User Guide for Beijer ELECTRONICS models including: MAEN327, 2024-05-29, MAEN327 Cloud VPN Router, MAEN327, Cloud VPN Router, VPN Router, Router

CloudVPN Router

CloudVPN Router

29 mag 2024 — The information in this document is subject to change without notice and is provided as availa- ble at the time of publishing.

PDF

CloudVPN Router Ethernet WiFi LTE


File Info : application/pdf, 21 Pages, 397.08KB

CloudVPN Installation MAEN327 2024-05-29
CloudVPN Router
User Guide
MAEN327 2024-05-29

Foreword
The CloudVPN Routers are developed to satisfy the demands of remote access of systems. Built-in functions such as VPN connectivity, cloud based VNC and much more. TheCloudVPNRouter is easy to setup and use and provides a secure connection to your machines.
Copyright © 2024 Beijer Electronics AB. All rights reserved.
The information in this document is subject to change without notice and is provided as available at the time of publishing. Beijer Electronics AB, including all its group companies, reserves the right to change any information without updating this publication. Beijer Electronics AB, including all its group companies, assumes no responsibility for any errors that may appear in this document. Read the entire document prior to installing and using this equipment. Only qualified personnel may install, operate or repair this equipment. Beijer Electronics AB, including all its group companies, are not responsible for modified, altered or renovated equipment. Because the equipment has a wide range of applications, users must acquire the appropriate knowledge to use the equipment properly in their specific applications. Persons responsible for the application and the equipment must themselves ensure that each application is in compliance with all relevant requirements, standards and legislation in respect to configuration and safety. Only parts and accessories manufactured according to specifications set by Beijer Electronics AB, including all its group companies, may be used.
BEIJER ELECTRONICS AB, INCLUDING ALL ITS GROUP COMPANIES, SHALL NOT BE LIABLE TO ANYONE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES RESULTING FROM THE INSTALLATION, USE OR REPAIR OF THIS EQUIPMENT, WHETHER ARISING IN TORT, CONTRACT, OR OTHERWISE. BUYER'S SOLE REMEDY SHALL BE THE REPAIR, REPLACEMENT, OR REFUND OF PURCHASE PRICE, AND THE CHOICE OF THE APPLICABLE REMEDY SHALL BE AT THE SOLE DISCRETION OF BEIJER ELECTRONICS AB, INCLUDING ALL ITS GROUP COMPANIES.

Table of Contents
1. Introduction ............................................................................................... 5 1.1. Technical Support ................................................................................ 5
2. Product Overview ........................................................................................ 6 2.1. Product Family .................................................................................... 6 2.2. What's in the Box? ................................................................................ 6 2.3. Hardware Overview .............................................................................. 6 2.4. Label ............................................................................................... 7 2.5. Specifications ..................................................................................... 8 2.5.1. LTE Additional Specifications .......................................................... 9 2.6. Dimensions ........................................................................................ 9
3. Installation ................................................................................................ 11 3.1. Installing and Removing From DIN Rail ....................................................... 11 3.2. Installing a SIM Card ............................................................................ 12 3.3. Power Supply ..................................................................................... 12 3.4. Wiring ............................................................................................. 13 3.5. Digital Input ...................................................................................... 13 3.6. Shield .............................................................................................. 13
4. Operation ................................................................................................. 14 4.1. Configure the CloudVPN Router ............................................................... 14 4.2. LED Status Indicators ........................................................................... 14 4.2.1. Signal LED ............................................................................... 14 4.2.2. Activity LED ............................................................................. 15 4.2.3. Reset To Factory Default Settings .................................................... 15
5. Connectivity Requirements (for local IT) .......................................................... 16 5.1. Overview .......................................................................................... 16 5.2. Servers and DNS Requests ...................................................................... 16 5.3. MAC or IP Address Filter ........................................................................ 16
6. Compliance ............................................................................................... 17 6.1. Applicable European Directives ............................................................... 17 6.2. Applicable Safety Standards ................................................................... 17 6.3. FCC Compliance ................................................................................. 18 6.3.1. Additional Information for Variants With Wireless Capabilities ................. 19 6.4. Certifications .................................................................................... 19

Beijer Electronics, MAEN327

3

2024-05

4

Introduction
1. Introduction
Thank you for purchasing the CloudVPN Router. The CloudVPN Router is the standard and most supported hardware for Beijer Electronics's acirro+ remote access. The CloudVPN Router makes it convenient to remotely connect to your equipment, while the built-in firewall keeps your equipment safe from outside threats. Configuration is as easy as inserting a USB flash drive, which contains your configuration file, into the CloudVPN Router's USB port. The configuration file can be generated from the [Tools] page on the acirro+ remote access.
1.1. Technical Support
If you for any reason need technical assistance, please have a look at our easy-to-read and exhaustive online support articles and guides. Our technical support (<(support.global@beijerelectronics.com>) is available from 8:00 to 17:00 Central European Time, Monday through Friday, and will answer your questions as soon as possible. If you have a comment, question, or suggestion about any of our products, services, or manuals, do not hesitate to let us know.

