F-R100 User Manual - Industrial Router - FourFaith
F-R100 User Manual - Industrial Router - FourFaith
Copyright Notice
All contents in the files are protected by copyright law, and all copyrights are reserved by Xiamen
Four-Faith Communication Technology Co., Ltd. Without written permission, all commercial
use of the files from Four-Faith are forbidden, such as copy, distribute, reproduce the files, etc.,
but non-commercial purpose, downloaded or printed by individual (all files shall be not revised,
and the copyright and other proprietorship notice shall be reserved) are welcome.
Trademark Notice
Contents
Chapter 1 Brief Introduction of Product............................................................................................. 5
1.1 General............................................................................................................................... 5
1.2 Features and Benefits......................................................................................................... 6
1.3 Working Principle...............................................................................................................7
1.4 Specifications..................................................................................................................... 7
Chapter 2 Installation Introduction................................................................................................... 12
2.1 General............................................................................................................................. 12
2.2 Encasement List............................................................................................................... 12
2.3 Installation and Cable Connection................................................................................... 12
2.4 Power................................................................................................................................16
2.5 Indicator Lights Introduction........................................................................................... 16
2.6 Reset Button Introduction................................................................................................ 17
Chapter 3 Configuration and Management.......................................................................................18
3.1 Configuration Connection................................................................................................18
3.2 Access the Configuration Web Page................................................................................ 18
3.3 Management and configuration....................................................................................... 20
3.3.1 Setting.......................................................................................................................20
3.3.9.1 Basic Setting................................................................................................. 20
3.3.9.2 Dynamic DNS............................................................................................... 26
3.3.9.3 Clone MAC Address..................................................................................... 27
3.3.9.4 Advanced Router...........................................................................................27
3.3.9.5 VLANs.......................................................................................................... 28
3.3.9.6 Networking....................................................................................................29
3.3.2 Wireless.................................................................................................................... 32
3.3.2.1 Basic Settings................................................................................................32
3.3.2.2 Wireless Security...........................................................................................34
3.3.3 Services.................................................................................................................... 36
3.3.4.1 Services......................................................................................................... 36
3.3.4 VPN.......................................................................................................................... 39
3.3.6.1 PPTP..............................................................................................................39
3.3.6.2 L2TP..............................................................................................................40
3.3.6.3 OPENVPN.................................................................................................... 41
3.3.6.4 IPSEC............................................................................................................46
3.3.6.5 GRE...............................................................................................................48
3.3.5 Security.....................................................................................................................49
3.3.5.1 Firewall......................................................................................................... 49
3.3.6 Access Restrictions.................................................................................................. 52
3.3.6.1 WAN Access..................................................................................................52
3.3.6.2 URL Filter..................................................................................................... 54
3.3.6.3 Packet Filter.................................................................................................. 55
3.3.7 NAT.......................................................................................................................... 56
3.3.1.1 Port Forwarding............................................................................................ 56
F-R100 User Manual--Industrial Router
3.3.1.2 Port Range Forward...................................................................................... 57
3.3.1.3 DMZ..............................................................................................................57
3.3.8 QoS Setting.............................................................................................................. 58
3.3.8.1 Basic..............................................................................................................58
3.3.8.2 Classify..........................................................................................................59
3.3.9 Applications..............................................................................................................59
3.3.2.1 Serial Applications........................................................................................ 59
3.3.10 Administration........................................................................................................61
3.3.10.1 Management................................................................................................61
3.3.10.2 Keep Alive...................................................................................................63
3.3.10.3 Commands.................................................................................................. 64
3.3.10.4 Factory Defaults..........................................................................................64
3.3.10.5 Firmware Upgrade...................................................................................... 65
3.3.10.6 Backup.........................................................................................................65
3.3.11 Status...................................................................................................................... 66
3.3.11.1 Router.......................................................................................................... 66
3.3.11.2 WAN............................................................................................................68
3.3.11.3 LAN.............................................................................................................70
3.3.11.4 Wireless....................................................................................................... 73
3.3.11.5 Bandwidth................................................................................................... 74
3.3.11.6 Sys-Info....................................................................................................... 76
Appendix........................................................................................................................................... 79
F-R100 User Manual--Industrial Router
1.1 General
Four-Faith Industrial Router F-R100 is an intelligent 3G/4G Router to provide the necessary
M2M applications for all types of terminals.
It adopts high-powered industrial 32-bits CPU and embedded real time operating system. It
supports RS232 (or RS485/RS422), Ethernet and WIFI port that can conveniently and
transparently connect one device to a cellular network, allowing you to connect to your existing
serial, Ethernet and WIFI devices with only basic configuration.
It has been widely used on M2M fields, such as self-service terminal industry, intelligent
transportation, smart grid, smart home, industrial automation, intelligent building, public security,
fire protection, environment protection, telemetry, finance, POS, water supply, meteorology,
remote sensing, digital medical, military, space exploration, agriculture, forestry, petrochemical
and other fields etc..
