Page 1 Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500) Customer FREE technical support 24 hours a day, 7 days a week: Call 724-746-5500 or fax 724-746-0746 Support Mailing address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018 Information Web site: www.blackbox.com • E-mail: info@blackbox.com...
Page 2 Trademarks Used in this Manual Trademarks Used in this Manual Black Box and the Double Diamond logo are registered trademarks of BB Technologies, Inc. AT&T is a registered trademark of AT&T Inc. Sprint is a registered trademark of Sprint. Verizon is a registered trademark of Verizon Wireless, Inc.
Page 3 Disclaimer: Black Box Network Services shall not be liable for damages of any kind, including, but not limited to, punitive, consequential or cost of cover damages, resulting from any errors in the product information or specifications set forth in this document and Black Box Network Services may revise this document at any time without notice.
Page 4 NOM Statement Instrucciones de Seguridad (Normas Oficiales Mexicanas Electrical Safety Statement) 1. Todas las instrucciones de seguridad y operación deberán ser leídas antes de que el aparato eléctrico sea operado. 2. Las instrucciones de seguridad y operación deberán ser guardadas para referencia futura. 3.
Page 5: Table Of Contents
Table of Contents Table of Contents 1. Specifications ..................................8 2. Overview ....................................9 2.1 Description ..................................9 2.2 Features ..................................10 2.3 What’s Included ................................11 2.4 Hardware Description ..............................12 2.4.1 Front Panel ................................ 12 2.4.2 Back Panel ................................. 13 2.4.3 LED Indicators on the Router..........................14 2.4.4 Dual Serial Port Module ............................
Page 6 Table of Contents 6. Configuring Chassis Ports ..............................63 6.1 Port Interfaces ................................63 6.1.1 Configuring a LAN Port .............................64 6.1.2 Configuring the WAN Port ..........................67 7. Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router ................70 7.1 Use of a MultiWAN ..............................70 7.2 Configuring a MultiWAN .............................
Page 7: Specifications
Internet Key Exchange (IKE) RFC-2409 Serial Data Support Industrial models (WRT4001A–WRT4004A, WRT4001A-DC–WRT4004A-DC): Up to (2) serial ports supporting TIA RS-485, RS-232 NOTE: Contact Black Box Technical Support at 724-746-5500 or info@blackbox.com for additional protocols. Transport Protocols WAN: IP over Ethernet (compatible with MPLS services),...
Page 8: Specifications
AC models: 100–240 VAC, autoranging adapter, 50–60 Hz, 5 VDC, 3 A output, 15 W max. Dimensions 1.6"H x 5.7"W x 4"D (4 x 14.5 x 10 cm) Weight Metal case (WRT4001A–WRT4004A, WRT4001A-DC–WRT4004A-DC: 0.85 lb. (0.39 kg); Plastic case (WRT4011A–WRT4014A): 0.75 lb. (0.34 kg) Approvals...
Page 9: Overview
(VPN) tunnels without affecting other features. One internal cellular wireless module is standard on the industrial and commercial routers (all part numbers). The industrial routers (part numbers WRT4001A–WRT4004A and WRT4001A-DC– WRT4004A-DC) also have a dual-port serial expansion module installed in one of the expansion slots.
Page 10: Features
Chapter 2: Overview Table 2-2. Optional accessories. Part Number Product Name/Description WRT4000-DIN Optional DIN Rail Mounting Kit Available for Metal Case Packages WRT4000-PM Optional Panel Mount Kit Available for Metal Case Packages WRT4000-RM Optional Right-Angle Bracket Mounting Kit Available for Metal Case Packages WRT4000-ANT Optional Indoor 3G/4G Antenna WRT4000-ANT-KIT...
Page 11: What's Included
• AC or DC power supply • (1) to (2) antennas • Quick Start Guide The full user manual/installation guide can be downloaded from the Black Box Web site. To download from the Web site: 1. Go to www.blackbox.com 2. Enter the part number (for example, WRT4001A) in the search box: 3.
Page 12: Hardware Description
Figure 2-1. WRT4001A–WRT4004A, WRT4001A-DC–WRT4004A-DC Series Router front panel. *NOTE: The industrial routers (part numbers WRT4001A–WRT4004A and WRT4001A-DC–WRT4004A-DC) have one dual-port serial module pre-installed in one of the empty expansion slots. The commerical models (WRT4011A–WRT4014A) do not have any expansion modules installed. Additional expansion modules for the routers are not available at this time, but may be included in a future product release.
Page 13: Back Panel
Port for AC power adapter input Ethernet WAN port (eth 0) Ethernet LAN ports (eth 1) Figure 2-3. WRT4000 Series Router back panel, AC power versions (WRT4001A–WRT4004A, WRT4011A–WRT4014A). Auxiliary antenna port for internal wireless module DC power connector...
Page 14: Led Indicators On The Router
Chapter 2: Overview Table 2-3. Components on the WRT4000 Series Cellular Wireless Router. Number in Fig. 2-1–2-4 Component Description (1) Power LED Lights when power to the unit is on (3) LEDs For module and system status (1) USB port (2) external antenna connectors For internal wireless ports (2) groups of (4) LEDs For cellular wireless signal strength...
Page 15: Dual Serial Port Module
The industrial routers (part numbers WRT4001A–WRT4004A and WRT4001A-DC–WRT4004A-DC) have one dual-port serial module pre-installed in one of the empty expansion slots. No additional expansion modules are available at this time. Figure 2-5 shows the dual serial-port module for the industrial routers (WRT4001A–WRT4004A and WRT4001A-DC–WRT4004A- DC).
Page 16: 10Base-T/100Base-T Ethernet Port
Chapter 2: Overview Table 2-5. RJ-45 serial port pin configuration. RJ-45 Pin Number in Fig. 2-6 RS-232 RS485HD RS485FD DSR/RI (O) TX/RX+ (BI) RXD+ (O) DCD (O) TX/RX- (BI) RXD- (O) DTR (I) TXD- (I) SGND SGND SGND RD (O) DSR (O) DSR (O) TD (I)
Page 17: Installation
Order each SIM from a cellular wireless network provider. SIMs are not shipped with the Router. 3.2 Viewing the Ports on the WRT4000 Series Router Chassis WRT4001A–WRT4004A, WRT4001A-DC–WRT4004A-DC Series Industrial model: left slot: installed card (not shown) with (2) serial ports...
Page 18: Replacing The Subscriber Identity Module
