Telco’s infrastructure migration to next generation, also sustain the good user experiences on legacy infrastructure. The modular design of M350 Series strengthens the feasibility of deriving more product variety with unified software suite and enables the network edge to continuously achieve Industrial IoT by seamlessly migrating from 3G, 4G LTE CAT6 to 5G FR1 cellular broadband, with optimum bandwidth and cost performance.
Wi-Fi presence, 2.4GHz/5GHz indication CE EN 55032, EN 301 489, EN 300 328, EN 301 893, Ethernet WAN/LAN link and speed EN 301 908-1, EN 62368 FCC Part 15 NCC CNS 13438, BSMI CNS 14336 M350 Series User Manual...
This chapter introduces how to install and connect the hardware. 2.1 Power Three power inputs are available in M350 series. Two of them are terminal block types in left panel. The other one is DC pack type in front panel.
The unit has 2 terminals on the terminal block for the digital outputs. Description Digital Output DO_GND DO: Open Collect (maximum 30V/300mA) 2.3 COM RS-232 RS232 interface located in left panel. It’s terminal block type. Signal Direction Transmit Data Output Receive Data Input Signal Ground M350 Series User Manual...
(2) Insert the SIM card with right direction. Push the SIM card in to the slot, and lightly press it to lock it in the slot. (3) To remove the SIM card, lightly press the SIM card, and it will pop out. M350 Series User Manual...
Reset and WPS buttons are merged into one. Each functions are described in the following tables. Function Operation Press the button less than 5 seconds. WPS Processing Reset Press the button for 5-10 seconds. Reset to default setting Press the button for more than 10 seconds. M350 Series User Manual...
5GHz WiFi 5G ON 2.8 Antenna Antenna Connector arrangement: ANT1 ANT2 ANT3/WiFi ANT4/WiFi ANT5/GPS ANT6 Model pcie or wifi pcie or wifi Single LTE MAIN Single LTE MAIN WiFi WiFi + WiFi WiFi WiFi + WiFi M350 Series User Manual...
After clicking, the interface shows Login ok. Note: After changing the User Name and Password, strongly recommend you to save them because another time when you login, the User Name and Password have to be used the new one you changed. M350 Series User Manual...
Show the position of router from Google Maps. Location Note: This function is for GPS spec. Google Maps Display Google Map according to location. Choose your language from the drop-down list on the upper right corner of the Language title bar. M350 Series User Manual...
Page 16
The menu items are divided into main and submenu to configure the settings and get the status of connectivity on the navigation panel. C : Main Window This section shows the information or setting fields from main menu and sub menu. M350 Series User Manual...
Alarm PULSE: DO is configured to pulse when alarm is Status triggered. Force ON: DO is turn on by remote command. Force OFF: DO is turn on by remote command. Force PULSE:DO is turn pulse by remote command. M350 Series User Manual...
Page 18
Show the longitude information of location. Horizontal Horizontal precision:0.5-99.9 The altitude of antenna away from the sea level(unit: m), Altitude accurate to one decimal place. Date UTC date when fixing position. Time UTC time when fixing position. Satellite Number of satellites. M350 Series User Manual...
Page 19
Status > SIM1 & SIM2 Item Description Attribute Ready: No PIN code protection or unlock already. Unlock: Unlock pin code protection. SIM Status Locked: Locked by pin code. Error: SIM operation error. M350 Series User Manual...
Page 20
IPv6 DNS Server #1 Show the address of IPv6 DNS Server #1. IPv6 DNS Server #2 Show the address of IPv6 DNS Server #2. IPv6 DNS Server #3 Show the address of IPv6 DNS Server #3. M350 Series User Manual...
Page 21
Status > WAN Ethernet Item Description Attribute IPv4 Address Ethernet WAN obtain IPv4 Address. IPv4 Mask Ethernet WAN obtain IPv4 Mask. Default Gateway Ethernet WAN IPv4 Default Gateway. IPv6 Conn Time Ethernet WAN IPv4 Connected Time. M350 Series User Manual...
Page 22
IPv6 Conn Time IPv6 Connected Time. Uplink Speed Kbps Uplink Speed in Kbps. Downlink Speed Kbps Downlink Speed in Kbps. Tx/Rx KBytes Accumulated TX/RX in KBytes. TX/RX Dropped Packets TX/RX Dropped Packets. Status >Connected VPN Connections M350 Series User Manual...
For those GPS enabled router, you can see Location on the right-top banner of web interface when connecting your GPS function. After clicking Google Maps banner, a map will automatically display the current information of map according to location of router. M350 Series User Manual...
Savings duration that you have set up before. Get from Time Server Set up the time servers of IPv4 and IPv6. Select your local time zone. Click Apply to keep your configuration settings. M350 Series User Manual...
Page 26
Set up the information of Start Date/Time, including Month, Week, Day, Hour and Minute. Set up the information of End Date/Time, including Month, Week,Day, Hour and Minute. Click Apply to submit your configuration changes. M350 Series User Manual...
Page 27
4 - Thursday 5 - Friday 6 - Saturday The Hour range is 0~23. The Min range is 0~59. Time to leave Daylight Savings duration. End Date / End Time Same with Start Date/Start Time. IV. Time Server M350 Series User Manual...
(1) The default is Disable. You can click edit button to configure your settings. (2) Set up the configuration and Virtual COM. After configuring, click to confirm your settings. M350 Series User Manual...