F-R100 User Manual--Industrial Router
User interface
1.4 Specifications
Cellular Specification
F-R100-W WCDMA WIFI Router
UMTS/WCDMA/HSDPA/HSUPA HSDPA:7.2Mbps(DL) <24dBm <-109 dBm
850/1900/2100MHz,
850/900/1900/2100MHz(optional) HSUPA:5.76Mbps(UL)
GSM850/900/1800/1900MHz
GPRS/EDGE CLASS 12 UMTS:384Kbps (DL/UL)
F-R100-V CDMA2000 1X EVDO WIFI Router
CDMA2000 1X EVDO Rev A 3.1Mbps(DL),1.8Mbps(UL) <23dBm <-104 dBm
800MHz,800/1900MHz(optional)
450MHz (optional)
CDMA2000 1X RTT, IS-95 A/B
F-R100-TL LTE/TD-SCDMA WIFI Router
TDD-LTE TDD-LTE: <23dBm <-97 dBm
2600/1900/2300MHz(Band 38/39/40) 61Mbps(DL),18Mbps(UL)
F-R100 User Manual--Industrial Router
800/1400/1800MHz(Band 27/61/62)
(optional) TD-SCDMA:
TD-SCDMA 2010/1900MHz(A/F, Band 2.2Mbps(DL), 2.8Mbps(UL)
34/39)
GSM/GPRS/EDGE 900/1800/1900MHz
F-R100-FL LTE/WCDMA WIFI Router
FDD-LTE FDD-LTE: <23dBm <-93.3 dBm
2600/2100/1800/900/800MHz(Band1/3/ 100Mbps(DL), 50Mbps(UL)
7/8/20) HSUPA: 5.76Mbps(UL)
700/850/1700/1900/2100MHz (Band HSDPA: 7.2Mbps(DL)
2/4/5/13/17/25)(Optional) UMTS:
DC-HSPA+/HSPA+/HSDPA/HSUPA/W 384Kbps(DL), 384Kbps(UL)
CDMA/UMTS HSPA+:
2100/1900/900/850/800MHz(Band 42Mbps(DL),5.76Mbps(UL)
1/2/5/6/8)
EDGE/GPRS/GSM
850/900/1800/1900MHz
F-R100-L LTE WIFI Router
TDD-LTE FDD-LTE: <23dBm <-93.3 dBm
FDD-LTE 100Mbps(DL),50Mbps(UL)
EVDO TDD-LTE:
WCDMA 61Mbps(DL),18Mbps(UL)
TD-SCDMA CDMA2000 1X EVDO Rev A:
CDMA1X 3.1Mbps(DL),1.8Mbps(UL)
GPRS/EDGE WCDMA:
42Mbps(DL),5.76Mbps(UL)
TD-SCDMA:
4.2Mbps(DL),2.2Mbps(UL)
WIFI Specification
Item Content
Standard IEEE802.11b/g/n
Bandwidth IEEE802.11b/g: 54Mbps (max)
IEEE802.11n: 150Mbps (max)
Security WEP, WPA, WPA2, etc
WPS (optional)
TX power 20dBm(11n),24dBm(11g),26dBm(11b)
RX sensitivity <-72dBm@54Mpbs
Hardware System
Item Content
CPU Industrial 32bits CPU
FLASH 16MB(Extendable to 32MB)
F-R100 User Manual--Industrial Router
DDR2 128MB
Interface Type
Item Content
WAN 1 10/100 Mbps WAN port(RJ45,with LED), auto MDI/MDIX, 1.5KV
magnetic isolation protection
LAN 4 10/100 Mbps Ethernet ports(RJ45,with LED), auto MDI/MDIX, 1.5KV
magnetic isolation protection
Serial 1 RS232, RS485(RS422) port, 15KV ESD protection
Data bits: 5, 6, 7, 8
Stop bits: 1, 1.5(optional), 2
Parity: none, even, odd, space(optional), mark(optional)
Baud rate: 2400~115200 bps
Indicator "PWR", "SYS", "WIFI", "SIM", "Online","Signal Strength"
Input/Output (6) pin 3.5mm terminal block
(2) DI, (1) DO, (1) Relay
Input ON Voltage: 5 to 30 VDC
Input OFF Voltage: 0 to 3 VDC
Output < 50mA @ 30VDC
Relay:1A 250VAC/30VDC
Antenna Cellular:2 Standard SMA female interface, 50 ohm, lighting
protection(optional)
WIFI: 1 Standard SMA male interface, 50 ohm, lighting
protection(optional)
GPS:1 Standard SMA female interface, 50 ohm, lighting
protection(optional)
SIM/UIM Standard 3V/1.8V user card interface, 15KV ESD protection
Power 2PIN Terminal block reverse-voltage and over-voltage protection
Reset Restore the router to its original factory default settings
Front View
F-R100 User Manual--Industrial Router
Side View
Power Input
Item Content
Standard Power DC 12V/1.5A
Power Range DC 5~36V
Consumption
Working Consumption
condition
Schedule 2.57~4.2mA@12DVC
shutdown
F-R100-W WCDMA WIFI Router
Standby 272~295mA@12VDC
Communication 283~360mA@12VDC
F-R100-V CDMA2000 1X EVDO WIFI Router
Standby 268~293mA@12VDC
Communication 279~355mA@12VDC
F-R100-TL LTE/TD-SCDMA WIFI Router
Standby 281~328mA@12VDC
Communication 322~563mA@12VDC
F-R100-FL LTE/WCDMA WIFI Router
Standby 280~330mA@12VDC
Communication 325~562mA@12VDC
F-R100-L LTE WIFI Router
Standby 293~326mA@12VDC
Communication 310~554mA@12VDC
Physical Characteristics
Item Content
Housing Iron, providing IP30 protection
Dimensions 134.8x115.7x45 mm
Weight 520 g
F-R100 User Manual--Industrial Router
Environmental Limits
Item Content
Operating -35~+75ºC(-31~+167℉)
Temperature
Storage -40~+85ºC(-40~+185℉)
Temperature
Operating 95% (Non-condensing)
Humidity
F-R100 User Manual--Industrial Router
2.1 General
Stator and routing equipment of screw specification for: M3 * 5 mm countersunk head screws
(black)
Fixed Size
F-R100 User Manual--Industrial Router
Router Size
Step 2
F-R100 User Manual--Industrial Router
Step 3
Step 4
Step 5
Installation of antenna:
Screw the SMA male pin of the cellular antenna to the female SMA interface of the Router
with sign “ANT-1” and “ANT-2”.
