Page 2
Preface Thanks for choosing Milesight UG63 LoRaWAN gateway. UG63 delivers tenacious ® connection over network with full-featured design such as extended hardware watchdog, VPN, fast Ethernet and beyond. This guide shows you how to configure and operate the UG63 LoRaWAN gateway.
Page 3
For assistance, please contact Milesight technical support: Email: iot.support@milesight.com Tel: 86-592-5085280 Fax: 86-592-5023065 Address: Building C09, Software Park III, Xiamen 361024, Fujian, China Revision History Date Doc Version Description Mar. 18, 2022 V1.0 Initial version...
Chapter 1 Product Introduction 1.1 Overview UG63 is a robust 8-channel indoor LoRaWAN gateway. Adopting SX1302 LoRa chip and ® high-performance CPU, UG63 supports connection with more than 2000 nodes. UG63 has line of sight up to 15 km and can cover about 2 km in urbanized environment, which is ideally suited to smart office, parking lots, campuses, hotels, exhibition centers and many other indoor areas.
Milesight DeviceHub provides easy setup, bulk configuration, and centralized management of remote devices The user-friendly web interface design and various upgrading options help administrator to manage the device as easy as pie Web GUI and CLI enable the admin to achieve quick configuration and simple...
Chapter 2 Access to Web GUI This chapter explains how to access to Web GUI of the UG63. Username: admin Password: password Connect PC to UG63 ETH port directly or through PoE injector to access the web GUI of gateway.
Page 10
If you enter the username or password incorrectly more than 5 times, the login page will be locked for 10 minutes. 5. After logging in the web GUI, you can view system information and perform configuration of the gateway. It’s suggested that you change the password for the sake of...
Chapter 3 Web Configuration 3.1 Status 3.1.1 Overview You can view the system information of the gateway on this page. Figure 3-1-1-1 System Information Item Description Model Show the model name of gateway. Region Show the LoRaWAN ® frequency region of gateway.
3.1.2 Network On this page you can check the Ethernet port status of the gateway. Figure 3-1-2-1 Network Item Description Port Show the name of the Ethernet port. Show the status of the Ethernet port. "Up" refers to a status that WAN Status is enabled and Ethernet cable is connected.
Page 13
Figure 3-1-3-2 VPN Status Item Description Name Show the name of the VPN tunnel. Status Show the status of the VPN tunnel. Local IP Show the local tunnel IP of VPN tunnel. Remote IP Show the remote tunnel IP of VPN tunnel.
Show the IP address of ARP pool. Show the IP address's corresponding MAC address. Interface Show the binding interface of ARP. Table 3-1-4-1 Routing Information 3.2 LoRaWAN 3.2.1 Packet Forwarder 3.2.1.1 General Figure 3-2-1-1 General Settings Item Description Default...
Related Configuration Example Packet fowarder configuration 3.2.1.2 Radios Figure 3-2-1-2 Radios-Radio Channel Setting Item Description Default Choose the LoRaWAN ® frequency plan used for the upstream and downlink frequencies and datarates. Based on the Region Available channel plans depend on the gateway’s gateway’s model...
Page 16
Range: center frequency±0.4625. LoRaWAN ® regional document Table 3-2-1-3 Multi Channel Setting Parameters Figure 3-2-1-4 Radios-LoRa Channel Setting Item Description Default Click to enable this channel to transmit Enable Enabled packets. Choose Radio 0 or Radio 1 as center...
Table 3-2-1-5 FSK Channel Setting Parameters 3.2.1.3 Noise Analyzer Noise analyzer is used for scanning the noise of every frequency channel and giving a diagram for users to analyze the environment interference condition and select best deployment. RSSI indicates the sensitivity for every channel.
Page 18
Figure 3-2-1-7 Advanced-Beacon Setting Item Description Default Interval of gateway sending beacons for Class B Beacon Period device time synchronization. 0 means the gateway will not send beacons. Based on the Beacon Freq The frequency of beacons. supported frequency...
Page 19
Figure 3-2-1-8 Item Description Default Enter the interval of keep alive packet which is sent Keep Alive from gateway to network server to keep the connection 10 s Interval stable and alive. Range: 1-3600. Enter the interval to update the network server with...
