ETIC 1400 Uživatelská příručka

RAS-3G UMTS GPRS EDGE IP Router - RAS - firewall _________________ USER GUIDE Document reference : 9020009-01 _____

PRODUCT OVERVIEW Page 10 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G

PRODUCT OVERVIEW UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 11 4 Data-sheet General characteristics Dimensions 137 x 4

PRODUCT OVERVIEW Page 12 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G Remote access server (RAS) User list 25 users Connection

PRODUCT OVERVIEW 5 Product overview 5.1 Functions overview The RAS- 3G router is designed to interconnect safely automated devices over the UMT

PRODUCT OVERVIEW Due to its functions and its worldwide 3G module, the RAS-3G provides to authorized users a remote access to remote industrial

PRODUCT OVERVIEW UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 15 5.2 Main features The RAS-3G router provides the functions

PRODUCT OVERVIEW Page 16 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G Html and DIP switches configuration The RAS-3G is configured

INSTALLATION UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 17 1 Dimensions Dimensions 2 Connectors RAS-3G-1220 RA

INSTALLATION Page 18 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS3G 8 positions screw terminal : Supply voltage and digital input /

INSTALLATION UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 19 RS232 RJ45 connector port 2 (To connect to a DCE to the RS23

Page 2 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G The RAS-3G router is manufactured by ETIC TELECOM 13 Chemin du v

INSTALLATION 3 Led indicators Indicator Status Description All models Flashing green until connection to the 3G network After power-on, and duri

INSTALLATION 4 DIP switches DIP switches SW 1 SW 2 Management OFF OFF The current IP@ of the product is the stored IP @ ON OFF The active I

INSTALLATION Page 22 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS3G 7 Cooling To avoid obstructing the airflow around the unit, the s

INSTALLATION 9 RS485 interface The RS485 serial interface is provided on the front panel 2 pins screw-block. The RS485 serial interface is prov

INSTALLATION 12 Installing the SIM card Before installing the SIM card into the router, its PIN code must have been cleared. The PIN code can be c

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 25 1 Set up steps To configure the router, we advise to proceed as fol

SET UP Page 26 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 2 Connecting a PC to the router for configuration 2.1 Overview Admini

SET UP 2.3 Modifying the configuration from the LAN • If the IP @ of the RAS-3G on the LAN interface is fixed Step 1 : Ensure the DIP switch S

SET UP Page 28 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 2.4 Modifying the configuration remotely Coming from the factory, the

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 29 Remark : The stored configuration will be lost; the factory IP address

CONTENT UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 3 PRESENTATION 1 SECURITY RECOMMENDATIONS ...

SET UP 9 LAN interface set up The LAN interface is made of 4 Ethernet switched ports or of 2 Ethernet switched ports and 2 serial ports or 2 seri

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 31 9.1 IP protocol • Click the « Configuration» menu and then « LAN in

SET UP 10 UMTS – GSM-GPRS-3GDGE interface set up The RAS-3G router’s UMTS – GSM-GPRS-EDGE interface is configured through the WAN interface menu

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 33 10.3 “Control” menu The RAS-3G router may not detect that the 3G con

SET UP Page 34 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 11 Setting up the DynDNS service Remark : The DynDNS service is free

SET UP 12 Creating VPN connections between routers 12.1 Principles A VPN tunnel is a safe link set between two end-points routers over an IP netw

SET UP To create VPN connections between routers, • select the « Setup» menu and then « Network» and then “VPN connections”. Page 36 User gui

SET UP 12.2 IPSec VPN connections 12.2.1 Configuring the IPSec protocol • Select the “Setup” menu, the “network” menu and then ‘VPN connections

SET UP Page 38 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G “Encryption and hash algorithm phase 1” & “Encryption and hash algor

SET UP 12.2.2 Configuring an outgoing IPSec connection VPNINTERNET3GLAN IP addr.Outgoing connectionWAN IP addr.Remote WANIP addressRemote LANIP ad

CONTENT Page 4 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G … SET UP 6 RESTRICTING ACCESS TO THE ADMINISTRATION SERVER ...

SET UP Page 40 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G “PSK value” parameter : Enter the value of the PSK. ”My WAN address” pa

SET UP 12.2.3 Configuring an ingoing IPSec connection .3 Configuring an ingoing IPSec connection VPNINTERNET3GLAN IP addr.Ingoing connectionWAN

SET UP Page 42 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G “Use a specific key for this connection” parameter : If that option is n

SET UP 12.3 TLS VPN connections 12.3.1 Configuring the TLS-SSL protocol • Select the “Setup” menu, the “network” menu and then the ‘VPN connectio

SET UP Page 44 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G “Connection death time-out” parameter : This parameter defines the max

SET UP 12.3.2 Configuring an outgoing TLS connection VPNINTERNET3GLAN IP addr.Outgoing connectionWAN IP addr.Remote WANIP addressRemote LANIP addr

SET UP 12.3.3 Configuring an ingoing TLS connection VPNINTERNET3GLAN IP addr.Ingoing connectionWAN IP addr.Remote WANIP addressRemote LANIP addres

SET UP 13 Routing functions 13.1 Basic routing function Once an iP address has been assigned to the R2 router on the LAN interface and another one

SET UP 13.2 Static routes However, the router R2 is not able to route frames between a device like L1 belonging to the LAN network and a device con

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 49 13.3 RIP protocol RIP (Routing Information Protocol) is a routing pr

CONTENT UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 5 … SET UP 18 M2ME_CONNECT SERVICE ...

