Page 1 NetModule Automotive Gateway NG800 User Manual for Software Version 4.5.0.100 Manual Version 2.272 NetModule AG, Switzerland December 15, 2020...
Page 2 The speciﬁcations and information regarding the products in this manual are subject to change without notice. We would like to point out that NetModule makes no representation or warranties with respect to the contents herein and shall not be responsible for any loss or damage caused to the user by the direct or indirect use of this information This document may contain information about third party products or processes.
Page 3: Table Of Contents
Contents 1. Welcome to NetModule ........
Page 4 NG800 User Manual for NRSW version 4.5.0.100 5.4. ROUTING ......... . .
Page 5 NG800 User Manual for NRSW version 4.5.0.100 5.8.10. Legal Notice ........183 5.9.
Page 6 NG800 User Manual for NRSW version 4.5.0.100 List of Figures 3.1. Reset Input (Serial Interface not used) ......
Page 7 NG800 User Manual for NRSW version 4.5.0.100 5.44. Web Server ......... . 141 5.45.
Page 8 ........3.3. NG800 Status Indicators ........
Page 9: Welcome To Netmodule
User Manual for NRSW version 4.5.0.100 1. Welcome to NetModule Thank you for purchasing a NetModule product. This document should give you an introduction to the device and its features. The following chapters describe any aspects of commissioning the device, installation procedure and provide helpful information towards conﬁguration and maintenance.
Page 10: Conformity
Information about the device interfaces: – All systems that are connected to the NetModule gateway interfaces must meet the requirements for SELV (Safety Extra Low Voltage) systems. – Interconnections must not leave the building nor penetrate the body shell of a vehicle.
Page 11: Declaration Of Conformity
– Exercise particular caution near personal medical aids, such as pacemakers and hear- ing aids. – The NetModule gateways may also cause interference in the nearer distance of TV sets, radio receivers and personal computers. – Never perform work on the antenna system during a thunderstorm.
Page 12: Open Source Software
User Manual for NRSW version 4.5.0.100 2.5. Open Source Software We inform you that NetModule products may contain in part open-source software. We are distributing such open-source software to you under the terms of GNU General Public License (GPL) , GNU...
Page 13: Specifications
NG800 User Manual for NRSW version 4.5.0.100 3. Speciﬁcations 3.1. Appearance...
Page 14: Features
The NG800 can optionally be equipped with Software Keys for for additional functionality. Due to its modular approach, the NG800 router and its hardware components can be arbitrarily as- sembled according to its indented usage or application. Please contact us in case of special project requirements.
Page 15: Interfaces
A5 GNSS FAKRA male connector for GNSS LED 1 Status LED LED 2 Link LED 48-pin CMC Molex interface for all wired connections Earthing cable Earthing the base plate is optional (protective earth is not compulsory) Table 3.2.: NG800 Interfaces...
Page 16: Default Led Indicators
Table 3.3.: NG800 Status Indicators 3.4.3. Reset NG800 does not have a built-in reset button. An external reset can be triggered as described below (e.g. by installing an external reset button). The reset button has two functions: 1. Reboot the system: Apply reset signal for at least 3 seconds to release a system reboot.
Page 17: Reset Input (Serial Interface Not Used)
NG800 User Manual for NRSW version 4.5.0.100 When the serial interface is not used, a push button can be connected from the positive battery port to the serial interface receive input (X48:L1) as shown in the following image. Figure 3.1.: Reset Input (Serial Interface not used) If the serial interface is used in the application, a break-before-make switch must be used.
Page 18: Mobile
NG800 User Manual for NRSW version 4.5.0.100 3.4.4. Mobile The variants of the NG800 support multiple multimode modules for mobile communication. The LTE modules supports 2x2 MIMO. Standard Bands 4G (LTE/FDD) B1 (2100), B3 (1800), B5 (850), B7 (2600), B8 (900), B20 (800)
Page 19: Wlan
FAKRA, I-Code, Beige Table 3.7.: WLAN Antenna Port Speciﬁcation Note: WLAN antennas with a higher gain may be used with the NetModule router "Enhanced-RF-Conﬁguration" software license and the antenna gain and cable attenuation that have been correctly conﬁgured by certiﬁed specialized personnel.
Page 20: Gnss
NG800 User Manual for NRSW version 4.5.0.100 3.4.7. GNSS The GNSS module supports Dead Reckoning with onboard 3D accelerometer and 3D gyroscope. Feature Speciﬁcation Systems GPS/GLONASS/BeiDu/Galileo Data stream JSON or NMEA Channels Tracking sensitivity Up to -160 dBm Accuracy Up to 2.5m CEP...
Page 21: Pin Assignment X48
NG800 User Manual for NRSW version 4.5.0.100 3.4.8. Pin Assignment X48 X48 is a combination connector that carries all wired signals (except antennas). Figure 3.3.: Pin Assignment X48 Figure 3.4.: X48 Outline Group Pin Signal Description 100 Base-T1 Interface 0...
Page 22: Pin Assignments Of X48
NG800 User Manual for NRSW version 4.5.0.100 Group Pin Signal Description D2 CAN1-H High Level CAN bus line CAN Interface 2 D3 CAN2-L Low Level CAN bus line D4 CAN2-H High Level CAN bus line C3 CAN2-T 120 Ω termination resistor.
Page 23: Power Supply
NG800 User Manual for NRSW version 4.5.0.100 3.4.9. Power Supply NG800 routers have a non-isolated power supply input. It has the following speciﬁcations: Feature Speciﬁcation Power supply nominal voltages 12 V and 24 V Voltage range (absolute maximum) to 36 V Power consumption 7 W (average), 10 W (max.), Power Down <2 mA...
Page 24: Fast Ethernet (100 Base-Tx Interface)
NG800 User Manual for NRSW version 4.5.0.100 3.4.10. Fast Ethernet (100 Base-Tx Interface) Speciﬁcation The Fast Ethernet port is speciﬁed as follows: Feature Speciﬁcation Isolation 1500 V Speed 10/100 Mbit/s Mode Half- & Full-Duplex Crossover Automatic MDI/MDI-X Max. cable length...
Page 25: Automotive Ethernet Port Specification
NG800 User Manual for NRSW version 4.5.0.100 Feature Speciﬁcation Cable type twisted pair, i.e. KROCAR 64996795, 2x 0.13 mm Cable shield Unshielded Connector type Molex CMC48 Table 3.15.: Automotive Ethernet Port Speciﬁcation Pin Assignment 100 Base-T1 Interface 1 BRDR1-TRXP + terminal for transmit/receive signal...
Page 26: Can Interface
NG800 User Manual for NRSW version 4.5.0.100 3.4.12. 2x CAN Interface The CAN interfaces have the following speciﬁcations: Feature Speciﬁcation Features 2x CAN V2.0B Signals CANH, CANL Signal Level High > 2.75 V , low < 2.0 V Bitrate Up to 1 Mbit/s Termination Both ports have 6 kΩ...
Page 27: Serial
NG800 User Manual for NRSW version 4.5.0.100 3.4.13. Serial RS-232 The RS-232 port has the following speciﬁcation (bold values show the default conﬁguration): Feature Speciﬁcation Protocol 3-wire RS-232: GND, TXD, RXD Baud rate 300, 1 200, 2 400, 4 800, 9 600, 19 200, 38 400,...
Page 28: Installation
NG800 User Manual for NRSW version 4.5.0.100 4. Installation The NG800 is designed for mounting it on a wall or in a switch cabinet. Please consider the safety instructions in chapter and the environmental conditions in chapter 3.3. The following precautions must be taken before installing a NG800 router: –...
Page 29: Installation Of The Wlan Antennas
– WLAN antennas must only be installed in buildings or within vehicle hulls. – WLAN antennas may have an ampliﬁcation of maximum 3dBi in the relevant frequency range. WLAN antennas with a higher ampliﬁcation may be used with the NetModule router "Enhanced-RF-Conﬁguration" software license and the antenna gain and cable attenuation that have been correctly conﬁgured by certiﬁed specialized personnel.
