Subscribe to Our Youtube Channel
Related Manuals for Geneko GWR-I
Summary of Contents for Geneko GWR-I
- Page 1 WWW.INFOPULSAS.LT / info@infopulsas.lt GWR-I Cellular Router Series User Manual version 1.0 date 10.08.2012.
-
Page 2: Table Of Contents
Settings – Routing ............................28 Port translation ................................29 Settings – Dynamic Routing Protocol....................29 Routing Information Protocol (RIP) ..........................29 RIP routing engine for the GWR-I Router......................31 Settings – VPN Settings..........................33 Generic Routing Encapsulation (GRE).......................... 33 GRE Keepalive................................34 Internet Protocol Security (IPSec).......................... - Page 3 IPSec Tunnel configuration between two GWR-I Routers ............83 IPSec Tunnel configuration between GWR-I Router and Cisco Router........97 IPSec Tunnel configuration between GWR-I Router and Juniper SSG firewall....101 A. How to Achieve Maximum Signal Strength with GWR-I Router? ........113 Antenna placement............................... 113 Antenna Options................................113...
-
Page 4: List Of Figures
Figure 49 - SNMP configuration page ........................72 Figure 50 - Syslog configuration page ........................73 Figure 51 - GWR-I Router as Internet router ......................75 Figure 52 - GRE tunnel between two GWR-I Routers ....................76 Figure 53 - Network configuration page for GWR-I Router 1.................76... - Page 5 Figure 57 - GRE configuration page for GWR-I Router 2 ..................78 Figure 58 - Routing configuration page for GWR-I Router 2 ..................79 Figure 59 - GRE tunnel between Cisco router and GWR-I Router .................80 Figure 60 - Network configuration page ........................81 Figure 61 - GRE configuration page..........................82...
- Page 6 USER MANUAL GWR-I Cellular Router Series List of Tables Table 1 - Technical parameters ............................10 Table 2 – GWR-I Router features..........................11 Table 3 - Network parameters .............................21 Table 4 - DHCP Server parameters ..........................22 Table 5 - WAN parameters............................25 Table 6 – Advanced WAN Settings..........................27 Table 7 –...
-
Page 7: Description Of The Gwr-I Cellular Router Series
Low transmission delay and very high data rates offered by existing cellular networks completely eliminate the need for very complex installation of wired infrastructure in industrial environments. Easy to install, reliable and high performance router models from GWR-I series introduce a completely new dimension into industrial networking area. -
Page 8: Typical Application
With Serial-to-IP feature it is possible to connect, control and perform data acquisition from almost • any device with serial RS232 port. In addition to this feature, GWR-I router series implements ModbusRTU-to-ModbusTCP functionality designed to support expansion of Modbus SCADA networks over the cellular networks. - Page 9 USER MANUAL GWR-I Cellular Router Series Technical Parameters Directive 2004/108/EC EN 301 489-1 V1.6.1(2005-09) EN 301 489-7 V1.3.1(2005-11) EN 60950-1:2001(1st Ed.) and/or EN 60950-1:2001 Complies with Directive 1999/05/EC standards R&TTE ETSI EN 301 511 V9.0.2 EN 301 908-1 & EN 301 908-2(v2.2.1)
-
Page 10: Protocols And Features
USER MANUAL GWR-I Cellular Router Series Width: 50mm Dimensions and Length: 104mm weight Height: 135mm Weight: 500g Housing and Robust metal housing mounting options DIN rail mounting kit Table 1 - Technical parameters Protocols and features Features Short description Network... -
Page 11: Table 2 - Gwr-I Router Features
Advanced monitoring and diagnostics of the device. Default reset Reset the router to a factory default settings. Firmware upload Upgrade the firmware version on the router. Configuration Export/Import Partial or Full Export/Import of router configuration. Table 2 – GWR-I Router features... -
Page 12: Product Overview
Network Link (green LED) on - Ethernet activity or access point engaged. • LED Indicator Description: Reset (red LED) on – the GWR-I Router reset state. Power status (green LED) on – Power supply. Power status LED will blink when the GWR Router is in initializing state. -
Page 13: Top Panel
The Reset button can be used for a warm reset or a reset to factory defaults. Warm reset: If the GWR-I Router is having problem connecting to the Internet, press and hold the reset button for a second using the tip of a pen. -
Page 14: Putting Into Operation
USER MANUAL GWR-I Cellular Router Series Figure 3 – GWR-I Router top panel side Putting Into Operation Before putting the GWR-I Router in operation it is necessary to connect all components needed for the operation: GSM antenna; • Ethernet cable and •... -
Page 15: Figure 4 - Inserting The Sim Card
USER MANUAL GWR-I Cellular Router Series In order to open the router chassis please remove pointed screws. Figure 4 – Inserting the SIM card SIM card must not be changed, installed or taken out while device operates. This procedure is... -
Page 16: Declaration Of Conformity