Page 29
Select from none, Xon/Xoff or hardware. Flow Control Virtual COM Select from Disable, Server or Client. Mode Select from TCP or UDP. Protocol The host address is only available on client mode. Specify what Host Address M350 Series User Manual...
(3) When you click Refresh, the system will update and display the latest data from your cellular router. (4) When you click Download Logs, the system will download the latest data from your cellular M350 Series User Manual...
Page 31
Filter the required data quickly. Date Show the date of log for each logging data. Group Show the group of software functions. Module Show the module of group of software functions. Message Show the messages for each logging data. M350 Series User Manual...
WAN disconnect: WAN connections get disconnected then trigger alarm. LAN disconnect: LAN connection get disconnected then trigger alarm. Reboot: Reboot then trigger alarm. Alarm Select from SMS, DO, SNMP trap, E-mail and TR069 as alarm output. Output M350 Series User Manual...
Page 33
5.4.1 Alarm >Contacts>Create and name the Group Click trusted and on duty members for naming and the interface will show the group’s name in the Group setting as below. M350 Series User Manual...
Page 34
You can click button to edit or delete the group. M350 Series User Manual...
Page 35
After filling in your information for each row, chose your naming group and click to submit your settings. After submitting your setting, the interface returns to Group window setting. Now you can see your naming group and the user’s information that you have added. M350 Series User Manual...
The flow control packet will be sent out again once the system goes back to normal to indicate the link party that it can send packet again. M350 Series User Manual...
Page 37
Allow users to control the traffic ingress from Ethernet LAN or Flow Control WAN. Allow users to setup the WAN/LAN2 Port function as Auto, WAN/LAN2 Port Function LAN,or WAN. M350 Series User Manual...
List Type Online: List the information when it is online. 5.8 Bandwidth Monitor This section allows you to monitor WAN interface data usage. In “Configuration” tab, you can choose the what WAN interfaces to monitor. M350 Series User Manual...
Page 39
Interface #1, GRE #2, WAN PPPoE Port The listening port of Modbus TCP. In “Status” tab, you can set the refresh time to get WAN usage information periodically. It also shows the current WAN bandwidth usage. M350 Series User Manual...
Page 40
TX(bit/s) Outward TX rate in bps. Packets Outward TX packet number Bytes Outward TX total packet bytes number RX(bit/s) Inward RX rate in bps Packets Inward RX packet number Bytes Inward RX total packet bytes number M350 Series User Manual...
WAN > Connection Table Item Description Profile Profile number. 3 profiles are allowed to set in advance. Name Name for profile Priority Interface priority for load balance / fail over operation. Interfaces with the same M350 Series User Manual...
The followings are some working examples: 6.2 Ethernet 6.2.1 WAN Ethernet Configuration This section provides three options to obtain the IP of WAN Ethernet. The options include DHCP Client, PPPoE Client and Static IPv4. The default is DHCP Client. M350 Series User Manual...
Page 43
Each setting DNS Server has three options, including From ISP, User IPv4 DNS Server #1 Defined and None. IPv4 DNS Server #2 When you select From ISP, the IPv4 DNS server IP is obtained from IPv4 DNS Server #3 ISP. M350 Series User Manual...
Page 44
Address, IP Mask and Gateway Address. WAN > Ethernet > Static IPv4 Item Description Static IPv4 Configuration IP Address Fill in the IP Address. IP Mask Fill in the IP Mask. Gateway Address Fill in Gateway Address. M350 Series User Manual...
When you select From ISP, the IPv6 DNS server IP is obtained from IPv6 DNS Server #2 ISP. IPv6 DNS Server #3 When you select User Defined, the IPv6 DNS server IP is input by user. M350 Series User Manual...
Ethernet. However, in case the Ethernet connection exist but it is unable to access internet; you can enable WAN “Health Check” and the system would switch to LTE connection and switch back whenever Ethernet is able to access internet again. WAN > Health Check Item Description M350 Series User Manual...
Page 47
In addition, you can check which WAN is actually using from “Status” page. The interface will be shown check mark (✓ symbol) on the connection title. For IPv6 address, the status will be displayed on LAN Etherent Interface when IPv6 is using as WAN connection. M350 Series User Manual...
2G Only: Connect to 2G network only. MTU is the Maximum Transmission Unit that can be sent over the LTE interface. It allows user to adjust the MTU size to fit into their existing network environment. M350 Series User Manual...
UTC date when fixing position Time UTC time when fixing position Satellite Number of satellites 7.2.2 Config This section allows you to set up GPS configuration and send out GPS location to TCP Server or display in log. M350 Series User Manual...
GPS IPv4 TCP Server Port. IPv6 Address GPS IPv6 TCP Server Address. IPv6 Address Port GPS IPv6 TCP Server Port. Report Prefix Identification for GPS Track. 7.3 GPS Track This section allows you to see the GPS Track. M350 Series User Manual...
7.4 SIM Config This section allows you to set APN Configuration. It includes Connect Policy, Recover APN1, SIM Configuration, APN1 and Data Limitation. M350 Series User Manual...
Page 53
Recover to previous working APN: Replace active APN by using previous working APN. SIM Configurations Status Display the status of SIM Card. Enable to display SIM PIN setting. SIM PIN Enable Disable to hide SIM PIN setting. M350 Series User Manual...