Page 30: Installation Of The Automotive Ethernet
3.4.9. Attention: Only CE-compliant power supplies with a current-limited SELV output voltage range may be used with the NetModule gateway. A battery may be used. Requires external fuse (recommended type: Littlefuse ATOF Blade Fuse, 32V, 3A,0287003.PXCN).
Page 31: Configuration
5.1. First Steps NetModule routers can be easily set up by using the HTTP-based conﬁguration interface, called the Web Manager. It is supported by the latest web browsers (e.g. Microsoft Internet Explorer 11, Mozilla Firefox 28.0, Safari 7 and many others). Please ensure to have JavaScript turned on.
Page 32: Recovery
NetModule Router Simulator Hostname netbox Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.1.: Initial Login Please note that the admin password will be also applied for the root user which can be used to access the device via the serial console, telnet, SSH or to enter the bootloader. You may also conﬁgure additional users which will only be granted to access the summary page or retrieve status information but not to set any conﬁguration parameters.
Page 33 NG800 User Manual for NRSW version 4.5.0.100 2. Serial Console Login: It is also possible to log into the system via the serial port. This would re- quire a terminal emulator (such as PuTTY or HyperTerminal) and an RS232 connection (115200 8N1) attached to the serial port of your local computer.
Page 34: Home
Firewall System NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.2.: Home Summary This page offers a short summary about the administrative and operational status of the router’s inter- faces. This page offers details about any enabled Wide Area Network (WAN) links (such as the IP addresses, network information, signal strength, etc.) The information about the amount of downloaded/uploaded...
Page 35 NG800 User Manual for NRSW version 4.5.0.100 power of the interface as well as the list of associated stations. GNSS This page displays the position status values, such as latitude/longitude, the satellites in view and more details about the used satellites.
Page 36 This page provides information about Dynamic DNS. System Status The system status page displays various details of your NG800 router, including system details, infor- mation about mounted modules and software release information. This section will list all webpages generated by SDK scripts.
Page 37: Interfaces
Port Setup VLAN Management LAN2 permanent IP Settings WWAN1 permanent Mobile Modems Apply SIMs Interfaces WLAN Administration Configuration IP Settings Bridges Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.3.: WAN Links...
Page 38 NG800 User Manual for NRSW version 4.5.0.100 In general, a link will be only dialed or declared as up if the following prerequisites are met: Condition WWAN WLAN PPPoE Modem is registered Registered with valid service type Valid SIM state Sufﬁcient signal strength...
Page 39 If WLAN client, the LAN interface to which the WAN link should be bridged. NetModule routers provide a feature called IP pass-through (aka Drop-In mode). If enabled, the WAN address will be be passed-through to the ﬁrst DHCP client of the speciﬁed LAN interface. As Ethernet- based communication requires additional addresses, we pick an appropriate subnet to talk to the LAN host.
Page 40: Wan Settings
Bridges Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.4.: WAN Settings Parameter TCP MSS Settings MSS adjustment Enable or disable MSS adjustment on WAN interfaces. Maximum segment size Maximum number of bytes in a TCP data segment.
Page 41: Link Supervision
Bridges Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.5.: Link Supervision Parameter Supervision Settings Link The WAN link to be monitored (can be ANY) Mode Speciﬁes whether the link shall only be monitored if being up (e.g.
Page 42 NG800 User Manual for NRSW version 4.5.0.100 Parameter Supervision Settings Ping interval The interval in seconds at which pings are transmitted on each inter- face Retry interval The interval in seconds at which pings are re-transmitted in case a ﬁrst ping failed Max.
Page 43: Ethernet
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.6.: Ethernet Ports This menu can be used to individually assign each Ethernet port to a LAN interface, just in case you want to have different subnets per port or use one port as WAN interface. You may assign multiple...
Page 44: Ethernet Link Settings
VLAN Management NetModule routers support Virtual LAN according to IEEE 802.1Q which can be used to create virtual interfaces on top of an Ethernet interface. The VLAN protocol inserts an additional header to Ethernet frames carrying a VLAN Identiﬁer (VLAN ID) which is used for distributing the packets to the associated...
Page 45: Vlan Management
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.8.: VLAN Management In order to form a distinctive subnet, the network interface of a remote LAN host must be conﬁgured with the same VLAN ID as deﬁned on the router. Further, 802.1P introduces a priority ﬁeld which inﬂuences packet scheduling in the TCP/IP stack.
Page 46: Lan Ip Configuration
Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.9.: LAN IP Conﬁguration Parameter LAN IP Settings Mode Deﬁnes whether this interface is being used as LAN or WAN interface When running in LAN mode, the interface may be conﬁgured with the following settings:...
Page 47 NG800 User Manual for NRSW version 4.5.0.100 Parameter LAN IP Settings Alias subnet mask The alias subnet mask for this interface When running in WAN mode, the interface may be conﬁgured with the following settings: Parameter WAN IP Settings WAN mode The WAN operation mode, deﬁnes whether the interface should run...
Page 48: Mobile
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.10.: SIMs The SIM page gives an overview about the available SIM cards, their assigned modems and the current state. Once a SIM card has been inserted, assigned to a modem and successfully unlocked, the card...
Page 49 NG800 User Manual for NRSW version 4.5.0.100 not, please double-check your PIN. Please keep in mind that registering to a network usually takes some time and depends on signal strength and possible radio interferences. You may hit the Update button at any time in order to restart PIN unlocking and trigger another network registration attempt.
Page 50 NG800 User Manual for NRSW version 4.5.0.100 Conﬁguration A SIM card is generally assigned to a default modem but might be switched, for instance if you set up two WWAN interfaces with one modem but different SIM cards. Close attention has to be paid when other services (such as SMS or Voice) are operating on that modem, as a SIM switch will naturally affect their operation.
Page 51: Wwan Interfaces
Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.11.: WWAN Interfaces The following mobile settings are required: Parameter WWAN Mobile Parameters Modem The modem to be used for this WWAN interface...
Page 52 NG800 User Manual for NRSW version 4.5.0.100 Generally, the connection settings are derived automatically as soon as the modem has registered and the network provider has been found in our database. Otherwise, it will be required to conﬁgure the following settings manually:...
Page 53: Wlan
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.12.: WLAN Management If the administrative status is set to disabled, the module will be powered off in order to reduce the overall power consumption. Regarding antennas, we generally recommend using two antennas for better coverage and throughput.
Page 54 NG800 User Manual for NRSW version 4.5.0.100 Conﬁgurable parameters for access-point, client mode, mesh point and any dual mode: Parameter WLAN Management Regulatory Domain Select the country the Router operates in Number of antennas Set the number of connected antennas Antenna gain Specify the antenna gain for the connected antennas.
Page 55: Ieee 802.11 Network Standards
NG800 User Manual for NRSW version 4.5.0.100 Standard Frequencies Bandwidth Data Rate 802.11g 2.4 GHz 20 MHz 54 Mbit/s 802.11n 2.4 GHz 20 MHz 144 Mbit/s 802.11n 5 GHz 40 MHz 150 Mbit/s Table 5.20.: IEEE 802.11 Network Standards...
Page 56 NG800 User Manual for NRSW version 4.5.0.100 Running as mesh point, you can further conﬁgure the following settings: Parameter WLAN Mesh-Point Management Operation type Speciﬁes the desired IEEE 802.11 operation mode Radio band Selects the radio band to be used for connections, depending on your module it could be 2.4 or 5 GHz...
Page 57 NG800 User Manual for NRSW version 4.5.0.100 Prior to setting up an access point, it is always a good idea to run a network scan for getting a list of neighboring WLAN networks and then choose the less interfering channel. Please note that two adequate channels are required for getting good throughputs with 802.11n and a bandwidth of 40...
Page 58: Wlan Configuration
WPA + WPA2 / TKIP + CCMP Ethernet Port Setup VLAN Management IP Settings Mobile Modems SIMs Interfaces WLAN Administration Configuration IP Settings Bridges Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.13.: WLAN Conﬁguration...
