Etic Telecom RAS Series Manuel utilisateur

DOC_DEV_Router setup guide_A

RAS / IPL / SIG

_________________

SETUP GUIDE

_________________

Page 2 DOC_DEV_Router setup guide_A

The product family RAS, IPL et SIG are manufactured by

ETIC TELECOM

13 Chemin du vieux chêne

38240 MEYLAN

FRANCE

TEL : + (33) (0)4-76-04-20-05

E-mail : hotline@etictelecom.com

web : www.etictelecom.com

TABLE OF CONTENTS 
DOC_DEV_Router setup guide_A page 3 
 
OVERVIEW.....................................................................................................................................5 
1Purpose of this manual .................................................................................................................................... 5 
2Main functions of these Routeurs.................................................................................................................... 5 
PREPARING THE SETUP..............................................................................................................9 
1Connecting a PC for configuration .................................................................................................................. 9 
1.1 Overview................................................................................................................................................. 9 
1.2 First configuration ............................................................................................................................... 10 
1.3 Changing the configuration later ........................................................................................................ 10 
2Access to the administration server through the WAN interface ................................................................ 11 
3Working with HTTPS....................................................................................................................................... 11 
4Temporary return to the factory settings ...................................................................................................... 12 
5Restoring the factory settings........................................................................................................................ 12 
6Protecting the access to the administration server...................................................................................... 13 
7Configuration steps ........................................................................................................................................ 13 
SETUP..........................................................................................................................................15 
1Ethernet / WAN interface setup ..................................................................................................................... 15 
2ADSL interface setup ...................................................................................................................................... 17 
3Cellular interface setup................................................................................................................................... 19 
3.1 SIM 1 or SIM 2 set-up .......................................................................................................................... 19 
3.2 Using the SIM cards 1 and 2................................................................................................................ 20 
3.3 Cellular connection control ................................................................................................................. 21 
4Wi-Fi / WAN interface setup ........................................................................................................................... 22 
5LAN interface setup ........................................................................................................................................ 23 
5.1 Overview............................................................................................................................................... 23 
5.2 Ethernet & IP menu............................................................................................................................. 24 
5.3 Wi-Fi access point set-up .................................................................................................................... 25 
5.4 Device list set-up.................................................................................................................................. 26 
5.5 DHCP server menu .............................................................................................................................. 27 
6IPSec VPNs setup ........................................................................................................................................... 28 
6.1 Overview............................................................................................................................................... 28 
6.2 IPSec VPN connection set-up............................................................................................................. 29 
7OpenVPN type VPN connection..................................................................................................................... 33 
7.1 Overview............................................................................................................................................... 33 
7.2 Set-up principles .................................................................................................................................. 34 
7.3 OpenVPN server set-up ....................................................................................................................... 35 
7.4 Setting up an outgoing connection .................................................................................................... 37 
7.5 Setting up an ingoing VPN connection............................................................................................... 38 
8IP routing ......................................................................................................................................................... 39 
8.1 Basic routing function ......................................................................................................................... 39 
8.2 Static routes......................................................................................................................................... 39 
8.3 RIP protocol ......................................................................................................................................... 40 
9Substitution of addresses (NAT, Port forwarding, Advance NAT)............................................................... 41 
9.1 Network address translation (NAT).................................................................................................... 41 