Screw the SMA female pin of the WIFI antenna to the male SMA interface of the router with
sign “WIFI”.
F-R100 User Manual--Industrial Router
Warning: The cellular antenna and the WIFI antenna can not be connected wrongly. And the
antennas must be screwed tightly, or the signal quality of antenna will be influenced!
Installation of cable:
Insert one end of the network cable into the switch interface with sign“LAN1/LAN2/LAN3/
LAN4”, and insert the other end into the Ethernet interface of user’s device. The signal
connection of network direct cable is as follows:
RJ45-1 RJ45-2 Color
1 1 White/Orange
2 2 Orange
3 3 White/Green
4 4 Blue
5 5 White/Blue
6 6 Green
7 7 White/Brown
8 8 Brown
Insert the RJ45 end of the console cable into the RJ45 outlet with sign “console”, and insert
the DB9F end of the console cable into the RS232 serial interface of user’s device.
The signal connection of the console cable is as follows:
Console line definition (RS232)
RJ45 Color Signal DB9F Description Dir (Router
1 White/ A 8 RS485-A Input/Output
Orange
2 Orange B 6 RS485-B Input/Output
3 White/ RXD 2 Receive Data Output
Green
4 Blue DCD 1 Data Carrier Detect Output
5 White/ GND 5 System Ground
F-R100 User Manual--Industrial Router
Blue
6 Green TXD 3 Transmit Data Input
7 White/ DTR 4 Data Terminal Ready Input
Brown
8 Brown RTS 7 Request To Send Input
2.4 Power
The router provides following indicator lights: “Power”, “System”, “Online”, “SIM”, “LAN”,
“WAN”, “WIFI”, “Signal Strength”.
Indicator State
Introduction
Light
ON Router is powered on
PWR
OFF Router is powered off
BLINK System works properly
SYS
OFF System does not work
Online ON Router has logged on network
OFF Router hasn’t logged on network
SIM ON The SIM card has been identified
OFF The SIM card is not recognized
F-R100 User Manual--Industrial Router
OFF The corresponding interface of switch is not connected
LAN ON / The corresponding interface of switch is connected
BLINK /Communicating
OFF The interface of WAN is not connected
WAN ON /
The interface of WAN is connected /Communicating
BLINK
OFF WIFI is not active
WIFI
ON WIFI is active
One Light
Signal strength is weak
ON
Signal Two Lights
Signal strength is medium
Strength ON
Three
Signal strength is good
Lights ON
The router has a “Reset” button to restore it to its original factory default settings. When user
press the “Reset” button for up to 15s, the router will restore to its original factory default settings
and restart automatically.
Flank Interface as picture below,The router afford 2 Direct Input ,1 Direct Output and 1
Relay control
F-R100 User Manual--Industrial Router
Before configuration, you should connect the router and your configuration PC with the
supplied network cable. Plug the cable’s one end into the Local Network port of the router, and
another end into your configure PC’s Ethernet port. The connection diagram is as following:
Please modify the IP address of PC as the same network segment address of the router, for
instance, 192.168.1.9. Modify the mask code of PC as 255.255.255.0 and set the default gateway
of PC as the router’s IP address (192.168.1.1).
The chapter is to present main functions of each page. Users visit page tool via web browser
after connect users' PC to the Router. There are eleven main pages: Setting, Wireless, Service,
VPN, Security, Access Restrictions, NAT, QoS Setting, Applications, Management and Status.
Users enable to browse slave pages by click one main page..
Users can open IE or other explorers and enter the Router's default IP address of 192.168.1.1
on address bar, then press the bottom of Enter to visit page Web management tool of the Router.
The users login in the web page at the first name, there will display a page shows as blow to tip
users to modify the default user name and password of the Router. Users have to click "change
password" to make it work if they modify user name and password.
Users need to input user name and password if it is their first time to login.
F-R100 User Manual--Industrial Router
Input correct user name and password to visit relevant menu page. Default user name is admin,
password is admin. (available to modify user name and password on management page, then click
submit)
3.3.1 Setting
The Setup screen is the first screen users will see when accessing the Router. Most users will be
able to configure the Router and get it work properly using only the settings on this screen. Some
Internet Service Providers (ISPs) will require users to enter specific information, such as User
Name, Password, IP Address, Default Gateway Address, or DNS IP Address. These information
can be obtained from your ISP, if required.
Disabled
F-R100 User Manual--Industrial Router
Forbid the setting of WAN port connection type
Static IP
Automatic Configuration-DHCP
PPPOE
3G/UMTS/4G/LTE
F-R100 User Manual--Industrial Router
Connection type
Connection type: Auto, Force 3G, Force 2G, Prefer 3G, Prefer 2G options. If using 4G module,
there has 4G network option. Users select different mode depending on their need
DHCP-4G
Keep Online
This function is used to detect whether the Internet connection is active, if users set it and when
the Router detect the connection is inactive, it will redial to users' ISP immediately to make the
connection active. If the network is busy or the user is in private network, we recommend that
Router mode will be better.
