UserManual - es.caimore.net Manual for CM520 … · 厦门才茂通信科技有限公司 Xiamen Caimore Communication Technology Co.,Ltd Add:3F,1stBuilding,23#WanghaiRoad,Xiamen

厦门才茂通信科技有限公

司

Xiamen Caimore Communication Technology

Co.,Ltd

Add: 3F, 1st Building, 23# Wanghai Road, Xiamen Tel: +86-592-5902655Web:http://en.caimore.com Fax:+86-592-5975885

User ManualCM520-6X Series Router

Xiamen Caimore Communication Technology Co.,Ltd

Add: 3F, 1st Building, 23# Wanghai Road, Xiamen

Tel：0592-5902655 Fax：0592-5975885 P：361009

Web：en.caimore.com/ www.caimore.com.cn Email:[email protected]

版权所有2003-2009

----才茂通信通畅天下----

http://www.caimore.com.cn

http://www.caimore.com


司


Co.,Ltd


Statement

Copyright Statement：

All contents included in this user manual are protected by copyright law, any organizationor person has no right to copy, reproduce and spread by any method, unless gets the writtenauthorization from Xiamen Caimore communication technology co.,Ltd.

Trademark：

Caimore and other Caimore brands are possessed by Xiamen Caimore communicationtechnology co.,Ltd. Other brands or registered brands mentioned in this page are possessed bytheir owner.

Notice:

The file will be updated because of the unscheduled upgrade of products and other reasons.Unless there are other agreement, the file is only used as the manual guide, the informationand suggestion included in this page do not constitute any express or implied warranty.



司


Co.,Ltd


Catalog

1 Product Instruction................................................................................................................................................. 11.1 Overview....................................................................................................................................................11.2 Pictures...................................................................................................................................................... 21.3 Product List................................................................................................................................................31.4 Indicator Description................................................................................................................................. 4

2 Installation Instruction............................................................................................................................................52.1 Components............................................................................................................................................... 52.2 Product Details...........................................................................................................................................52.3 Install SIM Card........................................................................................................................................ 62.4 Install Antennas......................................................................................................................................... 7

3 Rapidly Configure.................................................................................................................................................. 83.1 Dial to Internet...........................................................................................................................................8

3.1.1 Insert SIM Card to SIM Card Slot................................................................................................ 83.1.2 Connect Antenna...........................................................................................................................83.1.3 Connect Router and Computer......................................................................................................93.1.4 Configure Computer’s Network....................................................................................................93.1.5 Configure WAN.......................................................................................................................... 113.1.6 Test Configuration...................................................................................................................... 12

3.2 Access Internet Through WAN Port (WAN AP Client)......................................................................... 133.2.1 Connect Antennas....................................................................................................................... 133.2.2 Access Internet Through WAN Port...........................................................................................133.2.3 Configure Computer’s Network..................................................................................................133.2.4 Configure WAN.......................................................................................................................... 133.2.5 Configure LAN........................................................................................................................... 143.2.6 Test Configuration...................................................................................................................... 14

3.3 Technical Support....................................................................................................................................144 Details of All Settings.......................................................................................................................................... 15

4.1 Network Configuration............................................................................................................................154.1.1 WAN........................................................................................................................................... 154.1.2 LAN............................................................................................................................................ 184.1.3 Wi-Fi........................................................................................................................................... 194.1.4 DHCP.......................................................................................................................................... 224.1.5 VLAN..........................................................................................................................................23

4.2 Advance................................................................................................................................................... 234.2.1 Static Routes............................................................................................................................... 234.2.2 NAT/DMZ.................................................................................................................................. 244.2.3 Keep Online................................................................................................................................ 254.2.4 QoS..............................................................................................................................................26

4.3 VPN......................................................................................................................................................... 264.3.1 PPTP............................................................................................................................................26



司


Co.,Ltd


4.3.2 IPSec/L2TP................................................................................................................................. 284.3.3 OpenVPN.................................................................................................................................... 314.3.4 N2N............................................................................................................................................. 31

4.4 Operations................................................................................................................................................334.4.1 WiFidog...................................................................................................................................... 334.4.2 Layer 7 Filtering..........................................................................................................................344.4.3 Privoxy........................................................................................................................................ 344.4.4 Station Update.............................................................................................................................354.4.5 Portal........................................................................................................................................... 35

