95%, which ensures high stability and reliability under severe conditions. The TK500 can be used on the workplace or mounted on DIN rails. TK500 series products support VPN (IPSec / PPTP / L2TP / GRE / SSL VPN), ensuring secure connections bet- ween remote devices and customer sites.
Page 5
Welotec - TK500 Router Series Manual WEEE notice The European Directive on the Disposal of Waste Electrical and Electronic Equipment (WEEE), which entered into force on 13 February 2003, has led to major changes in the reuse and recycling of electrical equipment.
Welotec - TK500 Router Series Manual 1.1. Package checklist Each TK500 wireless router comes bundled with standard accessories. Additional accessories can be ordered. Carefully check the contents of your package, and if something is missing or damaged, contact your distribu- tor from Welotec GmbH.
Welotec - TK500 Router Series Manual 1.2. Product information 1.2.1. Environmental conditions Operating temperature: -15°C to +70°C Relative humidity during operation: 5 to 95% non-condensing Storage temperature: -40°C to +85°C 1.2.2. Power supply Power supply: 1 Terminal block (7-pin) incl. voltage socket and serial connection Input volatge: 12 - 24 V DC 1.2.3.
With TK500 series routers you can connect devices with Ethernet, Wi-Fi or RS-232/485 to the Internet via GPRS / HSUPA / UMTS / LTE. To ensure security and uninterrupted access, the TK500 Series supports VPN connections, enabling remote access and secure data transmission over the Internet.
Page 9
Welotec - TK500 Router Series Manual Description of LED signal Signal: 1-9 (bad signal, the router cannot operate properly. Please check the antenna connection and the local signal strength of the mobile network.) Signal: 10-19 ( router is operating normally )
2.3.3. Power supply Connect the supplied power supply to the unit, and make sure that the Power LED is on. Contact Welotec Technical Support if no indicator lights up. You can configure the TK500 when the power indicator is flashing.
Page 11
Welotec - TK500 Router Series Manual Click on „LAN connection“ and open the screen with the “Status of LAN connection”: Click on „Properties“ and open the LAN connection properties screen: Welotec GmbH • www.welotec.com • info@welotec.com Page 11 of 81 Pages...
Page 12
Welotec - TK500 Router Series Manual Select „Internet Protocol Version 4 (TCP / IPv4)“, click the „Properties“ button, and check if your PC can obtain IP and DNS address automatically. (You can also set up the PC in the subnet: 192.168.2.0/24, eg IP: 192.168.2.10, Netmask: 255.255.255.0, Default Gateway: 192.168.2.1)
Welotec - TK500 Router Series Manual The following example has errors: The connection is not working properly and you should review the instructions and improve your settings. 2.3.6. Configuring the TK500 (optional) After completing the steps in the previous chapter, you can configure the router: Open any internet browser (such as Google Chrome) and enter the default IP address of the router: http://192.168.2.1.
Page 14
Welotec - TK500 Router Series Manual Change the IP configuration: After configuring, click „Apply“ to activate the configuration. If you want to set your own IP, follow the instructions below: Click on Network >LAN. Change the IP address in 192.168.1.254: Welotec GmbH •...
Welotec - TK500 Router Series Manual Click on „Apply“, and you will see the following: The IP address of the TK500 has been changed. In order to access the configuration page again, the PC must be set up in the same subnet, for example: 192.168.1.10/24 – Then enter the changed IP address (192.168.1.254) in your browser.
Page 16
Welotec - TK500 Router Series Manual Once you have set the correct configuration, the TK500 can now connect to the Internet. Open an Internet browser, enter „www.welotec.com“ and the Welotec website will open. Welotec GmbH • www.welotec.com • info@welotec.com Page 16 of 81 Pages...
Welotec - TK500 Router Series Manual 2.4. Reset to factory settings 2.4.1. Hardware method = LED on = LED off = LED flashing Press the RESET button while turning on the TK500: STATUS WARN RESET As soon as the ERROR LED lights (about 10 seconds after switching on), release the RESET button:...
Welotec - TK500 Router Series Manual 2.4.2. Web method Log in to the web-based UI of the TK500 and select System > Config Management: Click Restore default configuration to reset the TK500 to its factory defaults. Then the router is re- booted.
Welotec - TK500 Router Series Manual sysTem Before using the TK500 router it must be properly configured. This chapter describes the web-based configu- ration. Preparation First connect your devices to the TK500 via cable or hub (switch) and set the IP address for the PC and TK500 on the same subnet, for example: set the PC IP address to 192.168.2.2, Netmask: 255.255.255.0, Gateway...