Range: -120~0 Table 3-2-1-9 Advanced-LBT Parameters 3.2.1.5 Custom Figure 3-2-1-10 When Custom Configuration mode is enabled, you can write your own packet forwarder configuration file in the edit box to configure packet forwarder. Click “Save” to save your custom configuration file content, and click “Apply”...
Figure 3-2-1-11 Item Description Refresh Click to obtain the latest data. Clear Click to clear all data. Rfch Show the channel of this packet. Direction Show the direction of this packet. Time Show the receiving time of this packet.
Page 22
Figure 3-2-2-1 Item Description Default General Setting Enable Click to enable Network Server mode. Enabled Enabled to connect gateway to Milesight IoT Cloud Mode Disabled Cloud or Yeastar Workplace platform . NetID Enter the network identifier. 010203 Enter the interval time between when the...
Channel Plan Setting Choose LoRaWAN channel plan used for the ® Depend on the upstream and downlink frequencies and Channel Plan gateway’s datarates. Available channel plans depend on the frequency gateway’s model. Enabled frequencies are controlled using channel mask.
Page 24
“Payload Codec” and data transmission destination can be added under the same application. You can edit the application by clicking or create a new application by clicking Figure 3-2-2-3 Item Description Enter the name of the application profile.
Page 25
Figure 3-2-2-4 Figure 3-2-2-5 MQTT Settings Item Description Default General Broker MQTT broker address to receive data. Address Broker Port MQTT broker port to receive data.
Page 26
Client ID is the unique identity of the client to the server. Client ID It must be unique when all clients are connected to the same server, and it is the key to handle message at QoS 1 and 2.
Figure 3-2-2-6 HTTP/HTTPS Settings Item Description HTTP Header Header Name A core set of fields in HTTP header. Header Value Value of the HTTP header. Data Type Data type sent to HTTP/HTTPS server. Topic Topic name of the data type using for publish.
Page 28
Figure 3-2-2-7 Figure 3-2-2-8 Device Profiles Settings Item Description Default Enter the name of the device profile. Name Null E.g. Smoker-sensor-app. Enter the maximum transmit power. The TXPower indicates power levels relative to the Max EIRP level of the end-device. 0 means using the max EIRP.
Page 29
- join accept procedure. Device type is Class A by default. Users can check the box of Class B or Class C to add the class type.
CN470/US915/AU915 gateway. PingSlot Period Period of opening the pingslot. Every Second Based on the PingSlot Datarate of the node receiving downlinks. supported DataRate frequency Based on the PingSlot Freq Frequency of the node receiving downlinks. supported frequency The time for confirmed downlink transmissions.
Page 31
Figure 3-2-2-11 Device Configuration Item Description Default Device Name Enter the name of this device. Null Description Enter the description of this device. Null Device EUI Enter the EUI of this device. Null Device-Profile Choose the device profile. Null Application Choose the application profile.
Page 32
UG63. Range: 2-84, 86-223. Note: this value must be the same as the Milesight LoRaWAN ® controller’s Fport. Enter the TCP port for data transmission between the TCP Port TCP Client and UG63 (as TCP Server). Null Range: 1-65535.
3.2.2.5 Multicast Groups Milesight gateways support for creating Class B or Class C multicast groups to send downlink messages to a group of end devices. A multicast group is a virtual ABP device (i.e. shared session keys), does not support uplink, confirmed downlink nor MAC commands.
Address Multicast The network session key (Netwks Key) of all devices in Network Null this group. Session Key Multicast The application session key (AppSKey) of all devices in Application Null this group. Session Key Class Type Class B and Class C are optional.
Page 35
Enter the EUI of the device to receive Device EUI Null the payload. Multicast Select the multicast group to send downlinks. Multicast Null Group groups can be added under Multicast Groups tab. Choose from: “ASCII”, “hex”, “base64”. Type ASCII Choose the payload type to enter in the payload Input box.
Page 36
Figure 3-2-2-15 Item Description Addr/Multicast Show the address of the device/multicast group. Addr GwEUI Show the EUI of the gateway. AppEUI Show the EUI of the application. DevEUI/Group Show the EUI of the device/multicast group name. Name Class Type Show the class type of the device or multicast group.
False: ADR is disabled or Network does not respond in ADR_ACK_DELAY. True: This frame is ACK. False: This frame is not ACK. Show the frame-counter of this packet.The network server tracks the Fcnt uplink frame counter and generates the downlink counter for each end-device.
Page 38
Figure 3-3-1-1 Port Setting Item Description Default Port The port that is fixed as eth0 port and enabled. eth 0 Connection Select from "Static IP", "DHCP Client" and "PPPoE". Static IP Type Set the maximum transmission unit. 1500 Primary DNS Set the primary DNS.
Page 39
Figure 3-3-1-2 Static IP Item Description Default IP Address Set the IP address which can access Internet. 192.168.23.150 Netmask Set the Netmask for Ethernet port. 255.255.255.0 Gateway Set the gateway's IP address for Ethernet port. 192.168.23.1 Multiple IP Set the multiple IP addresses for Ethernet port.
Figure 3-3-1-3 DHCP Client Item Description Obtain peer DNS automatically during PPP dialing. DNS is Use Peer DNS necessary when user visits domain name. Table 3-3-1-3 DHCP Client Parameters 3. PPPoE PPPoE refers to a point-to-point protocol over Ethernet. User has to install a PPPoE client on the basis of original connection way.
ID of the gateway. Loopback interface is a logic and virtual interface on gateway. Under default conditions, there's no loopback interface on gateway, but it can be created as required. Figure 3-3-1-5 Loopback Item Description Default IP Address Unalterable 127.0.0.1...
Page 42
Figure 3-3-2-1 Figure 3-3-2-2 DMVPN Item Description Enable Enable or disable DMVPN. Hub Address The IP address or domain name of DMVPN Hub. Local IP address DMVPN local tunnel IP address. GRE Hub IP Address GRE Hub tunnel IP address.
Select from "MODP768_1", "MODP1024_2" and DH Group "MODP1536_5". Enter the preshared key. Local ID Type Select from "Default", "ID", "FQDN", and "User FQDN" IKE Life Time (s) Set the lifetime in IKE negotiation. Range: 60-86400. Select from "DES_MD5", "DES_SHA1", "3DES_MD5", "3DES_SHA1", "AES128_MD5", "AES128_SHA1",...
Page 44
Figure 3-3-2-3 IPsec Item Description Enable Enable IPsec tunnel. A maximum of 3 tunnels is allowed. Enter the IP address or domain name of remote IPsec IPsec Gateway Address server. IPsec Mode Select from "Tunnel" and "Transport". IPsec Protocol Select from "ESP"...
Page 45
Figure 3-3-2-4 IKE Parameter Item Description IKE Version Select from "IKEv1" and "IKEv2". Negotiation Mode Select from "Main" and "Aggressive". Encryption Algorithm Select from "DES", "3DES", "AES128", "AES192" and "AES256". Authentication Select from "MD5" and " SHA1" Algorithm DH Group Select from "MODP768_1", "MODP1024_2"...
DPD Interval Time(s) Set DPD interval time to detect if the remote side fails. DPD Timeout(s) Set DPD timeout. Range: 10-3600. IPsec Advanced Enable Compression The head of IP packet will be compressed after it's enabled. Select from "NONE", "GRE" and "L2TP" to enable VPN over VPN Over IPsec Type IPsec function.
Remote IP Address Enter the real remote IP address of GRE tunnel. Local IP Address Set the local IP address. Local Virtual IP Set the local tunnel IP address of GRE tunnel. Address Netmask Set the local netmask. Peer Virtual IP Address Enter remote tunnel IP address of GRE tunnel.
Page 48
"MS-CHAPv2". Global Traffic All of the data traffic will be sent out via L2TP tunnel after Forwarding this function is enabled. Remote Subnet Enter the remote IP address that L2TP protects. Remote Subnet Mask Enter the remote netmask that L2TP protects.
Range: 0-600. Set the maximum times of retry to detect the L2TP Max Retries connection failure. Range: 0-10. User can enter some other PPP initialization strings in this Expert Options field and separate the strings with blank space.
