Milesight UF31 User Manual
  1. Manuals
  2. Brands
  3. Milesight Manuals
  4. Network Hardware
  5. UF31
  6. User manual
Milesight UF31 User Manual

Milesight UF31 User Manual

5g dongle
Hide thumbs Also See for UF31:
Table of Contents

Advertisement

Quick Links

Download this manual
5G Dongle
UF31
User Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the UF31 and is the answer not in the manual?

Questions and answers

Related Manuals for Milesight UF31

Summary of Contents for Milesight UF31

  • Page 1 5G Dongle UF31 User Guide...
  • Page 2 Safety Precautions Milesight will not shoulder responsibility for any loss or damage resulting from not following the instructions of this operating guide. The device must not be disassembled or remodeled in any way.  To avoid risk of fire and electric shock, do keep the product away from rain and moisture before ...

  • Page 3: Table Of Contents

    Contents 1. Product Introduction ..........................5 1.1 Overview ............................5 1.2 Key Features ............................. 5 2. Hardware Introduction ..........................5 2.1 Packing List ............................5 2.2 Hardware Overview .......................... 6 2.3 LED Indicators ..........................6 2.4 Dimensions (mm) ..........................7 2.5 Reset Button ............................. 7 3.
  • Page 4 5.3.1.3 Certificate ........................33 5.3.2 IPsecVPN ..........................34 5.3.2.1 IPSec Server ......................34 5.3.2.2 IPSec Client ....................... 37 5.3.2.3 Certificate ........................39 5.4 GPS ..............................40 5.5 System ............................41 5.5.1 System ..........................41 5.5.2 Password ..........................42 5.5.3 Device Management ......................43 5.5.4 Backup / Upgrade ........................44 5.5.5 Reboot ..........................

  • Page 5: Product Introduction

    The USB type-C port and Ethernet port are adopted to provide high-speed internet access for field devices. With a compact size and industrial design, UF31 is easy to carry out or embed to any equipment, which is particularly suitable for smart offices, video surveillance, digital media implementations, industrial automation, traffic applications, robots and so on.

  • Page 6: Hardware Overview

    4 × Mini Stubby 1 x GPS Antenna 1 × Quick Guide 1 × Warranty Card Cellular Antennas 4 × Stubby Cellular 4 × Antenna Magnetic 1 x DIN Rail Clip Antennas(Optional) Mounts(Optional) (Optional) If any of the above items is missing or damaged, please contact your sales representative. 2.2 Hardware Overview 2.3 LED Indicators Indication...

  • Page 7: Dimensions (Mm)

    to 4G network Disconnected or connect failure Link Indicator Connected (Orange) Ethernet Blinking Transmitting data Port 100 Mbps mode Rate Indicator (Green) 1000 Mbps mode 2.4 Dimensions (mm) 2.5 Reset Button The reset button is inside the device. Description Function STATUS &...

  • Page 8: Antenna Installation

     Recommended thickness size: 3.0 ± 1.0 mm 3.3 Device Installation UF31 device can be placed on a desktop or mounted to a wall or a DIN rail. 3.3.1 Wall Mounting 1. Fix the two mounting ears to both side of the device with screws.

  • Page 9: Din Rail Mounting

    Connect the grounding ring of the cabinet’s grounding wire onto the grounding stud and screw up the grounding nut. 4. Access to Web GUI UF31 provides user-friendly web GUI for configuration and users can access it via LAN port or USB. This chapter explains how to access to Web GUI of the UF31 device. Username: admin...
  • Page 10 Connect PC to the LAN port or USB port directly to access the web GUI of device. The following steps are based on Windows 10 operating system for your reference. 1. Go to “Control Panel” → “Network and Internet” → “Network and Sharing Center”, then click “Ethernet”...
  • Page 11 If you enter the username or password incorrectly more than 5 times, the login page will be locked for 10 minutes. 5. After logging in the web GUI, you can view system information and perform configuration of the device. It’s suggested to change the device password for security.

  • Page 12: Web Configuration

    Web Configuration 5.1 Status 5.1.1 Overview You can view the system information of the device on this page. System Item Description Show the hostname of device, it can be modified on System > Hostname System > General Settings. Model Show the model name of device. Show the serial number of device.

