Global Net MRM-X3000 Installation And Configuration Manual

Hide thumbs

Table of Contents

Quick Links

Download this manual

Multi-Radio-Modem

X3000

Installation and Configuration Guide

Table of Contents

Need help?

Do you have a question about the MRM-X3000 and is the answer not in the manual?

Questions and answers

Summary of Contents for Global Net MRM-X3000

Page 1 Multi-Radio-Modem X3000 Installation and Configuration Guide...
Page 2 MRM devices, or failure of the GNCI MRM-X3000 device. Copyright ©2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, Global Net Commerce Inc. All rights reserved. Printed in Canada No part of this publication may be reproduced, stored in a retrieval system, or transmitted by any form or by any means, without the prior permission of the publisher.
Page 3 in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: ...
Page 4: About This Guide
1. About This Guide 1.1. Introduction This guide is intended to provide instruction on the physical installation of the Multi- Radio-Modem, and related devices. Additionally, this guide provides instructions and guidelines on software configuration. This guide assumes the reader is familiar with the design and configuration of Internet Protocol network devices, such as routers and switches.
Page 5: Network Components
The remote site terminal is any X.25, SDLC, 3270 BISYNC, or TCP/IP on Ethernet device. This can be, but is not limited to, ATM or POS machines, and personal computers. Note: The firmware on the MRM-X3000 supports IP protocol only.
Page 6 3DES or AES algorithms. The MRM has a built in firewall, which provides additional security from unwanted intrusion. The MRM-X3000 uses a built in 10/100 Ethernet port for TCP/IP communications. 2.3.3. GSM and CDMA Networks GSM networks are available in the United States, Canada, and many countries worldwide.
Page 7: Network Addressing
2.3.6. Host Location IPSec Tunnel Termination The IPSec tunnel termination device shown in figure 2.1 manages the IPSec tunnels to each remote MRM unit. It is responsible for maintaining keys for each remote MRM, and providing 3DES encrypted payload. Additionally, this router must be placed into this topology at a strategic location, to ensure proper IP routing to hosts and remote MRM devices.
Page 8 2.4.1.1. Area 1 IP Addressing Host Private Network The host location private IP network is the private network in which the host is located. For non-IP host communications, this network is part of the IPSec router terminating the tunnels. This network typically exists prior to an MRM deployment, and IP network addressing has been assigned by a network design engineer or administrator, typically using IP Address for private Internets as described in RFC 1918.
Page 9 addresses that are dynamically assigned are typically known to be within an IP subnet range, which is useful to know for the purposes of IPSec configurations at the host network. In the case of a private or custom APN on the GSM network, the IP address range which can be assigned to the connecting modems is tightly defined, and is a range of IP addresses which will only be assigned to modems belonging to the private APN, and thereby will only be assigned to modems belonging to a particular client.
Page 10 3. MRM-X3000 Configuration This chapter provides instruction for the configuration of the MRM for remote site operation. In order to use the MRM, a wireless service account must be established with a wireless carrier, and the MRM configured with account specific information.
Page 11 3.1.2. CDMA Preparation The CDMA service provider will provide the following for account activation: . Username . Password . Telephone Number . Activation Code . System ID (SID) Radio cards should be activated in a laptop using the carrier’s network activation software.
Page 12 3.3. Accessing the MRM for Initial Configuration The MRM unit is shipped with a default configuration, which includes a pre-defined Ethernet port, Ethernet (facing the rear of MRM, it is the leftmost Ethernet port). Figure 3.3.1 MRM Side Panels Ethernet Port DC-IN Init.
Page 13 Power on the MRM unit without the radio card inserted in the USB port, by connecting the power supply cable to AC power outlet, and to the 6 VDC receptacle on the MRM. Note: A Trendnet TU2ET100 USB-to-Ethernet adapter is required to connect through the MRM-X3000 USB port.
Page 14 MRM-X3000 Home Screen Home Screen Start Section 3.4.1 1. A summary of the MRM-X3000 operation and connectivity status can be obtained by Clicking on the GNCI logo in the upper left hand portion of the Home Screen 2. The information on the Home Page will provide WWAN/carrier connection status,...
Page 15 3.4. Configuring the MRM System Parameters This section describes the configuration of MRM system parameters. 3.4.1. Default Username and Password The default system username is “admin”, and the default system password is “gnci”. You can change the password in the Name and Password section, under the SYSTEM CONFIG heading.
Page 16 Enable Internet Access using NAT: Check this box if you would like devices connected to the MRM to be able to access the Internet using Network Address Translation. DNS Mode: Choose the DNS mode you wish to use. Other options are available from the drop-down menu.