Page 59 NG800 User Manual for NRSW version 4.5.0.100 This section can be used to conﬁgure security-related settings. Parameter WLAN Access-Point Conﬁguration SSID The network name (called SSID) Security mode The desired security mode WPA/WPA2 mixed mode WPA2 should be preferred over WPA1, running WPA/WPA2 mixed- mode offers both.
Page 60 NG800 User Manual for NRSW version 4.5.0.100 Running in mesh point mode, it is possible to connect to one or more mesh points within the mesh network at the same time. The system will automatically join the wireless network, connect to the other mesh partners with the same ID and sercurtiy credentials.
Page 61 NG800 User Manual for NRSW version 4.5.0.100 The following security modes can be conﬁgured: Parameter WLAN Mesh-Point Security Modes MESHID is disabled None No authentication, provides an open network SAE (Simultaneous Authentication of Equals) is a secure password- based authentication and key establishment protocol...
Page 62: Wlan Ip Configuration
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.14.: WLAN IP Conﬁguration The access point networks can be bridged to any LAN interface for letting WLAN clients and Ethernet hosts operate in the same subnet. However, for multiple SSIDs we strongly recommend to set up separated interfaces in routing-mode in order to avoid unwanted access and trafﬁc between the inter-...
Page 63 NG800 User Manual for NRSW version 4.5.0.100 The following feature can be conﬁgured if the WLAN interface is bridged Parameter WLAN Bridging features IAPP Enables the Inter-Access Point Protocol feature Pre-auth Enables the pre-authentication mechanism for roaming clients (if sup-...
Page 64: Software Bridges
NG800 User Manual for NRSW version 4.5.0.100 5.3.5. Software Bridges Software bridges can be used to bridge layer-2 devices like OpenVPN TAP, GRE or WLAN interfaces without the need for a physical LAN interface. Bridge Settings This page can be used to enable/disable software bridges.
Page 65: Serial Port
NG800 User Manual for NRSW version 4.5.0.100 5.3.6. Serial Port This page can be used to manage your serial ports. A serial port can be used by: Parameter Serial Port Usage none The serial port is not used login console The serial port is used to open a console which can be accessed with a serial terminal client from the other side.
Page 66: Serial Port Administration
SERIAL1 is used by: modem emulator IP Settings Mobile Modems Apply Back SIMs Interfaces WLAN Administration Configuration IP Settings Bridges Serial Digital I/O GNSS NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.15.: Serial Port Administration...
Page 67: Serial Port Settings
Allow clients from: specify Apply NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.16.: Serial Port Settings Parameter Serial Settings Physical protocol Selects the desired physical protocol on the serial port Baud rate Speciﬁes the baud rate run on the serial port Data bits Speciﬁes the number of data bits contained in each frame...
Page 68 NG800 User Manual for NRSW version 4.5.0.100 Parameter Serial Settings Deﬁnes the software ﬂow control for the serial port, XOFF will send a Software ﬂow control stop, XON a start character to the other end to control the rate of any incoming data Hardware ﬂow control...
Page 69 NG800 User Manual for NRSW version 4.5.0.100 When running the serial port as AT modem emulator the following settings can be applied: Parameter Serial Port Settings Physical protocol Selects the desired physical protocol on the serial port Baud rate Speciﬁes the baud rate run on the serial port Hardware ﬂow control...
Page 70: Bluetooth Low Energy
NG800 User Manual for NRSW version 4.5.0.100 5.3.7. Bluetooth Low Energy If a Bluetooth interface is available it can be used either with the SDK scripting engine or forwarded to the Virtualization. Bluetooth Settings This page can be used to assign the Bluetooth module either to SDK or Virtualization or to turn Blue- tooth functionality off.
Page 71: Gnss
NG800 User Manual for NRSW version 4.5.0.100 5.3.8. GNSS Administration The GNSS page lets you enable or disable the GNSS modules present in the system and can be used to conﬁgure the daemon that can be used to share access to receivers without contention or loss of data and to respond to queries with a format that is substantially easier to parse than the NMEA 0183 emitted directly by the GNSS device.
Page 72 NG800 User Manual for NRSW version 4.5.0.100 Parameter GNSS Server Conﬁguration Speciﬁes where clients can connect from, can be either everywhere Allow clients from or from a speciﬁc network Clients start mode Speciﬁes how data transferal is accomplished when a client connects.
Page 73 NG800 User Manual for NRSW version 4.5.0.100 Position This pages provides further information about the satellites in view and values derived from them: Parameter GNSS Information Latitude The geographic coordinate specifying the north-south position Longitude The geographic coordinate specifying the east-west position...
Page 74: Routing
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.17.: Static Routing In general, host routes precede network routes and network routes precede default routes. Addition- ally, a metric can be used to determine the priority of a route, a packet will go in the direction with the lowest metric in case a destination matches multiple routes.
Page 75: Static Route Flags
NG800 User Manual for NRSW version 4.5.0.100 Parameter Static Route Conﬁguration Destination The destination address of a packet Netmask The subnet mask which forms, in combination with the destination, the network to be addressed. A single host can be speciﬁed by a netmask of 255.255.255.255, a default route corresponds to 0.0.0.0.
Page 76: Extended Routing
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.18.: Extended Routing In contrast to statis routes, extended routes can be made up, not only of a destination address/net- mask, but also a source address/netmask, incoming interface and the type of service (TOS) of packets.
Page 77: Multipath Routes
Classification NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.19.: Multipath Routes At least two interfaces have to be deﬁned to establish multipath routing. Additional interfaces can be added by pressing the plus sign. Parameter...
Page 78: Mobile Ip
Cisco 2900 Series home agent implementation has been veriﬁed. However, since NetModule routers implement a mobile node as well as a home agent, a MIP network with up to 10 mobile nodes can be implemented without requiring expensive third party routers.
Page 79 NG800 User Manual for NRSW version 4.5.0.100 Parameter Mobile IP Conﬁguration The shared secret used for authentication of the mobile node at the Shared secret home agent. This can be either a 128-bit hexadecimal value or a random length ASCII string.
Page 80: Mobile Ip
(optional) Apply NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.20.: Mobile IP Parameter Mobile IP Node Conﬁguration The Security Parameter Index (SPI) identifying the security context for the tunnel between the mobile node and the home agent. This is used to distinguish mobile nodes from each other.
Page 81 NG800 User Manual for NRSW version 4.5.0.100 Parameter Mobile IP Node Conﬁguration The shared secret used for authentication of the mobile node at the Shared secret home agent. This can be either a 128-bit hexadecimal value or a random length ASCII string.
Page 82: Quality Of Service
User Manual for NRSW version 4.5.0.100 5.4.5. Quality Of Service NetModule routers are able to prioritize and shape certain kinds of IP trafﬁc. This is currently limited on egress, which means that only outgoing trafﬁc can be stipulated. The current QoS solution is using Stochastic Fairness Queueing (SFQ) classes in combination with Hierarchy Token Bucket (HTB) qdiscs.
Page 83 NG800 User Manual for NRSW version 4.5.0.100 In case an interface has been activated, the system will automatically create the following queues: Parameter QoS Default Queues high A high priority queue which may hold any latency-critical services (such as VoIP)
Page 84: Multicast
5.4.6. Multicast Multicast routing (MCR) can be conﬁgured and managed by a daemon. Only one MCR daemon can be used at a time. NetModule routers ship with two different MCR daemons to select from depending on your dependen- cies: Parameter...
Page 85: Ospf
NG800 User Manual for NRSW version 4.5.0.100 5.4.7. OSPF The OSPF tab allows the NetModule router to be added to a network of OSPF routers. Parameter OSPF General Settings OSPF status Speciﬁes whether the OSPF routing protocol is active Redistribute...
