HIRSCHMANN NB2800 NetModule Router User Manual

Contents hide

1 HIRSCHMANN NB2800 NetModule Router

2 Product Information

3 Product Usage Instructions

4 FAQs

5 Welcome to NetModule

10 Documents / Resources

10.1 References

11 Related Posts

HIRSCHMANN NB2800 NetModule Router

Product Information

: NetModule Router NB2800

The NetModule Router NB2800 is a high-performance router designed for various networking applications. It is equipped with advanced features and functionalities to ensure reliable and secure connectivity.

Specifications

Software Version: 4.8.0.102

Manual Version: 2.1570
Manufacturer: NetModule AG, Switzerland

Date: November 20, 2023

Features

The NetModule Router NB2800 offers the following key features:

High-speed data transmission

Support for various wireless technologies
Advanced routing capabilities

GNSS (Global Navigation Satellite System) support
Secure certificate operations

Contact Information

If you have any questions or need assistance with the NetModule Router NB2800, you can contact NetModule AG using the following details:

Website: https://support.netmodule.com
Address: NetModule AG, Maulbeerstrasse 10, CH-3011 Bern, Switzerland

Telephone: +41 31 985 25 10
Fax: +41 31 985 25 11

Email: info@netmodule.com

User Manual Version

This user manual corresponds to NRSW version 4.8.0.102 of the NetModule Router NB2800.

Conformity

The NetModule Router NB2800 complies with all relevant regulatory standards and requirements.

Product Usage Instructions

1. Introduction

Welcome to the NetModule Router NB2800 user manual. This document will guide you through the process of setting up and configuring your router for optimal performance.

2. Commissioning

Before using the NetModule Router NB2800, it is important to properly commission the device. This involves connecting it to power and ensuring all necessary cables are securely connected.

3. Installation

The installation procedure for the NetModule Router NB2800 varies depending on your specific requirements and network setup. Please refer to the installation section in the user manual for detailed instructions.

4. Configuration

To configure the NetModule Router NB2800, you will need to access its web-based administration interface. This allows you to customize various settings such as network connectivity, security, and routing options. Detailed instructions on configuration can be found in the user manual.

5. Maintenance

Regular maintenance of the NetModule Router NB2800 ensures optimal performance and reliability. This includes updating firmware, monitoring network traffic, and troubleshooting any issues that may arise. Refer to the maintenance section in the user manual for comprehensive guidelines.

6. Troubleshooting

If you encounter any difficulties or issues with the NetModule Router NB2800, the troubleshooting section in the user manual provides step-by-step instructions to help resolve common problems.

7. Additional Resources

For additional resources and support, you can visit the NetModule wiki at https://wiki.netmodule.com. The wiki contains sample SDK scripts, configuration samples, and other useful information related to the NetModule Router NB2800.

FAQs

Q: Where can I find the software license information for the NetModule Router NB2800?

A: Detailed license information for the software packages used in the NetModule Router NB2800 can be provided upon request. Please contact NetModule AG for further assistance.

Q: Are there any trademarks associated with the NetModule Router NB2800?

A: The NetModule Router NB2800 may mention other product or company names for identification purposes only. These names may be trademarks or registered trademarks of their respective owners.

View Fullscreen

NetModule Router NB2800
User Manual for Software Version 4.8.0.102
Manual Version 2.1570
NetModule AG, Switzerland November 20, 2023

NetModule Router NB2800
This manual covers all variants of the NB2800 product type.
The specifications and information regarding the products in this manual are subject to change without notice. We would like to point out that NetModule makes no representation or warranties with respect to the contents herein and shall not be responsible for any loss or damage caused to the user by the direct or indirect use of this information This document may contain information about third party products or processes. Such third party information is generally out of influence of NetModule and therefore NetModule shall not be responsible for the correctness or legitimacy of this information. Users must take full responsibility for their application of any products.

This document contains proprietary information of NetModule. No parts of the work described herein may be reproduced. Reverse engineering of the hardware or software is prohibited and protected by patent law. This material or any portion of it may not be copied in any form or by any means, stored in a retrieval system, adopted or transmitted in any form or by any means (electronic, mechanical, photographic, graphic, optic or otherwise), or translated in any language or computer language without the prior written permission of NetModule.
A large amount of the source code to this product is available under licenses which are both free and open source. Most of it is covered by the GNU General Public License which can be obtained from www.gnu.org. The remainder of the open source software which is not under the GPL, is usually available under one of a variety of more permissive licenses. A detailed license information for a particular software package can be provided on request.
All other products or company names mentioned herein are used for identification purposes only and may be trademarks or registered trademarks of their respective owners. The following description of software, hardware or process of NetModule or other third party provider may be included with your product and will be subject to the software, hardware or other license agreements.

Contact
https://support.netmodule.com

NetModule AG Maulbeerstrasse 10 CH-3011 Bern Switzerland

Tel +41 31 985 25 10 Fax +41 31 985 25 11 info@netmodule.com https://www.netmodule.com

NB2800

User Manual for NRSW version 4.8.0.102

Welcome to NetModule

Thank you for purchasing a NetModule product. This document should give you an introduction to the device and its features. The following chapters describe any aspects of commissioning the device, installation procedure and provide helpful information towards configuration and maintenance. Please find further information such as sample SDK scripts or configuration samples in our wiki on https://wiki.netmodule.com.

NB2800

User Manual for NRSW version 4.8.0.102

Conformity

This chapter provides general information for putting the router into operation.
2.1. Safety Instructions
Please carefully observe all safety instructions in the manual that are marked with the symbol .
Compliance information: The NetModule routers must be used in compliance with any and all applicable national and international laws and with any special restrictions regulating the utilization of the communication module in prescribed applications and environments.
Information about the accessories / changes to the device: Please only use original accessories to prevent injuries and health risks. Changes made to the device or the use of non-authorized accessories will render the
warranty null and void and potentially invalidate the operating license. NetModule routers must not be opened (SIM cards may be used according to the
instructions).

NB2800

User Manual for NRSW version 4.8.0.102

Information about the device interfaces: All systems that are connected to the NetModule router interfaces must meet the
requirements for SELV (Safety Extra Low Voltage) systems.
Interconnections must not leave the building nor penetrate the body shell of a vehicle.
Connections for antennas may only exit the building or the vehicle hull if transient overvoltages (according to IEC 62368-1) are limited by external protection circuits down to 1 500 Vpeak. All other connections must remain within the building or the vehicle hull.
Always keep a distance of more than 40 cm from the antenna in order to reduce exposure to electromagnetic fields below the legal limits.
Devices with a WLAN interface may be operated only with applicable Regulatory Domain configured. Special attention must be paid to country, number of antennas and the antenna gain (see also chapter 5.3.4). The maximum allowed gain is 3dBi in the relevant frequency range. WLAN antennas with a higher amplification may be used with the NetModule router “Enhanced-RF-Configuration” software license and the antenna gain and cable attenuation that have been correctly configured by certified specialized personnel. A misconfiguration will lead to loss of the approval.
The maximum gain of an antenna (incl. the attenuation of the connection cables) must not exceed the following values in the corresponding frequency range:
Mobile radio (600MHz .. 1GHz) < 3.2dBi
Mobile radio (1.7GHz .. 2GHz) < 6.0dBi
Mobile radio (2.5GHz .. 4.2GHz) < 6.0dBi
WiFi (2.4GHz .. 2.5GHz) < 3.2dBi
WiFi (5.1GHz .. 5.9GHz) < 4.5dBi
Only CE-compliant power supplies with a current-limited SELV output voltage range may be used with the NetModule routers.
A Power Source Class 3 (PS3) power supply (with 100 W or more) shall only be used under the condition that a cable strain relief on the power cable to the router is applied. Such a cable strain relief ensures that the wires on the router screw terminal connector are not disconnected (e.g. if under an error condition, the router would be tangling on the cable). The cable strain relief must withstand a pulling force of 30 N (for router weight up to 1 kg) applied to the cable of the router.
Une alimentation de classe 3 (PS3) (100 W ou plus) ne doit etre utilisee que si le cable d alimentation du routeur est equipe d un dispositif anti-traction. A condition qu une decharge de traction soit appliquee au cable d alimentation du routeur. Une telle decharge de traction permet de s’assurer que les fils du connecteur a vis du routeur ne soient pas deconnectes (par exemple si, en cas d erreur, le routeur s emmale dans le cable). La decharge de traction du cable doit resister a une force de traction de 30 N (pour un routeur d un poids inferieur ou egal a 1 kg) appliquee au cable du routeur.

NB2800

User Manual for NRSW version 4.8.0.102

General safety instructions: Observe the usage limitations of radio units at filling stations, in chemical plants, in
systems with explosives or potentially explosive locations. The devices may not be used in airplanes. Exercise particular caution near personal medical aids, such as pacemakers and hear-
ing aids. The NetModule routers may also cause interference in the nearer distance of TV sets,
radio receivers and personal computers. Never perform work on the antenna system during a thunderstorm. The devices are generally designed for normal indoor use. Do not expose the devices
to extraordinary environmental conditions worse than IP40. Protect them against aggressive chemical atmospheres and humidity or temperatures
outside specifications. We highly recommended creating a copy of a working system configuration. It can be
easily applied to a newer software release afterwards.
2.2. Declaration of Conformity
NetModule hereby declares that under our own responsibility that the routers comply with the relevant standards following the provisions of the RED Directive 2014/53/EU. The signed version of the Declaration of Conformity can be obtained from https://www.netmodule.com/downloads
Operating frequency bands and related maximum radio frequency power transmitted is shown below, according to RED Directive 2014/53/EU, Article 10 (8a, 8b).
WLAN maximum output power
IEE 802.11b/g/n Operation frequency range: 2412-2472 MHz (13 channels) Maximum output power: 14.93 dBm EIRP average (on antenna port)
IEE 802.11a/n/ac Operation frequency range: 5180-5350 MHz / 5470-5700 MHz (19 channels) Maximum output power: 22.91 dBm EIRP average (on antenna port)
Cellular maximum output power
GSM Band 900 Operation frequency range: 880-915, 925-960 MHz Maximum output power: 33.5 dBm rated

NB2800

User Manual for NRSW version 4.8.0.102

GSM Band 1800 Operation frequency range: 1710-1785, 1805-1880 MHz Maximum output power: 30.5 dBm rated
WCDMA Band I Operation frequency range: 1920-1980, 2110-2170 MHz Maximum output power: 25.7 dBm rated
WCDMA Band III Operation frequency range: 1710-1785, 1805-1880 MHz Maximum output power: 25.7 dBm rated
WCDMA Band VIII Operation frequency range: 880-915, 925-960 MHz Maximum output power: 25.7 dBm rated
LTE FDD Band 1 Operation frequency range: 1920-1980, 2110-2170 MHz Maximum output power: 25 dBm rated
LTE FDD Band 3 Operation frequency range: 1710-1785, 1805-1880 MHz Maximum output power: 25 dBm rated
LTE FDD Band 7 Operation frequency range: 2500-2570, 2620-2690 MHz Maximum output power: 25 dBm rated
LTE FDD Band 8 Operation frequency range: 880-915, 925-960 MHz Maximum output power: 25 dBm rated
LTE FDD Band 20 Operation frequency range: 832-862, 791-821 MHz Maximum output power: 25 dBm rated
LTE FDD Band 28 Operation frequency range: 703-748, 758-803 Maximum output power: 25 dBm rated
LTE FDD Band 38 Operation frequency range: 2570-2620 MHz Maximum output power: 25 dBm rated
LTE FDD Band 40 Operation frequency range: 2300-2400 MHz Maximum output power: 25 dBm rated

NB2800

User Manual for NRSW version 4.8.0.102

5G NR Band 1 Operation frequency range: 1920-1980, 2110-2170 MHz Maximum output power: 25 dBm rated
5G NR Band 3 Operation frequency range: 1710-1785, 1805-1880 MHz Maximum output power: 25 dBm rated
5G NR Band 7 Operation frequency range: 2500-2570, 2620-2690 MHz Maximum output power: 25 dBm rated
5G NR Band 8 Operation frequency range: 880-915, 925-960 MHz Maximum output power: 25 dBm rated
5G NR Band 20 Operation frequency range: 832-862, 791-821 MHz Maximum output power: 25 dBm rated
5G NR Band 28 Operation frequency range: 703-748, 758-803 MHz Maximum output power: 25 dBm rated
5G NR Band 38 Operation frequency range: 2570-2620 MHz Maximum output power: 25 dBm rated
5G NR Band 40 Operation frequency range: 2300-2400 MHz Maximum output power: 25 dBm rated
5G NR Band 77 Operation frequency range: 3300-4200 MHz Maximum output power: 25 dBm rated
5G NR Band 78 Operation frequency range: 3300-3800 MHz Maximum output power: 25 dBm rated

NB2800

User Manual for NRSW version 4.8.0.102

2.3. Waste Disposal
In accordance with the requirements of the Council Directive 2012/19/EU regarding Waste Electrical and Electronic Equipment (WEEE), you are urged to ensure that this product will be segregated from other waste at end-of-life and delivered to the WEEE collection system in your country for proper recycling.