Detection Method:
None: do not set this function
Ping: Send ping packet to detect the connection, when choose this method, users should also
configure "Detection Interval", "Primary Detection Server IP" and "Backup Detection
Server IP" items.
Route: Detect connection with route method, when choose this method, users should also
F-R100 User Manual--Industrial Router
configure "Detection Interval", "Primary Detection Server IP" and "Backup Detection
Server IP" items.
PPP: Detect connection with PPP method, when choose this method, users should also
configure "Detection Interval" item.
Force reconnect: this option schedules the pppoe or 3G reconnection by killing the pppd daemon
and restart it.
Time: needed time to reconnect
STP
STP (Spaning Tree Protocol) can be applied to loop network. Through certain algorithm achieves
path redundancy, and loop network cuts to tree-based network without loop in the meantime, thus
to avoid the hyperplasia and infinite circulation of a message in the loop network
Optional Settings
Time Settings
Select time zone of your location. To use local time, leave the checkmark in the box next to Use
local time.
Adjust Time
To adjust time by the system and refresh to get the time of the web, user can set to modify the
time of the system. They can change to adjust time by manual to achieve adjust time by the
system if the system fails to get NTP server
F-R100 User Manual--Industrial Router
Force Update Interval: unit is day, try forcing the update dynamic DNS to the server by setted
days
Status
Clone MAC address can clone three parts: Clone LAN MAC, Clone WAN MAC, Clone Wireless
MAC.
Noted that one MAC address is 48 characteristic, can not be set to the multicast address, the first
byte must be even. And MAC address value of network bridge br0 is determined by the smaller
value of wireless MAC address and LAN port MAC address.
If the Router is hosting users' Internet connection, select Gateway mode. If another Router exists
on their network, select Router mode.
Dynamic Routing
Dynamic Routing enables the Router to automatically adjust to physical changes in the network's
layout and exchange routing tables with other Routers. The Router determines the network
packets’ route based on the fewest number of hops between the source and destination.
To enable the Dynamic Routing feature for the WAN side, select WAN. To enable this feature for
the LAN and wireless side, select LAN&WLAN. To enable the feature for both the WAN and
LAN, select Both. To disable the Dynamic Routing feature for all data transmissions, keep the
default setting, Disable.
F-R100 User Manual--Industrial Router
Note:Dynamic Routing is not available in Gateway mode
Static Routing
3.3.9.5 VLANs
F-R100 User Manual--Industrial Router
VLANs function is to divide different VLAN ports by users' will. The system supports 15 VLAN
port from VLAN1-VLAN15. However there is only 5 time ports (1 WAN port and 4 LAN port)
divided by users themselves,and LAN port and WAN port disable to divide into one VLAN port
meanwhile.
3.3.9.6 Networking
Bridging-Create Bridge: creates a new empty network bridge for later use. STP means Spanning
Tree Protocol and with PRIO users are able to set the bridge priority order. The lowest number has
the highest priority.
F-R100 User Manual--Industrial Router
Bridging - Assign to Bridge: allows users to assign any valid interface to a network bridge.
Consider setting the Wireless Interface options to Bridged if they want to assign any Wireless
Interface here. Any system specific bridge setting can be overridden here in this field.
Current Bridging Table: shows current bridging table
Create bridge option: the first br0 means bridge name. STP means to on/off spanning tree
protocol. Prio means priority level of STP, the smaller the number, the higher the level. MTU
means maximum transfer unit, default is 1500, delete if it is not need. And then click 'Save' or
'Add'. Bride properties is as below:
Enter relewant bridge IP address and subnet mask, click 'Add' to create a bridge.
Note: Only create a bride can apply it.
Assign to Bridge option: to assign different ports to created bridge. For example: assign port
(wireless port) is ra0 in br1 bridge as below:
Prio means priority level: work if multiple ports are within the same bridge. The smaller the
number, the higher the level. Click 'Add' to take it effect.
Note: corresponding interface of WAN ports interface should not be binding, this bridge
function is basically used for LAN port, and should not be binding with WAN port
If bind success, bridge binding list in the list of current bridging table is as below:
F-R100 User Manual--Industrial Router
To make br1 bridge has the same function with DHCP assigned address, users need to set
multiple DHCP function, see the introduction of multi-channel DHCPD:
Port Setup: Set the port property, the default is not set
Choose not bridge to set the port's own properties, detailed properties are as below:
MTU: maximum transfer unit
Multicast forwarding: enable or disable multicast forwarding
Masquerade/NAT: enable or disable Masquerade/NAT
IP Address: set ra0's IP address, and do not conflict with other ports or bridge
Subnet Mask: set the port's subnet mask
F-R100 User Manual--Industrial Router
Multiple DHCPD: using multiple DHCP service. Click 'Add' in multiple DHCP server to appear
relevant configuration. The first means the name of port or bridge (do not be configured as
eth0), the second means whether to on DHCP. Start means start address, Max means
maximum assigned DHCP clients, Leasetime means the client lease time, the unit is
second, click 'Save' or 'Apply' to put it into effect after setting.
Note: Only configure and click 'Save' can configure the next, can not configure multiple DHCP at
the same time.
3.3.2 Wireless
Virtual Interfaces:Click Add to add a virtual interface. Add successfully, click on the remove,
you can remove the virtual interface。
F-R100 User Manual--Industrial Router
AP Isolation:This setting isolates wireless clients so access to and from other wireless clients are
stopped.