Page 86: Bgp
NG800 User Manual for NRSW version 4.5.0.100 5.4.8. BGP The BGP tab allows to set up peerings of the NetModule router with other Border Gateway Protocol enabled routers. Parameter BGP General Settings BGP status Speciﬁes whether the BGP routing protocol is active...
Page 87: Firewall
NG800 User Manual for NRSW version 4.5.0.100 5.5. FIREWALL 5.5.1. Administration NetModule routers use Linux’s netﬁlter/iptables ﬁrewall framework http://www.netfilter.org (see for more information) which supports stateful inspection, that is, granting the same permissions for inherited connections within an IP session (e.g. FTP which builds up a control and data connection).
Page 88: Rules
Inbound Rules Outbound Rules Apply Clear NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.22.: Firewall Rules Parameter Firewall Rule Conﬁguration Description A meaningful description about the purpose of this rule Action Speciﬁes whether the packets of this rule should be allowed or denied...
Page 89 NG800 User Manual for NRSW version 4.5.0.100 Parameter Firewall Rule Conﬁguration Protocol The used IP protocol of matching packets (UDP, TCP or ICMP) Destination port(s) The destination port of matching packets, which can be speciﬁed by a single port or a range of ports (only UDP/TCP).
Page 90: Napt
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.23.: Masquerading The administration page lets you specify the interfaces on which masquerading will be performed. NAT will hereby use the address of the selected interface and choose a random source port for outgoing connections and thus enables communication between hosts from a private local area network towards hosts on the public network.
Page 91: Inbound Napt
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.24.: Inbound NAPT Please note that the speciﬁed rules are processed by order, that means, traversing the list from top to bottom until a matching rule is found. If there is no matching rule found, the packet will pass as is.
Page 92 NG800 User Manual for NRSW version 4.5.0.100 Parameter Inbound NAPT Rules Ports The used UDP/TCP port of matching packets Redirect to The address to which matching packets shall be redirected Redirect port The port to which matching packets will be redirected...
Page 93: Vpn
Restart on link change: Tunnel Configuration Multipath TCP support: PPTP Administration Tunnel Configuration Apply Restart Client Management Administration Tunnel Configuration L2TP Administration Tunnel Configuration NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.25.: OpenVPN Administration...
Page 94: Openvpn Configuration
User Manual for NRSW version 4.5.0.100 Tunnel Conﬁguration NetModule routers support one single server tunnel and up to four client tunnels. You can specify tunnel parameters either in standard conﬁguration or upload an expert mode ﬁle which has been created in advance. Refer to chapter 5.6.1...
Page 95 NG800 User Manual for NRSW version 4.5.0.100 If the tunnel is operated in client mode, the following settings can be applied: Parameter OpenVPN Client Conﬁguration Peer selection Speciﬁes how the remote peer shall be selected, besides a single server you may conﬁgure multiple servers which can, in case of fail- ures, either be selected sequently (i.e.
Page 96 NG800 User Manual for NRSW version 4.5.0.100 The following further options can be applied: Parameter OpenVPN Options use compression Enable or disable LZO packet compression use keepalive Can be used to send a periodic keepalive packet in order to keep the...
Page 97 NG800 User Manual for NRSW version 4.5.0.100 OpenVPN Expert Conﬁguration (Server) A server tunnel typically requires the following ﬁles: Parameter Server Expert Files server.conf OpenVPN conﬁguration ﬁle ca.crt Root certiﬁcate authority ﬁle server.crt Certiﬁcate ﬁle server.key Private key ﬁle dh1024.pem Difﬁe-Hellman parameters ﬁle...
Page 98: Openvpn Client Management
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.27.: OpenVPN Client Management In the Networking section you can specify a ﬁxed tunnel endpoint address for each client. Please note that, if you intend to use a ﬁxed address for a particular client, you would have to apply ﬁxed addresses to the other ones as well.
Page 99: Ipsec
NG800 User Manual for NRSW version 4.5.0.100 5.6.2. IPsec IPsec is a protocol suite for securing IP communications by authenticating and encrypting each packet of a communication session and thus establishing a secure virtual private network. IPsec includes various cryptographic protocols and ciphers for key exchange and data encryption and can be seen as one of the strongest VPN technologies in terms of security.
Page 100: Ipsec Administration
Tunnel Configuration NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.28.: IPsec Administration This page can be used to enable/disable IPsec, you may also specify whether NAT-Traversal should be used. NAT-Traversal is mainly used for connections which traverse a path where a router modiﬁes the IP address/port of packets.
Page 101: Ipsec Configuration
L2TP Administration Tunnel Configuration NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.29.: IPsec Conﬁguration General For setting up the tunnel you will have to conﬁgure the following parameters ﬁrst: Parameter IPsec General Settings Remote peer IP address or host name of the remote IPsec peer.
Page 102 Restart the peer. IKE Authentication NetModule routers support IKE authentication through pre-shared keys (PSK) or certiﬁcates within a public key infrastructure. Extended Authentication (XAUTH) leverages RADIUS-like authentication and can be used to apply user level access control over IPSec.
Page 103 NG800 User Manual for NRSW version 4.5.0.100 IKE Proposal This section can be used to conﬁgure the phase 1 settings: Parameter IPsec IKE Proposal Settings Choose the desired negotiation mode. Preferably, main mode should Negotiation mode be used but aggressive mode might be applicable when dealing with dynamic endpoint addresses.
Page 104 NG800 User Manual for NRSW version 4.5.0.100 Parameter IPsec Network Settings Local network The address of your local area network Local netmask The netmask of your local area network Peer network The address of the remote network behind the peer...
Page 105: Pptp
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.30.: PPTP Administration When setting up a PPTP tunnel, you would need to choose between server or client. A client tunnel requires the following parameters to be set:...
Page 106: Pptp Tunnel Configuration
Administration Tunnel Configuration Apply NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.31.: PPTP Tunnel Conﬁguration Setting up a server requires the following settings: Parameter PPTP Server Settings Listen address Speciﬁes on which IP address should be listened for incoming client...
Page 107: Pptp Client Management
Username Address Tunnel Configuration Client Management IPsec Administration Tunnel Configuration PPTP Administration Tunnel Configuration Client Management Administration Tunnel Configuration L2TP Administration Tunnel Configuration NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.32.: PPTP Client Management...
Page 108: Gre
NG800 User Manual for NRSW version 4.5.0.100 5.6.4. GRE The Generic Routing Encapsulation (GRE) is a tunneling protocol that can encapsulate a wide variety of network layer protocols inside virtual point-to-point links over IP. GRE is deﬁned in RFC 1701, 1702 and 2784.
Page 109: L2Tp
NG800 User Manual for NRSW version 4.5.0.100 5.6.5. L2TP The Layer 2 Tunneling Protocol is a tunneling protocol which does not support any encryption or conﬁdentiality. It relies on an encryption protocol that it passes within the tunnel to provide privacy.
Page 110: Dial-In
NG800 User Manual for NRSW version 4.5.0.100 5.6.6. Dial-In On this page you can conﬁgure the Dial-In server in order to establish a data connection over GSM calls. Thus, one would generally apply a required service type of 2G-only, so that the modem registers to GSM only.
Page 111 NG800 User Manual for NRSW version 4.5.0.100 Please note that Dial-In connections are generally discouraged. As they are implemented as GSM voice calls, they suffer from unreliability and poor bandwidth.
Page 112: Services
5.7. SERVICES 5.7.1. SDK NetModule routers are shipping with a Software Development Kit (SDK) which offers a simple and fast way to implement customer-speciﬁc functions and applications. It consists of: 1. An SDK host which deﬁnes the runtime environment (a so-called sandbox), that is, controlling...
Page 113 NG800 User Manual for NRSW version 4.5.0.100 SDK API Functions The current range of API functions can be used to implement the following features: 1. Send/Retrieve SMS 2. Send E-mail 3. Read/Write from/to serial device 4. Control digital input/output ports 5.
