USER MANUAL
Contents
1. Legal notice Copyright 2012 WAVEWIFI Ltd All nights reserved Reproduction transfer distribution or storage of part or all of the contents in this document in any fom without the prior written pe mission of WAVEWIFI Ltd is prohibited The manufacturer reserves the right to modify the productand manual for the purpose of technical improvement without prior notice Other product and company names mentioned herein may be trademarks or trade names of their respective owners Va Attention Before using the device we strongly recommend reading this user manual first Do not rip open the device Do not touch the device if the device block is broken All wireless devices for data transferring may be susceptible to interference which could affect performance AA The device is not water resistant Keep it dry Device is powered by low voltage 9V 30V DC power adaptor Table of Contents HE AN EVO E stg s certs te E E pa unisan ban ecienaa bac coeenapessteaaeesnoveneieuenneoreeees 2 PRUE CMMs eaves sc yacece eas tenses E ne canue es nteresssctetenssocceeesaenecesstsieaesauaveabesaeaecsesat seeds setecaenereeceenteteecues 2 SAE Ee ATI OR AOI cetera E A E E se caer E E E E E es 4 DEVE CONOC UO eee E ee ern me eee eee ee ee ee 6 POG CUO Bosco sect E Gore eencieneucsmeeyieeia E diocese sess tention oeec 7 SS SUT Ce NS rt eset cetera sre dc Gae boca oueintnc reece band cence nda daeao S A ace 7 LAN ATG WII teas cucntenctecesna2. If you connect a device that has been configured to obtain IP address automatically the DHCP server will lease an address and the device will be able to fully communicate with the router DHCP Server General Setup Advanced Settings Disable E Start 100 Limit 150 Leasetime 12h E Expiry time of leased addresses minimum is 2 Minutes izn Field Name Sample value Explanation 1 Checked unchecked Check to DISABLE the DHCP server 37 How many addresses the DHCP server gets to lease out Continuing on the above example ifthe start address is 192 168 2 100 then the end address will be 192 168 111 254 100 150 1 254 Advanced settings You can also define some advanced options that specify how the DHCP server will operate on your LAN network How long can a leased IP be considered valid An IP address after the specified amount of time will expire and the device that leased it out will have to request for a new one 2 Start 100 The starting address of the range that the DHCP server can use to give out to devices E g if your LAN IP is 192 168 111 1 and your subnet mask is 255 255 255 0 that means that in your networka valid IP address has to be in the range of 192 168 111 1 192 168 111 254 192 168 111 0 and 192 168 111 255 are special unavailable addresses If the Start value is set to 100 then the DHCP server will only be able to lease out addresses starting from 192 168 111 100 B DHCP Server meneral Set
3. 0 035 KByte s 0 04 KBytes Graphs the amount of traffic which passed through the current active WAN connection Wi Fi 24 Realtime Traffic Bridge LAMPAAN LAN WAN Aired a8 VIF I 5 36 WIBitls 685 79 KEytels 3 57 WIBitls 457 2 REytels 1 79 WiBitls 226 6 EF Bytels ia minute window 3 second interval Inbound 2 44 KBit s Average 564 05 KBit s Peak 6 49 MBits 0 5 KBytes 10 51 KBytes 031 26 KBytes Outbound O K Bits Average 3 26 KDit s Peak 266 17 Koitis 0 KBytes 0 41 KBytes 33 27 KBytes Shows the amount of traffic that has been sent and received through the wireless radio Wireless 25 Realtime Wireless wiland a minute window 3 second interwal signal 49 dBm SMR 205 dBm Average 40 dBm SNR 206 dBm Peak 45 dBm SNR 210 dBm Noise 255 dBm Average 255 dim Peak 255 dBm This graph illustrates howsignalstrength and the amount of noise change over time 26 4 WIBitls 42 WIBitls 16 MBitis 3 minute window 3 second interval Phy Rate 59 MbBit s Average 59 MBitis Peak 54 MBit s This graph illustrates how the physical rate of wireless changes over time Connections 27 Active Connections ia minute window 3 second interval UDP 4 Average 3 Peak 5 TCP 4 Average 3 Peak 6 Other Average U Peak 2 This graph shows a concise history of the amount of connections that the router maintained Blue graph indicates UDP connections green TC
4. Peers identifier type Choose fqdn or user fqdn accordingly to your IPSec server configuration Mode Select Main or Aggressive mode accordingly to your IPSecserver configuration 7 My identifier Set the device identifier for IPSec tunnel Preshare key specify the authentication secret string Secret s length depends on selected algorithm eg 128 bit long secret is 16 characters in length 128 bits 8 bits one character 16 _ Remote VPN Endport set remote IPSec server IP address 54 Phase 1 Encryption Hash DIA group Phase 2 PFS group Encryption Authentication Jcles shat modo1ovea mod 1 Ute ades hinac shat Remote network secure group IPF address subnet mask Phase 1 and Phase 2 must be configured accordingly to the IPSecserver configuration Remote Network Secure Group Set the remote network Secure Policy Database information 192 156 2 0 Aed Number 0 321 55 E EE Tunnel keep alive Enable keep alive E Ping IP address Ping period seconds C rone Jem SSS 1 Tunnel keep alive Allows sending ICMP echo request ping utility to the remote tunnel network This os function may be used to automaticallystart the IPSec tunnel Enter IP address to which ICMP echo requests will be sent Set sent ICMP request period in seconds GRE Tunnel GRE Generic Routing Encapsulation RFC2 784 is a solution for tunnelling RFC1812 private add
5. into the firewall Sort Up Down When a packet arrives it gets checked for a matching rule If there are several rules that match the rule the first one is applied i e the order of the rule list impacts how your firewall operates therefore you are given the ability to sort your list as you wish Custom Rules Here you have the ultimate freedom in defining your rules you can enter them straight into the iptables program Just type them out into the text field ant it will get executed as a linux shell script If you are unsure of how to use iptables check the internet out for manuals examples and explanations Static Routes Static routes provide a way of entering custom entries in the internal routing table of the router Routes Routes specify over which interface and gateway a certain host or network can be reached Static IPv4 Routes Interface Target IP v4 Netmask IPv4 Gateway Metric Host IP or Network if target is a network lan z 192 168 55 0 AINAN 192 168 55 145 Delete Add The zone where the Target resides IPv4 address The source ofthe traffic IPv4 Netmask IPv4 mask Mask that is applied to the Target to determine to what actual IP addresses the routing rule applies 4 IPv4 Gateway IPv4 address To where the router should sendall the traffic that applies to the rule 45 AVE VW LE 5 Metric integer Usedasa sorting measure Ifa packet about to be routed fits two rules the one with the higher
6. metric is applied Additional note on Target amp Netmask You can define a rule that applies to a single IP like this Target some IP Netmask 255 255 255 255 Furthermore you can define a rule that applies to a segment of IPs like this Target some IP that STARTS the segment Netmask Netmask that defines how large the segment is E g 192 168 55 161 255 255 255 255 Only applies to 192 168 55 161 192 168 55 0 255 255 255 0 Applies to IPs in range 192 168 55 0 192 168 55 255 192 168 55 240 255 255 255 240 Applies 192 168 55 240 192 168 55 255 192 168 55 161 255 255 255 0 192 168 55 0 192 168 55 255 192 168 0 0 255 255 0 0 192 168 0 0 192 168 255 255 Diagnostics Contains Network Utilities used for testing network Network Utilities Fing Traceroute Mslookup Ping the utility used to test the reachability of a host on an Internet IP network and to measure the round trip time for messages sent from the originating host to a destination server Enter server IP address or hostname and click Ping Server echo response will be shown after few seconds if server is accessible Traceroute diagnostic tool for displaying the route path and measuring transit delays of packets across an Internet IP network Enter server IP address or hostname and click Traceroute Log containing route information will be shown after few seconds Nslookup network administration command line tool for querying the Domain N