2.4. National Restrictions
This product may be generally used in all EU countries (and other countries following the RED Directive 2014/53/EU) without any limitation. Please refer to our WLAN Regulatory Database for getting further national radio interface regulations and requirements for a particular country.
2.5. Open Source Software
We inform you that NetModule products may contain in part open-source software. We are distributing such open-source software to you under the terms of GNU General Public License (GPL)1, GNU Lesser General Public License (LGPL)2 or other open-source licenses3. These licenses allow you to run, copy, distribute, study, change and improve any software covered by GPL, Lesser GPL, or other open-source licenses without any restrictions from us or our end user license agreement on what you may do with that software. Unless required by applicable law or agreed to in writing, software distributed under open-source licenses is distributed on an “AS IS” basis, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. To obtain the corresponding open source codes covered by these licenses, please contact our technical support at router@support.netmodule.com.
Acknowledgements
This product includes:
PHP, freely available from http://www.php.net Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org) Cryptographic software written by Eric Young (eay@cryptsoft.com) Software written by Tim Hudson (tjh@cryptsoft.com) Software written Jean-loup Gailly and Mark Adler MD5 Message-Digest Algorithm by RSA Data Security, Inc. An implementation of the AES encryption algorithm based on code released by Dr Brian Glad-
man Multiple-precision arithmetic code originally written by David Ireland Software from The FreeBSD Project (http://www.freebsd.org)
1Please find the GPL text under http://www.gnu.org/licenses/gpl-2.0.txt 2Please find the LGPL text under http://www.gnu.org/licenses/lgpl.txt 3Please find the license texts of OSI licenses (ISC License, MIT License, PHP License v3.0, zlib License) under

Licenses

NB2800

User Manual for NRSW version 4.8.0.102

Specifications

3.1. Appearance

3.2. Features
All models of NB2800 have following standard functionalities: Power input with Ingition Sense 2x Ethernet ports (10/100/1000 Mbit/s) 1x serial port (RS-232) 1x USB 3.0 host port 4x micro SIM card slots (3FF) 1x Extension port
The NB2800 can be equipped with the following options: 5G, LTE, UMTS, GSM WLAN IEEE 802.11 GNSS

NB2800

User Manual for NRSW version 4.8.0.102

RS-232 RS-485 IBIS CAN Audio Audio-PTT Digital I/O 1 TB internal storage Software Keys
Due to its modular approach, the NB2800 router and its hardware components can be arbitrarily assembled according to its indented usage or application. Please contact us in case of special project requirements.

3.3. Environmental Conditions

Parameter Input Voltage Operating Temperature Range Storage Temperature Range Humidity Altitude Over-Voltage Category Pollution Degree Ingress Protection Rating

Rating 12 VDC to 48 VDC (±25%) -25 C to +70 C -40 C to +85 C 0 to 95% (non-condensing) up to 4000m I 2 IP40 (with SIM and USB covers mounted)

Table 3.1.: Environmental Conditions

NB2800

User Manual for NRSW version 4.8.0.102

3.4. Interfaces
3.4.1. Overview

Nr. Label 1 LED Indicators 2 USB
3 SIM 1-4
4 Reset 5 ETH 1-2 6 MOB 1 7 MOB 2 8 GNSS 9 RS-232
10 PWR

Panel Front Front
Front
Front Rear Rear Rear Rear Rear
Rear

Function LED Indicators for the different interfaces USB 3.0 host port, can be used for software/configuration updates. SIM 1-4 (3FF), they can be assigned dynamically to any modem by configuration. Reboot and factory reset button Gigabit Ethernet ports, can be used as LAN or WAN interface. 2 FAKRA coding D jacks for MIMO celullar antenna 2 FAKRA coding D jacks for MIMO cellular antenna FAKRA coding C jack for GNSS antenna Non-isolated serial RS-232 interface (Pins 4 to 6) which can be used for console administration, serial device server or other serial based communication applications. Power supply 12-48 VDC (Pins 1 and 2) and Ignition (Pin 3)

NB2800

User Manual for NRSW version 4.8.0.102

Nr. Label 11 MOB 3/WLAN 2

Panel Rear

12 A8 13 MOB 4/WLAN 1

Rear Rear

14 EXT

Rear

Function 2 FAKRA coding I/D jacks for MIMO WLAN 2 or MIMO cellular antenna
Auxiliary port
2 FAKRA coding I/D jacks for MIMO WLAN or MIMO cellular antenna
Audio/CAN/IBIS/RS-232/RS-485/Audio-PTT extension.

Table 3.2.: NB2800 Interfaces

3.4.2. LED Indicators The following table describes the NB2800 status indicators.

Label STAT

Color

MOB1 MOB2 VPN WLAN1 WLAN2 GNSS VOICE

[1] [1] [1] [1]

State blinking
on on on blinking off on blinking off on off on blinking off on blinking off on blinking off on off

Function The device is busy due to startup, software or configuration update. The device is ready. The captions of the top bank apply. The device is ready. The captions of the bottom bank apply. Mobile connection 1 is up. Mobile connection 1 is being established. Mobile connection 1 is down. Mobile connection 2 is up. Mobile connection 2 is being established. Mobile connection 2 is down. VPN connection is up. VPN connection is down. WLAN 1 connection is up. WLAN 1 connection is being established. WLAN 1 connection is down. WLAN 2 connection is up. WLAN 2 connection is being established. WLAN 2 connection is down. GNSS is turned on and a valid NMEA stream is available. GNSS is searching for satellites. GNSS is turned off or no valid NMEA stream is available. A voice call is currently active. No voice call is active.

NB2800

User Manual for NRSW version 4.8.0.102

Label

Color

State Function

USR1-5

User defined.

off

User defined.

EXT1

Extension port 1 is on.

off

Extension port 1 is off.

EXT2

Extension port 2 is on.

off

Extension port 2 is off.

[1] The color of the LED represents the signal quality for wireless links.

red means low

yellow means moderate

green means good or excellent

Table 3.3.: NB2800 Status Indicators

Ethernet LEDs The following table describes the Ethernet status indicators.

Label S
L/A

Color

State 1 blink 2 blinks 3 blinks
off on blinking off

Function 10 Mbit/s 100 Mbit/s 1000 Mbit/s no Link Link on Activity no Link

Table 3.4.: Ethernet Status Indicators

3.4.3. Reset
The reset button has two functions: 1. Reboot the system: Press at least 3 seconds to trigger a system reboot. The reboot is indicated with the red blinking STAT LED. 2. Factory reset: Press at least 10 seconds to trigger a factory reset. The start of the factory reset is confirmed by all LEDs lighting up for a second.

NB2800

User Manual for NRSW version 4.8.0.102

3.4.4. Mobile
The various variants of the NB2800 support up to 4 WWAN modules for mobile communication. The LTE modules support 2×2 MIMO. The Variant with 5G modules support 4×4 MIMO. Here you will find an overview of the different modems and the individual bands The mobile antenna ports have the following specification:

Feature

Specification

Max. allowed cable length

30 m

Min. number of antennas 4G-LTE

Min. number of antennas 5G

Max. allowed antenna gain including cable attenuation

Mobile radio (600MHz .. 1GHz) < 3.2dBi Mobile radio (1.7GHz .. 2GHz) < 6.0dBi Mobile radio (2.5GHz .. 4.2GHz) < 6.0dBi

Min. distance between collocated ra- 20 cm dio transmitter antennas

Min. distance between people and an- 40 cm tenna

Connector type

Option Jf: FAKRA (Standard) Option Js: SMA

Table 3.5.: Mobile Antenna Port Specification

NB2800

User Manual for NRSW version 4.8.0.102

3.4.5. WLAN The variants of the NB2800 support up to 2 802.11 a/b/g/n/ac WLAN modules.

Standard 802.11a 802.11b 802.11g 802.11n 802.11ac

Frequencies 5 GHz 2.4 GHz 2.4 GHz 2.4/5 GHz 5 GHz

Bandwidth 20 MHz 20 MHz 20 MHz 20/40 MHz 20/40/80 MHz

Data Rate 54 Mbit/s 11 Mbit/s 54 Mbit/s 300 Mbit/s 866.7 Mbit/s

Table 3.6.: IEEE 802.11 Standards

Note: 802.11n and 802.11ac support 2×2 MIMO

The WLAN antenna ports have the following specification:

Feature

Specification

Max. allowed cable length

30 m

Max. allowed antenna gain including cable attenuation

3.2dBi (2,4GHz) resp. 4.5dBi (5GHz) 1

Min. distance between collocated ra- 20 cm dio transmitter antennas (Example: WLAN1 to MOB1)

Min. distance between people and an- 40 cm tenna

Connector type

Option Jf: FAKRA (Standard) Option Js: SMA

Table 3.7.: WLAN Antenna Port Specification

1Note: WLAN antennas with a higher amplification may be used with the NetModule router “Enhanced-RF-Configuration” software license and the antenna gain and cable attenuation that have been correctly configured by certified specialized personnel.

NB2800

User Manual for NRSW version 4.8.0.102

3.4.6. GNSS GNSS (Option G) The GNSS is used from a WWAN Module.

Feature Systems
Data stream Tracking sensitivity Supported antennas

Specification GPS/GLONASS, (GALILEO/BEIDOU depending on module) JSON or NMEA Up to -165 dBm Active and passive

Table 3.8.: GNSS Specifications option G

GNSS (Option Gd) The GNSS module supports Dead Reckoning with onboard 3D accelerometer and 3D gyroscope.

Feature Systems Data stream Channels Tracking sensitivity Accuracy Dead Reckoning Modes
Supported antennas

Specification GPS/GLONASS/BeiDu/Galileo ready NMEA or UBX 72 Up to -160 dBm Up to 2.5m CEP UDR: Untethered Dead Reckoning ADR: Automotive Dead Reckoning Active and passive

Table 3.9.: GNSS Specifications option Gd

The GNSS antenna port have the following specification:

Feature

Specification

Max. allowed cable length

30 m

Antenna LNA gain

15-20 dB typ, 30 dB max.

Min. distance between collocated ra- 20 cm dio transmitter antennas (Example: GNSS to MOB1)

Connector type

Option Jf: FAKRA (Standard) Option Js: SMA

Table 3.10.: GNSS / GPS Antenna Port Specification

NB2800

User Manual for NRSW version 4.8.0.102

3.4.7. USB 3.0 Host Port The USB 3.0 host port has the following specification:

Feature Speed Current Max. cable length Cable shield Connector type

Specification Low, Full, Hi & Super-Speed max. 950 mA 3m mandatory Type A

Table 3.11.: USB 3.0 Host Port Specification

3.4.8. RJ45 Ethernet Connectors

Specification The Ethernet ports have following specification:

Feature Isolation to enclosure Speed Mode Crossover Max. cable length Cable type Cable shield Connector type

Specification 1500 VDC 10/100/1000 Mbit/s Half- & Full-Duplex Automatic MDI/MDI-X 100 m CAT5e or better mandatory RJ45

Table 3.12.: Ethernet Port Specification

NB2800

User Manual for NRSW version 4.8.0.102

Pin Assignment

Pin Signal 1 M0+ 2 M0- 3 M1+ 4 M2+ 5 M2- 6 M1- 7 M3+ 8 M3-
Table 3.13.: Pin Assignments of RJ45 Ethernet Connectors

3.4.9. Power Supply
NB2800 routers provide a non-isolated power supply input. The power port has the following specifications:

Feature Power supply nominal voltages Voltage range Max. power consumption
Off-state power consumption (V+)
Max. cable length Cable shield

Specification 12 VDC, 24 VDC, 36 VDC and 48 VDC 12 VDC to 48 VDC (±25%) 20 W 12V: max. 0.23 mA / 2.8 mW 24V: max. 0.34 mA / 8.1 mW 36V: max. 0.44 mA / 15.6 mW 48V: max. 0.56 mA / 27.1 mW 30 m not required

Table 3.14.: Power Specifications

For connector type and pin assignment check chapter 3.4.11.

NB2800

User Manual for NRSW version 4.8.0.102

3.4.10. RS-232 The RS-232 port is specified as follows (bold characters show the default configuration):

Feature Protocol Baud rate
Data bits Parity Stop bits Software flow control Hardware flow control Galvanic isolation to enclosure Max. cable length Cable shield

Specification 3-wire RS-232: GND, TXD, RXD 300, 1 200, 2 400, 4 800, 9 600, 19 200, 38 400, 57 600, 115 200 7 bit, 8 bit none, odd, even 1, 2 none, XON/XOFF none none 10 m not required

Table 3.15.: RS-232 Port Specification

For connector type and pin assignment check chapter 3.4.11.

3.4.11. 6 Pin Terminal Block The power supply and the serial interface shares the 6 pin terminal block.

Feature Connector type

Specification 6 pin terminal block header 5.0 mm

Table 3.16.: Terminal block connector

Pin Assignment

RS232 PWR

Pin Name Description

VGND Power Ground

V+ Power Input (12 VDC to 48 VDC)

IGN Ignition Input (12 VDC to 48 VDC)

RxD RS-232 RxD (non-isolated)

TxD RS-232 TxD (non-isolated)

6 GND RS-232 GND (non-isolated)

Table 3.17.: Pin Assignments of Terminal Block

NB2800

User Manual for NRSW version 4.8.0.102

3.4.12. Extension Port
Available Options The NB2800 has an optional RJ45 extension connector with 8 pins. On this connector one of the following interfaces may be present:
Audio (Option A) CAN (Option C) 2xCAN (Option 2C) IBIS (Option I) Isolated RS-485 (Option Sa) Isolated RS-232 (Option Sb) Audio PTT (Option Ap) Digital I/O (Option 2D)

NB2800

User Manual for NRSW version 4.8.0.102

Audio Port Specification (Option A) The Audio port has the following specification:

Feature Protocol Input reference level 0dBFS Input Impedance Input bandwidth Input galvanic isolation to enclosure Output voltage @ 0dBFS Output bandwidth Output galvanic isolation to enclosure Max. cable length Cable shield Connector type

Specification Audio Line In/Out Signal level 1.9 Vpp 21 k 100 Hz- 15 kHz functional (max. 100 VDC) 600 , signal level 3.7 Vpp 300 Hz- 4 kHz functional (max. 100 VDC) 30 m mandatory RJ45

Table 3.18.: Audio Port Specification

Pin Signal 1 Input Left Channel + 2 Input Left Channel – 3 Input Right Channel + 4 Output Right Channel + 5 Common Output Right Channel – 6 Input Right Channel – 7 Output Left Channel + 8 Common Output Left Channel –
Table 3.19.: Pin Assignments of RJ45 Audio Connector
Note: In the case of mono operation the left channels are used.

NB2800

User Manual for NRSW version 4.8.0.102

CAN Port Specification (Option C) The CAN port has the following specification:

Feature Protocol Speed
Galvanic isolation to enclosure Internal bus termination External bus termination2 Max. cable length Cable shield Cable type Connector type Max. number of nodes Reactionless

Specification CAN V2.0B Up to 1 Mbit/s Default: 125 kbit/s 1500 VDC none 120 100 m mandatory twisted pair RJ45 110 Option Cm: CAN-Passive (monitoring only) Option Cn: CAN-Active (rx and tx enabled)

Table 3.20.: CAN Port Specification

Pin Signal 1 CAN_H 2 CAN_L 3 CAN_GND 4567 CAN_GND 8-
Table 3.21.: Pin Assignments of RJ45 single CAN Connector

2Note: On each end of the CAN bus is a 120 termination mandatory

NB2800

User Manual for NRSW version 4.8.0.102

If a Variant with 2 CAN interfaces is used (Option 2C) following pin out will be assigned:
Pin Signal 1 CAN1_GND 2 CAN1_L 3 CAN1_H 45 CAN2_GND 6 CAN2_L 7 CAN2_H 8-
Table 3.22.: Pin Assignments of RJ45 dual CAN Connector

NB2800

User Manual for NRSW version 4.8.0.102

IBIS Port Specification (Option I) The IBIS port has the following specification:

Feature Protocol
Device type
Speed Galvanic isolation to enclosure Max. cable length Cable shield

Specification ‘IBIS Wagenbus’, according to VDV300 and VDV301 ‘IBIS Peripheriegerät’, according to VDV300 and VDV301 1200 Baud 1500 VDC 100 m not required

Table 3.23.: IBIS Port Specification

Pin Signal 123 WBMS (GND Call/Aufrufbus) 4 WBED (Signal Reply/Antwortbus) 5 WBME (GND Reply/Antwortbus) 6 WBSD (Signal Call/Aufrufbus) 78-
Table 3.24.: Pin Assignments of IBIS Port Signals

NB2800

User Manual for NRSW version 4.8.0.102

Isolated 5-wire RS-232 Port Specification (Option Sb) The isolated 5-wire RS-232 port has the following specification (bold characters show the default configuration):

Feature Protocol Baud rate
Data bits Parity Stop bits Software flow control Hardware flow control Galvanic isolation to enclosure Max. cable length Cable shield Connector type

Specification 5-wire RS-232: GND, TXD, RXD 600, 1 200, 2 400, 4 800, 9 600, 19 200, 38 400, 57 600, 115 200 7 bit, 8 bit none, odd, even 1, 2 none, XON/XOFF none 1500 VDC 10 m mandatory RJ45

Table 3.25.: Isolated RS-232 Port Specification

Pin Signal 1 RTS (output) 23 TXD (output) 4 GND 5 GND 6 RXD (input) 78 CTS (input)
Table 3.26.: Pin Assignments of RJ45 RS-232 Connector

NB2800

User Manual for NRSW version 4.8.0.102

Isolated RS-485 Port Specification (Option Sa) The RS-485 port has the following specification (bold characters show the default configuration):

Feature Protocol Baud rate
Data bits Parity Stop bits Software flow control Hardware flow control Galvanic isolation to enclosure Internal bus termination Max. cable length Cable shield Cable type Connector type Max. number of transceivers on bus Max. number of nodes

Specification 3-wire RS-485 (GND, A, B) 600, 1 200, 2 400, 4 800, 9 600, 19 200, 38 400, 57 600, 115 200 7 bit, 8 bit none, odd, even 1, 2 none, XON/XOFF none 1500 VDC none 10 m mandatory Twisted Pair RJ45 256 256

Table 3.27.: RS-485 Port Specification

Pin Signal 1234 RxD/TxD (B) 5 RxD/TxD (A) 678 RS485_GND
Table 3.28.: Pin Assignments of RJ45 RS-485 Connector

NB2800

User Manual for NRSW version 4.8.0.102

Autio-PTT Specification (Option Ap) The Audio-PTT (push to talk) has the following specification in common:

Feature Isolation to enclosure/GND Max. cable length Cable shield Connector type

Specification functional (max. 100 VDC) 30 m mandatory RJ45

Table 3.29.: Common PTT Specification

The Audio signal have the following specification:

Feature Number of ports Input reference level 0dBFS Input impedance Input bandwidth Output voltage @ 0dBFS Output bandwidth

Specification 1x Line In / 1x Line Out Signal level 1.9 Vpp 21 k 100 Hz- 15 kHz 600 , signal level 3.7 Vpp 300 Hz- 4 kHz

Table 3.30.: Audio Port Specification

The Digital Input signal have the following specification:

Feature Number of ports Max. input voltage Max. input current Reverse polarity protection Min. voltage for Level 1 (set) Max. voltage for level 0 (not set)

Specification 1x Digital In 60 VDC 2 mA Yes 7.2 VDC 5.0 VDC

Table 3.31.: Digital Input Specification

Note: A negative input voltage is not recognized.

NB2800

User Manual for NRSW version 4.8.0.102

The Digital Output signal have the following specification:

Feature Number of ports Max. continuous output current Max. switching output voltage Max. switching capacity

Specification 1x Digital Out (NO) 1A 60 VDC, 42 VAC ( Vrms) 60W

Table 3.32.: Digital Output Specification

Pin Signal 1 Line IN + 2 Line IN – 3 Digital IN + 4 Digital OUT + 5 Digital OUT – 6 Digital IN – 7 Line OUT + 8 Line OUT –
Table 3.33.: Pin Assignments of RJ45 Audio-PTT Connector

NB2800

User Manual for NRSW version 4.8.0.102

Digital Inputs and Outputs (Option 2D) The isolated input and output ports have the following specification in common:

Feature Isolation to enclosure/GND Max. cable length Cable shield Connector type

Specification 1’500 VDC 30 m not required RJ45

Table 3.34.: Common Digital I/O Specification

The Digital Input signal have the following specification:

Feature Number of ports Max. input voltage Max. input current Reverse polarity protection Min. voltage for Level 1 (set) Max. voltage for level 0 (not set)

Specification 2 60 VDC 2 mA Yes 7.2 VDC 5.0 VDC

Table 3.35.: Isolated Digital Input Specification

Note: A negative input voltage is not recognized.

NB2800

User Manual for NRSW version 4.8.0.102

The Digital Output signal have the following specification:

Feature Number of ports Max. continuous output current Max. switching output voltage Max. switching capacity

Specification 1xNO / 1xNC 1A 60 VDC, 42 VAC ( Vrms) 60W

Table 3.36.: Isolated Digital Output Specification

Pin Signal 1 DI1+ 2 DI1- 3 DI2+ 4 DO1: Normally open 5 DO1: Normally open 6 DI2- 7 DO2: Normally closed 8 DO2: Normally closed
Table 3.37.: Pin Assignments of RJ45 Digital I/O Connector

NB2800

User Manual for NRSW version 4.8.0.102

3.5. Data Storage (Option Dx)
The integrated mass storage works independently of any router functionalities and is dedicated for customer applications such as data collection or passenger entertainment. The storage can be accessed via the SDK. Please refer to SDK API Manual for further details, section 2.2 Media Mount. The following options are available:

Option Da Db Dc Dd De Df

Capacity 32 GB 64 GB 128 GB 256 GB 512 GB 1 TB

Table 3.38.: Storage Specifications

NB2800

User Manual for NRSW version 4.8.0.102

Installation

The NB2800 is designed for mounting it on a worktop or wall (Only suitable for mounting at heights smaller equal 2 m), https://www.netmodule.com/support/downloads/drawings Please consider the safety instructions in chapter 2 and the environmental conditions in chapter 3.3.
The following precautions must be taken before installing a NB2800 router: Avoid direct solar radiation Protect the device from humidity, steam and aggressive fluids Guarantee sufficient circulation of air around the device The device is for indoor use only
Attention: NetModule routers are not intended for the end consumer market. The device must be installed and commissioned by a certified expert.