USER MANUAL GWR-I Cellular Router Series Declaration of conformity... -
Page 17: Device Configuration
USER MANUAL GWR-I Cellular Router Series Device Configuration There are two methods which can be used to configure the GWR-I Router. Administrator can use following methods to access router: Web browser • Command line interface • Default access method is by web interface. This method provides administrator full set of privileges for configuring and monitoring the router. -
Page 18: Note
To discard changes press the Reload button. By clicking Reload, previous settings will be loaded in the form. Status Information The GWR-I Router’s Status menu provides general information about router as well as real-time network information. Status information is divided into following categories: General Information, Network Information (LAN), WAN Information. -
Page 19: Status - Network Information
USER MANUAL GWR-I Cellular Router Series Figure 6 - General router information Status - Network Information Network Information Tab provides information about Ethernet port and Ethernet traffic statistics. Screenshot of Network Router information is shown in Figure 7. Status - WAN Information WAN Information Tab provides information about GPRS/EDGE/HSPA connection and traffic statistics. -
Page 20: Figure 8 - Wan Information
USER MANUAL GWR-I Cellular Router Series Figure 8 - WAN Information... -
Page 21: Settings - Network
Type the IP address of your local DNS server. Reload Click Reload to discard any changes and reload previous settings. Click Save button to save your changes back to the GWR-I Router. Whether Save you make changes or not, router will reboot every time you click Save. -
Page 22: Settings - Dhcp Server
DHCP server. (By default, Windows computers are set to obtain an IP automatically.) To use the GWR-I Router as your network’s DHCP server, click DHCP Server Tab for DHCP Server setup. The GWR-I Router has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. -
Page 23: Figure 10 - Dhcp Server Configuration Page
USER MANUAL GWR-I Cellular Router Series Figure 10 - DHCP Server configuration page... -
Page 24: Settings - Wan Setting
USER MANUAL GWR-I Cellular Router Series Settings - WAN Setting Click WAN Settings Tab, to open the Wireless screen. Use this screen to configure the GWR-I Router Figure 11 GPRS/EDGE/HSPA/HSPA+/LTE parameters ( Figure 11 - WAN Settings configuration page WAN Settings... -
Page 25: Table 5 - Wan Parameters
Reload Click Reload to discard any changes and reload previous settings. Save Click Save to save your changes back to the GWR-I Router. Switch SIM Click Switch SIM try to establish the connection using the other SIM card. Refresh Click Refresh to see updated mobile network status. - Page 26 Mobile Operator. Please use exact parameters given from Mobile Operator. Bottom part is used for monitoring status of GSM/UMTS connection (create/maintain/destroy • GSM/UMTS connection). Status line show real-time status: connected/disconnected. If your SIM Card credit is too low, the GWR-I Router will performed periodically connect/disconnect actions. WAN Settings(advanced) Label...
-
Page 27: Table 6 - Advanced Wan Settings
USER MANUAL GWR-I Cellular Router Series VJ-Compression Disable Van Jacobson style TCP/IP header compression in both directions. Disable the connection-ID compression option in Van Jacobson style TCP/IP VJ-Connection-ID header compression. With this option, pppd will not omit the connection-ID byte Compression from Van Jacobson compressed TCP/IP headers. -
Page 28: Settings - Routing
The static routing function determines the path that data follows over your network before and after it passes through the GWR-I Router. You can use static routing to allow different IP domain users to access the Internet through the GWR-I Router. Static routing is a powerful feature that should be used by advanced users only. -
Page 29: Port Translation
Port translation For incoming data, the GWR-I Router forwards IP traffic destined for a specific port, port range or GRE/IPsec protocol from the cellular interface to a private IP address on the Ethernet “side” of the GWR-I Router. Settings – Dynamic Routing Protocol Dynamic routing performs the same function as static routing except it is more robust. -
Page 30: Figure 13 - Rip Configuration Page
Click RIP Tab, to open the Routing Information Protocol screen. Use this screen to configure the GWR-I Router RIP parameters (Figure 13). Figure 13 – RIP configuration page... -
Page 31: Rip Routing Engine For The Gwr-I Router
GWR-I Router to receive an send only version 1. Alternatively, tou can configure the GWR-I Router to receive and send only version 2 packets. To configure GWR-I Router to send and receive packets from only one version, use the following command:... - Page 32 USER MANUAL GWR-I Cellular Router Series Disable RIP update (optional): router# passive-interface eth0 router# no passive-interface eth0 Routing protocols use several timer that determine such variables as the frequency of routing updates, the length of time before a route becomes invalid, an other parameters. You can adjust these timer to tune routing protocol performance to better suit your internetwork needs.
