Page 1
InHand ER605 User Manual InHand ER605 5G Edge Router User Manual Issue: V1.1—February 2023...
Page 2
The contents of this document are subject to change without prior notice as a result of continuing improvements to the product. InHand cannot promise that the contents are consistent with the actual product information, and assumes no responsibility for any disputes arising out of the discrepancies. InHand reserves the right to update and interpret information in this manual.
InHand ER605 User Manual 1 Overview Edge Router 605 (ER605 for short) is a next-generation 5G edge router developed by InHand to provide fast and secure network connections for business applications. Leveraging 4G/5G cellular networks and various broadband services, ER605 provides ubiquitous, uninterrupted access to the Internet for a variety of business devices.
InHand ER605 User Manual 2 Hardware 2.1 Indicator Description LED Indicator Status and Description Off –– The router is off. Solid –– The system is starting. System status Blinking green –– The system is running properly. indicator Blinking –– The system does not work properly.
InHand ER605 User Manual 2.2 Installation 2.2.1 Mounting method Desktop installation After pasting the four rubber foot pads, place them flat on the table Lug installation Fix the lug on the side of the router with screws, and then fix the device on the wall with fixing bolts 2.2.2 Installation...
InHand ER605 User Manual Step2:Install Wi-Fi and cellular antenna on the router antenna interface clockwise one by one Step3:Power the router 2.3 Using the Reset Button to Restore Factory Settings Step 1: Power on the device (10 seconds), press and hold the reset button until the SYS indicator is steady yellow Step 2: Release the button, wait for the SYS LED to flash yellow.
− The Wi-Fi 2.4 GHz access point (AP) is enabled, and its SSID is ER605– followed by the last six digits of the wireless MAC address. − The Wi-Fi 5 GHz AP is enabled, and its SSID is ER605-5G–...
InHand ER605 User Manual 4 Quick Network Connection 4.1 Environment Setup Step 1: Install the 4G/5G and Wi-Fi antennas, and insert SIM cards into the router. Step 2: Connect the power cable and Ethernet cable, and connect any of LAN interfaces to a PC.
4.2.1 Wired Connection Via a WAN Interface The ER605 can establish a wired connection through DHCP, a static IP address, or PPPoE. To select a connection method, click 【Internet】 on the left pane, and then click Edit in the row of WAN1 Figure 4-2-1-a Editing interface WAN1 DHCP: The DHCP service is enabled on the WAN interface by default.
Page 13
InHand ER605 User Manual Figure 4-2-1-b DHCP mode Static IP address: Manually assign an IP address obtained from the carrier or upstream network device. Then, the router can connect to the Internet using this static IP address. Figure 4-2-1-c Assigning a static IP address to the router PPPoE: Configure the PPPoE service on WAN1.
Page 14
InHand ER605 User Manual Figure 4-2-1-d Configuring PPPoE To use the second WAN interface, click Add on the 【Internet】 page to add WAN2. This interface provides the same functions as WAN1. Figure 4-2-1-e Adding WAN2 Notes: After you add WAN2, interface LAN1 changes to WAN2.
4.2.2 Wireless Connection via the Cellular Interface Generally, the ER605 dials up to the cellular network automatically after you install the SIM cards and antennas according to the installation guide, and power on the router. To set the access point name (APN), click 【Internet】on the left pane, and then click Edit in the row of Cellular.
Page 16
InHand ER605 User Manual Figure 4-2-2-b Editing the cellular interface Among them, the SIM card working mode can be optionally configured with SIM1 only, SIM2 only, and dual SIM mode, and the PDP Type can be optionally configured as Ipv4, Ipv6, Ipv4&Ipv6. Network standard can choose 3G, 4G, 4G/5G, 5G SA;...
Page 17
InHand ER605 User Manual Figure 4-2-2-c Manually configure dialing parameters The ER605 allows you to set traffic policies for cellular network access. After a traffic policy is enabled, the working click 【Internet】on the left SIM card will take the specified action when the traffic usage reaches the set threshold.
Page 18
InHand ER605 User Manual Figure 4-2-2d Setting the cellular traffic policy Figure 4-2-2-e Configuring a traffic policy for cellular network access Actions: Notification:record the generated traffic reaching the threshold event, and the traffic transmission is not restricted. Only Cloud Management:record the generated traffic reaching the threshold event, only keep the traffic of the ...
4.2.3 Wireless Connection via Wi-Fi(STA) The ER605 can connect to an AP as a wireless client (STA). To use this connection method, click Add on the 【Internet】page, select Wi-Fi(STA) in the dialog box that appears, and enter the SSID and password.
