Page 1
InHandNetworks 5G ODU 2000 Series User Manual V1.1—2023.05...
Page 2
The contents of this manual cannot be copied or reproduced in any form without the written permission of InHand. Due to continuous updating, InHand cannot promise that the contents are consistent with the actual product information, and does not assume any disputes caused by inconsistency of technical parameters.
CONTENTS 1 Overview ......................1 2 Hardware ....................... 3 2.1 Indicator Description ................... 3 2.2 Restoring to Default Settings via the Reset Button ........4 3 Default Settings .................... 5 4 Login and Access to Internet ............... 6 4.1 Connect via Mobile Phone................. 6 4.2 Connect via PC ......................
Page 4
5.6.1 IPSec VPN ....................20 5.6.2 L2TP VPN ....................22 5.7 Security ........................25 5.7.1 Firewall ....................... 25 5.7.2 Policy-Based Routing ................28 5.7.3 Traffic Shaping ..................29 5.8 Services........................32 5.8.1 DHCP server ....................32 5.8.2 DNS server ....................32 5.8.3 Fixed Address List ...................
InCloud Manager SaaS service, provides global customers with high-speed, convenient, and secure 5G efficient networks. 5G ODU is a key part of the cellular gateway series launched by InHand for WAN, which can instantly deploy ultra-high speed 5G network by having gigabit cellular uplink without waiting on broadband;...
2 Hardware 2.1 Indicator Description ODU2002 Indicator LED status and definition Light Off --- Power off Steady in --- System starting System Blink in --- System error Steady in green --- System working Blink in blue --- System upgrading Off --- Cellular disable Steady in blue --- 4G dialed up...
2.2 Restoring to Default Settings via the Reset Button To restore to default settings by the reset button, please perform the following steps: 1. When the unit power ON, press and hold the reset button for 5-10 seconds. 2. When System LED is steady on blue, release RESET button, system LED will blink in blue, and press the RESET button again.
3 Default Settings Function Default Settings Cellular SIM1 enabled. − Wi-Fi 2.4G mode enabled, SSID: − ODU2002-followed with the last 6 letters of the Wi-Fi MAC address. Auth Method is WPA2-PSK. − Password is the last 8 letters of serial number. −...
4 Login Access Internet Before power on, please insert the SIM card and connect the 5G antenna to the device. Or connect Ethernet cable to WAN/LAN2 interface. 4.1 Connect via Mobile Phone Step 1: Install InCloud APP by scan following QR code in mobile phone. Step 2: Click the "Device"...
Page 11
Step 3: After scanning the code successfully, configure the name, serial number, and description information of the device. Step 4: If ODU cannot connect to Internet, click "Configure local device" in [Device] page, scan the QR code on the device again and then configure the device to connect to the Internet.
4.2 Connect via PC Step 1: Connect PoE LAN1 interface on ODU and PC with Ethernet cable. Step 2: Set the IP of the PC via DHCP or fixed IP address, the PC IP address and ODU address should be in the same segment. Use DHCP to obtain the address automatically (recommended).
Page 13
Use a fixed IP address, the PC and the device must be in the same segment. On PC side, the IP address needs to be configured as any address in 192.168.1.2~192.168.1.254, the gateway should be 192.168.1.1, the subnet mask should be 255.255.255.0, and the DNS server should be 8.8.8.8 or operator DNS server address.
Page 14
prompts that the webpage is not secure, open the hidden or advanced options and select "Proceed to website". Step 4: Check the network status in the "Interface Status" in "Dashboard". The device connects to the Internet successfully if the "Cellular" or “WAN” icon turns green.
5 Web Configuration 5.1 Dashboard Click “Dashboard” in the left menu, and check Device Information, Interface Status, Traffic Statistics and Wi-Fi information of the device. Click interface icon in Interface Status, and check detailed information of the interface in the right menu.