SET UP 14 Address and port translation The RAS-3G provides the capability to replace the original source IP address and the destination port and

SET UP To set the Port forwarding function, • select the “network” menu and then the “Port forwarding” menu. • Click “Add a DNAT” rule. 14.

SET UP 14.2.2 Configuration To set the advanced address translation functions, • select the “Setup” menu, “Network” , and then the “Advanced NAT

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 53

SET UP To replace the source IP address & destination port • Click “Add a SNAT” rule. • Select “Yes” to enable the rule. • Enter the repla

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 55 15 VRRP redundancy That function is available only in RAS-3G-1400,

SET UP Page 56 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G «Use a virtual MAC address» parameter : A virtual MAC address can be ass

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 57 16 Remote users connections service The RAS-3G provides a full remot

SET UP 17 Remote users connections 17.1 Principles A remote user connection is a tunnel set between a remote PC and a router providing the RAS fun

SET UP 17.2 Configuring a TLS connection The M2Me_Secure software provided by ETIC TELECOM is a Windows TLS client software. Installed on a PC runn

SET UP Page 60 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G ”Port number” & “Protocol” : Select the port Nr and the type of lev

SET UP 17.3 Configuring a PPTP connection We describe hereafter how to configure the router and the PC to set a PPTP remote user connection betwee

SET UP 18 M2Me_Connect service This function is available in RAS-3G-1400, RAS-3G-1201, RAS-3G-1220, RAS-3G-1230 routers only. 18.1 Overview The M

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 63 18.2 Configuring a M2Me_Connect connection Step 1 : Router configura

SET UP 19 Users list Storing at least an authorized user in the users list is necessary if a remote user wishes to connect to the RAS-3G with a PPT

SET UP To add a user form • Click the “add a user ” button “ Active (value Yes or NO)” : Select “No” if you want to prevent the user to access

SET UP 20 Firewall 20.1 Overview The firewall filters IP packets between the WAN and the LAN interface of the RAS-3G router. It is divided in 3

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 67 20.2 Main filter The main filter applies to all the IP packets exce

SET UP 20.2.2 Configuring the main filter Select the “Security” menu and then “Firewall” and “Main filter”. The “Main filter” page is divided in

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 69 The cautious default policy is to choose the value “Drop”; at the oppo

PRODUCT OVERVIEW UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 7 1 Security recommendations The RAS-3G is a low pow

SET UP Step 1 : Complete, if necessary, the list of services Remark : The main services (html, ftp, modbus) are available from factory; for that re

SET UP Step 3 : Build a remote user filter • Select the « security» menu, then « firewall» and then «Filter list» The users filters list is displa

SET UP Page 72 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G • Assign a name to the new filter. • Choose the policy ; « All is for

SET UP UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 73 21 Serial to IP gateway That function is available in RAS-3G-1220 o

SET UP 21.1 Modbus menu 21.1.1 Modbus server gateway This gateway allows to connect asynchronous modbus slaves to the serial interface of the IPR

SET UP “TCP port number” parameter : Set the port number the gateway has to use. If the Raw TCP client gateway is assigned to both serial COM ports,

SET UP 21.2 RAW TCP gateway 21.2.1 Raw client gateway The RAW client gateway can be used if a serial “master” device has to send requests to one

SET UP 21.2.2 Raw server gateway That gateway can be used if a serial slave device has to answer requests coming from devices located on the IP net

SET UP 21.3 RAW UDP gateway 21.3.1 Overview The RAW UDP gateway enables you to connect together a group of serial or IP devices through an IP net

SET UP 22 USB to IP gateway 22.1 Principles The RAS-3G-1201 provides a USB to IP gateway. It is able to forward IP traffic from devices connected

PRODUCT OVERVIEW Page 8 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 2 CERTIFICATE OF CONFORMITY The manufacturer, ETIC Telec

SET UP Page 80 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 23 Advanced functions 23.1 Adding a certificate Coming from the facto

SET UP Alarm launched on event : If the option OPEN is selected, the alarm will be sent each time the digital input will be opened. If the option CL

SET UP Page 82 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 23.4 Configuring the DNS server For domain names resolution, the RAS-3

DIAGNOSTIC & MAINTENANCE UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 83 1 Diagnostic menu The html server provides ex

DIAGNOSTIC & MAINTENANCE Page 84 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G • Serial gateway : That page displays the curr

DIAGNOSTIC & MAINTENANCE UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 85 2 Saving the configuration to a file Once a p

DIAGNOSTIC & MAINTENANCE Page 86 User guide ref 9020009-01 UMTS GPRS EDGE router ref. RAS-3G 3 Updating the firmware Step 1 : Before startin

APPENDIX 1 Management web server UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 87 1/ Setup menu Remote users To assign an ID

13, Chemin du Vieux Chêne 38240 Meylan - France Tel : 33 4 76 04 20 00 Fax : 33 4 76 04 20 01 E-mail : cont

PRODUCT OVERVIEW UMTS GPRS EDGE router ref. RAS-3G User guide ref. 9020009-01 Page 9 3 Products identification RAS-3G -1400 -1201 -1220 12