Page 114 NG800 User Manual for NRSW version 4.5.0.100 Let’s now pay some attention to the very powerful API function nb_status. It can be used to query the router’s status values in the same manner as they can be shown with the CLI. It returns a structure of variables for a speciﬁc section (a list of available sections can be obtained by running cli status -h).
Page 115 NG800 User Manual for NRSW version 4.5.0.100 Here is an example how one might adopt those functions: /* check current city and enable the second WAN link */ location = nb_status ( " location " ( location ) { city = struct_get ( location , "...
Page 116: Sdk Administration
Redundancy Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.34.: SDK Administration This page can be used to control the SDK host and apply the following settings: Parameter SDK Administration Settings Administrative status Speciﬁes whether SDK scripts should run or not...
Page 117: Sdk Jobs
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.35.: SDK Jobs This page can be used to set up scripts, triggers and jobs. It is usually a good idea to create a trigger ﬁrst which is made up by the following parameters:...
Page 118 NG800 User Manual for NRSW version 4.5.0.100 Parameter SDK Script Parameters Name A meaningful name to identify the script Description An optional description of the script Arguments An optional set of arguments passed to the script (supports quoting) Action You may either edit a script, upload it to the system or select one of...
Page 119 NG800 User Manual for NRSW version 4.5.0.100 Testing The testing page offers an editor and an input ﬁeld for optional arguments which can be used to perform test runs of your script or test dedicated portions of it or upload an entire ﬁle. Please note that you might need to quote arguments as they will otherwise be separated by white-spaces.
Page 120: Sms Control Commands
NG800 User Manual for NRSW version 4.5.0.100 The following commands are supported: Command Action status Will reply a message to the sender including a short system overview connect Will enable the ﬁrst WAN link conﬁgured on the system disconnect Will disable the ﬁrst WAN link conﬁgured on the system...
Page 121: Dhcp Server
Discovery Redundancy Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.36.: DHCP Server The following settings for each interface can be applied then: Parameter DHCP Server Settings Operation mode Speciﬁes whether the DHCP server is enabled or not First lease address The ﬁrst address out of the range of IP addresses given to hosts...
Page 122 NG800 User Manual for NRSW version 4.5.0.100 Parameter DHCP Server Settings Persistent leases By turning on this option the router will remember issued leases even after a reboot. This can be used to ensure that the same IP address will be assigned to a particular host.
Page 123: Dns Server
Apply Discovery Redundancy Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.37.: DNS Server The following settings can be applied: Parameter DNS Server Settings Administrative status Enables or disables the DNS server Domain name...
Page 124 NG800 User Manual for NRSW version 4.5.0.100...
Page 125 NG800 User Manual for NRSW version 4.5.0.100 You may further conﬁgure static hosts for serving ﬁxed IP addresses for various host names. Parameter DNS Static Hosts Settings Address The IP address of the static host Hostname The hostname of the static host...
Page 126: Ntp Server
Discovery Redundancy Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.38.: NTP Server The following settings for each interface can be applied then: Parameter NTP Server Settings Administrative status Speciﬁes whether the NTP server is enabled or not Poll interval Deﬁnes the polling interval (64..2048 seconds) for synchronizing the...
Page 127: Dynamic Dns
We provide support for a bunch of common DynDNS operators but it is also possible to deﬁne a custom update URL. Please note that your NetModule router can operate as DynDNS server on its own, provided that you have your hosts pointed to the DNS service of the router.
Page 128 NG800 User Manual for NRSW version 4.5.0.100 A DynDNS service can receive the following parameters: Parameter Dynamic DNS Settings Provider You can choose one of the listed providers or provide a custom URL Dynamic address Speciﬁes whether the address is derived from the hot-link or via an...
Page 129: E-Mail
Discovery Redundancy Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.40.: E-Mail Settings It can be enabled by applying the following settings. Parameter E-Mail Client Settings E-mail client status Administrative status of the E-Mail client...
Page 130 NG800 User Manual for NRSW version 4.5.0.100 Parameter E-Mail Client Settings Password Password used for authentication...
Page 131: Events
NG800 User Manual for NRSW version 4.5.0.100 5.7.7. Events By using the event manager you can notify remote systems about system events. A notiﬁcation can be sent using E-Mail, SMS or SNMP traps. Parameter Event Notiﬁcation Settings E-Mail address The E-Mail address to which the notiﬁcation shall be sent (E-Mail...
Page 132: Sms
5.7.8. SMS Administration NetModule routers can receive or send short messages (SMS) if enabled by your SIM provider. Messages are received/sent by the modem which has been assigned to a SIM, so one has to properly conﬁgure a SMS-capable default modem as described in chapter 5.3.3.
Page 133: Sms Number Expressions
NG800 User Manual for NRSW version 4.5.0.100 identify SIMs based on their IMEI number and track their statistics in a non-volatile manner. Parameter SMS SIM Conﬁguration SMS gateway The service center number for sending short messages. It is generally retrieved automatically from your SIM card but you may deﬁne a ﬁx number here.
Page 134: Ssh/Telnet Server
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.42.: SSH and Telnet Server Please note that these services will be accessible from the WAN interface also. In doubt, please consider to disable or restrict access to them by applying applicable ﬁrewall rules.
Page 135 NG800 User Manual for NRSW version 4.5.0.100 The following parameters can be applied to the SSH service: Parameter SSH Server Settings Administrative status Whether the SSH service is enabled or disabled Server port The TCP port of the service (usually 22)
Page 136: Snmp Agent
NG800 User Manual for NRSW version 4.5.0.100 5.7.10. SNMP Agent NetModule routers are equipped with an SNMP daemon, supporting basic MIB tables (such as ifTable), plus additional enterprise MIBs to manage multiple systems. Parameter Supported MIBs .1.3.6.1.2.1 MIB-II (RFC1213), SNMPv2-MIB (RFC3418) .1.3.6.1.2.1.2.1...
Page 137: Snmp Agent
Discovery Redundancy Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.43.: SNMP Agent The following parameters can be used to conﬁgure the SNMP agent: Parameter SNMP Conﬁguration Administrative status Enable or disable the SNMP agent Operation mode Speciﬁes if agent should run in compatibilty mode or for SNMPv3 only...
Page 138 NG800 User Manual for NRSW version 4.5.0.100 SNMP Authentication When running in SNMPv3, it is possible to conﬁgure the following authentication settings: Parameter SNMPv3 Authentication Authentication Deﬁnes the authentication (MD5 or SHA) Encryption Deﬁnes the privacy protocols to use (DES or AES) In general, the admin user can read and write any values.
Page 139 NG800 User Manual for NRSW version 4.5.0.100 Getting the current conﬁg description: snmpget -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1 1.3.6.1.4.1.31496.10.40.4.0 Getting the current conﬁg hash: snmpget -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1 1.3.6.1.4.1.31496.10.40.5.0...
Page 140 NG800 User Manual for NRSW version 4.5.0.100 Switching to alternative software: snmpset -v 3 -u admin -n "" -l authNoPriv -a MD5 -x DES -A admin01admin01 192.168.1.1 1.3.6.1.4.1.31496.10.40.16.0 i 0 The return value can be derived from the software update status.
Page 141: Web Server
Discovery Redundancy Apply Voice Gateway NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.44.: Web Server Parameter Web Server Settings Administrative Status Enable or disable the Web server HTTP port Web server port for HTTP connections...
Page 142: Mqtt Broker
NG800 User Manual for NRSW version 4.5.0.100 5.7.12. MQTT Broker The MQTT Broker can be used to distribute MQTT messages between MQTT clients. Please set up appropriate ﬁrewall rules if you want to restrict access to the MQTT Broker. Keys and certiﬁcates for TLS encryption are managed via Keys & Certiﬁcates (see chapter 5.8.8).
Page 143: Softflow
NG800 User Manual for NRSW version 4.5.0.100 5.7.13. Softﬂow This page can be used to conﬁgure the network trafﬁc analyser daemon softﬂowd used for exporting NetFlow trafﬁc data. Parameter Softﬂow Settings Interface Interface on which to listen for trafﬁc Host Address Destination address of the trafﬁc data...