4.5 Network Service...................................................................................................................................... 364.5.1 Oray.............................................................................................................................................364.5.2 Flowctrl....................................................................................................................................... 36

4.6 Equipment................................................................................................................................................374.6.1 Status Check................................................................................................................................374.6.2 Debug Message........................................................................................................................... 394.6.3 Local Upgrade.............................................................................................................................394.6.4 Wifimac.......................................................................................................................................404.6.5 Power Management.....................................................................................................................41

Technical Support:.................................................................................................................................................. 41


厦门才茂通信科技有限公司



1

1 Product Instruction

1.1 Overview

For some devices, there are 2.4GHz and 5 GHz channels can be chosen in Wi-Fi. And italso load the safety functions of VPN tunnel for WAN communication, Wi-Fi safetycertification for LAN transmission. It implements the seamless connection between wirelessWAN and wireless LAN, also provide a high speed, safe, reliable network service. The deviceadopts high-performance industrial-grade MIPS communication processor, using embeddedreal-time operating system to support the software, and it integrates the whole system protocolfrom logic link layer to application layer.

It supports: VPN(including GRE, PPTP, L2TP, IPSec, OpenVPN and N2N), IPTables firewall, static and dynamic route, PPPoE, PPP Server, PPP Client, DHCP Server, DHCP Client, WiFi Client, DDNS, firewall, SNAT/DNAT, DMZ hosts, WEB configure, APN/VPDN, Automatically dial when being powered, Automatically maintain communications link, Time online and offline, Time reboot, And so on...The whole product adopts industrial-grade design. The system works with protection of

watch dog(WDT ), and also load the system watch protect(SWP). It passed 3000Velectric-shock test. And it has a patent of keep stable system which named Keep-Online, withthe strict design and test and practical application, we can assure you that it has a stable andreliable performance.

This product has been widely used in middle and small-sized enterprises, family,financial trade, postal transaction, smart grid, environmental monitoring, fire monitoring,security monitoring, water conservancy monitoring, public security, advertising, telemetry andso on.





2

1.2 Pictures

Pictures of product’s interface:

Panorama Front Interface Back Interface

Pictures of mountings:

Vehicle-mounted

Power Adapter

Ethernet Cable Serial Port Cable Antenna





3

1.3 Product List

List of Router:

SSD: (Optional) 64GB, 128GB, 256GB, 512GB

Model Network Type Dual SIM Card 2.4GWiFi 5.8GWiFi GPS Module

CM520-61F LTE-FDD/TDD √ √CM520-61W WCDMA √ √CM520-62F LTE-FDD/TDD √CM520-62W WCDMA √CM520-64F LTE-FDD/TDD √ √ √CM520-64W WCDMA √ √ √CM520-65F LTE-FDD/TDD √ √CM520-65W WCDMA √ √CM520-67F LTE-FDD/TDD √ √ √CM520-67W WCDMA √ √ √CM520-68F LTE-FDD/TDD √ √ √ √CM520-68W WCDMA √ √ √ √





4

1.4 Indicator Description

Indicator Status Description

POWERlight on The power supply is normal

light off No power.

SYSblink There is program running.

light off There is no program running.

Online1

（SIM Card 1）

light on The device is online.

light off The device is offline.

Online2

（SIM Card 2）

light on The device has login network.

light off The device has not login network.

信号指示灯 1

(signal indicator 1)

Both indicators are off.The signal value of SIM card 1 is

less than 12.

Only one indicator is on.The signal value of SIM Card 1 is

between 12 and 25.

Both indicators are on.The signal value of SIM Card 1 is

more than 25.

信号指示灯 2

(signal indicator 2)

Both indicators are off.The signal value of SIM card 2 is

less than 12.

Only one indicator is on.The signal value of SIM Card 2 is

between 12 and 25.

Both indicators are on.The signal value of SIM Card 2 is

more than 25.





5

2 Installation Instruction

2.1 Components

Please check the components when you are unpacking it. The defaultName Quantity Model

Router 1 All

RJ45-DB9 cable 1 All

DC 9V Power Adapter 1 All

Ethernet Cable (RJ-45) 1 All3G/4G Antenna 2 All

5.8G WIFI Antenna 3 Router with 5.8G WiFi2.4G WIFI Antenna 3 Router with 2.4G WiFi

2.2 Product Details

Front Panel:

1: 5G WiFi antenna interface; 2: Power indicator; 3: System indicator 4: Online indicators(for SIM card 1 and SIM card 2) 5: Signal indicators(for SIM card 1) 6: Signal indicators(for SIM card 2) 7: 5G WiFi antenna interface; 8: Reset key;





6

9: 2.4G WiFi antenna interface; 10: Serial Port 11: 2.4 G WiFi antenna interface; 12: Power outlet; 13: 2.4G WiFi antenna interface.

