user guide - netcom · the following page lists the physical dimensions of the ntc-8000-01, as well...

NTC-8000

User Guide NTC-8000-01 – M2M Multi-Port Network Gateway

2

NTC-8000 – M2M Multi-Port Network Gateway

UM-00006 v1.1

www.netcommwireless.com

Copyright

Copyright© 2015 NetComm Wireless Limited. All rights reserved.

The information contained herein is proprietary to NetComm Wireless Limited. No part of this document may be translated,

transcribed, reproduced, in any form, or by any means without prior written consent of NetComm Wireless Limited.

Please note: This document is subject to change without notice.

Save Our Environment

When this equipment has reached the end of its useful life, it must be taken to a recycling centre and processed separately from

domestic waste.

The cardboard box, the plastic contained in the packaging, and the parts that make up this device can be recycled in accordance

with regionally established regulations. Never dispose of this electronic equipment along with your household waste. You may be

subject to penalties or sanctions under the law. Instead, ask for disposal instructions from your municipal government.

Please be responsible and protect our environment.

This manual covers the following products:

NetComm Wireless NTC-8000-01 M2M Multi-Port Network Gateway

DOCUMENT VERSION DATE

1.0 Initial document release November 2013

1.1 Minor updates and corrections 13 May 2015 Table 1 - Document Revision History

UM-00006 v1.1


NTC-8000 – M2M Multi-Port Network Gateway 3

Table of Contents Overview ........................................................................................................................................................................................ 4

Introduction ................................................................................................................................................................................................... 4 Target Users .................................................................................................................................................................................................. 4 Prerequisites .................................................................................................................................................................................................. 4 Notation ........................................................................................................................................................................................................ 4

Product Introduction ..................................................................................................................................................................... 5 Product Overview .......................................................................................................................................................................................... 5 Package Contents ......................................................................................................................................................................................... 5 Product Features ........................................................................................................................................................................................... 5 Physical Dimensions and Indicators ................................................................................................................................................................ 6

LED Indicators ....................................................................................................................................................................................... 6 Physical Dimensions ...................................................................................................................................................................................... 7 Mounting Bracket (Optional) ........................................................................................................................................................................... 7 Interfaces ...................................................................................................................................................................................................... 8

Correct wiring of the 4-way mini fit connector ......................................................................................................................................... 9 NTC-8000-01 Default Settings .................................................................................................................................................... 10

Restoring factory default settings .................................................................................................................................................................. 11 Resetting to factory default condition .................................................................................................................................................... 11

Installation and Configuration of the NTC-8000-01 ................................................................................................................... 12 Connecting via an Ethernet cable ................................................................................................................................................................. 12 Accessing the Web-based User Interface ..................................................................................................................................................... 12 Status ......................................................................................................................................................................................................... 13 Advanced Status ......................................................................................................................................................................................... 15 Internet Settings........................................................................................................................................................................................... 17

Mobile Broadband ............................................................................................................................................................................... 17 LAN ..................................................................................................................................................................................................... 23 Routing................................................................................................................................................................................................ 25 VPN .................................................................................................................................................................................................... 32

Wireless Settings ......................................................................................................................................................................................... 41 Basic ................................................................................................................................................................................................... 41 Advanced ............................................................................................................................................................................................ 43 MAC Filtering ....................................................................................................................................................................................... 50 Station List .......................................................................................................................................................................................... 51 Wireless Mode ..................................................................................................................................................................................... 51 Client Configuration .............................................................................................................................................................................. 52

Services ...................................................................................................................................................................................................... 53 Dynamic DNS ...................................................................................................................................................................................... 53 NTP ..................................................................................................................................................................................................... 54 System Monitor ................................................................................................................................................................................... 55 SNMP ................................................................................................................................................................................................. 56

System ........................................................................................................................................................................................................ 57 Log ..................................................................................................................................................................................................... 57 Load / Save ......................................................................................................................................................................................... 58 Administration ...................................................................................................................................................................................... 63 System Configuration ........................................................................................................................................................................... 64

Appendix A: Tables ..................................................................................................................................................................... 66 Appendix B: Recovery mode ...................................................................................................................................................... 67 Legal and Regulatory .................................................................................................................................................................. 68 Contact ........................................................................................................................................................................................ 70

4


UM-00006 v1.1


Overview

Introduction This document provides you all the information you need to set up, configure and use the NTC-8000-01 network gateway.

Target Users This document is intended to be used by system integrators or experienced hardware installers who are comfortable with all

aspects of IP based networking and have an understanding of wireless technologies.

Prerequisites Before continuing with the installation of your NTC-8000-01, please confirm that you meet the minimum system requirements

below.

Device that can connect via Ethernet or Wireless interface.

Web interface access will require a web browser such as Internet Explorer®, Mozilla Firefox® or Google Chrome™.

Notation The following symbols are used in this installation manual:

The following note requires attention.

The following note provides a warning.

The following note provides relevant information.

UM-00006 v1.1



Product Introduction

Product Overview Industrial-grade fixed wireless gateway with extended temperature tolerance

Designed for rugged deployments in industrial applications

Tested for vehicular applications Class 5M2 and MIL-STD-810F Method 516.5

Ideal for providing primary and backup wireless connectivity over 3G UMTS networks

Embedded high-performance Cinterion PHS8 HSPA+ cellular machine-to-machine (M2M) module

802.11n WiFi, configurable as access point or network client, with 2x2 MIMO antenna technology

Powerful processor for optimal performance on advanced 3G UMTS networks

8x Ethernet 10/100 connectivity for universal deployment

Flexible DC power input to suit diverse installation environments

Power save mode with minimum current draw

Built-in VPN clients for a secure connection over a public cellular network

Embedded Linux OS and Software Development Kit (SDK)

Remote diagnostics, configuration and firmware upgrade capabilities

Management and configuration via web user interface, TR-069 (optional), SNMP or SMS

Optional mounting bracket (HDW-0022) for easy mounting/installation

Package Contents The NTC-8000-01 series package consists of:

1 x M2M Multi-Port Network Gateway

2 x 3G antennas

2 x WiFi antennas

1 x 1.5m yellow Ethernet cable 8P8C

1 x Power and ignition cable

1 x WiFi Security Card

1 x quick start guide and safety manual (not pictured)

A mounting bracket (HDW-0022) is available as an optional accessory.

If any of these items are missing or damaged, please contact NetComm Wireless Support immediately by visiting the NetComm

Wireless Support website at: http://www.netcommwireless.com/contact-forms/support/

Product Features The NTC-8000-01 series gateway is designed to provide a secure and powerful connection to multiple devices in a broad range of

applications. With an embedded 3G module, the device can connect to the speed and coverage of wireless networks, allowing

broadband connectivity to remote sites, mobile vehicles and locations without a fixed broadband connection.

Its industrial design includes a robust mounting bracket, extended temperature tolerances and is also vibration tested for rugged

deployments. The device features WiFi (802.11n) so users can create a WiFi network for connectivity to wireless enabled devices

and equipment. Its 8 LAN Ethernet ports allows connectivity for a further 8 wired connections.

Its open embedded Linux platform provides the ability to customize specific software applications via the Software Development Kit

(SDK).

http://www.netcommwireless.com/contact-forms/support/

6


UM-00006 v1.1


Physical Dimensions and Indicators LED Indicators The NTC-8000-01 has 6 LEDs to display the current system and connection status.

Note: 3G signal strength lower than -109dBm is considered too low for data connection. When signal strength is below

this level, both signal strength LEDs will stay off.

ITEM ICON DEFINITION

Power

Indicates the gateway is powered correctly.

WLAN

Indicates the ON/OFF status of the wireless (WLAN) radio.

Mobile Broadband

Indicates when Internet data connection is established.

Service Type

Solid ON: Indicates UMTS/HSPA available coverage

Blinking: Indicates EDGE available coverage

Off: Indicates GSM/GPRS available coverage

Signal Strength

Low Strength Left LED illuminated

Medium Strength Right LED illuminated

High Strength Both left and right LEDs illuminated

Table 2 - NTC-8000-01 LEDs

UM-00006 v1.1



Physical Dimensions The following page lists the physical dimensions of the NTC-8000-01, as well as the physical dimensions of the antennas and the

optional mounting bracket which can be used to attach the NTC-8000-01 to a pole or to provide a wall / ceiling mount.

DIMENSIONS WITHOUT MOUNTING BRACKET

Length 187 mm

Depth 122 mm

Height 39.5 mm

Weight 550 g

Table 3 - Device Dimensions

DIMENSIONS WITH MOUNTING BRACKET

Length 193.7 mm

Depth 122 mm

Height 57.9 mm (without antennas)

Weight 970 g

Table 4 - Mounting Bracket Dimensions

Optional Mounting Bracket (HDW-0022) The NTC-8000-01 can be put into a mounting bracket to ensure it is secured to a fixture. This mounting bracket is especially useful

for installations in vehicles where extra stability is required.

Figure 1 – NTC-8000-01 Mounting Bracket

8


UM-00006 v1.1


Interfaces The following interfaces are available on the NTC-8000-01:

Figure 2 - NTC-8000-01 Rear panel interfaces

ITEM INTERFACE FUNCTION

1 3G Antenna Connectors (SMA) Connection point for the mobile broadband main and auxiliary antennas

2 WiFi Antenna Connectors (Reverse polarity SMA) Connection point for the reverse polarity SMA female WiFi antennas

3 Ethernet Ports 8 x 10/100 Base-TX Ethernet RJ-45 ports.

4 Reset

Press the reset button once to reboot the gateway.

Press and hold the reset button for between 3 and 10 seconds, then release to boot

the gateway in recovery mode.

Press and hold the reset button for more than 10 seconds to return the gateway to

factory default settings.

5 Power 9-36V DC, 4-way mini fit power connection with ignition switch detection. See diagram

below for correct wiring of the 4-way mini fit connector.

Table 5 - Integrated Interfaces

1 1 2 2

3 4 5

UM-00006 v1.1



Correct wiring of the 4-way mini fit connector The diagram below illustrates the correct wiring of the 4-way mini fit connector.

