ePACK User Manual
E210 and E220 Series Devices

Part Number PMD-00018
Revision E May 2024

Intellectual Property© 2024 Lantronix, Inc. All rights reserved. No part of the contents of this publication may betransmitted or reproduced in any form or by any means without the written permission of
Lantronix.
Lantronix is a registered trademark of Lantronix, Inc. in the United States and othercountries.
Patented: www.lantronix.com/legal/patents/. Additional patents pending.
Windows and Internet Explorer are registered trademarks of Microsoft Corporation. Firefox
is a registered trademark of the Mozilla Foundation. Chrome is a trademark of Google Inc. Allother trademarks and trade names are the property of their respective holders.

Warranty
For details on the Lantronix warranty policy, please go to our web site atwww.lantronix.com/support/warranty/

Contacts
Lantronix, Inc.
48 Discovery, Suite 250
Irvine, CA 92618, USA
Toll Free: 800-526-8766
Phone:
949-453-3990
Fax:
949-453-3995
Technical Support
Online: www.lantronix.com/technical-support/
Sales Offices
For a current list of our domestic and international sales offices, go to the Lantronix web siteat www.lantronix.com/about-us/contact/

Disclaimer
All information contained herein is provided “AS IS.” Lantronix undertakes no obligation to
update the information in this publication. Lantronix does not make, and specificallydisclaims, all warranties of any kind (express, implied or otherwise) regarding title, noninfringement, fitness, quality, accuracy, completeness, usefulness, suitability or performanceof the information provided herein. Lantronix shall have no liability whatsoever to any user
for any damages, losses and causes of action (whether in contract or in tort or otherwise) inconnection with the user’s access or usage of any of the information or content contained
herein. The information and specifications contained in this document are subject to change
without notice.

ePack User Manual for E210 and E220 Series Devices

2

Open Source Software
Some applications are Open Source software licensed under the Berkeley Software
Distribution (BSD) license, the GNU General Public License (GPL) as published by the Free
Software Foundation (FSF), or the Python Software Foundation (PSF) License Agreement for
Python 2.7.3 (Python License). Lantronix grants you no right to receive source code to theOpen Source software; however, in some cases, rights and access to source code for certain
Open Source software may be available directly from Lantronix’ licensors. Your use of eachOpen Source component or software is subject to the terms of the applicable license. The
BSD license is available at http://opensource.org/licenses. The GNU General Public License isavailable at http://www.gnu.org/licenses/. The Python License is available at
http://cmpt165.csil.sfu.ca/Python-Docs/license.html. Your use of each Open Sourcecomponent or software is subject to the terms of the applicable license.
OPEN SOURCE SOFTWARE IS DISTRIBUTED WITHOUT ANY WARRANTY, INCLUDING ANYIMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SEE
THE APPLICABLE LICENSE AGREEMENT FOR ADDITIONAL INFORMATION.
You may request a list of the open source components and the licenses that apply to them.
Contact your regional Lantronix sales associate. www.lantronix.com/about-us/contact/

Revision History
Date

Rev.

Comments

March 2017

2.2.0

—

February 2018

2.3—

October 2019

A

Added Lantronix document part number, Lantronix logo, branding,contact information, and links.

January 2020

B

Renamed document to ePack User Manual.
ePack firmware for E210 and E220 series devices, version 2.3

December 2020

C

Updated to ePack firmware release 3.7

April 2023

D

Updated to firmware release 3.8.1.0, which includes the following:•

Added SNMP support for version v1, v2c, vs and
SNMPTRAPD•

Added Modbus Master•

Added custom baudrate settings and FTP to Serial support•

Added SDK support

Updated to firmware release 3.9.17.0, which includes the following:

ePack User Manual for E210 and E220 Series Devices•

Added Modbus TCP Slave•

Added GSM Update service for cellular module firmware
upgrade•Added ConsoleFlow•

Added SMS commands to send data to serial port, change
SerialFTP prameters for Serial to FTP

3•

Updated SMS command for Install/Update IPK•

Removed Temperature display from status page

Updated to firmware release 3.10.5.0, which includes the following:•

Added SIM features PUK, PDP type, Service Type, and Cid•

Added IEC 104 Multi-master

Updated to firmware release 3.11.11.0, which includes the following:•

Added Power Saving Mode ON/OFF feature via DI
triggered events•

Added SMS command to change SIM priority•

Added IP passthrough setting for cellular interface•

Added SMS command for cellular firmware upgrade

Updated to firmware release 3.12.0.0, which includes the following:•

Added Discovery tool•

Removed D2sphere client

Updated to firmware release 3.13.0.0, which includes the following:•

Added DNP3 to IEC104 converter integration•

Added SMS command to set Custom URL and firmware filename for cellular module firmware upgrade

Updated to firmware release 3.14.0.0, which includes the following:•

Added AT command mode option for Serial Configuration•

Added On Premise and On Cloud options in ConsoleFlow

Updated to firmware release 3.15.0.0•
May 2024

E

Added SCEP client to IPSec

Updated to firmware release 3.18.0.0, which includes the following:•

Added PDU mode for SMS•

Enabled use of special characters as arguments for Custom
commands•

Added SCEP Client service•

Added Strict Cipher to IPSEC connection•

Added Temperature field to System Status•

Renamed ConsoleFlow to Percepxion•

Added Audit Log and Send Dynamic Updates to Percepxion
client settings

Added Appendix D. Running Commands

For the latest revision of this product document, please check our online documentation
at www.lantronix.com/support/documentation.

ePack User Manual for E210 and E220 Series Devices

4

Contents
1 About this Guide
1.1
1.2
1.3

Purpose and Audience _____________________________________________ 10
Summary of Chapters ______________________________________________ 10
Additional Documentation __________________________________________ 11

2 Introduction
2.1

18

Web Admin Interface ______________________________________________ 18
Logging In _______________________________________________________ 19
Change Passwords After Initial Login __________________________________ 20
Logging Out ______________________________________________________ 21

5 Quick Setup
5.1

16

Web Admin Page _________________________________________________ 16
Wireless Access Point SSID __________________________________________ 16
Default Interface Configuration ______________________________________ 16

4 Web Administration Interface
4.1
4.2
4.3
4.4

13

Product Features__________________________________________________ 14
2.1.1 E210 Series ___________________________________________________ 14
2.1.2 E220 Series ___________________________________________________ 15

3 Default Configuration
3.1
3.2
3.3

10

22

Quick Setup ______________________________________________________ 22

6 Status

25

6.1

Overview ________________________________________________________ 25
6.1.1 Status _______________________________________________________ 25
6.2
Firewall Status____________________________________________________ 37
6.2.1 IPv4 Firewall __________________________________________________ 37
6.2.2 IPv6 Firewall __________________________________________________ 38
6.3
Routes __________________________________________________________ 39
6.4
System Log ______________________________________________________ 41
6.5
Kernel Log _______________________________________________________ 42
6.6
Processes _______________________________________________________ 42
6.7
Realtime Graphs __________________________________________________ 43
6.7.1 Load ________________________________________________________ 43
6.7.2 Traffic _______________________________________________________ 44
6.7.3 Wireless _____________________________________________________ 45
6.7.4 Connection ___________________________________________________ 46

ePack User Manual for E210 and E220 Series Devices

5

6.8

Load Balancing ___________________________________________________ 48
6.8.1 Interface _____________________________________________________ 48
6.8.2 Detail________________________________________________________ 48
6.8.3 Diagnostics ___________________________________________________ 49
6.8.4 Troubleshooting _______________________________________________ 49

7 System

50

7.1

System__________________________________________________________ 50
7.1.1 General Settings _______________________________________________ 50
7.1.2 Logging ______________________________________________________ 52
7.1.3 Time Synchronization ___________________________________________ 54
7.1.4 Language and Style_____________________________________________ 54
7.2
Administration ___________________________________________________ 56
7.2.1 Router Password ______________________________________________ 56
7.2.2 SSH Access ___________________________________________________ 57
7.2.3 SSH-Keys _____________________________________________________ 59
7.3
Software ________________________________________________________ 60
7.3.1 Installed and Available Packages __________________________________ 60
7.3.2 OPKG Configuration ____________________________________________ 61
7.4
Startup _________________________________________________________ 62
7.4.1 Initscripts ____________________________________________________ 62
7.4.2 Local Startup__________________________________________________ 62
7.5
Scheduled Tasks __________________________________________________ 63
7.6
LED Configuration _________________________________________________ 63
7.6.1 Add/Edit LED Configuration ______________________________________ 64
7.7
Backup / Flash Firmware____________________________________________ 65
7.7.1 Actions ______________________________________________________ 65
7.7.2 Configuration _________________________________________________ 67
7.8
Custom Commands________________________________________________ 68
7.8.1 Dashboard ___________________________________________________ 68
7.8.2 Configure ____________________________________________________ 69
7.9
Reboot__________________________________________________________ 70