Back Panel:

2.3 Install SIM Card

SIM card stores information such as user identification, network settings, additionalservice information and so on. The router supports 1.8V/3V/5V SIM card, and user can insertSIM card without opening the enclosure.

The method to insert the SIM card:Before powering the router, turn the side with metal contact surface down while inserting

the SIM card to router. As picture showing:

Notice: Please do not insert or pull out the SIM card when router is charged!





7

2.4 Install Antennas

1: WiFi Antenna; 2: 5.8G WiFi Antenna; 3: 3G Antenna; 4: 4G Antenna.





8

3 Rapidly ConfigureFor one condition, to make it convenient for customers to test router, and another

condition, for most customers who just need some basic functions, this chapter is very usefulfor these customers. And it shows the configurations under the operation system of Windows7.

Usually, there are WAN and LAN need to be configured in quick configuration, otherfunctions settings please refer to chapter 4 “Details of All Settings”.

3.1 Dial to Internet

3.1.1 Insert SIM Card to SIM Card Slot

Insert the SIM card.As picture showing.

NOTICE: Please power up router after inserting the SIM card.

3.1.2 Connect Antenna

Please connect antennas according to interfaces.





9

3.1.3 Connect Router and Computer

Please connect your computer and router through LAN port. As picture showing:

3.1.4 Configure Computer’s Network

1 Open Network and Sharing Center.

2 Change adapter settings.





10

3 Choose “Realtek PCIe GBE Family Controller”. And click “Properties”.

4 Choose “Internet Protocol Version 4(TCP/IP 4)”, and click “Properties”.

5 Obtain a IP address and DNS server address automatically.

6 Type “ipconfig” in cmd, then you can see the “Default Gateway”, that’s the LAN IPaddress of router.





11

7 Type “192.168.9.1:9999” in browser’s URL box.

8 There will be a window popping up, and it requires username and password. Aspicture showing, the default username and password are both “admin”.

Notice:Router’s default LAN IP address is 192.168.9.1.The default port to access the configuration web page is “9999”.The default username is “admin”, the default password is “admin”.

3.1.5 Configure WAN

Please switch to “WAN” - “4G Dial” page.





12

In general situation, it’ll dial to internet automatically as default. But if your SIMcard has some special settings like APN/VPDN private network, please check it withoperator, then type them in corresponding place.

And if your SIM card has set PIN code, please choose the “Advance”, then type theinfo to corresponding parameters. As picture showing:

3.1.6 Test Configuration

Re-powering the router;





13

SYS indicator flickers; Online indicator is on. Browsing webpage via router’s network.

3.2 Access Internet ThroughWAN Port (WANAPClient)

3.2.1 Connect Antennas

3.2.2 Access Internet ThroughWAN Port

Connect Caimore router’s WAN port to an upper router’s LAN port, and connect yourcomputer to CM router’s LAN port.

3.2.3 Configure Computer’s Network

Please refer to 3.1.3 Configure Computer’s Network.

3.2.4 Configure WAN

For example, as picture showing, CM router connects an upper router who can accessInternet.





14

So in the “WAN” - ”Static IP” page, “IPv4 address” and “IPv4 gateway” should be in aLAN, and also, “IPv4 gateway” should be upper router’s LAN IP address. Details can be seenin the picture:

After setting all the parameters, click “Submit”.

3.2.5 Configure LAN

As default, CM router set its LAN to 192.168.9.0/24. DNS can be a common DNS serveraddress, such as Google’s “8.8.8.8”, and Baidu’s “114.114.114.114”.

3.2.6 Test Configuration

Please refer to 3.1.6 Test Configuration.

3.3 Technical Support

If there is any doubt, please access our official website: www.caimore.net or contacttechnical support staff and whose email address is [email protected].

http://www.caimore.net





15

4 Details of All Settings

4.1 Network Configuration

4.1.1 WAN

Settings about router connecting Internet.

4.1.1.1 Static IP

Please refer to 3.2 Access Internet Through WAN Port (WAN AP Client).

4.1.1.2 DHCPClient

Router connects Internet by getting a IP address via DHCP.