  • Page 13: Cellular

    The Current Network tab displays the basic information of link in use, click Interface chapter for details. The Active DHCP Leases tab displays the basic information of connected devices. Active DHCP Leases Item Description Hostname Show the hostname of the connected device. IPv4-Address Show the IPv4 address of the connected device.
  • Page 14 Modem Information Item Description Status Show corresponding detection status of module and SIM card. Module Model Show the name of cellular module. Version Show the cellular module firmware version. Cellular Band The cellular band which the device used to register to network. Signal Strength Show the cellular signal level.

  • Page 15: Gps

    IPv4/IPv6 DNS Show the DNS of cellular network. Show information on how long the cellular network has been Connection Duration connected. The data volume and packets received of this month. The data volume and packets transmitted of this month. Total data volume and packets of this month. Related Application Cellular Application 5.1.3 GPS...

  • Page 16: Routing Table

    Firewall Status Item Description Table: Filter The default table for handing network packets. Used to alter packets that create a new connection and Table: NAT used for Network Address Translation (NAT). Table: Mangle Used for specific types of packet alternation. Show/Hide Empty Chain Show/hide the chain without any rule.

  • Page 17: Vpn

    Item Description Active IPv4/IPv6 Router Interface The outbound interface of the route. Destination The IP address and netmask of destination host or destination Network network. IPv4/IPv6 The IP address of the gateway to send packets from. Gateway Priority The metric number indicating interface priority of usage. IPv4 Address The IP address of ARP pool.

  • Page 18: Lan/Dhcp Server

    This menu allows to configure the basic settings of cellular and LAN interface. Item Description Interfaces Restart Click to restart this network interface. Edit Click to edit general settings of this network interface. Global Network Options IPv6 ULA-Prefix The IPv6 unique local address (ULA) prefix of this device. 5.2.1.1 LAN/DHCP Server LAN - General Settings Item...
  • Page 19 TX: the data volume and packets transmitted from this interface. IPv4/IPv6: IPv4/IPv6 address of LAN interfaces. IPv4 Address Set the IPv4 address of LAN interface. IPv4 Netmask Set the netmask for LAN interface. IPv6 Prefix Length Assign a part of given length of every public IPv6-prefix to this interface. IPv6 Prefix Assign prefix parts using this hexadecimal sub-prefix ID for this interface.

  • Page 20: Cellular

    DHCP Server-IPv6 Settings Item Description Choose to enable DHCPv6 server when using cellular Enable IPv6 or PPPoE v6. Router Advertisement Service It’s fixed as server mode. DHCPv6 Service It’s fixed as server mode. DHCPv6 Mode It’s fixed as stateless mode. Announced DNS Servers Set the DNS server list for clients.
  • Page 21 Enter a 4-8 characters PIN code to unlock the SIM. Authentication Select from NONE, PAP, CHAP and PAP/CHAP. Type Select from Auto, 5G Only, 4G Only and 3G Only. Auto: connect to the network with the strongest signal automatically. Network Type 5G Only: connect to 5G network only.

  • Page 22: Static Ip Address Assignment

    available or not. IPv6 Secondary The device will try to ping the secondary server if primary Server server is not available. Set the ping retry interval. When ping failed, the device will Retry Interval ping again in every retry interval. The maximum amount of time the device will wait for a response to a ping request.

  • Page 23: General Settings

    5.2.2.1 General Settings General Setting Item Description Default Security Configuration Enable/disable SYN-flood protection. SYN-flood protection allows to protect from a DDoS attack Enable SYN-flood that exploits part of the normal TCP three-way Enable Protection handshake to consume resources on the targeted server and render it unresponsive.

  • Page 24: Acl

    URL Filter You can block specific website by entering keyword from a Domain Name domain name. After filtering, the devices under LAN ports can Keyword Filtering not access corresponding websites. The maximum number of characters allowed is 64. 5.2.2.2 ACL The access control list, also called ACL, implements permission or prohibition of access for specified network traffic (such as the source IP address) by configuring a series of matching rules so as to filter the network interface traffic.

  • Page 25: Port Mapping (Dnat)

    ACL - Add/Edit Name Define a unique name for this ACL rule. Type Select type as IPv4 or IPv6. Protocol Select protocol among TCP, UDP and ICMP. Select the source interface type from Device Output, LAN or Cellular. Source Interface Device Output means the packets coming from device itself.