(not used) Port for AC power adapter input Ethernet WAN port (eth 0) Ethernet LAN ports (eth 1) WRT4001A–WRT4004A, WRT4011A–WRT4014A) Figure 3-2. WRT4000 Series Router back panel, AC power ( Auxiliary antenna port Antenna port for internal (not used)
Page 19 Chapter 3: Installation 4. Do the following: a. Turn the chassis over so that it is resting on its top. b. Remove the screws from the sides of the chassis, and lift the chassis shell off the bottom of the chassis. 5.
Page 20 Chapter 3: Installation Figure 3-6. Unlocking the SIM Socket’s Door. When the SIM holder’s door is locked, the flanges of the lock clear the cutouts. Figure 3-7. Unlocked SIM Socket. b. Swing the hinged door up (Figure 3-8), so that the SIM socket is open (Figure 3-9 and Figure 3-10). Figure 3-8.
Page 21 Chapter 3: Installation Figure 3-10. Partially Opened Empty SIM Socket (Top View). NOTE: The door can swing open 180 degrees (Figure 3-11 and Figure 3-12). Figure 3-11. Fully opened empty SIM socket (side view). Figure 3-12. Fully opened empty SIM socket (top view). c.
Page 22 Chapter 3: Installation d. Open the package holding the new SIM. Hold the new SIM by its edges and take it out of the package. (See Figure 3-14.) NOTE: The SIM has a notch out of one corner, to fit into the beveled corner of the SIM socket. The SIM fits into the socket in only one way that allows the SIM door to close.
Page 23 Chapter 3: Installation Contact pad on back of SIM Contact pad on bottom plate of SIM socket Figure 3-17. SIM Partially Inserted into the SIM Socket’s Door. Figure 3-18. SIM Fully Inserted into the SIM Socket’s Door. f. Gently swing the door shut (Figure 3-19 through Figure 3-21). Figure 3-19.
Page 24 Chapter 3: Installation Figure 3-21. Closed SIM Socket with New SIM (Side View, Door Not Yet Locked). CAUTION: The SIM fits into the SIM socket in only one way. When you gently swing the door shut, you will see whether the notched corner of the SIM fits into the socket’s beveled corner.
Page 25: Connecting And Starting The Wrt4000 Series Router Chassis
Chapter 3: Installation h. When the SIM is correctly positioned and the SIM socket’s door is fully closed, slide the metal lock toward the center of the door (Figure 3-25) until it stops (Figure 3-26). When the SIM is positioned correctly, When the SIM is positioned correctly, the SIM socket’s door can close the SIM socket's door can close.
Page 26 Chapter 3: Installation Figure 3-27. Front of WRT4000 Series Router Chassis, with Antennas. Figure 3-28. Back of WRT4000 Series Router Chassis, with Antennas. NOTE: Figure 3-29 shows an alternate approved installation of an WRT4000 Series Router chassis. Two cellular wireless antennas are on magnetic mounts.
Page 27: Connecting The Wrt4000 Series Router To Dc Power
If you received a chassis that uses DC input power (part numbers WRT4001A-DC–WRT4004A-DC), the package includes a standard DC power connection set (Figure 3-30, Figure 3-31, and Figure 3-32).
Page 28 Chapter 3: Installation NOTE: Do not place anything below or on top of the chassis; it must have proper ventilation for cooling. 2. Connect the WRT4000 Series Router chassis’s ports to their network devices. For example, connect the LAN ports, WAN port, USB port, and expansion ports (serial port, etc.) to the network devices, as follows: a.
Page 29 Chapter 3: Installation Figure 3-35. Cabled DC Power Connector and Bottom Section of Shell. NOTE: The top and bottom sections of the shell differ. The top section (recall Figure 3-30) has flanges to fit against the bottom section’s latches (recall Figure 3-31). b.
Page 30 Chapter 3: Installation Figure 3-37. Top Section of Shell above Cabled DC Power Connector in Bottom Section of Shell. g. Make sure the DC power connector sits properly in the bottom section. Then snap the top and bottom sections together, as shown in Figure 3-38.
Page 31 Chapter 3: Installation Figure 3-40. DC Shell Assembly Connector Flanges. 9. Do the following: a. If necessary, rotate the plug’s shell assembly 180° around the axis corresponding to the DC power cable (Figure 3-41 and Figure 3-42). Figure 3-41. Rotate DC Shell Assembly 180 Degrees around Axis of Power Cable. Figure 3-42.
Page 32: The Next Step
Chapter 3: Installation 3.7 The Next Step To log into the WRT4000 Series Router and configure it for your network, see the procedures in Chapter 4. NOTE: If you installed a new SIM, GSM or LTE card, use the initialization stream provided by the GSM or LTE carrier to activate the SIM in the carrier network.
Page 33: Configuration-General Settings
Chapter 4: Configuration—General Settings 4. Configuration—General Settings The WRT4000 Series Cellular Wireless Router provides wireless and cabled connections to a local area network (LAN) and to peripheral devices and remote devices. Follow the procedures in this discussion to configure the WRT4000 Series Cellular Wireless Router: •...
Page 34 Chapter 4: Configuration—General Settings 3. Use an Ethernet cable to connect your management terminal to an Ethernet LAN port on the WRT4000 Series Cellular Wireless Router’s rear panel. CAUTION: Do not connect the management terminal to the WRT4000 Series Router's WAN port (labeled eth0). •...
Page 35 Chapter 4: Configuration—General Settings 6. Type your user name and password in the appropriate fields of the WRT4000 Series Cellular Wireless Router Log-In Screen. (Recall Default Log-In Values, on page X.) Then press the console’s Enter key or select the screen’s Login button (to the lower right of the router log-In Fields).
Page 36: Managing The Browser Display
• Processes •Realtime Graphs An Auto Refresh button (to the right of the Black Box logo) is displayed on several screens. You can select this button to turn automatic screen refreshment on or off. 7. To manage your WRT4000 Series Cellular Wireless Router, do the following: a.
Page 37: Navigating The Wrt4000 Series Cellular Wireless Router's Management System
Chapter 4: Configuration—General Settings 4.2 Navigating the WRT4000 Series Cellular Wireless Router’s Management System 4.2.1 Saving or Discarding Changes Buttons to Reset, Save, or Save & Apply are displayed in the lower right-hand corner of the WRT4000 Series Cellular Wireless Router configuration screens.