7. minutes on average there have been 2 96 processes running or waiting fora resource The last number indicates the same on the last 15 minutes a Field Name Sample Value Explanation Total Available 14416 29964 Shows how much memory is available to maintain routers functionality 2 Free 1476 29964 The amount of memory that is completely free Should this rapidly decrease or get close to O it would indicate that the router is running out of memory which could cause crashes and unexpected reboots 3 Cached 9868 29964 The size of the area of memory that is dedicated to storing frequently accessed data Buffered 3072 29964 The size of the area in which data is temporarily stored before moving it to a a a Mopercetan MPSS enpontonsostre moves 15 AWAvE VW LE L This page is much like the status page previously described though dedicated to data associated with networking Network Information 4G Statistics for the 4G modemand the connection 3G i state connected IMEI 354043050050436 sim card state Lk signal strength 105 dem Operator Bite Connection type ais HSDPA Bytes recieved 12564 Bytes sent 12034 7 WAN Statistics on the routers WAN connection WAN Interface 36G ppp Type Ig Pwd address Oe her Netmask 2595 299 255 255 Gateway OTB ONS 1 PFa pea oe a eB ONS 2 193 219 56 36 Connected Uh 40m 325 16 m Field Name Sample Value Explanation Interface 4G Specifies through what medium the router is
8. users can access the router via the HTTPS WEB Interface from the outside WAN When check box is not selected users can access the router only from LAN Backup and Firmware Router firmware backup upgrade and settings reset to their factory defaults Backup and reset config uration Backup archive download current router settings file to personal computer Reset to defaults reset router settings to their de fault values Restore configuration Restore backup upload and restore router settings file from personal computer Firmware upgr ade Keep settings when check box is selected router will keep saved user configuration settings after firmware upgrade When check box is not selectedall router settings will be restored to factory defaults after firmware upgrade Image router firmware upgrade file Firmware upgrade Verify 58 Wave LE Firmware upgrade Verify The flash image was uploaded Below is the checksum and file size listed compare them with the original file to ensure data Integrity Click Proceed below to start the flash procedure Checksum 446e4ce75b 7 558642aabb5b61l 37 94 Size 4 350 MB 7 69 MB available e Configuration files will be kept Compare firmware file checksum to ensure data integrity If checksum is correct click Proceed button below Wait until upgrade process completes Important notes O Leaving Keep settings check box unselected before upgrad
9. 92 166 99 D 24 0 0 0 0 0 ARP Shows the routers active ARP table An ARP table contains recently cached MAC addresses of every immediate device that was communicating with the router Active IPv4 Routes Shows the routers routing table The routing table indicates where a TCP IP packet with a specific IP address should be directed to Realtime Graphs Real time graphs show how various statistical data changes over time Load 19 Realtime Load 3 minute window 3 second interval 1 Minute Load 1 59 Average 1 54 Peak 1 60 4 Minute Load 0 96 Average 0 98 Peak 0 98 15 Minute Load 1 59 Average 0 93 Peak 0 93 This tri graph illustrates average system load over the course of 3 minutes each new measurement is taken every 3 seconds The graph consists out of three colour coded graphs each one corresponding to the average system load over 1 red 5 orange and 15 yellow most recent minutes Although not graphed the page also displays peak loads over 1 5 and 15 minutes Traffic Bridge 20 Realtime Traffic Bridge LAMPAAN LAM WAN Aired IG VIF 90 93 EBitis 11 37 Bytes 60 62 EBitis 7 56 EK Bytels 30 31 KEitis 3 79 EK Bytels 3 minute window 3 second interval Inbound 5 61 KBit s U KBytes Outbound 0 94 KBitis 0 12 KBytes Average 4 72 KBit s 0 59 Kbytes Average 5 11 Kbitfs 1 01 KByte s Peak 33 34 KBit s 4 17 KBytes Peak 110 22 KBit s 13 78 KBytes
10. CE TO i LON E E E EE A es A ce E SEP ee ca O ace eee ee 14 NCTWORK Inor rmat OM een rE Gangen ene tenenadencteustessuccnssaamsansecsenstaaavsanyaeveaupemenetentaeceucrereess 16 POU SS orere a E E E E A 19 REMO Ge 5 a E E 19 NEONO aseen E E E E E E E E EE E es 30 A E T anesaasesenaeaoetseeuaenaaceaauesssescaeoeeeseees Error Bookmark not defined ae E E A EE AE E E S E ae cuceaceess Error Bookmark not defined LAN E E E E 36 AVE VLE 1 I TG E E cele eer cer E A E A eit hse E E aetawe E A A E E E A A E A 38 BC WAN ao A R Error Bookmark not defined a E NE E P E TE E T AA AN A E T EN E A E EN E E ET 43 SIUC ROUTE eere iar EA E E R A E 45 DENO SNC e E E E E E E E E nee 46 O a E E 47 PNG TRU OG cree E E E E E 47 SNG arcsec aes E E E E E E E A E E E 48 US VI N bs eee E E E eee en ee ee eee 48 I scene a saan E E arene seine oe ae cnt en crac E TE E E E ante E T E A E A E E E TETE 49 DNIE DNS e E A A T 50 WV ICES NO DIOL a Error Bookmark not defined IN areas ens ene arct caret E a s eae oa nee sen area Seeole E peeaseeanes oem eapeacenseaeneene se sseatess 51 PP SOC E E NE E A A EA I one E E E A EE E E N ote E A E E T 53 ORE TUNNG korrea e E E cece pac E E E ances E EE 56 OS SS EEI E E E AE I AE E T A A E Gs a A eee TET Error Bookmark not defined Configuration Wizard erara E E ETE E Error Bookmark not defined A O E E A 57 Admine Hie TOT Proper ES en a E N E E yuna sesnaieatasteaaes 57 BACKUP ANAFI E EE E E 58 REDDOT e E E E E T E T sta
11. Cumulative graph which encompasses wired Ethernet LAN and the wireless network LAN WAN 21 Realtime Traffic Bridge LAMPAAN LAN WAM Wired cc VIF 91 54 EBitis 11 44 EBytels 61 02 EBits 7 63 KEytelsi 30 51 FBitls 3 81 EBytels a minute window 3 second interval Inbound 10 4 KBit s Average 5 59 KbBit s Peak 36 57 KBit s 1 5 KBytes 1 07 KBytes 4 5 7 KBytes Outbound 27 01 KBit s Average 43 25 KBit s Peak 110 95 KBit s 3 30 KBytes 5 41 KBytes 13 07 KBytes Graphs the total traffic that passes through both WAN and LAN network interfaces LAN 22 Realtime Traffic Bridge LAMPAAN LAM WAN Aired a6 VVIF 90 49 Fo Bitls 11 31 Ee Bytels 60 33 KBits 7 54 EF Bytels 30 16 EBitis 3 77 EBytels i3 minute window 3 second interval Inbound 6 07 KBit s Average 5 43 KBit s Peak 11 7 KBit s 0 66 KBytes 0 65 KByte s 1 46 KBytes Outbound 0 94 KBit s Average 15 33 kBit s Peak 109 69 KBit s 0 12 KBytes 1 92 KByte s 13 71 KBytes Indicates how much traffic has been passed through your Ethernet LAN network WAN x 23 Realtime Traffic Bridge LAN VVAN LAN VAN Aired AG VIF 0 47 E Bits 0 03 EByte s 0 18 EBits 0 02 KEytels 0 09 KBitis 0 01 KEytels a minute window 3 second interval Inbound O KBit s Average 0 KBit s Peak 0 KBit s 0 KByte s 0 KByte s 0 KByte s Outbound 0 33 KBit s Average 0 26 KDit s Peak 0 33 KBitis 0 04 KBytes
12. GSM 2G the router will connect to a GSM 2G network so long as it is available otherwise it will connect toa UMTS 3G network If you select auto then the router will connect to the network that provides better connectivity Warning If an invalid PIN number was entered i e the entered PIN does not match the one that was used to protect the SIM card your SIM card will get blocked To avoid such mishaps it is highly advised to use an unprotected SIM If you happen to insert a protected SIM and the PIN number is incorrect your card won t get blocked immediately although after a couple of reboots OR configuration saves it will 30 Wave Common configuration Common configuration allows you to configure your TCP IP settings for the wan network Common Configuration General Setup Protocol DHCP client Really switch Switch protocol protocol You can switch between the Static DHCP or PPPOE protocol by selecting the protocol that you want to use and then pressing Switch Protocol General This area is dedicated for protocol specific options Static Common Configuration General Setup Advanced settings Protacal static address l IPv4 address 9 142 160 99 1b2 IPvd netmask 255 455 7550 IPvd gateway 1942 169 934 254 IPvl broadcast Use custom DNS 5 8 5 5 x seves 8 8 5 6 a This is the configuration setup for when youselect the static protocol IPv4 gateway 192 168 111 254 Address where the route
13. Gs on your primary connection When the connections state starts to change READY gt NOT READY and vice versa a necessary amount of failed or passed health checks has to be reached before the state changes completely This delay is instituted so as to mitigate spikes in connection availability but it also extends the time before the backup link can be brought up or down 1 Health Monitor Interval Dsb 5 10 20 30 60 120 Seconds The interval at which health checks are performed Health Monitor ICMP HOST Dsb DNS WAN GW Custom Where to PING for a health check As there is no definitive way to determine when the connection to intemet is down for good you ll have to define a host whose availability that of the internetasa whole Health Monitor ICMP Timeout 3 4 5 10 Seconds How long to wait for an ICMP request to come back Set a higher value if your connection has high latency or high jitter latencyspikes 42 WI1EI Attempts Before WAN Failover 1 3 5 10 15 20 How many checks should fail for your WAN connection to be declared DOWN for good 5 Attempts Before WAN Recovery 1 3 5 10 15 20 How many checks should pass for your WAN connection to be declared UP DNS Servers Auto Custom Define custom DNS servers Has meaning when you select DNS as your Health Monitor ICMP HOST Backup ICMP host IPv4 address This is where the address of an ICMP host that will be used to check the health of your 4G backup link goes T
