NetComm NTC-8000-01 User Manual
NetComm NTC-8000-01 User Manual

NetComm NTC-8000-01 User Manual

M2m multi-port network gateway

Advertisement

Quick Links

NTC-8000
User Guide
NTC-8000-01 – M2M Multi-Port Network Gateway

Advertisement

Table of Contents
loading

Summary of Contents for NetComm NTC-8000-01

  • Page 1 NTC-8000 User Guide NTC-8000-01 – M2M Multi-Port Network Gateway...
  • Page 2 Copyright© 2015 NetComm Wireless Limited. All rights reserved. The information contained herein is proprietary to NetComm Wireless Limited. No part of this document may be translated, transcribed, reproduced, in any form, or by any means without prior written consent of NetComm Wireless Limited.
  • Page 3: Table Of Contents

    NTC-8000-01 Default Settings ..............................10 Restoring factory default settings .................................. 11 Resetting to factory default condition ..............................11 Installation and Configuration of the NTC-8000-01 ........................12 Connecting via an Ethernet cable ................................. 12 Accessing the Web-based User Interface ..............................12 Status .........................................
  • Page 4: Overview

    Overview Introduction This document provides you all the information you need to set up, configure and use the NTC-8000-01 network gateway. Target Users This document is intended to be used by system integrators or experienced hardware installers who are comfortable with all aspects of IP based networking and have an understanding of wireless technologies.
  • Page 5: Product Introduction

    Product Features The NTC-8000-01 series gateway is designed to provide a secure and powerful connection to multiple devices in a broad range of applications. With an embedded 3G module, the device can connect to the speed and coverage of wireless networks, allowing broadband connectivity to remote sites, mobile vehicles and locations without a fixed broadband connection.
  • Page 6: Physical Dimensions And Indicators

    Physical Dimensions and Indicators LED Indicators The NTC-8000-01 has 6 LEDs to display the current system and connection status. Note: 3G signal strength lower than -109dBm is considered too low for data connection. When signal strength is below this level, both signal strength LEDs will stay off.
  • Page 7: Physical Dimensions

    Table 4 - Mounting Bracket Dimensions Optional Mounting Bracket (HDW-0022) The NTC-8000-01 can be put into a mounting bracket to ensure it is secured to a fixture. This mounting bracket is especially useful for installations in vehicles where extra stability is required.
  • Page 8: Interfaces

    Interfaces The following interfaces are available on the NTC-8000-01: Figure 2 - NTC-8000-01 Rear panel interfaces ITEM INTERFACE FUNCTION 3G Antenna Connectors (SMA) Connection point for the mobile broadband main and auxiliary antennas WiFi Antenna Connectors (Reverse polarity SMA) Connection point for the reverse polarity SMA female WiFi antennas Ethernet Ports 8 x 10/100 Base-TX Ethernet RJ-45 ports.
  • Page 9: Correct Wiring Of The 4-Way Mini Fit Connector

    Correct wiring of the 4-way mini fit connector The diagram below illustrates the correct wiring of the 4-way mini fit connector. Figure 3 - Correct wiring of the 4-way mini fit connector PIN NUMBER WIRE Power Ignition Ground Not used Table 6 - 4-way mini fit connector wiring UM-00006 v1.1 NTC-8000 –...
  • Page 10: Ntc-8000-01 Default Settings

    NTC-8000-01 Default Settings The following tables list the default settings for the NTC-8000-01. LAN (MANAGEMENT) IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Default Gateway: 192.168.1.1 Table 7 - LAN Management Default Settings WIFI (DOES NOT APPLY IN CLIENT MODE) SSID: Remote AP Name...
  • Page 11: Restoring Factory Default Settings

    Restoring factory default settings There might be occasions where you need to restore the factory defaults on your NTC-8000-01 such as: You have lost your username and password and are unable to log in to the web configuration page; You are asked to perform a factory reset by support staff.
  • Page 12: Installation And Configuration Of The Ntc-8000-01

    WWAN mobile broadband provider. To log in to the management console, view the status and make changes to your NTC-8000-01, please follow the steps below: Open a web browser (e.g. Internet Explorer/Firefox/Safari) and navigate to https://192.168.1.1...
  • Page 13: Status

    Status The status page provides system related information and is displayed when you login to the NTC-8000-01 management console. By default, the status page will show System Information, Ethernet Port Status, WWAN Status, IPsec Status and the 3G service connection details.
  • Page 14 The LAN, PPPoE, PPTP and IPsec statuses are hidden from view by default. To show them on the status screen, click on the respective link below the green menu bar. To view them all, click on the All Status link. Figure 6 - Status Page - LAN Details ITEM DEFINITION...
  • Page 15: Advanced Status

    Advanced Status To view further information regarding the phone module on-board the NTC-8000-01 and the mobile broadband configuration, press the “Advanced Status” button. Figure 10: Advanced Status Page UM-00006 v1.1 NTC-8000 – M2M Multi-Port Network Gateway www.netcommwireless.com...
  • Page 16 ITEM DEFINITION Phone Module The phone module name, hardware and firmware version Module Boot version The installed boot loader version of the phone module. Module PRID The Protocol ID of the phone module. System Up Time The time in hours, minutes and seconds that the gateway has been up. Provider The current connection’s mobile broadband provider.
  • Page 17: Internet Settings

    Internet Settings This section describes how to set up the gateway to initiate a mobile broadband connection, create routing rules and set up a virtual private network. Mobile Broadband Connection Click on the Internet Settings menu followed by Mobile Broadband and then the Connection menu item on the right. Figure 11 - Connection Settings To connect using a Connection profile The gateway supports multiple APN profiles;...
  • Page 18 To confirm the connection status Click on the Status menu item at the top of the page to return to the Status page. In the Mobile Broadband section, the connected profile is displayed with the Status field showing as “Up” and the IP Address field shows the current IP address that the network has allocated for the gateway.
  • Page 19 WLAN Failover Backup The WLAN Failover Backup feature of the NTC-8000-01 is designed to provide a backup mobile broadband internet connection in case the primary WLAN connection should fail. Figure 12 - WLAN Failover Settings: CONNECTION OPTION DESCRIPTION The failover function is completely disabled and the gateway always uses the WLAN connection only. The WLAN Only Mobile Broadband (MBB) connection will not be used.
  • Page 20 PPPoE The PPPoE page is used to configure a transparent PPPoE connection. This can be used to provide a bridged connection. To enable PPPoE mode, first ensure that all Mobile Broadband Connection profiles are set to Disable. To disable all Mobile Broadband Connection profiles: Click on the Internet Settings menu followed by Mobile Broadband and then the Connection menu item.
  • Page 21 Band / Provider The band settings page enables you to select which frequency band you will use for your connection and enables you to scan for available network operators in your area. Figure 14 - Band / Provider Selection You may want to do this if you’re using the gateway in a country with multiple frequency networks that may not all support HSPA. You can configure the gateway to only connect on the network frequencies that suit your requirements.
  • Page 22 SIM Security In most cases, the NTC-8000-01 comes with SIM cards which are soldered to the main board. These units will not request a SIM PIN and must be activated by the network operator based on the IMSI number printed on the Product ID label.
  • Page 23: Lan

    IP Setup The IP Setup page is used to configure the LAN Settings of the gateway and to enable or disable DNS Masquerade. Figure 19 - IP Setup Settings The default IP of the gateway is 192.168.1.1 with subnet mask 255.255.255.0. To change these settings, enter the new IP Address and Subnet mask then click the Save button.
  • Page 24 DHCP The DHCP page is used to adjust the DHCP settings used by the gateway. The DHCP settings are then passed onto any device connecting via DHCP. You can manually set the DHCP Start and End range, the DHCP Lease time, the default Domain name suffix, Primary and Secondary DNS Server, the Primary and Secondary WINS Server, as well as the NTP, TFTP and Option 150/Option 160 (VoIP options) settings.
  • Page 25: Routing