4.1. Installation of Micro-SIM Cards (3FF)
Up to four Micro-SIM cards (3FF) can be inserted in a NB2800 router. A SIM card as a multi-format card, so-called 3-in-1 card (All-in-One SIM or Triple-SIM) with the format 2FF, 3FF and 4FF are not supported. SIM cards can be inserted by sliding it into one of the designated slots on the front panel. You have to push the SIM card using a small paper clip (or similar) until it snaps into place. To remove the SIM, you will need to push it again in the same manner. The SIM card will then rebounce and can be pulled out. SIMs can be assigned flexibly to any modem in the system. It is also possible to switch a SIM to a different modem during operation, for instance if you want to use another provider upon a certain condition. However, a SIM switch usually takes about 10-20 seconds which can be bypassed (e.g. at bootup) if SIMs are installed reasonably. Using only a single SIM with one modem, it should be preferably placed into the SIM 1 holder. For systems which should operate two modems with two SIMs in parallel, we recommend to assign MOB 1 to SIM 1, MOB 2 to SIM 2 and so on. Further information about SIM configuration can be found in chapter 5.3.3.
Attention: After a SIM Switch the SIM Cover of the NB2800 router has to be mounted again and screwed to get IP40 protection class.

4.2. Installation of the Cellular Antennas
For a reliable function of the NetModule router via the mobile network, the NetModule routers require a good signal. Use suitable remote antennas with extended cables to achieve an optimal location with a sufficient signal and to maintain the distances to other antennas (at least 20cm to each other). The antenna manufacturer’s instructions must be observed.

NB2800

User Manual for NRSW version 4.8.0.102

Keep in mind that effects caused by Faraday cages such as large metal surfaces (elevators, machine housings, etc.), close meshed iron constructions and others may reduce signal reception significantly.
The following table shows how to connect the cellular antennas. 4G-LTE antennas require both the main and auxiliary ports to be connected. 5G requires 4 Antennas per module.

Antenna Port MOB 1 A1 MOB 1 A2 MOB 2 A3 MOB 2 A4 MOB 3 A6 MOB 3 A7 MOB 4 A9 MOB 4 A10

Type Main Auxiliary Main Auxiliary Main Auxiliary Main Auxiliary

Table 4.1.: cellular antenna port types

NB2800

User Manual for NRSW version 4.8.0.102

MOB 1

MOB 2

MOB 3

MOB 4

Antenna Port

A1 A2

A3 A4

A6 A7

A9 A10

NB2800-2N-G

5G Mobile 1 5G Mobile 2 5G Mobile 1 5G Mobile 2

NB2800-NWac-G 5G Mobile 1 5G Mobile 1 n/a

WLAN 1

NB2800-N2Wac-G 5G Mobile 1 5G Mobile 1 WLAN 2

WLAN 1

NB2800-NLWac-G 5G Mobile 1 LTE Mobile 2 5G Mobile 1 WLAN 1

Table 4.2.: Variant with 5G module, antenna assignment

Attention: When installing the antenna be sure to observe chapter 2

NB2800

User Manual for NRSW version 4.8.0.102

4.3. Installation of the WLAN Antennas
The following table shows how to connect the WLAN antennas. The number of attached antennas can be configured in the software. If only one antenna is used, it must be attached to the main port. However, for better diversity and thus better throughput and coverage, we highly recommend using two antennas.

Antenna Port WLAN 1 A9 WLAN 1 A10 WLAN 2 A6 WLAN 2 A7

Type Main Auxiliary Main Auxiliary

Table 4.3.: WLAN antenna port types

Attention: When installing the antenna be sure to observe chapter 2

4.4. Installation of the GNSS Antenna
The GNSS antenna must be mounted to the connector GNSS. Whether the antenna is an active or passive GNSS antenna has to be configured in the software. We recommend active GNSS antennas for highly accurate GNSS tracking.
Attention: When installing the antenna be sure to observe chapter 2

4.5. Installation of the Local Area Network
Up to two 10/100/1000 Mbps Ethernet devices can be directly connected to the router, further devices can be attached via an addtional Ethernet switch. Please ensure that the connector has been plugged in properly to ETH and remains in a fixed state, you might otherwise experience sporadical link loss during operation. The Link/Act LED will lit up as soon as the device has synced. If not, it might be necessary to configure a different link setting as described in chapter 5.3.2.By default, the router is configured as a DHCP server and has the IP address 192.168.1.1.
Attention: Only a shielded Ethernet cable may be used.

NB2800

User Manual for NRSW version 4.8.0.102

4.6. Installation of the Power Supply & Delayed Power Off
The router can be powered with an external source supplying between 12 VDC and 48 VDC. It is to be used with a certified (CE or equivalent) power supply, which must have a limited and SELV circuit output. The router is now ready for getting engaged. When no “delayed power off” is required, connect the supply voltage to both IGN and V+ pin. When using the “delayed power off” function, the V+ is connected directly to the battery circuit and IGN is connected to the ignition circuit of the vehicle. Using this feature, the router powers off a defined time (SW configurable) after the vehicle is turned off, instead of an immediate shut down.
Attention: Following points must be observed: Only CE-compliant power supplies with a current-limited SELV output voltage range
may be used with the NetModule routers. A Power Source Class 3 (PS3) power supply (with 100 W or more) shall only be used
under the condition that a cable strain relief on the power cable to the router is applied. Such a cable strain relief ensures that the wires on the router screw terminal connector are not disconnected (e.g. if under an error condition, the router would be tangling on the cable). The cable strain relief must withstand a pulling force of 30 N (for router weight up to 1 kg) applied to the cable of the router. Une alimentation de classe 3 (PS3) (100 W ou plus) ne doit etre utilisee que si le cable d alimentation du routeur est equipe d un dispositif anti-traction. A condition qu une decharge de traction soit appliquee au cable d alimentation du routeur. Une telle decharge de traction permet de s assurer que les fils du connecteur a vis du routeur ne sient pas deconnectes (par exemple si, en cas d erreur, le routeur s emmale dans le cable). La decharge de traction du cable doit resister a une force de traction de 30 N (pour un routeur d un poids inferieur ou egal a 1 kg) appliquee au cable du routeur.
4.7. Installation of the Audio Interface
The audio interface (line out) is available on the PTT (Option Ap) and the Audio (Option A) extension.
Attention: Risk of hearing damage: Avoid the use of earphones or Headphones at high volumes or over one longer period.

NB2800

User Manual for NRSW version 4.8.0.102

Configuration

The following chapters provide information on setting up the router and configuring its functions as provided with system software 4.8.0.102.
NetModule provides regularly updated router software with new functions, bug fixes and closed vulnerabilities. Please keep your router software up to date. ftp://share.netmodule.com/router/public/system-software/
5.1. First Steps
NetModule routers can be easily set up by using the HTTP-based configuration interface, called the Web Manager. It is supported by the latest web browsers. Please ensure to have JavaScript turned on. Any submitted configuration via the Web Manager will be applied immediately to the system when pressing the Apply button. When configuring subsystems which require multiple steps (for instance WLAN) you can use the Continue button to store any settings temporarily and apply them at a later time. Please note that those settings will be neglected at logout unless applied. You may also upload configuration files via SNMP, SSH, HTTP or USB in case you intend to deploy a larger numbers of routers. Advanced users may also use the Command Line Interface (CLI) and set configuration parameters directly. The IP address of Ethernet 1 is 192.168.1.1 and DHCP is activated on the interface by default. The following steps need to be taken to establish your first Web Manager session:
1. Connect the Ethernet port of your computer to the ETH 1 (Gigabit Ethernet) port of the router using a shielded CAT6 cable with RJ45 connector.
2. If not yet activated, enable DHCP on your computer’s Ethernet interface so that an IP address can be obtained automatically from the router. This usually takes a short amount of time until your PC has received the corresponding parameters (IP address, subnet mask, default gateway, name server). You may track the progress by having a look to your network control panel and check whether your PC has correctly retrieved an IP address of the range 192.168.1.100 to 192.168.1.199.
3. Launch your favorite web browser and point it to the IP address of the router (the URL is http://192.168.1.1).
4. Please follow the instructions of the Web Manager for configuring the router. Most of the menus are self-explanatory, further details are given in the following chapters.
5.1.1. Initial Access
In factory state you will be prompted for a new administrator password. Please choose a password which is both, easy to remember but also robust against dictionary attacks (such as one that contains numbers, letters and punctuation characters). The password shall have a minimum length of 6 characters. It shall contain a minimum of 2 numbers and 2 letters.

NB2800

User Manual for NRSW version 4.8.0.102

Admin Password Setup
Please set a password for the admin account. It shall have a minimum length of 6 characters and contain at least 2 numbers and 2 letters.

Username: Enter new password: Confirm new password:
I agree to the terms and conditions

admin

Configure automatic mobile data connection

Apply

NetModule Insights
Subscribe to our mailing and get the latest news about software releases and much more

Figure 5.1.: Initial Login
Please note that the admin password will be also applied for the root user which can be used to access the device via the serial console, Telnet, SSH or to enter the bootloader. You may also configure additional users which will only be granted to access the summary page or retrieve status information but not to set any configuration parameters. A set of services (USB Autorun, CLI-PHP) are by default activated in factory state and will be disabled as soon as the admin password has been set. They can be enabled again afterwards in the relevant sections. Other services (SSH, Telnet, Console) can be accessed in factory state by providing an empty or no password. The passphrase which is used to store and access generated and uploaded private keys is initialized to a random value. It can be changed as described in chapter 5.8.8.
5.1.2. Automatic Mobile Data Connection
If you put a SIM with disabled PIN into the first SIM slot and select ‘Configure automatic mobile data connection’ the router will try to select matching credentials from a database of known providers and

NB2800

User Manual for NRSW version 4.8.0.102

esteblish a mobile data connection automatically. This feature is highly dependent on the SIM card features and the available networks. This Option is only availble if the router is equipped with a cellular module.
5.1.3. Recovery
Following actions might be taken in case the router has been misconfigured and cannot be reached anymore:
1. Factory Reset: You can initiate a reset back to factory settings via the Web Manager, by running the command factory-reset or by pressing the reset button. The latter would require a slim needle or paper clip which must be inserted into the holeto the right of the SIM 4 slot. The button must be hold pressed for up to 5 seconds until all LEDs flash up.
2. Serial Console Login: It is also possible to log into the system via the serial port. This requires a terminal emulator (such as PuTTY or HyperTerminal) and an RS232 connection (115200 8N1) attached to the serial port of your local computer. You will also see the kernel messages at bootup there.
3. Recovery Image: In severe cases we can provide a recovery image on demand which can be loaded into RAM via TFTP and executed. It offers a minimal system image for running a software update or doing other modifications. You will be provided with two files, recovery-image and recovery-dtb, which must be placed in the root directory of a TFTP server (connected via LAN1 and address 192.168.1.254). The recovery image can be launched from the bootloader using a serial connection. You will have to stop the boot process by pressing s and enter the bootloader. You can then issue run recovery to load the image and start the system which can be accessed via HTTP/SSH/Telnet and its IP address 192.168.1.1 afterwards. This procedure can be also initiated by holding the factory reset button longer than 15 seconds.

NB2800

User Manual for NRSW version 4.8.0.102

5.2. HOME
This page provides a status overview of enabled features and connections.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Status Summary WAN WWAN WLAN GNSS Ethernet LAN Bridges DHCP OpenVPN IPsec PPTP MobileIP Firewall System

Summary Description LAN2 WWAN1 WLAN1 IPsec1 PPTP1 MobileIP

Administrative Status enabled enabled enabled, access-point enabled enabled, server enabled

Operational Status dialing down up down up down

LOGOUT

NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG
Figure 5.2.: Home
Summary This page offers a short summary about the administrative and operational status of the router’s interfaces.
WAN This page offers details about any enabled Wide Area Network (WAN) links (such as the IP addresses, network information, signal strength, etc.) The information about the amount of downloaded/uploaded data is stored in non-volatile memory, thus survive a reboot of the system. The counters can be reset by pressing the Reset button.
WWAN This page shows information about modems and their network status.
AC This page shows information about the Access Controller (AC) WLAN-AP. This includes the current states and status information of discovered and managed AP3400 devices.

NB2800

User Manual for NRSW version 4.8.0.102

WLAN The WLAN page offers details about the enabled WLAN interfaces when operating in access-point mode. This includes the SSID, IP and MAC address and the currently used frequency and transmit power of the interface as well as the list of associated stations.
GNSS This page displays the position status values, such as latitude/longitude, the satellites in view and more details about the used satellites.
Ethernet This page shows information about the Ethernet interfaces and packet statistics information.
LAN This page shows information about the LAN interfaces plus the neighborhood information.
Bridges This page shows information about configured virtual bridge devices.
Bluetooth This page shows information about Bluetooth interfaces.
DHCP This page offers details about any activated DHCP service, including a list of issued DHCP leases.
OpenVPN This page provides information about the OpenVPN tunnel status.
IPSec This page provides information about the IPsec tunnel status.
PPTP This page provides information about the PPTP tunnel status.
GRE This page provides information about the GRE tunnel status.
L2TP This page provides information about the L2TP tunnel status.
MobileIP This page provides information about Mobile IP connections.
Firewall This page offers information about any firewall rules and their matching statistics. It can be used to debug the firewall.
QoS This page provides information about the used QoS queues.

NB2800

User Manual for NRSW version 4.8.0.102

BGP This page provides information about the Border Gateway Protocol.
OSPF This page provides information about the Open Shortest Path First routing protocol.
DynDNS This page provides information about Dynamic DNS.
System Status The system status page displays various details of your NB2800 router, including system details, information about mounted modules and software release information.
SDK This section will list all webpages generated by SDK scripts.

NB2800

User Manual for NRSW version 4.8.0.102

5.3. INTERFACES
5.3.1. WAN
Link Management Depending on your hardware model, WAN links can be made up of either Wireless Wide Area Network (WWAN), Wireless LAN (WLAN), Ethernet or PPP over Ethernet (PPPoE) connections. Please note that each WAN link has to be configured and enabled in order to appear on this page.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

LOGOUT

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges
USB
Serial
Digital I/O
GNSS
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG

WAN Link Management
In case a WAN link goes down, the system will automatically switch over to the next link in order of priority. A link can be either established when the switch occurs or permanently to minimize link downtime. Outgoing traffic can also be distributed over multiple links on a per IP session basis.

Priority Interface 1st LAN2 2nd WWAN1

Operation Mode permanent permanent

Apply

Figure 5.3.: WAN Links

NB2800

User Manual for NRSW version 4.8.0.102

In general, a link will be only dialed or declared as up if the following prerequisites are met:

Condition Modem is registered Registered with valid service type Valid SIM state Sufficient signal strength Client is associated Client is authenticated Valid DHCP address retrieved Link is up and holds address Ping check succeeded

WWAN X X X X
X X X

WLAN
X X X X X X

ETH
X X X

PPPoE
X X X

The menu can be used further to prioritize your WAN links. The highest priority link which has been established successfully will become the so-called hotlink which holds the default route for outgoing packets.
In case a link goes down, the system will automatically switch over to the next link in the priority list. You can configure each link to be either established when the switch occurs or permanently in order to minimize link downtime.

Parameter 1st priority 2nd priority
3rd priority
4th priority

WAN Link Priorities
The primary link which will be used whenever possible.
The first fallback link, it can be enabled permanently or being dialed as soon as Link 1 goes down.
The second fallback link, it can be enabled permanently or being dialed as soon as Link 2 goes down.
The third fallback link, it can be enabled permanently or being dialed as soon as Link 3 goes down.

Links are being triggered periodically and put to sleep in case it was not possible to establish them within a certain amount of time. Hence it might happen that permanent links will be dialed in background and replace links with lower priority again as soon as they got established. In case of interfering links sharing the same resources (for instance in dual-SIM operation) you may define a switch-back interval after which an active hotlink is forced to go down in order to let the higher-prio link getting dialed again.
We recommend to use the permanent operation mode for WAN links in general. However, in case of time-limited mobile tariffs for instance, the switchover mode might be applicable. By using the distributed mode, it is possible to distribute outgoing traffic over multiple WAN links based on their weight ratio.

NB2800

User Manual for NRSW version 4.8.0.102

Attention: You can have concurrent WWAN links which share a common resource like one WWAN module using SIM cards of different providers. In that case it would not be possible to find out if the link with the higher priority is available without putting down the low priority link. Therefore, such a link will behave like a switchover, even if configured as permanent.

For mobile links, it is further possible to pass through the WAN address towards a local host (also called Drop-In or IP Pass-through). In particular, the first DHCP client will receive the public IP address. More or less, the system acts like a modem in such case which can be helpful in case of firewall issues. Once established, the Web Manager can be reached over port 8080 using the WAN address but still over the LAN1 interface using port 80.

Parameter disabled permanent on switchover
distributed

WAN Link Operation Modes Link is disabled Link is being established permanently Link is being established on switchover, it will be dialed if previous links failed Link is member of a load distribution group

Parameter Operation mode Weight Switch-back
Bridge Mode Bridging interface

WAN Link Settings The operation mode of the link The weight ratio of a distributed link Specifies the switch-back condition of a switchover link and the time after an active hotlink will be teared down If WLAN client, specifies the bridge mode which will be used. If WLAN client, the LAN interface to which the WAN link should be bridged.

The following bridge modes can be configured for a WLAN client:

Parameter disabled 4addr frame1 pseudo bridge

Bridge modes Disables the bridge mode Enables the 4 address frame format Enables a bridge like behavior by relaying DHCP and broadcast messages

NetModule routers provide a feature called IP pass-through (aka Drop-In mode). If enabled, the WAN
1This options requires an access point with four address frame format support.

NB2800

User Manual for NRSW version 4.8.0.102

address will be be passed-through to the first DHCP client of the specified LAN interface. As Ethernetbased communication requires additional addresses, we pick an appropriate subnet to talk to the LAN host. In case this overlaps with other addresses of your WAN network, you may optionally specify the network given by your provider to avoid any address conflicts.

Parameter IP Pass-through Interface WAN network WAN netmask

IP Pass-Through Settings Enables or disables IP pass-through Specifies the interface on which the address shall be passed-through Specifies the WAN network Specifies the WAN netmask

Supervision
Network outage detection on a per-link basis can be performed by sending pings on each link to some authoritative hosts. A link will be declared as down in case all trials have failed and only as up if at least one host can be reached.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

LOGOUT

Link Supervision

Network outage detection can be performed by sending pings on each WAN link to authoritative hosts. The link will be declared as down in case all trials failed. You may further specify an emergency action if a certain downtime is reached.

Link

Hosts

Emergency Action

ANY

8.8.8.8, 8.8.4.4

none

Figure 5.4.: Link Supervision

NB2800

User Manual for NRSW version 4.8.0.102

Parameter Link Mode
Primary host Secondary host Ping timeout
Ping interval Retry interval Max. number of failed trials Emergency action

Supervision Settings
The WAN link to be monitored (can be ANY)
Specifies whether the link shall only be monitored if being up (e.g. for using a VPN tunnel) or if connectivity shall be also validated at connection establishment (default)
The primary host to be monitored
The secondary host to be monitored (optional)
The amount of time in milliseconds a response for a single ping can take, consider to increase this value in case of slow and tardy links (such as 2G connections)
The interval in seconds at which pings are transmitted on each interface
The interval in seconds at which pings are re-transmitted in case a first ping failed
The maximum number of failed ping trials until the link will be declared as down
The emergency action which should be taken after a maximum downtime has been reached. Using reboot would perform a reboot of the system, restart link services will restart all link-related applications including a reset of the modem.

WAN Settings
This page can be used to configure WAN specific settings like the Maximum Segment Size (MSS). The MSS corresponds to the largest amount of data (in bytes) that the router can handle in a single, unfragmented TCP segment. In order to avoid any negative side effects, the number of bytes in the data segment and the headers must not add up to more than the number of bytes in the Maximum Transmission Unit (MTU). The MTU can be configured per each interface and corresponds to the largest packet size that can be transmitted.

NB2800

User Manual for NRSW version 4.8.0.102

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

LOGOUT

TCP Maximum Segment Size

The maximum segment size defines the largest amount of data of TCP packets (usually MTU minus 40). You may decrease the value in case of fragmentation issues or link-based limits.

MSS adjustment: Maximum segment size:

enabled disabled
1380

Apply

Figure 5.5.: WAN Settings

Parameter MSS adjustment Maximum segment size

TCP MSS Settings Enable or disable MSS adjustment on WAN interfaces. Maximum number of bytes in a TCP data segment.

NB2800

User Manual for NRSW version 4.8.0.102

5.3.2. Ethernet
NB2800 routers ship with 2 dedicated Gigabit Ethernet ports (ETH1 and ETH2) and an additional extension port which can be linked via RJ45 connectors. ETH1 usually forms the LAN1 interface which should be used for LAN purposes. Other interfaces can be used to connect other LAN segments or for configuring a WAN link. The LAN10 interface will be available as soon as a pre-configured USB Ethernet device has been plugged in.
Ethernet Port Assignment

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Port Assignment

Link Settings

Ethernet 1 Administrative status: Network interface:
Ethernet 2 Administrative status: Network interface:

enabled disabled LAN1
enabled disabled LAN2

Apply

LOGOUT

Figure 5.6.: Ethernet Ports
This menu can be used to individually assign each Ethernet port to a LAN interface, just in case you want to have different subnets per port or use one port as WAN interface. You may assign multiple ports to the same interface.

NB2800

User Manual for NRSW version 4.8.0.102

Please note that NB2800 routers don’t have a switch but single PHY ports. If both ports are assigned to the same LAN interface the ports will be bridged by software. The following options exist:

Parameter Enable bridge filtering Enable RSTP

Ethernet Softbridge Settings If enabled, the firewall rules will also match packets between the ports
If enabled, the Rapid Spanning Tree Protocol (IEEE 802.1D-2004) rather than the Spanning Tree Protocol will be activated

Ethernet Link Settings

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Port Assignment

Link Settings

Link speed for Ethernet 1: Link speed for Ethernet 2:
Apply

auto-negotiated auto-negotiated

LOGOUT

Figure 5.7.: Ethernet Link Settings
Link negotiation can be set for each Ethernet port individually. Most devices support auto-negotiation which will configure the link speed automatically to comply with other devices in the network. In case of negotiation problems, you may assign the modes manually but it has to be ensured that all devices in the network utilize the same settings then.

NB2800

User Manual for NRSW version 4.8.0.102

Authentication via IEEE 802.1X

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges USB Serial GNSS
NB3800 NetModule Router Hostname nb Software Version 4.7.0.100 © 2004-2022, NetModule AG

Port Assignment Link Settings Wired 802.1X

Ethernet 1 Wired 802.1X status:
Ethernet 2 Wired 802.1X status: EAP type: Anonymous identity: Identity: Password: Certificates: Ethernet 3 Wired 802.1X status: Reauthentication Period: Authenticator ID: Use MAB: Ethernet 4 Wired 802.1X status:
Ethernet 5 Wired 802.1X status:
Apply

disabled Client Authenticator

disabled Client Authenticator PEAP

Netmodule-Anon

testid

·········

show

missing Manage keys and certificates

disabled Client Authenticator 3600 Netmodule-Auth

disabled Client Authenticator
disabled Client Authenticator

LOGOUT

Figure 5.8.: Authentication via IEEE 802.1X
NetModule-routers support authentication via the IEEE 802.1X standard. This can be configured for each Ethernet port individually. The following options exist:

NB2800

User Manual for NRSW version 4.8.0.102

Parameter Wired 802.1X status EAP type Anonymous identity Identity Password Certificates

Wired IEEE 802.1X Client Settings If set to Client, the router will authenticate on this port via IEEE 802.1X Which protocol to use to authenticate The anonymous identify for PEAP authentication The identify for EAP-TLS or PEAP authentication (required) The password for PEAP authentication (required) Certificates for authentication via EAP-TLS or PEAP. Can be configured in chapter 5.8.8

Parameter Wired 802.1X status
Reauthentication Period Authenticator ID Use MAB

Einstellungen IEEE 802.1X Authenticator
If set to Authenticator, the router will propagate IEEE 802.1X authentication requests on this port to a configured RADIUS server (see chapter 5.8.2)
Time in seconds after which a connected client has to reauthenticate
This unique name identifies the authenticator at the RADIUS server
Activate this option if you want to allow authentication of devices which are not capable of IEEE 802.1X via MAC Authentication Bypass. These are reported to the RADIUS server with their MAC address as user name and password

VLAN Management
NetModule routers support Virtual LAN according to IEEE 802.1Q which can be used to create virtual interfaces on top of an Ethernet interface. The VLAN protocol inserts an additional header to Ethernet frames carrying a VLAN Identifier (VLAN ID) which is used for distributing the packets to the associated virtual interface. Any untagged packets, as well as packets with an unassigned ID, will be distributed to the native interface.

NB2800

User Manual for NRSW version 4.8.0.102

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

VLAN Management

VLAN ID
Interface

LAN1-1

Network Interface Priority

LAN1

default

LAN1-2

LAN1

background

Mode routed routed

LOGOUT

Figure 5.9.: VLAN Management

In order to form a distinctive subnet, the network interface of a remote LAN host must be configured with the same VLAN ID as defined on the router. Further, 802.1P introduces a priority field which influences packet scheduling in the TCP/IP stack.
The following priority levels (from lowest to highest) exist:

Parameter 0 1 2 3 4 5 6 7

VLAN Priority Levels Background Best Effort Excellent Effort Critical Applications Video (< 100 ms latency and jitter) Voice (< 10 ms latency and jitter) Internetwork Control Network Control

NB2800

User Manual for NRSW version 4.8.0.102

IP Settings This page can be used to configure IP addressing for your LAN/WAN Ethernet interfaces.

Parameter Mode MTU

LAN IP Settings Defines whether this interface is being used as LAN or WAN interface.
The Maximum Transmission Unit for the interface, if provided it will specify the largest size of a packet transmitted on the interface.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

LOGOUT

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges
USB
Serial
GNSS
NB2800 NetModule Router Hostname NB2800 Software Version 4.6.0.100 © 2004-2021, NetModule AG

IP Address Management

Network Interface

Mode IP Address Mode

LAN1

LAN STATIC

LAN1-1

LAN STATIC

LAN1-2

LAN STATIC

LAN2

WAN DHCP

IP Address 192.168.1.1 192.168.101.1 192.168.102.1 –

Netmask 255.255.255.0 255.255.255.0 255.255.255.0 –

Figure 5.10.: LAN IP Configuration

NB2800

User Manual for NRSW version 4.8.0.102

LAN-Mode When running in LAN mode, the interface may be configured with the following settings:

Parameter IP address Netmask Alias IP address Alias Netmask MAC

LAN IP Settings The IP interface address The netmask for this interface Optional alias IP interface address Optional alias netmask for this interface Custom MAC adress for this interface (not supported for VLANs)

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges
USB
Serial
GNSS
NB2800 NetModule Router Hostname NB2800 Software Version 4.6.0.100 © 2004-2021, NetModule AG

IP Settings LAN1 Mode: Static Configuration IP address: Netmask: Alias IP address: Alias Netmask: MTU: MAC:
Apply

LAN WAN
192.168.1.1 255.255.255.0

LOGOUT

Figure 5.11.: LAN IP Configuration – LAN Interface

NB2800

User Manual for NRSW version 4.8.0.102

WAN-Mode When running in WAN mode, the interface may be configured with two IP versions in the following way:

Parameter IPv4 IPv6 Dual-Stack

Description Only Internet Protocol Version 4 Only Internet Protocol Version 6 Run Internet Protocol Version 4 and Version 6 in parallel

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges
USB
Serial
GNSS
NB2800 NetModule Router Hostname NB2800 Software Version 4.6.0.100 © 2004-2021, NetModule AG

IP Settings LAN1 Mode:
IP version: IPv4 Configuration IPv4 WAN mode: IPv6 Configuration IPv6 WAN mode: MTU: MAC:
Apply

LAN WAN IPv4 IPv6 Dual-Stack
DHCP Static PPPoE
SLAAC Static

LOGOUT

Figure 5.12.: LAN IP Configuration – WAN Interface

NB2800

User Manual for NRSW version 4.8.0.102

Depending on the selected IP version you can configure your interface with the following settings:

IPv4 Settings The router can configure its IPv4 address the following ways:

Parameter DHCP
Static
PPPoE

IPv4 WAN-Modes
When running as DHCP client, no further configuration is required because all IP-related settings (address, subnet, gateway, DNS server) will be retrieved from a DHCP server in the network.
Allows you to define static values. Caution has to be taken to assign a unique IP address as it would otherwise raise IP conflicts in the network.
PPPoE is commonly used when communicating with another WAN access device (like a DSL modem).

IPv4-PPPoE Settings The following settings can be applied:

Parameter User name Password Service name
Access concentrator name

PPPoE Configuration
PPPoE user name for authenticating at the access device
PPPoE password for authenticating at the access device
Specifies the service name set of the access concentrator and can be left blank unless you have multiple services on the same physical network and need to specify the one you want to connect to.
The name of the concentrator (the PPPoE client will connect to any access concentrator if left blank)

NB2800

User Manual for NRSW version 4.8.0.102

IPv6 Settings The router can configure its IPv6 address the following ways:

Parameter SLAAC
Static

IPv6 WAN-Modes
All IP-related settings (address, prefix, routes, DNS server) will be retrieved by the neighbor-discovery-protocol through stateless-addressautoconfiguration.
Allows you to define static values. Caution has to be taken to assign a unique IP address as it would otherwise raise IP conflicts in the network. You can only configure global addresses. The link-local address is automatically generated via the MAC address.

DNS Server
When all enabled IP versions are set to Static, you may configure an interface-specific nameserver. To override the interface-specific nameservers see chapter 5.7.3.

NB2800

User Manual for NRSW version 4.8.0.102

5.3.3. Mobile
Modems Configuration This page lists all available WWAN modems. They can be disabled on demand.
Query This page allows you to send Hayes AT commands to the modem. Besides the 3GPP-conforming AT command-set further modem-specific commands can be applicable which we can provide on demand. Some modems also support running Unstructured Supplementary Service Data (USSD) requests, e.g. for querying the available balance of a prepaid account. SIMs

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

LOGOUT

Mobile SIMs
This menu can be used to assign a default modem to each SIM which will also be used by SMS and GSM voice services. A SIM card can get switched in case of multiple WWAN interfaces sharing the same modem.

SIM Default SIM1 Mobile1

Current Mobile1

SIM State missing

SIM Lock unknown

Registered no

Update

Figure 5.13.: SIMs
The SIM page gives an overview about the available SIM cards, their assigned modems and the current state. Once a SIM card has been inserted, assigned to a modem and successfully unlocked, the card should remain in state ready and the network registration status should have turned to registered. If

NB2800

User Manual for NRSW version 4.8.0.102

not, please double-check your PIN. Please keep in mind that registering to a network usually takes some time and depends on signal strength and possible radio interferences. You may hit the Update button at any time in order to restart PIN unlocking and trigger another network registration attempt. Under some circumstances (e.g. in case the modem flaps between base stations) it might be necessary to set a specific service type or assign a fixed operator. The list of operators around can be obtained by initiating a network scan (may take up to 60 seconds). Further details can be retrieved by querying the modem directly, a set of suitable commands can be provided on request.

NB2800

User Manual for NRSW version 4.8.0.102

Configuration
A SIM card is generally assigned to a default modem but might be switched, for instance if you set up two WWAN interfaces with one modem but different SIM cards. Close attention has to be paid when other services (such as SMS or Voice) are operating on that modem, as a SIM switch will naturally affect their operation. The following settings can be applied:

Parameter PIN code PUK code Default modem Preferred service
Registration mode Network selection

WWAN SIM Configuration
The PIN code for unlocking the SIM card
The PUK code for unlocking the SIM card (optional)
The default modem assigned to this SIM card
The preferred service to be used with this SIM card. Remember that the link manager might change this in case of different settings. The default is to use automatic, in areas with interfering base stations you can force a specific type (e.g. 3G-only) in order to prevent any flapping between the stations around.
The desired registration mode
Defines which network shall be selected. This can be bound to a specific provider ID (PLMN) which can be retrieved by running a network scan.

NB2800

User Manual for NRSW version 4.8.0.102

eSIM / eUICC
Attention: Note that eUICC profiles are NOT affected by a factory reset. To remove an eUICC profile from a device, manually remove it before performing the factory reset.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges
Serial
GNSS
CAN
Bluetooth
NG800 NetModule Router Hostname Simulator Software Version 4.6.0.100 © 2004-2021, NetModule AG

SIM Card

eSIM Profiles

Profile configuration for embedded SIM1

ICCID

Operator

Name

EID: 89033032426180001000002063768022

Nickname

LOGOUT

Figure 5.14.: eSIM Profiles
Selected router models contain an eUICC (embedded universal integrated circuit card) which allows you to download eSIM profiles from the internet to the router instead of having to insert a physical SIM card into the router. The eSIM profiles to be installed must be compliant to the GSMA RSP Technical Specification SGP.22. These are the same eSIM profiles that are used with current mobile phones. Profiles according to the older GSMA SGP.02 specification are not supported. eSIM profiles can be managed on the “eSIM Profiles” tab of the “Mobile / SIMs” configuration page. The management page allows you to display all installed eSIM profiles as well as to install, enable, disable and delete eSIM profiles. It is also possible to store a nickname for each profile. The eUICC can store up to about 7 eSIM profiles depending on the size of the profiles. Only one of those profiles can be active at a time. In order to install new eSIM profiles, you need to first establish IP connectivity to the internet so that

NB2800

User Manual for NRSW version 4.8.0.102

the router can download the profile from the mobile network operator’s server.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges
Serial
GNSS
CAN
Bluetooth
NG800 NetModule Router Hostname Simulator Software Version 4.6.0.100 © 2004-2021, NetModule AG

Add eUICC profile to SIM1 Method:
Activation code: ? Confirmation code:
Apply

Activation/QR Code Root discovery service scan or upload QR code

LOGOUT

Figure 5.15.: Add eUICC Profile
The following two ways are supported to install eSIM profiles and can be selected on the eSIM profiles configuration page:
1. QR code provided by the network operator To download the eSIM profile using this method your mobile network operator provides you a QR code which contains the information about the eSIM profile to be installed. If the device you are using to access the configuration GUI of the router has a camera, you can scan the QR code using the camera. Otherwise you can also upload an image file of the QR code. Or it is also possible to enter the contents of the QR code manually into the corresponding input field.
2. GSMA Root Discovery Service When using this method, you need to provide the EID, which is a unique number that identifies the eUICC of the router, to your mobile network operator. The EID is displayed on the eSIM profiles configuration page. The operator will then prepare the eSIM profile for your router on his provisioning servers. Afterwards, you can use the GSMA Root Discovery Service method to retrieve the eSIM

NB2800

User Manual for NRSW version 4.8.0.102

profile without having to specify any additional information for the download. Note: Most mobile network operators allow only one download of an eSIM profile. So, if you download the profile once and delete it afterwards, you will not be able to download the same profile a second time. In this case you would need to request a new eSIM profile from your operator.