VPN

71

8.1

IPSec (Internet Protocol Security)_____________________________________ 71
8.1.1 Gateway to Gateway ___________________________________________ 72
8.2
OpenVPN________________________________________________________ 78
8.2.1 OpenVPN Instances ____________________________________________ 78
8.2.2 Edit OpenVPN Instance from Template _____________________________ 81
8.2.3 Edit OpenVPN Instance from Configuration File ______________________ 84

9 Services
ePack User Manual for E210 and E220 Series Devices

85
6

9.1

Dynamic DNS_____________________________________________________ 86
9.1.1 Basic Settings _________________________________________________ 86
9.1.2 Advanced Settings _____________________________________________ 88
9.1.3 Timer Settings_________________________________________________ 89
9.1.4 Log File Viewer ________________________________________________ 90
9.2
Agents __________________________________________________________ 92
9.3
SD(HC)/MMC Card ________________________________________________ 93
9.4
SNMPD _________________________________________________________ 94
9.4.1 SNMP Architecture _____________________________________________ 94
9.4.2 SNMP Versions ________________________________________________ 94
9.4.3 SNMP Configuration ____________________________________________ 95
9.5
SNMPTRAPD ____________________________________________________ 108
9.5.1 SNMP-TRAP Configuration ______________________________________ 108
9.6
Modbus Master _________________________________________________ 112
9.6.1 Serial Transmission Mode ______________________________________ 112
9.6.2 Ethernet Transmission Mode ____________________________________ 112
9.6.3 Modbus Master Configuration ___________________________________ 112
9.6.4 Data Window ________________________________________________ 113
9.6.5 Download ___________________________________________________ 114
9.7
Modbus Slave ___________________________________________________ 115
9.7.1 Modbus Slave Configuartion ____________________________________ 115
9.8
DNP3 __________________________________________________________ 117
9.8.1 Configuring DNP3 Outstation for Modbus RTU to DNP3 conversion _____ 117
9.8.2 Modbus Master configuration file for DNP3 Outstation _______________ 119
9.8.3 Sample CSV with DNP3 Parameters _______________________________ 119
9.8.4 DOTA_______________________________________________________ 121
9.8.5 Lantronix Server ______________________________________________ 121
9.8.6 Custom Server _______________________________________________ 122
9.9
IEC 104 Multi-master _____________________________________________ 124
9.9.1 IEC 104 Multi-master Configuartion_______________________________ 124
9.10 DNP3 to IEC104 __________________________________________________ 125
9.10.1 DNP3 To IEC104 Configuration___________________________________ 125
9.11 Page Selector ___________________________________________________ 126
9.12 SMS ___________________________________________________________ 126
9.12.1 SMS Configuration ____________________________________________ 126
9.12.2 Ethernet SMS ________________________________________________ 132
9.12.3 Live Message ________________________________________________ 132
9.13 Reporting Agent _________________________________________________ 134
9.13.1 Sending Data_________________________________________________ 136
9.13.2 Data Format _________________________________________________ 137
9.14 GPS ___________________________________________________________ 139
9.14.1 Sample GPS Frames ___________________________________________ 142

ePack User Manual for E210 and E220 Series Devices

79.15 Keepalived______________________________________________________ 150
9.15.1 General _____________________________________________________ 150
9.15.2 Keepalived Global_____________________________________________ 151
9.15.3 Tracking Scripts_______________________________________________ 153
9.15.4 Tracking Interfaces ____________________________________________ 154
9.15.5 Tracking Processes ____________________________________________ 155
9.15.6 Virtual IP ____________________________________________________ 156
9.15.7 VRRP Instances _______________________________________________ 158
9.16 Last Gasp _______________________________________________________ 160
9.17 Serial __________________________________________________________ 161
9.17.1 Serial Configuration ___________________________________________ 161
9.17.2 Serial Data Send Configuration __________________________________ 162
9.18 Service Actions __________________________________________________ 167
9.19 Events _________________________________________________________ 168
9.19.1 Event Management ___________________________________________ 168
9.20 GSM Update ____________________________________________________ 170
9.20.1 Lantronix Server ______________________________________________ 170
9.20.2 Custom Server _______________________________________________ 170
9.21 uHTTPd ________________________________________________________ 172
9.21.1 General Settings ______________________________________________ 172
9.21.2 Full Web Server Settings________________________________________ 175
9.21.3 Advanced Settings ____________________________________________ 177
9.22 SCEP Client _____________________________________________________ 180
9.22.1 Certificate Details _____________________________________________ 180

10 Network

183

10.1 Interfaces ______________________________________________________ 183
10.1.1 Interfaces Overview ___________________________________________ 184
10.1.2 Interface Status ______________________________________________ 186
10.1.3 Interface Protocols ____________________________________________ 187
10.1.4 CELLULAR Interface ___________________________________________ 200
10.1.5 LAN Interface ________________________________________________ 202
10.1.6 WAN and WAN6 Interface ______________________________________ 205
10.1.7 WWAN and WWAN6 Interface___________________________________ 208
10.1.8 Add Virtual Interface __________________________________________ 210
10.2 Wireless________________________________________________________ 213
10.2.1 Wireless Network Configuration _________________________________ 215
10.3 Switch _________________________________________________________ 225
10.4 DHCP and DNS __________________________________________________ 226
10.4.1 General Settings ______________________________________________ 227
10.4.2 Resolv and Host Files __________________________________________ 229
10.4.3 TFTP Settings ________________________________________________ 230

ePack User Manual for E210 and E220 Series Devices

8

10.4.4 Advanced Settings ____________________________________________ 231
10.4.5 Static Leases _________________________________________________ 233
10.5 Hostnames _____________________________________________________ 234
10.6 Static Routes ____________________________________________________ 235
10.6.1 Static IPv4 Routes _____________________________________________ 235
10.6.2 Static IPv6 Routes _____________________________________________ 236
10.7 Diagnostics _____________________________________________________ 238
10.8 Firewall ________________________________________________________ 239
10.8.1 General Settings ______________________________________________ 239
10.8.2 Port Forwards ________________________________________________ 246
10.8.3 Traffic Rules _________________________________________________ 249
10.8.4 Custom Rules ________________________________________________ 252
10.9 Load Balancing __________________________________________________ 253
10.9.1 How it works_________________________________________________ 253
10.9.2 Globals _____________________________________________________ 254
10.9.3 Interfaces ___________________________________________________ 255
10.9.4 Members ___________________________________________________ 259
10.9.5 Policies _____________________________________________________ 261
10.9.6 Rules _______________________________________________________ 263
10.9.7 Notification __________________________________________________ 266

11 Percepxion
11.1

Percepxion Configuration __________________________________________ 267

12 Discovery
12.1

267
271

Query Port______________________________________________________ 271

Appendix A. Wiring Diagrams

272

Appendix B. LED Behavior

273

Appendix C. List of Acronyms

277

Appendix D. Running Commands

280

ePack User Manual for E210 and E220 Series Devices9

1 About this Guide
1.1 Purpose and Audience
This guide provides the information needed to configure and use the Lantronix E210 series and E220
series cellular routers. The E210 and E220 series rugged cellular routers are designed for IoT
professionals for M2M and enterprise IoT applications requiring faultless connectivity.
The information in this document assumes the reader has working knowledge of networking
technology and routing concepts.

1.2 Summary of Chapters
The remaining chapters in this guide include:
Chapter

Description

2: Introduction

Describes the E210 and E220 series models.

3: Default Configuration

Provides the default credentials for web interface user
access, the default wireless access point credentials, anddescribes the default interface configuration.

4: Web Administration Interface

Describes the web administration interface available for
configuring the E2xx series routers.
The configuration chapters (5-10) provide detailed
instructions for using the web interface.

5: Quick Setup

Provides instructions for configuring the Quick Setup.

6: Status

Provides overview of the router status pages.

7: System

Provides instructions for configuring the clock and logging
settings, enabling SSH access and keys, changing therouter password, enabling startup scripts, defining andscheduling cron jobs, customizing LED behavior, andexecuting custom shell commands,
Provides instructions for installing software packages,
upgrading firmware, saving and restoring routerconfiguration, rebooting the router.

8: VPN

Provides instructions for configuring and enabling
OpenVPN and IPSec tunneling.

9: Services

Provides instructions for enabling and configuring
Dynamic DNS, Lantronix (D2Sphere) and custom (DOTA)
device management servers, and high availability (using
Keepalived) settings.
Provides instructions for enabling the MWAS agent,reporting agent, SMS with AT commands, GPS, and Last
Gasp (E220 devices only),
Provides instructions for configuring serial port settings,
software-configurable DIOs, HTTP/HTTPS server, and for

ePack User Manual for E210 and E220 Series Devices[Type here]10

1: About this Guide

Chapter

Description
starting, stopping, restarting available services.

