Web Menu Item > Status ..................... 10 Web Menu Item > System ....................12 Time and Date ........................12 Logging ..........................14 Alarm ..........................16 COM Ports .......................... 19 Ethernet ..........................21 Modbus ..........................21 Client List ..........................22 M352-5G User Manual...
Page 3
GRE ............................ 57 11.4 PPTP Server ......................... 59 11.5 L2TP ........................... 60 Web Menu Item > Firewall ....................62 12.1 Basic Rules .......................... 62 12.2 Port Forwarding ........................63 12.3 DMZ ........................... 64 12.4 Management IP ........................64 M352-5G User Manual...
Gigabit Ethernet and DI/DO enables the network designers to place M352-5G in a small cabinet for a wide variety of IoT applications. For massive rollouts in smart cities, M352-5G works with O’smart, the Proscend IoT Management System, for empowering network administrators to remotely monitor, supervise, and upgrade the M352-5G Cellular Routers anywhere, anytime.
Page 7
1 x Power status 1 x SIM card presence 1 x Cellular signal strength Power Supply Terminal block power Input: 10~26VDC DC Jack Power Input: 12 VDC, 2A Power Consumption: 18 watts (Max) M352-5G User Manual...
STEP 1: Before inserting or removing the SIM card, ensure that the power has been turned off, or the power connector has been removed from the M352-5G Cellular Router. STEP 2: Using a screwdriver to remove the metal protective cover first, insert the SIM card into the card slot.
There are two LED indicators for each of the two LAN ports and one WAN port. Blinking 1000M 1000Mbps 10/100Mbps LINK Data Transmitting LINK UP LINK DOWN 2.6 RS-485 pinouts Description Serial Port, Data+ (A) wire Serial Port, Data- (B) wire Signal Ground M352-5G User Manual...
2.7 Connecting the Power Supply Powering the M352-5G Cellular Router is by either a terminal block or a DC jack. +, - pins of the terminal block (PW1, PW2) on the right panel. The power input voltage range is 12~26 VDC.
These screws are not included in the package. The head of each screw is less than 7 mm in diameter, the shaft is less than 3 mm in diameter, and the length is less than 10 mm in diameter. M352-5G User Manual...
Title Bar Panel > Selecting Language You can choose the different language display of web GUI. Logging in the Router In this section, please fill in the default User Name root and the default Password 2wsx#EDC and then click Login. M352-5G User Manual...
The menu items are divided into main and sub menu to configure the settings and get the status of connectivity on the navigation panel. Navigation Panel Main Menu Sub Menu Status Device overall status System Time and Date, Logging, Alarm, Dying Gasp, COM Ports, Ethernet, Modbus, Client List M352-5G User Manual...
The uplink speed is in Kbps. Rx Kbps The downlink speed is in Kbps. Tx/Rx KBytes The accumulated TX/RX in KBytes. Tx/Rx Dropped Packets The dropped packets of Tx/Rx. IPv4 DNS Server #1/#2/#3 The DNS server address that assigned by the operator. M352-5G User Manual...
Page 16
Status > Connected VPN Connections Item Description OpenVPN Total connected number of OpenVPN. IPSec Total connected number of IPSec. Total connected number of GRE. PPTP Server Total connected number of PPTP Server. L2TP Total connected number of L2TP. M352-5G User Manual...
The Time server feature allows user to set a time server for LAN side client to get the time through NTP/SNTP protocol. System > Time and Date > Time Server Item Description Server mode Turn on/off the time server. Server port The UDP port listened by time server. M352-5G User Manual...
Page 18
2 - Tuesday 3 - Wednesday 4 - Thursday 5 - Friday 6 - Saturday The Hour range is 0~23; The Min range is 0~59; Time to leave Daylight Savings duration. End Date/End Time Same with Start Date/Start Time. M352-5G User Manual...
Log Server Address address to save and receive all logging data. (Note: This server should have installed Log software.) Log Server Port The port number of Log Server. Local Log Size Define the maximum file size of log. M352-5G User Manual...
Page 20
Show the date of log for each logging data. Level Show the date of log for each logging Level. Group Show the group of software functions. Module Show the module of group of software functions. Message Show the messages for each logging data. M352-5G User Manual...
On Duty]. If you select SNMP trap in Alarm output, you need to set up SNMP trap configuration from Service SNMP. If you select E-Mail in Alarm output, you need to set up SMTP configuration from Service SMTP. M352-5G User Manual...
Page 22
Click trusted and on duty members to add trusted user who can send SMS message or receive the mail from device. Firstly, we need to create the group and assign the duty day. The settings below mean the user who only takes effect from Monday to Friday every week in-group “Office 1”. M352-5G User Manual...