Page 144: Discovery
NG800 User Manual for NRSW version 4.5.0.100 5.7.14. Discovery This page can be used to enabled discovery protocols which can be used to discover and to get discovered by other hosts. Parameter Discovery Conﬁguration Administrative status Administrative status Enabled protocols...
Page 145: Redundancy
User Manual for NRSW version 4.5.0.100 5.7.15. Redundancy This page can be used to set up a redundant pair of NetModule routers (or other systems) by running the Virtual Router Redundancy Protocol (VRRP) between them. A typical VRRP scenario deﬁnes a ﬁrst host playing the master and another the backup device, they both deﬁne a virtual gateway IP...
Page 146 NG800 User Manual for NRSW version 4.5.0.100 Parameter Redundancy Conﬁguration Role The role of this system (either master or backup) The Virtual Router ID (you can theoretically run multiple instances) Interface Interface on which VRRP should be performed Virtual gateway address The virtual gateway address formed by the participating hosts We assign a priority of 100 to the master and 1 to the backup router.
Page 147: Itxpt
NG800 User Manual for NRSW version 4.5.0.100 5.7.16. ITxPT This is an integration of the ITxPT standard v2.0.1. (see ITxPT Onboard Architecture Speciﬁcations v2.0.1) Conﬁguration Figure 5.46.: ITxPT conﬁguration The following parameters can be used to set it up: Parameter...
Page 148: Itxpt Fmstoip
NG800 User Manual for NRSW version 4.5.0.100 FMS to IP Figure 5.47.: ITxPT FMStoIP On this page you can conﬁgure the FMS to IP functionality. Parameter FMS to IP options Enable Speciﬁes whether the FMS to IP functionality should be enabled or disabled.
Page 149 NG800 User Manual for NRSW version 4.5.0.100 FMS to IP database format The json ﬁle format is used. The database ﬁle describes the incoming data-packages. There are two basic components to describe any signal used in the FMS standard. The Parameter Group Number (PGN) and the Suspect Parameter Number (SPN).
Page 150 NG800 User Manual for NRSW version 4.5.0.100 The top level structure is an array. It contains PGN objects that deﬁne a PGN with the following types: PGN Deﬁnition Parameter PGN deﬁnition name Name of the pgn. The PGN number in decimal.
Page 151 NG800 User Manual for NRSW version 4.5.0.100 SPN Deﬁnition The SPN are divided into three types: nummerical, status and string. Parameter Nummerical SPN byteSize Size of the data in bytes. offset The offset in the can-data. formatGain The numerical factor used to give the value.
Page 152: Itxpt Gnss
NG800 User Manual for NRSW version 4.5.0.100 ITxPT GNSS Figure 5.48.: ITxPT GNSS Parameter ITxPT GNSS Enable Speciﬁes whether the ITxPT GNSS should be enabled or disabled.
Page 153: Itxpt Time
NG800 User Manual for NRSW version 4.5.0.100 ITxPT Time Figure 5.49.: ITxPT Time Parameter ITxPT Time Enable Speciﬁes whether the ITxPT Time should be enabled or disabled.
Page 154: Itxpt Vehicletoip
NG800 User Manual for NRSW version 4.5.0.100 VEHICLE to IP Figure 5.50.: ITxPT VEHICLEtoIP Parameter ITxPT VEHICLEtoIP Enable Speciﬁes whether the ITxPT VEHICLEtoIP should be enabled or dis- abled. A VEHICLEtoIP database is necessary to enable this service.
Page 155: Voice Gateway
Web Server MQTT Broker Apply Softflow Discovery Redundancy Voice Gateway NB2800 NetModule Router Simulator Hostname NB1800 Software Version 4.4.0.104 © 2004-2020, NetModule AG Figure 5.51.: Voice Gateway Administration The following parameters can be used to set it up: Parameter Voice Gateway Administration Settings Administrative status Speciﬁes whether the gateway shall be enabled or disabled...
Page 156 NG800 User Manual for NRSW version 4.5.0.100 Parameter Voice Gateway Administration Settings SIP interface Speciﬁes the interface (LAN or WAN) on which the agent should listen for incoming calls SIP port Speciﬁes the agent’s listening port SIP register expires Speciﬁes the registration interval in seconds...
Page 157 NG800 User Manual for NRSW version 4.5.0.100 Parameter Voice-Over-Mobile Audio Proﬁles Speakerphone Handle situations of loud echo with extreme acoustic distortion. This mode is intended for use with a car kit or speakerphone appli- cations with high volume and high distortion. Acoustic echo in this situation has negative ERL and is impossible to cancel completely.
Page 158 NG800 User Manual for NRSW version 4.5.0.100 Parameter Endpoint Settings SIP (user-agent) Register Selects whether the user-agent shall register at the registrar Expires The expiry time in seconds after registration will be triggered again...
Page 159 NG800 User Manual for NRSW version 4.5.0.100 Voice Routing This page can be used to conﬁgure generic voice routing between the endpoints. Enhanced routing facilities are provided via the SDK interface which is able to dispatch voice calls based on their attributes (such as phone numer) and other system related status information (e.g.
Page 160 NG800 User Manual for NRSW version 4.5.0.100 Client Conﬁguration Any SIP client must be conﬁgured to use the router as its registrar/proxy. Parameter X-Lite Conﬁguration User ID SIP username used in from headers (i.e. subscriber name) Domain SIP Domain used in from headers (optional) Authorization name Username used for authentication (i.e.
Page 161: System
Tech Support Keys & Certificates Licensing Legal Notice NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.52.: System System The following system parameters can be set: Parameter System Settings Local hostname The hostname of the system Application area The desired application area which inﬂuences the system behaviour...
Page 162 NG800 User Manual for NRSW version 4.5.0.100 Parameter System Settings Enable TCP timestamps Enable TCP timestamps for system wide TCP communication. This is needed for Protection Against Wrapped Sequence numbers (PAWS), but with these timestamps enabled a remote attacker can guess the uptime of the system.
Page 163: Regional Settings
This page can be used for setting the system time and conﬁguring the time zone. You may further enable daylight saving changes for your speciﬁc time zone. NetModule routers can synchronize their system time by using one or more servers by the help of the Network Time Protocol (NTP) or via GNSS.
Page 164 NG800 User Manual for NRSW version 4.5.0.100 Parameter Time Synchronisation NTP server Address of the primary NTP server NTP server 2 Optionally, the address of a second NTP server Ping check Uses an ICMP ping to check whether NTP servers are available when...
Page 165: Authentication
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.54.: User Accounts The admin user is a built-in power user which represents the default administrator of the system. Please note that the admin password will be also applied to the root user which is able to enter a system shell.
Page 166: Remote Authentication
Licensing Legal Notice Apply NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.55.: Remote Authentication It can be conﬁgured as follows: Parameter Remote authentication settings Administrative status Deﬁnes whether a remote server should be used for authentication...
Page 167 NG800 User Manual for NRSW version 4.5.0.100 Parameter Remote authentication settings RADIUS server The RADIUS server address RADIUS secret The secret used to authenticate against the RADIUS server Authentication port The port used for authentication Accounting port The port used for accounting messages Use for login This option enables remotely-deﬁned users to access the Web Man-...
Page 168: Software Update
NG800 User Manual for NRSW version 4.5.0.100 5.8.3. Software Update Manual Software Update This menu can be used to run a manual software update of the system. Parameter Manual Software Update Update operation The update operation method being used. You can upload the image,...
Page 169: Module Firmware Update
NG800 User Manual for NRSW version 4.5.0.100 Attention In case you perform a major downgrade with a previous release line (e.g. 3.7.0 to 3.6.0), please ensure to always use the latest release of that branch (i.e. 3.6.0.X) as only those tend to be fully forward-compatible.