  • Page 26: Dmz

    Port Mapping (DNAT) Item Description Name Define a unique name of the port mapping rule. Protocol Select TCP or UDP for your application requirements. Specify the host or network which can access local IP address. External IP Address 0.0.0.0/0 means all. Set the port or port range from which incoming packets are External Port forwarded, example: 20-300.

  • Page 27: Custom Rules

    "0.0.0.0/0" means any address. 5.2.2.5 Custom Rules In this page, you can enter your own custom firewall iptables rules and these will get executed as a Linux shell script. 5.2.2.6 Certificates In this page, you can import the HTTPS certificates for device web GUI secure access. 5.2.3 Diagnostics Network Utilities includes IPv4/IPv6 ping, IPv4/IPv6 traceroute, nslookup the command-line tool.

  • Page 28: Vpn

    The default OpenVPN version of UF31 is 2.5.3. 5.3.1.1 OpenVPN Server UF31 supports OpenVPN server to create secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. You can import the ovpn file directly or configure the parameters on this page to set this server.
  • Page 30 OpenVPN Server - Page Configuration Item Description Protocol Select a transport protocol used by connection from UDP and TCP. Enter the local hostname or IP address for bind. If left blank, OpenVPN Listening IP server will bind to all interfaces. Enter the TCP/UCP service number for OpenVPN client connection.

  • Page 31: Openvpn Client

    Subnet Mask Set the subnet netmask of OpenVPN client. 5.3.1.2 OpenVPN Client UF31 supports running at most 3 OpenVPN clients at the same time. You can import the ovpn file directly or configure the parameters on this page to set clients.
  • Page 32 OpenVPN Client - Page Configuration Item Description Protocol Select a transport protocol used by connecting UDP and TCP. Remote IP Address Enter remote OpenVPN server's IP address or domain name. Enter the TCP/UCP service number of remote OpenVPN server. Range: 1- Port 65535.

  • Page 33: Certificate

    X.509 cert: use X.509 type certificate to complete the authentication. After selecting, go to VPN > OpenVPN > Certifications page to import CA certificate, client certificate and client private key to corresponding fields. X.509 cert + user: use both username/password and X.509 cert authentication type.

  • Page 34: Ipsecvpn

    5.3.2 IPsecVPN IPsec is especially useful for implementing virtual private networks and for remote user access through dial-up connection to private networks. A big advantage of IPsec is that security arrangements can be handled without requiring changes to individual computer. IPsec provides three choices of security service: Authentication Header (AH), Encapsulating Security Payload (ESP), and Internet Key Exchange (IKE).
  • Page 35 IPsec Server Item Description Enable Enable or disable IPsec server mode. IPsec Mode Select Tunnel or Transport. IPsec Protocol Select from ESP or AH. Local Subnet Enter the local LAN subnet IP address on the IPsec tunnel. Local Subnet Netmask Enter the local LAN netmask on the IPsec tunnel.
  • Page 36 PFS Group Select NULL, MODP768_1 , MODP1024_2 or MODP1536_5. SA Lifetime Set the lifetime of IPsec SA. Range: 60-86400 s. DPD Interval Time Set DPD retry interval to send DPD requests. Range: 2-60 s When using IKE V1, set DPD timeout to detect the remote DPD Timeout side fails.

  • Page 37: Ipsec Client

    User can enter some other initialization strings in this field to add extra Expert Options settings and separate the strings with semicolon. 5.3.2.2 IPSec Client UF31 supports running at most 3 IPsec clients at the same time. IPsec Client Item Description Enable or disable IPsec client mode.
  • Page 38 User FQDN: fully qualified username string with email address format, example:test@user.com Remote Subnet Set the remote LAN subnet that on the IPsec tunnel. Remote Subnet Mask Enter the remote LAN netmask on the IPsec tunnel. Select the identifier type that is the same as remote peer local ID.

  • Page 39: Certificate

    Item Description IKE Version Select the method of key exchange of IKEv1 or IKEv2. Negotiation Mode When using IKEv1, select Main or Aggressive. Encryption Algorithm Select DES, 3DES, AES128, AES192 or AES256. Authentication Algorithm Select MD5, SHA1 or SHA2-256. DH Group Select MODP768_1, MODP1024_2 or MODP1536_5.

  • Page 40: Gps

    5.4 GPS Users can enable GPS feature here. For more debug information, please also enable GPS log. GPS IP Forwarding Item Description Default Enable Forward the GPS data to the client or server. Disable Type Select connection type as Client or Server. Client Protocol Select protocol of data transmission as TCP or UDP.

  • Page 41: System

    When it's connected with server/client, the device will send heartbeat GPS Keepalive packet regularly to the server/client to keep alive. The interval range Interval is 1-3600s. When TCP heartbeat times run out, the device will resend heartbeat. Keepalive After it reaches the preset retry times, device will reconnect to TCP Retry server.

  • Page 42: Password

    System - General Setting Item Description Hostname Define the device name, needs to start with a letter. Local Time Show the current system time. Timezone Click the drop-down list to select the time zone you are in. Select the time synchronization mode. Sync Browser Time: Synchronize time with browser.

  • Page 43: Device Management

    Confirmation Enter the new password again. 5.5.3 Device Management You can connect the device to the Milesight DeviceHub on this page so as to manage the device DeviceHub User Guide centrally and remotely. For more details, please refer to Device Management...

  • Page 44: Backup / Upgrade

    Account Name Fill in the registered DeviceHub account (email) and password. Password Click this button to connect/disconnect the device from the Connect/Disconnect DeviceHub. 5.5.4 Backup / Upgrade This section describes how to create a complete backup of the system configurations to a file, reset to factory defaults, restore the config file to the device and upgrade the flash image via web.

  • Page 45: Log

    Reboot Item Description Reboot Now Reboot the device immediately. Schedule Enable Click to enable reboot schedule. Cycles Reboot the device at a scheduled frequency. Time Select the time to execute the schedule. 5.5.6 Log The system log contains a record of informational, error and warning events that indicates how the system processes.

  • Page 46: Debugger

    Log Control - Advanced Settings Item Description AP log Download Click to download the last AP log recorded. Tcpdump log Start Click to start recording tcpdump log. Stop Click to stop recording tcpdump log. Download Click to download the last tcpdump log recorded. 5.5.7 Debugger 5.5.7.1 Cellular Debugger This tool allows to use AT commands to check cellular debug information.

  • Page 47: Firewall Debugger

    5.5.7.2 Firewall Debugger This tool allows to use iptables commands to check firewall information and download results.

  • Page 48: Application Examples

    Application Examples 6.1 Cellular Connection Ensure the SIM card is inserted well and all cellular antennas are connected to the correct connectors. Go to Network > Interface > Interface page, find the cellular interface and click Edit button. Select the SIM card you need to configure and fill in the necessary info of SIM card, then save all settings.
  • Page 49 Click Ping Detection to configure ICMP ping detection information. UF31 will send ICMP packages to check network connection regularly. Go to Status > Cellular to check the status of the cellular connection. If modem status is ready and network status shows Connected, the SIM has been dialed up successfully.

  • Page 50: Firmware Upgrade

    Cellular Status 6.2 Firmware Upgrade It is suggested that you contact Milesight technical support first before you upgrade device. After getting image file please refer to the following steps to complete the upgrade. Go to System > Backup/Upgrade page, and click Flash image….

  • Page 51: Restore Factory Defaults

    After upload, click Continue to upgrade the device. When SYS LED changes from orange to green and stay statically, the upgrade is completed. Do not perform any operation or disconnect the power during the upgrade. Related Topic Backup / Upgrade 6.3 Restore Factory Defaults Method 1: Go to System >...

  • Page 52: Configure Openvpn Client

    Release the metal case and find the reset button on the mainboard, press and hold the reset button for more than 5 seconds until LED blinks. 6.4 Configure OpenVPN Client UF31 can work as OpenVPN clients or OpenVPN servers. We are about to take an example of configuring OpenVPN client to connect to OpenVPN cloud. Configuration Steps 1.
  • Page 53 3. Select the location as OpenWrt and download the OVPN file. 4. Go to VPN > OpenVPN > OpenVPN Client page, select configuration method as File Configuration, then import the OVPN file. 5. Go to Status > VPN page to check if the client is connected.

  • Page 54: Configure Nat Rule

    6.5 Configure NAT Rule Example UF31 can access to the Internet via cellular and get a public IP address. LAN port is connected with an IP camera whose IP address is 192.168.23.165 and HTTP port is 80. This IP camera can be accessed by public IP address via the below port mapping settings.
  • Page 55 Related Topic Port Mapping [END]...

Table of Contents