10: Network

Provides instructions for configuring the cellular, WAN,
LAN, WWAN and wireless interfaces, routing, switch, DHCP
and DNS, firewall, and load balancing settings.
Provides instructions for enabling the VLAN functionality(switch), defining hostname, and running network
diagnostic commands from the web interface.

11. Percepxion

Cloud platform which allows for the remote managementof devices.

12. Discovery

Allows your computer to locate other computers anddevices on the network. This setting also allows othercomputers to see your computer.

Appendix A. Wiring Diagrams

Provides RS-485 wiring diagrams and power over ethernet(POE) diagram.

Appendix B. LED Behavior

Provides information about the E210 and E220 series
device LED indicators and brief descriptions.

Appendix C. List of Acronyms

Provides a glossary of acronyms of relevant protocols andterms.

Appendix D: Running Commands

Provides information about running commands on theE210 and E220 series gateways.

1.3 Additional Documentation
Visit the Lantronix web site at https://www.lantronix.com/support/documentation for the latest
documentation and the following additional documentation for this product series.

Document

Description

E210 Series Cellular Router Quick Start
Guide

Provides hardware installation instructions,directions to connect the E210 series router,and network IP configuration information.

E220 Series Cellular Router Quick Start
Guide

Provides hardware installation instructions,directions to connect the E220 series router,and network IP configuration information.

E210 Series User Guide

Provides E210 series accessories and partnumber information, product features andhardware description, hardware installation
instructions, compliance statements andnotices.

E220 Series User Guide

Provides E220 series accessories and partnumber information, product features andePack User Manual for E210 and E220 Series Devices

11

1: About this Guide

Document

Description
hardware description, hardware installation
instructions, compliance statements andnotices.

E210 Series Product Brief

Provides E210 series router product overview
information and specifications.

E220 Series Product Brief

Provides E220 series router product overview
information and specifications.

Using the epack series SDK Application
Note

Describes how to use the SDK to create custom
packages and the Image Builder to build
custom firmware images.

ePack User Manual for E210 and E220 Series Devices12

2: Introduction

2 Introduction
With high-speed cellular (3G and beyond), WAN, LAN and Wi-Fi connectivity, the Lantronix e-seriesof routers are highly versatile, reliable and rugged routers designed for mission-critical M2M andenterprise applications requiring faultless connectivity. Cellular can be configured to be the primaryconnectivity mode or the WAN failover alternative to a wire line connection. They also support awide range of advanced routing protocols and VPN configurations.
This manual covers the following products:
E210 Series*

E220 Series*

E213

E224

E214

E225

E214G

E225G Mk II

E215

E225 Lite

E218

E228

-

E228G Mk II*Contact Lantronix Sales regarding additional models available subject to MOQ and other considerations

ePack User Manual for E210 and E220 Series Devices13

2: Introduction

2.1 Product Features
2.1.1 E210 Series
MODEL

G EOGRAPHICAL AREA (S) /OPERATOR

NAME

E215

EMEA; South-East Asia; South Asia

E213

World

CELLULARFALLBACK
MODE(S) 1

BANDS 2TYPE 13G ζ1
LTE-M1 5

8/1

2G λ1

8/3

12a/28/13/20/27/26b/8/3c /66d/25e/1

2G

5/8/3/2

28/5/8/3

3G ζ2

5/8/1

Australia & New Zealand; Thailand;
Malaysia
E214

BANDS 2

EMEA; Asia Pacific

LOCATIONSERVICESCERTIFICATIONS 3
COMPLETED | I N PROGRESS | UNDER

EN300328 | ETA, TEC

RCM;

LTE cat. 1

8/1; 8/3

Verizon Wireless

13/4

28/5/8/3/1/7

E214F003S



N/A

3G ζ3
3G ζ3; 2G λ3

FCC 8, Verizon Wireless

5/4/2
5/8/1; 8/3

E214F00CS

FCC 8, PTCRB, AT&T Wireless; ISED
OptionalNBTC

E214G001S
MIL-STD-810H 9

Brazil; Australia & New Zealand; Thailand
E218

Aug. ’18

Dec. ’18


12/5/4/2

E213F102S

ETA, TEC | SRRC, CTA; Postel

E214G
The Americas – excl. Verizon Wireless

TBD

E214F002S

Optional

5/8/3/1; TDD 40/41f

CODE

E215F002S

CE 7
3G ζ3; 2G λ3

ORDER

Aug. ’18-



28/20/8/3/1/7

China; Thailand; Indonesia; India

FCS 4

CONSIDERATION

Nov. ’18
E214G000S
Mar. ’19

E218F004S

May ’19

E218F005S

Posteltbd

E213F10ES

FCC 8, PTCRB; ISEDtbd

E214G10AS

JRF, JPA; KC

tbd

E214G107S

CE; RCM; NCC

tbd

E218F102S

LTE cat. 4
NTT docomo

19/21/1

E213

450 MHz operators

LTE-M1 6

USA & Canada
E214G

LTE cat. 1

87 TBC/88 TBC/73/72/31/
12a/28/13/20/27/26b/8/3c /66d/25e/1

EMEA; Asia Pacific

N/A

71/12/13/14/26(5)/66(4)/25(2)Japan; South Korea
E218





18/5(19)/8/21/3/1/7
LTE cat. 4

28/20/8/3/1/7

3G ζ3; 2G λ3

8/1; 8/3

Optional

Please consult us regarding the models or features shown in grey italics, which are subject to MOQ and other considerations
1

1.

Uplink / Downlink maximum data rates- 2G: λ1 85.6 / 236.8; or λ2 236.8 / 236.8; or λ3 236.8 / 296 kbps
- 3G: ζ1 5.76 / 7.2; or ζ2 5.76 / 10.1; or ζ3 5.76 / 42.2 Mbps
- LTE-M1 [NB1]: 375 / 300 [62.5 / 27.2] kbps
updated to LTE-M2 [NB2]: 1,000 / 600 [140 / 120] kbps
- LTE cat. 1: 5 / 10 Mbps (FDD); 3.1 / 8.96 Mbps (TDD)- LTE cat. 4: 50 / 150 Mbps (FDD); 35 / 130 Mbps (TDD)

2 Ranked by increasing frequencies
incl. North America’s B17
incl. KDDI’s B18 as well as North America’s B5, the latterc incl. NTT docomo’s B19, itself incl. Japan’s B6 (3G)incl. Japan’s B9d incl. North America’s B10, itself incl. North America’s B4e incl. North America’s B2
f More precisely, B41’s 2535 MHz ~ 2655 MHz subset, suited to China
well
a

b

ePack User Manual for E210 and E220 Series Devices

Please consult us, should any other certification be required
4 First customer shipment [date of]
5 23 dBm output power
6 26 dBm output power from 410 MHz to 467.5 MHz, 23 dBm otherwise
7 Based on compliance with RED; EN 60950-1; etc.
8 Also, Class I Division 2 for use in explosive atmospheres,as a factory option subject to MOQ and other considerations
3

9

14

by Switzerland’s SGS

2: Introduction

2.1.2 E220 Series
M ODELNAMEGEOGRAPHICAL AREA(S)OR OPERATORCELLULAR

E225 Lite

EMEA; South-East Asia; South Asia

3G ζ1

8/1

E225G Mk
II

World

3G ζ1

5/8/2/1

5/8/3/2

28/20/8/3/1/7

8/1; 8/3

Brazil; Australia & New Zealand

LTE cat. 4

28/5/8/3/1/7

China; Thailand; Indonesia; India
E225

World

8/3

3G ζ3; 2G λ3

5/8/3/1; TDD 40/41a
3G ζ1

EMEA
E224

5/8/1; 8/3

L OCATIONSERVICESCERTIFICATIONSCOMPLETED | IN PROGRESS | U NDERFCS 3CONSIDERATION

CE | ETA, TEC

cf.
footnote 5--8/1; 8/3-

CODE

Sep. ’16

E225FLZ2S

TBD

E225F00FSCE
IZat
gen. 8C
gpsOne

ORDER

E228G002S
Nov. ’18

E228G004S
E228G00CS

5/8/2/1

2G λ1

5/8/3/2-

Oct. ’16

E225HPLFS

20/8/3

2G λ3

8/3

CE

Apr. ’17

E224HPL2S

28/5/8/3

3G ζ2

5/8/1

RCM

Sep. ’17

E224HPL3S

13/4/2



FCC, Verizon Wireless

TBD

E228HPL1S

17/5/4/2

3G ζ3

FCC, PTCRB, AT&T Wireless; ISED

Nov. ’16

E228HPLAS

19/21/1



JRF, JPA

May ’17

E228HPL5S

LTE cat. 1
Australia & New Zealand
Verizon Wireless 4

E228

BANDS 2

2G λ1

EMEA; Asia Pacific
E228G MkII

F ALLBACKMODE (S) 1

BANDS 2TYPE 1The Americas 4

LTE cat. 4

NTT docomo

N/A

cf.
footnote 6

5/2
N/A

Please consult us regarding the models or features shown in grey italics, which are subject to MOQ and other considerations
1

