i-MO 540 Series Product Installation Manual

Bonding router
Hide thumbs Also See for 540 Series:
Table of Contents

Advertisement

Product Installation Manual
i-MO 540 Series
Bonding Router
Installation Manual
for the i-MO 540 Series Appliance

Advertisement

Table of Contents
loading

Summary of Contents for i-MO 540 Series

  • Page 1 Product Installation Manual i-MO 540 Series Bonding Router Installation Manual for the i-MO 540 Series Appliance...
  • Page 2: Table Of Contents

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Content Content ................................2 I-MO Appliance Identification Guide ........................4 General Safety Guidelines for EMS Hardware Equipment ................5 Installation Safety Guidelines and Warnings ..................... 5 Rack-Mounting Requirements (Optional) ...................... 5 Operating Temperature Warning ........................
  • Page 3 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Optional WiFi Radio Aerial........................... 30 Appendix B - Optional 3G Radio Component ....................31 External Installation ............................. 31 Appendix C ..............................33 Access Point Name File..........................33 Appendix D ..............................34 Configuration File ............................
  • Page 4: I-Mo Appliance Identification Guide

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version I-MO Appliance Identification Guide The following diagram shows the basic and optional i-MO hardware components. ELECTRONIC MEDIA SERVICES LIMITED Page PASSFIELD BUSINESS CENTRE, LYNCHBOROUGH ROAD, LIPHOOK, HAMPSHIRE, GU30 7SB, UK...
  • Page 5: General Safety Guidelines For Ems Hardware Equipment

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version General Safety Guidelines for EMS Hardware Equipment The following guidelines help ensure your safety and protect the hardware equipment from damage. The list of guidelines might not address all potentially hazardous situations in your working environment, so be alert and exercise good judgment at all times.
  • Page 6: Operating Temperature Warning

    AC Power Electrical Safety Guidelines The i-MO requires an AC supply of 100-240Volts, 50/60Hz and can draw a current of up to 2 Amps. i-MO routers are shipped with a three-wire electrical cord with a grounding-type plug that fits only a grounding-type power outlet.
  • Page 7: Hardware Installation Guide

    2) Attach WiFi antennas (optional) The i-MO appliance is supplied with a WiFi interface. This can be enabled on request at time of order. If the WiFi interface is enabled install the two antennas on the aerial connectors numbered 4 and 5 as shown below.
  • Page 8: Attach Network Cables (Optional)

    Note: Connectors should be touch tight only! Do not over tighten. 4) Attach network cables (optional) The i-MO appliance provides six Ethernet ports at the rear. Each of these can be individually configured as WAN or LAN ports. Network cables (not provided) can be connected as shown below. The default configuration is all ports configured for LAN usage (6 port network hub).
  • Page 9: Power Cable

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version • Note: Please ensure you insert the SIM cards carefully in their slots and ensure that they are pressed in as illustrated above • Note: Up to six SIMs can be inserted - starting with slots SIM 1, SIM 3 and SIM 5 6) Power cable The appliance is powered by a standard 200~240V supply.
  • Page 10: Power Switch

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version 7) Power switch Mains power to the unit is supplied via a power input at the rear of the unit as shown below. To switch the unit on the power switch should be set to the on position (1).
  • Page 11: Status Display

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version 7) Status display The LCD display shows the status of up to three mobile connections plus the overall status of the link. Link Status This shows the overall status of the link which can either be UP or DOWN. When the link is DOWN the appliance is not able to send or receive data.
  • Page 12: Web Configuration

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Web Configuration The i-MO appliance can easily be configured and managed using the web interface. Enter the default url: http://192.168.0.1/ and select the "Login" option from the top right hand side of the page.
  • Page 13: My Profile

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version My Profile The "My profile" option allows you to change your password. There is no mechanism to recover a forgotten password and if the password has been forgotten then the factory reset is required to restore the default password.
  • Page 14: Log Out