TABLE OF CONTENTS 
 
Page 4 DOC_DEV_Router setup guide_A 
 
2 Port forwarding.................................................................................................................................... 41 
3 Advanced NAT ..................................................................................................................................... 42 
Publish the IP address of the router on the Internet ................................................................................. 44 
1 Overview ........................................................................................................................................... 44 
2 Set-up................................................................................................................................................ 44 
Remote access connection ........................................................................................................................ 45 
1 Advantages of a remote access connection ................................................................................. 45 
2 Types of remote access connections ............................................................................................ 46 
3 OpenVPN remote user connection ................................................................................................. 47 
4 OpenVPN connection for smartphones ......................................................................................... 47 
5 PPTP connection ............................................................................................................................. 48 
6 L2TP / IPSec connection................................................................................................................. 48 
HTTPS connection and portal for smartphone, tablets or PCs................................................................ 49 
1 Overview ........................................................................................................................................... 49 
2 Set-up................................................................................................................................................ 50 
3 Operation.......................................................................................................................................... 50 
M2Me_Connect connection setup ............................................................................................................. 51 
Users list ...................................................................................................................................................... 52 
Assigning rights to remote users ............................................................................................................... 54 
Firewall setup .............................................................................................................................................. 55 
1 Overview ........................................................................................................................................... 55 
2 Main filter ......................................................................................................................................... 56 
Adding a certificate..................................................................................................................................... 58 
Alarm email or SMS .................................................................................................................................... 59 
Serial to Ip gateways................................................................................................................................... 60 
1 Overview ........................................................................................................................................... 60 
2 Modbus gateway.............................................................................................................................. 61 
3 Raw TCP gateway............................................................................................................................ 66 
4 Raw UDP gateway............................................................................................................................ 68 
5 Raw multicast gateway ................................................................................................................... 69 
6 Unitelway gateway........................................................................................................................... 70 
7 Telnet gateway................................................................................................................................. 71 
8 USB gateway .................................................................................................................................... 72 
DIAGNOSTICS AND MAINTENANCE ........................................................................................73 
1Visual diagnostic............................................................................................................................................. 73 
2« Ping » tool ..................................................................................................................................................... 73 
3« WiFi » scanner tool....................................................................................................................................... 73 
4Firmware update ............................................................................................................................................. 73 

OVERVIEW

DOC_DEV_Router setup guide_A page 5

OVERVIEW

1Purpose of this manual

This manual describes how to set-up the RAS, IPL and SIG families of IP routers manufactured by ETIC

TELECOM.

This manual applies in particular to the models listed below :

Machine Access Box with Ethernet RAS-E

Machine Access Box with Cellular RAS-EC, RAS-C

Machine Access Box with Wi-Fi RAS-EW

Machine Access Box with Cellular and Wi-Fi RAS-ECW

Router with Ethernet IPL-E

Router with ADSL IPL-A

Router with Cellular IPL-C

Router with Wi-Fi IPL-EW

Router with ADSL and Cellular IPL-DAC

Router with Ethernet and Cellular IPL-DEC

VPN Server with Ethernet SIG-E

VPN Server with Cellular SIG-EC

VPN Server with ADSL SIG-A

In this document, the name "Router" refers to both RAS, IPL and SIG products.

2Main functions of these Routeurs

IP router

The router provides powerful, flexible and comprehensive solutions to route IP packets from one network to

other networks:

Static routes, to reach nested networks,

Network address translation d‘adresse (NAT, DNAT, port forwarding),

Routing protocol (RIP),

Domain name management DNS et DynDNS.

IPSec & OpenVPN tunnels

The Router features IPSec and OpenVPN tunnels to provide a high level of security and also compatibility with

existing devices.

The VPN connection guarantees a high level of performance and security

Transparency: The VPN interconnects the two networks so that any machine in one network can

communicate with a machine on the other network.

Authentication: The router that establishes the VPN is authenticated by the one that accepts it and any

other connection is rejected.

Confidentiality: Data traffic via the VPN is encrypted.

IPSec will be chosen when the Router needs to establish a VPN with an already installed IPSec VPN server.

OVERVIEW

Page 6 DOC_DEV_Router setup guide_A

OpenVPN will be preferred when VPN traffic is routed through intermediate routers to take advantage of the

flexibility of this technique.

Remote access server for PCs, tablets and smartphones

The Router can also behave like a remote access server.

If he is registered in the user list, a remote user can access to particular devices of a machine network

depending on his identity.

The new HTTPS portal make possible to access easily and safely to HMIs or PLCS web servers using a tablet,

a PC or a smartphone.

Remote maintenance of machines using the M2Me_Connect service

The Router allows to connect easily and safely a machine to a remote PC, through the M2Me_Connect Internet

cloud service, for operation like remote maintenance.