4.1.1.3 PPPoE

Username: used to access Internet, provided by operator.





16

Password: used to access Internet, provided by operator.

4.1.1.4 4G Dial

Center/APN/Username/Password: These parameters have been set when leavingfactory. Under normal condition, they are can be left as default. But if there is using theVPDN, please type they according to the info provided by operator.

Search Network: In general situation, it will work well even if leave it as default. But ifduring a long time, it can’t dial to Internet, please set it to corresponding network type.

4.1.1.5 Wire or SIM

Main Mode: There are three modes can be chosen--Static address, DHCP Client, andPPPoE.

Static address, PPPoE, SIM DIAL can refer to previous instruction.





17

In this mode, router will prioritize the main mode, if main mode can’t work, then it willdial to Internet by SIM card.

4.1.1.6 Switch

The router will be used as a SWITCH.

4.1.1.7 Double Mode

SIM DIAL 1, SIM DIAL 2: these parameters’ settings can refer to previous instruction. In this mode, router will work with two modules and bandwidth will be superposed.Notice: Before using this function, please make it sure that if router you bought supports it.

Router will prioritize SIM 2, so if you just only one card, please insert it to SIM card2 slot.





18

4.1.1.8 Wi-Fi Client

SSID: The identification of Wi-Fi that router connects. Key: The password of Wi-Fi that router connects.Notice: Router’s LAN should be different from Wi-Fi’s.

4.1.2 LAN

IPAddress: It’s the LAN port IP address of router’s. The default is “192.168.9.1”. NetMask: Subnet Mask of router’s LAN. MAC: MAC address for LAN port. There is no need to configure it, system will set a

value for it automatically. DNS: IP address of DNS server. It’ll set a value according to practical situation, but if

you own a stable DNS server, it can be set to your server’s address.Notice:

1. Please ensure that IP address of devices who connect router should be in LAN ofrouter’s.

2. If there are multiple CM-routers in a LAN, please modify the MAC address for every





19

router, for it’s primarily to avoid clashes.3. If the DNS address has been modified, please check it if the DNS server can provide

normal work.

4.1.3 Wi-Fi

4.1.3.1 2.4GWi-Fi

Channel: Choose a work frequency for router’s Wi-Fi. If there is disturb signal betweendifferent access point, please modify the channel to another one. Select 1,6 and 11 as first.

Wireless Power: It can be understood as a range that can be covered. The greater thepower, the greater the range.

Model: Choose the work mode of router.802.11 b: The client device who only supports 802.11b.802.11 g: The client device who only supports 802.11g.802.11 a: The client device who only supports 802.11a.802.11 g+n mixed: The client device who supports 802.11g or n.802.11 a+n mixed: The client device who supports 802.11a or n.802.11 ac: The client device who supports 802.11 ac.

Bandwidth: The frequency range of Wi-Fi signal also named bandwidth. Countcode: A geographic code used to represent a country. Distance Optimization: Keep it in default. Frag Threshold: Keep it in default. RTS/CTS Threshold: Keep it in default. Mode: Three modes can be chosen--AP, Client, Wireless Repeate. ESSID: Identification of Wi-Fi. Supports up to 32 characters, and the default name is

“CaiMore_WiFi_2G”. It’s better to modify the name for there may be multiple CMrouters in a area.

BSSID: Actually, it’s the MAC address of AP, used to identify the BSS.





20

Hide BSSID: If it’s checked, then BSSID will be hidden in Wi-Fi list, but devices whoalready connected won’t be disconnected.

Way of Encryption:None -- There is no data encryption, devices can connect Wi-Fi without password.WEP Authentication: Adopts WEP standard encryption, and uses open system

authentication.WEP Share Key: Adopts WEP standard encryption, and uses shared key

authentication.WPA-PSK: Adopts WPA-PSK standard encryption, and uses pre-shared key to

access Wi-Fi.WPA2-PSK: Adopts WPA2-PSK standard encryption, and uses pre-shared key to

access Wi-Fi. Encryption type is AES.WPA-PSK/WPA2-PSK Mixed Mode: Adopts WPA-PSK or WPA2-PSK standard

encryption, and uses pre-shared key to access Wi-Fi.

4.1.3.2 5GWiFi

Channel: Choose a work frequency for router’s Wi-Fi. If there is disturb signal betweendifferent access point, please modify the channel to another one.