14. MBit s The bitrate will be shared between all devices that connect to the routers wireless network ra eounery ar country code Additional note MBit s indicates the bits not bytes To get the throughput in bytes divide the bit value by 8 for e g 54MBits s would be 6 75MB s Mega Bytes per second Associated Stations Outputs a list of all devices and their MAC addresses that are maintain a connection with your router right now Associated Stations MAC Address Network Signal RX Rate TX Rate 50 8 7 03 18 168 03 Waster weaken fo dBm 5 5 Mbits MCS 0 20MHz 1 0 Mbits MCS 0 20MHz 3 65 87 19 40 49 Master wawewill 92 dBm 1 0 Mbits MCS 0 20MHz 17 0 Mbits MCS 0 20MHz 18 alway If you have enabled a DHCP server this field will show how many devices have received an IP address and what those IP addresses are DHCP Leases Hostnane IPv4 Address MAC Address Leasetime remaining James 192 168 111 157 0 b 63 18 1 bod Tih 42m 435 JimsiPad 192 188 111 155 cE bibr 18 40 48 Tih 24m 47s The picture above shows a DHCP lease for an Android phone that is currently connecting to the routers Access Point Routes Routes The following rules are currently active on this system ARP IPv4d Address MAC Address Interface 192 168 050 AU be 0c H 5 br lan 192 166 99 254 00 00 00 00 00 00 ethd 2 Active IPv4 Routes Network Target IPvd Gateway Metric wan 0 0 0 0 0 192 168 99 254 0 lan 192 168 0 0 24 0 0 0 0 0 wan 1
15. N port of the router Front Panel e rower WAN LED Back Panel GSM main antenna connector Wi Fi antenna connector 3 GSM auxiliary antenna connector unavailable on alternate model a Resetbutton O SIM Card 1 Remove back panel and insert SIM card which was given by your ISP Internet Service Provider Correct SIM card orientation is shown in the picture 2 Attach GSM main and Wi Fi antennas 3 Connect the power adapter to the socket on the front panel of the device Then plug the other end of the power adapter into a wall outlet or powerstrip 4 Connect to the device wirelessly SSID WaveWiFi or use Ethernet cable and plug it into any LAN Ethernet port 10 g Mwave After you re complete with the setting up as described in the section above you are ready to start logging into your router and start configuring it Right click on the Wireless network icon and select Connect Disconnect A list should pop up with all available wireless networks Select Wave Wifi and click connect i Whedon Veto Corrie p a al 7 1 ne nl Crale T flatter eee f Cingric ne Begs Connec Crome habian Bacana Praca nek Then we launch our favourite browser and enter the either http mobile wavewifi com or enter the routers IP address into the address field 192 168 111 1 in inin a Press enter Ifthere are no problems you should be greeted with the Switching Page like t
16. P and red other types ICMP etc Other values indicate each respective graphs average and peak connection amounts over 3 minutes 28 Awa F LE Network Protocol Source Destination Transfer Pd TEP 192 168 0 156 37 706 192 168 99 30 3389 613 24 KB 8338 Fkts Pd UDF 192 166 0 19 137 192 166 0 255 137 24 KB 64 Pkts Pid UDF 192 168 0 19 138 14168 0 255 138 5 20 KB 24 Fkts Pd TER 192 1600 156 52547 173 134 78 139 808 3 30 KB 11 Fkts Pd TER 192 166 0 156 38021 199 127 194 80 50 1 97 KB 1 Pkts Pd UDF 192 158 12 67 255 250 25525550 1 13 KB 2 Pkts P TEF 192 168 0 156 42797 209 55 148 148 50 930 00 B 5 FPkts Pd TEF 192 166 0 30 55659 192 166 0 161 30 703 00 B 3 Pkts Pid UDF 0 0 0 0 68 29920220 68 00 B 2 Pkts Pd UDF 192 166 0 5 67 56255 250 2 55 6G 604 00 B 2 Pkts Pd LDP 192 166 0 156 54245 0 0 0 0 53 142 00 B 2 Pkts Pid UDF Taa 1662015641591 6 0 6 8 53 66 00 B fl Pkts On the same page you can also analyze a detailed list of all active connections that the router maintains Each entry consist of a type of network IPV4 protocol TCP UDP ICMP the source address an IPv4 address the source port the destination address an IPv4 address the destination port and how much traffic has gone through that particular connection it s size in Bytes and the amount of packets 29 Network fil Here you can configure the 4G specific settings which are used when connectin
17. access concentrator Leave empty to autodetect 4 Service Name fisse Specifies the name ofthe service Leave empty to autodetect Advanced These are the advanced settings for each of the protocols if you are unsure of how to alter these attributes it is highly recommended to leave them to a trained professional Static 32 Common Configuration General Setup Advanced Settings heal Bring Up on boot Disable NAT E if checked router will not perform NAT Masquerade on this interface Override MAC address Override WT Use gateway metric Fiekiname Sample value___ Explanation Bring up on boot On Specifies whether the interface will be configured and brought up when the router boots up Disabling will render your WAN connection non functional Disable NAT On Off Toggle NAT on and off 3 Override MAC address 00 0C 43 30 50 38 Override MAC address of the WAN interface If your ISP gives you a Static IP address it might also bind it to your computers MAC address i e that IP will only work with your computer In this field you can enter your computers MAC address and fool the gateway in thinking that it is communicating with your computer Override MTU 1500 Maximum transmission unit specifies the largest possible size of a data packet 5 Use gateway metric The WAN configuration by default generates a routing table entry With this field you can alter the metric of that entry 33 Co
18. ame System DNS to obtain domain name or IP address mapping or for any other specific DNS record Enter server hostname and click Nslookup Log containing specified server DNS lookup information will be shown after few seconds Full manual with all available Nslookup commands and parameters can be found in Linux manual page nslookup 1 Important notes O Note that DNS server must be configured correctly if you use server hostname instead of server IP address inaddress field 46 IFI Services Mwa PING Reboot function will periodically send PING command to server and waits for echo receive If no echo is received router will try again sending PING command defined number times after defined time interval If no echo is received after the defined number of unsuccessful retries router will reboot It is possible to turn of the router rebooting after defined unsuccessful retries Therefore this feature can be used as Keep Alive function when router PINGs the host unlimited number of times Common configuration Enable PING Reboot M Reboot router fno M echo recelved Interval between 30 PINGSs imin Minimum 5 minutes Retry count 5 Server to PING 127 0 0 1 6 e g 192 166 1 1 for www host com f ONS server configured correctly A Enable PING Reboot This check box will enable or disable PING reboot PING Reboot is disabled by feature default Reboot routerifnoecho This check box will disable router rebo
19. ame while having a dynamically changing IF address DEMO Enable E Status MA Service dyndns org ise Hostname mypersonaldomain dyndns org Lisername MmyUsemame th Password eneaenee IF renew interval 10 imini Force IF renew imini T2 Delete Add Enable Enables current DDNS configuration Status Timestamp of the last IP check or update 3 Service Your dynamic DNS service provider selected from the list 1 dydns org 2 3322 org 3 no ip com 4 easydns com 5 zoneedit com In case your DDNS provider is not present from the ones provided please feel free to use custom and add hostname of the update URL Hostname Domain name which will be linked with dynamic IP address 5 Usemame Name of the useraccount 6 Password Password of the user account 7 IP renew Time interval in minutes to check ifthe IP address of the device have changed interval E Force IP renew Time interval in minutes to force IP address renew 50 AVE Wile dL OpenVPN VPN Virtual Private Network is a method for secure data transfer through unsafe public network This section explains how to configure OpenVPN which is implementation of VPN supported by the MBR4G router OpenVPN OpenVPN instances Below is a list of configured OpenVPN instances and their current state Tunnel Name Tun Tap Protocol Port Status This section contains no values yet Role Client New configuration name Add New A picture abov