Uplink / Downlink maximum data rates- 2G: λ1 85.6 / 236.8; or 236.8 / λ2 236.8; or λ3 296 kbps
- 3G: 5.76 / ζ1 7.2; or ζ2 10.1; or ζ3 42.2 Mbps
- LTE cat. 1: 5 / 10 Mbps (FDD); 3.1 / 8.96 Mbps (TDD)- LTE cat. 4: 50 / 150 Mbps (FDD); 35 / 130 Mbps (TDD)g

2 Ranked by increasing frequencies
More precisely, B41’s 2535 MHz ~ 2655 MHz subset, suited to China well

3 First customer shipment [date of]Each model is user-reconfigurable into the other model, i.e.
E228HPL1S into E228HPLAS and vice versa
5 SiRFstarV-based Concurrent GPS and GLONASS
6 Concurrent GPS, Galileo and either GLONASS (factory setting) or Beidou
4

Note• Except when explicitly mentioned, all the screenshots in this user guide are taken from a
Lantronix E228 unit.

ePack User Manual for E210 and E220 Series Devices

15

3: Default Configuration

3 Default Configuration
All usernames and passwords are case sensitive.

3.1 Web Admin Page
If you are running ePack firmware release 2.4.4 and above, the default factory passwords are:
User

Default Password

admin

admin

root

L@ntr0n1x

Table 3.1-1: Default Web Admin Page Credentials
Note• ePack firmware versions 2.4.4 and above require you to change the factory default passwords
before any other router configuration can be done. Both the admin and root passwords must bechanged.
If you are running ePack firmware releases older than 2.4.4, the default factory passwords are:
User

Default Password

admin

admin

root

M@estroW1rele$$

Table 3.1-2: Default Web Admin Page Credentials

3.2 Wireless Access Point SSID
Parameter
SSID
WPA/WPA2 TKIP Key

Details
Lantronix E21X - for E210 series devices
Lantronix E22X - for E220 series devices
W1rele$$Table 3.2-1: Default Wi-Fi Credentials

3.3 Default Interface Configuration
Interface
WAN (Ethernet)

Details
Automatic (DHCP client)
Priority source of Internet with Cellular backup

LAN (Ethernet)

Active DHCP with starting IP address
192.168.1.100 with pool of 100 clients.

Cellular

No PAP/CHAP authentication

ePack User Manual for E210 and E220 Series Devices

16

3: Default Configuration

Interface
Wireless (LAN)Details
Wi-Fi enabled as access point with SSID
"Lantronix E21X" or "Lantronix E22X"

Table 3.3-1: Default Interface Configuration

ePack User Manual for E210 and E220 Series Devices

17

4: Web Administration Interface

4 Web Administration Interface
For installation and setup procedures, refer to the hardware manual for your device.
••

Lantronix E210 Series Cellular Router User Guide
Lantronix E220 Series Cellular Router User Guide

4.1 Web Admin Interface
The Web admin interface allows the administrator and other authorized users to configure andmanage the Lantronix E210 and E220 cellular routers using most web browsers (Firefox, Internet
Explorer or Safari web applications with the latest browser updates).
The following figure shows a typical web page:

Figure 4.1-1: Web Admin Interface
The web page has the following components:
Options – Groups of router settings to configure.
Entry fields and options (content pane) – Main content pane fields and options allow you to enter
data and select options for the settings.
Save/Apply/Reset Configuration

Save & Apply button – Applies the changes on the web page and saves them to the router sothat they will be there when the router is rebooted.
Apply unchecked button– Use this if you are changing the interface parameters on which thesession is active.

ePack User Manual for E210 and E220 Series Devices

18

4: Web Administration Interface

Save button – Saves the changes on the web page without committing the changes. All saved
configuration will be lost when the router is rebooted if they are not saved and applied.
Reset button– Discards the unsaved changes on the form.
Auto refresh indicator – Allows you to switch on or off the browser auto-refresh setting. The autorefresh value is configured in System > System > Language and Style settings.
Logout button – Log off from the web interface.

4.2 Logging In
The admin user or root user can log into the Web admin interface.
If your router is new, please inspect and set up the router as shown in the Lantronix E210 or E220
Series Cellular Router User Guides.
Before logging in, make sure you have an active SIM card and a computer equipped with thefollowing:•••

Ethernet port or Wi-Fi connectivity and Internet service
Web browser –Google Chrome, Mozilla Firefox, Internet Explorer or Microsoft Edge, Apple
Safari (with the latest updates installed)
DHCP client is enabled on the computer to obtain a valid IP Address from the router with LAN
IP address 192.168.1.1. See below for help.

To enable DHCP in Windows 8 or 10:
1. Access the active network. Go to Start > Control Panel > Network and Internet > Network andSharing Center. Click the active network connection. The Network Connection Status dialog
box appears.
2. From the Network Connection Status dialog, click Properties, select Internet Protocol Version
4 (TCP/IPv4) and click Properties to display the Internet Protocol Version 4 (TCP/IPv4)
Properties dialog box.
3. On the General tab of the IPv4 Properties dialog, select the following options:o Obtain an IP address automaticallyo Obtain DNS server address automatically
To log into the web interface:
1. Open a Web browser on the computer.
2. Enter the default LAN IP address http://192.168.1.1. The login screen is displayed.

ePack User Manual for E210 and E220 Series Devices

19

4: Web Administration Interface

Figure 4.2-1: Web Admin Login Page
3. Enter the admin username and password. If you are logging in for the first time after
installation or after factory reset, use the default credentials (hint: admin/admin).
Note• If you are running ePack firmware version 2.4.4 and above, you will be required tochange the factory default passwords for both the admin and root users before you cando any other router configuration.

4.3 Change Passwords After Initial Login
Upon first login, you are directed to change the factory default passwords for both the admin user
and the root user.
Assuming that you logged in as "admin", you'll see the Change Initial Password page as shown
below:

Figure 4.3-1: Change Initial Password

ePack User Manual for E210 and E220 Series Devices

20

4: Web Administration Interface

1. Enter the new password for "admin" user and then re-enter it to confirm it.
2. Click Save & Apply.
3. This will log you out and return to the login page automatically.
4. Log in as "root" user using the factory default password (hint: root/L@ntr0n1x).
5. The Change Initial Password page for the root user is displayed. As before, enter the new
password and re-enter it to confirm it.
6. Click Save & Apply.
Note• You can log in to root user and change both admin and root password at the same time.

4.4 Logging Out
To log off the ePack web interface:
Click the Logout button located in the upper left part of the web interface page. When logout iscomplete, the login screen is displayed.

ePack User Manual for E210 and E220 Series Devices21

5: Quick Setup

5 Quick Setup
Quick Setup helps get the IP network port up and running so that you can configure other router
settings. To skip the Quick Setup and directly configure the network settings including advanced
settings, go to the Network tab.

5.1 Quick Setup
On the Quick Setup page, click Quick Setup. The Quick Setup > Network Setup page is displayed.
Basic network parameters for LAN, WAN, Cellular, and Wireless LAN can be configured from the
Network Setup page.

ePack User Manual for E210 and E220 Series Devices22

5: Quick Setup

Figure 5.1-1 - Quick Setup > Network Setup page (E228 shown)
Parameters

Description

Local Area Network (LAN)IPv4-AddressEnter an IPv4 Address for the LAN interface. This is the IP Addressthat must be used to access the Router.
The default LAN IPv4 Address is 192.168.1.1.

Ipv4-Netmask

Enter IPv4 Subnet Mask of the LAN interface.
The default Netmask is 255.255.255.0

Wide Area Network (Wired WAN)
ProtocolSelect the WAN protocol from the available options:

Manual - to set a static IP address. If selected, enter the IPv4

ePack User Manual for E210 and E220 Series Devices23

5: Quick Setup

Parameters

Description
address, IPv4 netmask, IPv4 gateway, and DNS server.
Automatic – to use DHCP server to acquire the IP address.
PPPoE (Point to Point Protocol over Ethernet). If selected,
enter the user name and password.
The default WAN protocol is selected as Automatic.

Cellular
SIM 1 settings/SIM2 settings

Cellular SIM card settings for one or two SIM card slots,
depending on the router model number.