Page 38: Restarting (Rebooting) The Wrt4000 Series Cellular Wireless Router
Chapter 4: Configuration—General Settings CAUTION: The WRT4000 Series Cellular Wireless Router operating system will not report unsaved changes in the configuration if you use processes that are not under the control of the router management system’s screens—for example, when you close the browser or when you manually reboot the chassis.
Page 39: Ending The Session
Chapter 4: Configuration—General Settings Figure 4-12. Router login screen. 4.2.3 Ending the Session 1. When you wish to log out, select the Logout tab. • The system logs out, and the WRT4000 Series Cellular Wireless Router Log-In Screen is redisplayed (recall Figure 4-12). 4.3 Basic Configuration Basic configuration includes assigning the WRT4000 Series Cellular Wireless Router its IP address, device name, and similar items.
Page 40: Configuring The Device Name And Time Of Day
Chapter 4: Configuration—General Settings Figure 4-13. Screen to Set the Operating System Language. 2. On the Screen to Set the Operating System Language, select the Language pulldown menu and select your preferred language. NOTE: Currently, the management system interface is available only in English. To set time-of-day synchronization, see Synchronizing the WRT4000 Series Cellular Wireless Router’s Time of Day.
Page 41 Chapter 4: Configuration—General Settings Figure 4-14. System Screen for General Settings. 2. In the Hostname field, type the WRT4000 Series Cellular Wireless Router’s name. Then click the Save & Apply button (in the lower right corner of the screen). • The WRT4000 Series Cellular Wireless Router saves its new name and uses the new name immediately. NOTE: The name must be unique within the network.
Page 42: Configuring System Logging
Chapter 4: Configuration—General Settings 3. To use the browser’s date and time settings, click the button to Sync with browser. • The WRT4000 Series Cellular Wireless Router operating system adopts the browser’s time-of-day settings. 4. Select the arrow on the right of the Timezone field to pull down a list of major cities in each time zone. In the pulldown menu, select the time zone the WRT4000 Series Cellular Wireless Router will use (usually the closest city in your time zone).
Page 43: Synchronizing The Wrt4000 Series Cellular Wireless Router's Time Of Day
Chapter 4: Configuration—General Settings - Debug - Info - Notice - Warning - Error - Critical - Alert - Emergency • Cron Log Level (select from pulldown menu): “Cron” is an abbreviation for “chronological.” - Debug - Normal - Warning NOTE: To set time-of-day synchronization, see Section 4.3.5, Synchronizing the WRT4000 Series Cellular Wireless Router’s Time of Day.
Page 44 Chapter 4: Configuration—General Settings Figure 4-17. Time Synchronization Screen. NOTE: The value for Current System Time, displayed on this screen, is configured in Section 4.3.3, Configuring the Device Name and Time of Day. 3. Under General, in the Update Interval field, enter the number of seconds between time-of-day synchronization requests. 4.
Page 45: Selecting Time-Of-Day Synchronization
Chapter 4: Configuration—General Settings c. Select Reset if you want to discard the screen’s configuration and use the previous settings. 8. Continue to Section 4.3.5.2, Selecting Time-of-Day Synchronization. 4.3.5.2 Selecting Time-of-Day Synchronization NOTE: To use this procedure, NTP servers must already be configured. Follow the procedure in Section 4.3.5.1, Configuring Time- of-Day Synchronization.
Page 46: Overriding The Mac Information
Chapter 4: Configuration—General Settings 10. Consult your network administrator to determine whether the WRT4000 Series Cellular Wireless Router will receive time-of- day synchronization (substep b) or will provide that synchronization (substep a). a. If the WRT4000 Series Cellular Wireless Router will provide the time of day, select the box to Provide NTP Server. b.
Page 47: Configuration For The Network
Chapter 4: Configuration—General Settings 3. Enter values in the fields shown to override MAC information sent by the router. 4. Then do one of the following: a. If you wish to configure overrides for another MAC device, return to step 2. b.
Page 48 Chapter 4: Configuration—General Settings Figure 4-23. DHCP and DNS resolve and hosts files screen. 4. Whne you have finished configuring the fields on the screen, select the Save button. 5. Then select the tab for TFTP Settings. • The DHCP and DNSTFTP Settings Screen is displayed (Figure 4-24) for configuration. Figure 4-24.
Page 49: Network Hosts
Chapter 4: Configuration—General Settings Figure 4-25. DHCP advanced settings screen. 8. When you have finished configuring the fields on this screen, do one of the following: a. If you wish to save the configuration and use it immediately, select Save and Apply. b.
Page 50: Routing
Chapter 4: Configuration—General Settings Figure 4-27. Router network hosts names add screen. 3. In the Hostname field, type a name for the host device. 4. In the IP Address field, type the host device’s IP address. 5. Then do one of the following: a.
Page 51: Firewall Configuration
Chapter 4: Configuration—General Settings • The WRT4000 Series Cellular Wireless Router Static Routes Table is displayed (Figure 4-29). Figure 4-29. WRT4000 Series Cellular Wireless Router Static Routes Table. 3. When you have finished configuring this screen, select the Save & Apply button. •...
Page 52 Chapter 4: Configuration—General Settings 2. After configuring the fields on the screen, select the Save & Apply button. Then select the Add button. • The Firewall General Settings screen to Add Record is displayed. Figure 4-31. WRT4000 Series Cellular Wireless Router Firewall General Settings, Add Record. 3.
Page 53 Chapter 4: Configuration—General Settings Figure 4-33. Firewall Traffic Rules screen. 5. After configuring the fields on this screen, select the Save & Apply button. Then select the tab for Custom Rules. • The Firewall Custom Rules screen is displayed (Figure 4-34). Figure 4-34.
Page 54: Configuring Traffic Priority
Chapter 4: Configuration—General Settings 4.4.5 Configuring Traffic Priority Use the fields in Figure 4-35 to configure Quality of Service (QoS) settings for network traffic. Consult your network administrator for the settings to use. Figure 4-35. Quality of Service Configuration Screen. After configuring the fields on the screen, do one of the following: a.