Figure 3 - Correct wiring of the 4-way mini fit connector

PIN NUMBER WIRE

1 Power

2 Ignition

3 Ground

4 Not used

Table 6 - 4-way mini fit connector wiring

1

3

2

4

10


UM-00006 v1.1


NTC-8000-01 Default Settings

The following tables list the default settings for the NTC-8000-01.

LAN (MANAGEMENT)

IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

Default Gateway: 192.168.1.1

Table 7 - LAN Management Default Settings

WIFI (DOES NOT APPLY IN CLIENT MODE)

SSID: Remote AP Name

Security: WPA2-PSK

Security Key: a1b2c3d4e5

Table 8 – WiFi Default Settings

WEB INTERFACE ACCESS

Username: admin or root

Password: admin

Table 9 - Web Interface Default Settings

Note: The admin account is restricted to accessing mobile profile settings; band/provider selection and most system

configurations via the web interface. The root account has full access to all configuration options via the web interface.

UM-00006 v1.1



Restoring factory default settings

There might be occasions where you need to restore the factory defaults on your NTC-8000-01 such as:

You have lost your username and password and are unable to log in to the web configuration page;

You are asked to perform a factory reset by support staff.

Resetting to factory default condition

There are two methods you can use to restore factory default settings on your NTC-8000-01:

Using the web-based user interface

To restore your NTC-8000C to its factory default settings, please follow these steps.

1. Log in to the gateway’s web interface as described in the Accessing the web-based user interface section.

2. Navigate to System > Load/Save > Settings.

3. Under the Restore Factory Defaults section, click the Restore button. The gateway reboots to the factory default settings.

Using the reset button on the rear panel of the gateway

Hold the reset button down for more than 10 seconds (until the LEDs on the front panel stop flashing) and then release the button.

The gateway restarts with factory default settings.

12


UM-00006 v1.1


Installation and Configuration of the NTC-8000-01

Connecting via an Ethernet cable 1. Connect the Ethernet cable provided to one of the Ethernet ports on the rear of the NTC-8000-01.

2. Connect the other end of the yellow Ethernet cable to your computer.

3. Wait approximately 30 seconds for the connection to establish.

Accessing the Web-based User Interface There are two system management accounts for maintaining the system, root and admin, which have slightly different management

capabilities.

The root manager account has full permission privileges and can use every command option available to the gateway.

The admin manager (administrator) account has access to the majority of gateway settings except for the gateway’s system options

that can alter or copy the gateway’s firmware (software). The system options not available to an admin user are:

Firmware Upgrade – The ability to install an upgraded version of the gateway’s software.

Device Configuration Backup – the option of saving the gateway’s current settings, useful for configuring multiple NTC-

8000-01 gateways.

Upload - Uploading previously saved settings to the gateway.

Restore Factory Defaults - Setting the gateway to factory default settings, essential after a firmware upgrade.

System Configuration settings – The TCP Keepalive function can be used to ensure the current live mobile broadband

connection is still alive even when no packet data is being transmitted. It does this by periodically sending a ping

(ICMP) request message to a WAN IP address or a well-known internet domain host such as www.google.com. Once

the internet connection is deemed to be down the gateway will attempt to reconnect to the WWAN mobile broadband

provider.

To log in to the management console, view the status and make changes to your NTC-8000-01, please follow the steps below:

1. Open a web browser (e.g. Internet Explorer/Firefox/Safari) and navigate to https://192.168.1.1

2. Enter admin or root as the username and admin as the password and press the Submit button.

Figure 4 - Login prompt for the Web based User Interface

When you have successfully logged in, the Status page is displayed.

https://192.168.1.1/

UM-00006 v1.1



Status The status page provides system related information and is displayed when you login to the NTC-8000-01 management console.

By default, the status page will show System Information, Ethernet Port Status, WWAN Status, IPsec Status and the 3G service

connection details.

Figure 5 - The Status Page

ITEM DEFINITION

System Uptime The current uptime of the gateway.

Router Version The firmware version running on the gateway.

Router Serial Number The serial number of the gateway.

Phone Module The type of phone module, the firmware version of the module and the current module temperature.

MAC Address The MAC Address is a unique 12 digit hexidecimal network identifier assigned to the NTC-8000-01.

Mobile Broadband (MBB) The current connection profile, Interface, status, APN, local and remote addresses of the WWAN connection.

WLAN The current wireless network clients or wireless access points that are connected with the NTC-8000-01.

Connection Up Time The time in hours, minutes and seconds that the current mobile broadband connection has been active.

Provider The current mobile broadband service provider detected and in use with the on-board SIM card..

Coverage The type of mobile broadband connection available for use.

IMEI The IMEI (International Mobile Equipment Identity) that identifies the NTC-8000-01 on the mobile broadband

network.

Frequency The frequency band currently in use.

Signal Strength (dBm) The strength of the 3G signal detected

SIM Status The status of the SIM currently inserted into the gateway.

Ethernet Port Status The current speed and status of the Ethernet port.

Table 10 - Status page items

14


UM-00006 v1.1


The LAN, PPPoE, PPTP and IPsec statuses are hidden from view by default. To show them on the status screen, click on the

respective link below the green menu bar. To view them all, click on the All Status link.

Figure 6 - Status Page - LAN Details

ITEM DEFINITION

IP The current LAN IP Address and Subnet Mask.

MAC Address The current MAC Address of the LAN port.

Table 11 - Status Page - LAN Details

Figure 7 - Status Page - PPPoE Details

ITEM DEFINITION

PPPoE Status The current status of the PPPoE connection.

PPPoE IP Address The current PPPoE IP Address in use.

Table 12 - Status Page - PPPoE Details

Figure 8 - Status Page - PPTP Details

ITEM DEFINITION

No. The number of the PPTP connection.

Profile Name The user-created Profile name of the PPTP connection.

Remote Server Address The PPTP Remote Gateway Address.

P-t-P Local The local IP address of the PPTP connection.

P-t-P Remote The remote IP address of the PPTP connection.

Status The current status of the PPTP connection.

Table 13 - Status Page - PPTP Details

Figure 9 - Status Page - IPSec Details

ITEM DEFINITION

No. The IPsec tunnel number.

Profile Name The name assigned to the IPsec profile.

Interface The current interface used by the IPsec tunnel.

Local LAN The local IP address making up one end of the

IPsec tunnel.

Remote Gateway The WAN gateway of the other end of the IPsec

tunnel.

Remote LAN The WAN IP Address that the IPsec tunnel is

connecting to.

Status The current condition of the IPsec tunnel.

Table 14 - Status Page - IPSec Details

UM-00006 v1.1



Advanced Status To view further information regarding the phone module on-board the NTC-8000-01 and the mobile broadband configuration, press

the “Advanced Status” button.

Figure 10: Advanced Status Page

16


UM-00006 v1.1


ITEM DEFINITION

Phone Module The phone module name, hardware and firmware version

Module Boot version The installed boot loader version of the phone module.

Module PRID The Protocol ID of the phone module.

System Up Time The time in hours, minutes and seconds that the gateway has been up.

Provider The current connection’s mobile broadband provider.

Country Code Each country has a unique code that helps to identify the mobile broadband

network.

Network code Each mobile broadband provider has a unique network code that identifies their

network.

Coverage The coverage type of mobile broadband service the current connection is using.

Connection Status The current status of the gateway’s connection.

IMEI The International Mobile Equipment Identity number unique to each cellular network

device.

Frequency The frequency of the current connection.

Signal Strength The signal strength of the mobile broadband connection measured in decibels.

Signal Quality (Ec/Io) A measurement of the portion of the received signal that is usable. This is basically

the signal strength minus the signal noise level.

Received Signal Code Power

(RSCP) The power level of the signal on the current connection’s channel.

HSUPA Category Displays the HSUPA category (1-9) for the current uplink.

HSDPA Category Displays the HSDPA category (1-8) for the current downlink.

SIM ICCID The Integrated Circuit Card Identifier of the SIM card used with the gateway, a

unique number up to 19 digits in length.

Primary Scrambling Code (PSC) The Primary Scrambling Code for the current signal.

Location Area Code (LAC) The ID of the cell tower grouping the current signal is broadcasting from.

Routing Area Code (RAC) The Routing Area Code is a subset of the Location Code and helps to identify the

group of or individual cell towers the current connection’s is broadcasting from.

IMSI The International Mobile Subscriber Identity is a unique identification for the current

mobile broadband connection.

Cell ID A unique code that identifies the base station from within the Location Area where

the current 3G signal.

Channel Number (UARFCN) The channel number of the current 3G connection.

Table 15 - Advanced Status Settings

UM-00006 v1.1



Internet Settings This section describes how to set up the gateway to initiate a mobile broadband connection, create routing rules and set up a virtual

private network.

Mobile Broadband Connection Click on the Internet Settings menu followed by Mobile Broadband and then the Connection menu item on the right.

Figure 11 - Connection Settings

To connect using a Connection profile

The gateway supports multiple APN profiles; these profiles allow you to configure the settings that the gateway will use to connect

to the Mobile Broadband network. The gateway is configured by default to automatically configure the mobile broadband

connection. This automatically detects the most appropriate APN from the inserted SIM.

You can also manually enter the connection details by performing the following steps:

1. Clear the Automatically Configure my Mobile Broadband option next to the profile name.

2. Using the Profile Name drop down list, select the profile that you wish to configure.

3. In the APN Name field, enter the APN (Access Point Name).

4. For the Mobile Broadband Connection option, select Enable.

5. In the Username and Password fields, enter the username and password if required.

6. Use the Authentication Type option to select either CHAP or PAP.

7. In the Reconnect Delay field, enter the Reconnect Delay. This is the time the gateway will wait to re-establish the mobile

broadband connection if it is dropped. The Reconnect Delay must be between 30 and 65535 seconds.

8. In the Reconnect Retries field, enter the number of Reconnection attempts the gateway should make. To configure the

gateway to attempt to reconnect until a connection is made, set this to 0. Otherwise, the Reconnect Retries value must be

between 1 and 65535 seconds.