When the remote PC is connected, the remote user can exchange any kind of data with each device of the

machine network as if his PC was directly connected to the machine network.

Firewall

The firewall protects against the sophisticated attacks coming from the Internet.

It is also able to filter IP frames between the WAN interface or any VPN interface on one hand, and the LAN

interface on the other hand.

VRRP redundancy

VRRP makes possible to use two Routers shaping a redundant solution.

Automatic backup of an ADSL link over the cellular network

The IPL-DAC provides an ADSL interface and a cellular interface. It is designed for critical industrial remote

SCADA systems.

In normal situation the data are transmitted via the main interface (usually the ADSL one).

In case of a failure the data are transmitted via the backup interface (usually the cellular one).

Automatic backup of a private VPN network over the cellular network

The IPL-DEC provides a WAN Ethernet interface and a cellular interface. It is designed for critical industrial

remote SCADA systems.

In normal situation the data are transmitted via the main interface (usually the WAN Ethernet).

In case of a failure the data are transmitted via the backup interface (usually the cellular one).

Wi-Fi interface (optional)

The Router can be equipped with a Wi-Fi 2.4 and 5GHz interface able to behave like a client or an access point.

SNMP

The Router is an SNMP agent; it complies with the MIB2 standard and transmits an SNMP trap when

configurable events occur.

DNS server

DNS makes it possible to assign Internet names to devices or organizations independently of their public IP

address.

The Router behaves like a DNS server for the devices connected to the LAN.

DHCP server

On the LAN interface, the Router can behave like a DHCP server.

OVERVIEW

DOC_DEV_Router setup guide_A page 7

Configuration

The Router is configured using an HTML browser (HTTP or HTTPS).

EticFinder

The ETICFinder software can easily detect all ETIC branded products connected to an Ethernet network to

display their MAC address and their IP address.

Serial gateway

Optionally, the Router provides 1 or 2 serial RS232, RS485, RS422 interfaces.

The serial gateway features the following modes :

Raw TCP client or server

Raw UDP

Telnet

Modbus master or slave

Unitelway

PREPARING THE SETUP

DOC_DEV_Router setup guide_A page 9

PREPARING THE SETUP

1Connecting a PC for configuration

1.1 Overview

The Router is configured using a PC with a web browser. No additional software is required.

Online help:

For most pages of the administration server an help page is available by clicking ?located at the top right of

the page.

Administration server address:

When the product is delivered, the IP address of the administration web server is 192.168.0.128.

First setup:

For the first configuration, we advise to connect the PC directly to the LAN interface of the Router.

Subsequent changes can be made remotely.

Restoring the factory IP address:

The factory IP address 192.168.0.128 can be restored (see the User guide of the product).

Restricted access to the administration server:

If you do not have access to the administration server, it is probably that access has been restricted for security

reasons or for other reasons.

Network IP address:

Later in the text, we often speak of “network IP address”. We mean the lowest value of the addresses of the

network.

For instance, if the netmask of a network is 255.255.255.0, the network IP address of that network is

terminated by a zero (X.Y.Z.0.).

Characters allowed:

Accented characters are not supported.

PREPARING THE SETUP

Page 10 DOC_DEV_Router setup guide_A

1.2 First configuration

Step 1: Create or modify the PC TCP/IP connection

Assign to the PC an IP address different but consistent with the factory IP address of the Router.

For the first configuration, assign for instance 192.168.0.1 to the PC.

Step 2: Connect the PC to the Router

Connect the PC directly to the Router with any Ethernet cable (straight or cross-wired);

Step 3: Launch the web browser

Launch the web browser and then enter the IP address of the Router: 192.168.0.128

The Home page of the administration server is displayed.

Note: Access to the administration server is not protected when configuring the Router for the first time.

1.3 Changing the configuration later

Thereafter, the Router administration server is accessible from the local Ethernet interface or remotely through

a remote connection at the IP address assigned to the product.

By default, the access to the administration web server is not allowed through the WAN interface.

Autres manuels pour RAS Series

Ce manuel convient aux modèles suivants

Table des matières

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité