Objective 

 Quartz Routers series use a combination of Router and cellular module firmware to function. Router firmware can be updated by following the application note “How to upgrade a Siretta Router Firmware Application Note” 

Updating Router Module Firmware has been a complex one that involves opening of Router casing, removing PCB assembly, detaching the Module, plugging the Module into a USB adapter to update firmware using a tool called QFLASH. A lengthy procedure requiring Siretta Technical support.  

This application note allows users to remotely update the Module inside Siretta Router Quartz series using efficient and non-invasive procedure without disassembling the unit. 

 For remote AT over IP access, the sim card inside Siretta Router must be a fixed public IP address or private fixed IP address with the VPN connection and Router must be configured locally first to accept remote access.  

 More information about IP addresses can be found from the following application note Siretta Products IP Addresses Explained Application Note  

Solution 

DFOTA – Stands for Delta Firmware Update Over-The-Air. DFOTA allows users to update Router Module firmware using cellular network. Router is set to AT over IP mode where AT command AT+QFOTADL is issued to initiate the update process and point to a location where delta firmware is stored. 

Delta firmware file can be either stored in a remote HTTPS/HTTP/ FTP server or in a local file system.  This application note covers the procedure where delta firmware file is stored in a local file system. 

Requirements  

 Siretta Quartz Series Router (for this application QUARTZ-GOLD-11-LTE (EU) was used) 

• Windows 11 Laptop with Tera Term Version 4.96 or above (Tera Term can be downloaded from the following link – Tera Term Link ). 

• Location where Delta Firmware file is stored. 

• Fixed Public IP address /Fixed Private IP address sim with the OpenVPN. 

• For this guide Private Fixed IP address of 10.188.232.13 with the OpenVPN client was used. 

• OpenVPN client setting was provided by a sim provider and installed to Windows 11 Laptop. 

Demonstration of Solution 

 Follow Router Quick Start Guide for initial Router settings. 

1. Wait for the Router to connect to the cellular network. 

1. Confirm that Router has received IP addresses (See below). 

 Note 1:

• IP address of 10.188.232.13 shown above, is the IP address that will be used to remotely access AT over IP using OpenVPN client.
• If sim card with fixed public IP address been used, then fixed public IP address will be used for AT over IP without needing to use OpenVPN client.
4. Open AT Command over Internet Protocol Router Guide
5. Follow steps 1 to 22 of the AT Command over Internet Protocol Router Guide.

Note 2:
• Local Router IP address in AT Command over Internet Protocol Router Guide is 172.168.1.1 which is different from the local Router IP address used in this guide 192.168.1.1.
• In step 12 of AT command over Internet Protocol Guide replace 172.168.1.1 with 10.188.232.13 and continue to step 22 of the guide.

6. Navigate to the AT over IP page from Router GUI to confirm that all settings are saved as shown below.

7. You have now set AT over IP.

Enabling Remote Access

8. Navigate to Administration Tab in Router GUI.
9. Select Admin Access Tab.
10. Enable Remote Access (HTTP).
11. Check “Allow Telnet Remote Access” box (see below page).

12. Click Save.
13. You will see a message displaying “The settings changed, some settings will take effect after the Router reboots”. Reboot Now
14. Click Reboot Now.
15. Wait for the Router to complete reboot cycle.

16. Navigate to Firewall tab from Router GUI.
17. Select IP/URL Filtering.
18. Allow any traffic to 10.188.232.13 and Port 5400 (see below).

19. Click OK.
20. You will see settings as below.

21. Click Save tab.
22. Wait for setting to be saved.
23. You have now configured Router to accept remote connection.
24. Confirm that laptop is connected to the OpenVPN Server (See below).
25. Below is the OpenVPN status page, showing laptop is connected to the server and assigned IP.

26. Use laptop connected to the OpenVPN to launch Tera Term Window (See below).

27. Select “TCP/IP “radio button.
28. In host field type IP address of “10.188.232.13” (Private IP address of the sim card inside Router).
29. Select “Other” in a service field.
30. Enter port number of “5400” in TCP port#: field
31. Select “IPV4” from IP version drop down menu.
32. Once all details are filled, settings will look like one below.

33. Click OK.
34. You will be presented with Tera Term window below.

35. You have now established connection with the cellular module inside the Router using fixed private IP address and VPN.
36. Issue the following AT commands to query modem before DFOTA process.
37. Issue AT– to Check AT communication.

38. Receive OK if there is communication between PC and Module inside Router else contact support@siretta.com
39. Issue AT+QGMR to receive full current firmware version.

40. Full current firmware version is EC25EUXGAR08A15M1G_20.200.20.200

Delta Firmware location

41. From Laptop / your PC file explorer Locate path for Delta Firmware package location.
42. For this guide the firmware file is located at C:\Users\Omari Hussein\Downloads\ dfota1.zip.
43. Issue the following at command AT+QFUPL=”dfota1.zip”,14026912,500 to prepare module to accept firmware file with size of 14026912 bytes and timeout of 500.
44. Receive “CONNECT” when successful.

45. Click file.
46. Select Send File.
47. You will receive Tera Term: Send File (See below).

48. Search firmware file name “dfota1.zip” and select it.
49. Select “Binary” check box.

50. Click open tab.
51. File will be sent to the module with displayed progress bar as seen below.

52. Once file transfer is complete, you will receive confirmation as below.

53. You have now uploaded firmware file to the Module flash storage.
54. Issue the following at command to double check file in the list AT+QFLST=”*”
55. Receive +QFLST: “UFS:dfota1.zip”,14026912. If successful downloaded otherwise use AT+QFDEL=”UFS:*” to delete any partial file loaded and repeat steps 43 to 54 above.
56. Issue the following at command AT+QFOTADL=”/data/ufs/dfota1.zip” to initiate firmware update from module flash.
57. Update progress will start.
58. Update progress can be seen on Router logs (see below).