20. ass 33 7 i fi Module specific EDGE DL UL speeds up to 296 kbps class 33 Electrical Mechanical amp Environmental Dimensions H x W x D 100mm x 85mm x 36mm Weight 210 260g Power Supply 100 240 VAC gt 9 VDC wall adapter Input voltage range 7 30VDC Power Consumption lt 7W Antenna connectors 2 x SMA for 4G 1 x SMA for other models 1 x RP SMA for WiFi Indicators 4 x Ethernet LEDs 1 x Power LED 1 x 4G LED Operating Temperature OC to 50C Storage temperature 20C to 0C Operating Humidity 10 to 90 Non condensing Storage humidity 5 to 95 Non condens ing Applications WiFi 3G Router WiFi 3G ANT Power Port Switch WAN or LAN Please use connection the included reign bl power adapter UT iy a configuration Wave LE Setting up your router Installation After you unpack the box follow the steps documented below in order to properly connect the device For better WiFi performance put the device in clearly visible spot as obstacles suchas walls and door hinder the signal 1 First assemble your router by attaching the necessary antennas and inserting the SIM card 2 To power up your router please use the power adapter included in the box ora suitable 12 24v DC regulated supply IMPORTANT Using a different AC power adapter can damage and void the warranty for this product 3 Ifyou have a WaveWiFi EC connection you will also have to connect it to the WA
21. by reading the details of old SMS text massages you receiving usually A NTP Hostname Network Time Protocol NTP and time zone configuration settings is needed to periodically update router local time Common configuration system Properties Local Time Wed Aug 8 08 32 11 4012 Syne with browser Hostname Teltonika Timezone Bags Time Synchronization Enable builtin NTP M NTP server candidates U europe pool ntp org x j 3 europe pool ntp org Sync with browser button will synchronize local router time with computer browser time M Deserption R S SCSC Ss S S M a 2f tosmane Hesmans otros tea a eO Enable builtin NTP This check box will turn on When check box is selected you must enter one or more automatic time synchronizing working NTP servers Otherwise time sync feature will not with defined NTP servers work 5 NTP server NTP server hostname You can add as many servers as you need by clicking candidates add button at the end of server hostname field 49 MN AVE al Y YAW IFI Dynamic DNS Dynamic DNS DDNS is a domain name service allowing to link dynamic IP addresses to static hostname To start using this feature firstly you should register to DDNS service provider You are provided with add delete buttons to manage and use different DDNS configurations at the same time Dynamic DNS Dynamic OMS allows that your router can be reached with a fixed hostn
22. connecting to the internet This can either be Wired 4G or Wi Fi DHCP Specifies the type of connection This can either be static DHCP or PPPOE 10 12 104 103 The IP address that the routers uses to connect the internet acs 4 Netmask 255 255 255 240 255 255 240 Indicates the networks netmask Gateway 10 12 104 97 Indicates the default gateway an address where traffic destined for the internet is routed to 6 DNSH 8888 8 8 8 Domain name server s Oh 2m 2s How long the connection has been successfully maintained LAN LAN IPv4 address 192 166 1 161 Metmask Psa apria Lapa aA i Connected Uh Gm 145 FieldName Name Explanation 1 ieva soares 192 168 9263 aaaress tnt the router uses onthe tan new Wireless Wireless can workin two modes AP or Client AP is when the wireless radio is used to create an Access Point that other devices can connect to Client is when the radio is used to connect to an Access Point via WAN Client Wireless SSID wavew fi Channel 11 2 48 GHz BSSID O0 1E 4212 7C BB Encryption Mone Bit rate 10 0 MBit s Country o0 m Field Na me Sa Value EEEE TOE EEEE A ie SSID Fwavewifi The SSID that the AP to which the routers is connected to uses SSID that the AP to which the routers is connected to uses oe eo Connection mode Client indicates that the router is a client tosome local AP Channel 11 2 44 GHz The channel that the AP to which the routers is connected t
23. cuyacssiebhenaacmncuadesutasaaasinaisaaauttey siantieingentaeeiaechapeencisescesttasneescneian tat eieisasminegs ancieicononacas 7 HSUPA ASOP A UMTS eee eee ee eee ene eee eee ee ee eee eee 7 GSV OPRSJE DGT errer ir A ne ee ee ee eee eer eee ere ee 7 Electrica Mechanical amp Environmental cccvcssnesescciacevecbncaerds cosceevss cogieuse tues wi cutedeude asad AE EEEN AE EENEN TEASA 8 PAO CQ UNOS e T A E aes ose taieee E A E Cotte E E E E 8 SOT CMe UP VOU T ONO e wes cuasareccamanaressmoanne sanwus ness stance tuemaaa tataoue uel tess uolenemuderdonasencnmncenteuasestas 9 MVS PAM WOW ee E E E E E E 9 PONTE a Eer E E E EA 9 Ba k PDE e E E A E E E E E R 10 AAC e E E E E E sseateoieacaseneeesueess 10 Ea VVC ia E E E E E E E E E E T E E E S A E E E 11 oper EPI TO CSS ae E cactus E E EE E AE 12 POW CTE ODOM en soe creel anon no mon a oem nusbags seaman pace uaien enamine qos ec ao aaneeinnaaese ovatiome eaouecancasreeet aa teseouence 12 Using terminal block for power INDUU s vic ciacenscacsudansronneansssenvaachaaadine soutaasaaesonseacnasenasharastaoinbensacadeousaanaabaneatswadeasansexs 13 Powering the device from higher volta e cccccccecsececsececsececseceeeeceeeeeeseceeseaeeseeeseteeeeseeeeseeseaeeseeeteeeeeseesegersegeness 14 Powering MVC300 CaMELEAS cecececseeeeeeeecececececececeeeeseeeseaeaeaeseseseseseeeeeeeeeeaeeeeeeeaeas Error Bookmark not defined FURIE TO I Ee ONE a EE E 14 S02 0 e E E E E E AE E A ee TE E EE ee 14 SVS
24. e demonstrates default OpenVPN configurations list which is empty so you have to define a new configuration to establish any sort of OpenVPN connection To create it enter desired configuration name in New configuration name field select device role from Role drop down list For example to create a OpenVPN client with configuration name Demo select client role name it Demo and press Add New button as shown in the following picture Role Client New configuration name Demo Add Nev Anew configuration entry has appeared in the list and it is populated with default OpenVPN client settings Tunnel Name Tun Tap Protocol Port Status client_ Demo 1194 Disabled Fdit Delete You could select aserver in previous step to create server default configuration To see at specific configuration settings press edit button located in newly created configuration entry A new page with detailed configuration appears as shown in the picture below 51 OpenVPN instance client_Demo Main settings Enable Tun Tap Protocal Port LZ Authentication Remote host IF address Resolve Retry Mo Bind Keep alive Client Certificate authority Client certificate Client key E Tunitunnel Type of used device Ud F 1194 TCPAUDP port for both local and remote E Use fast ZO compression Tis infinite E Do not bind to local address and port Helper directive to simplify the expr
25. e process will change IP address of router to default value 192 168 1 1 and you may need to configure router again please read chapter Loggingin at page 9 Warning Do not ever remove router power supply and do not press reset button during upgrade process This will totally damage your router and it won t be accessible If you have any problems related to firmware upgrade you should always consult with local dealer Reboot Reboot router by pressing button Reboot Logout Log out from router management WEB interface 59 l Nh Glossary WAN Wide Area Network is a telecommunication network that covers a broad area i e any network that links across metropolitan regional or national boundaries Here we use the term WAN to mean the external network that the router uses to reach the internet LAN A local area network LAN is a computer network that interconnects computers in a limited area such as ahome school computer laboratory or office building DHCP The Dynamic Host Configuration Protocol DHCP is a network configuration protocol for hosts on Internet Protocol IP networks Computers that are connected to IP networks must be configured before they can communicate with other hosts The most essential information needed is an IP address anda default route and routing prefix DHCP eliminates the manual task by a network administrator Italso provides a central database of devices that are connec
26. ended power supply voltage is 212V especially when cameras are far away from MBR4G connected with long RJ45 cables Powering the device from higher voltage The device can accept input voltage up to 30 VDC If you decide not to use our standard 9 VDC wall adapter and want to power the device from higher voltage 15 30 VDC please make sure that you choose power supply of high quality Some power supplies can produce voltage peaks significantly higher than the declared output voltage especially during connecting and disconnecting them While the device is designed to accept input voltage of up to 30 VDC peaks from high voltage power supplies can harm the device If you want to use high voltage power supplies it is recommended to also use additional safety equipment to Suppress voltage peaks from power supply Function explanations The following sections contain a detailed explanation of every page tab and sub tab of the configuration interface in the order that they appear on the router Status The status section contains various information like current IP addresses of various network interfaces the state of the routers memory firmware version DHCP leases associated wireless stations graphs indicating load traffic etc and much more System Information The System Information tab contains data that pertains to the routers operatingsystem 14 Mwave Router Status Wachl AP Setup mia Hetwork Services Sysiem Wavewi