5.2 Status Click “Status” in the left menu, check link status, signal, log and other information of the device. 5.2.1 Link Monitor The Link Monitor page displays the health of each uplink, as well as the throughput, latency and packetloss rate on each uplink interface. 5.2.2 Cellular Signal The Cellular Signal page displays the SIM card signal strength on the cellular interface, as well as other parameters such as RSSI, SINR, and RSRP.
5.2.3 Clients The Clients page displays details about each client connected to ODU, such as device name, IP address, MAC address, traffic statistics, and online duration. 5.2.4 VPN Check the status and the traffic consume of the VPN in ODU in VPN page. 5.2.5 Events ODU will record event log like user login, configuration changed, link changed, reboot and other events in Events page,...
5.2.6 Logs Check the logs recorded during operation of the device, which can be used for trouble shooting when the ODU can not work properly. Clear Logs: clear current running logs. Download Logs: download running logs. Download Diagnostic Logs: download log information for trouble shooting, it contains system running logs, device information, and device configuration.
Page 19
Check and edit WAN and Cellular interface in Uplink Table. It supports to edit cellular threshold policy in this page, and drag icons in the Priority column to reprioritize the interfaces. Notes: If delete WAN interface in this page, WAN/LAN2 port will work as LAN. WAN/LAN2 port will change back to WAN if add WAN interface again.
PPPoE: Set the PPPoE service on WAN so that ODU can dial up to the Internet through the broadband service. 5.3.2 Uplink Setting Configure link detection items and optimal forwarding mode for uplink interfaces.
Page 21
Link detection is enabled by default. In the private network environment, please manually configure the address in “Test Connectivity to” or disable link detection function to prevent the cellular interface from working abnormally. If detection function is disabled, it will not display latency, jitter, packet loss rate, or signal strength in Status page.
5.4 Local Network Check and configure LAN of the device in Local Network page. Edit the network: Click the Edit button on the right to edit LAN IP, enable/disable DHCP server and change the range of DHCP address.
5.5 Wi-Fi Configure ODU to serve as Wi-Fi AP to provide SSID for wireless network access. Edit Wi-Fi: Click Edit button on the right, configure SSID, password or other parameters of this Wi-Fi.
5.6 VPN VPN is intended to establish a private network on the public network for encrypted communication. A VPN router enables remote access by encrypting data packets and converting the destination address of data packets. VPN can be realized by a server, hardware, or software. Compared with the traditional DDN private line or frame relay, VPN provides a more secure and convenient remote access solution.
Page 25
The following parameters must be set in IPSec tunnel Name: specify the name of the IPSec VPN created on the device, which is used for local VPN management. IKE Version: specify the version of the IKE protocol used on ODU, IKEv1 or IKEv2.
Local Subnet: specify the IP address segment of the traffic to be sent out by the ODU through IPSec VPN tunnel. Peer Subnet: specify the IP address segment used for communication on the other end of the IPSecVPN tunnel. IKE Policy: Encryption: specify the encryption algorithm for IKE.
Page 27
(PPP) negotiation. This tunnel allows remote users to connect to the intranet of the enterprise in a secure way. Server Generally, L2TP server is deployed at the headquarters of an enterprise to provide remote access for employees. On the VPN page, choose L2TP VPN > Server to display the L2TP server configuration.
Page 28
User Name/Password: specify the user name and password for L2TP negotiation, which must be consistent on both ends of the tunnel. Authentication Mode: specify the authentication mode for the L2TP tunnel. Enable Tunnel Authentication: Please make sure both ends of the tunnel are configured with the same user name and password if enable this option.
Server Address: specify the IP address used by the remote L2TP server. User Name/Password: specify the user name and password for L2TP negotiation, which must be consistent on both ends of the tunnel. Authentication Mode: specify the authentication mode for the L2TP tunnel.
