The CradlePoint MBR1200B router enables easy-to-install wireless connectivity in small business or remote office locations. Ideal for small businesses, temporary command centers, home offices, recreational vehicles, and mobile networks; the CradlePoint MBR1200B provides wired Ethernet, and 3G/4G wireless WAN connectivity to keep you and your business up and running.
Page 6
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT SECURE AND RELIABLE LAN connections are protected with advanced WiFi encryption. Main office access and business transactions are protected by VPN capability, and other security features to ensure your network stays secure.
Page 7
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Flexibility Remote management with WiPipe™ Central and SNMP v1,2,3 Two SSIDs, with individual security, separate critical traffic ―WiFi-as-WAN‖ mode enables use as a WiFi repeater, WiFi bridge or as a WiFi-to-Ethernet adapter for Ethernet- ...
Page 10
WAN port and vice versa. Modem Ports: The MBR1200B has two USB 2.0 ports and one ExpressCard port. Factory Default Reset: You can return your router to factory default settings by pressing and holding the Reset button.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 3 QUICK START 3.1 Basic Setup Your router requires an Internet source. Insert supported USB or ExpressCard modem/s, connect a Cable or DSL modem to the Blue Ethernet WAN port, or connect to an available WiFi source.
Page 14
For most users, the MBR1200B Router can be used immediately without any special configuration changes. If you would like to change your network name or password or configure any of the advanced features of the MBR1200B, you will need to log in to the administration pages: ...
Page 15
If you used the First Time Setup Wizard, you might have changed the ―WiFi Network Name‖ or the ―Security Mode‖ password. If so, you will need to reconnect to the MBR1200B network. Find the network. Look for your new personalized network name (or the default SSID of the form ―MBR1200B-xxx‖).
If your USB Modem has not been updated recently, it is recommended that you do so if it is having trouble connecting to the MBR1200B. Insert your USB data modem into your PC and access the Internet using the software provided by your cellular carrier.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 4 WEB INTERFACE -- ESSENTIALS The MBR1200B has a Web interface for configuration and administration of all features. The interface is organized with 5 tabs at the top of the screen: Getting Started ...
Page 20
The Administrator Login page will appear. Log in using your administrator password. Initially, this password can be found on the bottom of the MBR1200B unit as the Default Password. This password is also the last eight digits of the unit‘s MAC address.
Page 21
If you have forgotten your personalized password, you can reset the MBR1200B to factory defaults. When you reset the router, the administrator password will revert back to the Default Password. Press and hold the reset button on the router unit until the lights flash (Approximately 10-15 seconds).
The First Time Setup Wizard will help you customize the name of your wireless network, change passwords to something you choose, and establish an optimal WiFi security mode. The MBR1200B comes out of the box with a unique password at WPA1/WPA2 WiFi security level.
Page 23
The router cannot use 802.11n modes if WEP is enabled; WiFi performance and range will be limited. NONE (OPEN): Select this option if you do not want to activate any security features. CradlePoint recommends BEST (WPA2) WiFi security. Try this option first and switch only if you have a device that is incompatible with WPA2.
Page 24
Realm for your carrier. This setting ensures that the modem, when attached to the router, will properly connect to your carrier‘s wireless broadband service. The MBR1200B will default to the Sprint Realm. Select your carrier from the dropdown menu (options shown below).
Page 25
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8) Configuring Failure Check: It is possible for a WAN interface to go down without the router recognizing the failure. (For example: the carrier for a cellular modem goes dormant, or your Ethernet connection is properly attached to a modem but the modem becomes disconnected from its Internet source.) Enable Failure Check to ensure that you can...
Page 26
Please record these settings for future access. You may need this information to configure other wireless devices. NOTE: If you are currently using the MBR1200B WiFi network, reconnect your devices to the network using the new wireless network name and security password.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 4.3 Quick Links The CradlePoint logo in the upper left-hand corner of all the administration pages is a link to the Dashboard (Status → Dashboard), which displays fundamental information about the router. The black bar across the top provides quick access to important information and controls.
MBR1200B| USER MANUAL Firmware ver. 3.4.0 CRADLEPOINT 4.4 Configuration Pages The following table shows the navigation layout of the administration pages. Click on the tabs along the top bar to reveal the following dropdown menus. Getting Started Status Network Settings...
Page 29
LAN (Local Area Network) Examples: If you want to change the content filtering settings for the network created by the MBR1200B, go to the Network Settings tab. If you have multiple Internet sources (such as a USB modem and an Ethernet connection) for which you would like to set priority levels, go to the Internet tab.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5 STATUS The Status tab displays information about many different aspects of the router. It provides access to 8 submenu options: Client List Dashboard GPS GRE Tunnels Internet Connections ...
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.1 Client List The Client List displays the specifications of each device connected to your router, including Wireless and Wired clients. Wireless Clients. For each device using a wireless connection to your MBR1200B, the following information is displayed: Hostname, IP, MAC, Connection, and Time Online.
Page 32
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT -26 dBm: A relative measure of wireless signal quality (decibels relative to one milliwatt). This expresses theoretical best quality. The value is given as a negative exponent: -20 is a very good value while -80 is relatively poor.
After the initial setup of the router, every time you log in you will automatically be directed to this Dashboard. Also, you can click on the CradlePoint logo in the upper left-hand corner to return to the Dashboard from any page.
Page 34
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Router Information: “Detailed Info‖ links to System Settings → Administration. Product: MBR1200B Firmware: Gives the number of the current firmware version. Build Date: Year-month-day-hours-minutes-seconds for the most recent firmware upgrade.
Page 35
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Network Name: IP Address/Netmask o Route Mode: NAT (Network Address Translation), Standard (NAT-less), or Disabled. o Access: Admin Access, LAN Isolation, UPnP (Universal Plug and Play), and/or DHCP. To configure a network, see Network Settings → WiFi / Local Networks.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.3 GPS If GPS support is enabled and a modem capable of providing GPS coordinates is connected, this page will show a graphical view of your router's location. See the GPS section in System Settings →...
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.4 GRE Tunnels View the status of configured GRE Tunnels. To set up or edit a GRE tunnel, go to Internet → GRE Tunnels. Included information: Name Status Transmit (packets/bytes) ...
The Internet Connections submenu option provides a list of attached WAN devices used as the Internet source for the MBR1200B. Select one of these devices to see detailed information about that particular device. For each type of device, different information will be included in the Device Information section. Possible devices include: ...
Page 43
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.5.4 EVDO Modem: (MC760 Comcast) Diagnostics Modem Firmware Version PRL Version Service Display EVDO Carrier Status Signal Strength(dBm) Connection Type CDMA Connection State (connected, idle, etc.) General Information ...
Page 45
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT WiMAX Modem (U300 – 4G) 5.5.5 Diagnostics For a WiMAX modem, the CINR and Signal Strength values are important as they show how strong the signal is and that has significant effects on how much data the router can download or send.
Page 47
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.5.6 LTE Modem (PANTECH UML290) Diagnostics Home Address MN-HA SPI Modem Firmware Version Battery Status MN-HA SS Network Address Identifier (NAI) Signal Strength(dBm) Rev Tun ...
Page 48
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT General Information Product PANTECH UML290 Protocol IP DHCP Unique Identifier ESN/IMEI Model UML290VW Type modem Port Manufacturer Pantech, Incorporated IP Information Netmask IP Address ...
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.6 Statistics The Statistics submenu option displays basic traffic statistics. Wireless Statistics: View the signal strength and other wireless modem information. The wireless device‘s signal strength will only be displayed as long as it supports ―Live Diagnostics.‖ Sample rate and size can be adjusted from the dropdown boxes.
Page 51
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Failover/Failback/Load Balance: An easy way to view current connective states of the devices plugged into the router as compared to the past. Sample rate and size can be adjusted from the dropdown boxes.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.7 System Logs The router automatically logs (records) events of possible interest in its internal memory. If there is not enough internal memory for all events, logs of older events are deleted, but logs of the latest events are retained. The log options allow you to filter the router logs so you can easily find relevant messages.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 5.8 VPN Tunnels View the status of configured VPN tunnels. To set up or edit a VPN tunnel, go to Internet → VPN Tunnels. Included information: Name Connections Status Protocols ...
6 NETWORK SETTINGS The Network Settings tab provides access to 7 submenu options for administering the following functions/tasks. These functions are all related to controlling the LAN (Local Area Networks), the networks you set up with the MBR1200B. Content Filtering ...
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.1 Content Filtering You have two main options for filtering content in a network created through your MBR1200B. 1) Domain / URL Filter Rules: Create a list of websites that will be either disallowed (facebook.com, for example) or...
Page 56
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.1.1 OpenDNS OpenDNS is a service that protects you online by filtering websites. OpenDNS protects you from phishing websites and URL typos once you select a filtering level. None: Disables Web filtering that uses OpenDNS, ...
Page 57
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT OpenDNS network. In order for Custom settings to work you need to login to DNS-O-MATIC using your OpenDNS credentials and "Add A Service" for the network specified above. Enable OpenDNS ISP Filter Bypass Algorithm: It is possible that your Internet Service Provider (ISP) uses the port that OpenDNS is configured to access, port 53, which will prevent OpenDNS filtering.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.2 DHCP Server DHCP stands for Dynamic Host Configuration Protocol. The built-in DHCP server automatically assigns IP addresses to the computers and other devices on each local area network (LAN). In this section you can view a list of assigned IP addresses and reserve IP addresses for particular devices.
DNS, or Domain Name System, is a naming system that translates between domain names (www.cradlepoint.com, for example) and Internet IP addresses (206.207.82.197). A DNS server acts as an Internet phone book, translating between names that make sense to people and the more complex numerical identifiers. The DNS page for the MBR1200B has these distinct functions: ...
Page 60
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Force All DNS Requests To Router: Enabling this will redirect all DNS requests from LAN clients to the router's DNS server. This will allow the router even more control over IP addresses even when clients have their own DNS servers statically set.
Page 61
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT User name: Enter the user name or key provided by the Dynamic DNS service provider. If the Dynamic DNS provider supplies only a key, enter that key for both the User name and Password fields.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.4 Firewall The router automatically provides a firewall. Unless you configure the router to the contrary, the router does not respond to unsolicited incoming requests on any port, thereby making your LAN invisible to cyber attackers.
Page 63
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Local Port(s): The port number(s) that corresponds to the service (Web server, FTP, etc) on a local computer or device. For example, you might input ―80‖ in the Local Port(s) field to open a port for a Web server on a computer within your network.
Page 64
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.4.2 IP Filter Rules (Advanced) An "Incoming" IP filter rule restricts remote access to computers on your local network. "Outgoing" filter rules prevent computers on your local network from initiating communication to the address range specified in the rule.
Page 65
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT If you leave these values blank, then all IP addresses and ports will be included. IP Source and IP Destination options can be used to differentiate between the directions that packets go. You could permit packets to come from particular IP addresses but then not allow packets to return to those addresses.
Page 66
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.4.3 DMZ: DeMilitarized Zone (Advanced) A DMZ host is effectively not firewalled in the sense that any computer on the Internet may attempt to remotely access network services at the DMZ IP address. Typical uses involve running a public Web server or sharing files.
Page 67
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Remote Administration Access 6.4.5 Control (Advanced) Enable Remote Administration Access Control: Selecting this option allows you to make remote administration tools available to only the specified IP addresses. Access from all other IP addresses will be blocked.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.5 MAC Filter / Logging A MAC (Media Access Control) address is a unique identifier for a computer or other device. This page allows you to manage clients by MAC address. You can filter clients by MAC addresses and/or keep a log of devices connected to your router.
Page 69
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT MAC Logging Configuration 6.5.2 Enable MAC Logging: Enabling MAC Logging will cause the router to log MAC addresses that are connected to the router. MAC addresses that you do not want to have logged (addresses that you expect to be connected) should be added to the ―Ignored MAC Addresses‖...
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.6 Routing Add a new static route to the IP routing table or edit/remove an existing route. Static routes are unnecessary for most users. They are typically only used in networks with more than one layer, such as when there is a network within a network so that packet destinations are hidden behind an additional router.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.7 WiFi / Local Networks This section is used to configure the settings for wireless networks created by your router. Note that changes made in this section may also need to be duplicated on wireless devices that you want to connect to your wireless network.
Page 73
IP Settings: Name: This primarily helps to identify this network during other administration tasks. Hostname: [Default: cp (for CradlePoint)] The hostname is the DNS name associated with the router's local area network IP address. NOTE: You can access the router‘s administration pages by typing the hostname into your browser, so if you change ―cp‖...
Page 74
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT NAT (default): Network Address Translation hides private IP addresses behind the router's IP address. This is the simplest and most common choice for users, because NAT does the translation work for you.
Page 75
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Access Control: Tune the access control settings of this network to match the intended use. Simply select or deselect any of the following: LAN Isolation: When checked, this network will NOT be allowed to communicate with other local networks.
Page 76
(default: 72 to 200, as in 192.168.0.72 to 192.168.0.200). Example: The MBR1200B uses an IP address of 192.168.0.1 for its primary network by default. A computer designated as a Web server has a static IP address of 192.168.0.3. Another computer is designated as an FTP server with a static IP address of 192.168.0.4.
Page 77
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT DHCP Options: Input a custom DHCP option by first clicking ―Add‖. There are close to 200 possible DHCP options available. One of the more common uses is to assign a VoIP phone server using option 66 (Server name).
Page 78
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 6.7.3 Local Network Interfaces Both LAN types—WiFi and Ethernet—have separate sections with configuration options. Unless the default configuration is sufficient, YOU MUST CONFIGURE EACH INTERFACE SEPARATELY in order to create the desired interface options for a network.
Page 79
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Wireless Network Editor WiFi Name (SSID): When users browse for available wireless networks, this is the name that they will see. This name is referred to as the SSID (service set identifier). For security purposes, CradlePoint highly recommends that you change this from the pre- configured name.
Page 80
NOTE: If you don‘t know whether you should choose Personal or Enterprise, assume Personal since you need to know RADIUS authentication for Enterprise. In order to protect your network from hackers and unauthorized users, CradlePoint highly recommends WPA2/AES for security if your attached devices can support it. WEP and WPA/TKIP are obsolete and have been replaced by WPA/AES.
Page 81
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT NOTE: If you select one of the security modes and are unable to connect to the router afterwards, you can use the reset buttons to reset the router to its factory default state and try a different security mode instead.
Page 82
Internet (WAN) is used to connect to another network such as a hotel or office wired network. The WAN connection is used as a possible source of Internet for the MBR1200B. Local Network (LAN) is for connecting a computer or similar device directly to the router with an Ethernet cable.
Page 83
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Ethernet Port Group Editor A Port Group represents a logical grouping of Ethernet ports. Any computers physically connected to ports in a group will be allowed to freely communicate with each other. For example, if you leave all four yellow ports set...
Page 84
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT WiFi Settings (Advanced) 6.7.4 When you select the Wireless (WiFi) Networks Settings tab in the Local Network Interfaces section, you have several additional options for configuring your wireless LANs under the WiFi Settings heading.
Page 85
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Channel: (Shows if Random Channel is deselected.) The WiFi channel corresponds to a frequency the router uses to communicate with other devices. The range is 1 to 11, and 1, 6, and 11 do not overlap each other. If a WiMAX modem is attached, a higher number channel will increase the chance the router's WiFi and modem's WiMAX radios will conflict with each other, which may result in lower throughput.
Page 86
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT DTIM: A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages. When the wireless router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value.
Page 87
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Greenfield Mode: Greenfield mode uses an 802.11n-only preamble to transmit packets that older wireless clients cannot interpret. Use of greenfield mode in a mixed 802.11 environment may result in degraded performance but can improve performance if all devices in the area are 802.11n compatible.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.1 Connection Manager The router can establish an uplink via the Ethernet WAN port, WiFi as WAN, or modems plugged into a modem port. If the primary WAN connection fails the router will automatically attempt to bring up a new link on another device. This feature is called failover.
Page 90
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.1.2 Device Configuration Clicking on a device reveals the following information: State (Connected, Available, etc.) Port UID (Unique identifier. This could be a name or number/letter combination.) IP Address ...
Page 91
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT General Settings 7.1.3 Enabled: Select/deselect to enable/disable. Load Balance: Select to allow this device to be available for the Load Balance pool. LB default bandwidth: Defines the default bandwidth for use in Load Balance algorithms.
Page 92
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Failure Check (Advanced) If this is enabled, the router will check that the highest priority active WAN interface can get to the Internet even if the WAN connection is not actively being used. If the interface goes down, the router will switch to the next highest priority interface available.
Page 93
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Failback Configuration (Advanced) This is used to configure failback, which is the ability to go back to a higher priority WAN interface if it regains connection to its network. Usage: Fail back based on the amount of data passed over time.
