST button. This displays a line entry in which you can enter an IP address. Whitelist entries can either be single IP addresses (e.g., 50.40.20.15) or IP addresses followed by a CIDR netmask (e.g., 50.40.20.0/8) allowing subnets to be...
Page 58
Depending on your browser, you may encounter a warning message. It warns that the page was not securely loaded due to the unknown verification of a ProSoft site certificate. You may need to add an exception in your browser to proceed to the ICX35-HWC webpage. Google Chrome Click on the A link.
Page 59
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Firefox Click on the A link. DVANCED … link. Click on the A XCEPTION In the Add Security Exception window, click on the C ONFIRM ECURITY button. XCEPTION ProSoft Technology, Inc.
Page 60
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual Internet Explorer Click on the C link. ONTINUE TO THIS WEBSITE Safari Click on the C button. ONTINUE ProSoft Technology, Inc. Page 60 of 127...
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.3 Logs Parameter Description System Log Level (1 to 8) Specifies how much information is saved to the log file. Lower numbers limit the log entries to more critical information, while higher numbers include information useful for troubleshooting.
ICX35-HWC Webpage 3G/4G LTE User Manual 3.3.4 SMS The SMS text message contents of the ICX35-HWC buffer can be viewed using this feature. You can also send an SMS text message to a valid SMS recipient. SMS Settings Parameter Description Message Center This is used to configure the Message Center Number used to send SMS.
Page 63
SMS text message to be sent, up to 160 characters. It supports the GSM Basic Character Set. Note: Messages stored in the ICX35-HWC are retrieved using the FIFO rule: The first message received is the first to be retrieved, and so on.
WAN IP address or hostname to be pinged and click the P button. 3.3.6 License This section contains a list of the software contained in the ICX35-HWC. It includes the Open Source Software and its license terms. ProSoft Technology, Inc.
ProSoft Technology cellular radios on the network. Activation Belden Horizon requires you to activate the ICX35-HWC upon initial use. On the Configuration webpage, click on Administrator > System. Under the Belden Horizon section, click on the A button.
Page 66
Once logged in, you can take a tour of the features of the Belden Horizon utility. When ready, activate the ICX35-HWC within the tour, or you can click on the button at the top of the screen. It will prompt you for the ATEWAY Activation Key.
Caution: The ICX35-HWC has a hardened enclosure, and is designed for use in industrial and extreme environments. Unless you are using cables expressly designed for such environments, they can fail if exposed to the same conditions the ICX35-HWC can withstand.
ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual Connecting the Radio to a Network Device The application ports are located on the front of the radio. The Ethernet port uses a standard RJ45 connector The serial port uses a standard DB9 connector for serial connectivity ProSoft Technology, Inc.
ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual 5.2.1 Ethernet Cable Specifications The recommended Ethernet cable is category 5 or better. A category 5 cable has four twisted pairs of wire that are color-coded and cannot be swapped. The module only uses two of the four pairs when running at 10 MBit or 100 MBit speeds.
ICX35-HWC ♦ Industrial Cellular Gateway Hardware Installation 3G/4G LTE User Manual 5.2.2 Serial Port Basics RS-232 The use of hardware handshaking (control and monitoring of signal lines) depends on the requirements of the networked device. If no hardware handshaking will be...
ICX35-HWC is powered off Status) Solid Green ICX35-HWC has a connection to cellular tower Blinking Green ICX35-HWC is attempting to connect to cellular tower Solid Red Duplicate IP (EtherNet/IP) / Non-recoverable network fault Blinking Red Established connection timeout (EtherNet/IP) / Minor network fault (*) The MS and NS LED’s are only enabled if the Ethernet/IP parameter is enabled in...
Page 72
It is not an indicator of a logical connection state. There may be a situation when you may see a “Disconnect, will retry” indicator on the ICX35-HWC webpage, even when the WWAN LED light is on (solid green). This indicates that the module was able to make a physical connection to the tower, but the logical connection was not made between the ICX35-HWC and the cellular provider.