27. ession of ping and ping restart E PO CBs P Bre PO Bree You can set custom settings here according to your VPN needs Below is summary of parameters available to set Enabled Switches configuration on and off This must be selected to make configuration active 52 2 TUN TAP Selects virtual VPN interface type TUN is most often used in typical IP level VPN connections however TAP is required to some Ethemet bridging configurations Defines a transport protocol used by connection You can choose here between TCP and UDP 4 Port defines TCP or UDP port number make sure that this port allowed by firewall 5 LZO This setting enables LZO compression With LZO compression your VPN connection will generate less network traffic however this means higher router CPU loads Use it carefully with high rate traffic or low CPU resources Authentication Sets authentication mode used tosecure data sessions Two possibilities you have here Static means that OpenVPN client and server will use the same secret key which must be uploaded to the router using Static pre shared key option Tls authentication mode uses X 509 type certificates Depending on your selected OpenVPN mode client or server you have to upload these certificates to the router For client Certificate Authority CA Client certificate Client key For server Certificate Authority CA Server certificate Server
28. et cable or via a wireless network using an EC model such as Rogue Pro You can distribute your internet via an Ethernet cable 3 ports and or a wireless network Ethernet In later sections it will be explained bit by bit how to configure your router to work in a desired mode Powering Options The MBR4G router can be powered from power socket 1 using either a local DC supply or the supplied AC Power Adapter 12 i The MBR4G is fitted with a 3 5mm contact pitch terminal block for power input instead of traditional 5 5x2 5mm power socket below there is an instruction on how to power up router Using terminal block for power input 1 Loosen the screws on the top of the plug so that the wires could fit into the plug holes Use a screwdriver with a flat tip 2 Strip the ends of the wires strip length 5 6mm then place the positive and negative wires into the plug as shown in the picture below Make sure to use the same wire polarity like in the picture Use wire size of 1418 AWG 1 02 1 63mm in diameter Pole es Pole 3 After wire is inserted tighten the screws on the plug 4 Insert the pluginto the socket on the router 13 5 The other end ofthe wire needs to be connected to the powersupply of your choice Recommended wattage of powersupply gt 9W for powering only MBR4G gt 24W for powering MBR4G and four MVC300 cameras connected to it Ina MBR4G MVC300 solution recomm
29. ext can contain letters numbers spaces and EPS rae I ome alien soo maten o Sender phone number Phone number of person who You can add as many phone numbers as you need can reboot router via SMS Dropdown list with additional rows will show up if you message click on add icon at the end of phone number row Get status Check this to receive connection Disabled by default status via SMS after a reboot Status via SMS It is possible to get routers connectionstatus via SMS text message Common configuration Enable SMS Status W SMS text gender phone r number EP eg 37012345678 Femna oeste O peoo 1 Enable SMS Status This check box will enableand SMS status is disabled by default disable SMS status function SMS text SMS text which willsend routers SMS text can contain letters numbers spaces andspecial status symbols Capital letters also matters Sender phone Phone number of person who can You can add as many phone numbers as you need number receive router status via SMS Dropdown list with additional rows will show up if you message click on add icon at the end of phone number row Important Notes e 4G settings must be configured correctly If SIM card has PIN number you must enter it at Network gt 4G settings Otherwise SMS reboot function will not work 48 M h AVE i WA IFI e Sender phone number must contain country code You can check sender phone number format
30. g to your local 4G network LTE Configuration Here you can configure your LTE settings LTE Configuration APN orangewap PIN number Dialing number 99 LTE authentication method CHAP Usemame Multimedia Password iz Service automatic WA Wa Ei com The configuration is simple andstraightforward Here we will gloss over all the fields Fieldname Possible values Explanation 1 APN bangapro Access Point Name APN is a configurable network identifier used bya mobile device when connecting to a GSM carrier There is a detailed list available at http store exmoor tech co uk PIN Number 5555 orany A personal identification number is a secret numeric password shared number that falls betweena user anda system that can be used to authenticate the user between 0000 and tothe system 4G authentication CHAP PAPornone Authentication method that your carrier uses to authenticate new a emne connections 4 Usemame me Your usemame and password that you would use to connect to your Paccword met __ carriers network These field become available when you select an authentication method i e authentication method is not none These fields are always enabled on the alternate model Preferred network Your network preference If your local mobile network supports both 2G 3 G 4G or Auto GSM 2G and UMTS 3G or LTE 4G you can specify to which network you wish to connect E g if you choose
31. his Mwave WWII Router Status YachiAP Setup Admin WavelWiFi Wave WIFI Router Status Cellular NO SERVIC ci a Serings wernt wowewh oom Fimware Version MBRAG_R_O6 00 853 To Access the Admin pages select the Admin Menu from the top menu bar and you should be presented with a login screensuchas this Mwave MIFI Router Status Yacht AFP Setup Admin WaveWiFi Authorization Required Please enter your usemame and passend Lserearre Sdrmin Password Login Reset AW aT Ome Firmware Version MBR4AG F_00 00 553 11 alway Enter the default password which is wavewifi2014 into the password field then either click Login with your mouse or press the Enter key You have now successfully logged into the router and shouldsee the Status page MWAYE we E Router Status Yacht AP Saup inio Hetwork SEES System Filan WiFi System information System Rowter Harme tse ea Rauter Mosia MBER 4G Femmes Weron MDR 5G_AR_08 00 8653 Berne Wernsigon 32 15 Local Time Tee Jam 14 02 TaT 2014 Uptime Gh 11m 44s Losd Average C08 0 20 0 17 Total Available O AOB 2 E Fres A 2055 kA 20044 HB ee Cached O GBEE IHH B Coy Buttered OO 3804 A y Se S 11 Aa en or Firmware Version MBA 4G F_ 06 853 From here you can configure almost any aspect of your router Operation Modes The MBR4G router supports various operation modes It can be connected to the internet WAN via 4G standard Ethern
32. his has to be a pingable host Firewall In this section we will look over the various firewall features that come with MBR4G General Settings The routers firewall is a standard linux iptables package which uses routing chains and policies to facilitate control over inbound and outbound traffic General settings Enable S N flaod W protection Drop invalid packets Input accept Output accept A Forward reject a T Spansion 1 Enable SYN flood Checked Unchecked When checked the router becomes more resistant against SYNflood protection attacks 2 Drop Invalid packets Checked Unchecked A Drop action is performed on a packet that is determined to be invalid 3 Input Reject Drop Accept DEFAULT action that is to be performed for packets that pass through the Input chain Output Reject Drop Accept DEFAULT action that is to be performed for packets that pass through the Output chain 5 Forward Reject Drop Accept DEFAULT action that is to be performed for packets that pass Meare through the Forward chain DEFAULT When a packet goes through a firewall chain it is matched against all the rules for that specific chain If no rule matches said packet an according Action either Drop or Reject or Accept is performed 43 l Y Reject Packet is stopped deleted and differently from Drop an ICMP packet containing a message of rejection is sent Accept Packet gets to con