Page 55: Configuring The Serial Ports
Chapter 5: Configuring the Serial Ports 5. Configuring the Serial Ports 5.1 Connecting to the WRT4000 Series Cellular Wireless Router Connect a management terminal to the WRT4000 Series Cellular Wireless Router, and log into the management system. (For details, see Using the WRT4000 Series Cellular Wireless Router’s Management System, in the document Configuring the WRT4000 Series Cellular Wireless Router.) 5.2 Configuring a Serial Port 1.
Page 56 Chapter 5: Configuring the Serial Ports • ttyGRE5: This virtual port uses general route encapsulation (GRE) to send and receive Frame Relay transmissions. (GRE uses the Internet Protocol, IP.) • ttyACM11: The Telnet Terminal protocol is the default configuration on one of the physical serial ports. The port configurations named ttyACM10 and ttyACM11 refer to discrete serial ports;...
Page 57 Chapter 5: Configuring the Serial Ports 6. Serial Port Configuration for Telnet Terminal. Figure 5-4. Serial Port Configuration Detail for Telnet Terminal. a. On the Serial Port Configuration Detail for Telnet Terminal Screen (Figure 5-4), you may see the following fields: •...
Page 58 Chapter 5: Configuring the Serial Ports b. Go to step 10. 7. Serial Port Configuration for Frame Relay (Synchronous Mode). Figure 5-5. Serial Port Configuration Detail for Frame Relay (Synchronous Mode). a. On the Serial Port Configuration Detail for Frame Relay (Synchronous Mode) Screen (Figure 5-5), you may see the following fields: •...
Page 59 Chapter 5: Configuring the Serial Ports 8. Serial Port Configuration for Frame Relay over IP. Figure 5-6. Serial Port Configuration Detail for Frame Relay (IP Mode). a. On the Serial Port Configuration Detail for Frame Relay (IP Mode) Screen (Figure 5-6), you may see the following fields: •...
Page 60 Chapter 5: Configuring the Serial Ports Figure 5-7. Serial Port Configuration Detail for Asynchronous Encapsulation. a. On the Serial Port Configuration Detail for Asynchronous Encapsulation Screen (Figure 5-7), you may see the following fields: • Asynchronous Speed: Select a speed for the transmission. •...
Page 61 Chapter 5: Configuring the Serial Ports Figure 5-8. Serial Port Configuration Screen with a Row for a New Protocol. b. In the new row, select the Edit button. • The Serial Port Configuration Detail Screen for a New Protocol (Figure 5-9) is displayed. The protocol does not yet have a name. Figure 5-9.
Page 62 Chapter 5: Configuring the Serial Ports d. In the Protocol field, select the protocol that the virtual protocol will support. The remaining fields on the screen change to support the selected protocol. Return to step 5. 724-746-5500 | blackbox.com Page 62...
Page 63: Configuring Chassis Ports
Chapter 6: Configuring Chassis Ports 6. Configuring Chassis Ports Follow the procedures in this discussion to configure the WRT4000 Series Cellular Wireless Router chassis ports. Also see Configuring the WRT4000 Series Cellular Wireless Router’s Serial Ports. 6.1 Port Interfaces Confer with your network administrator to get values for this configuration. 1.
Page 64: Configuring A Lan Port
Chapter 6: Configuring Chassis Ports 6.1.1 Configuring a LAN Port Confer with your network administrator to get values for this configuration. 1. Select the Network management area. 2. Select the Interfaces configuration area. • The WRT4000 Series Cellular Wireless Router Interface Overview Screen is displayed (Figure 6-3). Figure 6-3.
Page 65 Chapter 6: Configuring Chassis Ports Figure 6-5. LAN Interface DHCP Server Advanced Settings Screen. 6. After configuring the fields for the Advanced Settings tab under the DHCP Server heading, select the Save & Apply button. Then select the Advanced Settings tab under the Common Configuration heading (in the top portion of the screen). •...
Page 66 Chapter 6: Configuring Chassis Ports Figure 6-7. LAN Interface Physical Settings Screen. 8. After configuring the fields on the screen, select the Save & Apply button. Then select the Firewall Settings tab. • The LAN Interface Firewall Settings Screen is displayed (Figure 6-8). Figure 6-8.
Page 67: Configuring The Wan Port
Chapter 6: Configuring Chassis Ports 6.1.2 Configuring the WAN Port Confer with your network administrator to get values for this configuration. 1. Select the Network management area. 2. Select the Interfaces configuration area. • The WRT4000 Series Cellular Wireless Router Interface Overview Screen is displayed (Figure 6-9). Figure 6-9.
Page 68 Chapter 6: Configuring Chassis Ports Figure 6-11. WAN Interface Advanced Settings Screen. 5. After configuring the fields on the screen, select the Save & Apply button. Then select the Physical Settings tab. • The WAN Interface Physical Settings Screen is displayed (Figure 6-12). Figure 6-12.
Page 69 Chapter 6: Configuring Chassis Ports Figure 6-13. WAN Interface Firewall Settings Screen. 7. After configuring the fields on the screen, select the Save & Apply button. 724-746-5500 | blackbox.com Page 69...
Page 70: Configuring A Multiwan For The Wrt4000 Series Cellular Wireless Router
Wireless WAN ports (wan1 and wan2 in Figure 7-1) assigned to the same multiWAN must be on separate subnets and must use different default gateways. WRT4001A Figure 7-1. WRT4000 Series Cellular Wireless Router MultiWAN to Two Wireless Carriers. 724-746-5500 | blackbox.com...
Page 71: Configuring A Multiwan
Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router 7.2 Configuring a MultiWAN Confer with your network administrator to get values for this configuration. To configure multiWAN parameters, do the following: 1. Select the Network management area. 2.
Page 72 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router Figure 7-3. MultiWAN Interface Configuration Summary Screen. a. Do one of the following on the MultiWAN Interface Configuration Summary Screen: i. Select the Edit button to revise an interface for this multiWAN. ii.
Page 73 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router CAUTION: The number of IP addresses required to respond to pings must be no larger than the number of IP addresses entered in the Test IP field. Otherwise, the interface will always be considered inactive. •...