Page 54
Now Time Show the current time of system. 7.4.1 SIM Configuration SIM PIN: If you have configured SIM PIN code into SIM card, please type SIM PIN code in Dual SIM configuration to make unlock successfully. M350 Series User Manual...
Page 55
Change SIM PIN:If you want to change SIM PIN code, you can click Change button and type old SIM PIN code and new SIM PIN code. Please aware not to exceed the retry number (PIN remaining number and PUN remaining number). M350 Series User Manual...
Hourly, Daily, Weekly, and Monthly. (1) Real-Time Usage: It displays accumulated real-time Download/Upload/Total MB for 10 seconds period. (2) Hourly Usage: It displays Download/Upload/Total MB per hour in one day for current using SIM card and the M350 Series User Manual...
Page 57
24 hours. (3) Daily Usage: It displays Download/Upload/Total MB per day in one month for current using SIM card and the view window size is 31 days. M350 Series User Manual...
Page 58
(4) Weekly Usage: It displays Download/Upload/Total MB per day in one week for current using SIM card and the view window size is 7 days. M350 Series User Manual...
Page 59
(5) Monthly Usage: It displays Download/Upload/Total MB per month in one year for current using SIM card and the view window size is 12 months. M350 Series User Manual...
SIM2 Usage is the same as SIM1. Please refer to SIM1 section 7.7 SMS This section provides two settings, one is SMS Action and the other is View SMS. (1) When enabling SMS Action, it allows trust phone number which in trusted and on duty M350 Series User Manual...
Page 61
SMS to trigger device setting/action/query status. M350 Series User Manual...
You can click view button to review all messages, button to clear all messages, and button to reload all messages. 7.8 Serving Cell This section displays all parameters, including the following items: M350 Series User Manual...
Down Link Bandwidth. RSSI Received Signal Strength Indication. State Connection State. Band Connected Band. 7.9 Lock LTE PCIs This section allows you to set Lock PCIs. It includes Neighbors, Locked PCIs, Saved Locked PCIs. (1) Neighbors M350 Series User Manual...
(2) Locked PCIs: Click Refresh button to display all locked PCI (Physical Cell ID) information. (3) Saved Locked PCIs: Click Refresh button to display all saved locked PCI (Physical Cell ID) information. 7.10 DNS This section allows you to set LTE specific DNS setting. M350 Series User Manual...
IPv4 DNS Server #2 from ISP. IPv4 DNS Server #3 3. When you select User Defined, the IPv4 DNS server IP is input by user. 7.11 Search Operators This section is to search the operators and get the status. M350 Series User Manual...
Page 66
LTE >Search Operators Item Description STATE Current: Current connection. Available: Possible connection. Forbidden: Forbidden connection. OPERATOR Operator Name. PLMN Public Land Mobile Network ID. 3GPP Technology. M350 Series User Manual...
Each static IP consist of mode (on/off), MAC and IP address. Mode: Turn on/off the static IP address. MAC: The MAC address of target host or PC. IP: The desired IP address for target host or PC. M350 Series User Manual...
When VLAN Mode is set to Tag Base, the VLAN setting window will appear as shown below. The VLAN Isolation function allows administrator to separate the different Subnet(VLAN). When it is on, the different Subnet(VLAN) user cannot communication each other. M350 Series User Manual...
The Access port setting is connected to a single untagged device. 8.3 Subnet This section allows you to get the information of IP Address and IP Mask and edit for the VLAN Subnets from DHCP Server Configuration. M350 Series User Manual...
Page 70
This Subnet setting is the same as LAN > IPv4 setting and follows with Tag Base Mode of VLAN to enable the function. M350 Series User Manual...
IPv6 prefix information in router advertisements periodically Assign and in response to router solicitations. Stateful: The cellular router uses IPv6 stateful auto configuration. The LAN IPv6 clients can obtain IPv6 addresses through DHCPv6. M350 Series User Manual...
IP Routing > Static Route> Settings Item Description Mode The setting is for full network. Select from Off or On. Settings Mode The setting is for the specific network. Select from Off or On. M350 Series User Manual...
Page 73
(2) Input the IP address of destination/gateway from IPv4 and IPv6 at the same time. The interface is shown in Apply fail to notice. You should select either IPv4 or IPv6 as the address of destination/gateway. The status tab shows the information from the settings of static route. M350 Series User Manual...
Show the status of protocol from the setting section. 10.2 Route This section allows you to set up the settings and get the status for Policy Route. Note: Policy Route is only enabled on active interfaces, but it is disabled on deactivated interfaces automatically. M350 Series User Manual...
Fill in the gateway address of your router. Outgoing Select the interface from LAN or Ethernet. Interface 10.3 RIP This section allows you to configure RIP and select the mode from Disable or Enable. The default is Disable. Note: M350 Series User Manual...
Page 76
Select from Off or On to open or close redistribute connected routes routes. Redistribute OSPF Select from Off or On to open or close redistribute OSPF routes. routes Redistribute BGP routes Select from Off or On to open or close redistribute BGP routes. M350 Series User Manual...
Select from Off or On to send out or not to send out RIP packets on this Passive interface. 10.4 OSPF This section allows you to set up OSPF with three sub configurations, including General, Interfaces and Networks configuration. (1) General Configuration M350 Series User Manual...
Page 78
Select from Off or On to open or close redistribute connected routes routes. Redistribute RIP routes Select from Off or On to open or close redistribute RIP routes. Redistribute BGP routes Select from Off or On to open or close redistribute BGP routes. M350 Series User Manual...