Page 30
InBound rules: Outside network access to inside network, forbid all data by default. Click Add button in the left to add a new rule. Name: set the local identifier of the inbound rule. Status: enable or disable the rule. Interface: set the traffic forwarding interface. For an outbound rule, select the interface from which traffic is sent out.
Page 31
Port Forwarding When outside network accesses to specific ports of the ODU, system will transfer this data to corresponding ports of inside device according to relevant port forwarding rules. So that the service deployed in LAN will be available in public network, and the same public IP address can be used to access to plenty of services by using multiple port forwarding rules.
Public Port: set the protocol port on the uplink interface to be mapped. Local Address: set the IP address of the target client that external users need to access. Local Port: set the protocol port that external users need to access on the target client.
reducing operational cost of the enterprise. Choose Security > Policy-based Routing and click Add to add a PBR rule. Notes: The source and destination addresses of the PBR cannot be set as Any at the same time. 5.7.3 Traffic Shaping Create shaping policies to apply per-user controls on a per-protocol basis to optimize the network.
Page 34
Click Add to create a new traffic shaping rule. Traffic shaping policies consist of a series of rules that are performed in order, which is similar to custom firewall rules. There are two main components to each rule: the type of traffic to be limited or shaped (rule definition), and how that traffic should be limited or shaped (rule actions).
Page 35
Notes: Traffic forwarding priority for unmatched rules is medium. When Limit Bandwidth is set to 0, system will not limit the bandwidth. The value of Reserved Bandwidth should not be greater than the Limit Bandwidth.
5.8 Services 5.8.1 DHCP server DHCP implements dynamic IP address allocation in a client/server model. The LAN device sends a request to ODU, and ODU replies with an IP address assigned to the client. 5.8.2 DNS server Set global DNS server for ODU. System will use DNS server in this page if the original DNS server from uplink interface cannot work.
ODU is able to distribute IP address based on client device’s MAC address by using fixed address list. Distributed IP address should in the range of IP address of the local network. 5.8.4 Static Routes Configure static routes to forward data by specific route or interface. This list will only display the rules created by user, and will not show the routes created automatically after modifying WAN or LAN interface.
Notes: After the IP Passthrough mode is enabled, only one client can access to Internet, and Static routing, VPN, Port Forwarding and Policy-Based Routing functions will not work. The inbound rule needs to be released when accessing the client device. 5.9 System 5.9.1 Change the Password The default username and password of ODU is adm/123456.
ODU connects to InCloud Manager automatically. User can select which InHand platform to connect to in this page, and also disable InCloud Manager in this page. 5.9.3 Remote Access Control User can allow or forbid public network to access to ODU and which port for public network to access to ODU in this page.
5.9.4 System Clock Select a time zone for the system and enable the NTP server to synchronize time with the target NTP server. 5.9.5 Device Options Reboot, upgrade firmware or reset ODU to default factory settings in this page. Notes:...
Before upgrading the firmware, please make sure the new firmware is obtained froman official source. If the ODU is connected to InCloud Manager, the platform will synchronizes the settings before restore to factory settings. The ODU will only clear historical data.
After configure mail server address, port, username and password, ODU will send alarm email through this email. Configure Receiving Email Address and send a test email to this address to check the correctness of the configuration above. 5.9.8 Tools...
Page 43
Ping Use ICMP protocol to check the connectivity between source address (ODU itself if Source is blank) and other IP address or domain name in Target. Enter IP address or domain name in Target, and click Start to start ping. Traceroute Enter target IP address or domain name, select interface, and click “Start”...
5.9.9 Log Server Set a remote log server and ODU will upload system logs to this remote log server. 5.9.10 Other Settings Set web login timeout, enable or disable accelerated forwarding and configure other system settings in this page. Notes: Cellular forwarding speed will be significantly increased after enabling Accelerated Forwarding, but other functions like traffic shaping or IPSec will not take effort.
Need help?
Do you have a question about the 5G ODU 2000 Series and is the answer not in the manual?
Questions and answers