NB2800

User Manual for NRSW version 4.8.0.102

WWAN Interfaces
This page can be used to manage your WWAN interfaces. The resulting link will pop up automatically as WAN link once an interface has been added. Please refer to chapter 5.3.1 for how to manage them.
The Mobile LED will be blinking during the connection establishment process and goes on as soon as the connection is up. Refer to section 5.8.7 or consult the system log files for troubleshooting the problem in case the connection did not come up.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Mobile Interfaces Interface Modem SIM PDP WWAN1 Mobile1 SIM1 PDP1

Number Service APN / User *99***1# automatic internet.telekom / tm

LOGOUT

Figure 5.16.: WWAN Interfaces

The following mobile settings are required:

Parameter Modem SIM Service type

WWAN Mobile Parameters The modem to be used for this WWAN interface The SIM card to be used for this WWAN interface The required service type

Please note that these settings supersede the general SIM based settings as soon as the link is being dialed.

NB2800

User Manual for NRSW version 4.8.0.102

Generally, the connection settings are derived automatically as soon as the modem has registered and the network provider has been found in our database. Otherwise, it will be required to configure the following settings manually:

Parameter Phone number
Access point name IP version
Authentication Username Password

WWAN Connection Parameters
The phone number to be dialed, for 3G+ connections this commonly refers to be *99***1#. For circuit-switched 2G connections you can enter the fixed phone number to be dialed in international format (e.g. +41xx).
The access point name (APN) being used
What IP version to use. Dual-stack lets you use IPv4 and IPv6 together. Please note, that your provider might not support all IP versions.
The authentication scheme being used, if required this can be PAP or/and CHAP
The user-name used for authentication
The password used for authentication

Furtheron, you may configure the following advanced settings:

Parameter Required signal strength Home network only Negotiate DNS Call to ISDN Header compression
Data compression Client address MTU

WAN Advanced Parameters
Sets a minimum required signal strength before the connection is dialed
Determines whether the connection should only be dialed when registered to a home network
Specifies whether the DNS negotiation should be performed and the retrieved name-servers should be applied to the system
Has to be enabled in case of 2G connections talking to an ISDN modem
Enables or disables 3GPP header compression which may improve TCP/IP performance over slow serial links. Has to be supported by your provider.
Enables or disables 3GPP data compression which shrinks the size of packets to improve throughput. Has to be supported by your provider.
Specifies a fixed client IP address if assigned by the provider
The Maximum Transmission Unit for this interface

NB2800

User Manual for NRSW version 4.8.0.102

5.3.4. WLAN
WLAN Management In case your router is shipping with a WLAN (or Wi-Fi) module you can operate it either as client, access point, mesh point or certain dual modes. As a client it can create an additional WAN link which for instance can be used as backup link. As access point, it can form another LAN interface which can be either bridged to an Ethernet-based LAN interface or create a self-contained IP interface which can be used for routing and to provide services (such as DHCP/DNS/NTP) in the same way like an Ethernet LAN interface does. As mesh point, it can create a wireless mesh network to provide a backhaul connectivity with dynamic path selection. As dual mode, it is possible to run access point and client or mesh point and access point functionality on the same radio module.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WLAN Management Administrative status:

Operational mode:

Regulatory domain: Operation type: Radio band: Bandwidth: Channel: Number of antennas: Antenna gain:

Apply

Continue

enabled disabled client access point mesh point dual modes European Union 802.11b 2.4 GHz 20 MHz
Auto
2 0 dB

Channel utilisation

LOGOUT

Figure 5.17.: WLAN Management
If the administrative status is set to disabled, the module will be powered off in order to reduce the overall power consumption. Regarding antennas, we generally recommend using two antennas for better coverage and throughput. A second antenna is definitely mandatory if you want to achieve higher throughput rates as in 802.11n. A WLAN client and a mesh point will automatically became a WAN link and can be managed as described in chapter 5.3.1.

NB2800

User Manual for NRSW version 4.8.0.102

Configurable parameters for access-point, client mode, mesh point and any dual mode:

Parameter Regulatory Domain Number of antennas Antenna gain
Tx power Disable low data rates

WLAN Management Select the country the Router operates in Set the number of connected antennas Specify the antenna gain for the connected antennas. Please refer to the antennas datasheet for the correct gain value. Specifies the max. transmit power used in dBm. Avoid sticky clients by disabling low data rates.

Warning Please be aware that any inappropriate parameters can lead to an infringement of conformity regulations.

Running as access point or dual mode, you can further configure the following settings:

Parameter Operation type Radio band
Outdoor Bandwidth Channel enable client tracking Short Guard Interval

WLAN Management Specifies the desired IEEE 802.11 operation mode Selects the radio band to be used for connections, depending on your module it could be 2.4 or 5 GHz Shows the 5 GHz outdoor channels Specify the channel bandwidth operation mode Specifies the channel to be used Enables the tracking of non associated clients Enables the Short Guard Interval (SGI)

Running as client, you can further configure the following settings:

Parameter Scan channels
2.4 GHz 5 GHz

WLAN Management Select if all supported channels should be scanned or just user defined channels Set the channels which should be scanned in 2.4 GHz Set the channels which should be scanned in 5 GHz

Available operation modes are:

NB2800

User Manual for NRSW version 4.8.0.102

Standard 802.11a 802.11b 802.11g 802.11n 802.11ac

Frequencies 5 GHz 2.4 GHz 2.4 GHz 2.4/5 GHz 5 GHz

Bandwidth 20 MHz 20 MHz 20 MHz 20/40 MHz 20/40/80 MHz

Table 5.26.: IEEE 802.11 Network Standards

Data Rate 54 Mbit/s 11 Mbit/s 54 Mbit/s 300 Mbit/s 866.7 Mbit/s

NB2800

User Manual for NRSW version 4.8.0.102

Running as mesh point, you can further configure the following settings:

Parameter Radio band
Channel

WLAN Mesh-Point Management Selects the radio band to be used for connections, depending on your module it could be 2.4 or 5 GHz
Specifies the channel to be used

Note: NetModule Routers with 802.11n and 802.11ac support 2×2 MIMO

NB2800

User Manual for NRSW version 4.8.0.102

Prior to setting up an access point, it is always a good idea to run a network scan for getting a list of neighboring WLAN networks and then choose the less interfering channel. Please note that two adequate channels are required for getting good throughputs with 802.11n and a bandwidth of 40 MHz.
WLAN Configuration Running in client mode, it is possible to connect to one ore more remote access-points. The system will switch to the next network in the list in case one goes down and return to the highest-prioritized network as soon as it comes back. You can perform a WLAN network scan and pick the settings from the discovered information directly. The authentication credentials have to be obtained by the operator of the remote access point.

Parameter SSID Security mode WPA mode
WPA cipher
Identity Passphrase
Force PMF Enable fast transition
Required signal strength

WLAN Client Configuration The network name (called SSID)
The desired security mode
The desired encryption method. WPA3 should be preferred over WPA2 and WPA1
The WPA cipher to be used, the default is to run both (TKIP and CCMP)
The identity used for WPA-RADIUS and WPA-EAP-TLS
The passphrase used for authentication with WPA-Personal, otherwise the key passphrase for WPA-EAP-TLS
Enables Protected Management Frames
If client, enable fast roaming capabilites via FT. FT is only performed if the AP supports this feature, too
Required signal strength to esablish the connection

The client is performing background scans for the purpose of roaming within an ESS. The background scans are based on the current signal strenght.

Parameter Threshold
Long interval
Short interval

WLAN Client Background Scan Parameters
The signal strength threshold in dBm when the long or short time interval should occur
The time in seconds when a background scan should be performed if the threshold is above the given threshold value
The time in seconds when a background scan should be performed if the threshold is below the given threshold value

NB2800

User Manual for NRSW version 4.8.0.102

Running in access-point mode you can create up to 8 SSIDs with each running their own network configuration. The networks can be individually bridged to a LAN interface or operate as dedicated interface in routing-mode.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

LOGOUT

WLAN Access-Point Configuration

Interface

SSID

WLAN1

NB1600-Private

Security Mode WPA / Cipher

WPA-PSK

WPA + WPA2 / TKIP + CCMP

Figure 5.18.: WLAN Configuration

NB2800

User Manual for NRSW version 4.8.0.102

This section can be used to configure security-related settings.

Parameter

WLAN Access-Point Configuration

SSID

The network name (called SSID)

Security mode

The desired security mode

WPA mode

The desired encryption method. WPA3 + WPA2 mixed mode should be preferred

WPA cipher

The WPA cipher to be used, the default is to run both (TKIP and CCMP)

Passphrase

The passphrase used for authentication with WPA-Personal.

Force PMF

Enables Protected Management Frames

Hide SSID

Hides the SSID

Isolate clients

Disables client-to-client communication

Band steering master

The WLAN interface which the client should be steered to

Opportunistic Wireless En- The WLAN interface for a seamless transition from an OPEN WLAN

cryption transition

to an OWE encrypted WLAN interface

Accounting

Sets accounting profile

The following security modes can be configured:

Parameter Off None WEP WPA-Personal
WPA-Enterprise
WPA-RADIUS
WPA-TLS
OWE

WLAN Security Modes
SSID is disabled
No authentication, provides an open network
WEP (is nowadays discouraged)
WPA-Personal (TKIP, CCMP), provides password-based authentication
WPA-Enterprise in AP mode, can be used to authenticate against a remote RADIUS server which can be configured in chapter 5.8.2
EAP-PEAP/MSCHAPv2 in client mode, can be used to authenticate against a remote RADIUS server which can be configured in chapter 5.8.2
EAP-TLS in client mode, performs authentication using certificates which can be configured in chapter 5.8.8
Opportunistic Wireless Encryption alias Enhanced OPEN provides encryption WLAN without any authentication

NB2800

User Manual for NRSW version 4.8.0.102

Running in mesh point mode, it is possible to connect to one or more mesh points within the mesh network at the same time. The system will automatically join the wireless network, connect to the other mesh partners with the same ID and sercurtiy credentials. The authentication credentials have to be obtained by the operator of the mesh network.