Page 79
The ID of the key used for authentication (1-255). Cost The cost for sending packets via this interface (0: OSPF defaults). Select from Off or On to send out or not to send out OSPF packets on this Passive interface. M350 Series User Manual...
Page 80
Mode Select from Off or On to enable the network setting. Prefix Set Prefix of the network Prefix Length Set Length of the prefix Area Routing area to which this interface belongs (0-65535, 0 means backbone) M350 Series User Manual...
On: Redistribute local routes from the device's own routing table. Off: Not redistribute connected routes to networks which are directly Redistribute connected to the device. connected routes On: Redistribute connected routes to networks which are directly connected to the device. M350 Series User Manual...
Page 82
Autonomous system number of the peer router. Multihop Allow multiple hops between this router and the peer router. Update Source Mode Whether to specify the source address to this neighbor. Update Source Address The source address to this neighbor. M350 Series User Manual...
Page 83
16. IP Routing > BGP > Networks Item Description Mode Select from Off or On to enable the network Prefix Set Prefix of the network Prefix Length Set Length of the prefix M350 Series User Manual...
Log tab, the interface will show the status of connection to make you follow the situation whenever it is successful or fail connection. 11.1.1 OpenVPN Common Setting (1) Click button to edit OpenVPN Connection. (2) From Setting tab, you can set up the connection of OpenVPN. M350 Series User Manual...
Page 85
Select from UDP or TCP Client which depends on the application. The Protocol default is UDP. Port Enter the listening port of remote side OpenVPN server. Select Disable or Enable to compress the data stream. The default is VPN Compression Disable. M350 Series User Manual...
Page 86
Route Client Networks When enabled, the cellular router will auto apply the properly routing rules. Local Network The local network exported by OpenVPN. When keeping this option Network blank, the OpenVPN will export the LAN network automatically. M350 Series User Manual...
Page 87
VPN Mode. Note: When selecting the On option of Route Client Networks, the OpenVPN server will route the client traffic or not. You should fill in the client IP and netmask when this option is enabled. M350 Series User Manual...
Page 89
NAT environment. 1:1 NAT Select from Offor On. The default is Off. When two routers’ LAN Subnet are same and create Open VPN tunnels, this function is turned on. Server- Server Security M350 Series User Manual...
Page 90
Internet and save the document into your server or PC. After importing the file, the interface will show button. Click for displaying the information and for downloading the file. Forthird-party Open VPN configuration, suggest from http://www.vpngate.net/en/ M350 Series User Manual...
For the edit, you can click the buttons to edit IPsec phase 1 and phase 2 setting respectively. For the advance settings, like Dead Peer Detection, aka DPD, you can click the button to edit M350 Series User Manual...
Page 92
(1) IPsec Phase 1 Setting VPN>IPsec> Connections >Phrase 1 setting M350 Series User Manual...
Page 93
If this value is blank, the connection will act the server role to wait the incoming request. The identification for authentication on remote peer. Remote ID Select from the created authentication IDs or empty. (2) IPsec Phase 2 Setting M350 Series User Manual...
Page 94
Remote Subnet 1 setting. Note: This option only work on Policy-based IPsec VPN type. Restrict the VPN traffic to the particular protocol only. Service Select from the Any, TCP, UDP or L2TP. (3) IPsec Advance Setting M350 Series User Manual...
Page 95
Select from PSK or RSA. The default is PSK. Type PSK: Use the pre-shared key to authenticate the connection. RSA: Use the certificate to authenticate the connection. Pre-shared Key / The X.509 certificate for authentication. M350 Series User Manual...
Page 96
This section provides the certificates setting which could be used by IPsec authentication ID. Each certificate will show the State and Subject information and provide the controlling buttons to let user import, download or edit the certificate/key files. Note: Please apply the changes before editing the Authentication IDs settings. M350 Series User Manual...
Page 97
3. Fill up the information of the CA certificate. 4. Click the Generate Certificate button and Save. 5. Click the Apply button to apply the changes. To generate the X.509 certificate: 1. Make sure the self-signed CA certificate generated. M350 Series User Manual...
Page 98
This option is required for certificate generation. E-mail The maintainer's E-mail. Certificate Importing Same as the Certificate Generation, the router supports the CA and X.509 certificate importing. To import the CA certificate: 1. Navigate to CA Certificates tab. M350 Series User Manual...
Page 99
In this case, the IPsec VPN tunnel uses the two LAN side subnet clouds and makes them communicate each other. There are two part settings for the Cellular router IPsec feature. Pre-shared Key authentication Configure Net-to-Net VPN Server 1. Change Mode from Disable to Enable. M350 Series User Manual...
Page 100
(2) Change Mode from Disable to Enable. (3) Save the changes. (4) Edit the phase 2 setting (5) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24 (6) Save the changes 7. Apply the changes M350 Series User Manual...
Page 102
Remote Host: 10.0.0.1 (4) Save the changes (5) Edit the phase 2 setting (6) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.200.0/24, Remote Subnet: 192.168.100.0/24 (7) Save the changes 7. Apply the changes M350 Series User Manual...
Page 104
(4) Common Name: IPsec.ca (5) Click the Generate Certificate button (6) Save the changes 3. The State of self-signed CA will be Waiting Apply 4. Apply the changes 5. Waiting for the State of self-signed CA become generated M350 Series User Manual...