    Routing Static The Static Route page is used to add or delete static routes. Static routes can be used to facilitate communication between devices on different networks. Figure 22 - Static Route Settings Some routes are added by the gateway on initialisation such as the Ethernet subnet route for routing to a device on the Ethernet subnet.
  • Page 26 RIP (Routing Information Protocol) is used for advertising routes to other gateways. Thus all the routes in the gateway’s routing table will be advertised to other nearby gateways. For example, the route for the gateway’s Ethernet subnet could be advertised to a Gateway on the PPP interface side so that a Gateway on this network will know how to route to a device on the gateway’s Ethernet subnet.
  • Page 27 VRRP Virtual Router Redundancy Protocol (VRRP) is a non-proprietary redundancy protocol designed to increase the availability of the default gateway servicing hosts on the same subnet. This increased reliability is achieved by advertising a “virtual router” (an abstract representation of master and backup routers acting as a group) as a default gateway to the host(s) instead of one physical router.
  • Page 28 The NAT page is used to configure the Network Address Translation rules currently in use on the gateway. The gateway is in NAT mode by default. This is only needed if you need to map inbound requests to a specific port on the WAN IP address to a device connected on the Ethernet interface.
  • Page 29 The Demilitarised Zone (DMZ) enables a device to use a direct connection to the WAN. This means any incoming connections are forwarded directly to this device. The DMZ page is used to specify the IP Address of the device to allow direct incoming connections.
  • Page 30 MAC / IP / Port Filter The MAC/IP/Port filter feature allows you apply a policy to the traffic that passes through the gateway, both inbound and outbound, so that network access can be controlled. When the filter is enabled with a default rule of “Accepted”, all connections will be allowed except those listed in the “Current MAC / IP / Port filtering rules in effect”...
  • Page 31 OPTION DEFINITION Basic Settings MAC / IP / Port Filtering Use the drop down list to Enable or Disable the MAC / IP / Port Filtering function. Default Policy Sets the default action to take for packets which do not match the configured rules below. Allow HTTP Port Always Enables or Disables access to the web-based interface via HTTP Allow HTTPS Port Always...
  • Page 32: Vpn

    IPSec operates on Layer 3 of the OSI model and as such can protect higher layer protocols. IPSec is used for both Site to Site VPN and Remote Access VPN. The NTC-8000-01 M2M Multi-Port Network Gateway supports IPsec end points and can be configured with Site to Site VPN tunnels with third party VPN routers.
  • Page 33 Figure 29 - VPN Connection Settings – IPSec The table on the following page describes each of the fields of the IPSec VPN Connection Settings page. UM-00006 v1.1 NTC-8000 – M2M Multi-Port Network Gateway www.netcommwireless.com...
  • Page 34 Key Mode Certificates Each type of Key mode requires different configuration options. For more information, please refer to the VPN Document available from the NetComm Wireless Website. Table 18 - IPSec Configuration Items UM-00006 v1.1 NTC-8000 – M2M Multi-Port Network Gateway...
  • Page 35 OpenVPN OpenVPN is an open source virtual private network (VPN) program for creating point-to-point or server-to-multi-client encrypted tunnels between host computers. It can traverse network address translation (NAT) and firewalls and allows authentication by certificate, pre-shared key or username and password. OpenVPN works well through proxy servers and can run over TCP and UDP transports.
  • Page 36 Authentication Type User Name / Password Each type of Key mode requires different configuration options. For more information, please refer to the VPN Document available from the NetComm Wireless Website. Table 19 - OpenVPN Configuration Items UM-00006 v1.1 NTC-8000 – M2M Multi-Port Network Gateway...
  • Page 37 PPTP-Client The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual private networks using a TCP and GRE tunnel to encapsulate PPP packets. PPTP operates on Layer 2 of the OSI model and is included on Windows computers. Configuring PPTP-Client VPN connection From the menu at the top of the screen, click Internet Settings then VPN and PPTP-Client.
  • Page 38 PPTP-Client VPN Connection Settings – Item Details ITEM DEFINITION Enable PPTP Client Enable or Disable the VPN connection. Profile Name A name used to identify the VPN connection. PPTP Server Address The IP Address on which the VPN server is running. Username The username required to login to the VPN service.
  • Page 39 The Generic Route Encapsulation (GRE) protocol creates a point-to-point connection similar to a VPN between clients and servers or between clients only. GRE is used to encapsulate the data or payload. Configuring a GRE VPN connection From the menu at the top of the screen, click Internet Settings then VPN and GRE. A list of configured GRE VPN connections is displayed.
  • Page 40 GRE VPN Connection Settings – Item Details ITEM DEFINITION Enable VPN Enable or Disable the VPN connection. Profile Name A name used to identify the VPN connection. GRE Server Address The IP Address on which the GRE VPN server is running. Local Tunnel Address The Local IP address of the VPN tunnel.
  • Page 41: Wireless Settings

    WiFi is turned on by default. Changing this option to OFF will turn OFF the wireless functionality on the Radio On/Off NTC-8000-01 and you will not be able to connect wirelessly. Country Select the country where the gateway is operating.
  • Page 42 Figure 38 - Advanced View – WiFi Security Settings - WPA-PSK/WPA2-PSK Note: Your NTC-8000-01 uses WPA2-PSK by default. Check the Wireless Security Card or the device label on the bottom of the NTC-30WV for your default SSID and Security key to begin connecting your wireless devices.
  • Page 43: Advanced