59. FOTA”,”END”,0^M^M indicate that the process is complete and Router firmware update is successful.

Note 3: – If you receive any other number than “0” after “END” contact support@siretta.com with returned error.

60. Reboot Router.
61. Wait for a reboot cycle to complete.
62. Router now is ready with the latest firmware.
63. You can double check the current firmware by using at command AT+QGMR

Note: During remote firmware update make sure the SIM card has enough cellular data to avoid connection loss during uploading firmware package from the local PC to the module of the remote Router.

If you encounter any problem during firmware update or following this guide, please contact support@siretta.com

Additional Reading

The post Updating QUARTZ Router Module Firmware Over-The-Air (Remotely) appeared first on Siretta Limited.

What is ZeroTier?

ZeroTier is a software that creates a virtual private network (VPN) solution.

ZeroTier VPN supports client to client communication, where several clients are connected to the central server and securely communicate with each other using end to end encryption.

ZeroTier client is compatible with Window 11, Android, MacOS, Linux, Raspberry Pi and Docker Operating Systems.

Objective 

This application note shows how to configure and use a QUARTZ router as a ZeroTier client. The Zero Tier server to which it is connecting is running on another platform. VPN traffic  is not passing through a server. The purpose of server is to match clients.  

The most likely reason a VPN is used in the context of an industrial router is to allow secure remote access to a corporate network and allow encrypted end to end communications between clients. 

Therefore, Siretta recommends using a cabled connection between the QUARTZ 5G router and the devices connected to it (the routers clients) when using a VPN to minimise the possibility that this connection be intercepted or monitored. 

ZeroTier makes it quite easy to set up and use a VPN tunnel.  

Solution 

When Zerotier client is installed and configured to any device with a compatible operating system, the device can directly and securely communicate with the Siretta router using its IP address, when they are connected to the same network using Zerotier VPN. 

In this application note Zerotier client is installed and configured in a Windows 11 laptop and communicates with built-in Zerotier client in the Siretta router. 

Requirements  

• Window 11 Laptop – (Client) 

• QUARTZ-ONYX-W42-5G (GL) – (Client) 

Demonstration of Solution 

1. Follow router quick start guide for initial router settings.
2. Wait for the router to connect to the cellular network.
3. Confirm that router has received IP addresses (See below).

4. Follow ZeroTier Quick Start Guide to create a new account if you don’t have one.
5. Once an account is created you will be presented with the following page.

6. Take a note of a Network ID (5b6e887e28f64f9 for this setting).
Note: You may have a different network ID depending on your settings.

7. In basic setting you can name your network to a name of your choice. For this setting “Testing Siretta Router” was used.
8. In the description box, you can add any description to reflect the purposes of your network.
9. For this setting description of “Siretta Router is a ZeroTier client” was used.
10. After adding the information above, the page will look like:

11. Check “Private” radio button in Access Control.
Note: This setting will allow client to be authorised first before joining the network (See below).

12. Other setting is Public where client can join to the network just by using network ID without authorisation.
Note: For security reasons Siretta does not recommend setting network as Public.

13. Click advanced settings IP4.
14. Check Auto -Assign from range box.
15. Select Easy option (see below).
16. Select IP address range of your choice.
Note: For this guide setting of “192.168.191.*” was selected.

17. Leave the settings for IPv6 Auto-Assign unchanged.
Note: Siretta Router does not have a support for IPv6.

18. Leave the settings for DNS unchanged.

19. Setting for a network is now complete.
20. Clients can be added to the network by using Network ID: 45b6e887e28f64f9.
Note: If you have encountered any problem during network settings, please see “Settings Help” section or contact Siretta support support@siretta.com

Adding Clients to a Network

Adding Siretta Router to a ZeroTier Network

21. In Siretta router GUI navigate to VPN tab (See below).

22. Click Zerotier tab.

Note: If the Zerotier tab is not present in your router then you may have an older firmware version contact support@siretta.com for firmware update.

23. You will be presented with the screenshot below.

Note: Current settings do not use the following parameters Zerotier Moon Network ID, Allowed NAT, Zerotier Moon, Zerotier Moon IP, Zerotier Moon ID, Custom Planet and Uploading Planet File, these parameters are reserved for users who create and host their own Zerotier server.

24. Check Zerotier Client box.
25. Add Zerotier World Network ID.

26. Click Save.
27. Wait for about 10 seconds for service to restart.
28. You have successfully added router to Zerotier server.
29. Confirm that router is added to Zerotier user interface (See below).

30. Router is added to the network but no authorised to use network service.
31. Click Edit tab, you will see screenshot below.

32. Check Authorised box to Authorize device to join and use network service.
33. Add name of your choice, for this setting “QUARTZ-ONYX-W42-5G (GL)” was used.
34. Add description preferred to your settings, for this example “Siretta Router “was used.
35. Click Save button.
36. You have successfully authorised the Siretta Router to join the network (See Below).

37. Refresh ZeroTier user interface to see new device is added to the network and has been given a local IP address.

38. QUARTZ-ONYX-W42-5G (GL) was assigned an IP address of 192.168.191.249, this IP address can be used to communicate with other clients added to the same network.
39. Navigate to Basic Network settings in a router GUI.
40. Select Routing tab, you will see ZeroTier route as seen below.

41. QUARTZ-ONYX-W42-5G (GL) is now added to the Zerotier Server and can be accessed using IP address of 192.168.191.249 by another client connected to a same network.

Adding Window 11 Laptop to a ZeroTier Network42.

Download Zero Tier to your PC depending on your operating system, for this setting Microsoft Windows was downloaded

43. Run ZeroTier One.msi installer to your PC
44. Click Install.

45.Click Finish.
46. You have successfully installed ZeroTier Client to the Window 11 laptop.

47. Right Click Zerotier icon in system tray

48. You will be presented with the following menu.

49 .Click Join network, you will be presented with dialog box below to enter 16-digits Network ID.

50. Enter Network ID, which is 45b6e887e28f64f9 for this setting.

51.Click Join
52. You have now added Window 11 laptop as a client to Zerotier Server.
53. Open View Network connection in the laptop, you will see Zerotier network is added.

54. Confirm that Laptop is added to a server in a Zerotier user interface (See below).

55. Laptop is added but not authorised to use network service.
56. Authorise Laptop by clicking edit check box.

57. Check Authorised check box above.
58. Add laptop name of your choice, for this setting “Window 11 Laptop” was used.
59. Add description of your choice, for this setting Laptop Client was used (See below).

60. Click Save.
61. Laptop now is authorised and added to a network.

62. Check on Zerotier user interface, you will see Window 11 Laptop added to the member list as seen below.

63. Window 11 Laptop is successfully added to the Zerotier server with the local IP address of 192.168.191.174.
Testing communication between ZeroTier clients.
64. Use Window 11 Laptop to ping QUARTZ-ONYX-W42-5G (GL) by using an IP address of 192.168.191.249.

65. Ping was Successful, Window 11 Laptop can communicate with QUARTZ-ONYX-W42-5G (GL).
66. You can use Window 11 Laptop to manage QUARTZ-ONYX-W42-5G (GL).
67. Use QUARTZ-ONYX-W42-5G (GL) to ping Window 11 Laptop by using an IP address of 192.168.191.174.(See below).

68. Ping was Successful, QUARTZ-ONYX-W42-5G (GL) can communicate with Window 11 Laptop.

Additional Reading

The post Using ZeroTier VPN as a client with QUARTZ routers appeared first on Siretta Limited.

This document will use ‘QUARTZ 5G router’ to mean any of the above routers.

Objective

This application note sets out how to configure and use a QUARTZ 5G router as a WireGuard client. The WireGuard server to which it is connecting is running on another platform. There are many hosted VPNs available that use WireGuard such as Surfshark, NordVPN and PureVPN, and some of these such as Mullvad and Mozilla VPN offer no other VPN protocols except WireGuard.

The most likely reason a VPN will be used in the context of an industrial router is to allow secure remote access to a corporate network. The reader is reminded that the WireGuard VPN makes the path between the QUARTZ 5G router and the remote WireGuard server secure. If Wi-Fi connectivity is used to connect to the router, this part of the transmission path is not secured. Therefore, Siretta recommends using a cabled connection between the QUARTZ 5G router and the devices connected to it (the routers clients) when using a VPN to minimise the possibility that this connection be intercepted or monitored.

WireGuard makes it quite easy to set up and use a VPN tunnel. The way that WireGuard works makes this quite straightforward. This application note will guide the user through this straightforward process.

Solution

Originally developed for Linux in 2019, WireGuard now supports all major Operating Systems including Windows, macOS, iOS and Android. Its footprint is small (around 4,000 lines of code) making it very easy to embed into applications. It is UDP based and works by creating layer 3 secure network tunnels.

Note: When setting up a VPN on a QUARTZ 5G router, if setup errors occur there is the possibility that the user could lock themselves out of the router. This can be resolved by using the reset switch on the unit, but then the user will be back to factory settings and must set up the non-VPN parts of the router again. Before altering the VPN settings, it is suggested that the current working settings be saved as the user default configuration. Then, a press of the reset switch will cause a hardware reboot with current settings.

For clarification, the duration of reset press in Quartz 5G router results as follows:
• 2-10 seconds Router reboot with current settings
• 10-30 seconds Router reboot with custom reset configuration loaded.
• 30 or more seconds Router reboot with factory default configuration loaded.

Starting Point

This application unit assumes that the user has connected the QUARTZ 5G router to the Internet (either via Cellular, WAN or the Wi-Fi connection) but that otherwise the router is at factory default settings.

Since the QUARTZ 5G router will be setup as the client, it does not need to have a fixed IP address. If the WireGuard tunnel uses the cellular network to obtain an Internet connection, a regular SIM card with suitable data allowance may be used. However, the public IP address of the WireGuard Server to which the QUARTZ 5G router is establishing a VPN tunnel must be known.

Note: Settings shown in the screenshots are real and used to configure a real tunnel for this application note. However, please do not copy them – the VPN tunnel has now been deleted from our server and our public IP address has been masked for security reasons.

QUARTZ 5G router WireGuard client settings

Find the QUARTZ 5G router WireGuard setup page by navigating to VPN Tunnel > Wireguard:

Enable WireGuard VPN and set the mode to client as shown above, and press save to store the settings.

To set up the WireGuard VPN tunnel, settings for the following fields need to be obtained and populated:

All of the above settings will be derived from the WireGuard server configuration.