Page 23
Once the group created, we need to create the new user and assign to the group we created. Device only accepts the phone number that specify here. After submitting your setting, the interface returns to Group window setting. Now you can see your naming group and the user’s information that you have added. M352-5G User Manual...
COM setting. For the remote management, the managed device should connect to the cellular router by serial interface. The default is Disable. You can click edit button to configure your settings. Set up the configuration and Virtual COM. After configuring, click to confirm your settings. M352-5G User Manual...
Page 25
Select from Disable, Server or Client. Mode Select from TCP or UDP. Protocol Server Mode: This network package of cellular router is on this port. Client Mode: The network package of remote device is on the Redirect Port remote host. M352-5G User Manual...
Select from Auto, 100M Full, 100M Half, 10M Full, 10M Half Ethernet Ports Configurations and Disable. 5.6 Modbus This section allows you to configure the Modbus. System > Modbus Item Description Mode Select from Disable or Enable. Port The listening port of Modbus TCP. M352-5G User Manual...
For Online type, the information shows IP address and MAC address when the client is online. System > Client List Item Description DHCP Client: List all clients’ information when it is via DHCP. List Type Online: List the information when it is online. M352-5G User Manual...
Description Profile Profile number. There are 3 profiles allow to set in advance. Name for profile Name Interface priority for failover operation. Only the highest priority interface is working. Failover mode The other one is standby interface. M352-5G User Manual...
When you select “From ISP”, the IPv4 DNS server IP will be assigned by ISP. IPv4 DNS Server #2 When you select “User Defined”, user inputs the IPv4 DNS server IP IPv4 DNS Server #3 manually. M352-5G User Manual...
Page 30
Static IPv4 Configuration IP Address Fill in the IP Address. IP Mask Fill in the IP Mask. Gateway Address Fill in Gateway Address. DNS Server Configuration IPv4 DNS Server #1~3 User can enter the IPv4 DNS server IP manually. M352-5G User Manual...
When you select “User Defined”, the IPv6 DNS server IP is entered by user . 6.4 Health Check This section allows user to configure the WAN healthy check for failover function between different APN of SIM slot and Ethernet WAN. M352-5G User Manual...
Page 32
2 is optional. IPv4 Host 1 Input the address of IPv4 Host 1. IPv4 Host 2 Input the address of IPv4 Host 2. This field is optional. Cellular Keep Alive keep cellular connections always up with ping check M352-5G User Manual...
7 Web Menu Item > Cellular This section allows you to configure the LTE Config, APN, APN1/2 Usage, SMS, Serving Cell, and DNS. 7.1 SIM Config This section allows user to setup configuration for the SIM card. M352-5G User Manual...
Page 34
Description No: Enable the roaming function. Disable Roaming Yes: Disable the roaming function. Connection Retry The number of attempts to connect to the network. The interval between each attempt is 60 seconds. Number SIM Configurations M352-5G User Manual...
Page 35
Display current used Data since last reset. Mode Turn on/off the Data Limitation to disable or enable. Max Data Limitation Configure maximum Data Limitation. (MB) Monthly Reset Set up the reset time during the month. Now Time Show the current time of system. M352-5G User Manual...
This section provides two settings, one is SMS Action, and the other is View SMS. (1) When enabling SMS Action, it allows trust phone numbers which in [Contacts/On Duty] list by sending key words SMS to trigger device setting/action/query status. M352-5G User Manual...
Refresh button to reload the messages, or click Clear button to remove all read messages. 7.4 Serving Cell This section displays the information of Serving Cell, including the following items. M352-5G User Manual...
There are three options, including “From ISP”, “User Defined“ and “None”. IPv4 DNS Server #2 When you select “From ISP”, the IPv4 DNS server IP will assign from ISP. IPv4 DNS Server #3 When you select “User Defined”, the IPv4 DNS server IP is enter by user. M352-5G User Manual...
8 Web Menu Item > LAN This section allows you to configure LAN IPv4, LAN IPv6, VLAN and Subnet. 8.1 IPv4 Set up your IP Address and IP Mask. Also, fill in the information of DHCP Server Configuration. M352-5G User Manual...
Page 41
Each static IP consist of mode (on/off), MAC and IP address. Static IP Addresses Mode: Turn on/off the static IP address. MAC: The MAC address of target host or PC. IP: The desired IP address for target host or PC. M352-5G User Manual...
Stateless: The cellular router uses IPv6 stateless auto Address Assign configuration. RADVD (Router Advertisement Daemon) is enable to have the cellular router send IPv6 prefix information in router advertisements periodically and in response to router solicitations. M352-5G User Manual...