Parameter

WLAN Mesh-Point Configuration

MESHID

The network name (called MESHID)

Security mode

The desired security mode

enable gate announcements To enable gate announcments for the mesh network

NB2800

User Manual for NRSW version 4.8.0.102

The following security modes can be configured:

Parameter Off None SAE

WLAN Mesh-Point Security Modes MESHID is disabled No authentication, provides an open network SAE (Simultaneous Authentication of Equals) is a secure passwordbased authentication and key establishment protocol

NB2800

User Manual for NRSW version 4.8.0.102

WLAN IP Settings
This section lets you configure the TCP/IP settings of your WLAN network. A client and mesh point interface can be run over DHCP or with a statically configured address and default gateway.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WLAN1 IP Settings Network mode: IP address: Netmask:

Apply

Continue

bridged routed 192.168.200.1 255.255.255.0

LOGOUT

Figure 5.19.: WLAN IP Configuration

The access point networks can be bridged to any LAN interface for letting WLAN clients and Ethernet hosts operate in the same subnet. However, for multiple SSIDs we strongly recommend to set up separated interfaces in routing-mode in order to avoid unwanted access and traffic between the interfaces. The corresponding DHCP server for each network can be configured in afterwards as described in chapter 5.7.2.

Parameter Network mode
Bridge interface
IP address / netmask

WLAN IP Settings
Choose whether the interface shall be operated bridged or in routingmode
If bridged, the LAN interface to which the WLAN network should be bridged
In routing-mode, the IP address and netmask for this WLAN network

NB2800

User Manual for NRSW version 4.8.0.102

The following feature can be configured if the WLAN interface is bridged

Parameter 4addr frame IAPP Pre-auth
Fast transition

WLAN Bridging features
Enables the 4-address frame format (required for bridge links)
Enables the Inter-Access Point Protocol feature
Enables the pre-authentication mechanism for roaming clients (if supported by the client). Pre-auth is only supported with WPA2Enterprise with CCMP
Enables fast transistion (FT) capabilities for roaming client (if supported by the client)

The following fast transistion parameters can be configured

Parameter Mobility domain Preshared key Fast transition clients only

WLAN Bridging features The mobility domain of the FT network The PSK for the FT network If enabled, the AP will only accept clients that support FT

NB2800

User Manual for NRSW version 4.8.0.102

5.3.5. Software Bridges
Software bridges can be used to bridge layer-2 devices like OpenVPN TAP, GRE or WLAN interfaces without the need for a physical LAN interface.
Bridge Settings This page can be used to enable/disable software bridges. It can be configured as follows:

Parameter Administrative status IP Address Netmask MTU

Bridge Settings
Enables or disables the bridge interface. If you need an interface to the local system you need to define an IP address for the local device.
IP address of the local interface (available only if “Enabled with local interface” was selected
Netmask of the local interface (available only if “Enabled with local interface” was selected
Optional MTU size for the local interface (available only if “Enabled with local interface” was selected

NB2800

User Manual for NRSW version 4.8.0.102

5.3.6. USB
NetModule routers ship with a standard USB host port which can be used to connect a storage, network or serial USB device. Please contact our support in order to get a list of supported devices.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Administration USB Administration

Devices

Autorun

This menu can be used to activate USB-based serial and network devices.

Administrative status:

enabled disabled

Enable hotplug:

Apply

LOGOUT

USB Administration
Parameter Administrative status Enable hotplug

Figure 5.20.: USB Administration
USB Administration Specifies whether devices shall be recognized Specifies whether device shall be recognized if plugged in during runtime or only at bootup

NB2800

User Manual for NRSW version 4.8.0.102

USB Devices
This page shows the currently connected devices and it can be used to enable a specific device based on its Vendor and Product ID. Only enabled devices will be recognized by the system and raise additional ports and interfaces.

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Administration

Devices

Autorun

Connected USB Devices Vendor ID Product ID Bus ID Manufacturer

Device

Enabled USB Devices Vendor ID Product ID Bus ID Module

Type

Refresh

LOGOUT
Type Attached

Figure 5.21.: USB Device Management

Parameter Vendor ID Product ID Module

USB Devices The USB Vendor ID of the device The USB Product ID of the device The USB module and type of driver to be applied for this device

Any ID must be specified in hexadecimal notation, wildcards are supported (e.g. AB[0-1][2-3] or AB*) A USB network device will be referenced as LAN10.

NB2800

User Manual for NRSW version 4.8.0.102

5.3.7. Serial This page can be used to manage your serial ports. A serial port can be used by:

Parameter none login console
device server modem bridge modem emulator
SDK

Serial Port Usage
The serial port is not used
The serial port is used to open a console which can be accessed with a serial terminal client from the other side. It will provide helpful bootup and kernel messages and spawns a login shell, so that users can login to the system. If more than one serial interface is available, one serial interface can be configured as ‘login console’ at a time.
The serial port will be exposed over a TCP/IP port and can be used to implement a Serial/IP gateway.
Bridges the serial interface to the Modem TTY of an intergrated WWAN Modem.
Emulates a classical AT command driven modem on the serial interface. See http://wiki.netmodule.com/app-notes/hayes-modemat-simulator for detailed information.
The serial port will be reserved for SDK scripts.

NB2800

User Manual for NRSW version 4.8.0.102

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

Administration

Port Settings

SERIAL1 is used by:

Apply

Back

none login console device server modem emulator SDK

Figure 5.22.: Serial Port Administration

LOGOUT

NB2800

User Manual for NRSW version 4.8.0.102

Running a device server, the following settings can be applied:

HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM

WAN Link Management Supervision Settings
Ethernet Port Setup VLAN Management IP Settings
Mobile Modems SIMs Interfaces
WLAN Administration Configuration IP Settings
Bridges USB Serial Digital I/O GNSS
NetModule Router Simulator Hostname NB1600 Software Version 4.4.0.103 © 2004-2020, NetModule AG

Administration

Port Settings

SERIAL1 Port Settings

Physical protocol: Baud rate: Data bits: Parity: Stop bits: Software flow control: Hardware flow control: Server Configuration Protocol on IP port: Port:
Timeout: Allow remote control (RFC 2217): Show banner:
Allow clients from:

Apply

RS232 115200 8 data bits None 1 stop bit None None

Telnet

2000

endless

numbered

600

everywhere specify

Figure 5.23.: Serial Port Settings

LOGOUT

Parameter Physical protocol Baud rate Data bits Parity Stop bits
NB2800

Serial Settings Selects the desired physical protocol on the serial port Specifies the baud rate run on the serial port Specifies the number of data bits contained in each frame Specifies the parity used for every frame that is transmitted or received Specifies the number of stop bits used to indicate the end of a frame

User Manual for NRSW version 4.8.0.102

Parameter Software flow control
Hardware flow control Protocol on TCP/IP Port Timeout

Serial Settings
Defines the software flow control for the serial port, XOFF will send a stop, XON a start character to the other end to control the rate of any incoming data
You may enable RTS/CTS hardware flow control, so that the RTS and CTS lines are used to control the flow of data
You may choose the IP protocols Telnet or TCP raw for the device server
The TCP port for the device server
The timeout until a client is declared as disconnected

Parameter Protocol on IP port Port Timeout
Allow remote control Show banner Stop bits Allow clients from

Server Settings Selects the desired IP protocol (TCP or Telnet) Specifies the TCP port on which the server will be available The time in seconds before the port will be disconnected if there is no activity on it. A zero value disables this function. Allow remote control (ala RFC 2217) of the serial port Show a banner when clients connect Specifies the number of stop bits used to indicate the end of a frame Specifies which clients are allowed to connect to the server

Please note that the device server does not provide authentication or encryption and clients will be able connect from everywhere. Please consider to restrict access to a limited network/host or block packets by using the firewall.
When running the serial port as AT modem emulator the following settings can be applied:

Parameter Physical protocol Baud rate Hardware flow control

Serial Port Settings Selects the desired physical protocol on the serial port Specifies the baud rate run on the serial port You may enable RTS/CTS hardware flow control, so that the RTS and CTS lines are used to control the flow of data

Parameter Port

Incoming connections via Telnet The TCP port for the device server

Parameter Number

Phonebook Entries Phone number that will get an alias

NB2800

User Manual for NRSW version 4.8.0.102

Parameter IP address Port

Phonebook Entries IP address the number will become Port value for the IP address

NB2800

User Manual for NRSW version 4.8.0.102

5.3.8. Audio

Audio Administration This page can be used to pre-configure the audio module. It can be later used for the voice gateway. It can be configured as follows:

Parameter Volume level

Audio Settings Default volume level for line-out

Audio Testing This page can be used to play or record an audio sample. For playback test a 2ch, 44100hz, 16bit wav-file can be uploaded.

NB2800

User Manual for NRSW version 4.8.0.102

5.3.9. GNSS

Configuration
The GNSS page lets you enable or disable the GNSS modules present in the system and can be used to configure the daemon that can be used to share access to receivers without contention or loss of data and to respond to queries with a format that is substantially easier to parse than the NMEA 0183 emitted directly by the GNSS device.
We are currently running the Berlios GPS daemon (version 3.15), supporting the new JSON format. Please navigate to http://www.catb.org/gpsd/ for getting more information about how to connect any clients to the daemon remotely. The position values can also be queried by the CLI and used in SDK scripts.

Parameter Administrative status Operation mode Antenna type Accuracy
Fix frame interval

GNSS Module Configuration
Enable or disable the GNSS module
The mode of operation, either standalone or assisted (for A-GPS)
The type of the connected GPS antenna, either passive or actively 3 volt powered
The GNSS receiver compares the calculated position accuracy based on the satellite information and compares it with this accuracy threshold in meters. If the calculated position accuracy is better than the accuracy threshold, the position is reported. Adjust this parameter to a higher threshold in case the GNSS receiver does not report a position fix, or when it takes a long time to calculate a fix. This could be caused when there is no clear sky view of the GNSS antenna which is the case in tunnels, beside tall buildings, trees, and so on.
The amount of time to wait between fix attempts

If the GNSS module does support AssistNow and the operation mode is assisted the following configuration can be done:

Parameter Primary URL Secondary URL

GNSS Assisted GPS Configuration The primary AssistNow URL The secondary AssistNow URL

Information about AssistNow: If you have a lot of devices in the field that use the AssistNow service, please consider creating your own AssistNow token at http://www.u-blox.com. If there are too many requests per time, the service may not work as expected. If you have further questions, please contact our support.

Parameter Server port

GNSS Server Configuration
The TCP port on which the daemon is listening for incoming connections

NB2800

User Manual for NRSW version 4.8.0.102

Parameter Allow clients from
Clients start mode

GNSS Server Configuration
Specifies where clients can connect from, can be either everywhere or from a specific network
Specifies how data transferal is accomplished when a client connects. You can specify on request which typically requires an R to be sent. Data will be sent instantly in case of raw mode which will provide NMEA frames or super-raw which includes the original data of the GPS receiver. If the client supports the JSON format (i.e. newer libgps is used) the json mode can be specified.

Please consider to restrict access to the server port, either by a specifying a dedicated client network or by using a firewall rule.

Information about Dead Reckoning: If you have a device which supports Dead Reckoning, please consult the GNSS Dead Reckoning installation guide for further information or please contact our support.

NB2800

User Manual for NRSW version 4.8.0.102

Position This pages provides further information about the satellites in view and values derived from them:

Parameter Latitude Longitude Altitude Satellites in view Speed
Satellites used
Dilution of precision

GNSS Information The geographic coordinate specifying the north-south position The geographic coordinate specifying the east-west position The height above sea level of the current location The number of satellites in view as stated in GPGSV frames The horizontal and vertical speed in meter per second as stated in GPRMC frames The number of satellites used for calculating the position as stated in GPGGA frames The dilution of precision as stated in GPGSA frames

Furtheron, each satellite also comes with the foll

Documents / Resources

HIRSCHMANN NB2800 NetModule Router [pdf] User Manual
NB2800 NetModule Router, NB2800, NetModule Router, Router

References

User Manual

HIRSCHMANN NB2800 NetModule Router

Product Information

Product Usage Instructions

FAQs

Welcome to NetModule

Conformity

Specifications

Installation

Configuration

Documents / Resources

References

Leave a comment

Cancel reply