FATBOX G3 M2M Router User Manual
Contents
1. 202 200 XXX XXX according to public IP assigned 192 168 1 0 24 according to network set tings 10 1 1 0 24 according to network settings Set to match remote end settings start IPSEC tunnel will automatically be connected route IPSEC tunnel will be connected when data is present Settings to correspond with remote end settings UPDATE and restart FATBOX WEB MANAGEMENT 5 7 SERIAL PORT F ATBOX G3 has a built in TCP server to allow a remote device e g a meter read ing server to connect over cellular network to device s attached to the serial port of the FATBOX When the Serial to TCP Transport is enabled it allows for communication between the remote TCP client and the G3 s serial port via port 70 Note that only in the RS 485 mode can you connect multiple devices to the FATBOX fatbox 63 MENU OPTIONS Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout Serial Port Management Port Mode Selection Serial to TCP Transport Server Port 70 Enable Speed Data Bits Parity Stop Bits 0 RS232 1 RS485 1 enable 0 disable 115200 E g 9600 Eg 8 10800 E g NONE EVEN or ODD E g AT over Ethernet 115200 8D NS 15 Port 77 Port Mode Selection 1 enable 0 disable fatbox 63 1 TCP Server Enable 0 TCP Server Disable Setting to match attached seri2. This figure is the number of times the FATBOX would attempt to establish a data connection with your Telco before it reboots itself This enables the FATBOX to reboot on Ping failures Enter the IP address website which you would ping This is the time taken before each ping would be sent This is the number of times it retries before the FATBOX G3 would attempt to re establish a connection UPDATE and restart FATBOX WEB MANAGEMENT 3 4 PORT FORWARDING The port forwarding function enables remote connections to specific devices like IP cameras or services within a private local area network LAN gt IP Camera Example An IP Camera is connected to the G3 via ethernet Its details are IP address 10 1 1 100 Webserver port 1500 The device is set up to forward ports 1000 2000 from the FATBOX and route any data from those ports to 10 1 1 1000 Alternatively you can set it as a single port instead of a range fatbox 63 MENU OPTIONS Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout Port Forwarding Add a new Port Forwarding Rule Source Port Destination LAN IP Address Destination Port Service Current Port Forwarding Rules Index Source Port 1 1000 2000 1000 2000 10 1 1 100 1000 2000 TCP and UDP ADD Singe Port XXX or Range of Ports XXX XXX Can take up top 5 minutes Destination
3. Insert your micro SIM card into the SIM card slot Push the metal latch left right to lock unlock 3 Reassemble the metal casing SIM card network details APN USERNAME PASSWORD You would need to get this information from your operator SIM card s orientation fits as shown STEP 3 of 6 Connect the power adapter antenna and plug the Ethernet cable to your pc STEP 4 of 6 Power up the FATBOX G3 SETTING UP 2 2 LOGGING IN When you have connected up the hardware to the box the web console can be accessed at the address 192 168 1 1 For Security after your first successfull log in you will be prompted to change your username amp password fatbox 63 STEP 5 of6 Launch your browser and enter address as 192 168 1 1 STEP 6 of 6 Log in FATBOX CONSOLE X gt 1923683683 z fathox 63 The default username is Pd admin Username admin Password atbox12345 NEXU RN Losin The default password is fatbox12345 WEB MANAGEMENT 2 1 QUICK START gt The Quick Start tab brings all the settings you need to establish an immediate connection into a single page fatbox 63 MENU OPTIONS Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout fatbox 63 Basic Settings for FATBOX 3G router for 3G WWW access Sets the IP address of LAN port on FATBOX LAN eth1 and eth0 Por