Once the WireGuard VPN tunnel has been set up, the routes using the WireGuard VPN tunnel need to be set up. No traffic will use the VPN tunnel unless instructed to do so. The following fields need to be considered and populated to meet the user’s routing requirements:

Note: The settings for each WireGuard VPN tunnel are unique and must not be used for more than one tunnel. So, if a WireGuard Server has six clients, then there must be six unique sets of keys and tunnel IP addresses.

Obtaining the WireGuard VPN tunnel settings

There are many platforms on which a WireGuard server can run, and as such it is impossible to detail how the settings are obtained from every system. Siretta uses a Unifi Dream Machine Pro, so this application note will demonstrate the process to obtain the WireGuard VPN tunnel settings required to set up a QUARTZ-5G router WireGuard client. Most WireGuard servers will generate a configuration file for the client when the tunnel is created, and the Unifi Dream Machine Pro is typical of these.

Unifi Dream Machine Pro as WireGuard VPN server

To add a new client to an existing setup, navigate to the screen shown and click the ‘Add Client’ button to add a new client:

In the Add WireGuard Client window that pops up, add a name for the tunnel (default name is client <n>). The keys and other connection information is automatically generated (or it is possible to select Manual to set these yourself – not recommended). Download the configuration file and then click ‘Add’ to finalise this tunnel configuration. Add any further WireGuard VPN tunnels required, and then click ‘Apply Changes’ at the bottom to save all the tunnel configurations added. Only once the changes have been applied will the tunnels be stored and become active, otherwise the additions will be lost.

The (.conf) configuration file downloaded from the Unifi Dream Machine Pro WireGuard server is of this format:
[Interface] PrivateKey = IKlCPSFUN41JH1urIrwqqdrC0tNMW0yrMW6rBRux+HA=
Address = 192.168.3.5/32
DNS = 192.168.3.1

Here is how the fields from this file map to QUARTZ 5G router WireGuard client configuration fields:

Persistent Keepalive

The WireGuard protocol does not normally send any packets unless there is data to be sent. There is no periodic chatter of any sort. When there is no firewall or NAT, this works just fine. But the QUARTZ 5G router has a firewall and does use NAT. This means that the router must keep track of connections. To prevent connections from being closed if there is no traffic then the Persistent Keepalive field needs a setting that will generate some data to keep the connection open.

The recommended value to enter for this field is 25 (meaning send a keepalive packet every 25 seconds). Setting Keepalive to 0 turns keepalive packets off.

Routing traffic through the WireGuard VPN tunnel

Creating a WireGuard VPN tunnel does not mean that data will automatically be routed through the WireGuard VPN tunnel. By default, no traffic will pass through the WireGuard VPN tunnel unless rules are created to make this happen. Two settings control this routing. Allowed IPS and Peer Subnet IP/Mask.

Allowed IPS

This is an outgoing traffic firewall. Unless there is a very special set of circumstances, this field should be populated with 0.0.0.0/0 which means that all IP traffic is allowed to egress the router. Traffic being allowed to egress the router does not mean that it will egress through the WireGuard VPN tunnel. The Peer Subnet/IP Mask controls that.

Peer Subnet IP/Mask

This defines the traffic that will pass through the WireGuard VPN tunnel. There are two cases for the WireGuard VPN tunnel:
• Passing all traffic through the tunnel.
• Passing only the traffic intended for the corporate network running the WireGuard server.

To pass all traffic through the WireGuard VPN tunnel, use 0.0.0.0/0 for the Peer Subnet IP/Mask field. All IP traffic passes through the WireGuard VPN tunnel. Routing rules of the WireGuard VPN server gateway will then apply to this IP traffic after it has traversed the VPN tunnel. In most situations this will mean that the QUARTZ 5G router traffic reaching the Internet through the tunnel will appear to have originated from the WireGuard VPN servers public IP address (i.e. the Peer IP address entered in the WireGuard client setup).

To pass corporate network traffic only down the VPN tunnel, enter the IP address/mask of the corporate network subnet(s) here. If multiple subnets need to be specified, separate them with a comma and make sure that there are no spaces in the string. The IP address of the VPN tunnel should be included. For the example configuration where the IP address of the VPN tunnel is 192.168.3.5, then 192.168.3.5/32 would route only traffic for 192.168.3.5 down the VPN tunnel. But the overall corporate network may use the larger 10.0.0.0 subnet, in which case using 192.168.3.5/32,10.0.0.0/8 would route 192.168.3.5 and any 10.0.0.0 address (10.0.0.0 – 10.255.255.255) through the VPN tunnel. Any other IP address would be routed according the 5G router’s routing table and Internet traffic would appear to originate from the 5G router’s WAN connection (usually the public IP address of the cell tower connected to it).

Demonstration of Solution

Example: All traffic down the WireGuard VPN tunnel

Configure the QUARTZ 5G router as below. Keys and IP addresses are those from the server configuration examples – please replace with settings from your WireGuard VPN server. Remember to click ‘save’ to apply the settings.

The routing table shows the local subnet 192.168.1.0/24 routed to the local LAN port; 10.74.176.205 is the gateway (shown on the router status page); and all other traffic following the default route to the WireGuard interface, wg0.

Example: VPN tunnel IP address traffic only down WireGuard VPN tunnel

Configure the QUARTZ 5G router as below. Keys and IP addresses are those from the server configuration examples – please replace with settings from your WireGuard VPN server. Remember to click ‘save’ to apply the settings.

The routing table shows the local subnet 192.168.1.0/24 routed to the local LAN; 192.168.3.5 routed to the WireGuard interface wg0; and 10.74.176.205 is the gateway (shown on the router status page).