Page 17 Press Reset/Save button to proceed to the next step. Selecting Reset resets the values in your computers browser, not the configuration values in the MRM. 3.4.2.3 IPsec VPN Settings Select the Enable IPSec VPN Tunneling check box to enable IPSec on this MRM. By default, the MRM runs IPSec with 3DES encryption, uses IKE, and PSK.
Page 18 Re-enter the PSK to validate. If the two keys entered Confirm PSK Here Blank do not match, the MRM will indicate an error. Encryption Key Timeout Lifetime of encryption key and ISAKMP SA Dead Peer Detection Default Description Use Dead Peer Detection Checked Check or uncheck box to enable /disable DPD.
Page 19: Antenna Considerations
4.1.1. Required Equipment The table below indicates the equipment required for the type of installation. Table 4.1.1 Item Description Installation Requirement Multi-Radio-Modem Base Unit Required for all installations MRM Power Supply Required for all installations CDMA Radio USB/ExpressCard Required for CDMA installations GSM Radio USB/ ExpressCard Required for GSM installations SIM Card...
Page 20: Installation Procedure
If possible, ensure the antenna is mounted on a good ground plane (ferrous metal surface). 4.2.3. Proximity to other antennas In general, avoid locating the antenna closer than 1.5 meters (5 feet) to another antenna. 4.3. Installation Procedure To install the MRM at a remote location, use the following steps: Insert the provided GSM or CDMA radio card into the ExpressCard or USB port on the side panel of the MRM.
Page 21 HTTP. To review or see an updated overview, or to go back to the overview from a different page, click on the Global Net Commerce Inc. logo at the top left of the screen. See below example, which shows a configured MRM overview on a CDMA...
Page 22 6.1.1 Network Config 6.1.1.1 Access & Firewall Check the Enable Firewall check box to enable the IP firewall on the MRM. The MRM will deny all traffic from all IP addresses except the IPSec tunnel peer, unless specified. Table 6.1.1.1 Firewall Parameter Default Description...
Page 23 6.1.2 3G WANN Setup: Selecting Reset resets the values in your computers browser, not the configuration values in the MRM. Select Reset/Save to complete the configuration.
Page 24 6.2.1 Dynamic DNS Dynamic DNS Setup: Use Dynamic DNS Provider: Select your Dynamic DNS provider from the adjacent list. Select from the drop-down menu for available options. DDNS Domain Name: Enter the domain name used by your Dynamic DNS provider. DDNS Username: Enter the appropriate DDNS Username.
Page 25 7.1.1 System Config 7.1.1.1 Name & Password MRM-X3000 Host Name 7.1.1.1 Configuring Host Name Each MRM unit has a configurable hostname, which can be up to 20 characters in length. The host name can be assigned completely at the discretion of the client.
Page 26 MRM-X3000 Authentication for RADIUS Password Configuration The Password configuration is accessed by clicking on Password located under the SYSTEM section. Click on the Name and Password Tab under the SYSTEM category on the left side of the browser screen to access this configuration.
Page 27 7.1.1.2 Configuring the Date and Time Settings The Date and Time configuration is accessed by clicking on Date and Time located under the SYSTEM section. There are three ways to set the date and time on the MRM unit. Set the date and time to the same date and time as the current date and time on the computer configuring the MRM.
Page 28 7.1.1.3 Advanced Click on the “Advanced” button under the system heading. Click on Flash Upgrade to upload new firmware to your MRM. Follow the prompts. Note: Your firmware version must be stored on your computer, with accessible file permissions.
Page 29 7.1.1.4 Flash Upgrade Screen 1. Click on the “Advanced” button under the system heading. Click on Automatic Background Pinging to generate background traffic on the data link. 2. Click on the “Advanced” button under the system heading. Click on Failsafe Configuration to designate a currently active configuration as a backup configuration in case of a misconfigured unit, you can revert back to your base configuration by pressing the INIT button located next to the power source on the...
Page 30 7.2.1 Installing New Firmware on the MRM This chapter discusses how to upgrade the firmware of the MRM. 7.2.1. Preparation In order to upgrade the MRM firmware, it is assumed that the MRM unit is already configured for IP, Bisync, or SDLC operations, and is reachable via the IP protocol, either by a locally attached Ethernet cable, or over the wireless network.
Page 31 Using your computer’s web browser, select the “Advanced” option from the “System Config” on menu at the left-hand side. The MRM-X3000 will present the “Flash Upgrade” screen (shown above in Figure 7.2.3). Enter the filename of the MRM flash file in the text field to the right of “Filename”...
Page 32 !! Warning: Do NOT power off or otherwise interrupt the MRM during this process, as this will cause permanent damage to the unit which is not covered under warranty. 7.2.4. Local Ethernet Upgrade using TFTP or FTP Table 7.2.4 shows the components required to upgrade the MRM firmware, when performing the upgrade via a locally attached Ethernet cable.
Page 33 Figure 7.2.4 shows the topology required for a successful local upgrade. Use of these instructions require a Trendnet TU2ET100 USB-to-Ethernet adapter connected between the computer to the MRM-X3000 USB port. Alternatively, computer connection with MRM-X3000 Ethernet port requires alternative IP configuration which is dependent on your carrier’s static IP or dynamic IP, which is more complicated (contact GNCI for...