Page 105
(2) Country Name: CN (3) Organization Name: Company (4) Common Name: remote.IPsec (5) Click the Generate Certificate button (6) Save the changes 6. Apply the changes 7. Waiting for the State of X.509 Certificate become generated M350 Series User Manual...
Page 108
(4) Change the Local ID and select the local.IPsec (RSA)authentication ID. (5) Save the changes (6) Edit the phase 2 setting (7) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.100.0/24, Remote Subnet: 192.168.200.0/24 (8) Save the changes M350 Series User Manual...
Page 109
4. Apply the changes M350 Series User Manual...
Page 110
These files could be downloaded from VPN server. The detail could reference “ How to download the certificate section ” of user manual. Import the CA certificate and the X.509 certificate Please refer the Certificate Importing section of user manual to import the required files. M350 Series User Manual...
Page 111
e.g. Remote Host: 10.0.0.1 (6) Save the changes (7) Edit the phase 2 setting (8) Fill up the Local Subnet and Remote Subnet. e.g. Local Subnet: 192.168.200.0/24, Remote Subnet: 192.168.100.0/24 (9) Save the changes M350 Series User Manual...
Page 112
7. Apply the changes M350 Series User Manual...
Page 113
IPsec Net-to-Net with RSA authentication result Server Client M350 Series User Manual...
GRE keepalive packets may be sent from both sides of a tunnel or from just one side. There are 2 entry for user to configure, please press Edit button. M350 Series User Manual...
Page 115
Set Prefix of the Tunnel Device Address. Whether to use the key for identifying an individual traffic flow Use Tunnel Key within a tunnel. Tunnel Key Number The number of the tunnel key; default is '1234'. M350 Series User Manual...
Summary part: User can delete and edit the existed PPTP clients. Add/Edit part: VPN > PPTP Server > Clients Item Description Mode Select from Off or On to set the client setting. Username The username of this client. Password The password of this client. M350 Series User Manual...
This section allows you to set up L2TP and provides three modes for configuration, including Off, Server, and Client Mode. (1) General Mode: The default mode is Off as shown in the following interface. (2) Server Mode: Choose the Server mode and the interface will be changed as below. M350 Series User Manual...
Page 118
The L2TP client's password. Could be used to add the newly client or update Password existed client. Fill in the username and password and click the button, you can create the L2TP client and manage them under server mode. M350 Series User Manual...
Page 120
Turn on to translate the LAN subnet IP to L2TP virtual IP. Default route Turn on to redirect all traffic to L2TP tunnel. Fill in the required parameters and click the button to create the L2TP connection and manage the L2TP connection under client mode. M350 Series User Manual...
Page 121
Click the button and edit the parameters to update the L2TP connection. M350 Series User Manual...
This section allows you to configure Basic Rules, Port Forwarding, DMZ, IP Filter, MAC Filter, URL Filter, NAT and IPS. 12.1 Basic Rules This section allows you to set the Basic Rules configuration. Firewall > Basic Rules Item Description WAN Ping Blocking Check IPv4 or IPv6 for blocking M350 Series User Manual...
12.4 Management IP This section allows you to set the management IP address to access the router. Firewall > Management IP Item Description Management IP Address Only listed IP address can access the router. 0.0.0.0 means any IP M350 Series User Manual...
Which direction is linked to the service port: LAN INPUT WAN INPUT Direction ALL INPUT LAN OUTPUT WAN OUTPUT ALL OUTPUT Protocol Service is served on TCP or UDP only. Port The port number bound to the service. M350 Series User Manual...
Page 126
Configured service port status is listed “Status” tab as below: M350 Series User Manual...
12.6 IP Filter This section allows you to configure IP Filter. After clicking button, you can edit your IP protocol, source/port and destination/port. The default is Disable mode and Black list. M350 Series User Manual...
Page 128
For White List only. The setting is specified for Router access only. The user can set it to allow Router access outside WAN or inside LAN Service. For example, access outside WAN DNS service. It also allows user to access Router service from outside WAN or inside LAN. For example, access Router Web service. M350 Series User Manual...
Page 129
IP, IP with Mask or giving a range of IP. The following table provides some examples. Firewall > Edit IP Filter > Source IP IP Format Single IP IP with Mask Ranged IP 192.168.1.0/24 IPv4 192.168.0.123 192.168.1.1-192.168.1.123 192.168.1.0/255.255.255. 2607:f0d0:1002:51::4- IPv6 2607:f0d0:1002:51::4 2607:f0d0:1002:51::0/64 2607:f0d0:1002:51::aaaa M350 Series User Manual...
Page 130
(5) For Source Port, there are two types to input your source port that depends on your requirement, including single port (e.g.1234) or giving a range of ports (e.g.1234:5678). Setting up a range of source ports, please use “:” colon symbol to mark your ranged ports. Note: M350 Series User Manual...
Setting up MAC address, please use ”:”colon symbol (e.g. xx:xx:xx:xx) or “-“ hyphen symbol to Note: mark (e.g. xx-xx-xx-xx). 12.8 URL Filter This section allows you to set up URL Filter. After clicking button, you can edit thetype of filter and information. M350 Series User Manual...
Internet public address by private IP address for incoming packets. When NAT modeis Disable,the router will send the source LAN private IP address for outgoing packets and allow to receive the destination LAN private IP address for incoming packets. M350 Series User Manual...