Note : Save your changes, after changing the "Wireless Mode", "Wireless Network Mode",
"wireless width", "broadband" option, please click on this button, and then configure the other
options.
WEP:Is a basic encryption algorithm is less secure than WPA.Use of WEP is discouraged due to
security weaknesses, and one of the WPA modes should be used whenever possible. Only use
WEP if you have clients that can only support WEP (usually older, 802.11b-only clients).
Authentication Type:Open or shared key。
Default Transmit Key:Select the key form Key 1 - Key 4 key.
Encryption:There are two levels of WEP encryption, 64-bit (40-bit) and 128-bit. To utilize WEP,
select the desired encryption bit, and enter a passphrase or up to four WEP key in hexadecimal
format. If you are using 64-bit (40-bit), then each key must consist of exactly 10 hexadecimal
characters or 5 ASCII charceters. For 128-bit, each key must consist of exactly 26 hexadecimal
F-R100 User Manual--Industrial Router
characters. Valid hexadecimal characters are "0"-"9" and "A"-"F".
ASCII/HEX: ASCII, the keys is 5 bit ASCII characters/13bit ASCII characters.
HEX, the keys is 10bit/26 bit hex digits.
Passphrase:The letters and numbers used to generate a key.
Key1-Key4:Manually fill out or generated according to input the pass phrase.
3.3.3 Services
3.3.4.1 Services
DHCP Server
DHCPd assigns IP addresses to users local devices. While the main configuration is on the setup
page users can program some nifty special functions here.
Use NVRAM for client lease DB: users can store data to the system NVRAM area is enabled
Used domain: users can select here which domain the DHCP clients should get as their local
domain. This can be the WAN domain set on the Setup screen or the LAN domain which can be
set here.
LAN Domain: users can define here their local LAN domain which is used as local domain for
DNSmasq and DHCP service if chose above.
Static Leases: if users want to assign certain hosts a specific address then they can define them
here. This is also the way to add hosts with a fixed address to the Router's local DNS service
(DNSmasq).
Additional DHCPd Options: some extra options users can set by entering them
DNSMasq
DNSmasq is a local DNS server. It will resolve all host names known to the Router from dhcp
(dynamic and static) as well as forwarding and caching DNS entries from remote DNS servers.
Local DNS enables DHCP clients on the LAN to resolve static and dynamic DHCP hostnames.
F-R100 User Manual--Industrial Router
Local DNS: enables DHCP clients on the LAN to resolve static and dynamic DHCP hostnames
No DNS Rebind: when enabled, it can prevent an external attacker to access the Router's internal
Web interface. It is a security measure
Additional DNSMasq Options: some extra options users can set by entering them in Additional
DNS Options.
For example:
static allocation: dhcp-host=AB:CD:EF:11:22:33,192.168.0.10,myhost,myhost.domain,12h
max lease number: dhcp-lease-max=2
DHCP server IP range: dhcp-range=192.168.0.110,192.168.0.111,12h
SNMP
SSHD
Enabling SSHd allows users to access the Linux OS of their Router with an SSH client
F-R100 User Manual--Industrial Router
System log
Enable Syslogd to capture system messages. By default they will be collected in the local file
/var/log/messages. To send them to another system, enter the IP address of a remote syslog server.
Telnet
Telnet: enable a telnet server to connect to the Router with telnet. The username is admin and the
password is the Router's password.
Note: If users use the Router in an untrusted environment (for example as a public hotspot), it is
strongly recommended to use SSHd and deactivate telnet.
3.3.4 VPN
3.3.6.1 PPTP
PPTP Server
PPTP Client
F-R100 User Manual--Industrial Router
3.3.6.2 L2TP
L2TP Server
Force MPPE Encryption: enable or disable force MPPE encryption of L2TP data
Server IP: input IP address of the Router as PPTP server, differ from LAN address
Client IP(s): IP address assigns to the client, the format is xxx.xxx.xxx.xxx-xxx.xxx.xxx.xxx
CHAP Secrets: user name and password of the client using L2TP service
Note: client IP must be different with IP assigned by Router DHCP.
The format of CHAP Secrets is user * password *.
F-R100 User Manual--Industrial Router
L2TP Client
3.3.6.3 OPENVPN
OPENVPN Server
Use LZO Compression: enable or disable use LZO compression for data transfer
Redirect default Gateway: enable or disable redirect default gateway
Allow Client to Client: enable or disable allow client to client
Allow duplicate cn: enable or disable allow duplicate cn
TUN MTU Setting: set the value of TUN MTU
TCP MSS: MSS of TCP data
TLS Cipher: TLS (Transport Layer Security) encryption standard supports AES-128 SHA and
AES-256 SHA
Client connect script: define some client script by user self
CA Cert: CA certificate
OPENVPN Client
Use LZO Compression: enable or disable use LZO compression for data transfer
NAT: enable or disable NAT through function
Bridge TAP to br0: enable or disable bridge TAP to br0
Local IP Address: set IP address of local OPENVPN client
TUN MTU Setting: set MTU value of the tunnel
TCP MSS: mss of TCP data
TLS Cipher: TLS (Transport Layer Security) encryption standard supports AES-128 SHA and
AES-256 SHA
TLS Auth Key: authority key of Transport Layer Security
Additional Config: additional configurations of OPENVPN server
Policy based Routing: input some defined routing policy
CA Cert: CA certificate
Public Client Cert: client certificate
Private Client Key: client key
F-R100 User Manual--Industrial Router
3.3.6.4 IPSEC
Enable DPD Detection: enable or disable this function, tick means enable
Time Interval: set time interval of connect detection (DPD)
Timeout: set the timeout of connect detection
Action: set the action of connect detection
Advanced Settings: this part contains relevant setting of IKE, ESP, negotiation mode, etc.