Page 74 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router 5. Select the Members tab. • The MultiWAN Member Configuration Summary Screen is displayed (Figure 7-6). On this screen, you can assign metrics and weights to develop loadsharing within the multiWAN. Figure 7-6.
Page 75 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router b. On the MultiWAN Member Configuration Detail Screen, enter values to develop a weighted member set. Enter values for the following fields: • Interface (required field): Type an interface name for this multiWAN member to use. The interface name must be listed under Available Interfaces in the lower portion of the screen.
Page 76 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router a. Do one of the following on the MultiWAN Policy Configuration Summary Screen: i. Select an Edit button to revise a policy. ii. Type a policy name in the box to the left of the Add button, and select that button to add a policy. NOTE: If you try to add a policy that uses a name already listed, the screen will blank the entry and will wait for a new name.
Page 77 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router Figure 7-10. MultiWAN Rule Configuration Summary Screen. a. Do one of the following on the MultiWAN Rule Configuration Summary Screen: i. Select an Edit button to revise a rule for the multiWAN. ii.
Page 78 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router • Source Port (originating port, whether outbound or inbound): Type a port range. You may also type a single port number, or this field may be left blank. •...
Page 79 Chapter 7: Configuring a MultiWAN for the WRT4000 Series Cellular Wireless Router NOTE: The rules test uses a top-down matching routine: i. When a packet enters the WRT4000 Series Cellular Wireless Router, the packet’s header information is tested against the first rule in the list.
Page 80: Virtual Private Networks
Chapter 8: Virtual Private Networks 8. Virtual Private Networks One of the principal features of routers is their support of virtual private networks (VPNs). This document discusses transmission security, VPNs, and how the WRT4000 Series Cellular Wireless Router sets up and uses a VPN connection. A VPN is a secure encrypted transmission between two or more private endpoints over a public network.
Page 81 Chapter 8: Virtual Private Networks Figure 8-1. List of Configured IPsec VPN Tunnels. 2. Review the configured VPN tunnels. NOTE: In the VPN tunnel configuration screens, “left” indicates “local” (that is, it indicates the WRT4000 Series Cellular Wireless Router) and “right” indicates “remote” (the device at the other end of the connection). 3.
Page 82 Chapter 8: Virtual Private Networks 4. Configure or revise the settings for the VPN tunnel. Confer with your network administrator for values that the VPN tunnel will use. • The following are sample values: CAUTION: Do not use these values. They are shown here only as examples of entries. Confer with your network administrator for IPsec VPN values.
Page 83 Chapter 8: Virtual Private Networks Figure 8-3. List of Configured IPsec VPN Tunnels Including the Tunnel Named Tunnel 01. 6. To configure IPsec for the WRT4000 Series Cellular Wireless Router, select the Edit button at the far right of the row under IPsec Defaults.
Page 84 Chapter 8: Virtual Private Networks • The screen for Configuring IPsec Defaults is displayed (Figure 8-4). Figure 8-4. Configuring IPsec Defaults. NOTE: Confer with your network administrator to determine the settings for the WRT4000 Series Cellular Wireless Router’s IPsec VPN connections. Make sure you select options that are compatible with the version of the Internet Key Exchange (IKEv1 or IKEv2) that you want to use.
Page 85: Starting The Tunnel
Chapter 8: Virtual Private Networks - IKE Encryption Protocol: 3DES - IKE Authentication Protocol: SHA1 - IKE DH [Diffie–Hellman] Group: Group2 • Phase 2 (uses perfect forward secrecy): - ESP Encryption Protocol: 3DES - ESP Authentication Protocol: SHA1 - ESP DH [Diffie–Hellman] Group: Group2 - DPD [Dead Peer Detection] Action: Restart - DPD [Dead Peer Detection] Delay: 20s [seconds] - DPD [Dead Peer Detection] Timeout: 120s [seconds]...
Page 86 Chapter 8: Virtual Private Networks 2. On the WRT4000 Series Cellular Wireless Router management system, select the Network tab. 3. Under Networks, select the Diagnostics tab. • The Diagnostics Screen is displayed (Figure 8-9). Figure 8-5. Diagnostics Screen. 4. Look at the ping set-up area on the left of the screen (Figure 8-10), under the heading Network Utilities. blackbox.com Figure 8-6.
Page 87: Tracking Vpn Connections
Chapter 8: Virtual Private Networks • If the ping is successful, the screen displays ping statistics, indicating that the VPN tunnel is active (Figure 8-11). Figure 8-7. Messages Showing Successful Ping. • If the ping is unsuccessful, the screen indicates that no acknowledgments were returned. That means that there is no communication (Figure 8-12).
Page 88 Chapter 8: Virtual Private Networks Figure 8-9. List of VPN Tunnel Configuration Scripts. 2. Select Network, VPN, IPsec Status to see which IPsec VPN tunnels are up and active (Figure 8-10). Figure 8-10. Status of IPsec VPN Tunnels. 3 Select Network, VPN, Online Help to link to a site for more information about VPN tunnels (Figure 8-11). Figure 8-11.
Page 89 Chapter 8: Virtual Private Networks strongSwan UML Texts/ikev2/net2net-psk Test ikev2/net2net-psk Description A connection between the subnets behind the gateways moon and sun is set up. The authentication is based on Preshared Keys (PSK). When the IP tunnel is successfully established, leftfirewall=yes automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
Page 90: Tracking General Vpn Activity
Chapter 8: Virtual Private Networks 5. Select the second link shown in Figure 8-11 to see a StrongSwan page that discusses VPN tunnel configuration (Figure 8-13). Figure 8-13. Web Page for StrongSwan General Connection Parameters (Partial Display). 8.2.2.2 Tracking General VPN Activity 1.