APN

Access Point Name (APN) is the name of an access point for thecellular network data connection. Generally, the wireless cellular
network operator will provide the APN to their end users.
Enter the APN provided by the cellular network operator.

PIN

SIM card Personal Identification Number (PIN) is used to lock thecard, preventing people from making unauthorized phone call oraccessing cellular data services.
Enter the PIN of the SIM card.

Authentication TypeThe authentication method used for the cellular connection. If
PAP, PAP/CHAP, or CHAP are selected, then username andpassword must be entered.

UsernameEnter the PAP/CHAP user name.

Password

Enter the PAP/CHAP password.

Enable Roaming

Select to enable data roaming on the cellular interface of therouter.

Wireless Network (LAN)DisableSelect the check box to disable the Wireless interface.
By default, the Wireless interface is enabled.

Mode

Displays the Wireless network (LAN) mode. Mode can be ap(access point) or client. To configure, go to Network > Wireless.

SSID

Enter the Service Set Identifier (SSID) name. Leave the field blankto use the default SSID value.
The default SSID is
Lantronix E21x for E210 series devices andLantronix E22x for E220 series devices.

Encryption

Displays the type of encryption. To configure the encryption type,
go to Network > Wireless.

Password

The default SSID password is W1rele$$.

Table 5.1-1: Quick Setup Network Configuration

ePack User Manual for E210 and E220 Series Devices24

6: Status

6 Status
Status provides a summary view of the vital configurations of the router. It includes the following
topics:
•
•
•
•
•
•
•
•

Overview
FirewallRoutesSystem Logs
Kernel Log
Processes
Real-Time Graphs
Load Balancing

6.1 Overview
Status > Overview
Overview page provides a listing of the important parameters of the router.

6.1.1 Status
Status > Overview > Status
Status Overview page outlines the configuration settings for the basic sub-modules of the router. It
includes the following information:
•
•
•
•
•
•
•
•
•
•

SystemPercepxion
Cellular
MemoryNetwork
Active DHCP Leases
Wireless
Digital Input/Output
Dynamic DNS
MWAN Interfaces

ePack User Manual for E210 and E220 Series Devices25

6: Status

6.1.1.1 System
Status > Overview > Status
The System group provides the router's model and software related information.

Figure 6.1-1 System Status Overview

Parameters

Description

Hostname

Name assigned to the router for addressing purposes.

Model

Model number of the router that is deployed.

PID

Display 35 characters long, unique Product Identification number (PID).
Consider an example of PID E225-071102-HL8548-xxxxxxxxxxxxxx. It is
composed of:

4 characters SKU: E225
6 characters UID: 071102 (WAN, GNSS, Wi-Fi, 2x LAN, SIM)
6 character Module Name: HL8548
14 characters Serial Number:
xxxxxxxxxxxxxx. Comprises of HW/PCB version (01 to 99), Lot number(01 to 99), Production date (YYMMDD), Unit number (4 digits).
UbootVersion

U-Boot version number

Architecture

Architecture type

Firmware Version

Base Firmware Version number.

POEPower Over Ethernet is available in E220 series where the router can be

ePack User Manual for E210 and E220 Series Devices

26

6: Status

Parameters

Description
powered from a PSE-POE device over WAN port

Module Firmware

Modem firmware version

Kernel Version

The Linux Kernel version number on the router.

Local Time

Displays the day of the week, month, date, time and year configured on
the router.
The format is Day Month Date hh:mm:ss Year.
The time is displayed in 24 hour clock format.

Up Time

Displays the time for which the router is up and running since last powerON.
The format is hh:mm:ss.
The time is displayed in 24 hour clock format.

Load Average

Average CPU load time over periods of 1, 5, and 15 minute averages.

Reboot Cause

Displays the last reboot cause and time whenever possible.

IMEI/MEID

Displays 15 digit IMEI number or 14 digit MEID number.

(MEID is only available inCDMA / EVDO Routers)

An IMEI number (International Mobile Equipment Identity) is a 15 or 17
digit unique number to identify GSM or UMTS mobile devices. It is used toprevent call initiation from a misplaced or stolen GSM or UTMS device,even if someone swaps out the device’s SIM card.
A MEID number (Mobile Equipment Identifier) is used to identify a cell
phone that utilizes the CDMA technology for wireless service.
Note• We recommend you record the IMEI or MEID number and secure it sothat it can be quickly accessed in the event of theft or loss of therouter.

Temperature

Temperature of the internal GSM module.

SnapCap

Indicates whether serial port is in use (Feature available only in E21X
devices.).

Table 6.1-1: System Status Overview

ePack User Manual for E210 and E220 Series Devices27

6: Status

6.1.1.2 Percepxion
System>Overview>Status

Figure 6.1-2: Percepxion Status Overview
Parameters

Description

Client State

Current state of Percepxion client.

Last Status Update

Time since last status update.

Last Content CheckTime since last content check.

Available Firmware Updates

Firmware updates available.

Available Configuration
Updates

Configuration updates available.

Table 6.1-2: Percepxion Status Overview

ePack User Manual for E210 and E220 Series Devices28

6: Status

6.1.1.3 Cellular
Status > Overview > Status
The Cellular group provides the status of the SIM card inserted in the router.

Figure 6.1-3: Cellular Status Overview

Parameters
Cellular Data

Description
Displays the status of the Cellular data.
StatusConnected – Data connected.
Disconnected – Data communication is not connected..
Signal Strength

Displays the current signal strength.
The signal strength range is 0 to 32.

0 –113 dBm or less1 –111 dBm
2 to 30 –109 to –53 dBm
31 – 51dBm or greater
Note• Signal strength for a good cellular data connection must be 12 orabove.
Network Status

Displays the registration status of the router on the current cellular
network.

Registered
Not Registered

ePack User Manual for E210 and E220 Series Devices29

6: Status

Parameters

Description

Operator Name

Name of the current cellular operator in use.

Operator Number

Current cellular operator number

Operator TypeOperator typeRoaming Status

The roaming status of the router:Home
Roaming
N/A
SIM Status

Displays the availability of SIM card in SIM card slot.

Error – SIM card is not inserted.
Ready – SIM card is inserted.
Active SIM

Displays the active SIM, SIM 1 or SIM 2.
Present only for E210 series routers that have dual SIM support.

IMSI

Displays the IMSI Number. In case of UMTS, it is read from the SIM card.
An International Subscriber Identity (IMSI) is 15 digit unique Mobile
number associated with cellular network and used to acquire the detailsof the mobile for identifying the user of a cellular network.

Configured BandThe configured radio frequency bands

Registered BandThe registered radio frequency band

Temperature

Temperature in degrees Celsius

Iccid

Integrated circuit card id (ICCID) unique serial number that identifies the
SIM card

Table 6.1-3: Cellular Status Overview

ePack User Manual for E210 and E220 Series Devices30

6: Status

6.1.1.4 Memory
Status > Overview > Status
The Memory group provides information about the Memory in KB available with the router.

Figure 6.1-4: Memory Status Overview

Parameters

Description

Total Available

Total available RAM memory. Total Memory issummation of used memory, free memory, buffered
memory and cached memory.

Free

Free RAM memory. The bar graph shows theamount of free memory as a percentage of the total
memory.

BufferedSize of buffered memory. The bar graph shows theamount of buffered memory as a percentage of thetotal memory.

CachedSize of cached memory. The bar graph shows theamount of cached memory as a percentage of thetotal memory.

Table 6.1-4: Memory Status Overview
Model

RAM sizeFlash size

E220LITE

64MB

32MB

E220

128MB

64MB

E210

128MB

32MB

Table 6.1-5: E210 and E220 Devices RAM and Flash SizeePack User Manual for E210 and E220 Series Devices31

6: Status

6.1.1.5 Network
Status > Overview > Status
The Network group provides the IPv4and IPv6 WAN status. The number of active connections is also
displayed.

Figure 6.1-5: Network Status Overview

Parameters
WAN

Description
Displays status of fixed-line WAN connection with following details:

IP – IP Address of the WAN Interface.
Gateway – IP Address of the WAN Interface Gateway.
DNS – Two DNS IP Address; Primary DNS Server and Secondary
DNS Server.
Note• In case of WAN Access Wi-Fi must be configured in client mode andconnected to an Access Point.
Cellular

Displays status of Cellular network data connection with following details:

IP – IP Address of the Cellular Interface.
Gateway – IP Address of the Cellular Interface Gateway.
DNS – Two DNS IP Address; Primary DNS Server and Secondary
DNS Server.
WWAN

Displays status of Wi-Fi WWAN connection with following details:

IP – IP Address of the WWAN Interface.
Gateway – IP Address of the WWAN Interface Gateway.
DNS – Two DNS IP Address; Primary DNS Server and Secondary
DNS Server.

Table 6.1-6: Network Status Overview

ePack User Manual for E210 and E220 Series Devices32

6: Status

6.1.1.6 Active DHCP and DHCPv6 Leases
Status > Overview > Status
Displays the information about the machines connected to router using a DHCP lease. This includes
IPv4 as well as IPv6 connections.

Figure 6.1-6: Active DHCP Leases Status Overview

Parameters

Description

Host Name

Name of the device (laptop, mobile, etc.) that is connected to the routerand has been leased an IPv4 address or an IPv6 address by the router’s
DHCP server.

IPv4 Address/IPv6 Address

IPv4 address or IPv6 address assigned to the device connected to therouter.

MAC Address

Applies to IPv4: MAC address of the device connected to the router.

DUID

Applies to IPv6: DUID (Device Unique Identifier) of the device connected to
the router.

Leasetime remaining

The remaining time for which the device can use the DHCP server leased
IPv4 Address.

Table 6.1-7: Active DHCP Leases Status Overview

6.1.1.7 WirelessStatus > Overview > Status
The Wireless Group describes the Wi-Fi network used by the router and the associated stations thatare connected to the router over Wi-Fi.

ePack User Manual for E210 and E220 Series Devices

33

6: Status

Figure 6.1-7: Wireless Status Overview

Parameters
Connection Name

Description
Displays the name of the connection and the details:

Type – The wireless radio chipset
Channel – WiFi channel.
Bitrate – Data transfer rate
SSID –Service Set Identifier (SSID) that uniquely names a Wireless
Local Area Network (WLAN)
Mode – Displays whether the WLAN interface is currently configured
as an Access Point ‘Master’ or as a Client of a higher order Wi-Fi
network.
Note• For Wi-Fi WAN (WWAN) operation this should be ‘Client’.

BSSID – Displays Basic Service Set Identification (BSSID); 24 bit MAC
Address of Wireless device.
Encryption – Displays the data encryption method.
Associations – Displays the number of associated stations.
Associated Stations
Network

Mode and Name of the network to which the device is connected.

MAC Address

MAC Address of the computers and/or devices that are connected.

Host

Host name of the associated station.

Signal/Noise

Signal strength/noise in dBm

RX Rate/Tx Rate

The receive (RX) and transmission (TX) data rates of the associated client.

Displays data transfer rate (Mbit/s), channel bandwidth (MHz),
Modulation and Coding Scheme index (MCS), and GI time (Guard
Interval, for TX rate).
Disconnect

Click this button to disconnect the associated station from the accesspoint.

Table 6.1-8: Wireless Status Overview

ePack User Manual for E210 and E220 Series Devices34

6: Status

6.1.1.8 Digital Input/Output
Status > Overview > Status
The Status Overview page shows the state of the two digital input/output pins on the router. Whenthe pins are LOW/OPEN, the status is Red and when the pins are HIGH/CLOSED, the status is Green.

Figure 6.1-8: Status DIO Pins

6.1.1.9 Dynamic DNS
Status > Overview > Status
The status page displays the dynamic DNS IPv4 and IPv6 configuration.

Figure 6.1-9: Status Dynamic DNS

6.1.1.10 MWAN Interface
Status > Overview > Status
Lantronix routers have multiple sources of internet and can switch seamlessly between them. The
screenshot shows 3 sources of internet: WAN (Wired Ethernet), WWAN (Wi-Fi when used as a WAN
instead of LAN) and Cellular.
The MWAN Interface status page provides a view of all the available and connected WAN options. In
the figure below, the interfaces marked in green are live and connected while the ones in red are
disabled.
For more information, refer to Network > Load Balancing.

ePack User Manual for E210 and E220 Series Devices35

6: Status

Figure 6.1-10: MWAN interfaces Status Overview

Parameters

Description

Interface

The type of interface. Can be wan, wwan, or cellular. Wan6 or wwan6
indicate IPv6 interfaces.

StatusShows whether the interface is Online (green), Offline, or Disabled (red).
If the status is Online, the following details are displayed:

tracking active – the interface is being tracked for internet availability
by pinging the IP provided in its configuration section.
tracking off – the interface is not being tracked for internet availability
by pinging the IP provided in its configuration section but deemed
active if the interface is up and has an IP address.
Uptime – the duration in hours, minutes and seconds that the interface
has been connected
If the status is Offline, the following is displayed:

Downtime – The time that the interface has been down since the last
retry.
If the status is Disabled, no details are displayed.

Table 6.1-9: MWAN interfaces Status Overview

ePack User Manual for E210 and E220 Series Devices36

6: Status

6.2 Firewall Status
Status > Firewall Status

6.2.1 IPv4 Firewall
Status > Firewall Status > IPv4 Firewall

Figure 6.2-1: Ipv4 Firewall Status

Parameters

Description

Hide empty chains

Click to hide the chains that have no rules.

Reset Counters

Click to rest counters for Packets and Traffic.

Restart Firewall

Click to reload the existing Firewall configuration of every interface.

Rule Chain name and details

Displays the rule chain name, type, and policy details

Pkts

Displays the number of accepted packets.

Traffic

Displays the amount of traffic captured by the filter.

TargetDisplays the target action for the traffic processed for a respective rule.

Prot.

Displays the name of all the protocols configured in the Firewall Rule.

In

Input Interface

ePack User Manual for E210 and E220 Series Devices37

6: Status

Parameters

Description

Out

Output Interface

SourceDisplays the source IPv4 Address.

Destination

Displays the destination IPv4 Address.

Options

Displays option details

Comment

Displays comment details

Table 6.2-1: IPv4 Firewall Status

6.2.2 IPv6 Firewall
Status > Firewall Status > IPv6 Firewall

Figure 6.2-2: IPv6 Firewall Status

Parameters

Description

Hide empty chains

Click to hide the chains that have no rules.

Reset Counters

Click to rest counters Packets and Traffic.

Restart Firewall

Click to reload the existing Firewall configuration of every interface.

Pkts

Displays the number of accepted packets.

Traffic

Displays the amount of traffic captured by the filter.

ePack User Manual for E210 and E220 Series Devices38

6: Status

Parameters

Description

TargetDisplays the target.

Prot.

Displays the name of all the protocols configured in the Firewall Rule.

In

Input Interface

Out

Output Interface

SourceDisplays the source IPv6 Address.

Destination

Displays the destination IPv6 Address.

Options

Displays option details

Comment

Displays comment details

Table 6.2-2: IPv6 Firewall Status

6.3 Routes
Status > Routes

Figure 6.3-1: Routes Status

ePack User Manual for E210 and E220 Series Devices39

6: Status

Parameters

Description

ARP – ARP table provides information about the peripherals connected on each interface
IPv4 Address

Displays the IPv4 Address.

MAC Address

Displays MAC Address of the peripheral device.

Interface

Displays the interface name connected to the peripheral device.

Active IPv4 Routes – Displays the active IPv4 network route information.
Network

Displays the network Type used by the active IPv4 routes.

TargetDisplays the destination IPv4 Address.

IPv4 Gateway

Displays the IPv4 Address Gateway used for traffic routing.

Metric

Displays the metric assigned to the Interface.

Active IPv6 Routes – Displays the active IPv6 network route information.
Network

Displays the network Type used by the active IPv4 routes.

TargetDisplays the destination IPv6 Address.

IPv6 Gateway

Displays the IPv6 Address Gateway used for traffic routing.

Metric

Displays the metric assigned to Interface.

Table 6.3-1: Routes Status

ePack User Manual for E210 and E220 Series Devices40

6: Status

6.4 System Log
Status > System Log
The E210 and E220 series routers provide extensive logging capabilities for traffic, system, andnetwork protection functions. Detailed log information and reports provide historical as well as
current analysis of network activity to help identify security issues and reduce network abuse.
The router can either store logs locally or send logs to external syslog UDP servers for storage andarchival purposes.
The network activities and traffic logs include:••••

Firewall logs
Interface Activity logs
Administrator logs
User Authentication logs

The single syslog server allows for remote logging and can be configured from System > System >Logging.

Figure 6.4-1: System Logs

ePack User Manual for E210 and E220 Series Devices41

6: Status

6.5 Kernel Log
Status > Kernel log
This log displays the Linux kernel log events.

Figure 6.5-1: Kernel Log

6.6 Processes
Status > Processes
This log displays a list of active Linux system processes and their resource usage.

Figure 6.6-1: Processes Status

Parameters

Description

PID

Displays the Process identifier (PID) number
associated with the process.

Owner

Displays the task owner

Command

Displays the command nameCPU usage %The CPU usage of the process, displayed as apercentage of the total available CPU resources.

Memory usage %The amount of the system's working physicalmemory that the process is currently using,ePack User Manual for E210 and E220 Series Devices42

6: Status

Parameters

Description
displayed as a percentage.

Hang upSends a hang up signal to terminate the process.

Terminate

Sends a terminate signal to terminate the process.

Kill

Sends a kill signal to immediately terminate theprocess and the process will not perform any
cleanup operations.

Table 6.6-1: Processes Status

6.7 Realtime Graphs
Status > Realtime Graphs
The Realtime graphs display router activities over different time intervals. The following graphs areprovided: load average, interface traffic information for LAN, WAN, Tunnel and Wi-Fi interfaces,
wireless usage, and connection-detailed information.

6.7.1 Load
Status Realtime Graphs > Load
Graph shows past three minutes average CPU load and peak CPU load on the router.

Figure 6.7-1: Real Time Load Graph

Parameters
Load

Description
Graph shows the periodic average CPU load on the Router.

ePack User Manual for E210 and E220 Series Devices43

6: Status

Parameters

Description
Details

X axis – Time Interval (1 minute)Y axis – CPU Load (Percentage)
Legends

Red – 1 Minute Load
Orange – 5 Minute Load
Yellow – 15 Minute Load

Table 6.7-1: Real Time Load Graph6.7.2 Traffic
Status > Realtime Graphs > Traffic
Traffic indicates the WAN side incoming and outgoing traffic on the router. The graphs display theaverage and peak data transfer for LAN, WAN, WLAN, WWAN, Tunnel and Cellular interfaces, color
coded to indicate upload and download traffic.
The following figure shows the traffic graph for the eth0 interface:

Figure 6.7-2: Status Realtime traffic for eth0
For each graph, the time interval (1 minute) is shown on the x-axis and the traffic (in kB/s) is shownon the y-axis. Blue represents inbound traffic while green represents outbound traffic.
The WAN interface shows average and peak WAN and cellular traffic.

ePack User Manual for E210 and E220 Series Devices

44

6: Status

6.7.3 WirelessStatus > Realtime Graphs > WirelessWireless indicates the traffic on Wi-Fi irrespective of Wi-Fi being used as an access point (LAN) or
Client (WAN).
Wireless Graphs displays real time graph combined for Signal and Noise data transferred in realtime. Colors differentiate Signal and Noise data rates. It also displays the Physical data transfer rate.
In addition, it shows the average and peak Signal and Noise and Physical data rates individually.

Figure 6.7-3: Real Time Wireless Traffic Graph

Parameters

Description

WLAN Interface
SignalGraph shows the periodic average of Signal and Noise on the Router.
Details

X axis – Time Interval (1 minute)Y axis – Data Rate (Mbit/s)
Legends

Blue – Signal
Red – Noise

ePack User Manual for E210 and E220 Series Devices45

6: Status

Parameters

Description
Green – Physical Rate

Table 6.7-2: Real Time Wireless Traffic Graph6.7.4 Connection
Status > Realtime Graphs > Connection
Connection graphs provide an overview of active network connections; those originating from therouter and also those that are originating from LAN/WAN of the router.

Figure 6.7-4: Real Time Connection Traffic Graph

Parameters
ProtocolDescription
Graph shows the periodic average of data transfer using specificprotocols on the Router using the active connections in real time.
Details

X axis – Time Interval (1 minute)Y axis – Number of Active Connections

ePack User Manual for E210 and E220 Series Devices46

6: Status

Parameters

Description
Legends

Blue – UDP
Green – TCP
Red – Other Protocols
Network

Network connection type, IPv4 or IPv6.

ProtocolName of the protocol used for routing data.

SourceSource IP Address and port number of an active connection.

Destination

Destination IP Address and port number of an active connection.

Transfer

Displays the total data transferred using the specific network connection.

Table 6.7-3: Real Time Connection Traffic GraphePack User Manual for E210 and E220 Series Devices47

6: Status

6.8 Load Balancing
Status > Load Balancing

6.8.1 Interface
Status > Load Balancing > Interface
This status page shows the MWAN interfaces, where active interfaces are shown in green anddisabled interfaces are shown in red.

Figure 6.8-1: MWAN Interface Status

6.8.2 Detail
Status > Load Balancing > Detail

Figure 6.8-2: MWAN Status Detail
ePack User Manual for E210 and E220 Series Devices48

6: Status

6.8.3 Diagnostics
Status > Load Balancing > Diagnostics
The MWAN Status – Diagnostics page shows all configured interfaces in MWAN3 and allows you torun diagnostics commands on the specified MWAN interface. The results of the diagnostics are
displayed below the task.

Figure 6.8-3: MWAN Status Diagnostics

6.8.4 Troubleshooting
Status > Load Balancing > Troubleshooting
Load balancing troubleshooting page shows the output of IP commands to use for troubleshooting
purposes.

Figure 6.8-4: MWAN Status Troubleshooting

ePack User Manual for E210 and E220 Series Devices49

7: System

7 System
System allows configuration and administration of the router for secure local and remotemanagement. Many system functions can be configured from the following menus:
•
•
•
•
•
•
•
•
•

SystemAdministration
SoftwareStartupScheduled Tasks
LED configuration
Backup / Flash Firmware
Custom Commands
Reboot7.1 System
System > System
This page provides basic system settings including time management, system log, synchronization,and UI theme settings.

7.1.1 General Settings
System > System > General Settings
The current date and time of the router’s internal clock can be set locally to match the date/time ofyour computer’s browser or the router can be configured to synchronize its internal clock with an
NTP server so that logs show the precise time and router activities can happen at a precise time.

Figure 7.1-1: System General Settings

ePack User Manual for E210 and E220 Series Devices50

7: System

Parameters
Local Time

Description
Displays the local time of the user's computer. Sync the local time withbrowser or with an NTP server.
Click Sync with browser button to synchronize router clock with the local
computer browser.
Click Sync with NTP-Server to synchronize the router clock with an NTP
server.
Note• The displayed time is dependent on the configuration of your local
computer that is being used as an NTP server.

Router Time

Displays the current router time according to the configured time zone.

HostnameEnter the Hostname for this router. Do not include period character "." inthe hostname as only the string before the period will be used as thehostname.
The configured Hostname appears on the Status > Overview page.

Timezone

Select time zone according to the geographical region in which router isdeployed.
The default time zone is UTC.

Table 7.1-1: System General Settings

ePack User Manual for E210 and E220 Series Devices51

7: System

7.1.2 Logging
System > System > Logging
The router can capture and log system activity including interface connection status, internal
debugging messages, critical and emergency logs. It can either store the logs locally and/or send
them to an external UDP syslog server for storage and archival purposes. The system log buffer uses
First In First Out (FIFO) mechanism.
Note• All the logs are lost on Router reboot.
SYSLOG is an industry standard protocol/method for collecting and forwarding messages fromdevices to a server running a syslog daemon usually via UDP Port 514. The syslog server on a remotecomputer accepts the log messages and stores them in files or prints them. Logging to a central
syslog server facility helps in the aggregation of associated logs and alerts and provides protectedlong term storage. This is useful for incident handling, routine troubleshooting, and historicalanalysis.

Figure 7.1-2: System Log Configuration
Parameters
System log buffer size

Description
Enter the size of the buffer in Kilobytes (KB) to save logs andstatus information details.
The default System Log Buffer size is 64 KB.

External system log serverEnter the IP Address of an External server system. This server will
be used to save all the real time logs.
The default IP Address of external log server is 0.0.0.0
Note• Enabling Remote Log features requires a Router to be
manually rebooted in all firmware versions below V2.2.0

External system log server
portEnter the Port number of an External UDP server system.

ePack User Manual for E210 and E220 Series Devices52

7: System

Parameters

Description
UDP server is used to store the system logs
The default port is 514.

External system log server
protocolUDP or TCP

Log output level

Select the Log severity output level. Debug and Info levels arelower severity than Warning and Error levels and are moreverbose. Selecting debug or info level will also include the higher
severity messages.

Debug – Logs will be used by The E2xx series router softwaredeveloper for debugging the router application. These logs are
not useful during operations.
Info – These logs provide normal operational information
messages that are used for general purposes like reporting.
Notice – Provides alerts for peculiar events that are not anerror. These logs help to identify potential issues. Since theselogs do not indicate errors, immediate action may/may not benecessary.
Warning – A warning messages is displayed for a potential
issue, indicating to take an action. An error may occur if noaction is taken against the warning issued.
Error – Displays the logs indicating an error condition.
Note• For help with log errors, please contact Lantronix TechnicalSupport.

Critical – Indicates failure in secondary system and must be
corrected immediately.
Alert – Problems which should be corrected immediately.
Emergency – System is Unusable.
Cron log level

Select the minimum level for cron messages to be logged tosyslog.