9. Use the Metric field to specify a network metric for the connection. The metric value helps the gateway to prioritise routes

and must be a number between 1 and 65535. The default value is 20 and should not be modified unless you are aware of

the effect your changes will have.

10. In the MTU field, enter the MTU setting for the current Mobile Broadband connection. The MTU must be an integer between

1400 and 1430.

11. Use the NAT Masquerading option to select to enable or disable NAT Masquerading for the connection.

12. Click the Save button.

18


UM-00006 v1.1


To confirm the connection status

Click on the Status menu item at the top of the page to return to the Status page.

In the Mobile Broadband section, the connected profile is displayed with the Status field showing as “Up” and the IP Address field

shows the current IP address that the network has allocated for the gateway.

The gateway’s internet connection has now been established.

UM-00006 v1.1



WLAN Failover Backup The WLAN Failover Backup feature of the NTC-8000-01 is designed to provide a backup mobile broadband internet connection in

case the primary WLAN connection should fail.

Figure 12 - WLAN Failover Settings:

CONNECTION OPTION DESCRIPTION

WLAN Only The failover function is completely disabled and the gateway always uses the WLAN connection only. The

Mobile Broadband (MBB) connection will not be used.

MBB Only The WLAN failover is completely disabled and the gateway always uses a Mobile Broadband (MBB)

connection only.

MBB Failover if WLAN Link down

The gateway uses a WLAN connection as the primary connection and a Mobile Broadband (MBB)

connection as a backup connection. When the WLAN connection is down the gateway will start using the

MBB connection.

MBB Failover with Ping

The gateway uses a WLAN connection as the primary connection and a Mobile Broadband (MBB)

connection as a backup connection. When the server(s) entered below does not respond to the

configured ping requests, the gateway will start using the MBB connection.

The NTC-8000-01 sends ping requests to the specified Destination and Second Address to verify

whether the internet connection is online and functioning. The Fail Count specifies how many successive

ping attempts can fail before the NTC-8000-01 fails over to the Mobile Broadband Internet WAN

connection while the Success Count specifies how many ping attempts must succeed in order to reset

the Fail counter.

To use this feature you will need both a WLAN and MBB connection.

The Periodic PING Timer is the time between ping requests to the first and second destination addresses

and must be an integer between 3 and 65535 seconds. The Periodic PING Accelerated Timer is the time

between pings to the first and second destination addresses after the gateway gets 3 consecutive ping

failures. Fail Count and Success Count must be an integer between 1 and 65535 seconds.

Table 16 - WLAN Failover Settings

When the Mobile Broadband (MBB) connection is set to Always On the MBB connection will always be online as a backup

connection even through the gateway may not be using it when the WLAN connection is available. This allows the gateway to

failover quickly to the existing MBB connection.

When the Mobile Broadband (MBB) connection is set to Dial when required the gateway will only dial the MBB connection when the

WLAN connection fails. The gateway will also automatically disconnect the MBB connection once the WLAN connection is restored

20


UM-00006 v1.1


PPPoE

The PPPoE page is used to configure a transparent PPPoE connection. This can be used to provide a bridged connection.

To enable PPPoE mode, first ensure that all Mobile Broadband Connection profiles are set to Disable.

To disable all Mobile Broadband Connection profiles:

1. Click on the Internet Settings menu followed by Mobile Broadband and then the Connection menu item.

2. Uncheck Automatically configure my mobile broadband then use the Profile Name drop down list to select the currently

enabled profile (you can see it in the Profile list at the bottom of the screen) and set Mobile Broadband Connection to

Disable. Click Save to store the updated settings.

Figure 13 - PPPoE Settings

To configure PPPoE:

1. Set the PPPoE option to Enable.

2. In the APN Name field, specify the APN supplied by your 3G provider.

3. In the Service Name field you may enter a Service Name. This is particularly useful if you have more than one PPPoE

gateway or modem on a single Ethernet network.

4. Click Save to save your settings and enable PPPoE.

UM-00006 v1.1



Band / Provider

The band settings page enables you to select which frequency band you will use for your connection and enables you to scan for

available network operators in your area.

Figure 14 - Band / Provider Selection

You may want to do this if you’re using the gateway in a country with multiple frequency networks that may not all support HSPA.

You can configure the gateway to only connect on the network frequencies that suit your requirements. Make your selection from

the Change Band drop down list. In most cases, the default setting of All bands is appropriate.

You can also scan for available 3G service providers in your area by setting the Current Operator Selection Mode to Manual and

then clicking the Scan button.

Figure 15 - Manual Operator Selection

A list of the detected mobile broadband service carriers in your area will be displayed. Select the most appropriate mobile

broadband service from the list shown and click Apply. In most cases, the default setting of Automatic is appropriate.

22


UM-00006 v1.1


SIM Security

In most cases, the NTC-8000-01 comes with SIM cards which are soldered to the main board. These units will not request a SIM

PIN and must be activated by the network operator based on the IMSI number printed on the Product ID label.

For units with a SIM card slot, if the SIM card is locked you will need to unlock it with a PIN provided with your SIM card. You can

find out if the SIM is locked by viewing the SIM Status on the Status page:

Figure 16 - SIM Security - Status Page Warning

If the SIM Status is SIM PIN Locked as above, perform the following:

a) Click on the Internet Settings menu at the top of the page and then the Mobile Broadband menu item and finally

select the SIM Security item.

Figure 17 - SIM Security - SIM PIN Needed

b) In the PIN field, enter the PIN code for the SIM and then enter it again in the Confirm PIN field for confirmation.

Note: You can also select Remember PIN so that entering the PIN code each time the SIM is inserted is not required.

Alternatively you can also disable SIM PIN protection by selecting to Disable PIN from the PIN Protection drop down menu.

c) Click the Save button.

Entering a PUK code

After three incorrect attempts at entering the PIN code, you are requested to enter a PUK code.

Note: You will need to contact your mobile broadband provider to obtain this number.

Your carrier will issue you a PUK code to enable you to unlock the SIM and enter a new PIN code. Enter the new PIN and PUK

codes and click the Save button.

Figure 18 - SIM Security - SIM PUK Needed

Remember PIN

This feature allows the gateway to automatically send the PIN to the SIM each time the SIM asks for it (usually at power up).

This enables the SIM to be PIN Locked (to prevent unauthorised re-use of the SIM elsewhere), while still allowing the gateway to

connect to the cellular service.

When the Remember PIN feature is enabled, the user-entered PIN is encrypted and stored locally in the gateway. The next time the

SIM asks the gateway for the PIN the gateway decrypts the PIN and automatically sends it to the SIM without user intervention.

When this feature is disabled and the SIM is PIN locked, the PIN must be manually entered via the gateway‘s configuration interface.

This is not desirable where the gateway is unattended.

UM-00006 v1.1



LAN

IP Setup

The IP Setup page is used to configure the LAN Settings of the gateway and to enable or disable DNS Masquerade.

Figure 19 - IP Setup Settings

The default IP of the gateway is 192.168.1.1 with subnet mask 255.255.255.0. To change these settings, enter the new IP Address

and Subnet mask then click the Save button. You can also assign a Hostname to the gateway to identify it on the network and for

easy access.

Note: If the IP address has changed you will have to re-enter the new IP address configured in your browser to access the

configuration pages.

DNS Masquerading

DNS masquerading allows the gateway to forward DNS requests to dynamically assigned DNS servers. Clients on the gateway’s

LAN can then use the gateway as a DNS server without needing to know of the dynamically assigned DNS servers assigned by the

cellular network.

To disable DNS Masquerading select Disable and click the Save button.

24


UM-00006 v1.1


DHCP

The DHCP page is used to adjust the DHCP settings used by the gateway. The DHCP settings are then passed onto any device

connecting via DHCP.

You can manually set the DHCP Start and End range, the DHCP Lease time, the default Domain name suffix, Primary and

Secondary DNS Server, the Primary and Secondary WINS Server, as well as the NTP, TFTP and Option 150/Option 160 (VoIP

options) settings.

Note: The DHCP Lease Time must not be less than 120 seconds.

Figure 20 - DHCP Settings

After entering the applicable details, click the Save button.

You can also assign a particular IP address to a specific device every time that device makes a DHCP request as follows:

Figure 21 - DHCP Settings - Fixed Mapping

1. Click the Add button.

2. In the Computer Name field, enter a name for the computer or device.

3. In the MAC Address field, enter the MAC Address of the computer or device.

4. In the IP Address fields, enter the IP address you wish to assign to the device.

5. Select the Enable checkbox to enable the rule.

6. Click the Save button to save the new settings.

UM-00006 v1.1



Routing

Static

The Static Route page is used to add or delete static routes. Static routes can be used to facilitate communication between devices

on different networks.

Figure 22 - Static Route Settings

Some routes are added by the gateway on initialisation such as the Ethernet subnet route for routing to a device on the Ethernet

subnet. A PPP route is also added upon obtaining a WAN PPP connection.

Adding Static Routes

1. Enter the required values in the fields (as shown above) for the route being added.

2. Click the Add button.

Editing a Static Route entry

1. Enter the Item No. of the entry you want to edit into the Item No. field.

2. Enter the required values in the fields.

Deleting Static Routes

Click the Delete Entry text (in blue) corresponding to the route you want to delete.

The Static Routing table at the bottom shows the new route added and the route also appears in the Active Routing Table.

26


UM-00006 v1.1


RIP

RIP (Routing Information Protocol) is used for advertising routes to other gateways. Thus all the routes in the gateway’s routing table

will be advertised to other nearby gateways. For example, the route for the gateway’s Ethernet subnet could be advertised to a

Gateway on the PPP interface side so that a Gateway on this network will know how to route to a device on the gateway’s Ethernet

subnet. Add the routes as appropriate in the Static Routes section – see Adding Static Routes.

Note: Some gateways will ignore RIP.