InHand ER605 User Manual 5 Dashboard Click 【Dashboard】on the left pane to display the dashboard of the router, on which you can view basic device information, interface status, traffic statistics, cellular signals, and number of Wi-Fi connections. Figure 5 Dashboard 5.1 Device Information...
Figure 5-3 Traffic statistics 5.4 Number of Wi-Fi Connections You can view the number of SSIDs enabled on the ER605 and number of clients connected to each SSID. Figure 5-4 Number of Wi-Fi connections...
InHand ER605 User Manual 5.5 Top 5 Clients by Traffic You can view the rankings of clients connected to the router by their traffic statistics. A maximum of five records can be displayed. When a client is disconnected from the router, its traffic statistics are cleared.
InHand ER605 User Manual 6 Status Click Status on the left pane to display the 【Status】 page, where you can view information about uplinks, cellular signals, clients, VPNs, events, and logs of the router. 6.1 Link Monitor The【Link Monitor 】 module displays the health of each uplink, as well as the throughput, delay, packet loss rate, and signal strength on each uplink interface.
InHand ER605 User Manual 6.3 Clients The 【 Clients】 module displays details about each client connected to the router, such as its name, IP address, MAC address, VLAN ID, connected subnet, traffic statistics, and online duration. Figure 6-3 Clients 6.4 VPN The【VPN】...
InHand ER605 User Manual The 【Events】module displays the events that have occurred during operation of the router, helping you understand its running status. Figure 6-5 Events The router supports the following types of events: Login successfully/failed Configuration changed ...
Page 26
InHand ER605 User Manual Figure 6-6 Logs Clear Logs: clear running logs of the router. Download Logs:download running logs of the router. Download Diagnostic Logs: download log information for troubleshooting, it contains system running logs, device information, and device configuration.
InHand ER605 User Manual 7 Internet On the 【Internet】page, you can set parameters for the uplink interfaces and specify a multi-link work mode. Notes: Exercise caution when changing settings on the 【 Internet 】 page, as doing so may cause an ...
Page 28
InHand ER605 User Manual Figure 7-2 Uplink settings By default, link detection is enabled. In the private network environment, please manually configure the address that can be detected or disable the link detection function to ensure the cellular interface working normally.
InHand ER605 User Manual 8 Local Network On the【Local Network】page, you can add local subnets and assign them to clients connected to the router through the LAN interfaces or SSIDs. 8.1 Local Network List Click Add or Edit to add a local network or edit an existing local network.
InHand ER605 User Manual 9 Wi-Fi The ER605 can serve as an AP to provide multiple SSIDs for wireless network access. You can define SSIDs for different purposes and set parameters for these SSIDs. Figure 9-1 Wi-Fi list Click Add or Edit to add an SSID or edit an existing SSID.
Page 31
InHand ER605 User Manual If you have added the Wi-Fi(STA) interface on the 【Internet】 page, none of SSIDs on the same band as the Wi-Fi (STA) interface can be enabled, until this interface is removed.
InHand ER605 User Manual 10 VPN A virtual private network (VPN) is a private network established on a public network for encrypted communication. A VPN gateway encrypts data packets and translates destination IP addresses of data packets to implement remote access. The VPN service can be provided through a server, hardware client, or software client.
(PPP) negotiation. This tunnel allows remote users to connect to the intranet of the enterprise in a secure way. 10.2.1 Client The ER605 can serve as an L2TP client to establish a tunnel to a remote L2TP server. Choose L2TP VPN > Client on the 【VPN】 page, and click Add to add an L2TP client.
InHand ER605 User Manual Figure 10-2-1-a/b Adding an L2TP client Name: specifies the local identifier of the L2TP client. Status: enables or disables L2TP tunneling on the client. NAT: enables or disables network address translation (NAT) for packets forwarded by the router for the clients ...
InHand ER605 User Manual Figure 10-2-2 L2TP server configuration Name: displays the name of the L2TP server, which cannot be changed. Status: enables or disables the L2TP server function. This function is disabled by default. Uplink Interface: specifies the uplink interface used to establish a tunnel from the L2TP server.
Page 36
VNI: It is the network identifier of VXLAN VPN and needs to be consistent with the device that establishes VXLAN VPN with ER605,The VNI of each VXLAN network is unique. Local Subnet: specifies the IP address segment of the traffic to be sent out by the ER605 through the VXLAN VPN tunnel.