4. 2 RX input of serial port 3 INPUT general purpose input port switch to GND pin 4 to activate 4 GND CELL1 Second LAN Port ETH1 SIGNAL STRENTH LEVEL connection poor connection good GPS CELL2 DIP Switch DIP 12541 fatbox 63 R amplified H H H H e engineering System Reset Press 1 second soft reset the router Press gt 5 seconds will revert parameters to Factory Default fatbox 63 Antenna Port 1 GPS Antenna Antenna Port 2 This is a 4 way general purpose switch available to user application program DIP 44 right most is dedicated as TEST MODE which is activated when DIP 4 is in OFF down position during power up During TEST MODE after power up is stable e g 1 minute a program will monitor a switch contact between 3 and 44 of Serial Input Port Press 1 if INPUT 3 of Serial Input Port is working LED YES will blink once Press 2 with a loop back wire connected between 1 TX and 2 RX of the Serial Input Port The LED YES will blink twice Press 3 once a 3G GPRS EDGE session is established LED YES will blink three times fatbox 63 SETTING UP INSERTING THE SIM CARD STEP 1 of6 Dismantle the casing cover and slide out the PCB Avoid touching the electronics handle the board by the edges 2 1 SIM INSTALLATION WHAT YOU LL NEED 3G Data Enabled micro SIM Card PC Laptop with an Ethernet port STEP 2 of 6
5. internal machines that don t have an officially assigned IP ad dresses to communicate to other networks and especially the Internet Set this to the specific device on your network Sets the Ethernet MAC address of the FATBOX G3 WEB MANAGEMENT fathox 63 MENU OPTIONS 5 5 WAN CELLULAR Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout gt In the example the FATBOX G3 would send a PING to www google com every 15 seconds If 4 consecutive PING failures occur the FATBOX G3 would attempt to re establish a connection If it fails to establish a connection after 5 tries the G3 will reboot itself WAN Cellular APN User Name PAP CHAP only Password PAP CHAP only SIM PIN Code If required only Advanced Settings Dial Number Service Assigned DNS PPP Keepalive Enable Reboot on Ping Failure Remote PING Host IP address PING Retry Time Period s PING retries ae i UMTS Preferred Current To overide network assigne No of connection failures before reconnection 1 enable 0 disable 1 gon aM a 5 fatbox 63 Get this information from your operator Setup the PIN code usually 4 8 digit numerics if SIM PIN lock is enabled Please check with your operator on this It is usually 99 or 99 1 To override domain name server e g Google DNS server 8 8 8 8
6. IP 10 1 1 100 Destination Port 1000 2000 Protocol tcp udp fatbox 63 Enter the source port This is the port to access the device from outside You can also enter a range of ports as the example below Enter the destination IP address of where you would want to forward the incom ing data from sent to the ports you set up earlier Enter the port number of your device where you would want the incoming data to go to If you entered a range of ports you would need to enter the same range here You would need to check on the ports for this depending on your application device Select a Protocol to be used for your device Common options found are UDP TCP or Both In most cases you will need to select the protocol option TCP and UDP This will associate both protocols to the port s being forwarded After clicking ADD the details of your settings will be shown automatically If you have Dynamic DNS set up refer to page 13 you can use a regular PC with an internet connec tion and input lt yr_hostname gt dyndns org 1500 into the browser You would be able to access the webserver on the IP Camera WEB MANAGEMENT fathox 63 MENU OPTIONS 5 5 DYNAMIC DNS Quick Start LAN Ethernet WAN Cellular Port Forwarding The Dynamic DNS feature Dynamic DNS helps to keep a standard IPSEC VPN domain name pointed to the Serial Port FATBOX even if its assigned Management IP changes during reboot System S