Total allow incoming connection number function. The default number is 10. Select the checkbox to enable or disable the Max incoming connection retry number function. The default number is 20. Duration time The default time is 120 seconds. M350 Series User Manual...
13 Web Menu Item > Service This section allows you to configure the SNMP, TR069, Dynamic DNS, VRRP, MQTT, UPnP, SMTP, IP Alias, and QoS. 13.1 SNMP This section allows you to set the SNMP configuration. 13.1.1 Community M350 Series User Manual...
Page 137
There are three options to set up SNMP v3 Configuration. Service > SNMP > SNMP v3 User configuration Item Description Select from Disable or Enable to configure SNMP. Mode The default is Disable. Name Fill in your name. M350 Series User Manual...
Page 138
This section allows you to set up the SNMP trap configuration when you select the SNMP trap function from Alarm output of system for your router. With SNMP trap setting, you can know the status of remote device. Service > SNMP > SNMP trap configuration Item Description M350 Series User Manual...
Page 139
Fill in the connection request password to authenticate the ACS if the Password ACS attempts to communicate with the CPE. Connection Request Fill in the connection request port to authenticate the ACS if the ACS Port attempts to communicate with the CPE. M350 Series User Manual...
Fill in your registered username from Service Provider. Password Fill in your registered password from Service Provider. Fill in “0” to mean 30 days. Update Period Time (Sec) IP Address Selection Select either Internet IP or WAN IP. M350 Series User Manual...
Page 141
Username Register username. Password Register password. Service provider freedns.afraid.org Host Name Register hostname, e.g. tester.mooo.com Username Register username. Password Register password. Service provider dyndns.org Host Name Register hostname, e.g. tester.dyns.com Username Register username. Password Register password. M350 Series User Manual...
By default, the router does not allow anonymous to read/write the MQTT topic or channel. Thus you need to create the account with username and password for MQTT client in the web UI. M350 Series User Manual...
Page 143
For the ACLs control, user can specify what topic should be limited. In this case, we set up the publisher pub1to write the critical topic. Additionally, we also allow the subscribers sub1 and sub2to read the critical topic. Thus, only the sub1 and sub2 can receive it M350 Series User Manual...
Port 25:Use TCP port 25 without encryption. Port Port 465:SMTP connections secured by SSL. Port 587:SMTP connections secured by TLS. Username / Password Fill in your username and password as the same your server. M350 Series User Manual...
It guarantees the minimum and limit the maximum bandwidth for certain class of traffic. The QoS configuration has three parts, including ISP bandwidth, QoS, and Status. ISP bandwidth allows user to configure the max bandwidth for upstream and downstream of M350 Series User Manual...
Page 147
LAN from the interface. The Upstream selection in LAN interface allow user to decide whether the traffic ingress from the interface to be managed by WAN interface or not. M350 Series User Manual...
Page 148
Up/Down arrow button: It allows you to adjust priority of the QoS entry. The first QoS entry is the highest priority. The QoS entry configuration page has three parts for classify traffic, assign bandwidth, and group IP address bandwidth. M350 Series User Manual...
Page 150
Service > IP Alias Item Description M350 Series User Manual...
Page 151
Subnet at VLAN->Tag Base. COS (Class of Service) NONE or 0~7. It is class of service for VLAN. Bandwidth Note: To guarantee minimum bandwidth for assigning each IP, you should select divided for each IP Address. M350 Series User Manual...
Page 152
Show detail bandwidth for each IP address: show the group IP bandwidth usage. Apply Refresh Setting button: press this button to take above new setting effect. Data part is the content of bandwidth usage. M350 Series User Manual...
This section provides you to manage the router, set up your administration and know about the status of current software and firmware. Also, you can back up and restore the configuration. 14.1 Identification This section allows you to confirm the profile of router, current software, firmware version and system uptime. M350 Series User Manual...
Page 154
(International Mobile Equipment Identity number) Uptime Show the current system uptime. FOTA check time Show the FOTA check time. FOTA Software Version Show the FOTA software version. FOTA next check time Show the FOTA next check time. M350 Series User Manual...
Level Administrator – can see and can apply each function except super user’s password. Level Read Only – only can see the current configuration of each function. (2) Non-super user can only edit his/her password. M350 Series User Manual...
There are two pages,Contacts and Duty Schedule. Contactsallows you to create the groups, and add the users. Duty Schedule is to select the duty date for specified groups. The on duty group members can receive alarm, perform SMS actions and input SMS alarm. M350 Series User Manual...
Page 157
You can create the groups, and add the users by Contacts. + Add Group: Please fill out group name. + Add User: Please fill out Name/Phone/E-Mail/Groups. 14.3.2 Duty Schedule Please select duty date for every group. The trust and responsible groups can control/receive alarms and SMS. M350 Series User Manual...
14.4 SSH Secure Shell (SSH) allows user to configure system via a secure channel. User can configure system from either public domain or local LAN. M350 Series User Manual...
Page 159
Allow All: Any client who own the IPv4v6 Address can reach system is able to connect system. Access Control Allow specified IPv4v6 Address below: Only those configured IPv4v6 Address client are allowed to connect system. M350 Series User Manual...
This section provides you to upgrade the firmware of router. (1) Click button to choose your current firmware version in your PC. (2) Select button to update. (3) After upgrading successfully, please reboot the router. 14.8 Modem Firmware M350 Series User Manual...