This section allows you to configure the Static Route. A static route is a pre-determined path that network information must follow to reach a specific host or network. Click the New button to add the static route. M352-5G User Manual...
Page 44
The destination field is required to fill in. The format of destination is IPv4 or IPv6. The address of gateway or the type of interface can choose one or both to fill in the field. The status tab shows the information from the settings of static route. M352-5G User Manual...
Fill in the source of a specific IP/MASK from network. Destination (IP/MASK) Fill in the destination of a specific IP/MASK from network. Gateway Fill in the gateway address of your router. Outgoing Interface Select the outgoing interface. M352-5G User Manual...
This section allows you to set up the connection of OpenVPN. The default mode is Disable. From Log tab, the interface will show the status of connection to make you follow the situation whenever it is successful or fail connection. M352-5G User Manual...
Page 47
11.1.1 OpenVPN Common Setting (1) Click button to edit OpenVPN Connection. (2) From Setting tab, you can set up the connection of OpenVPN. M352-5G User Manual...
Page 48
11.1.2 OpenVPN Client Setting Select option “Client“ from VPN Mode, and this section allows you configure the OpenVPN client and authentication files. The files can import by clicking button and the file should download from OpenVPN server. M352-5G User Manual...
Page 49
VPN > OpenVPN > Client VPN Mode Item Description Client Server Address Fill in WAN IP of OpenVPN server. This setting needs to match the server side. When enabled, the cellular Route Client Networks router will auto apply the properly routing rules. M352-5G User Manual...
Page 50
OpenVPN server. The PKCS#12 file is for OpenVPN client, which can download from OpenVPN server. 11.1.3 OpenVPN Server Setting Select option “Server” from VPN Mode, and this section allows you to configure the server settings of VPN Mode. M352-5G User Manual...
Page 51
The local network exported by OpenVPN. When keeping this option blank, Network the OpenVPN will export the LAN network automatically. The local netmask exported by OpenVPN. When keeping this option blank, Netmask the OpenVPN will export the LAN netmask automatically. M352-5G User Manual...
Page 52
Fill in the username if the imported file has already set up the username. Password Fill in the password if the imported file has already set up the password. Display the connection status of OpenVPN, such as IP address and the connected Status time. M352-5G User Manual...
This section provides the information of the IPsec connections. Each connection will show the State, IKE information and Tunnel information. In the default setting, the list of connections is empty. You can create the new connection by clicking New button. M352-5G User Manual...
Page 54
Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24 hours. The IP address of the router's public network interface. Local Host If this value is blank, the connection will automatically detect the correct IP M352-5G User Manual...
Page 55
Select from 30 minutes, 1 hour, 2 hours, 3 hours, 6 hours, 12 hours or 24 hours. The private subnet behind the router. Local Subnet The available formats are A.B.C.D, A.B.C.D/M, A.B::C.D or A.B::C.D/M If this value is blank, the connection will set it as the “Local Host” of Phase 1 setting. M352-5G User Manual...
Page 56
DPD interval The default is 30 seconds. The max number of retry of dead peer detection. DPD retry The default is 5 times. Force NAT-T (Only for IKEv2) Enable or disable the NAT-T for selected IPSec connection. M352-5G User Manual...
Page 57
RSA: Use the certificate to authenticate the connection. Pre-shared Key / The X.509 certificate for authentication. X.509 Certificate The certificate generate or import by X.509 Certificates section. According to the above options, there are some combinations to authenticate the IPsec connection. M352-5G User Manual...
Page 58
X.509 name (CN) of X.509 as the ID field. 11.2.3 IPsec > X.509 Certificates This section provides the certificates setting which is use by IPsec authentication ID. Each certificate will show the State and Subject information. M352-5G User Manual...
Page 59
CAs to the router. The self-signed CA will help the router to verify the self-signed X.509 certificate, which is import in X.509 Certificates section. Each CA certificate will show the State and Subject information and provide the controlling buttons to let user could download or edit the certificate / key files. M352-5G User Manual...
Page 60
4. Click the Edit button to navigate the Certificate Setting page. 5. Fill up the information of the X.509 certificate. 6. Click the Generate Certificate button and OK. 7. Click the Apply button to apply the changes. Certificate Setting M352-5G User Manual...
Page 61
6. When the file be selected and everything all right, the state should be Cert or Key is missed. 7. Click at Key to import key. 8. Select the X.509 key file from browser window. 9. When the state shown Imported, the importing procedure is completed. M352-5G User Manual...