Page 20
Welotec - TK500 Router Series Manual Open an Internet browser and enter the IP address of the TK500: http://192.168.2.1 (default IP of the TK500). On the following login page, you must log in as an administrator. Enter the username and password (default: adm/123456).
Welotec - TK500 Router Series Manual 3.1. System The system settings include the following nine sections: Basic Setup, Time, Serial Port, Admin Access, System Log, Config Management, Scheduler, Upgrade, Reboot, and Logout. 3.1.1. Basic Setup In the Basic Setup you can adjust the voice guidance of the menu as well as the host name. This menu item can be accessed via System >...
Welotec - TK500 Router Series Manual 3.1.2. Time This menu item allows you to adjust the system time of the router. Furthermore, it is possible to set up a time server (NTP Time Server) to automatically keep the system time up to date.
Welotec - TK500 Router Series Manual 3.1.3. Serial Port You can adjust the settings for the serial interface of the router via the menu item System > Serial Port. Name Description Standard Baud rate Serial baud rate 115200 Data Bits...
Welotec - TK500 Router Series Manual Name Description Standard Username/Password Username for login to the configuration Username page Changing the password requires entering Old Password 123456 the old password New Password Enter new password Confirm New Password Enter new password again...
Welotec - TK500 Router Series Manual Name Description Standard Disabled (if enabled, IP address Log to Remote System Enable remote log server and port can be entered) Set the IP address and port of the IP Address/Port (UDP) Port: 514...
Welotec - TK500 Router Series Manual Name Description Enable Turn the auto reboot on or off Time Time at which the TK500 router should be rebooted Days Selection Everyday for the daily restart 3.1.8. Upgrade In this area, the router provides an interface for updating the firmware. Select System > Upgrade.
Welotec - TK500 Router Series Manual 3.1.9. Reboot If you need to reboot your router, select System > Reboot. Then click „OK“ to reboot the system. 3.1.10. Logout To log out of the system, click on System > Logout and confirm the logout with „OK“.
Welotec - TK500 Router Series Manual 3.2. Network Network settings allow you to configure Dial-up, WAN, Link Backup, LAN, WLAN, DNS, DDNS, Static route, etc. 3.2.1. Dialup In this menu area, you define and configure the dial-in of your router. Select Network > Dialup.
Page 29
Welotec - TK500 Router Series Manual Name Description Standard Enable Enables the dialup function enabled Time Schedule Set time for online and offline (see also 3.2.1.1) Shared Connection (NAT) Enabled - device connected to router enabled Default Route Mobile interface as a standard route to the Internet...
Welotec - TK500 Router Series Manual 3.2.1.1. Schedule Management Schedule management (next to “Time schedule”): Here you can run your own dialup strategy, which means that you can specify over three time periods here when the router should be online.
Welotec - TK500 Router Series Manual 3.2.2. WAN (only for TK5x5L-W, TK5x5L, TK5x5U) Here you can set up a new WAN (Wide Area Network). Accessible via Network > WAN. On this page you can specify the type of WAN port:...
Welotec - TK500 Router Series Manual Name Description Standard Type Static IP disabled Enabled - local device connected to the router can Shared Connection (NAT) enabled access the Internet Default Route Mobile interface as standard route to the Internet enabled...
Welotec - TK500 Router Series Manual 3.2.2.3. ADSL Dialup (PPPoE) Name Description Standard Type ADSL Dialup (PPPoE) Enabled - local device connected to the router can Share Connection (NAT) Enabled access the Internet Default Route Mobile interface as standard route to the Internet...
Welotec - TK500 Router Series Manual Expert Options Determine expert parameters empty ICMP Detection Server Set server for ICMP detection empty ICMP Detection Intervall Set time for ICMP detection ICMP Detection Timeout Set timeout for ICMP detection Set the Maximum Number of Repetitions for ICMP...
Welotec - TK500 Router Series Manual 3.2.5. Use the LAN menu area to adjust the settings for the LAN connection of the router and add Multi-IP settings. Accessible via Network > LAN. Name Description Standard Selection between static IP ad-...
Welotec - TK500 Router Series Manual 3.2.6. Switch WLAN Mode You can make settings for the WLAN type here. A distinction is made between Access Point (AP) and Station (STA). You can reach it under Network > Switch WLAN Mode.