Wireless Power: It can be understood as a range that can be covered. The greater thepower, the greater the range.

Model: Choose the work mode of router.802.11 b: The client device who only supports 802.11b.802.11 g: The client device who only supports 802.11g.802.11 a: The client device who only supports 802.11a.802.11 g+n mixed: The client device who supports 802.11g or n.802.11 a+n mixed: The client device who supports 802.11a or n.802.11 ac: The client device who supports 802.11 ac.





21

Bandwidth: The frequency range of Wi-Fi signal also named bandwidth. Countcode: A geographic code used to represent a country. Distance Optimization: Keep it in default. Frag Threshold: Keep it in default. RTS/CTS: Keep it in default. Mode: Three modes can be chosen--AP, Client, Wireless Repeate. ESSID: Identification of Wi-Fi. Supports up to 32 characters, and the default name is

“CaiMore_WiFi_5G”. It’s better to modify the name for there may be multiple CMrouters in a area.

BSSID: Actually, it’s the MAC address of AP, used to identify the BSS. Hide BSSID: If it’s checked, then BSSID will be hidden in Wi-Fi list, but devices who

already connected won’t be disconnected. Way of Encryption:

None -- There is no data encryption, devices can connect Wi-Fi without password.WEP Authentication: Adopts WEP standard encryption, and uses open system

authentication.WEP Share Key: Adopts WEP standard encryption, and uses shared key

authentication.WPA-PSK: Adopts WPA-PSK standard encryption, and uses pre-shared key to

access Wi-Fi.WPA2-PSK: Adopts WPA2-PSK standard encryption, and uses pre-shared key to

access Wi-Fi. Encryption type is AES.WPA-PSK/WPA2-PSK Mixed Mode: Adopts WPA-PSK or WPA2-PSK standard

encryption, and uses pre-shared key to access Wi-Fi.

Notice: Before configuring 5G Wi-Fi, please ensure that your CM router can support it.

4.1.3.3 Security Options

WEPAuthentication:

Key #1: Password, length of it can be divided into three types -- 5 characters, 13characters and 16 characters.

WEPShare Key:

Key #1: Password, length of it can be divided into three types -- 5 characters, 13characters and 16 characters.





22

WPA-PSK:

Encryption: There are four modes can be chosen -- Auto, CCMP(AES), TKIP, TKIP andCCMP(AES).

Key: Password. The length is between 8 and 63 characters. WPA2-PSK:


Key: Password. The length is between 8 and 63 characters. WPA-PSK/WPA2-PSK Mixed Mode


Key: Password. The length is between 8 and 63 characters.

4.1.4 DHCP

DHCP means Dynamic Host Control Protocol. It can automatically provide IP addressesfor devices who connect router via LAN port or Wi-Fi.

Initial Allocation Address: This is the starting address for the DHCP server to assign IP





23

addresses automatically. Client Number: The quantity of IP addresses that DHCP server will assign for devices.

4.1.5 VLAN

Notice: Please don’t modify the VLAN settings in the situation that without ourcompany’s engineer’s help!

4.2 Advance

4.2.1 Static Routes

Destination IP: The destination IP address of static route, it can be a host or networksegment.

Mask: Subnet mask of destination IP. If destination is a host, please set mask to“255.255.255.255”.

Gateway: Next-hop IP of static route. If there is no need to add a gateway, please set it to“0.0.0.0”.

Metric: Routing metric. The default value is 0. MTU: The maximum transmission unit. The default value is 1500. Interface: System interface.Notice: After adding a static route, if the rule doesn’t appear in the routing table below, it





24

means this rule has not been added successfully even if there is a successful tip. If thathappens, please check your settings.

4.2.2 NAT/DMZ

4.2.2.1 NAT

The full name of NAT is “Network Address Translation”, also means port mapping. It’s atechnology that map private IP addresses to a WAN address’s different ports, which makesdevices in LAN can be accessed by Internet.

By setting these parameters, it’ll transfer the data from Internet to a specified host andport in the LAN via port mapping. Name: It’s used to identify different rules, so each name should be different. Please name

it with 0-9,a-z,A-Z, other characters will not be supported. Protocol: There are three protocols can be chosen -- TCP, UDP and TCP/UDP. External Port: WAN port. Internal IPAddress: The private IP address you want to map to external. Internal Port: The port of internal host you want to map to external.