-
Page 33: Settings - Vpn Settings
Tunnel Destination This field specifies IP address or hostname of tunnel destination. Interface This field specifies GRE interface. This field gets from the GWR-I Router. KeepAlive Enable Check for keepalive enable. Defines the time interval (in seconds) between transmitted keepalive packets. -
Page 34: Gre Keepalive
USER MANUAL GWR-I Cellular Router Series the tunnel endpoint is down. Enter a number from 1 to 10 times. Click Add to insert (add) new item in table to the GWR-I Router. Remove Click Remove to delete selected item from table. -
Page 35: Internet Protocol Security (Ipsec)
Click VPN Settings Tab, to open the VPN configuration screen. At the Figure 17 you can see IPSec Summary screen. This screen gathers information about settings of all defined IPSec tunnels. You can define up to 5 Device-to-Device tunnels. Two different firmware versions of GWR-I have slightly different IPSec Advanced options. -
Page 36: Table 10 - Ipsec Summary For Second Firmware Version
USER MANUAL GWR-I Cellular Router Series only enabled tunnels will be started. Field indicates status of the IPSec tunnel. Click on Refresh button to see current Status status of defined IPSec tunnels. This field shows both Phase 1 and Phase 2 details, Encryption method... -
Page 37: Figure 16 - Ipsec Settings For Second Firmware Version
USER MANUAL GWR-I Cellular Router Series Figure 16 - IPSec Settings for second firmware version... - Page 38 USER MANUAL GWR-I Cellular Router Series VPN Settings / IPSec Settings Label Description Tunnel Number This number will be generated automatically and it represents the tunnel number. Enter a name for the IPSec tunnel. This allows you to identify multiple tunnels Tunnel Name and does not have to match the name used at the other end of the tunnel.
- Page 39 USER MANUAL GWR-I Cellular Router Series NOTE: If you select a NULL method of encryption, the next Phase 2 Authentication method cannot be NULL and vice versa. Select a method of authentication: NULL, MD5 or SHA1. The authentication method determines how the ESP packets are validated. MD5 is a one-way hashing algorithm that produces a 128-bit digest.
-
Page 40: Table 11 - Ipsec Parameters For Second Firmware Version
Click Back to return on IPSec Summary screen. Reload Click Reload to discard any changes and reload previous settings. Click Save to save your changes back to the GWR-I Router. After that router Save automatically goes back and begin negotiations of the tunnels by clicking on the Start button. -
Page 41: Alternative Firmware Version (Aggressive Mode Supported)
USER MANUAL GWR-I Cellular Router Series Alternative firmware version (Aggressive Mode supported) IPSec Summary and IPSec Settings related with first firmware version are briefly displayed in following figures and tables below Figure 17 - IPSec Summary screen for first firmware version... -
Page 42: Table 12 - Ipsec Summary For First Firmware Version
USER MANUAL GWR-I Cellular Router Series Stop This button will stop all IPSec started negotiations. Refresh Click on this button to refresh the Status field in the Summary table. Table 12 - IPSec Summary for first firmware version To create a tunnel click Add New Tunnel button. Depending on your selection, the Local Group Setup and Remote Group Setup settings will differ. -
Page 43: Figure 18 - Ipsec Settings For First Firmware Version
USER MANUAL GWR-I Cellular Router Series Figure 18 - IPSec Settings for first firmware version VPN Settings / IPSec Settings Label Description Tunnel Number This number will be generated automatically and it represents the tunnel number. Enter a name for the IPSec tunnel. This allows you to identify multiple tunnels Tunnel Name and does not have to match the name used at the other end of the tunnel. - Page 44 USER MANUAL GWR-I Cellular Router Series Time setting. If the Perfect Forward Secrecy (PFS) feature is enabled, IKE Phase 2 negotiation will generate new key material for IP traffic encryption and authentication, so Perfect Forward hackers using brute force to break encryption keys will not be able to obtain Secrecy future IPSec keys.
- Page 45 USER MANUAL GWR-I Cellular Router Series Select the remote LAN user(s) behind the Router at the other end that can use this Remote Security IPSec tunnel. Select the type you want to use: IP or Subnet. Gateway Type NOTE: The Remote Security Group Type you select should match the Local Security Group Type selected on the IPSec device at the other end of the tunnel.