This section supports you to load the factory default configuration and restart the device immediately. You can click the button. 14.11 Restart This section allows you to click button and the router will restart immediately. 14.12 Schedule Reboot The setting allows you to schedule the reboot time regularly. M350 Series User Manual...
Select from Disable or Enable. The default is Enable. Retry The limit for maximum login retries/attempts. Ban Time(s) The banned time(s) for user or IP when it exceeded the retry limit. 14.14 FOTA This section allows you to set up the Firmware Over-the-Air M350 Series User Manual...
Page 163
Management >FOTA Item Description Firmware Over the Air M350 Series User Manual...
Page 164
There are two options for automatic, every day or every week. Custom You can choose the time or execute it immediately Status Show the status information after running. Update information server, Firmware download server, FOTA check time, FOTA software version, Result, FOTA next check time. M350 Series User Manual...
Please assign the Host you want to traceroute. Diagnosis > Ping Item Description Use Interface As Source Use or not use the Interface as source Use Interface APN1 / APN2 Host The host name or the host IP address M350 Series User Manual...
15.3 TTY2TCP Diagnosis >TTY2TCP Item Description Port number the port number to issue TTY2TCP Start start TTY2TCP Stop stop TTY2TCP M350 Series User Manual...
However, in case Ethernet is unplug or not able to access Internet (check by ping), the router would route network packages through LTE network. (2) WAN Priority >LTE Only: In this mode, the router only routes network packages through LTE. M350 Series User Manual...
Page 168
In case both Ethernet and LTE can access Internet, the router would route network packages through LTE. However, in case LTE is unplug or not able to access Internet (check by ping), the router would route network packages through Ethernet network. M350 Series User Manual...
IPv6. There is IPv6 firewall protection in the router by default. Only the IPv6 packages come from LAN site device and got reply back. The router automatically detects IPv6 environment and query IP. After the IP is obtained successfully, it will distribute to LAN site hosts. M350 Series User Manual...
Thus, you need to create the account with username and password for MQTT client in the web UI. The Manage Users section will show all created users.Each user can use thedelete button to delete it.For the ACL control, you can specify what topic should be limited. M350 Series User Manual...
Forthe industrial products, the Modbus protocol is the most popular industrial control protocol. If the Modbus software/SCADA supported the Modbus RTU over TCP, the Virtual COM server feature of router could handle it. You need to configure the RS-485(COM1) like the remote management (serial settings, Virtual COM settings). M350 Series User Manual...
System -> COM ports web UI and setup this feature in the System -> Modbus web UI. After above setup, the Modbus software can use the Modbus TCP protocol to control the Modbus M350 Series User Manual...
In case of DO is selected, please make sure your DO is connected to your alarm device. In case of SNMP trap is selected, please make sure you enable SNMP trap (Service->SNMP) and fill our server IP. M350 Series User Manual...
For Open VPN configuration, use the certificate to authenticate the VPN connection. Thus, you need to generate the required files for Open VPN server or import the required file to Open VPN client. 16.5.1 Open VPN Server Mode Open VPN server certificate generation M350 Series User Manual...
Page 176
To generate the Open VPN client files, you need to type the password to create it. The password will be used in the Open VPN client when the client usesPKCS#12 to authenticate the VPN connection. After the generation, the web UI shows the below picture. M350 Series User Manual...
Page 177
When the files are imported, the web UI is as shown in the right-bottom picture. Same as Open VPN server part, you can use the info/download buttons to get the information of file or download the file to PC. 16.5.3 Open VPN Net-to-Net M350 Series User Manual...
Page 178
You can use the Open VPN tunnel to make the PC1 and PC2 communicate each other. (1) Open VPN server configuration For the Open VPN server side, the basic setting is as shown in below figure. M350 Series User Manual...
Page 179
If all settings set up properly, the web UI will show the Apply OK and the Open VPN server status should be Running. When Open VPN Client mode is connected, the status will show the information which client is connected, IP address and connected time. M350 Series User Manual...
Page 180
UI will display the window as the below figure. (2) Open VPN client configuration For the Open VPN client side, the basic setting is as below figure. M350 Series User Manual...
Page 181
When all settings set up properly, the status will change from Idle to Running. When Open VPN tunnel is created, the status shows Connected and the information for IP address and the time. 16.5.4 Open VPN 1:1 NAT M350 Series User Manual...
Page 182
255.255.255.0.The setting will make the router convert the Open VPN server side LAN network from 192.168.1.0/24 to 192.168.10.0/24 when the VPN traffic is coming. For the Open VPN client side, same as server side but we fill up the Network as 192.168.11.0. M350 Series User Manual...
Page 183
Open VPN client .The Custom mode provide the import button to allow user import the third-party Open VPN server .ovpn configurations file. For example, use the Japan Open VPN server which provided by http://www.vpngate.net/en/. Firstly, download the ovpn configuration files from vpngate.net. M350 Series User Manual...
Page 184
In this moment, the PC1 can visit the http://www.vpngate.net and the web UI should indicate the PC1 in the Japan at now as the below figure. 16.5.6 Install Open VPN Access Server on Docker Open VPN Access Server on Docker installation M350 Series User Manual...
Page 186
Setup Open VPNAccess Server for Cellular Router The admin page is https://<server_ip_or_domain>:943/admin The default administrator username and password is admin/password. Login page: After logged, please change the user authentication type to Local like the following figure. M350 Series User Manual...
Page 187
And switch to the User Permission page to create the user for Cellular Router. (In this case, we use the test/test to be the example.) M350 Series User Manual...