4.2.2.2 DMZ

In order to achieve the both-way communication, DMZ will expose a specified internalhost to Internet, that also means the host will play a role of virtual server. When there areexternal users who wanting to visit the public IP address that mapped by the virtual server,then router will transfer the data to virtual server directly.

If there is a host in LAN who wants to connect Internet directly, DMZ is a simple methodto achieve this purpose.





25

The method to configure it is that choose “Start DMZ” and type the virtual server’sprivate IP address to “Internal IP address”, then click “Submit”.

4.2.3 Keep Online

It’s a feature to detect the state of data transmission channel between router and Internetin every few minutes automatically. If it detects an abnormal network state, router will restartand re-dial automatically. This is used to achieve a function that router will keep online all thetime even if without administrator’s monitoring.

Please according to practical situation, type a reachable IP address in “Destination IP 1/2”.“Check Interval” and “Check Timeout” can be left in default value.

Notice:a. If this function has been closed, then the router will not detect the network state, so

router will not restart and re-dial even if it’s offline.b. The destination IP should be stable and reachable for router, for if destination is

unstable then it’ll cause the router to reboot constantly.c. This function is used for public as default, so in private network, destination IP should

be modified.





26

4.2.4 QoS

Max Download Rate: The maximum downloading speed of device. Max Upload Rate: The maximum uploading speed of device. Rule Name: Name of rule. Each name should be different. IP address: IP address of the speed limiting devices.

4.3 VPN

4.3.1 PPTP

PPTP is a protocol in layer 2, it transfers data by encapsulating PPP data frames within IPpackets. It also can be used in the connection of private LAN. It uses a TCP connection tomaintain the tunnel, and uses GRE technology to encapsulate the data to PPP data frames thentransfer the data through tunnel. And also, it can encrypt or compress the data encapsulated inPPP frames.

Server: IP address or domain of PPTP server. Remote Subnet / Remote Mask: Intranet information on server side. Protocol: The way of PPTP to perform PPP authentication --

Pap: in this way, username and password are transmitted in clear text, the security





27

level of it is low.ChapMS-ChapMS-Chap-V2Any: it will take one of four approaches to verify.

MPPE: Way to encrypt --NoMppe: No encryption.Mppe-(40|128)Mppe-StateFul

Add Default Route: If it’s checked, then all the data passing through the router will besent to PPTP tunnel. Also means, all the devices connected to the router are only allowedto access external network through PPTP tunnel.

NAT: If it’s checked, the devices connected to the router can access PPTP server throughthe tunnel. If not, then these devices only can access server via Internet.

Specify Local IP / Specify Peer IP: If PPTP server allows it, router can specify a localtunnel IP address.

Tunnel Check Interval / Tunnel Check Times: After tunnel is built, in order to checktunnel state, router will send LCP packet to server in every tunnel check interval. Whenthe number of tunnel-checking failures over the value of “Tunnel Check Times”, routerwill initiate to terminate the connection and send a request to rebuild the tunnel.

Other Parameters: It’s used in a situation where a special parameter is required tonegotiate when establishing a tunnel. In general, this parameter can be left in blank,unless server is requiring a special negotiation parameter.Format -- “novj;novjcomp”, between each parameter should be separated by “;”.

Notice:a. If “Add Default Route” is checked, please modify the parameters in “Keep Online”.b. If your router is in LAN, please map the port 1723 to this router.





28

4.3.2 IPSec/L2TP

4.3.2.1 IPSec

Connection Mode:Initiative: the connection is initiated by local side.Passivity: wait for a connection.

Remote Address: IP address of peer side. Transport Mode:

Transport: usually used in the connection between router and server.Tunnel: usually used in the connection between two routers.Passthrough: it allows IPSec protocol to pass through.

Local Endpoint Type:Network to Network: used in the communication between devices connected to

router and server.Road Warrior: connect to server as a mobile client.

Subnet: If the “Local Endpoint Type” is “Network to Network”, it’s the subnet of twosides.

Next Hop IP: If the device is in LAN, this parameter means gateway’s IP. IPSec Port: If L2TP is opened too, it means the port listened by L2TP. L2TP’s default

port is 1701. IPSec Identify:

For server, please set this parameter to “@server”.For client, please set this parameter to “@client”.





29

Phase 1: Work Mode:

MainAggressive

Perfect Forward Secrecy(PFS): Accurate forwarding and encrypt. Prevent single keyleakage which affects whole communication system.