Page 91 Chapter 8: Virtual Private Networks Figure 8-14. System Log (Partial Display). NOTE: The System Log is live; it shows activity up to the second the second that you open it. Although the file continues recording information while it is open, it will not shownew information until you refresh the browser window. The file is not permanent;...
Page 92: Vpn Basics
Chapter 8: Virtual Private Networks 8.3 VPN Basics This section discusses basic principles and operations in Virtual Private Networks. A VPN device encapsulates information into IP packets, and can perform as a VPN gateway over public networks that use IP. As a VPN gateway, a VPN device can perform IPsec tunnel initiation, IPsec tunnel termination, and IPsec passthrough.
Page 93: A Simple Virtual Private Network
Source endpoint’s internal IP address internal IP address Data Packet A Packet B Packet C encryption encryption encryption Packets exiting WRT4001A #1 toward terminal 4.4.4.2 Packet AA Packet BB Packet CC Encrypted Source gateway’s information internal IP address Destination gateway’s internal IP address Figure 8-16.
Page 94: Tunnel Modes
Chapter 8: Virtual Private Networks 8.3.2 Tunnel Modes The WRT4000 Series Cellular Wireless Router supports the following modes for VPN tunnels: • Tunnel Initiation • Tunnel Termination • Tunnel Passthrough 8.3.2.1 Tunnel Initiation The WRT4000 Series Cellular Wireless Router can initiate a VPN tunnel, using IKEv1 or IKEv2, to any other IPsec compliant VPN gateway.
Page 95: Tunnel Passthrough
Chapter 8: Virtual Private Networks (1.1.1.x) WRT4001A PC 1 1.1.1.1 User x (PC) 2.2.2.1 PC 2 modem Tunnel over IP Internet (IP Network) Figure 8-17. WRT4000 Series Cellular Wireless Router Terminating Tunnel from VPN Client. Table 8-9 lists sample parameters to support tunnel termination for a remote VPN user.
Page 96: Tunnel Support
VPN packets. Then the router initiates a tunnel to the VPN host, and passes the client’s packets to the VPN host. (Figure 8-18 shows this tunnel as a black dotted line.) Tunnel switching also hides the VPN client’s IP address. (1.1.1.x) WRT4001A PC 1 1.1.1.1 User x (PC) 2.2.2.1...
Page 97: Split Tunneling
Chapter 8: Virtual Private Networks 8.3.3.3 Split Tunneling The WRT4000 Series Cellular Wireless Router can route VPN traffic through VPN tunnels and can route non-VPN traffic outside these tunnels, on the same line. The router uses the IP policy table to determine whether to route traffic through or outside a VPN tunnel.
Page 98: Ike Version 2
Chapter 8: Virtual Private Networks IKE Version 1 Details IKEv1 maintains perfect forward secrecy in the way it performs the following: • IKE uses a Diffie-Hellman (DH) exchange to set up phase 1. (A DH exchange protects the identities of the originator and the recipient.) Phase 1 can use main mode or aggressive mode (but not both).
Page 99 Chapter 8: Virtual Private Networks Extensible Authentication Protocol The Extensible Authentication Protocol (EAP) defines message formats used in IKEv2. EAP for IKEv2 is described in IETF RFC 5106. NOTE: EAP is a format protocol; it is not a transmission protocol. IKEv2 defines the way that it transmits the EAP format. EAP Authentication IKEv2 uses EAP in providing authentication and establishing keys.
Page 100 Chapter 8: Virtual Private Networks Overview of IKEv2 Exchanges Phase 1 does the following: 1. The first exchange pair (IKE_SA_INIT) sets up the Security Association (IKE_SA). 2. The second exchange pair (IKE_AUTH) sets up the following: • The authentication method •...
Page 101 Chapter 8: Virtual Private Networks 2. The second exchange pair (IKE_AUTH) transmits identities, demonstrates knowledge of secrets corresponding to identities, and establishes the security association (SA, using AH or ESP) for the first CHILD_SA, as shown in substep a and substep b. a.
Page 102: Developing A Virtual Private Network
Chapter 8: Virtual Private Networks 8.4 Developing a Virtual Private Network Table 8-1. Information Required to Configure the WRT4000 Series Cellular Wireless Router for VPNs (Sheet 1 of 2). Item Central Site Remote Site WAN IP Address Usually a public IP address supplied by Supplied by the service provider, e.g., 65.x.x.72.
Page 103 Chapter 8: Virtual Private Networks The IP Policy Table must include a field naming the profile used in the policy. In Table 8-2, this is the field VPN Profile Used. The value in this field cross-references the profile’s configuration (in a VPN Profile Table). Table 8-2.
Page 104: Automatic Keying
Chapter 8: Virtual Private Networks 1. A VPN Profile Table includes all records. When the user specifies the type of keying the profile will use, the WRT4000 Series Cellular Wireless Router presents for configuration only the fields that apply to the specified keying. (Table 5-4 presents param- eters for autokeying.) 2.
Page 105: Sample Configuration For A Remote User
Chapter 8: Virtual Private Networks Table 8-5. Sample IKEv1 Phase 1 Proposal. Sample Fields Sample Values Authentication mode preshared Diffie–Hellman (DH) group group 2 Encryption DES, 3DES Authentication HMAC-MD5, HMAC-SHA1 Lifetime 1–100 units Lifetime units seconds, minutes, hours, days 1. This sample proposal is tunnel-specific, not session-specific. 2.
Page 106 Chapter 8: Virtual Private Networks Table 8-8. Sample Tunnel User Table. Fields Values Profile Name profile 2 Authentication Mode aggressive Keying auto-IKE Local User ID 1.1.1.1 Gateway 3.3.3.1 Preshared Key ******** Phase 1, Proposal 1 PRE-G2-DES-MD5 Phase 1, Proposal 2 VSA-G2-3DES-SHA Phase 2, Proposal 1 STD-G2-3DES-MD5...
Page 107: Monitoring The Wrt4000 Router
Chapter 9: Monitoring the WRT4000 Router 9. Monitoring the WRT4000 Router The WRT4000 Series Cellular Wireless Router provides wireless and cabled connections to a local area network (LAN) and to local and remote devices. Make sure you have performed the procedure in Section 4.1.3, Logging In. Also review Chapter 4, Configuration, for information on setting up your WRT4000 Series Cellular Wireless Router for its functions, uses, and purposes in the network.
Page 108: Collection Of Statistics
Chapter 9: Monitoring the WRT4000 Router NOTE: You can also monitor information by viewing configuration screens. On those screens, you can make changes in the configuration if they are needed. See Chapter 4, Configuring General Settings. CAUTION: Always consult your network administrator before changing information. Screens for monitoring the WRT4000 Series Cellular Wireless Router follow.