Page 188
Also check the Access from all other VPN clients to make the Cellular Router could be reachable. Setup Cellular Router Open VPN client M350 Series User Manual...
Page 189
Please make sure to change the type from Connect to Login. After logged, please download the .ovpn configuration by click the user-locked profile. Upload the .ovpn configuration to Cellular Router Open VPN custom mode, and input the username and password. M350 Series User Manual...
Page 190
Install via curl sh -c "$(curl -fsSL https://bit.ly/2IpJN1X)" Install via wget sh -c "$(wget https://bit.ly/2IpJN1X -O -)" Install Docker on Ubuntu 16.04 64bit Reference: https://docs.docker.com/engine/installation/linux/docker-ce/ubuntu/ Set up the repository sudo apt-get remove docker docker-engine docker.io M350 Series User Manual...
Page 191
~/pritunl touch docker-compose.yml (2) Copy and paste the following content to docker-compose.yml. version: '2' services: pritunl: image: jippi/pritunl volumes: - pritunl:/var/lib/pritunl - mongo:/var/lib/mongodb privileged: true network_mode: "host" ports: - "1194:1194/tcp" - "1194:1194/udp" - "80:80/tcp" - "443:443/tcp" M350 Series User Manual...
Page 192
The default username/password is pritunl/pritunl. Login Page: After logged, the server will ask you to do the initial setup. You can change the username and the password setting in this page. Initial Setup: Open VPN user setup M350 Series User Manual...
Page 193
When the organization be created, the Users page should be like the following figure. Then add the Open VPN user by click the Add User button. Note: In this Open VPN server, the PIN must contain only digits. M350 Series User Manual...
Page 194
And click the Add Server button to create the Open VPN server. Note: Please click the Advanced tab and make sure the Inter-Client Communication be checked When the Open VPN server created, the Servers page should like the following figure. M350 Series User Manual...
Page 195
And click Attach Organization button to setup the Open VPN server. Start the Open VPN server by click Start Server button. M350 Series User Manual...
Page 196
In this document, you should get the MR_test_router.ovpn file. And visit the Cellular Router Open VPN custom page then import the .ovpn file. Fill up the username/password which be setup in Open VPN user setup part. M350 Series User Manual...
When the Cellular Router Open VPN connected, the Pritunl Open VPN server also update the user status. 16.8 VRRP Topology Basic VRRP Topology M350 Series User Manual...
Page 198
Base on this topology and VRRP Parameter settings, Router A and Router B will offer a virtual router service with virtual IP = 192.168.1.200 for the client. M350 Series User Manual...
PC-A and PC-B are on Ubuntu OS. PC-A and PC-B should install vlan on Ubuntu. PC-A and PC-Bshould command this order“sudo apt-get install vlan”. The following interface shows VLAN settings for thecellular router. M350 Series User Manual...
Page 200
From the following picture, you can click the finding your computer icon and input the terminal letters. Then, the interface will show the terminal icon and click to open it. Next, it shows the information when you click the terminal icon. M350 Series User Manual...
Page 201
Therefore, PC-B will receive Tag20 traffic when PC-A sends ICMP packet to PC-B IP (192.168.2.20) and captures traffic on PC-B. Example 2: PC-A ping PC-B (Trunk to Access) For PC-B, add default gateway and LAN's MAC to ARP M350 Series User Manual...
(1) PC-A sends message to PC-B and PC-B should not receive any message. (2) PC-B sends message to PC-A and PC-A should receive message. Note: PC-A and PC-B should install MQTT Client software. There is a process to explain the steps and result. M350 Series User Manual...
Page 203
If your OS system is Ubuntu, you should install as below steps: Step2: Configure MQTT for the Cellular Router You need to add two users. For example, we create the users for test and test2. M350 Series User Manual...
Page 206
For PC-B, command "mosquitto_sub -h 192.168.1.1 -t abc -u test2 -P test2". For PC-A, command "mosquitto_pub -h 192.168.1.1 -t abc -u test -P test -m test" and confirm the message on PC-B. It won’t receive any message on PC-B. M350 Series User Manual...
Page 207
For PC-A, command "mosquitto_sub -h 192.168.1.1 -t abc -u test -P test" For PC-B, command "mosquitto_pub -h 192.168.1.1 -t abc -u test2 -P test2 -m test" and confirm the message on PC-A. It will receive test message on PC-A. M350 Series User Manual...
(2) PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. Note:Router-1 and Router-2 are pure routers and should be supported "NAT enable / disable". LAN configuration: WAN configuration: M350 Series User Manual...
Page 209
The Mode is on at the settingssection and add the routing. Step 2: Router-1 configuration is as below. (1) Login to the Router-1 web site, and then "NAT disable". (2) Configure LAN IP: 192.168.10.1 (3) Configure WAN IP: 192.168.1.50 M350 Series User Manual...
Page 210
The Mode is on at the settingssection and add the routing. Step2: Router-2 configuration is as below. (1) Login to the Router-2 web site, and then "NAT disable". (2) Configure LAN IP: 192.168.20.1 (3) Configure WAN IP: 192.168.2.2 M350 Series User Manual...
Page 211
Result:PC-A sends ICMP packet to Router-2 LAN and WAN IP and they should have response. M350 Series User Manual...
Need help?
Do you have a question about the M350 Series and is the answer not in the manual?
Questions and answers