Beijer Electronics, MAEN327

5

2024-05

Product Overview

2. Product Overview

Seamlessly integrated with the acirro+ remote access, the CloudVPN Router is the fastest and safest way to connect your machine to the cloud.

2.1. Product Family
The CloudVPN Router is available in several variations. No matter your situation, you can always connect your machine to the cloud.

Article no. 600-0001 600-0002 600-0003 600-0004

Ethernet X X X X

3G (Global) X x

LTE (Global)

WiFi

X

x

X

NOTE
The 3G, 4G, and Wi-Fi models require antennas, purchased separately. SIM cards for the 3G, 4G models can be purchased through a telecom provider.
2.2. What's in the Box?
The following list describes the contents of the package: · CloudVPN Router · Female 4-pin plug-in connector with screw connection. (model: Weidmuller BL 5.08/04/180 SN BK
BX or equivalent)
2.3. Hardware Overview
The CloudVPN Router is created with performance and a multitude of hardware capabilities in mind.

2024-05

6

Beijer Electronics, MAEN327

Product Overview

4G SMA CONNECTORS
CloudVPN Router 4G variants have 2 SMA antenna connectors. The one closest to the power connector is the MAIN. The other connector is the DIV. Always connect an antenna to the MAIN. Connecting an antenna to the DIV is optional.
4G & WI-FI SMA CONNECTORS
The 4G & Wi-Fi variant has 2 SMA antenna connectors. The one closest to the power connector is for 4G. The other connector is for Wi-Fi.
2.4. Label
The label can be found on the left side of the CloudVPN Router.

Beijer Electronics, MAEN327

7

2024-05

Product Overview

2.5. Specifications
The specifications below are applicable for all CloudVPN routers. The LTE and Wi-Fi variants each have additional specifications, listed separately.

Specification

Power supply (recommended)

12-24 VDC +/- 20% LPS 2A

Power consumption

10 W max, about 2.5-5W* idle

Operating temperature

-20 °C to + 65 °C

Relative humidity

10 to 95 % non-condensing

Operating altitude

Up to maximum 2,000 m

Storage temperature

-20 °C to + 65 °C

Storage humidity

10 to 95 % non-condensing

Storage altitude

Up to maximum 3,000 m

Ethernet ports

Five 1 Gbps (4x LAN, 1x WAN)

USB

USB 2.0

Processor

MIPS 800 MHz

Digital Input

Yes

Degree of protection

IP20

Mounting

DIN rail

Size

95 x 116 x 28 mm (excl. DIN rail clip)

Weight

270-310 gram

Certifications

CE, cULus Listing, FCC Verification, REACH

Warranty

2 years

* Variant dependent: Ethernet only (2.5W), other variants (5W).

2024-05

8

Beijer Electronics, MAEN327

Product Overview

2.5.1. LTE Additional Specifications

Specification 4G-G protocols and frequencies (Global)
Speed
SIM size FCC ID (4G-A only) FCC ID (4G-A only) WI-FI IEEE 802.11 version WI-FI modes Speed FCC ID

FDD-LTE- B1, B2, B3, B4, B5, B7, B8, B12, B13, B18, B19, B20, B25, B26, B28 TDD-LTE - B38, B39, B40, B41WCDMA - B1, B2, B4, B5, B6, B8, B19 GSM/GPRS/EDGE - 850, 900, 1800, 1900 MHz LTE-FDD - Max. 100 Mbps (DL) / Max. 50 Mbps (UL) LTE-TDD - Max. 61 Mbps (DL) / Max. 18 Mbps (UL) DC-HSPA+ - Max. 42 Mbps (DL) / Max. 5.76 Mbps (UL) TD-SCDMA - Max. 4.2 Mbps (DL) / Max. 2.2 Mbps (UL) WCDMA - Max. 384 Kbps (DL) / Max. 384 Kbps (UL) EDGE - Max. 236.8 Kbps (DL)/ Max. 236.8 Kbps (UL) GPRS - Max. 85.6 Kbps (DL)/ Max. 85.6 Kbps (UL) CSD - 14.4 Kbps Standard SIM card (size 2FF) XMR201903EG25G XMR201605EC25A b/g/n Station (Client) Mode and Access Point 72 Mbps XPYLILYW1

2.6. Dimensions
The CloudVPN Router is designed to be easily installed on a standard DIN rail. The small size of the CloudVPN Router allows you to make efficient use of space. (Unit of measurement: millimeter.)

Beijer Electronics, MAEN327

9

2024-05

Product Overview

2024-05

10

Beijer Electronics, MAEN327

3. Installation

Installation

INSTALL IN AN ENCLOSURE
These devices are open-type and are meant to be installed in an enclosure which is only accessible with the use ofa tool and suitable for the environment.
When designing the layout of your system, always separate the devices that generate high voltage and high electrical noise from the low-voltage, logic-type devices such as the CloudVPN Router.
Also consider the heat-generating devices and locate the electronic-type devices in the cooler areas of your cabinet. Reducing the exposure to a high-temperature environment will extend the operating life of the CloudVPN Router.
Consider also the routing of the wiring for the devices in the panel. Avoid placing low-voltage signal wires and communications cables in the same tray with AC power wiring and high-energy, rapidly-switched DC wiring.
The CloudVPN Router is designed to be cooled using natural convection. For proper cooling, you must provide a clearance of at least 25 mm above and below the device. Also, allow at least 25 mm of depth between the front of the device and the inside of the enclosure.
Because Beijer Electronics's CloudVPN Router is essentially a small computer, the CloudVPN Router can be used for many different purposes. You can, for example, access, program and control industrial machines around the globe. Do not use
the CloudVPN Router unless you've received proper training or have proper knowledge about the CloudVPN Router and its capabilities. It is expected that the user is knowledgeable about networking settings and is aware of the potential consequences on i.e. security.
3.1. Installing and Removing From DIN Rail
The CloudVPN Router can be easily installed on a standard DIN rail.
(1) Hang the device on the rail and (2) push the unit down until you feel a click.
To remove the unit, (A) pull/rotate the device up and (B) lift off the rail.

Beijer Electronics, MAEN327

11

2024-05

Installation

3.2. Installing a SIM Card
The SIM card slot suits a standard SIM card (size 2FF).
To insert, push the SIM card into the slot until you feel a click. This is approximately 1 mm inside the device. Release the card and the card will stay in the device. The end of the SIM card should be aligned with the outside of the enclosure.
To remove, push the SIM card firmly into the slot until you hear a click. Releasing will cause the SIM card to partially eject, allowing you to easily take out the card.
3.3. Power Supply
The CloudVPN Router must be powered by an IEC/UL/EN/60950-1 certified Limited Power Supply (LPS) or for the United States a Class 2 power supply. The LPS power supply is not included in this package.

2024-05

12

Beijer Electronics, MAEN327

Installation

Power supply Internal voltage protection Input protection Isolation

12-24 VDC +/- 20% LPS 2A 29 V max Protected against polarity inversion 1.5 kV

3.4. Wiring
Proper grounding and wiring of all electrical equipment are important to help ensure the optimum operation of the CloudVPN Router and to provide additional electrical noise protection for your application.
The CloudVPN Router comes with a female 4-pin plug-in connector with screw connection (type: Weidmuller BL 5.08/04/180 SN BK BX). The optimal wire diameter is 1.5mm² (16AWG - 12AWG).

Wire size range Wire strip length Terminal screw torque Max wire length Min ground conductor

18 ­ 12 AWG 7 mm 0.4 N m 3 m 16 AWG

3.5. Digital Input
By default, the Digital Input is not configured and doesn't need to be wired. The digital input provides a way to locally manage the CloudVPN Router's VPN connection (ON/OFF). The wiring is depicted in the image above.

Type Voltage range Voltage range (OFF state) Voltage range ON state) Current voltage (ON state)

Optocoupler 0-29 VDC 0-3 VDC 7-29 VDC 2-5 mA (typically)

3.6. Shield
Connect the Shield pin of the CloudVPN Router with the protective earth conductor (PE), min. core diameter Cu 1.5 mm².

Beijer Electronics, MAEN327

13

2024-05

Operation
4. Operation
4.1. Configure the CloudVPN Router
To configure your CloudVPN Router, log in to your acirro+ remote access account and navigate to the [Tools] page. Here you can generate an CloudVPN Router configuration file by following a few simple steps. You can then download the configuration file, which must be copied onto a USB flash drive. After supplying power to the CloudVPN Router, insert this USB flash drive in the USB port. The CloudVPN Router will register itself to Beijer Electronics's acirro+ remote access and set up a secure VPN connection. You can further configure the CloudVPN Router via the acirro+ remote access (https://cloudvpn.acirroplus.com).
4.2. LED Status Indicators
The CloudVPN Router has two LEDs for router status: one signal LED (3G, 4G, Wi-Fi signal) and one activity LED. The CloudVPN Router requires approximately 2 minutes to boot up and set up a secure connection.

4.2.1. Signal LED
Signal
Signal 2024-05

Colour Blinking blue Blinking red 1 pulse
Blinking red 2 pulses
Blinking red 4 pulses
Colour Constant red Constant purple
14

Description Initializing cellular module
No reception or unable to connect to network (APN or SSID may be incorrect) PIN invalid or PUK required (a phone is required to unlock SIM card with PUK) SIM card is invalid or missing
Description Connected, poor reception
Connected, medium reception
Beijer Electronics, MAEN327

Operation

Signal

Colour Constant blue

Description Connected, good reception

4.2.2. Activity LED
Signal

Colour Constant red Blinking red 1 pulse Blinking red 3 pulses Blinking red 4 pulses
Blinking red 5 pulses

Blinking blue 1 pulse Blinking blue 2 pulses Constant blue
4.2.3. Reset To Factory Default Settings

Description
Booting up (may take 1-2 min) or not yet registered
Waiting for internet access
LAN/WAN conflict (conflicting subnets)
Removed from the platform (re-insert USB flash drive to register again)
Previously registered to the acirro+ remote access (remove from the acirro+ remote access and register again)
Connecting to the acirro+ remote access
Setting up a VPN connection
Active VPN connection to the acirro+ remote access

WARNING
The following action cannot be undone! All settings will be reset to factory default.

The CloudVPN Router can be reset to the factory default settings by pressing and holding the reset button on top for 5 seconds. The ACT LED will blink while the reset button is pressed. Upon release of the button, the ACT LED will rapidly blink if the button was pressed long enough to trigger a reset. Wait for the CloudVPN Router to restart. You can then configure the CloudVPN Router again.
REMOVE PREVIOUS REGISTRATION
If the CloudVPN Router was previously registered on the acirro+ remote access you'll have to remove it from the acirro+ remote access before you can register it again.

Beijer Electronics, MAEN327

15

2024-05

Connectivity Requirements (for local IT)

5. Connectivity Requirements (for local IT)

The CloudVPN Router uses an outgoing port to establish a secure connection to our acirro+ remote access. This means there is no need to open any incoming ports in your firewall.

5.1. Overview
Below is an overview of the outgoing ports and protocols that the CloudVPN Router utilizes.

Port 443, 8443*
53**

Transport TCP
TCP and UDP

Application
HTTPS, MQTT (TLS), OpenVPN
DNS

* Port 8443 is only used when stealth mode is active for connectivity via a censored internet connection (i.e. when located in China).
** DNS requests are often handled by local DNS servers. In those cases, the listed DNS port can be ignored.
5.2. Servers and DNS Requests
Via these outgoing ports the CloudVPN Router connects to different Beijer Electronics servers: REST API, MQTT, and OpenVPN servers. The IP addresses of these servers, as well as the number of servers, may change over time and are thus not pre-defined. What is pre-defined is the domain of these servers. This domain will always end with ".ixon.net" (i.e. am01.ixon.net). The CloudVPN Router attempts to resolve these addresses by doing DNS requests. If it can't perform DNS requests, it can't connect to our servers.
5.3. MAC or IP Address Filter
The local IT department may choose to only grant specific devices internet access, based on the MAC address or IP address of the device. The MAC address can be obtained from the label on the side of the CloudVPN Router. The IP address can be set to a static IP address. However, by default the IP address is set to be assigned dynamically via DHCP.
The CloudVPN Router is in conformity with the provisions of the following European Directives.

Directive EMC Directive 2014/30/EU Radio Equipment Directive 2014/53/EU RoHS Directive 2015/863 REACH Directive 1907/2006 WEEE Directive 2012/19

Description Product safety Use of the radio spectrum Restriction of hazardous substances Regulation and registration of chemicals Waste of electronic equipment

2024-05

16

Beijer Electronics, MAEN327

6. Compliance

Compliance

6.1. Applicable European Directives
The CloudVPN Router is in conformity with the provisions of the following European Directives.

Directive EMCDirective 2014/30/EU Radio Equipment Directive 2014/53/EU RoHS Directive 2015/863 REACHDirective 1907/2006 WEEE Directive 2012/19

Description Product safety Use of the radio spectrum Restriction of hazardous substances Regulation and registration of chemicals Waste of electronic equipment

6.2. Applicable Safety Standards
The CloudVPN Router was tested and passed the following standards.

Standard EN 55032:2012/AC:2013 EN 301 489-1 V1.9.2 (2011-09) EN 301 489-3 V1.4.1 (2002-08) EN 61000-6-1:2007
EN 61000-6- 3:2007/A1:2011/AC:2012
EN 61000-6-2:2005/AC:2005 EN 61000-6-4:2007 + A1:2011 EN 61000-4-2:2009 EN 61000-4-3:2006 + A1:2008 + A2:2010 EN 61000-4-4:2012 EN 61000-4-5:2014 + A1:2017

Description
Electromagnetic Compatibility of Multimedia Equipment.
EMC Standard for Radio Equipment and Services, Part 1: Common technical requirements
EMC Standard for Radio Equipment and Services, Part 3: Specific conditions for Short-Range devices.
Electromagnetic compatibility (EMC) - Part 6-1: Generic standards Immunity for residential, commercial and light-industrial environments
Electromagnetic compatibility (EMC) Part 6-3: Generic standards - Emission standard for residential, commercial and light-industrial environments
Electromagnetic compatibility (EMC) - Part 6-2: Generic standards Immunity for industrial environments
Electromagnetic compatibility (EMC) Part 6-4: Generic standards - Emission standard for industrial environments
Electrostatic discharge immunity test
Radiated, Radio-frequency, Electromagnetic Field Immunity Test 80-1000 MHz
Burst Immunity Test
Surge Immunity Test

Beijer Electronics, MAEN327

17

2024-05

Compliance

EN 61000-4-6:2014

Standard

IEC 60950-1:2006 + A1:2009 + A2:2013

EN 62368-1:2014/AC:2015

EN 50581:2012

UL 60950-1

CSA C22.2 No. 60950-1-07 + Amendment 1 and Amendment 2

Description
Immunity to Conducted Disturbances, Induced by Radio-frequency Fields
Information Technology Equipment Safety, Part 1: General Requirements - Edition 2
Audio/video, information and communication technology equipment - Part 1: Safety requirements
Restriction of the use of certain hazardous substances (RoHS) in electrical and electronic equipment
Information Technology Equipment Safety, Part 1: General Requirements - Edition 2
Information Technology Equipment Safety, Part 1: General Requirements - Edition 2

6.3. FCC Compliance
The base equipment (an unintentional radiator) has been tested and complies with the limits for a Class B digital device, pursuant to part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the manufacturer's instruction manual, may cause interference with radio and television reception.
However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or TV reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
· Reorient or relocate the receiving antenna.
· Increase the separation between the equipment and the receiver.
· Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
· Consult the dealer or an experienced radio/TV technician for help.

NOTE
Changes or modifications of this equipment not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.

The CloudVPN Router contains different FCC certified modules, depending on the variant.

Article Number. 600-0001 600-0002

Enclosed module 4G (Global)

FCC IDs (LTE)
-
XMR201903EG25G

FCC IDs (Wi-Fi) -

2024-05

18

Beijer Electronics, MAEN327

Compliance

Article Number. 600-0003 600-0004

Enclosed module
Wi-Fi
4G (Global) and Wi-Fi

FCC IDs (LTE)
-
XMR201903EG25G

FCC IDs (Wi-Fi) XPYLILYW1 XPYLILYW1

6.3.1. Additional Information for Variants With Wireless Capabilities
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
· This device may not cause harmful interference.
· This device must accept any interference received, including interference that may cause undesired operation.
The antenna(s) used with this transmitter must be installed with a separation distance of at least 20cm from all persons and must not be co-located or operated in conjunction with any other antennas or transmitters. Only those antenna(s) tested with the wireless transmitters or similar antenna(s) with equal or lesser gain may be used.
6.4. Certifications
The CloudVPN Router has been certified for:
· CE certification (for more information, see our Declaration of Conformity).

· FCC verification

· cULus listing (ID #E492721)

Beijer Electronics, MAEN327

19

2024-05

20

Head Office Beijer Electronics AB Box 426 201 24 Malmö, Sweden www.beijerelectronics.com / +46 40 358600



References

AH XSL Formatter V7.2 MR1 for Linux64 : 7.2.2.53984 (2021-10-18T16:29 09) Antenna House PDF Output Library 7.2.1712