7. MS from a PLC AT over serial custom firmware USER CUSTOM PROGRAMMING Lua scripting for user programed functionalities Available 2GB of on board flash data storage Reduce cost and time to remotely manage equipment GPS FUTURE OPTION PLS CONTACT US Serial or Ethernet access to GPS data User on board application to GPS data 1 2 HARDWARE The FATBOX G3 is available in two versions VF STANDARD VERSION With rugged anodized aluminium chassis be NOTE The client is required to have their own mounting screws M3 size to suit the surfaces the G3 will be on V OEM VERSION VERSION SPECIFICATIONS OEM INTERFACE LAN e SERIAL e 1 0 e USB e DIMENSION L 114mm W 108mm H 19mm INTEGRATED MOUNTING WEIGHT 110g PERIPHERALS INCLUDED GSM antenna with 2M wire High gain outdoor antenna option CAT 5 LAN cable 3M Power supply unit 230 110VAC to 24VDC 0 5A fatbox 63 STANDARD 149mm 111mm 37mm 375g ABOUT LED POWER ON GENERIC YES GENERIC NO AUTOPING AUTOPING single IPSEC Custom Custom Program dual Program 1 5 BOARD INTERFACE V FRONT PLATE fathox 63 amplified engineering USB port seein Main LAN Port ETHO default 192 168 1 1 default 10 1 1 1 V BACK PLATE ETHO SERIAL TX RX IN GND D Dt Serial Input Port 4 way plug in terminal M Left to Right 1 TX output of serial port
8. al device FATBOX G3 also allows messages e g modem AT commands to be send and received from the cellular modem via the LAN port e g port 70 For example an Ethernet attached Data Concentrator can send AT commands to the FATBOX e g 192 168 1 1 77 to query signal strength AT CSQ or to send custom SMS 1 Enable 0 Disable Update and reboot FATBOX WEB MANAGEMENT fathox 63 MENU OPTIONS 5 8 MANAGEMENT Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS SECURITY IPSEC VPN Serial Port Note that from the internet Management the FATBOX can only be accessed via HTTPS secure to ensure all data between user and FATBOX web configuration page is encrypted Logout Note We give our clients the choice to install their own signed certificate e g Veri sign or Digicert via SSH to FATBOX console Since there is no packaged signed SSL certificate in each FATBOX a complaint of error might be issued from the browser Note that this does not affect the secure encryption of data to configure the FATBOX via HTTPS System Management Username fatbox Password TOK k Enable Secure Shell SSH Enable Log LI Configuration Parameters Management Please insert usb drive labelled FATBOX Configuration files will be in folder config UPLOAD FROM FATBOX DOWNLOAD TO FATBOX o beem 1 Z2 enable 0 disable 1 enable 0 disable fatbox 63 A user defined nam
9. boot power down the device until the writing process is acknowledged as completed 1 1 65 SPECIFICATIONS G3 DUO FOCUS V SECURITY The core thinking behind the G3 hardware and software design is the layering of security in the modes of access INTEGRATION Lower system cost while improving reliability by integrating simple user scripts to automate simple data or input monitoring and alerts management CELLULAR INTERFACE HSPA 14 4Mbps downlink and 5 76Mbps uplink over 850 900 1900 2100MHz bands GSM 850 900 1800 1900 for GPRS and EDGE LTE EU Asia option available on request RX Diversity antenna for optimum performance OPERATING SYSTEM Linux on ARM Cortex A9 IMX6 Solo Dual Quad options SERIAL INTERFACE RS 232 RS 485 15kV ESD Protected Integrated TCP Serial server LAN INTERFACE 2 X 10 100BaseT Ethernet port 24VDC POE Passive Input OPERATING CONDITIONS POWER 12 24VDC 0 4 0 2A 0 1A 12VDC Peak Nominal ldle TEMPERATURE 40 C 75 C Operating Temperature fatbox 63 MANAGEMENT NETWORK Designed for maximum uptime from available ROBUSTNESS network End to End PING connectivity testing with Reboot Configurable PPP keep alive function SECURITY IP firewall IPSEC PSK VPN for secure networking NETWORKING DYNDNS and Port Forwarding MANAGEMENT SMS to Reboot function to remotely reboot router LUA Script AT over Ethernet LAN e g to send S
10. e to login to the FATBOX web and SSH Please use a strong password upper lower case and symbols Disabled by default If enabled will provide root access using the Password above 1 Enable 0 Disable default If enabled you can download view the log page from the System Status page 1 Enable 0 Disable default To allow cloning of parameter settings to multiple FATBOX in production environment we utilize USB flash drives This ensure only with physical access to the device and the settings with sensitive data be uploaded from a production FATBOX 1 Format a USB thumb drive e g FAT32 and label it FATBOX 2 After FATBOX is powered up and stable condition e g signal strength LEDs are functioning insert the thumb drive into USB port at antenna end of box 3 Click Upload from wait 5 sec remove thumb drive 4 Insert thumb drive into new FATBOX in stable operating condition and click Download to FATBOX wait 5 sec and remove thumb drive 5 Check in new FATBOX that parameters from other FATBOX has been copied over WEB MANAGEMENT fathox 63 MENU OPTIONS 5 8 MANAGEMENT Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout gt INTEGRATION FATBOX G3 has a powerful feature to allow end users to write their own custom application program right on board the router This is cost
11. fathox 63 THE MANUAL If itis for demanding HSPA M2M and ot deployments that require Security with Smart Remote access the FATBOX G3 router is a hardy and robust gateway suited for Ethernet and Serial Port equipped devices Lab tested and certified for CE and FCC part 15 EDITION 01 2 DEC 2015 DESIGNED IN AUSTRALIA ASSEMBLED IN USA nd eeaeee eee oe eee eech Kl nd I M il TABLE OF CONTENTS SAFETY OF USE ABOUT G3 SPECIFICATIONS HARDWARE tete BOARD INTERFACE orones SETTING UP SIM INSTALLATION LOGGING IN WEB MANAGEMENT QUICK START CONTACT US 10 11 12 13 14 16 17 19 20 fathox 63 SECURITY INTEGRATION SAFETY OF USE A ALL CONDITIONS POWER SET UP SIM CARD CONFIGURING THE ROUTER fatbox 63 All specialist electronic devices must be operated with due care to avoid damage or injuries and should be installed and operated by a trained personnel DO NOT OPERATE THIS EQUIPMENT IN ENVIRONMENTS CONTAINING POTENTIALLY EXPLOSIVE GASES OR LIQUIDS EXAMPLE GAS STATIONS AND CHEMICAL PLANTS AND EXPLOSIVE STORES Inadequate current or dips in voltage may cause the device to fail to connect to data services even if the LEDs are lighted up Supply over 30 VDC will damage the device Never remove or insert SIM card when device has PWR switched in ON position Damage caused to device or SIM in such case will not be warranted Do not re
12. iagnostics Log file fw G3 2 01 02 49 06 up 14 min load average 0 22 0 13 0 07 pppo 14 100 25 79 10 1 1 1 fatbox 63 fatbox 63 CONTACT US Our Service Support means that we make the security and integration of the network our responsibility SERVICE SUPPORT TECHNICAL SUPPORT SUPPORT AMPLIFIED COM AU SALES SALES AMPLIFIED COM AU amplified engineering No 5 Turner Avenue Unit 1 Albridge Building Bentley Technology Park WA 6102 Australia w amplified com au
13. nnections HSPA Cellular qux fathox 63 Vito D vila Mu we tony Workstation Data Server e g SCADA Server 192 168 1 20 24 LAN 10 1 1 0 24 o R Remote Device Switch Firewall 10 1 1 3 e g CISCO ASA5520 192 168 1 0 202 200 XXX XXX WEB MANAGEMENT 5 6 IPSEC VPN gt FATBOX G3 configuration for Site to Site IPSEC VPN as of the example in the previous page fatbox 63 MENU OPTIONS Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout Site to Site IKE PSK IPSEC Settings 3G IPSEC VPN Server IP address VPN Server Subnet IP Address Mask Local VPN Subnet IP Address Mask PSK Phasephrase Start Mode auto ISAKMP Phase 1 Encryption Hash Algorithm D H Group Phase 2 Encryption Authentication HMAC PFS Group KEv1 Agressive Mode KE SA Lifetime s PSEC Lifetime s DPD Action DPD Delay s DPD Timeout s 1 enable 0 disable start start or route 865128 E g 3465 aes128 aes192 aes256 shal E g 3des aes128 aes192 aes256 modp1024 E g 1 2 5 14 865128 E g 3465 aes128 aes192 aes256 shal E g md1 sha1 sha256 Ij d no no 2 main mode yes agressive 10800 E g 10800 3600 E g 3600 restart none clear hold or restart 3 E g 30 150 E g 150 UPDATE fatbox 63 1 IPSEC enabled 0 IPSEC disabled