Debug: Turn on debugging information. Enable NAT Traversal: If this router is not connecting Internet directly but another

router, please check it. Authentication:

Pre-shared KeyCertificates

Cipher: DES, 3DES, AES, AES128. Hash: SHA1, MD5. DH Group: Group1, Group2, Group5, Group14, Group15, Group16, Group17 and

Group18. SALifetime: Phase negotiation time. Key: When “Authentication” is “Pre-shared Key”, it’s the shared key. Password: When “Authentication” is “Certificates”, it’s the password of certificate.

Phase 2: Phase 2 is protected by phase 1 SA, any message that is not protected by phase1 will be rejected.

DH Group: Group1, Group2, Group5, Group14, Group15, Group16, Group17 andGroup18.

Cipher: DES, 3DES, AES, AES128. Hash: SHA1, MD5. SALifetime: Phase negotiation time.

Other Parameters: DPD Delay / DPD timeout: After tunnel is built, in order to check tunnel state, router

will send LCP packet in every tunnel check interval. When the number oftunnel-checking failures over the value of “DPD timeout”, router will initiate to terminatethe connection and send a request to rebuild the tunnel.

IPcomp: IP payload compression.

4.3.2.2 L2TP

L2TP (Layer 2 Tunneling Protocol) is a kind of VPDN technology, it’s specifically usedin transferring data in layer 2 tunnel. Also means it’ll encapsulate data units of layer 2(such asPPP data) within an IP or UDP payload.





30

Server: IP address or domain of PPTP server. Remote Subnet / Remote Mask: Intranet information on server side. User / Password: LAC username and password. Protocol: The way of PPTP to perform PPP authentication --

Pap: in this way, username and password are transmitted in clear text, the securitylevel of it is low.

ChapMS-ChapMS-Chap-V2Any: it will take one of four approaches to verify.

MPPE: Way to encrypt --NoMppe: No encryption.Mppe-(40|128)Mppe-StateFul

Add Default Route: If it’s checked, then all the data passing through the router will besent to PPTP tunnel. Also means, all the devices connected to the router are only allowedto access external network through PPTP tunnel.

NAT: If it’s checked, the devices connected to the router can access PPTP server throughthe tunnel. If not, then these devices only can access server via Internet.

Specify Local IP / Specify Peer IP: If PPTP server allows it, router can specify a localtunnel IP address.

Tunnel Check Interval / Tunnel Check Times: After tunnel is built, in order to checktunnel state, router will send LCP packet to server in every tunnel check interval. Whenthe number of tunnel-checking failures over the value of “Tunnel Check Times”, routerwill initiate to terminate the connection and send a request to rebuild the tunnel.

Other Parameters: It’s used in a situation where a special parameter is required tonegotiate when establishing a tunnel. In general, this parameter can be left in blank,unless server is requiring a special negotiation parameter.Format -- “novj;novjcomp”, between each parameter should be separated by “;”.





31

4.3.3 OpenVPN

OpenVPN is an application layer VPN implementation based on OpenSSL library.Compared to traditional VPN, its advantage is easier to configure.

Server IP: IP address of server. Protocol: TCP or UDP. Device: Tap or tun.Notice: Protocol and device should be set as same with server’s.Configuration in client:

Package the files(ca.crt, client.crt, client.key) generated by the server and send them toclient. Then upload these files on router to corresponding place.

4.3.4 N2N

N2N is a two-tier VPN, it allows users to develop typical features of P2P application atNetwork-layer, but not Application-layer. That means users can get the same visibility as thelocal IP (for example, two PC in a N2N-network can ping each other successfully), and alsocan visit each other by the IP address of N2N virtual network without caring about thephysical network address that PC currently belongs to. We can say that OpenVPN implementsthe SSL by moving it from Application-layer to Network-layer, while N2N implementing P2Pby moving it from Application-layer to Network-layer.





32

Server IP: IP address of server. Port: Port of server side. Local IP: Local tunnel IP address. Group: Group name of the connection. Password: Group password of the connection.

