Legal notice The information in this document is subject to change without notice and is not binding for Welotec GmbH. It is possible that this user manual contains technical or typographical errors. Corrections are made regularly with‑...
1.1 Content checklist Each TK100 wireless router is delivered in a package with standard accessories. Additional accessories can be or‑ dered. Check the contents of your package carefully and if anything is missing or damaged, contact your sales partner from Welotec GmbH.
Power supply: 1 terminal strip (2‑pole) incl. voltage socket and serial connection Input voltage: 9 ‑ 36 V DC 1.2.3 Physical properties Housing: steel, protection class IP30 Weight: 259 g Dimensions (mm): 90 x 90 x 25 mm Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 5 48366 Laer...
2 Installation Manual 2.1 Typical use With TK100 series routers, you can connect devices to the Internet with Ethernet, via GPRS/HSUPA/ UMTS/LTE. To ensure security and uninterrupted access, the TK100 series supports VPN connections, enabling remote access and secure data transmission over the Internet.
2.3.5 Connecting the TK router device to the PC for the first time The TK100 router can assign IP addresses for the PC automatically. Set up the PC so that IP addresses are retrieved automatically via DHCP. (Basis is the Windows operating system): 1.
Page 9
DNS address automatically. (You can also set up the PC in the subnet: 192.168.2.0/24, e.g. IP: 192.168.2.10, netmask: 255.255.255.0, default gateway: 192.168.2.1) By clicking “OK”, the TK router assigns an IP address to the PC: 192.168.2.X, and the gateway: 192.168.2.1 (the default address of the TK100). Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 10
Windows key+R ‑> enter “cmd” ‑> Enter key ‑> enter “Ping 192.168.2.1” ‑> Enter key For this display: The connection between the PC and the router has been established correctly. In the following example there are errors: Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 11
The connection is not working properly and you should go through the instructions again and check your settings. 2.3.6 Configuring the TK100 (Optional) After you have performed the steps described in the previous chapter, you can configure the router: 1. Open any Internet browser (e.g.
Page 12
Click “Apply” and the following screen will be displayed: The IP address of the TK100 has been changed. So that you can now access the configuration page again, the PC must be set up in the same subnet, for example: 192.168.1.10/24 – Then enter the changed IP address (192.168.1.254) in your browser.
Via Show Advanced Options you can make further settings, such as the PIN code if it is set on the SIM card. If you have set the correct configuration, the TK100 can now connect to the Internet. Open an Internet browser, type “[www.welotec.com][www.welotec.com]”...
Page 14
2. As soon as the Status LED lights up (approx. 15 seconds after switching on), release the RESET button: 3. After a few seconds, the Status LED light will stop glowing. Now press the RESET button again: Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 15
4. The Status LED light will then flash, indicating that the reset to the default setting was successful. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 14 48366 Laer +49 2554 9130 00...
2.4.2 Web method 1.) Log in to the TK100 web‑based user interface and select System > Config Management: 2.) Click Restore default configuration to reset the TK100 to its factory settings. After that the router will be re‑ booted. 2.5 Factory default settings: •...
3.1 Preparation First connect your devices to the TK100 via cable or hub (switch) and set the IP address for the PC and TK100 in the same subnet, e.g.: set the PC IP address to 192.168.2.2, netmask: 255.255.255.0, gateway (default IP of TK100: 192.168.2.1):...
Page 18
Open an Internet browser and enter the IP address of the TK100: [http://192.168.2.1][http://192.168.2.1*.*] (de‑ fault IP of the TK100). On the following login page, you must log in as an administrator. Enter the user name and password (default: adm/123456). Click on “Login” to open the configuration page.
In the Basic Setup you can change the language of the menu and the host name. This menu item can be accessed via System > Basic Setup. Parameter Name Description Standard Language Set language for configuration page English Host Name Hostname TK100 Router Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 18 48366 Laer +49 2554 9130 00...
In this area you can change or adjust important settings, such as the password of the administrator or the port assignment for access to the router. These settings can be reached via System > Admin Access. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 21
Local Access Enabled ‑ allow router to be managed over LAN (e.g. : HTTP) Enabled Remote Access Enabled ‑ Allow the TK100 to be managed over WAN (e.g. : HTTP) Enabled Description Describe management parameters (without effect on TK100) Non‑privileged...
Description Router Configuration Upload/save configuration file for import/backup Restore default configura‑ Click to reset the TK100 (to activate the default configuration, the TK100 must be tion restarted) Network Provider (ISP) To import or save APN, username, password and other parameters from traditional...
In this area, the router provides you with an interface for updating the firmware. To be reached via System > Up‑ grade. To update the system, use the Select file button to select the update file (e.g. TK100‑V3.5.xxx.bin) in your file system. Click the “Upgrade” button and confirm the start of the upgrade After successfully updating the firmware, click Reboot to restart the TK100.
If you need to reboot your router, select System > Reboot. Then click “OK” to reboot the system. 3.12 Logout To log out from the system, click System > Logout and confirm the logout with “OK”. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
You can obtain the APN, dial‑in number, user name and password from your local network provider. Ask them for the details. Via Show Advanced Options you can make further settings, such as the PIN code if it is set on the SIM card. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 26
Server ICMP Detection In‑ Set interval for ICMP detection 30 seconds terval ICMP Detection Set timeout for ICMP detection (TK100 is restarted on ICMP time‑ 20 seconds Timeout out) ICMP Detection Set maximum number of retries if ICMP fails Retries Welotec GmbH www.welotec.com...
Here you can set up a new WAN (Wide Area Network) or make settings for your LAN. To be reached via Network > WAN/LAN Switch. Under this tab you can decide whether the port should be used for WAN or LAN. On this page the type of the WAN port can be set: Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 28
Static IP Dynamic Address (DHCP) ADSL Dialup (PPPoE) Disabled Disabled Only one WAN type can be enabled at a time. Enabling one type disables another. 4.2.1 Static IP Static IP can also be used for configuring the LAN. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 27...
Page 29
Mobile radio interface as standard route to the Internet Enabled MAC Address Set MAC address Set the Maximum Transmission Unit (MTU), the options “Default” and Default “Manual” are possible 1500 Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 28 48366 Laer +49 2554 9130 00...
Page 31
Set time for ICMP detection vall ICMP Detection Time‑ Set timeout for ICMP detection ICMP Detection Retries Set maximum number of retries for ICMP detection Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 30 48366 Laer +49 2554 9130 00...
4.3 Link Backup This option secures connections between wireless WAN and Ethernet WAN. If one WAN fails, the TK100 automati‑ cally uses the other. You can configure this under Network > Link Backup. Name Description Standard Enable Enable the connection backup service...
Page 33
The TK100 series offers the possibility to create two different VRRP (VRRP I and VRRP II) groups. Name Description Standard Enable VRRP‑I Select to enable VRRP Disabled Group ID Select group ID for router (range 1‑ 255) Priority Select priority for router (range 1‑...
255.255.255.0 Gateway Set gateway of the destination Empty Interface Optional LAN/WAN port access to destination Empty Description Freely selectable name for the static route Empty Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 33 48366 Laer +49 2554 9130 00...
MAC Address Set MAC address of a designated IP address Empty IP Address Set static IP address 192.168.2.2 Host Set hostname Empty Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 34 48366 Laer +49 2554 9130 00...
IP Address Set IP address <‑> DNS Enable pairs Host Set IP address name <‑> Empty DNS pairs Description Describe IP address <‑> Empty DNS pairs Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 35 48366 Laer +49 2554 9130 00...
Show current IP address Empty Service Type Select DDNS provider Disabled There are various setting options for different DDNS service providers. These are selected via the service type. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 36 48366 Laer +49 2554 9130 00...
Page 38
There are various providers here, some of which are free of charge, but some of which are subject to a charge. The assignment of the Dynamic DNS can be assigned to the WAN as well as to the dialup connection. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
5.5 SMS The TK100 can be reached via SMS from the outside and reacts to various commands sent via SMS. You have the possibility to query the status of the device or to restart the device. The router is configured via Services > SMS.
Page 40
SMS that you receive on your cell phone: Host: (SN); Uptime: (the operating time of the router at the time of this restart); State: (Online/Offline) (Wireless WAN IP) LAN: (Ready) (LAN‑IP) Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 39...
The amount of data used can be checked at any time under Traffic Statistics (see 3.8.3) 5.7 Alarm Manager The Alarm Manager can be used to generate various alarms. You can configure this service under Services ‑> Alarm Manager. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 42
Select here the areas for which an alarm is to be generated None Alarm Output Here you can choose whether the alarms should be issued via the console or not Selected Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 41...
6.2 Filtering At this point you can filter what the firewall should let through and what not. Various configurations are possible here, which you can reach via Firewall > Filtering. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 42...
NAT‑PMP, like UPnP, allows a program to request all incoming data from outside on a specific TCP or UDP port. You can perform the configuration under Firewall > Port Mapping. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Set range of source IP addresses Empty Virtual IP Set virtual IP Empty Real IP Set real IP Empty Enable logging for virtual IP Disabled Description Describe configuration Empty Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 44 48366 Laer +49 2554 9130 00...