33. ic be forwarded fal he IP address IPv4 address ofsome The IP address of the intemal machine that hosts some service computer on your LAN that we want to access from the outside Internal port 1 65535 To what port on the internal machine would the rule redirect the traffic Additional note Notice how the external port is 12345 and not 80 It is perfectly fine to define the external portas 80 but then the routers configuration interface would not reachable unless you change the web access port from remote management When you click edit you can fine tune a rule to near perfection if you should desire that 44 4 AWAYE The traffic rule page contains a more generalized rule definition With it you can block or open ports alter how traffic is forwarded between LAN and WAN and many more things _ Fieliname Sample value Explanation Used to make rule management easier Only IPv4 is currently supported Protocol ofthe packet that is being matchedagainst traffic rules 4 Source IPv4address The source of the packet The destination of the packet Action Drop Accept Reject Action to be taken on the packet if it matches the rule You can also define chain additional additional options like limiting packet volume and defining to which chain the rules rule belongs 7 Enable Checked Unchecked Self explanatory Uncheck to make the rule inactive The rule will not be deleted but it also will not be loaded
34. io on and off Channel 11 2 462 GHz Interface Configuration General Setup Wireless Secumty MAC Filter ESSID wavew Hide ESSID I Firmware Version MBR4G R_09 00 853 Here you can see the Overview of the wireless configuration It is divided into two main sections device and interface One is dedicated to configuring hardware parameters other software 39 Device General Device Configuration General Setup Advanced Settings Wireless networkis Disable enabled E Donttorgetto save before toggling the wireless radio on and off Channel 11 2 462 GHz es Here you can toggle the availability ofthe wireless radio and the physical channel frequency Important note As seen in the picture you should always Save before toggling the radio on and off Advanced Device Configuration General Setup Advanced Settings Mode 802 11g n HT made 20MHz Lel Counte Code 00 World el B Use ISOWEC 3166 alpha country codes Distante Optimization J Distance to farthest network member in meters Fragmentation Threshold RTSICTS Threshold Tr aaa can configure more advanced parameters Fieldname name Sample value Explanation Mode Auto b g g n Different modes provide different throughput and security options fas hei Code Any ISO IEC 3166 Selecting this will help the wireless radio configure its internal alpha2 country code parameters to meet your countries wireless regulations a Optimization 910000 Dista
35. key and Diffie Hellman DH certificate used to key exchange through unsafe data networks All mention certificates can be generated using OpenVPN or OpenSSL utilities on any type host machine Certificate generation and theory is out of scope of this user manual 7 Remote host IP IP address of OpenVPN server applicable only for client configuration address Resolve Retry Sets time in seconds to try resolve server hostname periodically in case of first resolve failure before generating service exception a and another one defines a time window which is used to restart OpenVPN service if no ICPM request is received during the window time slice Local tunnel IP address of virtual local network interface applicable only for point to point connections aa OAT Remote tunnel IP address of virtual remote network interface Remote IP address of remote virtual network network IP 10 1 12 address Remote Subnet mask of remote virtual network network IP netmask UW After setting any of these parameters press Save button Some of selected parameters will be shown in the configuration list table You should also be aware of the fact that router will launch separate OpenVPN service for every configuration entry if itis defined as active of course so the router has ability to act as server and client at the sa me time IPsec The IPsec protocol client enables the router to establish a secure connecti
36. mmon Configuration General Setup Advanced Settings Bring Up on boot Disable MAT B If checked router will not perform MAT Masquerade on this interface Use broadcast flag B Required for certain ISPs e g Charter with DOCSIS 3 Use default gateway B If unchecked no default route is configured Seo a Use DMS servers advertised by peer B Ifunchecked the advertised ONS server addresses are ignored Use gateway metric Client ID to send when requesting DHCP Vendor Class to Send wher requesting DHCP Override MAC address Override WT PPPoE 34 Common configuration General Setup Advanced Settings Disable NAT E lf checked router will not perform MAT Masquerade on this interface Lise default gateway unchecked no default route is configured Use gateway metric Use DNS servers lf unchecked the advertised DNS server addresses are ignored advertised by peer LCP echo failure threshold Presume peer to be dead after given amount of LCP echo failures use U to ignore failures LEP echo interval send LCP echo requests at the given interval in seconds only effective in conjunction with failure threshold Inactivity timeout Close inactive connection after the given amount of seconds use U to persist connection IP Aliases IP aliases area way of defining or reaching a subnet that works in the same space as the regular network 35 IP Aliases SUBNETSS seneral Setup Advanced Settings IFv4 Addre
37. nce to farthest network member in meters Frag Threshold The smallest packet size that can be fragmented and transmitted by multiple frames Inareas were interference isa problem setting a lower fragment threshold might help reduce the probability of unsuccessful packet transfers thus increasing speed 5 RTS CTS Threshold 2346 Request to send threshold It can help resolve problems arising when several access points are in the same area contending 40 Interface General Interface Configuration General Setup Wireless Secunty MAC Filter Hide ESSID O ESSID Your wireless networks identification string This is the name of your Wi Fi network When other Wi Fi capable computers or devices scan the area for Wi Fi networks they will see your network with this name Hide ESSID Will render your SSID hidden from other devices that try to scan the area Security Interface Configuration General Setup Wireless Security MAC Filter Encryption VWWYPA2 PSK A Cipher auto A Key TITLI LT ta Encryption There are many modes of encryption though two distinctive classes have to pointed out WEP Encryption EF Open system Used Key Slot Key Key 1 a Key 2 a Key 3 2 key 4 2 Enter the keys that will be used as passphrase for connecting computers and then specify which key will be preferred above the remaining It s sufficient to enter one key and then specify it as the preferred one Length is impor
38. o uses Your wireless radio is forced to work in this channel in order to maintain the connection ae BSSID C8 3A 53 02 FC BO The MAC address of the access points radio Wave VW LE L 5 Encryption WPA2 PSK CCMP The AP to which the router is connected to dictates the type of encryption Bit rate 65 0 MBit s The physical maximum possible throughput that the routers radio can handle Keep in mind that this value is cumulative The bitrate will be shared between the router and other possible devices that connect to the local AP AP Wireless 55 0 wavew tf Mode Master Channel 11 2 46 GHz BSSID 00 1E 412 7C 8B Encryption Mone Bit rate 10 0 MBit s Couniry 00 Field Name Sample Value Explanation Signal Quality The quality between routers radioand some other device that is connecting to the router Will show 0 if no devices are trying to connect or are currently maintaining a connection 2 SSID wavewifi The SSID that is being broadcast Other devices will see this and will be able to use to connect to your wireless network Connection mode Master indicates that you router is an access point Me nnel 6 2 44 GHz The channel which is used to broadcast the SSID and to establish new connections to devices 5 BSSID 00 0C 43 30 50 38 MAC address of your wireless radio Encryption WPA2 PSK CCMP The type of encryption that the router will use toauthenticate establish and Ga ad 7 Bit rate 1 0
39. on to an IPsec peer via the Internet IPsec is supported in two modes transport and tunnel Transport mode creates secure point to point channel between two hosts Tunnel mode can be used to build a secure connection between two remote LANs servingas a VPN solution 53 WAVE IPsec system maintains two databases Security Policy Database SPD which defines whether to apply IPsec to a packet or not and specify which how IPsec SA is applied and Security Association Database SAD which contain Key of each IPsec SA The establishment of the Security Association IPsec SA between two peers is needed for IPsec communication It can be done by using manual or automated configuration Note router starts establishing tunnel when data from router to remote site over tunnel is sent For automatic tunnel establishment used tunnel keep alive feature Automatic IPSec Key exchange Description Enable IPsec MI IPSec key exchange Auto Key IKE mode Wlode aggressive Enable NAT traversal O Enable initial contact C My identifier type address l hy identifier Owe Preshare Key 123456709 6 Length 6 32 Remote WPN endpoint 61 51 61 51 IP address Fieldname Description Enable IPSec Check box to enable IPSec IPSec key exchange mode Automatic Key exchange Enable NAT traversal Enable this function if client to client applications will be used Enable initial contact Enable this to send an INITIAL CONTACT message 5