Figure 23 - RIP Settings

1. Next to the RIP option, select the Enable option.

2. In the Version drop down list, select the RIP version you wish to use.

3. Use the Interface drop down list to select the interface for the RIP function.

4. Click the Save button to save the settings.

UM-00006 v1.1



VRRP

Virtual Router Redundancy Protocol (VRRP) is a non-proprietary redundancy protocol designed to increase the availability of the

default gateway servicing hosts on the same subnet. This increased reliability is achieved by advertising a “virtual router” (an

abstract representation of master and backup routers acting as a group) as a default gateway to the host(s) instead of one physical

router. Two or more physical routers are then configured to stand for the virtual router, with only one doing the actual routing at any

given time. If the current physical router that is routing the data on behalf of the virtual router fails, an arrangement is made for

another physical router to automatically replace it. The physical router that is currently forwarding data on behalf of the virtual router

is called the master router.

Master routers have a priority of 255 and backup router(s) can have priority between 1 and 254.

A virtual router must use 00-00-5E-00-01-XX as its (MAC) address. The last byte of the address (XX) is the Virtual Router Identifier

(VRID), which is different for each virtual router in the network. This address is used by only one physical router at a time, and is the

only way that other physical routers can identify the master router within a virtual router.

Figure 24 - VRRP Settings

1. Next to the VRRP Enable option select Enable to activate the VRRP service.

2. In the Virtual Device ID field, enter the VRRP Device ID which is different for each virtual gateway on the network. As there is

a maximum of 255 virtual routers, the Virtual Device ID must be an integer between 1 and 255.

3. In the Router Priority field enter the priority for the virtual router – a higher value is a higher priority. The Router Priority must

be a value between 1 and 255.

4. In the Virtual IP Address field, enter the virtual IP address that both virtual routers share.

5. Click the Save button to save the new settings.

Note: Configuring VRRP changes the MAC address of the Ethernet port and therefore if you want to resume with the web

configuration you must use the new IP address (VRRP IP) or on a command prompt type: arp –d <ip address> (i.e. arp –d

192.168.1.1) to clear the arp cache.(old MAC address).

28


UM-00006 v1.1


NAT

The NAT page is used to configure the Network Address Translation rules currently in use on the gateway. The gateway is in NAT

mode by default. This is only needed if you need to map inbound requests to a specific port on the WAN IP address to a device

connected on the Ethernet interface.

Figure 25 - NAT Settings

OPTION DEFINITION

Item Number Number to identify the port mapping, numbered from 1 to 65535.

Protocol Specify the protocol to use for the port mapping. Options include TCP, UDP or All protocols.

Source IP Address This field specifies either a “Friendly” IP address that is allowed to access the gateway or a wildcard IP

address of 0.0.0.0 that allows all IP addresses to access the gateway.

Incoming Port Range This field specifies the external port(s) on which to listen. Must be a value between 1 and 65535.

Destination IP Address The Local Area Network Address of device to forward inbound requests to.

Destination Port Range The Local Area Network Port(s) to forward connections to. Must be a value between 1 and 65535.

Table 17 - NAT Configuration Items

Creating a Port Forwarding rule

1. Use the Protocol drop down list to select the protocol for the new rule.

2. In the Source IP Address field, enter the IP address from the source side.

3. In the Incoming Port Range fields, enter the range of incoming ports to forward.

4. In the Destination IP Address field, enter the IP address on the destination side to receive the forwarded packets.

5. In the Destination Port Range fields, enter the range of ports to be forwarded to the destination IP address.

6. Click the Save button to save any changes to the settings.

Note: If the Incoming Port Range specifies a single port, the destination port can be set to any port. If the Incoming Port

Range specifies a range of port numbers, the Destination Port Range MUST be the same as the Incoming Port Range.

Editing a Port Forwarding rule

1. In the Item Number field, enter the number of the rule that you want to change.

2. Make the required changes to the IP addresses and port ranges.


Deleting a Port Forwarding rule

To delete a port forwarding rule, click on the corresponding Delete Entry link from the list of IP Mappings.

UM-00006 v1.1



DMZ

The Demilitarised Zone (DMZ) enables a device to use a direct connection to the WAN. This means any incoming connections are

forwarded directly to this device. The DMZ page is used to specify the IP Address of the device to allow direct incoming

connections.

Figure 26 - DMZ Settings

To configure a device as DMZ Host:

1. Under DMZ Settings, select the Enable option.

2. In the DMZ IP Address field, enter the IP Address of the device you wish to become the DMZ host.


30


UM-00006 v1.1


MAC / IP / Port Filter

The MAC/IP/Port filter feature allows you apply a policy to the traffic that passes through the gateway, both inbound and outbound,

so that network access can be controlled. When the filter is enabled with a default rule of “Accepted”, all connections will be allowed

except those listed in the “Current MAC / IP / Port filtering rules in effect” list. Conversely, when the default rule is set to “Dropped”,

all connections are denied except for those listed in the filtering rules list.

Figure 27 - Wireless Settings – MAC / IP / Port Filter

Note: When enabling MAC / IP / Port filtering and setting the default rule to Dropped, you should ensure that you have first

added a filtering rule which allows at least one known MAC/IP to access the gateway, otherwise you will not be able to

access the user interface of the gateway without resetting the gateway to factory default settings.

Creating a MAC / IP / Port filtering rule

To create a filtering rule:

1. From the MAC / IP / Port Filtering drop down list, select Enable.

2. Using the Default Policy drop down list, select the default action for the gateway to take when traffic reaches it. By default,

this is configured to Dropped.

3. Under the MAC / IP / Port Filter Settings section, enter the details for the rule you want to create.

4. Click the Save button to confirm the default rule.

UM-00006 v1.1



OPTION DEFINITION

Basic Settings

MAC / IP / Port Filtering Use the drop down list to Enable or Disable the MAC / IP / Port Filtering function.

Default Policy Sets the default action to take for packets which do not match the configured rules below.

Allow HTTP Port Always Enables or Disables access to the web-based interface via HTTP

Allow HTTPS Port Always Enables or Disables access to the web-based interface via HTTPS

Allow SSH/SFTP Port Always Enables or Disables access to the SSH/SFTP port.

Allow Telnet Port Always Enables or Disables access to the Telnet port on the LAN side.

MAC / IP / Port Filter Settings

Source MAC Address The MAC address of the device for which you are creating a filtering rule.

Source IP Address(/Subnet Mask) The IP address and subnet mask of the device for which you are creating a filtering rule.

Source Port Range The range of ports on the source side (LAN/WAN) for which the rule will apply. To use a single port,

enter the port number in the first and second fields.

Destination IP Address(/Subnet

Mask) The IP address and subnet mask of the destination for the filtering rule.

Destination Port Range The range of ports on the destination side (LAN/WAN) for which the rule will apply. To use a single

port, enter the port number in the first and second fields.

Protocol Specify the protocol to use for the port mapping. Options include TCP, UDP and All protocols.

Action Use the drop down list to select whether to Accept or Drop packets based on the above settings.

Comment You may optionally enter a comment in this field to identify the rule on the gateway.

Enter the required details for your rule and click the Save button. The details of the rule appear in the bottom section of the screen.

After rules have been added, you can select individual rules and delete them.

32


UM-00006 v1.1


VPN A Virtual Private Network (VPN) is a tunnel providing a private link between two networks or devices over a public network. Data to

be sent via a VPN tunnel needs to be encapsulated and as such is generally not visible to public networks.

The advantages of a VPN connection include:

Data Protection

Access Control

Data Origin Authentication

Data Integrity

The following pages detail how to configure a VPN connection using IPsec, OpenVPN, PPTP-Client and GRE protocols.

IPSec

IPSec operates on Layer 3 of the OSI model and as such can protect higher layer protocols. IPSec is used for both Site to Site VPN

and Remote Access VPN. The NTC-8000-01 M2M Multi-Port Network Gateway supports IPsec end points and can be configured

with Site to Site VPN tunnels with third party VPN routers.

How to configure an IPSec VPN connection

From the menu at the top of the screen, click Internet Settings then VPN and IPSec. A list of configured IPSec VPN connections is

displayed.

Figure 28 - IPSec VPN List

Click the Add button to begin configuring an IPSec VPN connection.

UM-00006 v1.1



Figure 29 - VPN Connection Settings – IPSec

The table on the following page describes each of the fields of the IPSec VPN Connection Settings page.

34


UM-00006 v1.1


IPSec VPN Connection Settings – Item Details

ITEM DEFINITION

Enable This IPSec Profile Enable or Disable the VPN connection.

Profile Name A name used to identify the VPN connection

Remote IPSec Gateway The IP address that the IPSec server is running on.

Road Warrior Click this to configure the VPN connection for Road Warrior (connection from a dynamic IP Address) use.

Remote Address/Net to Join Enter the Remote IP address or Network for use on the VPN connection.

Remote Address/Net Mask Enter the Netmask in use on the remote network

Local Address/Net to Join Enter the Local IP address or Network for use on the VPN connection.

Local Address/Net Mask Enter the Netmask in use on the local network.

Encap Protocol Select the encapsulation protocol to use with the VPN connection.

IKE Mode Select the IKE mode to use with the VPN connection.

PFS Select whether or not to use PFS for the VPN connection.

IKE Encryption Select the IKE encryption type to use with the VPN connection.

IKE Hash Select the IKE Hash type to use for the VPN connection.

IPSec Encryption Select the IPSec encryption type to use with the VPN connection.

IPSec Hash Select the IPSec Hash type to use for the VPN connection.

DH Group Select the appropriate DH Group for use with the VPN connection.

DPD Action Select the appropriate DPD Action to use on the VPN connection.

DPD Keep Alive Time Enter the time in seconds for DPD to keep alive.

DPD Timeout Enter the time in seconds for DPD to timeout.

IKE Rekey Time Enter the appropriate IKE Rekey time for the VPN connection. Must be a value between 0 and 78400.

SA Life Time Enter the appropriate SA Life time for the VPN connection. Must be a value between 0 and 78400.

Key Mode

Select the type of key mode in use for the VPN connection. You can select from:

- Pre Shared Key

- RSA Keys

- Certificates

Each type of Key mode requires different configuration options. For more information, please refer to the VPN

Document available from the NetComm Wireless Website.