Page 50
Figure 3-3-2-9 PPTP Advanced Settings Item Description Local IP Address Set IP address of PPTP client. Peer IP Address Enter tunnel IP address of PPTP server. Enable MPPE Enable MPPE encryption. Address/Control For PPP initialization. User can keep the default option.
3.3.2.6 OpenVPN Client OpenVPN is an open source virtual private network (VPN) product that offers a simplified security framework, modular network design, and cross-platform portability. Advantages of OpenVPN include: Security provisions that function against both active and passive attacks.
Local Tunnel IP Set local tunnel address. Remote Tunnel IP Enter remote tunnel address. Global Traffic All the data traffic will be sent out via OpenVPN tunnel when Forwarding this function is enabled. Enable TLS Check to enable TLS authentication.
Page 54
Figure 3-4-1-1 General Item Description Default System Hostname User-defined gateway name, needs to start with a letter. GATEWAY Web Login You need to log in again if it times out. Range: 100-3600. 1800 Timeout (s) Access Service Port Set port number of the services. Range: 1-65535.
PC. Click "Delete" button will delete the file. Click "Browse" button, choose key file on the PC, and then click "Import" button to upload the file into gateway. Click "Export" button will export file to the PC. Click "Delete" button will delete the file.
Figure 3-4-1-4 System Time Item Description Current Time Show the current system time. Time Zone Click the drop down list to select the time zone you are in. Click the drop down list to select the time synchronization Sync Type type.
Figure 3-4-1-5 SMTP Item Description SMTP Client Settings Enable Enable or disable SMTP client function. Email Address Enter the sender's email account. Password Enter the sender's email password. SMTP Server Address Enter SMTP server's domain name. Port Enter SMTP server port. Range: 1-65535.
Name Set Email group name. Enter the Email address. You can divide multiple Email Email Address addresses by “;”. Table 3-4-1-4 Email Settings 3.4.2 User Management 3.4.2.1 Account Here you can change the login username and password of the administrator.
Figure 3-4-2-2 User Management Item Description Enter a new username. You can use characters such as a-z, 0-9, Username "_", "-", "$". The first character can't be a digit. Password Set password. Select user permission from “Read-Only” and “Read-Write”.
Figure 3-4-3-1 SNMP Settings Item Description Enable Enable or disable SNMP function. Set SNMP listened port. Range: 1-65535. Port The default port is 161. SNMP Version Select SNMP version; support SNMP v1/v2c/v3. Location Information Fill in the location information.
Included You can query all nodes within the specified MIB node. Excluded You can query all nodes except for the specified MIB node. Table 3-4-3-2 MIB View Parameters 3.4.3.3 VACM This section describes how to configure VCAM parameters. Figure 3-4-3-3...
Figure 3-4-3-4 SNMP Trap Item Description Enable Enable or disable SNMP Trap function. SNMP Version Select SNMP version; support SNMP v1/v2c/v3. Server Address Fill in NMS's IP address or domain name. Fill in UDP port. Port range is 1-65535. The default port is Port 162.
Figure 3-4-4-1 DeviceHub Item Description Show the connection status between the gateway and the Status DeviceHub. Disconnected Click this button to disconnect the gateway from the DeviceHub. Activation Server IP address or domain of the DeviceHub. Address DeviceHub Server...
Figure 3-4-5-1 Events Item Description Mark as Read Mark the selected event alarm as read. Delete Delete the selected event alarm. Mark All as Read Mark all event alarms as read. Delete All Alarms Delete all event alarms. Show the reading status of the event alarms, such as “Read” and Status “Unread”.
Event Settings Item Description Enable Check to enable "Events Settings". WAN Up Ethernet cable is connected to WAN port. WAN Down Ethernet cable is disconnected to WAN port. VPN Up VPN is connected. VPN Down VPN is disconnected. Power On The gateway has powered on.
Figure 3-5-1-2 Traceroute Item Description Host Address of the destination host to be detected. Table 3-5-1-2 Traceroute Parameters 3.5.2 Schedule This section explains how to configure scheduled reboot on the gateway. Figure 3-5-2-1 Schedule Item Description Schedule Select schedule type.
3.5.3.1 System Log This section describes how to download log file and view the recent log on web. Figure 3-5-3-1 System Log Item Description Download Download log file. View recent (lines) View the specified lines of system log. Clear Log Clear the current system log.
Log Settings Item Description Remote Log Server With “Remote Log Server” enabled, gateway will send all Enable system logs to the remote server. Fill in the remote system log server address (IP/domain Syslog Server Address name). Port Fill in the remote system log server port.
3.5.5 Backup and Restore This section explains how to create a backup of the whole system configurations to a file, replicate parts of important configuration only for batch backup, restore the config file to the gateway and reset to factory defaults.
Chapter 4 Application Examples 4.1 Restore Factory Defaults 4.1.1 Via Web Interface Log in web interface, and go to “Maintenance → Backup and Restore”. Click “Reset” button under the “Restore Factory Defaults”. You will be asked to confirm if you’d like to reset it to factory defaults. Then click “Reset”...
Please wait till SYS light staticly and the login page pops up again, which means the gateway has already been reset to factory defaults successfully. Related Topic Restore Factory Defaults 4.1.2 Via Hardware Locate the reset button on the gateway, and take corresponding actions based on the status of SYS LED.
Related Topic Upgrade 4.3 Ethernet Connection Go to “Network → Interface → Port” page to select the connection type and configure Ethernet port configuration. Click “Save & Apply” for configuration to take effect.
Connect Ethernet port of gateway to devices like router or modem. Log in the web GUI via the newly assigned IP address and go to “Status -> Network” to check Ethernet port status. Related Topic Port Setting 4.4 Packet Forwarder Configuration UG63 gateway has installed multiple packet forwarders including Semtech, Basic station, Chirpstack-Generic MQTT broker, etc.
3. Go to “Packet Forwarder → Radio” page to configure antenna type, center frequency and channels. The channels of the gateway and network server need to be the same. 4. Add the gateway on network server page. For more details about the network server...
Page 76
2. Go to “Packet Forwarder → Radio” page to select the center frequency and channels. The channels of the gateway and nodes need to be the same. 3. Go to “Network Server” → “General” page to enable the network server and “Cloud mode”,...
4. Log in the Milesight IoT Cloud. Then go to “My Devices” page and click “+New Devices” to add gateway to Milesight IoT Cloud via SN. Gateway will be added under “Gateways” menu. 5. The gateway is online on Milesight IoT Cloud. For UG63, it’s suggested to bind not more than 20 devices.
Page 78
2. Click to enter the configuration page, displayed as the following picture: 3. Click “Save” to create this application. 4. Click to add a data transmission type. HTTP or HTTPS: Step 1: select HTTP or HTTPS as transmission protocol.
Page 79
Step 2: Fill in MQTT broker general settings. Step 3: Select the authentication method required by the server. If you select user credentials for authentication, you need to enter the username and password for authentication. If certificate is necessary for verification, please select mode and import CA certificate, client certificate and client key file for authentication.
4.7 Device Configuration Go to “Device” page and click “Add” to add LoRaWAN node devices. Due to memory ® limitation, it’s suggested to add not more than 20 devices. Please select correct device profile according to device type. You can also click “Bulk Import” if you want to add many nodes all at once.
4.8 Send Data to Device 1. Go to “Network Server → Packets”, check the packet in the network server list to make sure that the device has joined the network successful. 2. Fill in the device EUI or select the multicast group which you need to send downlinks.
Page 82
Ack is “true” means that the device has received this packet. If the device’s class type is Class A, only after the device sends out an uplink packet will the network server sends out data to the device.
Related Topic Packets 4.9 Connect to UG65/UG67 Gateway Milesight UG6x LoRaWAN ® gateway can set up multi-gateway architecture, which can mak e different gateway failover each other and extend signal coverage, while make one node device roams in multiple gateways. One UG65/UG67 gateway can be used as network server and other UG6x series gateways can be used as packet forwarder and transmit all data to the main gateway.
Need help?
Do you have a question about the Milesight UG63 and is the answer not in the manual?
Questions and answers