14. space and time efficient For example a custom program can be written to check serial data read from a PLC and trigger an SMS to a technician for support or the program can check for I O trigger from a relay to reboot the router System Management User Application Program Management Please insert usb drive labelled FATBOX File user lua must be in user folder DOWNLOAD TO FATBOX System Recovery Management FACTORY SETTINGS MEM EXECUTE PROGRAM REBOOT SYSTEM fatbox 63 To input your own LUA program 1 Write your LUA program and name it as user lua 2 Save the program in user folder in your thumb drive drive labelled FATBOX 3 Insert the thumb drive into FATBOX in stable operating condition 4 Click Download to FATBOX wait 5 sec remove thumb drive 5 You can click Execute Program to test you program Your user lua program will automatically be executed after complete boot up of the FATBOX Click Reboot to soft reset the FATBOX device Cick Factory Settings to revert all parameters to factory default WEB MANAGEMENT 5 9 SYSTEM STATUS fatbox 63 MENU OPTIONS Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Managment System Status Logout System Status Main Firmware Version Uptime and CPU load 1 5 15m 3G Interface IP Address Ethernet Ports LAN ethO eth 1 IPSEC Tunnel SA D
15. t Settings G3 Mask for setup range of subnet IP 3G HSUPA Cellular Settings Please check with your operator on this User Name PAP CHAP only Password PAP CHAP only 1 SIM PIN Code If required only Setup the PIN code usually 4 8 digit numerics if SIM PIN lock is enabled This saves the settings onto the G3 WEB MANAGEMENT 5 2 LAN ETHERNET fatbox 63 MENU OPTIONS Quick Start LAN Ethernet WAN Cellular Port Forwarding Dynamic DNS IPSEC VPN Serial Port Management System Status Logout LAN ethO eth1 Port Settings LAN IP Address 192 168 168 1 255 255 255 0 LAN Netmask DHCP Disabled 12 disabled 0 enabled DHCP Start 6 0 Start DHCP Limit Limit Advanced Settings LAN Masquerade o 1 Enabled 0 Disabled LL Specific LAN device Masquerade eth MAC UPDATE fatbox 63 Sets the IP address of LAN port on FATBOX G3 Setup the FATBOX G3 to automatically assign IP addresses to your connected LAN devices This would be the starting address for con nected devices For the example above the first device connected would be assigned 192 168 1 100 This would be the limit for number of con nected devices For the example above the last device connected would be assigned 192 168 1 150 This is to enable disable masquerade IP masquerading allows
16. tatus reconnection Logout WHAT YOU LL NEED TO USE DDNS A data sim card with a public IP You can check this with your operator An account with dyn com Dynamic DNS Enable Host Name DDNS Service Username DDNS Service Password 1 enable 0 disable ETE your username your password l EE fatbox 63 Key 1 here to enable a dynamic DNS capability Enter in the host name with which you have registered a DDNS service eg dyn com Key in your DNS Service Username Key in your DNS Service Password Update to save your settings The FATBOX G3 would connect to your account and point the domain you set to the FATBOX after you reboot EXAMPLE In the above example the Hostname is set as G3 dyn org You will be able to access the FATBOX using the domain name G3 dyn org on the browser of any regular PC with an Internet connection WEB MANAGEMENT 5 6 IPSEC VPN FATBOX G3 integrates Strongswan 5 0 IPSEC VPN client to enable secure encrypted networking and communications to your remote Ethernet and serial port devices fatbox 63 ww EXAMPLE Site to Site L2L IPSEC VPN Tunnel 192 168 1 0 24 10 1 1 0 24 After the remote end point e g a CISCO ASA520 security appliance with internet access and connected to the customer s SCADA or payment processing server is configured to accept remote IPSEC site to site co
Download Pdf Manuals
Related Search