Table 18 - IPSec Configuration Items

UM-00006 v1.1



OpenVPN

OpenVPN is an open source virtual private network (VPN) program for creating point-to-point or server-to-multi-client encrypted

tunnels between host computers. It can traverse network address translation (NAT) and firewalls and allows authentication by

certificate, pre-shared key or username and password. OpenVPN works well through proxy servers and can run over TCP and UDP

transports. Support for OpenVPN is available on several operating systems, including Windows, Linux, Mac OS, Solaris, OpenBSD,

FreeBSD, NetBSD and QNX.

Configuring an OpenVPN VPN connection

From the menu at the top of the screen, click Internet Settings then VPN and OpenVPN. A list of configured OpenVPN VPN

connections is displayed.

Figure 30 - OpenVPN VPN List

Click the Add button to begin configuring an OpenVPN VPN connection.

36


UM-00006 v1.1


Figure 31 - VPN Connection Settings – OpenVPN

ITEM DEFINITION

Enable OpenVPN Enable or Disable the OpenVPN connection.

Profile Name A name used to identify the VPN connection.

OpenVPN Type Select the type of OpenVPN session to use.

Server Port Enter the port the OpenVPN server is running on.

VPN Network Address Enter the network address for use on the VPN connection.

VPN Network Mask Enter the network mask for use on the VPN connection.

Diffie-Hellman parameters Generate the server and client keys used by the VPN connection.

Server Certificates Enter the applicable details to identify the OpenVPN server and create a CA certificate based on this

information.

Authentication Type

Select the type of authentication in use for the VPN connection. You can select from:

- Certificate

- User Name / Password

Each type of Key mode requires different configuration options. For more information, please refer to

the VPN Document available from the NetComm Wireless Website.

Table 19 - OpenVPN Configuration Items

UM-00006 v1.1



PPTP-Client

The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual private networks using a TCP and GRE tunnel to

encapsulate PPP packets. PPTP operates on Layer 2 of the OSI model and is included on Windows computers.

Configuring PPTP-Client VPN connection

From the menu at the top of the screen, click Internet Settings then VPN and PPTP-Client. A list of configured PPTP-Client VPN

connections is displayed.

Figure 32 - PPTP Client List

Click the Add button to begin configuring a PPTP-Client VPN connection.

Figure 33 - VPN Connection Settings - PPTP

The table on the following page describes each of the fields of the PPTP-Client VPN Connection Settings page.

38


UM-00006 v1.1


PPTP-Client VPN Connection Settings – Item Details

ITEM DEFINITION

Enable PPTP Client Enable or Disable the VPN connection.


PPTP Server Address The IP Address on which the VPN server is running.

Username The username required to login to the VPN service.

Password The password required to login to the VPN service.

Authentication Type The authentication type required for connecting to the VPN service.

Metric The route metric to apply to the VPN connection. The metric must be a value between 0 and 65535.

Use peer DNS Select whether to use the VPN server DNS settings or not.

NAT Masquerading Select whether to use NAT Masquerading for the VPN connection.

Set Default Route to PPTP Make the VPN connection the default route for traffic to use.

Enable MPPE Select to enable Microsoft Point-to-Point Encryption (MPPE).

Extra options The extra options field allows you to enter an option from the pppd daemon. You may enter multiple

options separated by a space. To remove an option, delete it from the field.

Verbose Logging Enable extended logging information for the VPN connection.

Reconnect Delay The delay before attempting to reconnect to the VPN service. The Reconnect Delay must be an

integer between 30 and 65535.

Reconnect Retries

The number of times to attempt to reconnect to the VPN service. The Reconnect Retries must be a

value between 0 and 65535. A value of 0 sets the gateway to reconnect indefinitely until a connection

is made.

Table 20 - PPTP Configuration Items

UM-00006 v1.1



GRE The Generic Route Encapsulation (GRE) protocol creates a point-to-point connection similar to a VPN between clients and servers

or between clients only. GRE is used to encapsulate the data or payload.

Configuring a GRE VPN connection

From the menu at the top of the screen, click Internet Settings then VPN and GRE. A list of configured GRE VPN connections is

displayed.

Figure 34 - GRE VPN List

Click the Add button to begin configuring a GRE VPN connection.

Figure 35 - GRE VPN Settings page

The table on the following page describes each of the fields of the GRE VPN Connection Settings page.

40


UM-00006 v1.1


GRE VPN Connection Settings – Item Details

ITEM DEFINITION

Enable VPN Enable or Disable the VPN connection.


GRE Server Address The IP Address on which the GRE VPN server is running.

Local Tunnel Address The Local IP address of the VPN tunnel.

Remote Tunnel Address The Remote IP address of the other end of the VPN tunnel.

Remote Network Enter the remote network address and subnet mask.

TTL

The Time To Live field, an 8-bit field used to remove an undeliverable data packet from a network to

avoid unnecessary network traffic across the internet. The default value of 255 is the upper limit on the

time that an IP datagram can exist. The value is reduced by at least one for each hop the data packet

takes to the next router on the route to the datagram’s destination. If the TTL field reaches zero before

the datagram arrives at its destination the data packet is discarded and an error message is sent back

to the sender.

Verbose Logging Enable extended logging information for the VPN connection.

Reconnect Delay The delay before attempting to reconnect to the VPN service. The Reconnect Delay must be an

integer between 30 and 65535.

Reconnect Retries

The number of times to attempt to reconnect to the VPN service. The Reconnect Retries must be a

value between 0 and 65535. A value of 0 sets the gateway to reconnect indefinitely until a connection

is made.

Table 21 - VPN - GRE Settings

UM-00006 v1.1



Wireless Settings Basic The Basic setup page allows you to configure the gateway’s access point settings.

Figure 36 - Wireless Settings - Basic

OPTION DEFINITION

Radio On/Off WiFi is turned on by default. Changing this option to OFF will turn OFF the wireless functionality on the

NTC-8000-01 and you will not be able to connect wirelessly.

Country Select the country where the gateway is operating.

Network Mode

Depending on the capability of your wireless device’s wireless network card select the network mode

to use. There are 5 available options. They are:

• 11 b/g mixed mode

• 11b only

• 11g only

• 11n only

• 11 b/g/n mixed mode

If you are not sure which protocol to use set this option to 11 b/g/n mixed mode.

Frequency (Channel) The frequency or wireless channel that the gateway is broadcasting with. Recommended channels are

1, 6 or 11.

SSID The SSID (Service Set Identifier) aka network name in use for the wireless network.

Activate this SSID Enables or disables the wireless network selected in the SSID field.

Broadcast SSID Enables or disables the broadcasting of the SSID name. If this is disabled, clients must know the exact

SSID name to connect.

Network Authentication The wireless security settings for the gateway. Please see below for further details.

WPA Pre-Shared Key The wireless password in use by the gateway.

WPA Group Rekey interval This is the time in seconds before a new key is generated.

WPA Encryption The type of WPA encryption used with the wireless security settings.

Table 22 - Wireless Settings - Basic

42


UM-00006 v1.1


SSID and Security Settings

You may choose from the following wireless security options:

Open

Shared

WPA

WPA-PSK

WPA2

WPA2- PSK

WPA-PSK-WPA2-PSK

WPA1-WPA2

WPA1/WPA2

WPA (WiFi Protected Access) authentication is suitable for enterprise applications. It must be used in conjunction with an

authentication server such as RADIUS to provide centralized access control and management. It provides a stronger encryption and

authentication solution.

Figure 37 - Advanced View – WiFi Security Settings - WPA1/WPA2

WPA-PSK/WPA2-PSK

A newer type of security is WPA-PSK (TKIP) and WPA2-PSK (AES). This type of security gives a more secure network compare to

WEP. Use TKIP Encryption Type for WPA-PSK and AES for WPA2-PSK. After that, please enter the key in the Passphrase field. The

key needs to be more than 8 characters and less than 63 characters and it can be any combination of letters and numbers.

Note that the configuration for WPA2, WPA-PSK-WPA2-PSK, WPA-PSK and WPA2-PSK is identical.

Figure 38 - Advanced View – WiFi Security Settings - WPA-PSK/WPA2-PSK

Note: Your NTC-8000-01 uses WPA2-PSK by default. Check the Wireless Security Card or the device label on the bottom

of the NTC-30WV for your default SSID and Security key to begin connecting your wireless devices.

UM-00006 v1.1



Advanced The Advanced page is used to modify the advanced wireless settings for the gateway. These settings should not be changed

unless you are aware of what effect they will have.

Figure 39 - Wireless Settings – Advanced

OPTION DEFINITION

BG Protection Mode A protective measure designed to prevent collisions among 802.11b/g modes. Mode options include

Auto, On, or Off.

Client Idle Timeout The time in seconds that a wireless client session can be idle before the gateway cancels the session

and defines the wireless client as not connected.

Beacon Interval: Interval of time in which the wireless gateway broadcasts a beacon which is used to synchronize the

wireless network.


1, 6 or 11.

Data Beacon Rate (DTIM) Interval of time in which the wireless gateway broadcasts a beacon which is used to synchronize the

wireless network.

Fragmentation Threshold This specifies the maximum size of a packet during the fragmentation of data to be transmitted. If you

set this value too low, it will result in bad performance.

RTS Threshold When the packet size is smaller than the RTS threshold, the wireless gateway will not use the

RTS/CTS mechanism to send this packet.

TX Power This determines the output power of the antenna.

Short Preamble Enable or disable short preambles in use on the wireless network. Using short preambles should

improve throughput, however some wireless network adapters must use long preambles.

Broadcast Network Name (SSID) Use this to show or hide the SSID (wireless network name) of your gateway.

Table 23 - Wireless Settings - Advanced Configuration Items

Click the “Save” button to save any changes to the settings.

44


UM-00006 v1.1


WDS Mode

The NTC-8000-01 supports the configuration of a Wireless Distribution System (WDS). WDS allows you to expand your wireless

network with multiple access points. There are two WDS modes available: Bridged Mode and Repeater Mode.