InHand ER605 User Manual 11 Security On the Security page, you can configure advanced security features, including firewall, policy-based routing, and traffic shaping. 11.1 Firewall You can set inbound and outbound rules and port forwarding for the firewall. 11.1.1 Inbound and Outbound Rules You can set inbound and outbound rules to control inbound and outbound traffic on an interface.
InHand ER605 User Manual Figure 11-1-1-a/b Adding an inbound rule Name: specifies the local identifier of the inbound rule. Status: enables or disables the rule. Interface: specifies the traffic forwarding interface. For an outbound rule, select the interface from ...
InHand ER605 User Manual Figure 11-1-2-a/b Adding a port forwarding rule Name: specifies the local identifier of the port forwarding rule. Status: enables or disables the port forwarding rule. Interface: specifies the uplink interface that provides port mapping for internal clients. This interface must have a ...
InHand ER605 User Manual Figure 11-1-3 a/b Adding a MAC Address Filter rule You can create multiple MAC addresses in the list, add a description of the address, and set the MAC addresses in the list to access the network (whitelist), or you can disable MAC addresses in the list to access the network (blacklist).
InHand ER605 User Manual Figure 11-2-a/b Adding a PBR entry Notes: The source and destination addresses of the PBR entry cannot be set to Any at the same time. 11.3 Traffic Shaping To optimize your network, you can create shaping policies to apply per-user controls on a per-protocol basis.This allows you to reduce bandwidth for recreational traffic, and to prioritize bandwidth for your business-critical enterprise Choose Security >...
Page 42
InHand ER605 User Manual Figure 11-3-b Adding traffic shaping rule Note: Traffic forwarding priority for unmatched rules is medium. When the bandwidth is set to 0, the rate of traffic is not limited. The value of guaranteed bandwidth should not be greater than the limit bandwidth.
InHand ER605 User Manual 12 Services 12.1 Interface Management In the 【Interface Management】 module, you can specify the local subnets allowed to communicate with external networks, and set a rate limit for the interface. Figure 12-1-a/b Editing a LAN interface 12.2 DHCP Server...
InHand ER605 User Manual Figure 12-2-a/b Editing a DHCP server DHCP servers are created on the router based on local networks connected to the router. When a local network is removed, the DHCP server for this network is also removed.
InHand ER605 User Manual Figure 12-4 Adding a fixed IP-MAC address mapping The IP address assigned must be in the IP address range of the local network in IP mode. When a local network is removed, all the address mapping entries in the IP address range of the network ...
InHand ER605 User Manual Figure 12-6 Adding a Dynamic DNS Service Provider: It is provided by Dynamic DNS operators, You can choose dyndns, 3322, oray, no-ip, or customize (URL required). Hostname: Click the URL below Service Provider to register to get the hostname.
Page 47
InHand ER605 User Manual Passthrough MAC:Only the client bound t the MAC can obtain the Passthrough address. Note: After the IP Passthrough mode is enbled,only one client can access the Internet.The following function will be disabled. Static routing, VPN, Port Forwarding,Policy-based Routing, SD-WAN Overlay, Connecor.
Figure 13-1-a/b Changing the password of adm 13.2 Cloud Management InCloud Manager (star.inhandcloud.com) is a cloud platform developed by InHand to help enterprises accelerate network deployment, simplify network O&M, and improve service experience. This platform provides zero touch deployment, intelligent O&M, and security features to create good service experience for users.
Figure 13-2 Cloud management Note: The ER605 connects to the InCloud Manager platform automatically. If you do not want to use this platform, disable the cloud service manually.
InHand ER605 User Manual Ping: when this service is enabled, ping requests can be initiated to the IP address of the uplink interface from external networks. Notes: Remote access control does not apply to LAN interfaces. Firewall policies do not restrict remote access.
InHand ER605 User Manual You can export the configuration file of the router to your PC as a backup. Once the configuration is lost on the router, you can import the configuration file to the router to restore the configuration.
InHand ER605 User Manual 13.8.1 Ping The ping service is used to test the connectivity between the router and external networks through the Internet Control Message Protocol (ICMP). Enter any domain name or IP address in the Target field, and then click Start to test the connectivity with this target.
InHand ER605 User Manual After you enable the log file server feature, the device periodically uploads log files to the specified server. Figure 13-9-1 Adding Log Servers 13.10 Other Settings 13.10.1 Web login management You can set the time that log out automatically.
InHand ER605 User Manual Figure 13-10-2 Enabling the Automatically restart function 13.10.3 SIP ALG It generally functions as a firewall and consists of two technologies, one is the session initiation protocol(SIP) and the other is the application layer gateway (ALG)
Need help?
Do you have a question about the ER605 and is the answer not in the manual?
Questions and answers