-
Page 46: Table 13 - Ipsec Parameters For First Firmware Version
Click Back to return on IPSec Summary screen. Reload Click Reload to discard any changes and reload previous settings. Click Save to save your changes back to the GWR-I Router. After that router Save automatically goes back and begin negotiations of the tunnels by clicking on the Start button. -
Page 47: Openvpn
USER MANUAL GWR-I Cellular Router Series OpenVPN OpenVPN site to site allows connecting two remote networks via point-to-point encrypted tunnel. OpenVPN implementation offers a cost-effective simply configurable alternative to other VPN technologies. OpenVPN allows peers to authenticate each other using a pre-shared secret key, certificates, or username/password. -
Page 48: Table 14 - Openvpn Parameters
USER MANUAL GWR-I Cellular Router Series NOTE: Depending on the options selected in the previous steps, some of the following options will be available for configuration. Selection between TCP in server or client mode and UDP protocol in connect or Protocol wait mode. -
Page 49: Figure 20 - Openvpn Configuration Page
USER MANUAL GWR-I Cellular Router Series Figure 20 – OpenVPN configuration page Figure 21 – OpenVPN network topology... -
Page 50: Settings - Ip Filtering
The IP filtering rule set is made up of many combinations of the criteria listed previously. Use firewall option to set IP addresses from which is possible remote access on the GWR-I Router. Demilitarized Zone (DMZ) allows one IP Address to be exposed to the Internet. Because some applications require multiple TCP/IP ports to be open, DMZ provides this function by forwarding all the ports to one computer at the same time. -
Page 51: Figure 22 - Ip Filtering Configuration Page
USER MANUAL GWR-I Cellular Router Series Service This field specifies service of the host allow access to the GWR-I Router. Protocol This field specifies protocol of the host allow access to the GWR-I Router. Port This field specifies port of the host allow access to the GWR-I Router. -
Page 52: Ip Filtering Configuration Example
USER MANUAL GWR-I Cellular Router Series IP Filtering configuration example This example configuration demonstrates how to secure a network with a combination of routers and a GWR-I Router. Figure 23 - IP Filtering configuration example Figure 24 - IP Filtering settings... -
Page 53: Settings - Dyndns
USER MANUAL GWR-I Cellular Router Series Settings – DynDNS Dynamic DNS is a domain name service allowing to link dynamic IP addresses to static hostname. To start using this feature firstly you should register to DDNS service provider. Section of the web interface where you can setup DynDNS parameters is shown in Figure 25. -
Page 54: Settings - Serial Port 1
Reload Click Reload to discard any changes and reload previous settings. Save Click Save to save your changes back to the GWR-I Router. Table 16 – DynDNS parameters Settings - Serial Port 1 Using the router’s serial port it is possible to perform serial-to-ethernet conversion (Serial port over TCP/UDP) and ModbusRTU-to-TCP conversion (Modbus gateway). -
Page 55: Serial Port Over Tcp/Udp Settings
Serial port over TCP/UDP settings The GWR-I Router provides a way for a user to connect from a network connection to a serial port. It provides all the serial port setup, a configuration file to configure the ports, a control login for modifying port parameters, monitoring ports, and controlling ports. -
Page 56: Figure 28 - Serial Port Configuration Page
USER MANUAL GWR-I Cellular Router Series Reload Click Reload to discard any changes and reload previous settings. Click Save button to save your changes back to the GWR-I Router and Save activate/deactivate serial to Ethernet converter. Table 17 – Ser2IP parameters Click Serial Port Tab to open the Serial Port Configuration screen. -
Page 57: Table 18 - Serial Port Parameters
This is most useful for using telnet. Reload Click Reload to discard any changes and reload previous settings. Click Save button to save your changes back to the GWR-I Router and Save activate/deactivate serial to Ethernet converter. -
Page 58: Modbus Gateway Settings
Set importance level of log messages. Reload Click Reload to discard any changes and reload previous settings. Click Save button to save your changes back to the GWR-I Router and Save activate/deactivate serial to Ethernet converter. Table 19 – Modbus gateway parameters... -
Page 59: Settings - Serial Port 2
USER MANUAL GWR-I Cellular Router Series Figure 29 – Modbus gateway configuration page Settings - Serial Port 2 Most of the settings related to Serial Port 2 are equivalent to the Serial Port 1 settings. The only difference is in type of connector and serial port standard. Namely, serial port 2 supports RS232 and RS485 4W standards. -
Page 60: Settings - Sms
SMS remote control feature allows users to execute a short list of predefined commands by sending SMS messages to the router. GWR-I router series implement following predefined commands: In order to establish PPP connection, user should send SMS containing following string :PPP-CONNECT After the command is executed, router sends a confirmation SMS with “OK”... -
Page 61: Settings - Gpio
GWR-I Cellular Router Series Settings - GPIO GWR-I router series implements one digital input and one digital output. Numerous telemetry and data acquisition applications imply using digital input and output for providing simple control over certain system functionalities. GPIO (General Purpose Input Output) settings page is displayed on the image bellow: Figure 32–... -
Page 62: Maintenance - Device Identity Settings
USER MANUAL GWR-I Cellular Router Series Maintenance The GWR-I Router provides administration utilities via web interface. Administrator can setup basic router’s parameters, perform network diagnostic, update software or restore factory default settings. Maintenance - Device Identity Settings Within Device Identity Settings Tab there is an option to define name, location of device and description of device function. -
Page 63: Maintenance - Date/Time Settings
Maintenance - Date/Time Settings To set the local time, select Date/Time Settings using the Network Time Protocol (NTP) automatically or Set the local time manually. Date and time setting on the GWR-I Router are done through window Date/Time Settings. Figure 35 - Date/Time Settings configuration page... -
Page 64: Table 23 - Date/Time Parameters
Setup automatic synchronization with time server. synchronize NTP Update time every Time interval for automatic synchronization. Save Click Save button to save your changes back to the GWR-I Router. Reload Click Reload to discard any changes and reload previous settings. Table 23 - Date/time parameters... -
Page 65: Maintenance - Diagnostics
The GWR-I Router provide built-it tool, which is used for troubleshooting network problems. The ping test bounces a packet of machine on the Internet back to the sender. This test shows if the GWR-I Router is able to connect the remote host. If users on the LAN are having problems accessing service on the Internet, try to ping the DNS server or other machine on network. -
Page 66: Maintenance - Settings Backup
This feature allows you to make a backup file of complete configuration or some part of the configuration on the GWR-I Router. In order to backup the configuration, you should select the part of configuration you would like to backup. The list of available options is presented on the image 35. To use the backup file, you need to import the configuration file that you previously exported. -
Page 67: Maintenance - Default Settings
Maintenance - Default Settings Use this feature to clear all of your configuration information and restore the GWR-I Router to its factory default settings. Only use this feature if you wish to discard all the settings and preferences that you have configured. -
Page 68: Management - Command Line Interface
Main mode. Console Type Windows, other. Save Click Save to save your changes back to the GWR-I Router. Reload Click Reload to discard any changes and reload previous settings. Table 24 – Command Line Interface parameters Figure 42 –... -
Page 69: Management - Remote Management
Remote Management Utility is a standalone Windows application with many useful options for configuration and monitoring of GWR-I routers. More information about this utility can be found in other document (Remote_Management.pdf). In order to use this utility user has to enable Remote Management on the router (Figure 43). -
Page 70: Figure 44 - Connection Manager
Connection Wizard is installed through few very simple steps and it is available immediately upon the installation. After starting the wizard you can choose between two available options for configuration: GWR-I Router’s Ethernet port - With this option you can define LAN interface IP address and •... -
Page 71: Figure 46 - Connection Wizard - Router Detection
USER MANUAL GWR-I Cellular Router Series Figure 46 – Connection Wizard – Router Detection When you select one of the routers from the list and click Next you will get to the following screen: Figure 47 – Connection Wizard – LAN Settings If you selected to configure LAN and WAN interface click, upon entering LAN information click Next and you will be able to setup WAN interface. -
Page 72: Management - Simple Management Protocol (Snmp)
USER MANUAL GWR-I Cellular Router Series Figure 48 – Connection Wizard – WAN Settings After entering the configuration parameters if you mark option Establish connection router will start with connection establishment immediately when you press Finish button. If not you have to start connection establishment manually on the router’s web interface. -
Page 73: Management - Logs
Sets the interface enabled for SNMP traps. The default is Both. Reload Click Reload to discard any changes and reload previous settings. Click Save button to save your changes back to the GWR-I Router and Save enable/disable SNMP. Table 26 - SNMP parameters Management - Logs Syslog is a standard for forwarding log messages in an IP network. -
Page 74: Table 27 - Syslog Parameters
USER MANUAL GWR-I Cellular Router Series The GWR-I Router supports this protocol and can send its activity logs to an external server. Syslog Settings Label Description Disable Mark this option in order to disable Syslog feature. Remote syslog Mark this option in order to enable logging on remote machine. -
Page 75: Configuration Examples
GWR-I Router as Internet Router The GWR-I Routers can be used as Internet router for a single user or for a group of users (entire LAN). NAT function is enabled by default on the GWR-I Router. The GWR-I Router uses Network Address Translation (NAT) where only the mobile IP address is visible to the outside world. -