In Bridged mode, the WDS access points communicate with each other but do not communicate with wireless clients. Bridged

mode is best used in situations where the client machines connect via Ethernet cable. In Repeater mode, the WDS access points

communicate with each other and with wireless clients.

Below is an example of how to configure two NTC-8000-01 gateways to use the Repeater mode WDS feature. In this example,

Access Point 1 is connected to a mobile broadband network and Access Point 2 and its clients will connect to the internet through

Access Point 1.

Access Point 1 – Mobile Broadband Connected

1. Establish a Mobile Broadband connection with Access Point 1:

Figure 40 - WDS - Access Point 1 Status

2. Configure the LAN IP Address of Access Point 1. In this example, it is set to the default address of 192.168.1.1:

Figure 41 - WDS - Access Point 1 LAN IP Setup

UM-00006 v1.1



3. Enable the DHCP Server on Access Point 1:

Figure 42 - WDS - Access Point 1 DHCP Server Settings

4. Click Wireless Settings and then Basic. Enter the required details as listed in the table below:

Figure 43 – WDS - Access Point 1 Repeater Mode Setup

OPTION DEFINITION

Radio On/Off The Wireless Radio must be turned on in order to use WDS. Set this to ON.

Country Select the country where the gateway is operating.

Network Mode

Depending on the capability of your wireless device’s wireless network card select the network mode

to use. There are 5 available options. They are:

11 b/g mixed mode

11b only

11g only

11n only

11 b/g/n mixed mode

If you are not sure which protocol to use set this option to 11 b/g/n mixed mode.


1, 6 or 11.


1, 6 or 11. You may use any channel except AUTO in order to use WDS.

SSID The SSID (Service Set Identifier) or network name in use for the wireless network.

46


UM-00006 v1.1


Network Authentication The wireless security settings for the gateway. Refer to the Basic Wireless Settings section for more

information on the available options.

When you have entered the required information, click Save.

5. Click Wireless Settings and then WDS. Set WDS Mode to Repeater Mode and enter an Encryption Key and the MAC

address of Access Point 2.

Figure 44 - Access Point 1 - WDS Settings

OPTION DEFINITION

WDS Mode

Selects the WDS Mode to use. Available modes are Disabled, Bridged Mode and Repeater Mode. In

this example we are using Repeater Mode which allows client machines to connect wirelessly. In

Bridged Mode, an Ethernet connection to the client access point is required.

Encrypt Type Shows the encryption method currently in use.

AP MAC Address1-4 Enter the MAC Address of Access Point 2 and any other client access points in to these fields to

inform the server of their addresses.

Click Save when you have finished.

UM-00006 v1.1



Access Point 2 – No connection to mobile broadband

1. Access Point 2 will act as a repeater for and provide internet access to its clients through Access Point 1 and therefore

does not require a Mobile Broadband connection to be established.

Figure 45 – WDS - Aceess Point 2 Status

2. Configure the LAN IP Address of Access Point 2. In this example, it is set to the default address of 192.168.1.2:

Figure 46 - WDS - Access Point 2 LAN IP Setup

48


UM-00006 v1.1


3. Set the DHCP Server on Access Point 2 to Disable:

Figure 47 - WDS - Access Point 2 DHCP Settings

4. Under Wireless Setup > Basic, select the same frequency channel as you did for Access Point 1. Enter an SSID to identify

Access Point 2 and set Network Authentication and all other Security Settings to be the same as the settings from Access

Point 1.

Figure 48 - WDS - Access Point 2 - Basic Settings

UM-00006 v1.1



5. Navigate to Wireless Settings > WDS and set WDS Mode to Repeater Mode , then enter the same Encrypt Key and the

MAC address of Access Point 1 in the AP MAC Address1 field. The MAC address of Access Point 1 is listed on its Status

page. When you have entered the required information, click Save:

Figure 49 - WDS – Access Point 2 Repeater Mode Setup

The Wireless Distribution System setup is now complete.

50


UM-00006 v1.1


MAC Filtering The MAC Filtering page allows you to configure a list of MAC addresses that are either allowed or denied access to the selected

network.

Figure 50 - MAC Filtering

To create a MAC filter:

1. In the Please select a SSID number to configure drop down list, select the wireless network for which you want to configure

a rule.

2. In the Filtering Policy drop down list, select whether to allow or block the MAC address.

3. In the Add a MAC address to the filtering list fields, enter the MAC address that you want to allow or block.

4. Click the Apply button. The rule is added to the list at the bottom of the screen.

UM-00006 v1.1



Station List The Station List page displays a list of wireless clients connected to the access point of the gateway.

Figure 51 - Station List

Wireless Mode The Wireless Mode page is where you can switch the gateway between Access Point and Wireless Client mode. In Access Point

mode, the gateway allows wireless clients to connect to it for network and internet access. In Client mode, the gateway can

connect to another Access Point.

Figure 52 - Wireless Mode

When changing the wireless mode, ensure that you click the Apply button to confirm the change.

When Wireless Mode is set to “Client”, the Wireless Settings menu options change. See below for the Client mode menu option

descriptions.

52


UM-00006 v1.1


Client Configuration The M2M Multi-Port Network Gateway can be configured to connect to another wireless access point as a wireless client. The client

configuration page is used to define the basic wireless settings for the NTC-8000-01 such as the SSID and Wireless Security in use

as well as scanning for and connecting to Wireless Local Area Network Access Points.

Figure 53 - Wireless Configuration – Client Configuration

OPTION DEFINITION

Radio On/Off WiFi is turned on by default. Changing this option to OFF will turn OFF the wireless functionality on the

NTC-8000-01 and you will not be able to connect wirelessly.

SSID To Connect

Pressing the Scan button will bring up a list of detected Access Points at the bottom of the page. By

selecting the Connect link in the Action field the NTC-8000-01 can connect to the Access Point if the

network authentication type and wireless security key are correct.

AP’s BSSID The MAC Address of the wireless access point to which the NTC-8000-01 will connect.

Network Authentication

This field determines the type of wireless security that the NTC-8000-01 will use. Options include:

Open

Shared

WPA

WPA-PSK

WPA2

WPA2-PSK

WPA-PSK-WPA2-PSK

WPA1-WPA2

802.1x

The following page will describe the security settings in further detail.

Auto Roaming

Using the Auto Roaming feature the NTC-8000-01 can automatically detect when there's a stronger

Access Point within range and transparently switch to the access point with the stronger wireless

signal.

Auto Roaming Threshold

The auto roaming threshold is a measure (in signal strength) defining the point at which the the NTC-

8000-01 searches for a new Access Point. If set too low, the NTC-8000-01 will not switch in an

optimal fashion when an AP with greater signal strength is detected. If the threshold is set too high the

NTC-8000-01 will waste resources searching for a new AP too often. It is recommended to use the

default threshold of 25.

Table 24 - Wireless Configuration Details

Click Apply to save any changes to the settings.

UM-00006 v1.1



Services Dynamic DNS The Dynamic DNS page is used to configure the Dynamic DNS feature of the gateway. Dynamic DNS provides a method for the

gateway to update an external name server with the current WAN IP address. You may select from a number of dynamic DNS host

providers.

Figure 54 - DDNS Settings

To configure dynamic DNS:

1. Set the DDNS Configuration option to Enable.

2. From the Server Address drop down list, select the Dynamic DNS service that you wish to use. The available DDNS

services available are:

www.dhs.org

www.dyndns.org

www.dyns.cx

www.easydns.com

www.justlinux.com

www.ods.org

www.tzo.com

www.zoneedit.com

3. In the Host Name, Username and Password fields, enter your dynamic DNS account credentials.


http://www.dhs.org/

http://www.dyndns.org/

http://www.dyns.cx/

http://www.easydns.com/

http://www.justlinux.com/

http://www.ods.org/

http://www.tzo.com/

http://www.zoneedit.com/

54


UM-00006 v1.1


NTP The NTP page is used to configure NTP Synchronisation or to select the NTP server used for synchronisation.

Figure 55 - NTP Settings

Using the time zone settings the gateway’s current time can be adjusted according to its global position while the NTP (Network

Time Protocol) settings allow your gateway to synchronise its internal clock with a global Internet Time server. This setting will affect

functions such as System Log entries and Firewall settings where the current system time is displayed. You can use the default NTP

server or enter one manually if required.

UM-00006 v1.1



System Monitor The system monitor is a feature which monitors the gateway for anomalies and restarts the gateway if an anomaly occurs

preventing its normal operation. When configured, the system monitor transmits controlled ping packets to 1 or 2 user specified IP

addresses to confirm an active connection. If the system monitor does not receive responses to the pings after a specified number

of failures, it reboots the device in a last resort attempt to restore connectivity.

Figure 56 - System Monitor Settings

This system monitor works as follows:

a) The gateway sends 3 consecutive pings to the first destination address at the interval specified in the Periodic Ping Timer

field.

b) If all 3 pings to the first destination address fail, the gateway sends 3 consecutive pings to the second destination address

at the Periodic Ping Timer interval.

c) If all 3 pings to the second destination address fail, the gateway sends 3 pings to the first destination address using the

Periodic Ping Accelerated Timer interval.

d) If all 3 accelerated pings to the first destination address fail, the gateway sends 3 pings to the second destination address

at the Periodic Ping Accelerated Timer interval.

e) If all 3 accelerated pings to the second destination address fail, the gateway registers this as a fail and returns to step C.

f) When the number of failures reaches the number configured in the Fail Count field, the gateway reboots. If any ping

succeeds, the gateway returns to step A and does not reboot.

Note: The Periodic Ping Timer should not be set to a value of less than 300 seconds to allow the gateway time to reconnect

to the cellular network following a reboot.

Note: The traffic generated by the periodic ping feature is counted as chargeable usage, please keep this in mind when

selecting how often to ping.

Disabling the System Monitor

To disable the System Monitor set Fail Count to 0.

Configuring a Periodic Reboot

The gateway can be configured to automatically reboot after a period of time specified in minutes. While this is not necessary, it

does ensure that in the case of remote installations, the gateway will reboot if some anomaly occurs.