Page 37
Welotec - TK500 Router Series Manual Name Description Standard Enable Switching WLAN on/off SSID Broadcast When enabled, the SSID is sent enabled Choice between various WLAN Mode 802.11 b/g/n modes, e.g. 802.11 b/g/n Transmission channel. Selection Channel between 1 and 13 or automatic...
Welotec - TK500 Router Series Manual 3.2.7.1. WLAN Client If the point STA was selected as WLAN type when configuring the Switch WLAN Mode (s. 3.2.6.) WLAN configuration is no longer possible. Then you can only configure the TK 500 as WLAN Client. This can be done under Network >...
Welotec - TK500 Router Series Manual 3.2.9. DDNS (Dynamic DNS) DDNS or dynamic DNS is used if the WAN connection does not have a fixed public IP address, but services are still to be accessed externally. Since the IP address of the provider can change again and again with a normal WAN connection, it is not possible to set up a secure VPN tunnel, for example.
Page 40
Welotec - TK500 Router Series Manual No-IP is used here as an example for the setup. For this you need a No-IP account, which you have to create yourself. Here there are various providers, some of which are free, but also liable to pay costs. The assignment of the Dynamic DNS can be assigned to the WAN as well as to the Dialup connection.
Welotec - TK500 Router Series Manual DDNS Empty Password Registered Password for DDNS Empty Hostname Registered Hostname for DDNS Empty Can be activated if wildcard Wildcard Deactivated should be used Entering an MX Record Empty Can be activated if MX-Record is...
Welotec - TK500 Router Series Manual 3.3. Services Within the service settings, configure the DHCP service, DNS forwarding, VRRP and other related parameters. 3.3.1. DHCP Service The Dynamic Host Configuration Protocol (DHCP) is a communication protocol in network technology. It allows the assignment of the network configuration to clients by a server.
Welotec - TK500 Router Series Manual 3.3.2. DNS Relay If DNS relay is enabled (by default, if DHCP is set up), DHCP clients are assigned the IP address of the router as DNS server. All DNS requests to the router are sent to your Internet service provider‘s DNS servers. If DNS relay is disabled, the router assigns the Internet service provider‘s DNS servers to the DHCP clients.
Page 44
Welotec - TK500 Router Series Manual The TK500 Series offers the opportunity to build two different groups VRRP (VRRP I and VRRP II). Name Description Standard Enable VRRP-I Select to activate VRRP Deactivated Group ID Select group ID for router (range 1-255)
Welotec - TK500 Router Series Manual 3.3.4. DTU stands for Data Terminal Unit and is used to connect devices with a serial interface (RS-232 and RS-485). You can create the configuration under Services > DTU. When DTU is enabled, the console port is automati- cally disabled.
Welotec - TK500 Router Series Manual The selection fields may vary depending on the selection of the DTU protocol. 3.3.5. The TK500 can be reached via SMS from outside and reacts to various commands sent via SMS. You have the possibility to query the status of the device or to restart the device.
Welotec - TK500 Router Series Manual SMS that you receive on your mobile phone: Host: (SN); Uptime: (the operating time of the router at the time of this reboot); State: (Online/Offline) (Wireless WAN IP) LAN: (Ready) (LAN-IP) 3.3.6. Traffic Manager The Traffic Manager can be used to provide the data consumption of the dial-up connection interface.
Welotec - TK500 Router Series Manual 3.3.7. Alarm Manager The Alarm Manager can be used to generate various alarms. You can configure this option under Services > Alarm Manager. Name Description Standard Alarm Input Here you select the areas for which an alarm is to be generated.
Welotec - TK500 Router Series Manual 3.4. Firewall Via the Firewall menu item you can set the parameters for the firewall of the router. Various settings are pos- sible here. 3.4.1. Basic Here you can configure the basic settings of the firewall.
Welotec - TK500 Router Series Manual Name Description Standard Enable Click to enable filtering Enabled Selection of the protocol. The options "TCP"/"UD- Proto P"/"ICMP" are possible. Source Set source IP address Empty Source Port Set source port if appropriate protocol is selected...
Welotec - TK500 Router Series Manual 3.4.4. Port Mapping NAT-PMP (NAT Port Mapping) allows a computer on a private network (behind a NAT router) to automati- cally configure the router so that devices behind the router are accessible from outside the private network.