    Advanced The Advanced page is used to modify the advanced wireless settings for the gateway. These settings should not be changed unless you are aware of what effect they will have. Figure 39 - Wireless Settings – Advanced OPTION DEFINITION A protective measure designed to prevent collisions among 802.11b/g modes.
  • Page 44 Below is an example of how to configure two NTC-8000-01 gateways to use the Repeater mode WDS feature. In this example, Access Point 1 is connected to a mobile broadband network and Access Point 2 and its clients will connect to the internet through Access Point 1.
  • Page 45 Enable the DHCP Server on Access Point 1: Figure 42 - WDS - Access Point 1 DHCP Server Settings Click Wireless Settings and then Basic. Enter the required details as listed in the table below: Figure 43 – WDS - Access Point 1 Repeater Mode Setup OPTION DEFINITION Radio On/Off...
  • Page 46 The wireless security settings for the gateway. Refer to the Basic Wireless Settings section for more Network Authentication information on the available options. When you have entered the required information, click Save. Click Wireless Settings and then WDS. Set WDS Mode to Repeater Mode and enter an Encryption Key and the MAC address of Access Point 2.
  • Page 47 Access Point 2 – No connection to mobile broadband Access Point 2 will act as a repeater for and provide internet access to its clients through Access Point 1 and therefore does not require a Mobile Broadband connection to be established. Figure 45 –...
  • Page 48 Set the DHCP Server on Access Point 2 to Disable: Figure 47 - WDS - Access Point 2 DHCP Settings Under Wireless Setup > Basic, select the same frequency channel as you did for Access Point 1. Enter an SSID to identify Access Point 2 and set Network Authentication and all other Security Settings to be the same as the settings from Access Point 1.
  • Page 49 Navigate to Wireless Settings > WDS and set WDS Mode to Repeater Mode , then enter the same Encrypt Key and the MAC address of Access Point 1 in the AP MAC Address1 field. The MAC address of Access Point 1 is listed on its Status page.
  • Page 50: Mac Filtering

    MAC Filtering The MAC Filtering page allows you to configure a list of MAC addresses that are either allowed or denied access to the selected network. Figure 50 - MAC Filtering To create a MAC filter: In the Please select a SSID number to configure drop down list, select the wireless network for which you want to configure a rule.
  • Page 51: Station List

    Station List The Station List page displays a list of wireless clients connected to the access point of the gateway. Figure 51 - Station List Wireless Mode The Wireless Mode page is where you can switch the gateway between Access Point and Wireless Client mode. In Access Point mode, the gateway allows wireless clients to connect to it for network and internet access.
  • Page 52: Client Configuration

    The M2M Multi-Port Network Gateway can be configured to connect to another wireless access point as a wireless client. The client configuration page is used to define the basic wireless settings for the NTC-8000-01 such as the SSID and Wireless Security in use as well as scanning for and connecting to Wireless Local Area Network Access Points.
  • Page 53: Services

    Services Dynamic DNS The Dynamic DNS page is used to configure the Dynamic DNS feature of the gateway. Dynamic DNS provides a method for the gateway to update an external name server with the current WAN IP address. You may select from a number of dynamic DNS host providers.
  • Page 54: Ntp

    The NTP page is used to configure NTP Synchronisation or to select the NTP server used for synchronisation. Figure 55 - NTP Settings Using the time zone settings the gateway’s current time can be adjusted according to its global position while the NTP (Network Time Protocol) settings allow your gateway to synchronise its internal clock with a global Internet Time server.
  • Page 55: System Monitor

    System Monitor The system monitor is a feature which monitors the gateway for anomalies and restarts the gateway if an anomaly occurs preventing its normal operation. When configured, the system monitor transmits controlled ping packets to 1 or 2 user specified IP addresses to confirm an active connection.
  • Page 56: Snmp

    SNMP The SNMP page is used to configure the SNMP features of the gateway. Figure 57 - SNMP Settings SNMP (Simple Network Management Protocol) is used to remotely monitor the gateway for conditions that may warrant administrative attention. It can be used to retrieve information from the gateway such as the signal strength, the system time, the interface status, etc.
  • Page 57: System

    System The Log page is used to download or display the current System Log of the gateway. Figure 58 - System Log The System Log enables you to troubleshoot any issues you may be experiencing with your gateway. Use the Display Level drop down list to select a logging level.
  • Page 58: Load / Save