1. In the Force reboot every field, enter the time in minutes between forced reboots. The default value is 0 which disables the

Periodic reboot function. The minimum period between reboots is 5 minutes while the maximum value is 65535 minutes.


56


UM-00006 v1.1


SNMP The SNMP page is used to configure the SNMP features of the gateway.

Figure 57 - SNMP Settings

SNMP (Simple Network Management Protocol) is used to remotely monitor the gateway for conditions that may warrant

administrative attention. It can be used to retrieve information from the gateway such as the signal strength, the system time, the

interface status, etc.

To configure SNMP:

1. Set the Enable SNMP option to Enable.

2. Use the Read-Only Community Name and Read-Write Community Name fields to specify your own community names. You

may leave them at the default setting if you do not wish to customise them.

Community names are used as a type of security to prevent access to reading and/or writing to the gateways configuration.

It is recommended that you change the Community names to something other than the default settings when using this

feature.


To download the MIB file, click the Download link. Note that in some browsers, this may open the MIB file directly in the browser. If

this happens, you may need to right-click and select Save Link As.. to save it to your computer.

ITEM DEFINITION

Trap Destination (IP Address) The IP Address that SNMP data is to be sent to.

Heartbeat Interval (seconds) The number of seconds between SNMP heartbeats.

Trap Persistence Time (seconds) The length of time an SNMP trap persists.

Trap Retransmission Time (seconds) The length of time between SNMP trap retransmissions can be configured here.

Table 25 - SNMP Configuration Options

You can trigger an SNMP Heartbeat manually by clicking the Send Heartbeat Now button.

UM-00006 v1.1



System Log The Log page is used to download or display the current System Log of the gateway.

Figure 58 - System Log

The System Log enables you to troubleshoot any issues you may be experiencing with your gateway. Use the Display Level drop

down list to select a logging level. The Display Level filters the messages according to the severity of the message and shows all

messages at the selected level and lower. The display levels are described and listed in order of severity below:

LOG LEVEL DEFINITION

All Display all system log messages.

Error Show error condition messages only.

Warning Show warning messages only.

Notice Show normal system logging information.

Info Show informational messages only.

Debug Show extended system log messages with full debugging level details.

Table 26 - System Log Detail Levels

The current System Log may be downloaded to your computer for offline viewing. To do this, click the Download Log File link at the

bottom of the page.

58


UM-00006 v1.1


Load / Save

Note: the Load/Save menu is only available to users logged in to the gateway using the user name root. To perform a

firmware upgrade, device configuration backup or reset the gateway to factory defaults, you must be logged in with the root

administrator account.

Settings

The settings page is used to backup or restore the gateway’s configuration settings or can be used to reset the gateway to factory

default settings.

Figure 59 - Load / Save Configuration Page

Note: In order to perform an update, you must be logged into the gateway as the root user (see the Accessing the web

based configuration section for more details).

To save a copy of the gateway’s configuration

Enter the root manager password and click the Save button. This will download a copy of the current settings from the gateway to

your PC.

Note: The following conditions apply:

- It is NOT possible to edit the contents of the file downloaded; if you modify the contents of the configuration file in any

way you will not be able to restore it later.

- You may change the name of the file if you wish but the filename extension must remain “.cfg”

To restore a copy of the gateway’s configuration

1. In the Restore saved settings section, click the Browse… button.

2. Select the previously saved configuration file that you wish to restore to the gateway.

3. Click the Restore button.

To restore the gateway’s configuration to factory default settings

Under the Restore Factory Defaults section, click the Restore button to restore the gateway to factory default settings. The gateway

restarts with the factory default configuration loaded.

UM-00006 v1.1



Upload

The firmware update process involves first updating the recovery image firmware, rebooting into the recovery mode of the gateway

and then updating the main firmware image.

Note: In order to perform an update, you must be logged into the gateway with the root manager account (see the

Accessing the Web based User Interface section for more details).

To update the gateway’s firmware:

1. Click on the System menu, select Load/Save and then Upload. Click the Browse button. Locate the recovery firmware

image file on your computer and click Open.

2. Click the Upload button. The recovery firmware image is uploaded to the storage on the gateway.

Figure 60 - File upload

The recovery firmware image is listed in the Uploaded files section. Click the Install link to begin installing the recovery firmware

image and then click OK on the confirmation window that appears.

Figure 61 - Uploaded files

60


UM-00006 v1.1


3. The recovery firmware image is flashed and when it is complete, the gateway displays “The firmware update was

successful” and returns to the main Upload screen.

Figure 62 - Recovery firmware flash process

4. Press and hold the reset button on the interface panel of the gateway for between 3 and 10 seconds until the all LEDs on

the front of the gateway start to flash on and off then release it. The gateway boots into the system recovery mode.

5. When the gateway has finished booting into recovery mode, navigate to http://192.168.1.1/ in your web browser. The

gateway recovery console is displayed.

Note: The DHCP Server on the gateway does not function in recovery mode. You may need to configure your computer

to be in the 192.168.1.X subnet in order to access the gateway while it is in recovery mode.

Figure 63 – NWL Series Gateway Recovery Console banner

6. Click the Application installer link from the menu bar at the top then click the Browse button. Locate the main firmware

image file on your computer and click Open. Click the Upload button to begin the firmware upload.

Figure 64 - Recovery console - Upload main firmware image

http://192.168.1.1/

UM-00006 v1.1



7. When the upload has completed, the screen refreshes to display the list of files on the gateway’s storage. Click the Install

link to the right of the main firmware image you uploaded and then click OK to confirm that you want to continue with the

installation.

8. The installation is complete when you see the words “Installation successful!” as per the screenshot below.

Figure 65 - Recovery console – installing main firmware image

9. Click the Reboot menu item from the top menu bar then click the Reboot button. Click OK to confirm the reboot of the

gateway. The M2M Multi-Port Network Gateway boots up with the updated firmware.

62


UM-00006 v1.1


Package Manager

The Package Manager page is used to provide details of any user installed packages on the gateway.

Figure 66 - Package Manager Items

The Package Name, Version, Architecture and Installed time are shown and the package content details are available by clicking on

the blue Package Details link.

Alternatively, if you want to remove a package, click the blue Uninstall link.

Note: For more information on creating software packages for the NTC-8000-01, please contact M2M technical support at

http://www.netcommwireless.com/contact-forms/support

http://www.netcommwireless.com/contact-forms/support

UM-00006 v1.1



Administration The Administration page is used to enable or disable the firewall, remote administration, telnet access and ping responses.

Figure 67 - Administration Configuration Items

OPTION DEFINITION

Firewall Enable or disable the in-built firewall on the gateway.

Enable HTTP Enable or disable remote HTTP access to the gateway. You can also set the port you would like remote HTTP access to be available

on.

Enable Telnet Enable or disable telnet (command line) access to the gateway from the WWAN connection.

Enable Ping Enable or disable ping responses on the WWAN connection.

Web User Interface Account

Username Select the username you would like to change the password for. Root users have write permissions for both the root and admin

accounts. Admin users can only update the admin password.

Password Enter the new password for the selected user account.

Confirm Password Re-enter the new password for the selected user account.

Telnet Account

User Name The Telnet Account settings are only available when logged into the gateway as the ‘root’ user.

Password Enter the new password for the root telnet user account.

Confirm Password Re-enter the new password for the root telnet user account.

Table 27 - Administration Configuration Items

Note: The password will only be changed if you enter two matching passwords. It is not necessary to change the password if

you are only changing the incoming port number.

To access the gateway’s configuration pages remotely from a remote computer, perform the following steps:

1. Open a new browser window (e.g. Internet Explorer, Firefox, Safari).

2. In the address bar, enter the gateway’s WAN IP address and assigned port number, e.g. “10.10.10.10:8080”.

Note: You can find the gateway’s WAN IP address by clicking on the Status menu. The Local field in the WWAN section

shows the gateway’s WAN IP address.

3. Click Login and type admin or root in the Username and admin in the Password fields. Then click on Submit.

64


UM-00006 v1.1


System Configuration The System configuration page provides the ability to configure an external syslog server, TCP Keepalive settings, the power saving

feature and SFTP login credentials.

Figure 68 - System Configuration Items

The TCP Keepalive function can be used to ensure the WWAN connection does not disconnect due to inactivity, while the Power

Save mode can help ensure that the gateway does not cause battery drain which is especially useful when the gateway is installed

in a vehicle. Lastly, the SFTP username and password can be entered on this page.

OPTION DEFINITION

IP / Hostname [:PORT] The IP address and port of the external syslog server to which logging information should be sent.

Log to file Enables or disables the logging of system events.

Keepalive Enable or Disable the TCP Keepalive function.

Keepalive Time The interval between the last packet sent and the first TCP keepalive packet being sent. This

must be an integer between 60 and 65535 seconds.

Keepalive Interval The time between subsequent TCP Keepalive packets. This must be an interval between 10 and

28800 seconds.

Keepalive Probes The number of TCP Keepalive packets to send. This must be a value between 1 and 1000.

Power Save Mode Enables or disables the power saving feature of the gateway.

Remote SFTP Username The SFTP username for the SFTP account.

Remote SFTP Password The SFTP password for the SFTP account.

Table 28 - System Configuration Items

UM-00006 v1.1



Logoff

The logoff item logs you out of your web configuration session.

Figure 69 - Logoff

Reboot

The reboot item reboots the gateway. This can be useful if you have made configuration changes you want to implement or want to

reboot the gateway.