Page 76: Gre Tunnel Configuration Between Two Gwr-I Routers
GRE tunnel is a type of a VPN tunnel, but it isn't a secure tunneling method. Simple network with two GWR-I Routers is illustrated on the diagram below (Figure 52). Idea is to create GRE tunnel for LAN to LAN (site to site) connectivity. -
Page 77: Figure 54 - Gre Configuration Page For Gwr-I Router 1
Optionally configure IP Filtering and TCP service port settings to block any unwanted incoming • traffic. On the device connected on GWR-I router 1 setup default gateway 192.168.4.1 • The GWR-I Router 2 configuration: Click Network Tab, to open the LAN NETWORK screen. Use this screen to configure LAN TCP/IP •... -
Page 78: Figure 56 - Network Configuration Page For Gwr-I Router 2
GWR-I Cellular Router Series Subnet Mask: 255.255.255.0 Press Save to accept the changes. Figure 56 - Network configuration page for GWR-I Router 2 Use SIM card with a static IP address, obtained from Mobile Operator. (Note the default gateway •... -
Page 79: Figure 58 - Routing Configuration Page For Gwr-I Router 2
GWR-I Cellular Router Series Figure 58 - Routing configuration page for GWR-I Router 2 Optionally configure IP Filtering and TCP service port settings to block any unwanted incoming • traffic. On the device connected on GWR-I router 2 setup default gateway 192.168.2.1 •... -
Page 80: Gre Tunnel Configuration Between Gwr-I Router And Third Party Router
Figure 59 - GRE tunnel between Cisco router and GWR-I Router GRE tunnel is created between Cisco router with GRE functionality on the HQ Site and the GWR-I Router on the Remote Network. In this example, it is necessary for both routers to create tunnel interface (virtual interface). -
Page 81: Figure 60 - Network Configuration Page
Remote Subnet is HQ LAN IP address and Remote Subnet Mask is subnet mask of HQ LAN. • GSM/UMTS APN Type: For GSM/UMTS networks GWR-I Router connections may require a Custom APN. A Custom APN allows for various IP addressing options, particularly static IP addresses, which are needed for most VPN connections. -
Page 82: Figure 61 - Gre Configuration Page
USER MANUAL GWR-I Cellular Router Series KeepAlive enable: no Period:(none) Retries:(none) Press ADD to put GRE tunnel rule into VPN table. Press Save to accept the changes. Figure 61 - GRE configuration page Configure GRE Route. Click Routing on Settings Tab. Parameters for this example are: •... -
Page 83: Ipsec Tunnel Configuration Between Two Gwr-I Routers
IPSec Tunnel configuration between two GWR-I Routers IPSec tunnel is a type of a VPN tunnels with a secure tunneling method. Simple network with two GWR-I Routers is illustrated on the diagram below Figure 63. Idea is to create IPSec tunnel for LAN to LAN (site to site) connectivity. -
Page 84: Figure 64 - Network Configuration Page For Gwr-I Router 1
IP Address: 10.0.10.1 Subnet Mask: 255.255.255.0 Press Save to accept the changes. Figure 64 - Network configuration page for GWR-I Router 1 Use SIM card with a static IP address, obtained from Mobile Operator. • Click WAN Settings Tab to configure parameters necessary for GSM/UMTS connection. All •... -
Page 85: Figure 65 - Ipsec Configuration Page I For Gwr-I Router 1
Negotiation Mode: Aggressive Compress(Support IP Payload Compression Protocol(IPComp)): false Dead Peer Detection(DPD): false NAT Traversal: true Send Initial Contact: true Figure 65 - IPSEC configuration page I for GWR-I Router 1 Figure 66 - IPSec configuration page II for GWR-I Router 1... -
Page 86: Figure 67 - Ipsec Configuration Page Iii For Gwr-I Router 1
Click Start button on Internet Protocol Security page to initiate IPSEC tunnel Figure 68 – IPSec start/stop page for GWR-I Router 1 On the device connected on GWR-I router 1 setup default gateway 10.0.10.1 • The GWR-I Router 2 configuration: Click Network Tab, to open the LAN NETWORK screen. -
Page 87: Figure 69 - Network Configuration Page For Gwr-I Router 2
USER MANUAL GWR-I Cellular Router Series Figure 69 - Network configuration page for GWR-I Router 2 Use SIM card with a static IP address, obtained from Mobile Operator. • Click WAN Settings Tab to configure parameters necessary for GSM/UMTS connection. All •... -
Page 88: Figure 70 - Ipsec Configuration Page I For Gwr-I Router 2
USER MANUAL GWR-I Cellular Router Series Figure 70 - IPSEC configuration page I for GWR-I Router 2 Figure 71 - IPSec configuration page II for GWR-I Router 2 NOTE : If option NAT Traversal is selected Aggressive mode is predefined. -
Page 89: Figure 73 - Ipsec Start/Stop Page For Gwr-I Router 2
GWR-I Cellular Router Series Click Start button on Internet Protocol Security page to initiate IPSEC tunnel Figure 73 – IPSec start/stop page for GWR-I Router 2 On the device connected on GWR-I router 2 setup default gateway 192.168.10.1. • Scenario #2 Router 1 and Router 2, presented in the Figure 63, have firmware version that provides single mode of negotiation in IPSec tunnel configuration process –... - Page 90 USER MANUAL GWR-I Cellular Router Series Use SIM card with a static IP address, obtained from Mobile Operator. • Click WAN Settings Tab to configure parameters necessary for GSM/UMTS connection. All • parameters necessary for connection configuration should be required from mobile operator.
-
Page 91: Figure 75 - Ipsec Configuration Page I For Gwr-I Router 1
USER MANUAL GWR-I Cellular Router Series Figure 75 - IPSEC configuration page I for GWR-I Router 1 Figure 76 - IPSEC configuration page II for GWR-I Router 1... -
Page 92: Figure 77 - Ipsec Configuration Page Iii For Gwr-I Router 1
Figure 78 – IPSec start/stop page for GWR-I Router 1 Click Connect button and after that Start button on Internet Protocol Security page to initiate IPSEC tunnel On the device connected on GWR-I router 1 setup default gateway 10.0.10.1 •... -
Page 93: Figure 79 - Network Configuration Page For Gwr-I Router 2
IP Address: 192.168.10.1 Subnet Mask: 255.255.255.0 Press Save to accept the changes. Figure 79 - Network configuration page for GWR-I Router 2 Use SIM card with a static IP address, obtained from Mobile Operator. • Click WAN Settings Tab to configure parameters necessary for GSM/UMTS connection. All •... -
Page 94: Figure 80 - Ipsec Configuration Page I For Gwr-I Router 2
Enable Tunnel Failover: false Advanced • Compress(Support IP Payload Compression Protocol(IPComp)): false Dead Peer Detection(DPD): false NAT Traversal: true Send Initial Contact: true Press Save to accept the changes. Figure 80 - IPSEC configuration page I for GWR-I Router 2... -
Page 95: Figure 80 - Ipsec Configuration Page Ii For Gwr-I Router 2
USER MANUAL GWR-I Cellular Router Series Figure 81 - IPSEC configuration page II for GWR-I Router 2 Figure 82 - IPSEC configuration page III for GWR-I Router 2 NOTE: Firmware version used in this scenario also provides options for Connection mode of IPSec tunnel. -
Page 96: Figure 83 - Ipsec Start/Stop Page For Gwr-I Router 1
Figure 83 – IPSec start/stop page for GWR-I Router 1 Click Wait button and after that Start button on Internet Protocol Security page to initiate IPSEC tunnel On the device connected on GWR-I router 2 setup default gateway 192.168.10.1. •... -
Page 97: Ipsec Tunnel Configuration Between Gwr-I Router And Cisco Router
IPSec Tunnel configuration between GWR-I Router and Cisco Router IPSec tunnel is a type of a VPN tunnels with a secure tunneling method. Diagram below illustrates simple network with GWR-I Router and Cisco Router. Idea is to create IPSec tunnel for LAN to LAN (site to site) connectivity. - Page 98 USER MANUAL GWR-I Cellular Router Series Click WAN Settings Tab to configure parameters necessary for GSM/UMTS connection. All • parameters necessary for connection configuration should be required from mobile operator. Check the status of GSM/UMTS connection (WAN Settings Tab). If disconnected please click •...