Page 34 7.3.1. Local Upgrade IP addressing Select an appropriate IP address, mask, and gateway for the computer connecting to the MRM, depending on the current IP settings on the MRM Ethernet port. Example: Current MRM Ethernet IP Address 10.30.0.1 Current MRM Ethernet IP mask 255.255.255.252 Computer IP address 10.30.0.2...
Page 35 7.3.2 Local Upgrade Procedure Start TFTP or FTP server on the computer, with the new MRM flash file stored in an appropriate directory. Telnet to the MRM device, and log on to the MRM with the current username and password. From the # prompt, issue the following command: For TFTP : netflash x.x.x.x filename...
Page 36: Important Note
7.4.1. Remote Upgrade IP addressing Upgrading the firmware remotely assumes that both the MRM and the TFTP or FTP server are already configured with fixed IP addresses. Note: Some computers have built-in firewalls, which may need to be turned off or adjusted to permit FTP or TFTP traffic.
Page 37 Monitoring Config Event Logging System Log Setup System Log – Level of Detail: Select the level of detail which will be posted to the MRM’s system log. Increased detail decreases the duration of the log file. The converse is also true. Options are: Show Last Entry on Top: Check this box if you would like system log posts to be displayed in reverse chronological order (newest to oldest entries) from the top.
Page 38 Other Options: Log to Remote Server Enable Remote Logging: Check this box to enable logging to a remote server. This is usually not recommended.
Page 39 Remote Server – Level of Detail: Select the level of detail which will be posted to the remote system log. Increased detail decreases the duration of the log file. The converse is also true. Note: click on down arrows for alternative logging settings Remote Server IP Address: Enter the IP address of the remote logging server.
Page 40 Traffic Counter WWAN Interface Byte Counter [Clear Counter now] Button: Click this button to set the MRM’s Total byte counter to Zero (0). Enable Monthly Counter Reset: Check this box if you would like the byte counter to reset monthly on a given day (detailed in the next field).
Page 41 8.1.1.3 SNMP 8.1.1.3. Configuring SNMP Move to SNMP screen 8.1.1.4 SNMP Trap Configuration This section discusses the MRM’s configuration and implementation of SNMP Traps. 8.1.1.5. MRM Implementation of SNMP Setup The MRM uses SNMP Traps for reporting status and alarms. SNMP generic traps are used to report all Up/Down events for Bisync, SDLC, DSP, QLLC, Ethernet TCP/IP, and Radio Reception (RSSI) information.
Page 42: Snmp Trap Setup
SNMP OID Trap Name Version Supported .1.3.6.1.6.3.1.1.5.3 Link Down V1 & V2 .1.3.6.1.6.3.1.1.5.4 Link Up V1 & V2 Special Note for Trap 11: Trap 11 is a trap sent on a configurable time interval for reporting general status of the MRM.
Page 43 SNMP Parameter Default Description SNMP Server IP address blank Enter the IP Address of the SNMP server. Dest. is across IPSec If using IPSec, and the SNMP server is part of the host Tunnel unchecked location private IP network, this box must be checked to ensure a correct source IP address for the SNMP packet.
Page 44 CPE Monitoring You can configure the MRM-X3000 to monitor an attached IP device. Check “Enable” and enter the IP address of the device to be monitored. Note: In ATM deployments this IP address will always be the IP address of the ATM.
Page 45 9.1.1 Diagnostics 9.1.1.1 System Log 9.1.12. Accessing the System Log Click on the System Log button Under the Diagnostics Tab to display the contents of the system log. There are two System Log options available through the web interface: 1. System Log History 2.
Page 46 Port Status: 9.1.3 Accessing the Ports and Connections Screen Click on the Ports and connections button to display the current status of all physical and logical ports in the MRM. 9.1.4 Routing Tables and Firewall Status 9.1.4.1. Accessing the Routing and Firewall Screen Click on the Routing and Firewall Button to view the current routing table and firewall rules.
Page 47 9.1.5. Accessing the System Status Screen Click on the System Status Button to view the system status including running processes, memory, CPU information and interrupts. System Status...
Page 48 10.1.1. MRM Technical Specifications 10.1.1 General Table 10.1.1 shows the technical specifications of the MRM. Table 10.1.1 Interfaces 1 x 10/100M Ethernet 1 x SYNC RS-232 DB25 UP TO 128 kbps (MRM-L3000 only, with ULSSC cable) USB 2.0 Protocol Support TCP/IP BISYNC 3270 &...
Page 49: Glossary Of Acronyms
Front Panel LED’s 10.1.2 MRM-X3000 Hardware Overview Signal Strength LEDs WWAN Status LED 11. Glossary of Acronyms 1xRTT 1 x Radio Transmission Technology (CDMA) Advanced Encryption Standard Access Point Name Autonomous System ASYNC Asynchronous Border Gateway Protocol BISYNC Binary Synchronous...
Page 50: List Of Figures
Network Address Translation Non Return to Zero NRZI Non Return to Zero Inverted Network Time Protocol Organization Identifier OSPF Open Shortest Path First PCMCIA Personal Computer Memory Card International Association Pre-Shared Key QLLC Qualified Logical Link Control Radio Frequency Request for Comments RSSI Receive Signal Strength Indication Request To Send...