Page 94
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Ethernet Settings 7.1.4 While default settings for each WAN Ethernet port will be sufficient in most circumstances, you have the ability to control: Connect Method: DHCP (Automatic), Static (Manual), or PPPoE (Point-to-Point Protocol over Ethernet).
Page 96
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Modem Settings 7.1.5 On Demand: Typically modem connections are not always on. When this mode is selected a connection to the Internet is made as needed. When this mode is not selected a connection to the Internet is always maintained.
Page 97
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT AT+CGDCONT=2,‖IP‖,‖isp.cingular‖ ATCT*99***2# PPP Authentication Protocol: Set this only if your service provider requires a specific protocol and the Auto option chooses the wrong one. Auto PAP (Password Authentication Protocol) CHAP (Challenge Handshake Authentication Protocol) PPP Password: Password for PPP authentication.
Page 98
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT CDMA Settings Persist Settings: Active Profile: Select a number from 0-5 from the dropdown list. The following fields can be left blank. If left blank they will remain unchanged in the modem.
Page 99
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT SIM/APN Settings SIM PIN: PIN number for a GSM modem with a locked SIM. Access Point Name (APN): Some wireless carriers provide multiple Access Point Names that a modem can connect to. Some APN examples are ‗isp.cingular‖...
Page 100
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT WiMAX Settings WiMAX Realm: Select from the following dropdown options: Clear – clearwire-wmx.net Rover – rover-wmx.net Sprint 3G/4G – sprintpcs.com Xohm –xohm.com BridgeMAXX – bridgeMAXX.com Time Warner Cable – mobile.rr.com ...
Page 101
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.1.6 Update/Activate a Modem Some 3G modems can be updated and activated while plugged into the router. Updates and activation methods vary by modem model and service provider. Possible methods are: PRL Update, Activation, and FUMO. All supported methods will be displayed when you select your modem and click ―Update/Activate‖.
Page 102
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Process Timeout: If the process fails an error message will display. Activation has a 3-minute timeout, PRL update has a 4-minute timeout, and FUMO has a 10-minute timeout. 7.1.7 Configuration Rules (Advanced) This section allows you to create general rules that apply to the Internet connections of a particular type.
Page 103
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT WAN Configuration Rule This section allows you to create simple or complex rules that affect how individual Internet sources or classes of sources (perhaps all WiMAX modems or all modems from Sierra Wireless) behave in the router.
Page 104
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Value: If you chose Port or Type, select from the dropdown list. If you chose Manufacturer, Model, Serial Number, MAC Address, or Unique ID, you will need to manually input the information. The condition will be of the following form: ―...
Agreement shown to the right. The purpose of this agreement is to ensure that you understand that the data numbers for the MBR1200B may not perfectly match those of your carrier: CradlePoint cannot be held responsible. You must accept the agreement by clicking Yes in order to begin creating data usage rules.
Page 106
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.2.1 Data Usage Rules The Date Usage Rule display shows basic information for each rule you have created (including rules created with a template). The following information is displayed: Rule Name Enabled: True/False ...
Page 107
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Data Usage Rule – page 2 Cycle Type: How often the rule will reset. The data usage amount will be reset at the end of each cycle. Select the length of a cycle from a dropdown menu with the following choices: ...
Page 108
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Template Configuration 7.2.2 Templates allow you to control multiple WAN devices with the same rule. Each WAN device that matches a template will automatically have its own rule created. For example, you can set a template rule for all mobile data modems that causes your router to send an alert after 1000 MB of usage in a month.
Page 109
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Historical Data 7.2.3 Historical Data shows a graph of data usage for each attached WAN source that has an assigned Data Usage Rule. The graph shows the usage trend for one day. Click Add Usage to manually input additional usage for an attached data source.
Generic Routing Encapsulation (GRE) tunnels can be used to create a connection between two private networks. The MBR1200B is enabled for either GRE or VPN tunnels. GRE tunnels are simpler to configure and more flexible for different kinds of packet exchanges, but VPN tunnels are much more secure.
Page 111
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Page 1: General Tunnel Name: Choose a name that is meaningful to you. Local Network: This is the local side of the ―Glue Network,‖ a network created by the administrator to form the tunnel. The user creates the IP address inputted here.
Page 112
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Keep Alive: This feature monitors the status of a tunnel. This will more accurately determine if the tunnel is alive or not. Choose the length of time in seconds of the Rate for each check (Default: 10 seconds. Range: 2 – 3600 seconds) and the number of Retry attempts (Default: 3.
Page 113
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.3.1 Global GRE Settings GRE will use the primary WAN for connection, which will allow it to failover to other WANs as needed. If GRE needs to be tied to a particular WAN, it can be done by deselecting the box and selecting the appropriate WAN.
Page 114
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Model: Select from a dropdown list of attached devices. Type: Select from the dropdown list of possible WAN types. o WiMAX o Modem o LTE o Ethernet o Wireless As WAN ...
The MBR1200B uses IPsec (Internet Protocol security) to authenticate and encrypt packets exchanged across the tunnel. To set up a VPN tunnel with the MBR1200B on one end, there must be another device (usually a router) that also supports IPsec on the other end.
Page 116
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Page 1: General 7.4.1 Tunnel Name: Choose a name meaningful to you. Anonymous: Select to allow remote connections from any IP address. Local Identity: Specifies the identifier sent to the remote host during phase 1 negotiation. If left blank it will default to the IP address of the WAN connection.
Page 117
Tunnel Enabled: Enabled or Disabled. MBR1200 Quick Connect: VPN tunnels in the MBR1200B have more choices than they do in the MBR1200, so it is more complex to configure. Check this box to simplify setup by streamlining your options.
Page 118
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.4.3 Page 3: IKE Phase 1 IKE security has two phases, Phase 1 and Phase 2. You have the ability to distinctly configure each phase, but the default settings will be sufficient for most users.
Page 119
In Phase 1, only one DH group can be selected while using Aggressive exchange mode. By default, all the algorithms (encryption, hash, and DH groups) supported by the MBR1200B are checked, which means they are allowed for any given exchange. Deselect these options to limit which algorithms will be accepted. Be sure to check that the router (or similar device) at the other end of the tunnel has matching algorithms.
Page 120
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.4.4 Page 4: IKE Phase 2 Perfect Forward Secrecy (PFS): Enabling this feature will require IKE to generate a new set of keys in Phase 2 rather than using the same key generated in Phase 1.
Page 121
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.4.5 Page 5: Dead Peer Detection Dead Peer Detection (DPD) defines how the router will detect when one end of the IPsec session loses connection while a policy is in use. Connection Idle Time allows you to configure how long the router will allow an IPsec session to be idle before beginning to send Dead Peer Detection (DPD) packets to the peer machine.
Page 122
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Page 6: Tunnel Summary 7.4.6 The final page of the tunnel configuration interface is a summary of the tunnel specifications. This is especially helpful for matching this information with the router (or similar device) at the other end of the tunnel.
Page 123
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.4.7 Global VPN Settings These settings apply to all configured VPN tunnels. Use Primary WAN: (Default: Selected.) Deselect to open options for specifying the WAN type. By default, VPN will use the primary WAN for connection, which will allow it to failover to other WANs as needed. If VPN needs to be tied to a particular WAN, deselect the box and selecting the appropriate WAN.
Page 124
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT o Yellow Ethernet 1 o Yellow Ethernet 2 o Yellow Ethernet 3 o Yellow Ethernet 4 o USB 1 o USB 2 o ExpressPort Manufacturer: Select from a dropdown list of attached devices.
Page 125
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.4.8 VPN with NAT-T If one side of a planned VPN tunnel is behind a NAT (network address translation) firewall, the setup of your tunnel requires the following specifications: 1. Each side of the tunnel must use both a Local Identity and a Remote Identity. These must match the identities on the other side: The Local Identity must match the Remote Identity on the other side of the tunnel, and vice versa.
WiFi as WAN uses another WiFi network as its Internet source and then rebroadcasts its own local network. For example, the MBR1200B can create a private LAN using the public WiFi from a hotel as its WAN. WiFi Bridge functions similarly, but it rebroadcasts the original network.
Page 127
When in WiFi Bridge mode with a configured profile, a WiFi Bridge device will be added to the local network interfaces, providing a way to bridge two LANs over a WiFi connection. For example, two separate CradlePoint routers linked through WiFi Bridge mode allows you to have one WiFi-connected network in two separated sections of a large office building.
Page 128
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.5.2 Saved Profiles This is a list of WiFi networks that have already been configured as WAN sources (or Bridge profiles). The router will attempt to connect to any of these access points using the password you have configured.
Page 129
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Click ―Refresh‖ if a WiFi network to which you want to connect is invisible. You have the option to manually add network profiles, but it is usually much easier to import them from Site Survey. Either click on Add under ―Saved Profiles‖...
Page 130
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 7.5.4 Wireless Scan Settings Scan Interval: How often WiFi as WAN scans the environment for updates. (Default: 60 seconds. Range: 5-3600 seconds.) Scan While Connected: Continue to scan for WiFi as WAN profile updates when connected. Each time a scan occurs the wireless communication of the router will be temporarily interrupted.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8 SYSTEM SETTINGS The System Settings tab has 7 submenu items that provide access to tools for broad administrative control of the MBR1200B: Administration Device Alerts Managed Services System Control ...
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8.1 Administration Select the Administration submenu item in order to control any of the following functions: Router Security System Clock Local Management Remote Management GPS System Logging Router Security 8.1.1...
Page 133
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT System Clock 8.1.2 Enabling NTP will tell the router to get its system time from a remote server on the Internet. If you do not enable NTP then the router time will be based on when the router firmware was built, which is guaranteed to be wrong. Whenever the Internet connection is re-established and once a week thereafter the router will ask the server for the current time so it can correct itself.
Page 134
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8.1.3 Local Management Enable Internet Bounce Pages: Bounce pages show up in your web browser when the router is not connected to the Internet. They inform you that you are not connected and try to explain why. If you disable bounce pages then you will just get the usual browser timeout.
Page 135
SSH Server Port: Default: 22. Allow Remote SSH Access: Only enable this option if instructed by a CradlePoint support agent. NOTE: You can restrict remote access to only specified IP addresses in Network Settings → Firewall under Remote Administration Access Control.
Page 136
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8.1.5 If you have an attached device with GPS support, you can enable a graphical view of your router‘s location which will appear in Status → GPS. Users can configure GPS NMEA GGA format sentence reporting, available through a router-based server and/or a remote server.
Page 137
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT o Remote server port o Report only over specific time interval: Restricts the NMEA sentence reporting to a remote server to a specific time interval. The following GPS spec is copied from http://aprs.gids.nl/nmea/ $GPGGA –...
Page 138
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Checksum Used by program to check for transmission errors Courtesy of Brian McClure, N8PQI. Global Positioning System Fix Data. Time, position, and fix related data for a GPS receiver. eg2. $--GGA,hhmmss.ss,llll.ll,a,yyyyy.yy,a,x,xx,x.x,x.x,M,x.x,M,x.x,xxxx hhmmss.ss = UTC of position llll.ll = latitude of position...
Page 139
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT = GPS quality indicator (0=invalid; 1=GPS fix; 2=Diff. GPS fix) = Number of satellites in use [not those in view] = Horizontal dilution of position = Antenna altitude above/below mean sea level (geoid) 10 = Meters (Antenna height unit) 11 = Geoidal separation (Diff.
Page 140
If this occurs, disable this option. Log to attached USB stick: Only enable this option if instructed by a CradlePoint support agent. This will write a very verbose log file to the root level of an attached USB stick. Please disable the feature before removing the USB stick, or you may lose some logging data.
Page 142
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Server Address: smtp.gmail.com Server Port: 587 (for TLS, or Transport Layer Security port; the MBR1200B does not support SSL). Authentication Required: Gmail, mark this checkbox. User Name: Your full email address ...
WiPipe Central client will not start unless the WAN is Ethernet. Registration URL: Register your router using the code provided by CradlePoint when you purchase WiPipe Central. 8.3.1 SNMP Configuration SNMP, or Simple Network Management Protocol, is an Internet standard protocol for remote management.
Page 144
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT LAN port #: Use the LAN port # field to configure the LAN port number you wish to access SNMP services on. (Default: 161) Enable SNMP on WAN: Enabling SNMP on WAN will make SNMP services available to the WAN interfaces of the router.
Page 145
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT MD5 with DES encryption SHA with DES encryption MD5 with AES encryption SHA with AES encryption Username: Enter the Username configured on your SNMP host in the username field.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8.4 System Control Restore to Factory Defaults: This changes all settings back to their default values. Reboot The Device: This causes the router to restart. Advanced: System Automatic Reboot and Ping Test Scheduled Reboot: This causes the router to restart at a user-determined time.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 8.5 System Software Firmware Upgrade allows the administrator to load new firmware onto the router to add new features or fix defects. If you are happy with the operation of the router, you may not want to upgrade just because a new version is available.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 9 GLOSSARY 802.11 Alphanumeric A family of specifications for wireless local area networks Characters A-Z and 0-9. (WLANs) developed by a working group of the Institute of Antenna Electrical and Electronics Engineers (IEEE).
Page 149
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Authentication Bit rate To provide credentials, like a Password, in order to verify The amount of bits that pass in given amount of time. that the person or device is really who they are claiming Bit/sec to be.
Page 150
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT CardBus Data-Link layer A newer version of the PC Card or PCMCIA interface. It The second layer of the OSI model. Controls the supports a 32- bit data path, DMA, and consumes less movement of data on the physical link of a network.
Page 151
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Demilitarized zone Download DMZ: A single computer or group of computers that can To send a request from one computer to another and be accessed by both users on the Internet as well as have the file transmitted back to the requesting computer.
Page 152
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Encryption Fragmentation Converting data into cyphertext so that it cannot be easily Breaking up data into smaller pieces to make it easier to read. store. Ethernet The most widely used technology for Local Area File Transfer Protocol.
Page 153
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Half-duplex IEEE Data cannot be transmitted and received at the same Institute of Electrical and Electronics Engineers. time. IGMP Hashing Internet Group Management Protocol is used to make Transforming a string of characters into a shorter string sure that computers can report their multicast group with a predefined length.
Page 154
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Internet Protocol Security Java IPsec provides security at the packet processing layer of A programming language used to create programs and network communication. applets for web pages. Internet Service Provider Kbps An ISP provides access to the Internet to individuals or Kilobits per second.
Page 155
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT LPR/LPD MPPE ―Line Printer Requestor‖/‖Line Printer Daemon‖. A Microsoft Point-to-Point Encryption is used to secure data TCP/IP protocol for transmitting streams of printer data. transmissions over PPTP connections. MAC Address A unique hardware ID assigned to every Ethernet Maximum Transmission Unit is the largest packet that adapter by the manufacturer.
Page 156
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Network Interface Card routers in the network as opposed to sending the entire routing table at a regular interval, which is how RIP NIC. A card installed in a computer or built onto the functions.
Page 157
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT channel) but can have multiple ports (logical channels) Rendezvous each identified by a number. Apple‘s version of UPnP, which allows for devices on a network to discover each other and be connected without the need to configure any settings.
Page 158
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Session key An encryption and decryption key that is generated for Secure Shell is a command line interface that allows for every communication session between two computers. secure connections to remote computers. Session layer...
Page 159
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT TFTP Upload Trivial File Transfer Protocol is a utility used for To send a request from one computer to another and transferring files that is simpler to use than FTP but with have a file transmitted from the requesting computer to less features.
Page 160
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Wake on LAN WiFi Protected Access Allows you to power up a computer through it‘s Network An updated version of security for wireless networks that Interface Card. provides authentication as well as encryption.
If the purchaser wishes to upgrade or convert to another CradlePoint, Inc. product within the thirty (30) day period, purchaser may return the product and apply the full purchase price toward the purchase of the other product. Any other return will be subject to CradlePoint, Inc.‘s existing return policy.
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT 10.3 Specifications DATA IN: USB modem (2), ExpressCard modem (1), Management: Remote WAN web-based management 10/100 Ethernet ports (2) (cable/DSL/satellite modems), access (HTTP, HTTPS), web-based GUI (easy WiFi (as WAN) wireless 2x2 MIMO ―N‖ WiFi 2.4GHz management), serverbased centralized management (WiPipe™...
Page 164
MBR1200B| USER MANUAL Firmware ver. 3.6.0 CRADLEPOINT Compatible with HSPA, EVDO, LTE, & WiMAX DETAILS Cellular Network Devices 2.412 to 2.484 GHz WiFi Frequency Band Create, Manage, and Terminate Up To 2 IPsec Operation VPN Sessions Compliant with IEEE 802.3 and 3u Standards ...