Enable Advanced Settings: enable to configure 1st and 2nd phase information, otherwise it
will automic negotiation according to opposite end
IKE Encryption: IKE phased encryption mode
IKE Integrity: IKE phased integrity solution
IKE Grouptype: DH exchange algorithm
IKE Lifetime: set IKE lifetime, current unit is hour, the default is 0
ESP Encryption: ESP encryption type
ESP Integrity: ESP integrity solution
F-R100 User Manual--Industrial Router
ESP Keylife: set ESP keylife, current unit is hour, the default is 0
IKE aggressive mode allowed: negotiation mode adopt aggressive mode if tick; it is main
mode if non-tick
Negotiate payload compression: Tick to enable PFS, non-tick to diable PFS
Authentication: choose use share encryption option or certificate authentication option. Current is
only to choose use share encryption option.
3.3.6.5 GRE
GRE (Generic Routing Encapsulation, Generic Routing Encapsulation) protocol is a network
layer protocol (such as IP and IPX) data packets are encapsulated, so these encapsulated data
packets to another network layer protocol (IP)transmission. GRE Tunnel (tunnel) technology,
Layer Two Tunneling Protocol VPN (Virtual Private Network).
3.3.5 Security
3.3.5.1 Firewall
You can enable or disable the firewall, filter specific Internet data types,and prevent
anonymous Internet requests,ultimately enhance network security.
Firewall Protection
Firewall enhance network security and use SPI to check the packets into the network.To use
firewall protection, choose to enable otherwise disabled. Only enable the SPI firewall, you can use
other firewall functions: filtering proxy, block WAN requests, etc.
Additional Filters
Filter Proxy: Wan proxy server may reduce the security of the gateway, Filtering Proxy will
refuse any access to any wan proxy server. Click the check box to enable the function otherwise
disabled.
Filter Cookies: Cookies are the website of data the data stored on your computer.When you
F-R100 User Manual--Industrial Router
interact with the site ,the cookies will be used. Click the check box to enable the function
otherwise disabled.
Filter Java Applets: If refuse to Java, you may not be able to open web pages using the Java
programming.. Click the check box to enable the function otherwise disabled.
Filter ActiveX: If refuse to ActiveX, you may not be able to open web pages using the ActiveX
programming. Click the check box to enable the function otherwise disabled.
Prevent WAN Request
Block Anonymous WAN Requests (ping): By selecting “Block Anonymous WAN Requests
(ping)” box to enable this feature, you can prevent your network from the Ping or detection of
other Internet users. so that make More difficult to break into your network. The default state of
this feature is enabled ,choose to disable allow anonymous Internet requests.
Filter IDENT (Port 113): Enable this feature can prevent port 113 from being scaned from
outside. Click the check box to enable the function otherwise disabled.
Block WAN SNMP access: This feature prevents the SNMP connection requests from the WAN.
After Complete the changes, click the Save Settings button to save your changes. Click the
Cancel Changes button to cancel unsaved changes.
Impede WAN DoS/Bruteforce
Limit ssh Access: This feature limits the access request from the WAN by ssh, and per minute up
to accept two connection requests on the same IP. Any new access request will be automatically
dropped.
Limit Telnet Access: This feature limits the access request from the WAN by Telnet, and per
minute up to accept two connection requests on the same IP. Any new access request will be
automatically dropped.
Limit PPTP Server Access: When build a PPTP Server in the Router,this feature limits the access
request from the WAN by ssh, and per minute up to accept two connection requests on the same
IP . Any new access request will be automatically dropped.
Limit L2TP Server Access: When build a L2TP Server in the Router, this feature limits the
access request from the WAN by ssh, and per minute up to accept two connection requests on the
same IP. Any new access request will be automatically dropped.
Log Management
The Router can keep logs of all incoming or outgoing traffic for your Internet connection.
F-R100 User Manual--Industrial Router
Log: To keep activity logs, select Enable. To stop logging, select Disable. When select enable, the
following page will appear.
Log Level: Set this to the required log level. Set Log Level higher to log more actions.
Options: When select Enable, the corresponding connection will be recorded in the journal, the
disabled are not recorded.
Incoming Log: To see a temporary log of the Router's most recent incoming traffic, click the
Incoming Log button.
Outgoing Log: To see a temporary log of the Router's most recent outgoing traffic, click the
Outgoing Log button.
Click the Save Settings button to save your changes. Click the Cancel Changes button to cancel
unsaved changes.
F-R100 User Manual--Industrial Router
Two options in the default policy rules: "Filter" and "reject". If select "Deny”, you will
deny specific computers to access any Internet service at a particular time period. If you choose to
"filter",It will block specific computers to access the specific sites at a specific time period. You
can set up 10 Internet access policies filtering specific PCs access Internet services at a particular
time period.
Access Policy: You may define up to 10 access policies. Click Delete to delete a policy or
Summary to see a summary of the policy.
Status: Enable or disable a policy.
Policy Name: You may assign a name to your policy.
PCs: The part is used to edit client list, the strategy is only effective for the PC in the list.
Days: Choose the day of the week you would like your policy to be applied.
Times: Enter the time of the day you would like your policy to be applied.