Page 109 Chapter 9: Monitoring the WRT4000 Router Figure 9-4. Statistics Collectd Settings screen. 1. On the Statistics Collectd Settings screen (Figure 9-4), select Network Plugins; then select Interfaces. • The Statistics Interface Plug-In Configuration screen (Figure 9-5) is displayed. Figure 9-5. Statistics Interface Plug-In Configuration screen. 2.
Page 110 Chapter 9: Monitoring the WRT4000 Router Figure 9-6. Statistics Wireless Interface Plug-In Configuration screen. On the Statistics Collectd Settings Screen (Figure 9-4), select Output Plugins; then, if necessary, select RRDTool. • The Statistics Collectd Output Plug-In RRDTool Screen (Figure 9-7) is displayed. Figure 9-7.
Page 111: Graphs
Chapter 9: Monitoring the WRT4000 Router 9.1.2 Graphs The Router operating system includes graphs that provide visual depictions of trends. Use the following procedures to see graphs. • Displaying Graphs Ending at the Current Time • Displaying Graphs Beginning at the Current Time NOTE: You can configure collection of these statistics for these graphs in Collection of Statistics.
Page 112: Displaying Graphs Beginning At The Current Time
Chapter 9: Monitoring the WRT4000 Router Below the graph, labels (with colors corresponding to areas in the graph) provide a key for information. a. To see information for the past hour, day, week, month, and year for another WRT4000 Series Cellular Wireless Router in the network, do the following: i In the device name field (under the page heading Statistics in Figure 9-11), use the pulldown menu to select the router whose statistics you wish to review.
Page 113 Chapter 9: Monitoring the WRT4000 Router Figure 9-13. WRT4000 Series Cellular Wireless Router realtime performance graph. This screen depicts all traffic through the WRT4000 Series Cellular Wireless Router in real time (that is, as that traffic occurs). Below the graph, labels (underscored with colors corresponding to areas in the graph) provide quick information for the current Load, the mean Average, and the Peak traffic for: •...
Page 114 Chapter 9: Monitoring the WRT4000 Router 4. Select the Traffic detail tab. a. If necessary, select the br pan detail area. • The WRT4000 Series Cellular Wireless Router realtime performance graph of LAN bridge traffic is displayed (Figure 9-15). Figure 9-15. WRT4000 Series Cellular Wireless Router realtime performance graph of LAN Bridge Traffic. b.
Page 115 Chapter 9: Monitoring the WRT4000 Router Figure 9-17. WRT4000 Series Cellular Wireless Router Realtime Performance Graph of Traffic over a Single LAN Port. 5. Select the Connections detail tab. • The WRT4000 Series Cellular Wireless Router Realtime Performance Graph of Network Connections is displayed (Figure 9-18). Figure 9-18.
Page 116: Routing Information
Chapter 9: Monitoring the WRT4000 Router 9.1.3 Routing Information Figure 9-19 (Status, Routes) displays the Address Resolution Protocol (ARP) Table and the IP routes for ports on the WRT4000 Series Cellular Wireless Router. Figure 9-19. WRT4000 Series Cellular Wireless Router Status Routes. 9.1.4 Pings and Other Network Diagnostics Use the WRT4000 Series Cellular Wireless Router Diagnostics Screen (Figure 9-20) to use a ping, route tracing, or nslookup to test or resolve the WRT4000 Series Cellular Wireless Router’s connection.
Page 117 Chapter 9: Monitoring the WRT4000 Router blackbox.com Figure 9-21. Ping Set-Up Area (Detail of Diagnostics Screen). 4. In the top field, enter the ping destination. NOTE: The destination can be entered as an IP address or as a URL (a website path and name). 5.
Page 118: Firewall Statistics
Chapter 9: Monitoring the WRT4000 Router 9.1.5 Firewall Statistics Select Status, Firewall to see the WRT4000 Series Cellular Wireless Router’s firewall configuration. NOTE: The WRT4000 Series Cellular Wireless Router Firewall Status Screen (Figure 9-24 through Figure 9-25) is a single screen that you can scroll through;...
Page 119: System Processes
Chapter 9: Monitoring the WRT4000 Router 9.1.6 System Processes Select Status, Processes to see the operating system processes that are running (Figure 9-26). Figure 9-26. WRT4000 Series Cellular Wireless Router System Processes. 724-746-5500 | blackbox.com Page 119...
Page 120: Logs
Chapter 9: Monitoring the WRT4000 Router 9.1.7 Logs You can review information logged by the system. See Figure 9-27, Kernel Log (Part 1 of 3), through Figure 9-29, Kernel Log (Part 3 of 3), and Figure 9-30, System Log (Part 1 of 2), through Figure 9-31, System Log (Part 2 of 2). Figure 9-27.
Page 121 Chapter 9: Monitoring the WRT4000 Router Figure 9-28. Kernel Log (Part 2 of 3) Sample; Partial Listing). Figure 9-29. Kernel Log (Part 3 of 3) Sample; Partial Listing). 724-746-5500 | blackbox.com Page 121...
Page 122 Chapter 9: Monitoring the WRT4000 Router Figure 9-30. System Log (Part 1 of 2) Sample; Partial Listing). 724-746-5500 | blackbox.com Page 122...
Page 123 Chapter 9: Monitoring the WRT4000 Router Figure 9-31. System Log (Part 2 of 2) Sample; Partial Listing). 724-746-5500 | blackbox.com Page 123...
Page 124: Appendix A. Setting The Wrt4000 Series Cellular Wireless Router's Apn
Appendix A: Setting the WRT4000 Cellular Wireless Router’s APN Appendix A. Setting the WRT4000 Series Cellular Wireless Router’s APN This section describes how to set the WRT4000 Series Cellular Wireless Router’s Access Point Name (APN) for use in a private cellular wireless network.
Page 125 Appendix A: Setting the WRT4000 Cellular Wireless Router’s APN c. Then, at the prompt, type the following command: at+cgdcont? • The Access Point Name is displayed. 724-746-5500 | blackbox.com Page 125...
Page 126: Appendix B. Glossary
Appendix B: Glossary Appendix B. Glossary 3DES: See Triple Data Encryption Standard. access point (AP): A device that provides access (connection) to a wireless network. NOTE: Some access points also have a connection to a wired network (in addition to a connection to a wireless network). address translation: Conversion of an IP address to another IP address.