By mapping all ports and the external PC, you can access all ports of the device connected to the TK100. With this function it is not possible to assign the management port of the TK100 (e.g.: 80 TCP) to the port of the device.
It allows devices with private network addresses to connect to the Internet. Private IP addresses cannot usually be routed by the provider, so they must be translated into a public, routable IP address. The TK100 has implemented this function, which enables communication between different networks. In addition, a relevant security aspect is found in NAT, since a public IP address cannot be traced back to the associated private IP address.
The address change via NAT is interpreted by a VPN gateway as a security‑critical change to the data packets, the VPN negotiation fails, and no connection is established. These problems occur, for example, when dialing in via Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
The hash value calculated by the receiver therefore corresponds to the hash value entered in the packets 8.2 IPSec Tunnels Via VPN > IPSec Tunnels you can set up an appropriate tunnel. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Page 51
This page presents the web‑based parameters for the TK100. Name Description Show Advanced Options Click to enable Advanced Options Basic Parameters Tunnel Name Name for the tunnel Destination Address Set the destination address of the IPSec VPN server Startup Modes Possible modes are “Auto Active”...
1701. GRE can be used to wrap other protocols and thus transport them in an IP tunnel. GRE uses the IP protocol 47, the GRE header is structured as follows: A GRE packet therefore consists of an IP header, a GRE header and the actual payload. You can set up this GRE Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
L2 switches. The L2TP client establishes the connection to the L2TP server here. You can reach the configuration via VPN > L2TP Clients. Click on the Add button to start the configuration of the L2TP client. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
To set up a new PPTP client, click on the Add button. To view details of an existing PPTP client, click the Show Detail Status button. After clicking the Add button, you can make the following configuration settings. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Linux‑based endpoints such as TK 500 and TK 800 series routers. On the TK100 configuration page, select the VPN > Open VPN Tunnels options as shown below: Click Add to add a new OpenVPN tunnel. With Show Detail Status you can view the status of an already configured OpenVPN tunnel.
More OpenVPN commands (only for experienced users) 8.7 OpenVPN Advanced This configuration page is only used for the OpenVPN server and provides advanced functions. You can reach this menu item via VPN > OpenVPN Advanced. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
Remote Static Route Subnet of the server CA can only be created from the customer’s PC, not from TK100. 8.8 Certificate Management Under the menu item VPN > Certificate Management you can include the certificates that you want to use for your VPN connections.
8.9 ZeroTier On the TK100 configuration page, select VPN > ZeroTier. To set up a new ZeroTier Network, click Enable. Then the ZeroTier Networks and the ZeroTier Networks Status will be visible. Click on the Add button to add a new network. You can then enter the Tunnel Name, the Network ID and choose between planet and moon as the Network Type.
Via the Browse button you can upload a corresponding file from the computer. The file should be between 10 and 2000MB in size. After selecting the file, click on the Upload button. The result will be displayed Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com...
9.4 TCPDUMP The TCPDUMP function reads data in the form of packets sent over the network and displays them on the screen or saves them to files. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 63 48366 Laer +49 2554 9130 00...
10 Application Under the menu item Application you will find the possibility to connect your router with the management solution SMART EMS of the company Welotec. 10.1 SMART‑EMS Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 64 48366 Laer +49 2554 9130 00...
This page displays the status of the system, including information about the name, model type, current version, etc. 11.2 Modem Check the status of your modem under Status > Modem. Here you can view the status of the modem including the signal strength. Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 65...
11.3 Traffic Statistics If you want to view the data consumption of the SIM card in the TK100, then you can do this under Status > Traffic Statistics. Here you can see the data that was received or transmitted monthly, daily and hourly. Via the button “Clear” you can reset the entries to 0.
Here you can see at a glance the network connections via WAN, dialup or LAN. 11.6 Route Table If you want to have an overview of the routing table in TK100, select Status > Route Table from the menu. After clicking on Route Table you will see the routing table of the TK100.
It may happen that problems cannot be diagnosed and rectified immediately. In these cases, we ask you to send the diagnostic log to Welotec. To do this, click on “Download System Diagnosing Data”, and then send us the log with a description of the error to [support@welotec.com][Email: support@welotec.com] 11.9 Third Party Software...
13 Support Send an email to the following address in case of problems with installation and operation: [sup‑ port@welotec.com][Email: support@welotec.com] Welotec GmbH www.welotec.com Zum Hagenbach 7 info@welotec.com Page 73 48366 Laer +49 2554 9130 00...
Need help?
Do you have a question about the TK100 and is the answer not in the manual?
Questions and answers