GRE keepalive packets may be sent from both sides of a tunnel or from just one side. There are two entries for user to configure, please press Edit button. M352-5G User Manual...
Page 63
Tunnel Device Address Prefix Set Prefix of the Tunnel Device Address. Use Tunnel Key Whether to use the key for identifying an individual traffic flow within a tunnel. Tunnel Key Number The number of the tunnel key; default is '1234'. M352-5G User Manual...
Enable or disable the PPTP Server function. Auth Select the authentication type. Server Address This IP address is use as tunnel IP at server site. Client Address Range A list of IP addresses to assign to remote PPTP clients. (2) Clients Configuration M352-5G User Manual...
11.5 L2TP This section allows you to set up L2TP and provides three modes for configuration, including Off, Server, and Client Mode. (1) General Mode: The default mode is Off as shown as below. (2) Server Mode: M352-5G User Manual...
Page 66
The begin address of L2TP client's IP pool. Remote end IP The end address of L2TP client's IP pool. Create a new user account for connecting with server. Username The username for L2TP client. Password The password for L2TP client. M352-5G User Manual...
This section allows you to configure Basic Rules, Port Forwarding, DMZ, IP Filter, MAC Filter, URL Filter, NAT and IPS. 12.1 Basic Rules This section allows you to set the Basic Rules configuration. Firewall > Basic Rules Item Description WAN Ping Blocking Check IPv4 or IPv6 for blocking M352-5G User Manual...
Fill in your Host IP Address. 12.4 Management IP This section allows user to setup a management IP that is able to access the device from LAN or WAN side. This IP has higher management permissions than firewall settings. M352-5G User Manual...
Firewall > Management IP Item Description Management IP Address Fill in your management IP Address. 12.5 ACL This section allows managing access to the router's own services. M352-5G User Manual...
Black List: When Black List selected, all specified IP address/port are blocked. White List: When White List selected, all specified IP address/port are accepted. Edit Black/White List (1) Click button to edit Black/White list. (2) The default is Disable mode as the following interface (Black/White). M352-5G User Manual...
Page 72
(4) For Source IP, there are three types to input your source IP that depends on your requirement, including single IP, IP with Mask or giving a range of IP. The following table provides some examples. M352-5G User Manual...
Page 73
(5) For Source Port, there are two types to input your source port that depends on your requirement, including single port (e.g.1234) or giving a range of ports (e.g.1234:5678). Note: Setting up a range of source ports, please use: colon symbol to mark your ranged ports. M352-5G User Manual...
Fill in your MAC address. Note: Setting up MAC address, please use ”:” colon symbol (e.g. xx : xx : xx : xx) or “-“ hyphen symbol to mark (e.g. xx - xx - xx - xx). M352-5G User Manual...
Please not include “https://” or “http://” for the URL address in the Full Filter. Firewall > URL Filter Item Description Mode Select from Disable or Enable. The default is Disable. Filter Select from Key or Full. The default is Key. Key / Full Fill in your Key / Full information. M352-5G User Manual...
IP Passthrough, makes the router/modem pass the IP assigned from the ISP to the attached downstream device. It can be using DHCP to pass the IP address(and DNS server) that has been assigned to a PPP interface by an ISP, to another device running a DHCP client. M352-5G User Manual...
Also, the system allows to limit the max incoming connection retry number during a specific time period from WAN per source IP address to prevent too many unexpected connections retry event from causing system busy. M352-5G User Manual...
Page 78
Select the checkbox to enable or disable the function. The number default number is 10. Max incoming connection retry Select the checkbox to enable or disable the function. The number default number is 20. Duration time The default time is 120 seconds. M352-5G User Manual...
Select from Disable or Enable to configure SNMP. Community Configure community setting with three options, including # 1, # 2 and #3. Mode Select from Disable or Enable. Name Name each community. Access Select from Read-Only or Read-Write. M352-5G User Manual...
Page 80
This section allows you to set up the SNMP trap configuration when you select the SNMP trap function from Alarm output of system for your router. With SNMP trap setting, you can know the status of remote device. M352-5G User Manual...
Page 81
Service > SNMP > SNMP trap configuration Item Description Mode Select from Disable or Enable. The default is Disable. Community Name Fill in your community’s name. Destination The destination (domain name/IP) of remote SNMP trap server. M352-5G User Manual...
Fill in your registered username from Service Provider. Password Fill in your registered password from Service Provider. Update Period Time (Sec) Fill in “0” to mean 30 days. IP Address Selection Select either Internet IP or WAN IP. M352-5G User Manual...
Fill in the password of manage user. ACLs Allow to specify what topic should be limited. User Select the users and identify their authority to read or write the MQTT topic/channel. Topic Name the topic of MQTT message. M352-5G User Manual...