Page 170: Software Profiles
TFTP, HTTP, HTTPS, and FTP. For boxes with limited amount of ﬂash you may also use usb0://<path-to-firmware-package>. A ﬁrmware package (ZIP) usually consists of a ﬂash utility, an info ﬁle and the corresponding ﬁrmware ﬁles. Please follow http://www.netmodule.com/support/supportform.aspx in order to get the latest ver- sion. 5.8.5. Software Proﬁles The system consists of two root partitions which can hold different software versions and this menu can be used to switch between them.
Page 171: Configuration
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.56.: Manual File Conﬁguration This section can be used to download the currently running system conﬁguration (including essential ﬁles such as certiﬁcates). In order to restore a particular conﬁguration you can upload a conﬁgura- tion previously downloaded.
Page 172: Automatic File Configuration
Licensing Legal Notice NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.57.: Automatic File Conﬁguration This menu can be used to run an automatic conﬁguration update of the system. It is conﬁgured as follows: Parameter Automatic File Conﬁguration...
Page 173: Factory Configuration
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.58.: Factory Conﬁguration This menu can be used to reset the device to factory defaults. Your current conﬁguration will be lost. A successfully initiated factory reset can be noticed by all LEDs having been turned on. The factory reset will set the IP address of the ﬁrst Ethernet interface back to 192.168.1.1.
Page 174: Troubleshooting
NG800 User Manual for NRSW version 4.5.0.100 5.8.7. Troubleshooting Network Debugging There are serveral tools for network debugging like ping, traceroute, tcpdump and darkstat. Parameter Automatic software update Ping The ping utility can be used to verify whether a remote host can be reached via IP.
Page 175: Log Viewer
Jan 9 02:03:01 NB1600 user.notice link-manager[27880]: wanlink1: permanent link is suspended for 10s (set suspended [auto]) Jan 9 02:03:01 NB1600 user.notice link-manager[27880]: wanlink0: permanent link is unsuspended now (reset suspended [auto]) NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.59.: Log Viewer...
Page 176: Tech Support File
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.60.: Tech Support File It is possible to trace any IP interface and inspect individual packet ﬂows between hosts. This can be achieved by logging onto the box and start a network packet capture by using the tool tcdump. We recommend to use the -n switch to bypass name resolution (e.g.
Page 177: Keys And Certificates
Keys & Certificates Licensing Legal Notice NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.61.: Keys and certiﬁcates The entry pages shows an overview about installed keys and certiﬁcates. The following sections may appear: Type Description Root CA The root Certiﬁcate Authority (CA) which issues certiﬁcates, its key...
Page 178: Certificate Sections
NG800 User Manual for NRSW version 4.5.0.100 Type Description SSH Authorization The keys used for SSH authorization. OpenVPN Server or client keys and certiﬁcates for running OpenVPN tunnels. IPsec Server or client keys and certiﬁcates for running IPsec tunnels. WLAN Keys and certiﬁcates for implementing certiﬁcate-based WLAN au-...
Page 179: Certificate Configuration
Apply NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG Figure 5.62.: Certiﬁcate Conﬁguration This page provides some general conﬁguration options which will be applied when operating on keys and certiﬁcates. If keys, certiﬁcates and signing requests are generated locally, the following settings will be take into...
Page 180 NG800 User Manual for NRSW version 4.5.0.100 Parameter Certiﬁcate Conﬁguration Country (C) The certiﬁcate owner’s country (usually a TLD abbreviation) Common Name (CN) The certiﬁcate owner’s common name, mainly used to identify a host E-Mail The certiﬁcate owner’s email address Expiry period The number of days a certiﬁcate will be valid from now on...
Page 181 NG800 User Manual for NRSW version 4.5.0.100 When enrolling certiﬁcates, the CA certiﬁcate will be initially fetched from the speciﬁed SCEP URL using the getca operation. It will be shown on the conﬁguration page and it has to be veriﬁed that it belongs to the correct authority.
Page 182: Licensing
User Manual for NRSW version 4.5.0.100 5.8.9. Licensing Certain features of NetModule routers require a valid license to be present in the system, some of them also depend on the mounted modules. Please contact us for getting a valid license for available components and we will provide a license ﬁle based on your serial number which can be installed to...
Page 183: Legal Notice
5.8.10. Legal Notice OSS Notice We inform you that NetModule products may contain in part open-source software. We are distributing such open-source software to you under the terms of GNU General Public License (GPL), GNU Lesser General Public License (LGPL) or other open-source licenses.
Page 184: Logout
NG800 User Manual for NRSW version 4.5.0.100 5.9. LOGOUT Please use this menu to log out from the Web Manager.
Page 185: Command Line Interface
NG800 User Manual for NRSW version 4.5.0.100 6. Command Line Interface The Command Line Interface (CLI) offers a generic control interface to the router and can be used to get/set conﬁguration parameters, apply updates, restart services or perform other system tasks.
Page 186: Print Help
NG800 User Manual for NRSW version 4.5.0.100 Key Sequence Action ALT-t Drag the word before point past the word after point, moving point over that word as well. If point is at the end of the line, this transposes the last two words on the line.
Page 187: Setting Config Parameters
NG800 User Manual for NRSW version 4.5.0.100 validate config parameter get factory default rather than current value show configuration sections 6.4. Setting Conﬁg Parameters The set command can be used to set conﬁguration values. > set Usage : set [ hv ] <parameter >=<value > [ < parameter >=<value > . . ]...
Page 188: Scanning Networks
NG800 User Manual for NRSW version 4.5.0.100 ipsec IPsec connection status pptp PPTP connection status GRE connection status dialin Dial In connection status mobileip MobileIP status Digital IO status audio Audio module status CAN module status uart UART module status...
Page 189: Manage Keys And Certificates
NG800 User Manual for NRSW version 4.5.0.100 Options : reboot after update force update t reset missing config values with factory defaults show update status Available update targets : software Perform software update firmware Perform module firmware update config Update configuration...
Page 190: Debug System
NG800 User Manual for NRSW version 4.5.0.100 ipsec IPsec connections lighttpd HTTP server link manager WAN links network Networking openvpn OpenVPN connections pptp PPTP connections QoS daemon smsd SMS daemon snmpd SNMP daemon surveyor Supervision daemon syslog Syslog daemon telnet...
Page 191: Rebooting System
NG800 User Manual for NRSW version 4.5.0.100 > reset Usage : reset [ h ] 6.14. Rebooting System The reboot command can be used to reboot the router. > reboot Usage : reboot [ h ] 6.15. Running Shell Commands The shell command can be used to execute a system shell and run any arbitrary application or script.
Page 192 NG800 User Manual for NRSW version 4.5.0.100 Available keys : output Output format ( html , plain ) Username to be used for authentication Password to be used for authentication command Command to be executed arg0 . . arg31 Arguments passed to commands...
Page 193 NG800 User Manual for NRSW version 4.5.0.100 http : / / 1 9 2 . 1 6 8 . 1 . 1 / cli . php?version=2&output=html&command=status get - Get conﬁguration parameter Key usage : command=get&arg0=<config key >[& arg1=<config key > . . ] Examples : http : / / 1 9 2 .
Page 194 NG800 User Manual for NRSW version 4.5.0.100 reboot - Trigger system reboot Key usage : command=reboot Examples : http : / / 1 9 2 . 1 6 8 . 1 . 1 / cli . php?version=2&output=html&usr=admin&pwd=admin01&command= reboot reset - Run factory reset...
Page 195 NG800 User Manual for NRSW version 4.5.0.100 Examples : http : / / 1 9 2 . 1 6 8 . 1 . 1 / cli . php?version=2&output=html&usr=admin&pwd=admin01&command= send&arg0=sms&arg1=%2B123456789&arg2=test send - Send E-Mail Key usage : command=send&arg0=mail&arg1=<address>&arg2=<text > Notes : The address has to be a valid E Mail address such as abc@abc .
Page 196 NG800 User Manual for NRSW version 4.5.0.100 http : / / 1 9 2 . 1 6 8 . 1 . 1 / cli . php?version=2&output=html&usr=admin&pwd=admin01&command= send&arg0=ussd&arg1=0&arg2=%2A100%23...