40. oting after This check box must be received the defined number of unsuccessful retries unselected if you want to use PING Reboot feature as Keep Alive function 3 Interval between PINGs Time interval in minutes between two PINGs Minimum time interval is 5 minutes Retry count Number of times trysending PING to server after Minimum retry number is 1 time interval if echo receive was unsuccessful Second retry will be done after defined time interval 5 Server to PING Server IP address or host name which will receive If you use server host name PING from router instead of the IP address you must configure DNS server first Important notes O Always check if your defined server responds to echo commands before using PING Reboot function Otherwise router keeps rebooting after unsuccessful PING echo receive You can test PING send at Network gt Diagnostics 47 Wave WY LE 1 SMS Reboot It is possible to reboot router via SMS text message This function is useful when router does not respond and it is difficult to manually restart router by hand Common configuration Enable SMS Reboot OMS text Sender phone a number E e g 37012345678 Get status C Get detailed router connection information via SMS message after SMS reboot Fieliname Description Notes o 1 Enable SMS Reboot This check box will enable and SMS reboot is disabled by default see n SMS text SMS text which will reboot SMS t
41. r will send all the outgoing traffic IPv4 broadcast 192 168 111 255 Broadcastaddress autogenerated if not set It is best to leave this blank unless you know what you are doing custom DNS servers 8 8 8 8 8 8 4 4 Usually the gateway has some predefined DNS servers As such the router when it needs to resolve a hostname www google com www cnn com etc to an IP address it will forward all the DNS requests to the gateway By entering custom DNS servers the router will take care of host name resolution You can enter multiple DNS servers to provide redundancy in case the one of the server fails 31 DHCP Common Configuration General Setup Advanced Settings Protocol DHCP client Hostname to send when requesting DHCP When you select the DHCP protocol you can use it as is because most networks will not require any additional advanced configuration PPPoE This protocol is mainly used by DSL providers Common configuration General Setup Advanced Settings Protocol PPPoE PAPICHAP username test PAPLCHAP password se ab Access Concentrator Leave empty to autodetect oervice Mame Leave empty to autodetect This is the configuration setup for when youselect PPPoE protocol Filename Sampe Explanation PAP CHAP usemame Your username and password that you would use to connect to your PAP CHAP password carriers network 3 ise EM Access Concentrator isp Specifies the name of
42. recommended to transport it packed ina damageproof pack Protection in primary circuits of associated PC and PSU LPS against short circuits and earth faults of associated PC shall be provided as part of the building installation To avoid mechanical damages to the device it is recommended to transport it packed ina damage proof pack While using the device it should be placed so that its indicating LEDs would be visible as they inform in which working mode the device is and ifit has any working problems Protection against overcurrent short circuiting and earth faults should be provided as a part of the building installation Signal level of the device depends on the environmentin which itis working In case the device starts working insufficiently please refer to qualified personnel in order to repair this product We recommend forwardingit to a repair centre or the manufacturer There are no exchangeable parts inside the device Device connection Automatic Shutdown Wall Outlet sop laa N an o O e 230V AC AC DC 9V UTP cable Wave Introduction Thank you for purchasing a MBR4G router MBR4G is part of the MBRxx series of compact mobile routers with high speed wireless and Ethernet connections This router is ideal for people who d like to share their internet on the go as it is not restricted by a cumbersome cable connection Unrestricted but not forgotten the router still supports internet dist
43. ress space traffic over an intermediate TCP IP network such as the Internet GRE tunnelling does not use encryption it simply encapsulates data and sends it over the WAN WAN IP aa i 182 158 0 2 In the example network diagram two distant networks LAN1 and LAN2 are connected To create GRE tunnel the user must know the following parameters 1 Sourceand destination IP addresses 2 Tunnel local IP address 3 Distant network IP address and Subnet mask 56 Enable GRE Tunnel E TTL E value 0 255 PMTUD E Remote tunnel network address Remote CIDR B CIDR netmask value 0 32 Remote IP address MITI 1500 E MTU value 0 1500 Fieldname Explanation Enable GRE Tunnel Check the box to enable the GRE Tunnel function 2 TTL Specify the fixed time to live TTL value on tunnelled packets 0 255 The 0 is a C special value meaning that packets inherit the TTL value 3 PMTUD Check the box to enable the Path Maximum Transmission Unit Discovery PMTUD status on this tunnel Remote tunnel network Specify remote LAN Subnet address address ES 5 Remote CIDR Specify remote LAN Subnet CIDR value 6 Remote IP address Specify remote WAN IP address 7 MTU Specify the maximum transmission unit MTU ofa communications protocol of a layer in bytes Administration Administration properties Administration password Enter your newadministration password Re enter your newadministration pass
44. ri System information System Router Mane Wawe WiFi Router Model MBRAG Fimnrvsre Version MBRAG_ R_08 00 853 Kernel Version 3 2 15 Local Time Tue Jon 14 08 16 22 2014 Uptime Oh iim 44s Load Average 0 00 0 20 Lay Memory Total Available 15400 EB 20044 kB 14 Frese S088 kA 20044 kA rte Cached OBEE kA HAAA kB 32 Buffered 3504 A PEHA kB 11 A E T Finmware Version MBRAG_A_00 00 853 System E Field Na me Sample value Explanation Name ofthe router hostna me ofthe routers system Router Model WaveWiFi MBR4G Routers model 3 Firmware MBR4G_R_00 00 436 Shows the version of the firmware that is currently loaded in the router Version Newer versions might become available as new features are added Use this field to decide whether you need a firmware upgrade or not ra Kernel version 3 235 The version ofthe Unux kernel that is currently running on the router 5 Local Time Fri Jun 29 16 38 48 2012 Shows the current system time Might differ from your computer eaten RAN Re pocceterouaropcientnttcume inant Uptime 4h 29m 3s Indicates how long it has been since the router booted up Reboots will cae eee ream ee 7 Load Average 0 98 0 57 0 30 Indicates how busy the router is Let s examine some sample output 2 43 2 96 3 41 The first number 2 43 means that in the past minute there have been on average 2 43 processes running or waiting fora resource The second number show that in the past 10
45. ribution via a WiFi Hotspot using an EC model simply plug it in to the wan port set the router to a correct mode and you are ready to browse Specifications LAN and Wi Fi e Wireless AP Router 4 Port Switch and Firewall in one device e High performance 320 MHz CPU with 256 Mbits SDRAM e EEE802 11b g n IEEE 802 3 IEEE 802 3u standards e 64 128 bit WEP WPA WPA2 WPA amp WPA2 encryption methods e 3xLAN 10 100Mbps Ethernet ports e 1xWAN 10 100Mbps Ethernet port e Supports Auto MDI MDIX e Remote local Web management e 1x 5dBi wireless antenna e SSID stealth mode and access control based over MAC address e System log to record the status ofthe Router e Auto negotiation manual mode for IEEE 802 11b g n e Dynamic DNS e LAN access control over Internet connection e Virtual server e Auto wireless channel selection e OpenVPN e IPSec e SMS and Ping reboot HSUPA HSDPA UMTS e Power Class 3 0 25 W 24 dBm for UMTS e UMTS mode 384 Kbps DL 384 Kbps UL e HSUPA mode 5 76 Mbps Cat 6 uplink speed e 3dBi antenna e Downlink speed up to 21 Mbps or 7 2 Mbps GSM GPRS EDGE e 850 900 1800 1900 MHz e Power Class 4 2 W 33 dBm for GSM GPRS 850 900 MHz bands e Power Class 1 1 W 30 dBm for GSM GPRS 1800 1900 Mhz bands e Power Class E2 0 5 W 27 dBm for EDGE 850 900 MHz bands e Power Class E2 0 4 W 26 dBm for EDGE 1800 1900 MHz bands e GSM 14 4 Kbps DL 14 4 Kbps UL e Module specific GPRS DL UL speeds up to 107 kbps cl