Port 465: SMTP connections secured by SSL. Port 587: SMTP connections secured by TLS. Username / Password Fill in your username and password as the same your server. Test Mail Enter the mail address for sending test mail. M352-5G User Manual...
Mode: select from “Off” or “On” to use or not use this entry. Interface: the interface you want to provide the additional address. New / Edit IP Alias Entry IP Address: Enter the IP address. IP Mask: Enter the network mask. M352-5G User Manual...
13.7.2 QoS > QoS You can select QoS tab to show an overall view for QoS configuration. At right side of window, there are three buttons. Edit button: It allows you to edit QoS Entry and configure QoS settings. M352-5G User Manual...
Page 87
The QoS entry configuration page has two parts for assigning bandwidth, and bandwidth of group IP address. Service > IP Alias Item Description Mode Select from “Disable” or “Enable” QoS. Name The setting can be edited or deleted the existed entries. Interface/Min rate Min Rate: This value guarantees the minimum bandwidth. M352-5G User Manual...
Page 88
Show detail bandwidth for each IP address: show the group IP bandwidth usage. Apply Refresh Setting button: press this button to take effect with above new settings. Data part is the content of bandwidth usage. M352-5G User Manual...
This section provides you to manage the router, set up your administration and know about the status of current software and firmware. In addition, you can backup and restore the configuration. 14.1 Identification This section allows you to confirm the profile of router, current software, firmware version and system uptime. M352-5G User Manual...
Page 90
Show the Dual Image B MCSV. Serial Number Show the product serial number. Modem#1 Firmware Version Show the modem firmware version of the device. IMEI Show the International Mobile Equipment Identity number. Uptime Show the current system uptime. M352-5G User Manual...
System Setup Host Name Enter the device’s host name. Session TTL Minutes (0 means no timeout). Admin Password New Password Type the password you want to change. Retype to confirm Retype the password you want to change. M352-5G User Manual...
Click the New button to create a new group. Then enter the name for the group and select the day that should be applied. 14.3.2 Contacts Click the New button to create a new user. Enter the user’s information and select the group which created by above step. M352-5G User Manual...
Secure Shell (SSH) allows user to configure system via a secure channel. Management > SSH Item Description Mode Select from Disable or Enable SSH function. LAN Server Port The listen port on LAN interface. WAN Server Port The listen port on WAN interface. M352-5G User Manual...
The TCP port listened by HTTPS daemon. 14.6 Telnet This section allows user to choose whether offer the telnet via LAN/WAN. Default is disale. Management > Telnet Item Description Whether or not offer the telnet service. Whether or not offer the telnet service. M352-5G User Manual...
(2) Click Select the configuration file to restore button to import the configuration file. 14.9 Load Factory This section supports you to load the factory default configuration and restart the device immediately. You can click the Load Factory and Restart button. M352-5G User Manual...
14.10 Restart This section allows you to click Restart button to restart immediately. 14.11 Schedule Reboot The setting allows you to schedule the reboot time regularly. M352-5G User Manual...
Moreover, if it keeps to attempt a login and still fail then the banned time will be extended automatically. Time The count of login failure The banned time (s) 2019/1/1 12:00:00 2019/1/1 12:00:01 2019/1/1 12:00:03 2019/1/1 12:00:10 2019/1/1 12:00:30 M352-5G User Manual...
The period time to keep the MQTT connection. Alive Period Time (s) The period time of the server detecting. Timeout (s) The time to live between server and device. Insecure Mode If Insecure Mode be enabled, then the Certificate checking will be bypassed. M352-5G User Manual...
Page 99
When set to Yes, it will use the selected interface as source IP. Use Interface Specify the IP address of selected interface as source IP. Host The host name or the host IP address 15.2 Traceroute Please assign the Host you want to traceroute. M352-5G User Manual...
Page 100
Use Interface as Source When set to Yes, it will use the selected interface as source IP. Use Interface Specify the IP address of selected interface as source IP. Host The host name or the host IP address M352-5G User Manual...
If ping is OK, please try to access the Web Management page again. If the above didn’t solve your Access Issue then please contact your MIS or anyone that build your network infrastructure to fix the ping fail problem. M352-5G User Manual...
Page 102
(by contacting your SIM card provider or by trying that SIM card in another device). If you are still experiencing the “No internet issue” then please contact your support engineer for further advanced trublesooting (This could involve a posible Software or Hardware problem that needs to be identified and solved). M352-5G User Manual...
Need help?
Do you have a question about the M352-5G and is the answer not in the manual?
Questions and answers