Page 197: Appendix
NG800 User Manual for NRSW version 4.5.0.100 A. Appendix A.1. Abbrevations Parameter Description ETHx Corresponds to Ethernet interfaces (either single or switched ones) LANx LAN interfaces which are generally based on Ethernet interfaces (in- cluding bridges) WLANx Refers to a Wireless LAN interface which will be represented as addi- tional LAN interface when conﬁgured as access point...
Page 198: System Events
NG800 User Manual for NRSW version 4.5.0.100 Parameter Description Short Message Service SSID Service Set Identiﬁers, can be used to deﬁne multiple WLAN networks on a module Spanning Tree Protocol USSD Unstructured Supplementary Service Data VRRP Virtual Router Redundancy Protocol...
Page 199 NG800 User Manual for NRSW version 4.5.0.100 Event Description dio-in2-on DIO IN2 turned on dio-in2-off DIO IN2 turned off dio-out1-on DIO OUT1 turned on dio-out1-off DIO OUT1 turned off dio-out2-on DIO OUT2 turned on dio-out2-off DIO OUT2 turned off gps-up...
Page 200: System Events
NG800 User Manual for NRSW version 4.5.0.100 Event Description sms-notsent SMS has not been sent sms-received SMS has been received sms-report-received SMS report has been received call-incoming A voice call is coming in call-outgoing Outgoing voice call is being established...
Page 201: Factory Configuration
NG800 User Manual for NRSW version 4.5.0.100 A.3. Factory Conﬁguration The factory conﬁguration including default values for any conﬁguration parameter can be derived from the ﬁle /etc/config/factory-config.cfg on the router. You may also call cli get -f <parameter> for obtaining a speciﬁc default value.
Page 202: Snmp Vendor Mib
-- * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * -- NetModule AG VENDOR MIB -- ( c ) COPYRIGHT 2020 by NetModule AG , Switzerland -- All rights reserved .
Page 203 -- * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * netmodule OBJECT IDENTIFIER ::= { enterprises 31496 }...
Page 204 NG800 User Manual for NRSW version 4.5.0.100 MAX - ACCESS read - only STATUS current DESCRIPTION " The hash of the current software " ::= { admin 6 } systemStatus OBJECT - TYPE SYNTAX INTEGER { ok (1) , degraded (2) ,...
Page 205 NG800 User Manual for NRSW version 4.5.0.100 SYNTAX URLString MAX - ACCESS read - write STATUS current DESCRIPTION " Update the system configuration from the specified URL , the URL must be preceded by a valid prefix ( e . g . tftp :// , sftp :// , ftp :// , https :// or http ://) and either point to the update package or to a server directory which contains a file named <...
Page 206 NG800 User Manual for NRSW version 4.5.0.100 altConfigDesc OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS read - only STATUS current DESCRIPTION " The description of the alternative configuration " ::= { admin 30 } altConfigHash OBJECT - TYPE SYNTAX...
Page 207 NG800 User Manual for NRSW version 4.5.0.100 STATUS current DESCRIPTION " The status of the last config upload cycle " ::= { admin 43 } -- Further System Paramters -- sy st em T em p er a t ur e OBJECT - TYPE...
Page 208 NG800 User Manual for NRSW version 4.5.0.100 ::= { nbWwanEntry 4 } w w a n R e g i s t r a t i o n S t a t e OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS...
Page 209 NG800 User Manual for NRSW version 4.5.0.100 DESCRIPTION " The current Received Signal Code Power ( UMTS ) of the WWAN modem " ::= { nbWwanEntry 16 } wwanECIO OBJECT - TYPE SYNTAX DisplayString UNITS " dB " MAX - ACCESS...
Page 210 NG800 User Manual for NRSW version 4.5.0.100 STATUS current DESCRIPTION " The current longitude value received by the GNSS device " ::= { nbGnssEntry 5 } gnssAlt OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS read - only STATUS current DESCRIPTION "...
Page 211 NG800 User Manual for NRSW version 4.5.0.100 MAX - ACCESS read - only STATUS current DESCRIPTION " WLAN module name " ::= { nbWlanEntry 2 } wlanMod uleType OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS read - only STATUS...
Page 212 NG800 User Manual for NRSW version 4.5.0.100 wlanSta tionMac OBJECT - TYPE SYNTAX DisplayString MAX - ACCESS read - only STATUS current DESCRIPTION " The MAC address of a connected station " ::= { n b Wl a n St a ti o nE n t ry 3 }...
Page 213 NG800 User Manual for NRSW version 4.5.0.100 wa nD at a Do wnl oa de d Counter64 , wanData Up load ed Counter64 , wanDown lo adRa te Integer32 , wanUploadRate Integer32 , w a n D a t a D o w n l o a d e d R o a m i n g Counter64 ,...
Page 214 NG800 User Manual for NRSW version 4.5.0.100 w anDialFai lu res OBJECT - TYPE SYNTAX Integer32 MAX - ACCESS read - only STATUS current DESCRIPTION " WAN link dial failures " ::= { nbWanEntry 12 } wa nD at a Do w nl o a de d OBJECT - TYPE...
Page 215 NG800 User Manual for NRSW version 4.5.0.100 on (1) MAX - ACCESS read - only STATUS current DESCRIPTION " The current value of digital I / O port OUT1 " ::= { dio 3 } dioStatusOut2 OBJECT - TYPE SYNTAX...
Page 216 NG800 User Manual for NRSW version 4.5.0.100 STATUS current DESCRIPTION " The current state of the serial port " ::= { nbSerialEntry 3 } serialRxBytes OBJECT - TYPE SYNTAX Integer32 MAX - ACCESS read - only STATUS current DESCRIPTION " The number of bytes received on the serial port "...
Page 217 NG800 User Manual for NRSW version 4.5.0.100 " trap history index " ::= { n b Tr a p Hi s to r yE n t ry 1 } t r a p H i s t o r y T i m e s t a m p OBJECT - TYPE...
Page 218 NG800 User Manual for NRSW version 4.5.0.100 gps - down NOTIFICATION - TYPE STATUS current DESCRIPTION " GPS signal is not available " ::= { events 302 } openvpn - up NOTIFICATION - TYPE STATUS current DESCRIPTION " OpenVPN connection came up "...
Page 219 NG800 User Manual for NRSW version 4.5.0.100 system - startup NOTIFICATION - TYPE STATUS current DESCRIPTION " System has been started " ::= { events 505 } test NOTIFICATION - TYPE STATUS current DESCRIPTION " test event " ::= { events 506 }...
Page 220 NG800 User Manual for NRSW version 4.5.0.100 usb - serial - added NOTIFICATION - TYPE STATUS current DESCRIPTION " USB serial device has been added " ::= { events 905 } usb - serial - removed NOTIFICATION - TYPE STATUS current DESCRIPTION "...
Page 221: Sdk Examples
NG800 User Manual for NRSW version 4.5.0.100 A.5. SDK Examples Event Description best-operator.are This script will scan for operators on startup and choose the one with the best signal candump.are This script can be used to receive CAN messages conﬁg-summary.are This script shows a summary of the currently running conﬁguration.
Page 222 NG800 User Manual for NRSW version 4.5.0.100 Event Description remote-mail.are This script reads and sends mails from a remote IMAP/POP3/SMTP server scan-mobile.are This script can be used to switch the Mobile LAI according to available networks scan-wlan.are This script can be used to switch the WLAN client network according to availability send-mail.are...
Page 223: Sdk Examples
NG800 User Manual for NRSW version 4.5.0.100 Event Description transfer.are This scripts stores the latest GNSS positions in a remote FTP ﬁle transfer-ﬁle.are This scripts archives a remote ﬁle udpclient.are This script sends a message to a remote UDP server.

NetModule NG800 User Manual

Quick Links

Need help?

Questions and answers

Related Manuals for NetModule NG800

Summary of Contents for NetModule NG800

Table of Contents