Advance:

Subnet MAC: MAC address of interface. MTU: Maximum transmission unit. Debug: Turn on debugging information. N2N Version





33

4.4 Operations

4.4.1 WiFidog

Working Mode Selection: There are four modes to select --Portal: users who connect router’s Wi-Fi need to authenticate before being allowed

to use the network, and the authentication will go through the server.WeChat Portal: users who connect router’s Wi-Fi need to make a wechat-

authentication.Factory Router: if there is no need to authenticate when users connecting Wi-Fi,

please choose it.Local Portal: users who connect router’s Wi-Fi need to authenticate before being

allowed to use the network, and the authentication will be done by router itself. Gateway ID: It’s a identification that server identifies different routers via it. WEB Server name: It can be set as you want to. Extern Device: It’s the port that communicates with external devices. Please don’t

change it. Intern Device: It’s the port that connects internal devices.Please don’t change it. Wifidog Port: It’s the port used to communicate with server. Please don’t change it. Maximum Running Users: The number of available WiFi connections. Measuring Interval: The interval to check users info and devices state. User Testing Number Overtime: Determine the number of user timeouts. User Surfing Time: After passing the authentication, the time for users to use the

network. Authentication Server Address: Server address. Please don’t change it. Enable SSL: To decrypt the data by using SSL. Authentication Server Port: The port server used to authenticate. Please don’t change it. Authentication Path: The path of authentication files. Please don’t change it.





34

GPS Point to Push Ad: Push ads according to geography info. Upload the Browsing History Enable: Upload users’ browsing history.

4.4.2 Layer 7 Filtering

Filter some of user’s application, such as video, music, downloading, URL.

Rule Name: Name of filtering. Each rule name should be different. IP Range: The IP range of being restricted. Protocol Type: Choose a type to restrict. Direct: Choose the direction of data packet -- IN, OUT, IN/OUT. Policy: The policy to accept or drop the data which matches the rules.

4.4.3 Privoxy

Notice: Please don’t modify it without engineer’s help!





35

4.4.4 Station Update

ESSID: The identification of Wi-Fi. ESSID Password: Password of Wi-Fi. Server IP: The server IP that you want to connect to. Server Seg: The name of the update segment configured in server. Dev Dir: The local path for updating to router. User: The username assigned by server. User Password: The password of corresponding username. Scan Fre: The interval to scan the Wi-Fi.

4.4.5 Portal

Setup: Open this function. Ad Name: Name of advertisement.





36

Ad URL: URL of advertisement. Ad Push Freq: The interval of pushing advertisement.

4.5 Network Service

4.5.1 Oray

Notice: To use this function, you need a Oray account.

4.5.2 Flowctrl





37

Statistical Reset: Reset the statistical value. Flow Threshold Value: The maximum data can be used in a period. Period: It can be set to every day or every month to statistic data flow. Out Flow Manage: Options when flow over the agreed figure. Report Flow Data: Report the usage data to server. White List: The URL in the white list will not be restricted. This option is effective only

when “Out Flow Data” is set as “Close 3/4G Network”.

4.6 Equipment

4.6.1 Status Check

The status of router can be checked in this page -- System information, WAN status, LANstatus, Wi-Fi status, and VPN status. As picture showing:





38





39

4.6.2 Debug Message

Refresh(Reflash): The debug info will be shown after clicking this button. Clear: The debug info will be cleared up after clicking this button.

4.6.3 Local Upgrade





40

The position marked by red box: Whether to save the settings before upgrading newfirmware or not.

Image: The firmware you want to upgrade. Restore: Reset the router to default setting.Notice: After clicking the Submit, please don’t pull off the power of router! Router will restartautomatically if it upgrades successfully.

4.6.4 Wifimac

Refresh(Reflash): After clicking the button, frame data and signal strength will bedisplayed.

Clear: After clicking the button, the message will be cleared up.





41

4.6.5 Power Management

4.6.5.1 Power Management Enable

Current Time Calibration Time: The mode of time calibration -- Network, Manual. Manual Set-up: Manually set the current time. This option will be effective when

“Calibration Time” is set as “Manual”. Mode: This setting is enabled once every day. Power On: Boot time. Power Off: Off time.

Technical Support:If there is any doubt, please access our official website: www.caimore.net or contact

technical support staff and whose email address is [email protected].

http://www.caimore.net


Documents

UserManual - es.caimore.net Manual for CM520 … · 厦 门 才 茂 通 信 科 技 有 限 公 司 Xiamen Caimore Communication Technology Co.,Ltd Add:3F,1stBuilding,23#WanghaiRoad,Xiamen

UserManual - es.caimore.net Manual for CM520 … · 厦门才茂通信科技有限公司 Xiamen Caimore Communication Technology Co.,Ltd Add:3F,1stBuilding,23#WanghaiRoad,Xiamen