Example:10.0.0.0/8 and VPN tunnel IP address traffic only down WireGuard VPN tunnel

Configure the QUARTZ 5G router as follows. Keys and IP addresses are those from the server configuration examples – please replace with settings from your WireGuard VPN server. Remember to click ‘save’ to apply the settings.

The routing table shows the local subnet 192.168.1.0/24 routed to the local LAN; 192.168.3.5 and 10.0.0.0/8 routed to the WireGuard interface wg0; and 10.74.176.205 is the gateway (shown on the router status page)

Additional Reading

Appendix 1: WireGuard Protocol Explanation

WireGuard is a protocol that implements simple yet secure manner a secure VPN tunnel operating at layer 3 (Network layer) of the OSI model.

With WireGuard, the ports used at each end of the tunnel are always the same. The port used is specified as part of the WireGuard server setup.

The post Using WireGuard as a client with a QUARTZ 5G router appeared first on Siretta Limited.

ZETA Cellular Modems

SENTRY Cellular Survey Loggers

SL500 Cellular Serial Gateways

QUARTZ Routers

Objective

This application note provides a list of the Public Access Point Name (APN), MCC/MNC, Username and password settings for most popular cellular networks used in a number of countries.

Solution

Siretta products ZETA, SENTRY, SL500 and QUARTZ Routers use SIM cards provided by cellular networks. For a cellular network connection APN detail must be configured correctly.

Quick Start Guide for ZETA, SENTRY, SL500 and QUARTZ Routers explains how to configure APN details for each device.

Demonstration of Solution

Tables below shows list of the public APN details by country.

Note: Blank username and password means that these are not required for the stated APN.

Australia

Belgium

Canada

France

Germany

Italy

Kenya

Mozambique

Norway

Poland

Spain

Switzerland

United Kingdom

United States

Note: All the APN details listed above are the public APN used to connect Siretta industrial cellular devices to a public network. APN details for a private network are provided by the SIM provider.

Additional Reading

The post Common Global APN Settings appeared first on Siretta Limited.

Objective

One major advantage of using an industrial router solution for your application is the ability to automate and manage the configuration of your devices. This can be beneficial both in the field and during device initialisation prior to production rollout. This application note explains how to automate the device update procedure using TFTP.

Solution

Router Configuration

1. Download TFTP Server from ‘https://www.solarwinds.com/free-tools/free-tftp-server/registration‘
2. Install and run TFTP Server

3. Copy CFG files into the TFTP Server root folder. (Use the appropriate saved .cfg file which was obtained directly from the router).

Note: You can save the configuration file directly from your Siretta router by going to ‘Administration’ -> ‘Configuration’. You can rename the file and then download by clicking on ‘Backup’.

4. Open CMD prompt. (Run cmd.exe from the command line on Windows OS).
CMD prompt

5. Determine the IP address assigned to the PC using ‘ipconfig’ (In figure below, the example IP address is 192.168.1.15)

6. Start Telnet by typing the following: ‘telnet x.x.x.x’ ( As below, we use the example ‘telnet 192.168.1.1’)

Note: Replace x.x.x.x with the router IP address

Starting Telnet

7. Enter router login and password (Default values are used below, but you should use login/password setup on your device)

Router login: admin
Password: admin

Enter login details

8. Initiate TFTP file transfer using the following command: ‘tftp –g –r filename.cfg x.x.x.x’

Note: Replace filename with the name of the config file to be transferred and replace x.x.x.x with the TFTP Sever IP address (The PC delivering the cfg file)

Initiate file transfer

9. The router will respond with the output shown in figure below, confirming successful transfer of the CFG file.

Successful transfer in CMD window

10. The TFTP Server window will confirm successful file transfer, as seen below in figure.

Successful transfer in TFTP window

11. Restore the router configuration file in the CMD prompt window using the following command:

cfg_restore Router_New.cfg’
Confirm router configuration type: ‘y’
Unit will confirm Reboot.

Note: Telnet connection will be lost when router reboots, shown with: ‘Connection to host lost.’

Successful transfer in TFTP window.

Definitions:

Term        Definition
CFG           Configuration Settings File Extension
CMD         Command
FTP           File Transfer Protocol
IoT            Internet of Things
IP              Internet Protocol
M2M        Machine to Machine
PC             Personal Computer
TFTP        Trivial File Transfer Protocol
OS            Operating System

Additional Reading

The post Local Router Configuration Update Using TFTP appeared first on Siretta Limited.

Objective

TFTP stands for Trivial File Transfer Protocol, a simple protocol used for file transfers. Upgrading a router’s firmware using the TFTP method is the only option when a user is not able to access the router’s webpage via a browser and therefore is unable to upgrade its firmware.

The TFTP method can be used as a recovery tool when a router becomes unresponsive as a result of an interruption during a firmware upgrade (e.g. power-cut or disconnected LAN). This is one of the many advantages offered by Siretta’s Quartz Routers.

Solution

Requirements: –

• PC
• LAN cable
• Router
• Firmware (for this guide we used “3.4.1_18-01-18” firmware)

1. Connect the router to the PC LAN port using the ethernet cable
2. Click the “window icon” from your PC to explore the Menu.
3. Select “Settings” from the start Menu.
4. Choose “Network & internet” from the “Settings” Menu.
5. Select “Ethernet” (See below).

6. Once you have selected “Ethernet” you will be presented with the screen below:

7. Click “Change adaptor option” under “Related Settings” options.
8. Once you have clicked “Change adaptor option” you will be presented with the page below.