-
Page 99: Figure 86 - Ipsec Configuration Page I For Gwr-I Router
USER MANUAL GWR-I Cellular Router Series Figure 86 - IPSEC configuration page I for GWR-I Router Figure 87 - IPSec configuration page II for GWR-I Router Figure 88 - IPSec configuration page III for GWR-I Router... -
Page 100: Figure 89 - Ipsec Start/Stop Page For Gwr-I Router
GWR-I Cellular Router Series Click Start button on Internet Protocol Security page to initiate IPSEC tunnel Figure 89 – IPSec start/stop page for GWR-I Router On the device connected on GWR-I router setup default gateway 192.168.10.1. • The Cisco Router configuration: version 12.4... -
Page 101: Ipsec Tunnel Configuration Between Gwr-I Router And Juniper Ssg Firewall
IPSec tunnel is a type of a VPN tunnels with a secure tunneling method. On the diagram below Figure 90 is illustrated simple network with GWR-I Router and Cisco Router. Idea is to create IPSec tunnel for LAN to LAN (site to site) connectivity. -
Page 102: Figure 90 - Ipsec Tunnel Between Gwr-I Router And Cisco Router
Destination tunnel address should have static WAN IP address; • GSM/UMTS APN Type: For GSM/UMTS networks GWR-I Router connections may require a Custom APN. A Custom APN allows for various IP addressing options, particularly static IP addresses, which are needed for most VPN connections. A custom APN should also support mobile terminated data that may be required in most site-to-site VPNs. - Page 103 USER MANUAL GWR-I Cellular Router Series Click VPN Settings > IPSEC to configure IPSEC tunnel parameters. Click Add New Tunnel button to • create new IPSec tunnel. Tunnel parameters are: Add New Tunnel • Tunnel Name: test Enable: true Local Group Setup •...
-
Page 104: Figure 92 - Ipsec Configuration Page I For Gwr-I Router
USER MANUAL GWR-I Cellular Router Series Figure 92 - IPSEC configuration page I for GWR-I Router Figure 93 - IPSec configuration page II for GWR-I Router... -
Page 105: Figure 94 - Ipsec Configuration Page Iii For Gwr-I Router
Figure 94 - IPSec configuration page III for GWR-I Router Click Start button on Internet Protocol Security page to initiate IPSEC tunnel. Figure 95 – IPSec start/stop page for GWR-I Router On the device connected on GWR-I router setup default gateway 192.168.10.1. •... -
Page 106: Figure 96 - Network Interfaces (List)
USER MANUAL GWR-I Cellular Router Series The Juniper SSG firewall configuration: Step1 – Create New Tunnel Interface Click Interfaces on Network Tab. • Figure 96 - Network Interfaces (list) Bind New tunnel interface to Untrust interface (outside int – with public IP addresss). -
Page 107: Figure 98 - Autokey Advanced Gateway
Figure 98 - AutoKey Advanced Gateway Click New button. Enter gateway parameters: • Gateway name: TestGWR Security level: Custom Remote Gateway type: Dynamic IP address( because your GWR-I router are hidden behind Mobile operator router’s (firewall) NAT) Peer ID: 172.30.147.96 Presharedkey: 1234567890 Local ID: 150.160.170.1... -
Page 108: Figure 100 - Gateway Advanced Parameters
USER MANUAL GWR-I Cellular Router Series Click Advanced button. • Security level – User Defined: custom Phase 1 proposal: pre-g2-3des-sha Mode: Agressive(must be aggressive because of NAT) Nat-Traversal: enabled Click Return and OK. Figure 100 - Gateway advanced parameters Step 3 - Create AutoKey IKE Click VPNs in main menu. -
Page 109: Figure 102 - Autokey Ike Parameters
USER MANUAL GWR-I Cellular Router Series AutoKey IKE parameters are: VPNname: TestGWR Security level: Custom Remote Gateway: Predefined Choose VPN Gateway from step 2 Figure 102 - AutoKey IKE parameters Click Advanced button. • Security level - User defined: custom Phase 2 proposal: pre-g2-3des-sha Bind to - Tunnel interface: tunnel.3(from step 1) -
Page 110: Figure 103 - Autokey Ike Advanced Parameters
USER MANUAL GWR-I Cellular Router Series Figure 103 - AutoKey IKE advanced parameters Step 4 - Routing Click Destination tab on Routing menu. • Click New button. Routing parameters are: • IP Address: 192.168.10.0/24 Gateway: tunnel.3(tunnel interface from step 1) Click OK. -
Page 111: Figure 105 - Policies From Untrust To Trust Zone
USER MANUAL GWR-I Cellular Router Series Step 5 - Policies Click Policies in main menu. • Click New button (from Untrust to trust zone) • Source Address: 192.168.10.0/24 Destination Address: 10.10.10.0/24 Services: Any Click OK. • Figure 105 - Policies from untrust to trust zone Click Policies in main menu. -
Page 112: Figure 106 - Policies From Trust To Untrust Zone
USER MANUAL GWR-I Cellular Router Series Figure 106 - Policies from trust to untrust zone... -
Page 113: How To Achieve Maximum Signal Strength With Gwr-I Router
Another way of increasing throughput is by physically placing the device on the roof of the building (in an environmentally safe enclosure with proper moisture and lightning protection). Simply install the GWR-I Router outside the building and run an RJ-45 Ethernet cable to •...
Need help?
Do you have a question about the GWR-I and is the answer not in the manual?
Questions and answers