LAN directly connected to a PLC. The PLC code can monitor the values and if/when a value is out of range, and SMS message is sent to a user via the ICX35-HWC. The user can then send a SMS back to the PLC to clear the notification.
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Creating a New RSLogix 5000 Project Open the File menu and select New. Select your controller Type. Select the Revision of your controller. (Revision 16 or newer only) Enter a Name for your controller, such as "My_Controller".
Integration with the Logix family in Studio 5000 makes use of the EDS Add-On- Profile (AOP). Using RSLinx, the EDS file can be uploaded from the ICX35-HWC. When complete, the EDS Hardware Installation Tool is invoked to complete the registration.
Page 76
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual This action opens the Select Module Type dialog box. Select the 1756-ENBT under the Communication Module Type Category and click the C REATE button. Enter the Name, Slot, Revision, and IP Address of the 1756-ENBT module and click OK.
BRIDGE module under the Communication directory and click the C REATE button. This opens the New Module dialog box. Enter ‘ICX35’ as the Name. Enter the LAN IP address of the ICX35-HWC. This is the connection to the outside world for the 1756-ENBT. Click OK. ProSoft Technology, Inc.
Page 78
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual The ETHERNET-BRIDGE now appears in the Controller Organizer window under the 1756-ENBT module. Double click the ETHERNET-BRIDGE icon in the Controller Organizer window to open the Module Properties window. Click on the Connection tab and check the Inhibit Module box.
User Manual Importing the AOI Note: When importing an ICX35-HWC AOI file into a new project, use the ICX35-HWC AOI v1.6 file from www.prosoft-technology.com. Also, the ICX35-HWC firmware version must be v1.2.2 or later. In the Controller Organizer window, expand the Tasks folder and subfolders until you reach the MainProgram folder.
Page 80
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Navigate to the location on your PC where you saved the Add-On Instruction (for … button. example, Desktop). Select the .L5X file and click the I...
Page 81
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Click OK to confirm the import. RSLogix will indicate that the import is in progress: When the import is complete, the new rung with the Add-On Instruction will be visible as shown in the following illustration.
User Manual EtherNet/IP and SMS Text Message Features 6.3.1 ICX35-HWC Diagnostic Data Retrieval The ICX35-HWC AOI can retrieve the ICX35-HWC status from the radio and display it in RSLogix 5000. Enter ‘1’ in the ICX35.CONTROL.Get_Status controller tag and press E NTER The ICX35.STATUS array populates with the ICX35-HWC status.
Page 83
ICX35-HWC IMEI number * These parameters can be reset to 0. These tags provide a placeholder value when the ICX35-HWC WAN/LAN is disconnected or in a Connecting state. Tip: To check if a new SMS text message is received, monitor the ICX35.STATUS.SMS_MSGs_Received controller tag.
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual 6.3.2 ICX35-HWC Diagnostic Counter Reset The following ICX35-HWC status parameters can be reset to 0. They cannot be individually reset. ICX35.STATUS.Min_RSSI ICX35.STATUS.Max_RSSI ICX35.STATUS.Cell_Net_Disconnects ICX35.STATUS.LAN_KBytes_Sent ICX35.STATUS.LAN_KBytes_Received ICX35.STATUS.WAN_KBytes_Sent ICX35.STATUS.WAN_KBytes_Received...
User Manual 6.3.3 Sending SMS Text Messages from the ICX35-HWC Using the ICX35-HWC AOI, SMS text messages can be sent from the ICX35-HWC to SMS text devices. AT&T Users: For SMS texting functionality, you must power up the ICX35-HWC with the SIM installed within 72 hours after AT&T activates the SIM card.
Page 86
ICX35-HWC ♦ Industrial Cellular Gateway EtherNet/IP and SMS Text Messaging 3G/4G LTE User Manual Enter the SMS text message recipient/phone number(s) in the ICX35.SMS.WRITE.Phone_Number_x controller tag(s). Example: To send an SMS text message to phone number (800)111-2222, the format should be entered into the ICX35.SMS.WRITE.Phone_Number_x controller tag array as follows: +18001112222 To trigger the SMS text messages, enter ‘1’...
User Manual 6.3.4 Retrieving SMS Text Messages from the ICX35-HWC Using the ICX35-HWC AOI, SMS text messages that have been sent to the ICX35- HWC from remote devices can be transferred into RSLogix 5000. AT&T Users: For SMS texting functionality, you must power up the ICX35-HWC with the SIM installed within 72 hours after AT&T activates the SIM card.
3G/4G LTE User Manual Warning: The ICX35-HWC should not receive SMS messages faster than once every 30 seconds; otherwise it may repeatedly disconnect from the cellular network. Warning: The ICX35-HWC must not buffer more than 500 received SMS messages before transmission to RSLogix 5000;...
3G/4G LTE User Manual 6.3.6 Rebooting the ICX35-HWC This controller tag reboots the ICX35-HWC. Note: This feature requires ICX35-HWC v1.4.78 firmware or later. Enter ‘1’ in the ICX35.CONTROL.Reboot controller tag and press E NTER ProSoft Technology, Inc. Page 89 of 127...
Diag.IMEI 30072 to 30081 SINT[20] ICX35-HWC IMEI number * These parameters can be reset to 0. These tags provide a placeholder value when the ICX35-HWC WAN/LAN is disconnected or in a Connecting state. ProSoft Technology, Inc. Page 90 of 127...
Diag.SMS_MSGs_Sent Diag.SMS_MSGs_Received Diag.SMS_MSGs_Rx_Free_Buffer_Counter Use Modbus Function Code 6 write a value of ‘1’ to 40001 in the ICX35-HWC. Sending SMS Text Messages to the ICX35-HWC Using the Modbus Function Codes 6 and 16, a Modbus TCP/IP Client can send SMS text message contents to the ICX35-HWC.
Using the Modbus Function Code 4, a Modbus TCP/IP Client can read the SMS text message contents, date/time, and its phone number origination. Below is a table of the ICX35-HWC Modbus addresses used to read the SMS text message information.
Watchdog 3G/4G LTE User Manual Watchdog The Connection Recovery watchdog mechanism is used to reboot the ICX35-HWC when there is a loss of connectivity or halts for any other reason. There are multiple scenarios for the watchdog functionality: No Belden Horizon connection due to no data plan left ...
ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual Watchdog Scenarios There are several scenarios in which the watchdog is triggered: A. No Belden Horizon connection due to no data plan left. This scenario is activated if: The device is active in Belden Horizon;...
Page 95
ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual B. No Belden Horizon connection and data plan left. This scenario is activated if: The device is active in Belden Horizon; The number of attempts to reach Belden Horizon are less than the configured threshold (watchdog/percentatagefail);...
Page 96
ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual D. No Belden Horizon connection and usage monitoring disabled. This scenario is activated if: The device is active in Belden Horizon; The number of attempts to reach Belden Horizon are less than the configured threshold;...
Page 97
ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual F. No Belden Horizon connection while endpoint address is reachable. The default endpoint address present in the configuration file is 8.8.8.8 (watchdog/endpointaddr=8.8.8.8). This scenario is activated if: The device is active in Belden Horizon;...
The watchdog parameters can be manually edited by exporting the configuration file from the ICX35-HWC. Export the configuration file from the ICX35-HWC. In the newly exported configuration file, look for the watchdog parameters. They are pointed out in the example below (marked in bold):...
Page 99
ICX35-HWC ♦ Industrial Cellular Gateway Watchdog 3G/4G LTE User Manual C. watchdog/enabled=1 By default the watchdog mechanism is enabled in the configuration file (1=enabled; 0=disabled). Note: The watchdog/enabled=1 has no effect if watchdog/armed is set to 0. D. watchdog/percentagefail=10 This parameter shows the percentage of successful attempts to: - Ping the configured endpoint address (check watchdog/endpointaddr parameter;...
Watchdog 3G/4G LTE User Manual Watchdog Configuration on ICX35-HWC Webpage A number of the Watchdog parameters are found on the ICX35-HWC webpage. They can be found at: Configuration > Advanced > Connection Recovery. You have the options to: Enable/disable the...
Warning: If you are using an ICX35-HWC with ProSoft Technology’s Add-on Instruction for Rockwell Automation Studio 5000 and wish to install the ICX35-HWC firmware to v1.2.2 or later, the AOI v1.5 will no longer work. After the firmware install, you will also need to update the PLC program with the new AOI v1.7.
Gateway Firmware Install Important: If the current firmware is older than v1.1 (Example: 766, 1.0, etc.), you will need to upgrade to v1.1 first, then to latest firmware available. Please contact ProSoft Technology technical support for the v1.1 firmware file.
ICX35-HWC ♦ Industrial Cellular Gateway Firmware Procedures 3G/4G LTE User Manual Radio Firmware Install On the ICX35-HWC webpage, click on ADMINISTRATOR > SYSTEM. Under the Radio Firmware Install section, click the C button. HOOSE Browse to the *.spk firmware file location and click OK.
To install the internal radio software, follow the steps in the Radio Firmware Install section. Note: You can select to have ICX35-HWC radios shipped in the Verizon (CDMA) mode by ordering part number ICX35-VZW when placing the order for the ICX35-HWC-A.
This chapter does not go into End Device configuration procedures since it is assumed the user knows how to configure End Devices. However, examples are provided to show how the End Device is configured along with the ICX35-HWC. ProSoft Technology, Inc.
The following diagram illustrates a Pass Through mode configuration example: In this scenario, the laptop wants to communicate with a ControlLogix rack. To configure the ICX35-HWC, you must supply: WAN IP – This number is supplied by the cellular provider.
Log in to the ICX35-HWC built-in web server. Navigate to Configuration > Basic. Enter the Gateway Name and APN of your network. Using the previous example, the ICX35-HWC IP Address is 192.168.1.100. This is configured in the IP Address and Subnet Mask fields. Click the A button.
Address and Subnet Mask addresses. 10.1.4 Obtaining Data from the End Device A user trying to reach the end device through the ICX35-HWC must address the WAN ID (in this case, 166.132.10.56 provided by the cellular provider). ProSoft Technology, Inc.
In this scenario, Virtual OpenVPN addresses are assigned by the VPN server. If the end device 172.020.000.220 wants to communicate with 192.168.000.211, it must address the device through the ICX35-HWC VPN address. The ICX35-HWC routes the request as it would a Pass Through device.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.2.1 ICX35-1 Configuration Parameters In this scenario, configure the ICX35-1 for Pass Through. Log in to the ICX35-1 built-in web server. Navigate to Configuration > Basic. Enter the Gateway Name and APN of the network.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.2.2 Enable Pass Through Navigate to Configuration > Firewall. Enable the Status parameter under the Pass Through heading. Enter the IP Address of the device connected to the ICX35-1 (172.020.000.220) in the End Device Address parameter...
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.2.5 Configuring OpenVPN Parameters You must now configure OpenVPN parameters on both ICX35-HWC radios. Navigate to Configuration > Advanced. Click on the VPN link. Select O VPN from the drop-down list box.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.3 OpenVPN with DHCP Enabled Example The following diagram illustrates the use of OpenVPN with DHCP enabled. ProSoft Technology, Inc. Page 113 of 127...
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.3.1 ICX35-1 Configuration The ICX35-1 shown in the diagram is configured in the ICX35-1 webpage as follows: Login to the ICX35-1 web server. Navigate to Configuration > Basic.
10.3.3 End Device Configuration End devices must be configured based on the DHCP assignments. The Gateway settings must match the LAN IP of the ICX35-HWC. This must be done on both ICX35-HWC radios. When setting up Ethernet Bridges, set the IP address to the DHCP assigned addresses.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.4 OpenVPN with Username and Password Authentication 10.4.1 Configuring the Username/Password as the Only Method of Authentication Configuring the Client Enable U by checking the box. ASSWORD UTHENTICATION Enter the Username and Password.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.4.2 Configuring the Username and Password with Certificates Configuring the Client Enable U by checking the box. ASSWORD UTHENTICATION Enter the Username and Password. Provide the Certificate Authority, Client Certificate, and Client Key files.
ICX35-HWC ♦ Industrial Cellular Gateway ICX35-HWC Tech Notes 3G/4G LTE User Manual 10.5 Connecting to Multiple OpenVPN Servers This section details the connection between an ICX35-HWC and two OpenVPN servers. Navigate to Configuration > Advanced. Click on the VPN link. Select O VPN from the drop-down list box.
UI, the uploaded certificate and key files will take precedence. Select Protocol to match the OpenVPN Server 2 protocol. 10.5.1 Troubleshooting Multiple OpenVPN Servers Below are items to consider when connecting the ICX35-HWC to multiple OpenVPN servers: ...
Page 120
GPRS. EDGE can carry data at speeds typically up to 384 kbit/s in packet mode. When EDGE is not available, your ICX35-HWC will fall back to GPRS for the connection to your cellular provider to provide continued connectivity.
Page 121
UMTS and EDGE. HSPDA (and HSUPA) falls back to UMTS, EDGE or GPRS (in order of precedence). This feature allows you to have seamless connectivity no matter where your ICX35-HWC is located. HSUPA HSUPA (High-Speed Uplink Packet Access) is a cellular technology which most closely resembles a broadband synchronous connection.
Page 122
ICX35-HWC ♦ Industrial Cellular Gateway Appendix A – Belden Horizon Remote Packet Capture 3G/4G LTE User Manual 12 Appendix A – Belden Horizon Remote Packet Capture A remote packet capture option is enabled from Belden Horizon to capture the tcpdump on LAN or WAN interface for a specified duration.
Page 123
ICX35-HWC ♦ Industrial Cellular Gateway Appendix A – Belden Horizon Remote Packet Capture 3G/4G LTE User Manual The captured tcpdump is stored in Belden Horizon. Once the file capture is complete, follow the prompts to save to your desktop. The file can be opened with Wireshark for analysis.
The example above has two subnets: 10.1.1.0 /24 and 10.2.2.0 /24. The routers (ICX35-HWC) are connected to both subnets via WAN connections. One ICX35- HWC network includes two hosts (H1 and H2), and the other ICX35-HWC network includes a server (S1).
2) H2 checks its ARP table to see if there is an entry for 10.2.2.100, if not it will send an ARP request. Since the S1 server is not on the 10.1.1.0 /24 subnet, the ICX35-HWC routers do not forward the broadcast and the ARP request never makes it to the S1 server.
ICX35-HWC ♦ Industrial Cellular Gateway Proxy ARP 3G/4G LTE User Manual 13.3 Proxy ARP Status Check To view the status of the Proxy ARP, go to Status > System Status > Proxy ARP. ProSoft Technology, Inc. Page 126 of 127...
LED patterns Details about the interfaced serial, Ethernet or Fieldbus devices Note: For technical support calls within the United States, ProSoft Technology’s 24/7 after-hours phone support is available for urgent plant-down issues. Europe / Middle East / Africa Regional Office North America (Corporate Location) Phone: +1.661.716.5100...
Need help?
Do you have a question about the ICX35-HWC and is the answer not in the manual?
Questions and answers