9. Double click Ethernet.

10. Double Click “Internet Protocol Version 4 (TCP/IPv4)”.
11. Check and use:
• User “IP address”: 192.168.1.2
• “Subnet Mask”:255.255.255.0
• Leave “Default Gateway” field blank.
• Leave “DNS server addresses” fields blank.
12. Click OK (See below).

13. Connect the router to a PC using the Ethernet cable.
14. Power ON the router / Apply power source.
15. Open the Command window by typing “cmd” in the search bar. (see below).

16. Select “Run as administrator”
17. Click “Yes” when the window notification appears.

18. Command window will open (See below).

19. Issue a “Ping” Command using the following “IP address 192.168.1.1” (See below).

Note: If the Ping request times out, the router webpage (GUI) cannot be accessed for normal firmware upgrades. Double check the LAN cable to ensure it is connected properly, and not damaged, then continue.

20. Unplug the “power source” from the router.
21. Press the “RESET” button of the router and hold.
22. Plug the “power source” in whilst holding the “RESET” button.
23. Wait for about 15 seconds while holding down the “RESET” button.
24. Release the “RESET” button.
25. “Ping” the router again using continuous ping as “Ping 192.168.1.1 -t”.
26. If The “Ping” responses from the router are as seen below, then continue to the next step, otherwise contact Siretta.

27. The results above show that the router can be recovered.
28. Unplug the “power source” from the router.
29. Close the “Command window” tab.
30. Create a folder in C drive called “TFTP”.
31. Download the “TFTP tool” from http://tftpd32.jounin.net/tftpd32_download.html
32. Save the “TFTP tool” in a “TFTP folder”.
33. Copy the “router firmware” (for the router in this example this is Quartz_W22_UMTS_4.3.4.1_18-01-18.trx) to the “TFTP folder”.
34. Open the “exe” from the “TFTP folder”.
35. Select the current directory of the “TFTP”.
36. Select “0.0.1” from the “server Interfaces” drop down menu. See below.

37. Click the “Settings” tab. See below.

38. Leave all checked boxes by default.
39. Uncheck Enable IPv6 box.
40. Do not Click OK tab now.
41. Click TFTP – See below.

42. Leave all checked boxes and filled parameters by default.
43. Click “Browse” tab.
44. Select base directory “C:\TFTP”.
45. Do not click the OK tab now.
46. Click the “DHCP” tab. See below.

47. Fill in IP pool start address as “192.168.1.3”
48. Enter “Size of pool” as “200”
49. Leave “Lease” as the default value “2880”
50. Copy the “Boot File” name from the “TFTP folder” (In our example this is Quartz_W22_UMTS_4.3.4.1_18-01-18.trx
51. Enter Def. Router (Opt 3) as “192.168.1.4”
52. Enter (Mask Opt 1) as “255.255.255.0”
53. Uncheck “Ping address before assignation”.
54. Uncheck “Persistent leases”
55. See below.

56. Click “OK”.
57. Unplug the “power source” from the router.
58. Press the “RESET” button of the router and hold.
59. Plug the “power source” while holding the reset button.
60. Wait for about 15 seconds while holding down the “RESET” button.
61. Release the “RESET” button.
62. The router will enter an “automatic upgrade” mode.
63. Wait until the “upgrade” is completed.
64. Once the “upgrade” is complete, the router will automatically reboot itself.
65. You will be able to access the “router webpage” using the browser as seen below.

This application note can be used for all Siretta routers.

Any queries please contact support@siretta.co.uk

Siretta’s range of router products can be found at the following link https://www.siretta.com/industrial-Routers/

Demonstration of Solution

Additional Reading

The post TFTP Application Note appeared first on Siretta Limited.

Objective

An advantage of using a powerful industrial router is the ability to send and receive data securely over an encrypted connection. This offers a user the ability to keep data secure between two endpoints by allowing the connected equipment to send data across an encrypted network connection securely without any changes to the configuration of the equipment using well defined security protocols. This document explains how to connect the Siretta Quartz router family to a server over an OpenVPN tunnel.

Solution

The Siretta range of Industrial Routers support the followings VPN protocols:
• GRE
• OpenVPN Client
• L2TP/PPTP Client
• IPSec
Before you start the process of establishing an OpenVPN connection between a Siretta router and a server, please obtain the following details:
• OpenVPN Server IP address
• Certificate Authority, Client Certificate and Client Key
These details are available from your network administrator for your VPN server.

Note: If you do not have your VPN Server details to hand then you can obtain temporary test details from the following link ‘http://www.vpngate.net/en/‘ to allow you to check the VPN functionality of the router.

OpenVPN Server Details

The example shown below uses a set of temporary details, when opening this link on your web browser you will be presented with the following:

1. Check the OpenVPN box.
2. Click Refresh server list.
3. OpenVPN server lists will appear as shown below:

4. Select and click your choice of server from the list for the detailed configuration details including the configuration files and keys.

Configuration File
Once you have chosen a configuration file you can open the file in a text editor and you will be presented with the following information:
###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.
;http-proxy-retry
;http-proxy [proxy server] [proxy port] ###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
# cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
# RC2-40-CBC RC2-64-CBC RC2-CBC
# auth: SHA SHA1 MD5 MD4 RMD160
cipher AES-128-CBC
auth SHA1
###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
#auth-user-pass
###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer’s root certificate (CA) here.
<ca>
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
</ca>
###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.
<cert>
—–BEGIN CERTIFICATE—–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—–END CERTIFICATE—–
</cert>
<key>
—–BEGIN RSA PRIVATE KEY—–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—–END RSA PRIVATE KEY—–
</key>
###############################################################################
Note: The individual keys will be used later in the setup of the router.