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Log out Network Section Configuration Edit Configuration The configuration of the network is managed using the Network Configuration menu and the associated tabbed pages. ELECTRONIC MEDIA SERVICES LIMITED Page PASSFIELD BUSINESS CENTRE, LYNCHBOROUGH ROAD, LIPHOOK, HAMPSHIRE, GU30 7SB, UK...
  • Page 15 Interfaces Tab (Image 1) The i-MO 310 and 540 appliances have 6 Gb Ethernet ports plus an optional wireless 802.11 b/g/n wireless interface. The GbE interfaces are named eth0 through eth5 and the wireless interface is named wlan0. All of the physical devices can be individually configured and can be assigned to internal, dmz, or external zones in the firewall.
  • Page 16 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version The WiFi password (shared key) must be between 8 and 63 characters long and can contain any printable character. ELECTRONIC MEDIA SERVICES LIMITED Page PASSFIELD BUSINESS CENTRE, LYNCHBOROUGH ROAD, LIPHOOK, HAMPSHIRE, GU30 7SB, UK...
  • Page 17 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Interfaces Tab (Image 2) Bonding Tab The “Bonding” tab configures a single tunnel that is used for bonding multiple physical links into a single logical link. More complicated bonding configurations (e.g. over WAN links) can configure using the...
  • Page 18 The protocol version allows for communication with Concentrators running different i-MO releases. It should normally be configured for a value of 2. The Client IP is the internal endpoint of the tunnel on the i-MO appliance which is used on the Concentrator for routing and must be unique.
  • Page 19 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version The NAT option enables masquerading or NATting. The “Masqueraded Networks” rule defines which internal computers/networks are allowed to access the internet via masquerading. The format of the rule is a space separated list of: <source network>[,<destination network>,<protocol>[,port[:port]]...
  • Page 20 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version With this option you can allow access to e.g. your mail server. The machines must have valid public IP addresses. The format of the rule is a space separated list of: <source network>,<destination network>[,protocol[,destination port[,flags]]]...
  • Page 21 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version VPN Subnets Tab The local and remote subnet for the VPN tunnel and should be CIDRS, for example: 172.16.0.0/12 10.0.0.0/8 Advanced VPN Settings Tab Normally use can choose the “auto” option for all the settings on this page. However if the VPN does not form then you may need to specify the Phase 1 and/or Phase 2 parameters.
  • Page 22 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version If the VPN forms but fails after a few hours then check the that Phase 1 and Phase 2 lifetimes match those of the remote end. The default values if auto is selected is 28800s (8 hours for Phase 1 and 3600s (1 hour) for Phase 2.
  • Page 23: Nas

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version File On the File page you can down load the current configuration file and upload a new configuration file. Appendix D for description of the configuration file. You can also download and upload an edited Access Point Name (APN) file. The APN is like a “telephone number”...
  • Page 24: Command Line Interface

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version This option is only valid if the i-MO has one or more Hard Drives installed that have been initialised with the RAID command. See the following chapter for the command line utilities.
  • Page 25 Typically this is used to limit access to SSH from external IP addresses. For example if the public IP address of your network was 195.74.68.1 then you might use the following to restrict access only to that address: hosts.allow...
  • Page 26 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version This will permit access from any private IP address (RFC 1918) plus 195.74.68.1 and will deny access from any other address. The CLI supports command history recall and editing. The up arrow key will bring back previous command lines and left / right arrows can be used to position the cursor for command editing.
  • Page 27 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version The usage is: ~ $ showlog -h Usage: showlog [log name] -t, --tail=+/-LINES see tail of file -f, --tailf continuous tail of file -c, --cat 'cat' entire file -l, --less...
  • Page 28: Appendix A - Optional Wifi Radio Component

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Appendix A - Optional WiFi Radio Component Warnings When using the device, ensure that the antenna of the device is at least 1 cm away from all persons. Do not use the device where using wireless devices is prohibited or may cause interference or danger.
  • Page 29: Certification Information (Sar)

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version • Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. • Consult the dealer or an experienced radio/TV technician for help.
  • Page 30: Optional Wifi Radio Aerial

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Optional WiFi Radio Aerial Technical Data GSM • GSM 850/ 900: 824 - 960 MHz • GSM 1800: 1710 - 1990 MHz • UMTS: 2.1 GHz • WLAN: 2.4 GHz •...
  • Page 31: Appendix B - Optional 3G Radio Component

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Appendix B - Optional 3G Radio Component Two optional 3G radio components may be attached to the i-MO to provide a 3G signal. External Aerial Type A External Aerial Type B...
  • Page 32 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version If any part of the antenna system should come in contact with a power line, don’t touch it or try to remove it yourself. Call your local power company. They will remove it safely. If an accident should occur with the power lines call for qualified emergency help immediately.
  • Page 33: Access Point Name File