F-R100 User Manual--Industrial Router
Website Blocking by URL Address: You can block access to certain websites by entering their
URL.
Website Blocking by Keyword: You can block access to certain website by the keywords
contained in their webpage
If you want to prevent certain client access to specific network domain name, such as
www.sina.com. We can achieved it through the function of URL filter.
Discard packets conform to the following rules: only discard the matching URL address
in the list .
Accept only the data packets conform to the following rules: receive only with custom
rules of network address, discarded all other URL address.
Direction
input: packet from WAN to LAN
output: packet from LAN to WAN
Note: "Source Port" ,"Destination Port" ,"Source IP" ,"Destination IP" could not be all empty ,you
have to input at least one of these four parameters.
3.3.7 NAT
3.3.1.3 DMZ
The DMZ (DeMilitarized Zone) hosting feature allows one local user to be exposed to the
Internet for use of a special-purpose service such as Internet gaming or videoconferencing. DMZ
hosting forwards all the ports at the same time to one PC. The Port Forwarding feature is more
secure because it only opens the ports you want to have opened, while DMZ hosting opens all the
ports of one computer, exposing the computer so the Internet can see it.
F-R100 User Manual--Industrial Router
Any PC whose port is being forwarded must should have a new static IP address assigned to
it because its IP address may change when using the DHCP function.
DMZ Host IP Address: To expose one PC to the Internet, select Enable and enter the computer's
IP address in the DMZ Host IP Address field. To disable the DMZ, keep the default setting :
Disable
Check all values and click Save Settings to save your settings. Click the Cancel changes
button to cancel your unsaved changes.
3.3.8.1 Basic
Bandwidth management prioritizes the traffic on your Router. Interactive traffic (telephony,
browsing, telnet, etc.) gets priority and bulk traffic (file transfer, P2P) gets low priority. The main
goal is to allow both types to live side-by side without unimportant traffic disturbing more critical
things. All of this is more or less automatic.
QoS allows control of the bandwidth allocation to different services, netmasks, MAC
addresses and the four LAN ports.
Uplink (kbps):In order to use bandwidth management (QoS) you must enter bandwidth values
F-R100 User Manual--Industrial Router
for your uplink. These are generally 80% to 90% of your maximum bandwidth.
Downlink (kbps):In order to use bandwidth management (QoS) you must enter bandwidth values
for your downlink. These are generally 80% to 90% of your maximum bandwidth.
3.3.8.2 Classify
Netmask Priority
You may specify priority for all traffic from a given IP address or IP Range.
Check all values and click Save Settings to save your settings. Click the Cancel changes button
to cancel your unsaved changes.
3.3.9 Applications
Baudrate: Baud rate indicates the number of bytes per second transported
by device, commonly used baud rate is115200, 57600, 38400, 19200.
Databit: the data bits can be 4, 5, 6, 7, 8, constitute a character. The ASCII code is usually
used. Starting from the most significant bit is transmitted,.
Stopbit: it marks the end of a character data. It is a high level of 1, 1.5, 2.
Parity: use a set of data to check the data error .
Flow control: including the hardware part and software part in two ways.
Enable Serial TCP Function: Enable the serial to TCP function
Protocol Type: The protocol type to transmit data.
UDP(DTU) – Data transmit with UDP protocol , work as a Four-Faith IP
MODEM device which has application protocol and hear beat mechanism.
Pure UDP – Data transmit with standard UDP protocol.
TCP(DTU) -- Data transmit with TCP protocol , work as a Four-Faith P
MODEM device which has application protocol and hear beat mechanism.
Pure TCP -- Data transmit with standard TCP protocol, Router is the client.
TCP Server -- Data transmit with standard TCP protocol, Router is the
server.
TCST -- Data transmit with TCP protocol, Using a custom data
Server Address: The data service center’s IP Address or domain name.
Server Port: The data service center’s listening port.
Device ID: The Router’s identity ID.
Device Number: The Router’s phone number.
Heartbeat Interval: The time interval to send heart beat packet. This item is valid only
when you choose UDP(DTU) or TCP(DTU) protocol type.
TCP Server Listen Port: This item is valid when Protocol Type is “TCP Server”
Custom Heartbeat Packet : This item is valid when Protocol Type is “TCST”
F-R100 User Manual--Industrial Router
Custom Registration Packets: This item is valid when Protocol Type is “TCST”
3.3.10 Administration
3.3.10.1 Management
The Management screen allows you to change the Router's settings. On this page you will find
most of the configurable items of the Router code.
The new password must not exceed 32 characters in length and must not include any spaces.
Enter the new password a second time to confirm it.
Note:
Default username is admin.
It is strongly recommended that you change the factory default password of the Router,
which is admin. All users who try to access the Router's web-based utility or Setup Wizard
will be prompted for the Router's password.
Web Access
This feature allows you to manage the Router using either HTTP protocol or the HTTPS protocol.
If you choose to disable this feature, a manual reboot will be required.You can also activate or not
the Router information web page. It's now possible to password protect this page (same username
and password than above).
Protocol:This feature allows you to manage the Router using either HTTP protocol or the HTTPS
protocol
Auto-Refresh:Adjusts the Web GUI automatic refresh interval. 0 disables this feature completely
Enable Info Site:Enable or disable the login system information page
Info Site Password Protection:Enable or disable the password protection feature of the system
information page
F-R100 User Manual--Industrial Router
Remote Access: This feature allows you to manage the Router from a remote location, via the
Internet. To disable this feature, keep the default setting, Disable. To enable this feature, select
Enable, and use the specified port (default is 8080) on your PC to remotely manage the Router.