Page 127 Appendix B: Glossary CISPR: See Special International Committee on Radio Interference. class of service (COS, CoS): A field in the packet’s IP header that specifies traffic priorities. COS operates at the data-link layer (layer 2) of the protocol stack. Also see Differentiated Services, quality of service, type of service. code-division multiple access, code-division multiplexing (CDMA, CDM): A wireless technology that uses spread-spectrum communication.
Page 128 Appendix B: Glossary critical infrastructure protection (CIP): A program to prevent and respond to threats to the critical infrastructure of a locality, region, or nation. CIP programs are designed to defend against damage or destruction from natural disasters, accidents, attacks, and similar events.
Page 129 Appendix B: Glossary EAP: See Extensible Authentication Protocol. ear and mouth (E&M): See earth and magneto. earth and magneto (ground and battery): E&M Signaling leads, traditionally used in the North American telecommunications industry, on a voice tieline. This supervisory line signaling uses separate leads, called the E lead (earth, ground) and the M lead (magneto, battery).
Page 130 Appendix B: Glossary fiber optic network: A network that uses light pulses for data transmission. Advantages of fiber optic networks include high speed, high reliability, long distance without significant degradation, no electromagnetic interference or radiofrequency interfer- ence, and high security. Also see optical fiber. FIPS: See Federal Information Processing Standard.
Page 131 Appendix B: Glossary high-speed packet access (HSPA): A third-generation group of protocols, based on the Universal Mobile Telecommunications System (UMTS). HSPA provides high speed, high data capacity, and high reliability for packet transmission. Also see high-speed downlink packet access. HMAC: See Hashed Message Authentication Code. HSDPA: See high-speed downlink packet access.
Page 132 Appendix B: Glossary key pair: An encryption set used in asymmetric encryption. The key pair comprises a private key and its counterpart public key. NOTE: Only the holder of the private key knows the complete key pair. LAN: See local area network. local area network (LAN): A group of computers, routers, and other electronic devices in the same location and on the same IP network.
Page 133 Appendix B: Glossary offsite connection to office: See teleworking. optical fiber: A solid glass or plastic fiber that carries light pulses for fiber optic networks. Advantages of optical fiber include high speed, high reliability, ability to send transmissions over long distances without significant degradation, immunity to electro- magnetic interference and radiofrequency interference, and high security.
Page 134 Appendix B: Glossary public-key cryptography (PKC): See asymmetric encryption. public switched telephone system (PSTN): The global network of the world’s public telephone networks. The PSTN’s implementation of ITU-T standards for connection and for telephone numbering makes it possible to call any telephone from any- where in the world.
Page 135 Appendix B: Glossary RSA: See Rivest–Shamir–Adleman algorithm. SA: See security association. secret key (Also called pre-shared key or shared key.): A key used in symmetric encryption. The key can be pre-shared, requiring a trusted delivery mechanism, or can be sent via combined cryptography. NOTE: A secret key is not a generated shared secret.
Page 136 Appendix B: Glossary Special International Committee on Radio Interference (CISPR): A committee that sets standards for controlling interference from electromagnetic emissions. CISPR is part of the International Electrotechnical Commission (IEC). NOTE: The acronym CISPR is from the French name for the committee, Comité international spécial des perturbations radioélectriques.
Page 137 Appendix B: Glossary transport mode: A mode in which the endpoints of an IPsec VPN connection perform their own encryption. The VPN gateway functions solely as the transport, encapsulating (thus protecting) the upper layer payload and reusing the IP header. Compare main mode, aggressive mode, quick mode.
Page 138 Appendix B: Glossary very-small-apertureterminal (VSAT): A small satellite dish, ranging from 2 ft. to 15 ft. (0.6 m to 4.6 m) in diameter. The size of the VSAT depends on the site and uses. The principal advantage in using VSATs is that a network can be developed without reliance on landlines, permitting a branch site to be placed where it is needed, no matter how remote.
Page 139 Appendix B: Glossary weighting: Adding emphasis to some data in order to make properties or relationships more apparent. For example, a criterion under study can be given priority by weighting it. This allows the effect of the criterion to be better analyzed and understood. Also see psophometric weighting.
Page 140: Appendix C. Basic Safety Guidelines
Appendix C: Basic Safety Guidelines Appendix C. Basic Safety Guidelines Always observe good, customary safety practices and precautions when handling or using electrical or electronic equipment. These practices include but are not limited to the items described in this document. In addition, review good safety practices recommended by your organization.
Page 141 NOTES 724-746-5500 | blackbox.com Page 141...
Page 142 NOTES 724-746-5500 | blackbox.com Page 142...
Page 143 NOTES 724-746-5500 | blackbox.com Page 143...
Page 144 About Black Box Black Box provides an extensive range of networking and infrastructure products. You’ll find everything from cabinets and racks and power and surge protection products to media converters and Ethernet switches all supported by free, live 24/7 Tech support available in 60 seconds or less.

This manual is also suitable for:

Wrt4011a Wrt4000-din Wrt4002a Wrt4012a Wrt4002a-dc Wrt4000-pm ... Show all

Black Box WRT4001A User Manual

1 Specifications

2 Overview

3 Installation

4 Configuration-General Settings

5 Configuring the Serial Ports

6 Configuring Chassis Ports

7 Configuring a Multiwan for the WRT4000 Series Cellular Wireless Router

8 Virtual Private Networks

9 Monitoring the WRT4000 Router

Appendix A. Setting the WRT4000 Series Cellular Wireless Router's APN

Appendix B. Glossary

Appendix C. Basic Safety Guidelines

Quick Links

Related Manuals for Black Box WRT4001A

Summary of Contents for Black Box WRT4001A

This manual is also suitable for:

Table of Contents