    Load / Save Note: the Load/Save menu is only available to users logged in to the gateway using the user name root. To perform a firmware upgrade, device configuration backup or reset the gateway to factory defaults, you must be logged in with the root administrator account.
  • Page 59 Upload The firmware update process involves first updating the recovery image firmware, rebooting into the recovery mode of the gateway and then updating the main firmware image. Note: In order to perform an update, you must be logged into the gateway with the root manager account (see the Accessing the Web based User Interface section for more details).
  • Page 60 The recovery firmware image is flashed and when it is complete, the gateway displays “The firmware update was successful” and returns to the main Upload screen. Figure 62 - Recovery firmware flash process Press and hold the reset button on the interface panel of the gateway for between 3 and 10 seconds until the all LEDs on the front of the gateway start to flash on and off then release it.
  • Page 61 When the upload has completed, the screen refreshes to display the list of files on the gateway’s storage. Click the Install link to the right of the main firmware image you uploaded and then click OK to confirm that you want to continue with the installation.
  • Page 62 The Package Name, Version, Architecture and Installed time are shown and the package content details are available by clicking on the blue Package Details link. Alternatively, if you want to remove a package, click the blue Uninstall link. Note: For more information on creating software packages for the NTC-8000-01, please contact M2M technical support at http://www.netcommwireless.com/contact-forms/support UM-00006 v1.1 NTC-8000 –...
  • Page 63: Administration

    Administration The Administration page is used to enable or disable the firewall, remote administration, telnet access and ping responses. Figure 67 - Administration Configuration Items OPTION DEFINITION Firewall Enable or disable the in-built firewall on the gateway. Enable or disable remote HTTP access to the gateway. You can also set the port you would like remote HTTP access to be available Enable HTTP Enable Telnet Enable or disable telnet (command line) access to the gateway from the WWAN connection.
  • Page 64: System Configuration

    System Configuration The System configuration page provides the ability to configure an external syslog server, TCP Keepalive settings, the power saving feature and SFTP login credentials. Figure 68 - System Configuration Items The TCP Keepalive function can be used to ensure the WWAN connection does not disconnect due to inactivity, while the Power Save mode can help ensure that the gateway does not cause battery drain which is especially useful when the gateway is installed in a vehicle.
  • Page 65 Logoff The logoff item logs you out of your web configuration session. Figure 69 - Logoff Reboot The reboot item reboots the gateway. This can be useful if you have made configuration changes you want to implement or want to reboot the gateway.
  • Page 66: Appendix A: Tables

    Appendix A: Tables Table 1 - Document Revision History ............................... 2 Table 2 - NTC-8000-01 LEDs ................................6 Table 3 - Device Dimensions ................................7 Table 4 - Mounting Bracket Dimensions ............................7 Table 5 - Integrated Interfaces ................................. 8 Table 6 - 4-way mini fit connector wiring ............................
  • Page 67: Appendix B: Recovery Mode

    Appendix B: Recovery mode The NTC-8000-01 features two independent operating systems, each with its own file systems. These two systems are referred to as 'Main' and 'Recovery'. It is always possible to use one in order to restore the other in the event that one system becomes damaged or corrupted (such as during a firmware upgrade failure).
  • Page 68: Legal And Regulatory

    NetComm Wireless Limited (or its licensors) intellectual property rights to you. You are permitted to use this Manual for the sole purpose of using the NetComm Wireless product to which it relates. Otherwise no part of this Manual may be reproduced, stored in a retrieval system or transmitted in any form, by any means, be it electronic, mechanical, recording or otherwise, without the prior written permission of NetComm Wireless Limited.
  • Page 69: Product Warranty

    Consumer Protection Laws which cannot be excluded, NetComm Wireless Limited’s liability for any breach of that guarantee, condition or warranty is limited to: (i) in the case of a supply of goods, NetComm Wireless Limited doing any one or more of the following: replacing the goods or supplying equivalent goods;...
  • Page 70: Contact

    Contact Address: NETCOMM WIRELESS LIMITED PO Box 1200, Lane Cove NSW 2066 Australia Phone: +61(0)2 9424 2070 Fax: +61(0)2 9424 2010 Website: www.netcommwireless.com Email: sales@netcommwireless.com Technical.Support@netcommwireless.com UM-00006 v1.1 NTC-8000 – M2M Multi-Port Network Gateway www.netcommwireless.com...

Table of Contents