You must also change the Router's default password to one of your own, if you haven't already.
To remotely manage the Router, enter http://xxx.xxx.xxx.xxx:8080 (the x's represent the Router's
Internet IP address, and 8080 represents the specified port) in your web browser's address field.
You will be asked for the Router's password.
If you use https you need to specify the url as https://xxx.xxx.xxx.xxx:8080 (not all firmwares
does support this without rebuilding with SSL support).
SSH Management:You can also enable SSH to remotely access the Router by Secure Shell. Note
that SSH daemon needs to be enable in Services page.
Note:
If the Remote Router Access feature is enabled, anyone who knows the Router's Internet IP
address and password will be able to alter the Router's settings.
Telnet Management:Enable or disable remote Telnet function
Cron : The cron subsystem schedules execution of Linux commands. You'll need to use the
command line or startup scripts to actually use this.
Language:Set up the Router page shows the type of language, including simplified Chinese and
English.
F-R100 User Manual--Industrial Router
Remote Upgrade: custom-developed remote management server for this station Router
monitoring and management, configuration parameters, WIFI advertising updates.
Schedule Boot&Shutdown
Schedule Reboot
F-R100 User Manual--Industrial Router
3.3.10.3 Commands
Commands:You are able to run command lines directly via the Webinterface.
Run Command:You can run command lines via the web interface. Fill the text area with your
command and click Run Commands to submit.
Startup:You can save some command lines to be executed at startup's Router. Fill the text area
with commands (only one command by row) and click Save Startup.
Shutdown:You can save some command lines to be executed at shutdown's Router. Fill the text
area with commands (only one command by row) and click Save Shutdown.
Firewall:Each time the firewall is started, it can run some custom iptables instructions. Fill the
text area with firewall's instructions (only one command by row) and click Save Firewall.
Custom Script : Custom script is stored in /tmp/custom.sh file. You can run it manually or use
cron to call it. Fill the text area with script's instructions (only one command by row) and click
Save Custom Script.
Reset Router settings:Click the Yes button to reset all configuration settings to their default
values. Then click the Apply Settings button.
Note:
Any settings you have saved will be lost when the default settings are restored. After
restoring the Router is accessible under the default IP address 192.168.1.1 and the default
password admin.
Firmware Upgrade:New firmware versions are posted at www..com and can be downloaded. If
the Router is not experiencing difficulties, then there is no need to download a more recent
firmware version, unless that version has a new feature that you want to use.
Note:
When you upgrade the Router's firmware, you lose its configuration settings, so make sure
you write down the Router settings before you upgrade its firmware.
To upgrade the Router's firmware:
1. Download the firmware upgrade file from the website.
2. Click the Browse... button and chose the firmware upgrade file.
3. Click the Upgrade button and wait until the upgrade is finished.
Note:
Upgrading firmware may take a few minutes.
Do not turn off the power or press the reset button!
After flashing, reset to:If you want to reset the Router to the default settings for the firmware
version you are upgrading to, click the Firmware Defaults option.
3.3.10.6 Backup
F-R100 User Manual--Industrial Router
Backup Settings:You may backup your current configuration in case you need to reset the Router
back to its factory default settings.Click the Backup button to backup your current configuration.
Restore Settings: Click the Browse... button to browse for a configuration file that is currently
saved on your PC.Click the Restore button to overwrite all current configurations with the ones in
the configuration file.
Note:
Only restore configurations with files backed up using the same firmware and the same
model of Router.
3.3.11 Status
3.3.11.1 Router
Total Available: the room for total available of RAM (that is physical memory minus some
reserve and the kernel of binary code bytes)
Free: free memory, the Router will reboot if the memory is less than 500kB
Used: used memory, total available memory minus free memory
Buffers: used memory for buffers,
Cached: the memory used by high-speed cache memory
Active: active use of buffer or cache memory page file size
Inactive: not often used in a buffer or cache memory page file size
3.3.11.2 WAN
Connection Type: disabled, static IP, automatic configuration-DHCP, PPPOE, PPTP, L2TP,
3G/UMTS
Connection Uptime: connecting uptime; If disconnect, display Not available
F-R100 User Manual--Industrial Router
IP Address: IP address of Router WAN
Subnet Mask: subnet mask of Router WAN
Gateway: the gateway of Router WAN
DNS1, DNS2, DNS3: DNS1/DNS2/DNS3 of Router WAN
Total Flow: flow from power-off last time until now statistics, download and upload direction
Monthly Flow: the flow of a month, unit is MB
Last Month: the flow of last month
Next Month: the flow of next month
3.3.11.3 LAN
F-R100 User Manual--Industrial Router
3.3.11.4 Wireless
3.3.11.5 Bandwidth
F-R100 User Manual--Industrial Router
3.3.11.6 Sys-Info
Total Available: the room for total available of RAM (that is physical memory minus some
reserve and the kernel of binary code bytes)
Free: free memory, the Router will reboot if the memory is less than 500kB
Used: used memory, total available memory minus free memory
Buffers: used memory for buffers, total available memory minus allocated memory
Cached: the memory used by high-speed cache memory
Active: Active use of buffer or cache memory page file size
Inactive: Not often used in a buffer or cache memory page file size
Appendix
3. Choose the correct COM port which connects to modem, choose “OK”
Note:If the user is using the win7 system, you can download a win7 super terminal on the
internet. Universal serial interface or other similar software.