Figure 70 - Reboot Gateway

66


UM-00006 v1.1


Appendix A: Tables

Table 1 - Document Revision History ............................................................................................................................................... 2 Table 2 - NTC-8000-01 LEDs .......................................................................................................................................................... 6 Table 3 - Device Dimensions ............................................................................................................................................................ 7 Table 4 - Mounting Bracket Dimensions ........................................................................................................................................... 7 Table 5 - Integrated Interfaces ......................................................................................................................................................... 8 Table 6 - 4-way mini fit connector wiring .......................................................................................................................................... 9 Table 7 - LAN Management Default Settings .................................................................................................................................. 10 Table 8 – WiFi Default Settings ....................................................................................................................................................... 10 Table 9 - Web Interface Default Settings ........................................................................................................................................ 10 Table 10 - Status page items ......................................................................................................................................................... 13 Table 11 - Status Page - LAN Details ............................................................................................................................................. 14 Table 12 - Status Page - PPPoE Details ......................................................................................................................................... 14 Table 13 - Status Page - PPTP Details ........................................................................................................................................... 14 Table 14 - Status Page - IPSec Details .......................................................................................................................................... 14 Table 15 - Advanced Status Settings ............................................................................................................................................. 16 Table 16 - WLAN Failover Settings ................................................................................................................................................. 19 Table 17 - NAT Configuration Items ............................................................................................................................................... 28 Table 18 - IPSec Configuration Items ............................................................................................................................................. 34 Table 19 - OpenVPN Configuration Items ....................................................................................................................................... 36 Table 20 - PPTP Configuration Items ............................................................................................................................................. 38 Table 21 - VPN - GRE Settings ...................................................................................................................................................... 40 Table 22 - Wireless Settings - Basic ............................................................................................................................................... 41 Table 23 - Wireless Settings - Advanced Configuration Items ......................................................................................................... 43 Table 24 - Wireless Configuration Details ....................................................................................................................................... 52 Table 25 - SNMP Configuration Options ........................................................................................................................................ 56 Table 26 - System Log Detail Levels .............................................................................................................................................. 57 Table 27 - Administration Configuration Items ................................................................................................................................ 63 Table 28 - System Configuration Items .......................................................................................................................................... 64

UM-00006 v1.1



Appendix B: Recovery mode The NTC-8000-01 features two independent operating systems, each with its own file systems. These two systems are referred to

as 'Main' and 'Recovery'. It is always possible to use one in order to restore the other in the event that one system becomes

damaged or corrupted (such as during a firmware upgrade failure).

Both systems have web interfaces that can be used to manipulate the other inactive system. The gateway starts up by default in the

Main system mode, however the gateway may be triggered to start in recovery mode if desired.

To start the gateway in recovery mode:

1. Power on the gateway and allow it to remain on for at least 1 minute to complete its boot procedure.

2. Press and hold the physical reset button on the rear interface panel of the gateway for between 3 and 10 seconds and then

release the button. The gateway boots into recovery mode.

3. In your browser, navigate to http://192.168.1.1. The gateway’s recovery mode is hardcoded to use this address regardless

of the IP address that was configured in the main system. The gateway’s recovery console is displayed.

Figure 71 - Recovery console

The recovery console provides limited functionality. Basic status information is available, as well as access to the System log for

troubleshooting. The Application Installer can be used to upload and install different firmware, allowing you to roll back to a previous

firmware in the event that an upgrade fails. The Settings menu provides the ability to reset the gateway to factory default settings

and the Reboot tab allows you to perform a soft reboot of the gateway.

http://192.168.1.1/

68


UM-00006 v1.1


Legal and Regulatory 1. Intellectual Property Rights

All intellectual property rights (including copyright and trade mark rights) subsisting in, relating to or arising out this Manual are

owned by and vest in NetComm Wireless Limited (ACN 002490486) (NetComm Wireless Limited) (or its licensors). This Manual

does not transfer any right, title or interest in NetComm Wireless Limited (or its licensors) intellectual property rights to you.

You are permitted to use this Manual for the sole purpose of using the NetComm Wireless product to which it relates. Otherwise no

part of this Manual may be reproduced, stored in a retrieval system or transmitted in any form, by any means, be it electronic,

mechanical, recording or otherwise, without the prior written permission of NetComm Wireless Limited.

NetComm and NetComm Wireless are trademarks of NetComm Wireless Limited. All other trademarks are acknowledged to be the

property of their respective owners.

2. Customer Information

The Australian Communications & Media Authority (ACMA) requires you to be aware of the following information and warnings:

1. This unit may be connected to the Telecommunication Network through a line cord which meets the requirements of the

AS/CA S008-2011 Standard.

2. This equipment has been tested and found to comply with the Standards for C-Tick and or A-Tick as set by the ACMA.

These standards are designed to provide reasonable protection against harmful interference in a residential installation. This

equipment generates, uses, and can radiate radio noise and, if not installed and used in accordance with the instructions

detailed within this manual, may cause interference to radio communications. However, there is no guarantee that

interference will not occur with the installation of this product in your home or office. If this equipment does cause some

degree of interference to radio or television reception, which can be determined by turning the equipment off and on, we

encourage the user to try to correct the interference by one or more of the following measures:

Change the direction or relocate the receiving antenna.

Increase the separation between this equipment and the receiver.

Connect the equipment to an alternate power outlet on a different power circuit from that to which the receiver/TV is

connected.

Consult an experienced radio/TV technician for help.

3. The power supply that is provided with this unit is only intended for use with this product. Do not use this power supply with

any other product or do not use any other power supply that is not approved for use with this product by NetComm

Wireless Limited. Failure to do so may cause damage to this product, fire or result in personal injury.

3. Consumer Protection Laws

Australian and New Zealand consumer law in certain circumstances implies mandatory guarantees, conditions and warranties which

cannot be excluded by NetComm Wireless Limited and legislation of another country's Government may have a similar effect

(together these are the Consumer Protection Laws). Any warranty or representation provided by NetComm Wireless Limited is in

addition to, and not in replacement of, your rights under such Consumer Protection Laws.

If you purchased our goods in Australia and you are a consumer, you are entitled to a replacement or refund for a major failure and

for compensation for any other reasonably foreseeable loss or damage. You are also entitled to have the goods repaired or replaced

if the goods fail to be of acceptable quality and the failure does not amount to a major failure. If you purchased our goods in New

Zealand and are a consumer you will also be entitled to similar statutory guarantees.

UM-00006 v1.1



4. Product Warranty

All NetComm Wireless products have a standard one (1) year warranty from date of purchase, however, some products have an

extended warranty option (refer to packaging and the warranty card) (each a Product Warranty). To be eligible for the extended

warranty option you must supply the requested warranty information to NetComm Wireless Limited within 30 days of the original

purchase by registering online via the NetComm Wireless web site at www.netcommwireless.com . For all Product Warranty claims

you will require proof of purchase. All Product Warranties are in addition to your rights and remedies under applicable Consumer

Protection Laws which cannot be excluded (see Section 3 above).

Subject to your rights and remedies under applicable Consumer Protection Laws which cannot be excluded (see Section 3 above),

the Product Warranty is granted on the following conditions:

1. the Product Warranty extends to the original purchaser (you / the customer) and is not transferable;

2. the Product Warranty shall not apply to software programs, batteries, power supplies, cables or other accessories supplied

in or with the product;

3. the customer complies with all of the terms of any relevant agreement with NetComm Wireless Limited and any other

reasonable requirements of NetComm Wireless Limited including producing such evidence of purchase as NetComm

Wireless Limited may require;

4. the cost of transporting the product to and from NetComm Wireless Limited’s nominated premises is your responsibility;

5. NetComm Wireless Limited does not have any liability or responsibility under the Product Warranty where any cost, loss,

injury or damage of any kind, whether direct, indirect, consequential, incidental or otherwise arises out of events beyond

NetComm Wireless Limited’s reasonable control. This includes but is not limited to: acts of God, war, riot, embargoes, acts

of civil or military authorities, fire, floods, electricity outages, lightning, power surges, or shortages of materials or labour; and

6. the customer is responsible for the security of their computer and network at all times. Security features may be disabled

within the factory default settings. NetComm Wireless Limited recommends that you enable these features to enhance your

security.


the Product Warranty is automatically voided if:

7. you, or someone else, use the product, or attempt to use it, other than as specified by NetComm Wireless Limited;

8. the fault or defect in your product is the result of a voltage surge subjected to the product either by the way of power

supply or communication line, whether caused by thunderstorm activity or any other cause(s);

9. the fault is the result of accidental damage or damage in transit, including but not limited to liquid spillage;

10. your product has been used for any purposes other than that for which it is sold, or in any way other than in strict

accordance with the user manual supplied;

11. your product has been repaired or modified or attempted to be repaired or modified, other than by a qualified person at a

service centre authorised by NetComm Wireless Limited; or

12. the serial number has been defaced or altered in any way or if the serial number plate has been removed.

5. Limitation of Liability

This clause does not apply to New Zealand consumers.


NetComm Wireless Limited accepts no liability or responsibility, for consequences arising from the use of this product. NetComm

Wireless Limited reserves the right to change the specifications and operating details of this product without notice.

If any law implies a guarantee, condition or warranty in respect of goods or services supplied, and NetComm Wireless Limited’s

liability for breach of that condition or warranty may not be excluded but may be limited, then subject to your rights and remedies

under any applicable Consumer Protection Laws which cannot be excluded, NetComm Wireless Limited’s liability for any breach of

that guarantee, condition or warranty is limited to: (i) in the case of a supply of goods, NetComm Wireless Limited doing any one or

more of the following: replacing the goods or supplying equivalent goods; repairing the goods; paying the cost of replacing the

goods or of acquiring equivalent goods; or paying the cost of having the goods repaired; or (ii) in the case of a supply of services,

NetComm Wireless Limited doing either or both of the following: supplying the services again; or paying the cost of having the

services supplied again.

To the extent NetComm Wireless Limited is unable to limit its liability as set out above, NetComm Wireless Limited limits its liability

to the extent such liability is lawfully able to be limited.

http://www.netcommwireless.com/

70


UM-00006 v1.1


Contact Address: NETCOMM WIRELESS LIMITED

PO Box 1200, Lane Cove NSW 2066 Australia

Phone: +61(0)2 9424 2070 Fax: +61(0)2 9424 2010

Website: www.netcommwireless.com

Email: [email protected] , [email protected]

http://www.netcommwireless.com/

mailto:[email protected]

mailto:[email protected]

user guide - netcom · the following page lists the physical dimensions of the ntc-8000-01, as well...

Documents