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Appendix C Access Point Name File The Access Point Name file defines the APN that will be used to set-up a data call and also the network name that is displayed on the front panel.
  • Page 34: Configuration File

    The [lan] section configures the physical and logical networks interfaces. The i-MO 310 and 540 appliances have 6 Gb Ethernet ports plus an optional wireless 802.11 b/g/n wireless interface. The GbE interfaces are named eth0 through eth5 and the wireless interface is named wlan0.
  • Page 35 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version All of the physical devices can be individually configured and can be assigned to internal, dmz, or external zones in the firewall. One or more physical interfaces can be combined into a single logical interface (br0). The logical interface is like an Ethernet switch and MAC address to physical port mappings are typically remembered for up to 5 minutes before traffic for a given address is broadcast to all ports again.
  • Page 36 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version eth3dhcp="yes" eth3dhcpstartip="192.168.100.50" eth3dhcpendip="192.168.100.99" Ethernet port 4 is configured as DMZ zone: eth4enabled="yes" eth4bridging="no" # Add this port to the firewall dmz zone eth4firewallzone="dmz" eth4ip="172.16.0.1/24" Ethernet port 5 is configured as a WAN port and placed in the external zone: eth5enabled="yes"...
  • Page 37 The protocol version allows for communication with Concentrators running different i-MO releases. It should normally be configured for a value of 2. The IP is the internal endpoint of the tunnel on the i-MO appliance which is used on the Concentrator for routing and must be unique.
  • Page 38 The [vpn] section configures one or more IPSEC tunnels. The following example shows configuring an IPSEC VPN from the public IP of the i-MO appliance (195.74.68.12) to public IP of the VPN server (100.68.86.56). Two tunnels will be created for for each of the remote subnets 172.16.0.0/12 and 10.0.0.8/8.
  • Page 39 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version sharedkey="imovpnsharedsecret" # Do not autonegotiate connect, only accept the options set phase1_combined_encrypt_hashing_dhmode_is_auto="no" # Set the phase 1 encryption to 3des. Available options are 3des or aes phase1encrypt="3des" # Set the phase 1 hash to md5, available options are mds or sha1 phase1hashing="md5"...
  • Page 40 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version The [mobilerouter] section sets the options for the router process that manages the available cellular connec- tions. The status of a link is tested by sending an ICMP ping to the "heartbeataddress" which can be either a fully qualified domain name or an IP address.
  • Page 41 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version # device must defined to enable this interface wan0device="eth1" wan0gateway="1.2.3.6" # Number of seconds between update wan0heartbeatrefresh="10" # Number of seconds that the interface must down before being marked as unavailable wan0heartbeatperiod="30"...
  • Page 42: Example 1. 1 X Wan Link, 1 X Lte For Failover Without A Concentrator

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Example 1. 1 x WAN Link, 1 X LTE for failover without a Concentrator This configuration provides a resilient Internet connection. In the event of the primary (WAN) link failing all traffic is routed via the secondary (LTE) link.
  • Page 43 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version eth1bridging="yes" eth2enabled="yes" eth2bridging="yes" eth3enabled="yes" eth3bridging="yes" eth4enabled="yes" eth4bridging="yes" wlan0enabled="yes" # Enable WiFi and add to bridge interface wlan0bridging="yes" wlan0wifissid="imo" # Set SSID wlan0wifiwpakey="12345678" # Set WPA key – must be 8-63 characters long wlan0wifichannel="manual"...
  • Page 44 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version mob0heartbeatperiod="50" # If heartbeat address is unavailable for # “heartbeatperiod” seconds it will be # marked as down mob0hearbeataddress="8.8.4.4" # The address of the heartbeat device # This address must respond to ICMP pings [vpn] enabled="no"...
  • Page 45: Example 2. 1 X Wan Link, 1 X Lte For Failover With A Concentrator