46. ss 192 168 55 161 IPv4 Netmask 255 255 255 0 l IPvd Gateway 1932 165 55 153 Delete Add As you can see the configuration is very similar to the static protocol only in the example a 55 th subnet is defined Now if some device has an IP in the 55 subnet 192 168 55 xxx and the subnets gateway metric is higher and the device is trying to reach the internet it will reroute it s traffic not to the gateway that is defined in common configurations but through the one that is specified in IP aliases IP Aliases SUBNETSS General setup Advanced settings IPwi Broadcast DNS Server Delete Add You may also optionally define a broadcast address and a custom DNS server LAN This page is used to configure the LAN network where all your devices and computers that you connect to the router will reside 36 LAN Qin this page you can configure your LAN settings Common Configuration General setup Advanced Settings Protocal static address A IPv4 address 192 165 0 161 IPvd netmask JaA A IPvd gateway IPy4 broadcast 7 Use custom DNS E Servers IP Aliases fs section contains no valves yet Add The common configuration and IP aliasing sections are identical to the ones found in WAN so for an explanationon how they work please follow through there DHCP Server The DHCP server is the router side service that can automatically configure the TCP IP settings of any device that requests such a service
47. tantas well 10 or 26 characters in length in hex mode OR5 or 13 in ASCII mode A hex key may only contain numbers O through 9 and letters a through f WPA 41 Mwave TT WIF Encryption WIPA Pok ral EE Cipher auto key TIITLIT I First select an encryption method TKIP CCMP TKIP amp CCMP auto Note Some authentication methods won t support TKIP and TKIP amp CCMP encryption After you ve selected your encryption method you should enter your passphrase which must be at least 8 characters long MAC Filter Interface Configuration General Setup Wireless security MAC Filter MAC Address Filter Allow listed only MAC List Lal Filter you can define a rule for what to do with the MAC list you ve defined You can either allow only the listed MACs or allow ALL but forbid only the listed ones Client Client mode is nearly identical to AP except for the fact that most for the options are dictated by the wireless access point that the router is connecting to Changing them can result in an interrupted connection to an AP In addition to standard options you can also click the Scan button to rescan the surrounding area and attempt to connect to a new wireless access point The majority of the options consist of timing and other important parameters that help determine the health of your primary connection Regular health checks are constantly performed in the form of ICMP packets PIN
48. ted to the network and eliminates duplicate resource assignments ETHERNET CABLE Refers to the CAT5 UTP cable with an RJ 45 connector In other words the most common internet cable ever AP Access point An access point is any device that provides wireless connectivity for wireless clients In this case when you enable Wi Fi on your router your router becomes an access point DNS Domain Name Resolver Aserver that translates names such as www google com to their respective IPs In order for your computer or router to communicate with some external server it needs to know it s IP its name www something com just won t do There are special servers set in place that perform this specific task of resolving names into IPs called Domain Name servers If you have no DNS specified you can still browse the web provided that you know the IP of the website you are trying to reach Forexample enter 74 125 224 72 into a browser should open the webpage for google com This isa good test for testing DNS settings 60
49. tes etna 59 LOOO e E A A ere 59 Fn Tonn OI EG 1 el Ue cxzce aici cenaeasinentescioccincansieeae aun vet ce nese ue A E T 59 SMS PY FTP POSI GEN wscsriuiscssteacsadsaienieedassecaaneaststasienigagnchaceaademieeracabndinaageietseasadesanseies Error Bookmark not defined OS ee ct ees asst sth ste E E st enerpe sats eyecat cman need patente eee tae eee ecsneeseee 60 SAFETY INFORMATION In this document you will be introduced on how to use a MBR4G router safely We suggest you to adhere to the following recommendations in order toavoid personal injuries and or property damage You have to be familiar with the safety requirements before using the device To avoid burning and voltage caused traumas of the personnel working with the device please follow these safety requirements AWAvE VW LE L Source LPS that power consumption should not exceed 15VA and current rating of overcurrent The device is intended for supply from a Limited Power t gt protective device should not exceed 2A The highest transient overvoltage in the output secondary circuit of used PSU shall not exceed 71V peak The device can be used with the Personal Computer first safety class or Notebook second safety class Associated equipment PSU power supply unit LPS and personal computer PC shall comply with the requirements of standard EN 60950 1 Do not mount or service the device during a thunderstorm To avoid mechanical damages to the device it is
50. tinue down the next chain Drop Packet is stopped and deleted to the source of the dropped packet DMZ DMZ configuration Enabled E DM hostiP address By enabling DMZ for a specific internal host for e g your computer you will expose that host and its services to the routers WAN network i e internet Port Forwarding Here you can define your own port forwarding rules Firewall Port Forwarding Port forwarding allows remote computers on the Internet to connect to a specific computer or serice within the private LAM Port Forwarding Name Protocol Source Via Destination Enable Sort localvWebsite TCP From any fost in wan To any router IP at port Forward to IP 792 766 99 756 port 20 in Fal Edit Delete T2245 lan New port forward Name Protocol External port Internal IP address Internal port localebsite TCP UDP 12345 192 169 99 156 Le 80 Add You can use port forwarding to set up servers and services on local LAN machines The above picture shows how you can set up a rule that would allow a website that is being hosted on 192 168 99 156 to be reached from the outside by entering http routers External p 12345 a Field Name Sample Value Explanation af Name localWebsite Name ofthe rule Used ied to make it easier to manage rules 2 Protocol _ TCP UDP TCP UDP Other Type Type ofprotocolofincomingpacket i of incoming packet External Port 1 65535 From what port on the WAN network will the traff
51. up Advanced Settings Dynamic DHEP Force E B Force DHEF on this network even if another server is detected IPv4 netmask DHCP Options B Define additional DHCP options for exariple 6 192 168_2 1 192 168_2 2 which advertises different DNS servers to clients Field Name Sample Value Explanation 1 Dynamic DHCP Checked Unchecked Dynamically allocate client addresses ifset to 0 only clients present inthe ethers files are served 2 Force Checked Unchecked Forces DHCP serving even if another DHCP server is detected on the same network segment 3 IPv4 netmask 255 255 255 0 You can override your LAN netmask here to make the DHCP server think it s serving a larger or a smaller network than it actually is DHCP Options 6 192 168 89 1 192 168 111 1 Additional options to be added for this DHCP server For example 26 1470 option mtu with 26 1470 or option mtu 1470 you can assign an MTU per 1470 DHCP Your client must accept MTU by DHCP for this to work Wireless On this page you can configure your wireless settings Depending on whether your WAN mode is set to Wifi or not the page will display either the options for configuring an Access Point or options for configuring a connection to some local access point Access Point 38 Yacht WIFI Access Point Stettings Device Configuration General Setup Advanced Settings Wireless network is enabled Disable Dont forget to save before togging the wireless rad
52. word Important notes e The only way to gain access to the web management if you forget the administrator password is to reset the device factory de faultsettings Default administrator login settings are User Name admin Password wavewifi2014 Logging System logs are divided into following groups e Info 57 e Notice e Warning e Error e Critical e Alert e Emergency You can watch logs by choosing the group from dropdown listand clicking button show SSH Access control SSH Access SSH can be enabled or disabled by choosing Enable or Disa ble from dropdown list Specify port for SSH access Default port is 22 3 Remote SSH access If check box is selected users canaccess the router via SSH from the outside WAN When check box is not selected users canaccess the router only from LAN Note The router has 2 users admin for webUl and root for SSH When logging in via SSH use root Web Access control HTTP Web server port specify a port number for routers web management via HTTP protocol Default port is 80 2 Remote HTTP access if check box is selected users can access the router via the HTTP WEB Interface from the outside WAN When check box is not selected users can access the router only from LAN 3 HTTPS server port specify a port number for routers web management via HTTPS protocol Default port is 443 Remote HTTPS access if check box is selected
Download Pdf Manuals
Related Search