Router VPN Configuration

5. Make sure your Router is connected to the internet. The ‘Internet Status’ information should be similar to the image shown below:

1. Click the VPN tunnel tab on the left hand pane of the Siretta router web interface.
2. Select OpenVPN client tab and you will be presented with a number of options.
3. Check Start with WAN box.
4. Select TUN from Interface type drop down menu.
5. Select UDP from Protocol drop down menu.
6. Enter Server IP address and port number in Server IP address / port field.
7. Choose Automatic from Firewall dropdown menu.
8. Select TLS from Authorization Mode dropdown menu.
9. Leave Username/Password Authentication box unchecked.
10. Disable HMAC authorization.
11. Leave Create NAT on tunnel unchecked.

17. Click Save.
18. Select the ‘Advanced’ tab then key in your required settings. An example is shown below:

19. Select the keys tab below then enter the key details from your OpenVPN server configuration file as shown in the OpenVPN server details.

20. Once you have entered the keys, click save.
21. Click start now to initiate connection with the OpenVPN server.
22. The client will start running and you will be connected to the OpenVPN server.
23. You can check this by selecting the ‘Status’ tab (see below).

24. You can check the router’s current routing table by selecting ‘Basic Network’.
25. Choose ‘Routing’ to show the routing table.
26. tun11 below indicates the traffic passing through the OpenVPN tunnel.

27. The two screenshots below are from Wireshark shows TCP packets on the client PC connected to the network.
28. The first image (figure 1) shows the network connection without OpenVPN configured.

Figure 1 – Shows more data information without the VPN

29. The second image (figure 2) shows the network connection with OpenVPN configured.
Figure 2 – Shows less data information (Encrypted) with the VPN

Note: The capture was performed using Wireshark which can be downloaded from

https://www.wireshark.org/download.html

Additional Reading

The post How to Connect a Siretta Industrial Router to a VPN Tunnel Using OpenVPN Protocol appeared first on Siretta Limited.

Objective

An advantage of using a powerful industrial router is the ability to send and receive data securely over an encrypted connection. This offers a user the ability to keep data secure between two endpoints by allowing the connected equipment to send data across an encrypted network connection securely without any changes to the configuration of the equipment. This document explains how to connect the Siretta Quartz router family to a server over an IPSec VPN tunnel.

Solution

The Siretta range of Industrial Routers support the followings VPN protocols:
• GRE
• OpenVPN Client
• L2TP/PPTP Client
• IPSec

Before you start the process of establishing an IPSec VPN connection between a Siretta router and a server, please obtain the following details:

• VPN Server IP address
• A pre-shared key, username and password
These details are available from your network administrator for your VPN server.

Note: If you do not have your VPN Server details to hand then you can obtain temporary test details from the following link ‘http://www.vpngate.net/en/‘ to allow you to check the VPN functionality of the router.

VPN Server Details

The example shown below uses a set of temporary details, when opening this link on your web browser you will be presented with the following:

1. Check the L2TP/IPsec box.
2. Click Refresh server list.
3. The IPsec servers list will appear as shown below:

4. Select and click your choice of server from the list for the detailed configuration details (See below).

Demonstration of Solution

Router VPN Configuration

5. Make sure your Router is connected to the internet. See below:

6. Click VPN Tunnel tab on the left-hand pane of the Siretta router web interface.
7. Select the IPSec tab.
8. You will be presented with a number of options.
9. On ‘Group Setup’ tab enter the following details for the Server IP address obtained from the VPN server list.

• Check Enable IPSec box.
• Select L2TP over IPSec from IPSec extension dropdown menu.
• Select 3G Cellular from Local Security Gateway Interface.
• Check Local Security Firewalling box (If not checked by default).
• Enter Server IP address in the Remote Security Gateway IP / Domain.
• Check Remote Security Firewalling box (If not checked by default).

10. Click Save
11. Click Basic Setup.
12. Enter the Preshared Key details for VPN server obtained from the VPN server list.

13. Click Save.
14. Click ‘Advanced Setup’ tab.
15. Select the required options for the connection to the VPN server obtained from the VPN server list.

16. Click Save.
17. Once you have saved the VPN connection details the router will restart some of the network services and will attempt to connect to the VPN server.
18. Click ‘Status’ on the left-hand menu.
19. Select VPN to view the VPN connection status and see when the VPN connection is established.
20. When Successful you will see status like one below.

Once the VPN connection has been established between the router and the VPN server, the connected equipment will be able to directly access all of the network resources of the connected server and communicate with any devices on the server’s network.

Additional Reading

The post How to Connect a Siretta Industrial Router to a VPN Tunnel Using IPSec Protocol appeared first on Siretta Limited.

Objective

linkCONNECT is both an automated and managed modem solution that provides a wireless serial link across a mobile data network.

Any data that is present on the serial output of a non-wireless equipment is sent to a server, using a Siretta Router with linkCONNECT (Client Mode). Conversely any data that is sent to a Router with linkCONNECT by a server is made present on the Router’s serial link and is transferred to the non-wireless equipment (Server Mode). linkCONNECT is available on the serial link of most of Siretta Routers.

This application note is designed to show how to use a Siretta Router in linkCONNECT Client and Server modes.

Solution

Requirements

• Router Quick Start Guide
• Fixed IP SIM card for Server Mode with Public IP address.
• Serial Cable
• Terminal Emulator
• Server IP address and port number for Client Mode

Server Mode Setting

1. Follow Router Quick Start Guide for initial router set up.
2. Connect serial cable from the router green connector (GND, RXD/A and TXD/B) to the corresponding pins on PC RS232.
3. Access router web page by following Step 1 above then you will be presented with the screenshot below showing router status as “Connected”.

4. Navigate to the Advanced Network tab.
5. Select linkCONNECT option.
6. On IPoC Mode select “Serial”.
7. In Serial to TCP/IP Mode select “Server “.
8. Mirror settings below with your requirement (Port Type, Baud Rate, Parity Bit, Data Bit, Stop Bit, etc.).

9. Click Save.
10. Wait for reboot cycle to complete.
11. Open Tera Term Window (or terminal emulator of your choice i.e. PUTTY or Hyper Terminal).
12. Select TCP/IP Option.
13. Type the public IP address of the SIM card inside the route in the host field.
14. Enter port number as 40001.
15. Select “Other” option.
16. Select “IPv4”as seen on the screenshot below.

17. Click OK.
18. Once you have successfully opened the window using public IP address you should be presented with the window below showing IP address of “193.192.196.125” which is public IP address of the SIM card otherwise contact your SIM provider.

19. Open Tera Term Window (or terminal emulator of your choice i.e. PUTTY or Hyper Terminal).
20. Select Serial Option.
21. Choose COM6 (where the cable from a router green connector is connected to a PC RS232 port).

22. Click OK.
23. Tera Term window will open.
24. Set com port with the parameters below.
25. Set Baud Rate of 115200.
26. Set Data to 8-bit.
27. Set Parity to none.
28. Set Stop bit to 1.
29. Set flow control to none.

30. Click OK.
31. Now setting is complete.

You can now send data from the remote server to the Router’s serial port and Vise versa.

Serial Connection.

TCP/IP Connection.

Client Mode Setting

Client Mode setting require user to have a Server IP address and port number.

32. Repeat step 1 to 6 above.
33. In Serial to TCP/IP Mode select “Client “.
34. Enter Server IP address
35. Enter port number
36. Match the parameters setting as below.

37. Click Save.
38. You have now successfully set router linkCONNECT to client mode to connect to the server.
39. Repeat Step 20 to 30 above to open Serial and Set Serial Port.
40. You will be presented with the window as seen below.

41. You have now successfully set router linkCONNECT to client mode and connected to the server. Any data from the router serial port will be sent to the server.

Additional Reading

The post linkCONNECT Application Note appeared first on Siretta Limited.

Objective

An advantage of using a powerful industrial router is the ability to send and receive data securely over an encrypted connection. This offers a user the ability to keep data secure between two endpoints by allowing the connected equipment to send data across an encrypted network connection securely without any changes to the configuration of the equipment using well defined security protocols. This document explains how to connect the Siretta router family to a server over a PPTP VPN tunnel.

Solution

The Siretta range of Industrial Quartz Routers support the followings VPN protocols:
• GRE
• OpenVPN Client
• L2TP/PPTP Client
• IPSec
Before you start the process of establishing an PPTP VPN connection between a Siretta router and a server, please obtain the following details:

• PPTP VPN Server IP address (65.60.20.70 used for this guide).
• Username and password (free, free used for this guide).
These details are available from your network administrator for your VPN server.

NOTE: If you do not have your VPN Server details to hand then you can obtain temporary test details from the following link http://www.vpngate.net/en/ to allow you to check the VPN functionality of the router.

Demonstration of Solution

Router VPN Configuration

1. Make sure your router is connected to the internet and showing Internet status page as shown below.

2. Select the ‘VPN Tunnel’ tab on the left-hand pane of the Siretta router web interface.
3. Choose ‘L2TP/PPTP Client’ tab, you will be presented with a number of options.
4. On this page you can enter the server details for the VPN connection.
5. Under protocol click on the drop-down selection.
6. Choose PPTP.
7. Name the connection by filling in the name field.
8. Enter the VPN server username under the username field.
9. Enter the VPN server password under the password field.
10. Choose if you want to enable the firewall and select the local IP address.
11. Click ‘Add’ to add the connection settings as seen below.

12. Click ‘Basic Network’ tab on the left-hand pane.
13. Select ‘Routing’ to show the current routing table.
14. In the Static Routing Table, you need to add a new entry.
15. Set ‘Destination’ to 0.0.0.0
16. Set ‘Gateway’ to 0.0.0.0
17. Set Subnet Mask’ to 0.0.0.0
18. Set Metric to ‘0’
19. Choose the VPN interface setup for the PPTP connection. (In this example the VPN connection is called ‘VPN test’ and can be selected from the dropdown menu.)
20. Click ‘Add’ button
21. Click ‘Save’ button

NOTE: These settings will push data through the selected VPN tunnel.

22. Select the ‘VPN Tunnel’ tab on the left pane.
23. Choose ‘L2TP/PPTP Client’ tab.
24. You should see “Default Route” is checked to on as shown.

25. Click on ‘Status’.
26. Select ‘VPN’ you will see the connection status indicating a connection between PPTP VPN server and router which is PPTP VPN client as shown below.

27. You can check the current routing table by selecting ‘Basic Network’
28. Click ‘Routing’ and you will be presented with a table showing the ‘VPN test connection indicating traffic through VPN tunnel.

Additional Reading

The post How To Connect a Siretta Industrial Router to a VPN Tunnel Using PPTP Protocol appeared first on Siretta Limited.