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Example 2. 1 x Wan Link, 1 X LTE for failover with a Concentrator This configuration provides a resilient private connection between the remote site and the head-office net- work. In the event of the primary (WAN) link failing all traffic is routed via the secondary (LTE) link.
  • Page 46 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version br0dhcpendip="192.168.0.199" dhcpdnsserver1="10.0.0.16" # Use head office private DNS servers dhcpdnsserver2="10.0.0.17" dhcpdnsdomain="mydomain.com" # Set default DHCP domain eth0enabled="yes" # Enable ports 0–4 and add to bridge interface eth0bridging="yes" eth1enabled="yes" eth1bridging="yes" eth2enabled="yes"...
  • Page 47 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version [wan] enabled="yes" # Enable WAN router wan0device="eth5" # Device for this port wan0gateway="195.74.68.1" # Gateway address wan0heartbeatrefresh="10" # Status of the link will be checked # every “heartbeatrefresh” seconds wan0heartbeatperiod="30"...
  • Page 48: Example 3. 1 X Wan Link, 1 X Lte For Failover With A Concentrator & Split Routing

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Example 3. 1 x WAN Link, 1 X LTE for failover with a Concentrator & split routing This configuration provides a resilient private connection between the remote site and the head-office net- work.
  • Page 49 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version br0firewallzone="internal" # Place interface in internal firewall zone br0ip="192.168.0.1/24" # Set IP address/netmask of bridge interface br0dhcp="yes" # Enable DHCP service on interface br0dhcpstartip="192.168.0.100" # Set start and end address for DHCP br0dhcpendip="192.168.0.199"...
  • Page 50 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version tunnel0bonding="no" # Channel bonding off # this tunnel is only used for failover tunnel0networks="10.0.0.0/24" # Subnets to route over the tunnel [wan] enabled="yes" # Enable WAN router wan0device="eth5" # Device for this port wan0gateway="195.74.68.1"...
  • Page 51: Configuration Options Reference

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Appendix E Configuration Options Reference [sys] Variable Required Default Notes hostname imo.mydomain.com RFC 1123 compliant hostname timezone GMT/GMT+x/GMT-x (x = integer) ntpserver pool.ntp.org IP address or RFC 1123 hostname dnsserver 8.8.8.8, 8.8.4.4...
  • Page 52 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version wlan0wifiwpakey Yes unless wlan0 disabled imo-xxxxxximo 8-63 printable ASCII characters wlan0wifichannel Yes unless wlan0 disabled manual manual wlan0wifichannelvalue Yes unless wlan0 disabled 1-13 (1, 6 or 11 preferred) wlan0wifirate Yes unless wlan0 disabled...
  • Page 53 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version [wan] Variable Required Default Notes enabled yes/no heartbeatrefresh Integer 5-60 heartbeatperiod Integer 10-600 tunnel a-z string wan[0-9]device If enabled eth1 Interface name wan[0-9]gateway If enabled 1.2.3.6 IP address wan[0-9]heartbeatrefresh Integer 5-60...
  • Page 54 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version [vpn] Variable Required Default Notes enabled yes/no TO BE CONFIRMED [fw] Variable Required Default Notes enabled yes/no masq yes/no masqnets If masq=yes TO BE CONFIRMED nomasqnets TO BE CONFIRMED forward...
  • Page 55: Appendix F - Disposal And Recycling Information

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Appendix F - Disposal and Recycling Information This device (and any included batteries) should not be disposed of as normal household garbage. Do not dispose of your device or batteries as unsorted municipal waste. The device (and any batteries) should be handed over to a certified collection point for recycling or proper disposal at the end of their life.
  • Page 56: Appendix G - Warranty Information

    Version Appendix G - Warranty Information EMS's Limited Warranty Statement (1-Year Warranty) Thank you for purchasing the enclosed i-MO Appliance. The product is provided with a one year limited war- ranty commencing from the date of purchase. One-Year Limited Warranty THIS PRODUCT IS PROVIDED TO YOU UNDER THE FOLLOWING TERMS AND CONDITIONS THAT CONTAIN LIMITATIONS ON WARRANTIES AND LIABILITIES AND YOUR REMEDIES.
  • Page 57 INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version This warranty gives you specific rights and you may also have other rights, which vary from jurisdiction to jurisdiction. Some jurisdictions do not allow the exclusion of implied warranties and conditions and do not permit the exclusion or limitation of certain damages.
  • Page 58: Obtaining Technical Assistance

    INSTALLATION MANUAL FOR THE EMS I-MO 540 SERIES APPLIANCE Version Obtaining Technical Assistance EMS Ltd provides www.ems-imo.com as a starting point for all technical assistance. Customers and partners can obtain documentation, troubleshooting tips, and sample configurations from online tools by using this Web Site.

Table of Contents