Welotec - TK500 Router Series Manual Name Description Standard Virtual IP for Router Set virtual IP for router Empty Source IP Range Set range of source IP addresses Empty Virtual IP Set virtual IP Empty Real IP Set real IP...
Welotec - TK500 Router Series Manual With this function it is not possible to assign the management port of the TK500 (e.g.: 80 TCP) to the port of the device. To forward port 80, change the router‘s management port in System > Admin Access.
Welotec - TK500 Router Series Manual 3.5. QoS In the TCP/IP world, QoS describes the quality of a communication service from the user‘s point of view. The network service quality is often defined by the parameters bandwidth, delay, packet loss and jitter.
Page 55
Welotec - TK500 Router Series Manual Name Description Standard Enable Click to activate Deactivated Specifying the bandwidth for the Download Bandwith 1000 kbps download Setting the bandwidth for the Upload Bandwith 1000 kbps upload Selection of the interface to which...
There are different types of VPN connections (tunnels) that can be configured in this menu item for the TK500 series. Overview of existing VPN connections. With Add a new tunnel can be created, see 3.6.2.
Welotec - TK500 Router Series Manual The change of address via NAT is evaluated by a VPN gateway as a security-critical change of the data packets, the VPN negotiation fails, no connection is established. These problems occur, for example, when dialing in via some UMTS mobile networks where the network operator‘s servers do not support address con-...
Page 58
Welotec - TK500 Router Series Manual On this page the web-based parameters for the TK500 are presented. Name Description Standard Show Advanced Options Click to activate advanced options Deactivated Basic Parameters Tunnel Name Name for the tunnel IPSec_tunnel_1 Specifying the destination address of...
Page 59
Welotec - TK500 Router Series Manual Selection field for various setting opti- Tunnel Type Subnet – Subnet Mode Local Subnet Set Protected IPSec Subnet (Local) 192.168.2.1 Local Netmask Set Protected IPSec Subnet Mask (Local) 255.255.255.0 Setting a Protected IPSec Subnet (Re- Remote Subnet 0.0.0.0...
Welotec - TK500 Router Series Manual 3.6.3. GRE Tunnels Generic Routing Encapsulation (GRE) is a network protocol developed by Cisco and defined in RFC 1701. Via GRE other protocols can be packed and transported in an IP tunnel. GRE uses the IP protocol 47, the GRE header is structured as follows: A GRE package consists of an IP-Header, a GRE-Header and the actual payload.
Welotec - TK500 Router Series Manual 3.6.4. L2TP Clients Layer 2 Tunneling Protocol (L2TP) is a network protocol that tunnels frames of OSI model backup layer pro- tocols through routers between two networks over an IP network. L2TP routers and the IP connections bet- ween them appear as L2 switches.
Welotec - TK500 Router Series Manual Password Set Password for Server Empty L2TP Server Name Define names for Servers l2tpserver Set start modes: "Auto Activated", "Triggered Startup Modes by Data", "Manually Activated", "L2TPOverIP- Auto Activated Sec". Authentication Type Set the authentication type: "CHAP", "PAP".
Page 63
Welotec - TK500 Router Series Manual Name Description Standard Enable Click to enable Enabled Tunnel Name The name for the tunnel (set automatically) PPTP_tunnel_1 PPTP Server Specify Address for PPTP Server Empty Username Set Username for Server Empty Password Set Password for Server Empty Set start modes "Auto Activated", "Triggered by...
Welotec - TK500 Router Series Manual 3.6.6. OpenVPN Tunnels OpenVPN is free software for setting up a Virtual Private Network (VPN) via an encrypted TLS connection. The OpenSSL library is used for encryption. OpenVPN uses either UDP or TCP for transport.
Welotec - TK500 Router Series Manual Name Description Tunnel name Given Enable Activate this configuration Mode "Select "Client" or "Server" mode Protocol Selection of the "UDP" or "TCP" protocol Port Standard port for OpenVPN is 1194 OPENVPN Server IP or DNS of OpenVPN-Servers...
Welotec - TK500 Router Series Manual Name Description Enable Client-to-Client (Server Allow client access to other clients Mode Only) Client Management Enable Activating the function Tunnel Name Tunnel name of the client User name (using the "User name/Password" mode) or general name in...
Page 67
Welotec - TK500 Router Series Manual Import/Export Private Key Certi- Import or export PKCS12 (private key and X.509 Empty ficate certificate) Import or export PKCS12 (private key and X.509 Import/Export PKCS12 Empty certificate) The respective file is selected via Browse and can...
Welotec - TK500 Router Series Manual 3.7. Tools The tools are useful tools and include PING detection, trace route, connection speed tests, etc. 3.7.1. PING Select Tools > Ping if you want to test whether a connection to the network/internet is established.
Welotec - TK500 Router Series Manual 3.7.2. Traceroute Traceroute (tracert) determines via which router and Internet node IP data packets reach the queried compu- ter. You can enter the data under Tools > Traceroute. Name Description Standard Host Target for Trace Route...
Welotec - TK500 Router Series Manual 3.8. Application The menu item „Application“ is currently not supported. 3.8.1. Smart ATM The Smart ATM point is not supported by us at the moment. This is a special function for vertical markets. Welotec GmbH • www.welotec.com • info@welotec.com...
Welotec - TK500 Router Series Manual 3.9. Status Under „Status“ you will find information on the system, modem, network connections, routing table, device list and protocol. 3.9.1. System Select Status > System from the menu to retrieve information about your system.
Welotec - TK500 Router Series Manual 3.9.3. Traffic Statistics If you want to view the data consumption of the SIM card in the TK500, you can do this under Status > Traffic Statistics. Here you can see the data that was received or transmitted monthly, daily and hourly. Use the „Clear“ button to reset the entries to 0.
Welotec - TK500 Router Series Manual 3.9.6. Network Connections Via Status > Network Connections you can get an overview of the network connections of the TK500. Here you can see at a glance the network connections via WAN, dialup or LAN.
Welotec - TK500 Router Series Manual After calling, you will see the routing table of the TK500. 3.9.8. Device List All devices connected to the TK500 are displayed under the menu item Status > Device List. Overview of the devices connected to the TK500.
Welotec - TK500 Router Series Manual tocol to Welotec. To do this, click on „Download System Diagnosing Data“ and send us the protocol with a description of the error to support@welotec.com 3.9.10. Third Party Software Notices Here are the software terms and licenses of all third party vendors associated with the TK500 router series.
Welotec - TK500 Router Series Manual Technical daTa 4.1. Device characteristics Characteristic Value Dimensions (W x H x D) 35 x 127 x 108.2 mm Operating voltage 230 V AC at 12 V – 24 V DC Approval CE-compliant 4.2. Enviromental characteristics...
Welotec - TK500 Router Series Manual 4.3.2. Radio frequencies 3G UMTS Europa Frequency Frequency range and transmission power Router • Frequency range Down: 2110 MHz – 2170 MHz TK525U, TK525L, TK525L-W, Band 1 • Frequency range Up: 1920 MHz – 1980 MHz TK525W • Max. transmission power: 251 mW • Frequency range Down: 1805 MHz – 1880 MHz TK525U, TK525L, TK525L-W, Band 3 • Frequency range Up: 1710 MHz – 1785 MHz TK525W • Max. transmission power: 251 mW • Frequency range Down: 925 MHz – 960 MHz TK525U, TK525L, TK525L-W, Band 8 • Frequency range Up: 880 MHz – 915 MHz...
Welotec - TK500 Router Series Manual 4.3.5. Radio frequencies 3G UMTS Asia Frequency Frequency range and transmission power Router • Frequency range Down: 2110 MHz – 2170 MHz TK525U, TK525L, TK525L-W, Band 1 • Frequency range Up: 1920 MHz – 1980 MHz TK525W • Max. transmission power: 251 mW • Frequency range Down: 869 MHz – 894 MHz TK525U, TK525L, TK525L-W, Band 5 • Frequency range Up: 824 MHz – 849 MHz TK525W • Max. transmission power: 251 mW • Frequency range Down: 925 MHz – 960 MHz TK525U, TK525L, TK525L-W, Band 8 • Frequency range Up: 880 MHz – 915 MHz...
Welotec - TK500 Router Series Manual 4.3.9. Radio frequencies WLAN Frequency Frequency range and transmission power Router • Frequency range: 2400 MHz – 2483.5 MHz 2.4 GHz TK525L-W • Max. transmission power: 40 mW Welotec GmbH • www.welotec.com • info@welotec.com Page 79 of 81 Pages...
Welotec - TK500 Router Series Manual suPPorT If there are any problems with installation and operation, please send an e-mail to the following address: support@welotec.com Welotec GmbH • www.welotec.com • info@welotec.com Page 80 of 81 Pages...
Need help?
Do you have a question about the TK500 Series and is the answer not in the manual?
Questions and answers