Debug – Helps you debug cron process which has failed
during runtime.
Normal – Normal informational messages
Warning – Indicates some issues can happen or error could
be generated in cron process.
Note• For help with Cron log warning messages, please contact
Lantronix Technical Support.

Table 7.1-2: Syslog Configurations

ePack User Manual for E210 and E220 Series Devices53

7: System

7.1.3 Time Synchronization
System > System > Time Synchronization
Select the method that the router uses to synchronize its internal clock.
Note:• If all three methods are enabled, the order of precedence is GPS, then NTP, then GSM.

Figure 7.1-3: System Time Synchronization Configuration
Time Synchronization
GPS Time Synchronization

For routers that support GPS. If enabled, the router will
synchronize its internal clock using GPS.
Note
• GPS Antenna will be needed for GPS time sync

Enable NTP client

If enabled, the router will synchronize its internal clock from an
NTP server.
Note• If NTP Server is activated, the Router will update time every
60 minutes from the NTP Servers.
• Enabling NTP Client consumes data.

GSM Time Synchronization

If enabled, the router will synchronize using GSM functionality.

Table 7.1-3: System Time Synchronization Configuration

7.1.4 Language and Style
System > System > Language and Style
The language and style settings are used to control the look and feel of the web interface.

Figure 7.1-4: System Language and Style Configuration

ePack User Manual for E210 and E220 Series Devices54

7: System:Parameters

Description

Language

Default value is auto.

DesignDefault design of user interface is Rosy.

Auto refresh default
pollinterval in seconds

Set the auto refresh polling interval between 5 and 50 seconds.
Default is 5 seconds.
Note• Auto refresh can be turned on or off using the Auto Refresh
button on the UI.

Table 7.1-4: Language and Style Configurations

ePack User Manual for E210 and E220 Series Devices

55

7: System

7.2 Administration
System > Administration
The Administration page allows configuration of general router settings including the router
password and settings for SSH access. the router. Various ports and login security can be configured
using Administration submenu.

7.2.1 Router Password
System > Administration > Router Password
This page allows you to change your login password at any time.

Figure 7.2-1: Change Router Password

Parameters

Description

Password

Specify the new password.

Confirmation

Confirm the new password.

Table 7.2-1: Router Password Configuration

ePack User Manual for E210 and E220 Series Devices56

7: System

7.2.2 SSH Access
System > Administration > SSH Access
The E2xx series routers integrate Dropbear which offers SSH network shell access and an integrated
SCP (Secure Copy Protocol) server for file transfer.
You can also set parameters for Dropbear instance for SSH Access. On the SSH-Keys page you can
add public SSH-Keys (one per line) for SSH public-key authentication.
By default, the remote SSH access over WAN is disabled. You can enable the remote SSH access fromthe web interface or alternately can send an SMS from a registered admin number to enable it. You
are required to use the SSH keys displayed on the webpage for SSH access.

Figure 7.2-2: SSH Access Configuration
Parameters

Description

Dropbear InstanceInterface

Select the interface. SSH listens only on the selected interface.

Unspecified – If this option is selected, SSH listens on all interfaces.
Port

Provide listening port of the Dropbear instance.
Default port is 22.

Password Authentication

Select to allow authentication using SSH password.

ePack User Manual for E210 and E220 Series Devices57

7: System

Parameters

Description
The default option is disabled.

Allow root logins

Select to allow root user logins to the router.

Allow root logins withpassword

Select to allow root logins and require a password.

Gateway ports

Select to allow remote hosts to connect to local SSH forwarded ports.

Add Instance

Click to add another SSH instance with the specified configuration.

DeleteClick to delete the Interface.

Table 7.2-2: SSH Access Configurations

ePack User Manual for E210 and E220 Series Devices58

7: System

7.2.3 SSH-Keys
System > Admin > SSH-Key
Public SSH keys can be added one per line to authenticate with SSH public key authentication.
Public SSH keys are provided by default. They are configured on port 22. SSH from WAN network is
disabled by default. To enable it, you must enable port 22 from the Network > Firewall page.
To add a new key, copy the public key from the Host system, paste it in the text box (see the figure
below), and then click Add key.

Figure 7.2-3: SSH Key Administration

ePack User Manual for E210 and E220 Series Devices59

7: System

7.3 Software
System > Software
The Software page gives you access to manage software packages in the router.
Lantronix has its own list of packages that can be downloaded from D2Sphere. For details on
D2Sphere, please contact Lantronix Sales.

7.3.1 Installed and Available Packages
System > Software > Installed/Available/Updates
The Software page displays the available packages, installed packages, or updates, on the Available,
Installed, and Updates tabs, respectively.

Figure 7.3-1: Installed Software Packages
Parameters

Description

Available Memory, Package Filter, and Actions
Free space

Indicates the free and used space on the flash memory.
The darker line represents the portion of free space.

FilterEnter the keyword of the required package to search for it frompackage repository servers.

Download and install
packageEnter the exact name or URL of the package to be downloaded frompackage repository servers and install it. Click OK initialize installation.

Update lists

Click to update the package list from the package repository servers.

Upload Package

Click to upload a package file from your local drive.

Configure opkg

Click to modify the OPKG package manager configuration files, which
provide the path to tell the router where to fetch the packages from. See
Section 7.3.2 for more information.

Status – Installed/Available/Update Package
Package name

Displays the name of package.

Version

Displays the version of package.

Size

Displays the size of the installed package.

ePack User Manual for E210 and E220 Series Devices60

7: System

Parameters

Description

Description

Displays the package description, if one has been provided.

RemoveClick to remove the package. On the confirmation page, select or clear
the option to automatically remove unused dependencies.

Table 7.3-1: Software Installation and Package Details

7.3.2 OPKG Configuration
System > Software
OPKG Configuration allows you to modify the following configuration files used by the OPKG package
manager:•

opkg.conf – This is the main configuration file. It provides the path from where the routershould fetch and update the packages.

•

customfeeds.conf – This file is used to add your custom package repositories.

•

distfeeds.conf – This file is used to set the feeds. By default, it provides the path to theLantronix packages on the D2Sphere server. All Lantronix packages may be updated from
D2Sphere.com, however, you can add your own HTTP servers where you wish to upload
your packages.

To modify the OPKG configuration, go to the System > Software page and click the Configure opkg
button.

Figure 7.3-2: OPKG Configuration

ePack User Manual for E210 and E220 Series Devices61

7: System

7.4 Startup
System > Startup

7.4.1 Initscripts
System > Startup > Initscripts
Init scripts are run to start required processes during the boot process. Enable/Disable shows thecurrent status and allows you to enable or disable the script. Newly enabled or disabled services takeeffect after the device reboots.
Start, Restart, and Stop will perform the specified action on the process immediately.

Figure 7.4-1: Startup Initscripts

7.4.2 Local Startup
System > Startup > Local Startup
The local startup file tells the router to run commands when the router boots, after the system init.
It is empty by default and does nothing.
To configure the local startup file, add commands in the editor before the line "exit 0" and click
Save. Changes will take effect on the next reboot.

Figure 7.4-2: Local Startup Script
ePack User Manual for E210 and E220 Series Devices62

7: System

7.5 Scheduled Tasks
System > Scheduled Tasks
Use the system crontab to schedule tasks to run periodically at fixed times, dates, or intervals.
Each line in the script is a single task that includes the time (minute, hour, day of month, month, dayof week) and the command to execute.

Figure 7.5-1: Scheduled Tasks Crontab

7.6 LED Configuration
System > LED Configuration
This section allows you to customize the behavior of the device LEDs. The LED Configuration page
displays the LEDs that are present on the router, their default state, and the trigger event for theLED. LED entries are stored in the sys filesystem, more specifically the /sys/class/leds directory. The
LED can be controlled by various system events, which is selected by the trigger option. To
determine which triggers are available for an LED, refer to the trigger file of that LED.
For a description of the E210 and E220 LEDs, see Appendix B. LED Behavior.

ePack User Manual for E210 and E220 Series Devices63

7: System

Figure 7.6-1: LED Configuration

7.6.1 Add/Edit LED Configuration
Edit the LED configurations with care.
Parameter

Description

Name

Displays the descriptive name of the LED.

LED Name

Displays the LED name by function.

Default state

Displays the default state of the LED before the trigger.
Options are On or Off.

Trigger

Displays the trigger event that will toggle the LED state.

Default-on – defaulton. deprecated, use default = ON andtrigger = None instead.
Network Activity triggers – netdev. The LED flashes with linkstatus and/or send and receive activity (trigger mode) on theconfigured interface (device).
None – none. LED is always in default state (off). Can beused to set the LED to always On
WiFi Activity triggers – Options with "phy" prefix. The LED
flashes on events in the physical interface rather than in thesoftware network interface.
Switch – switch0. The LED is on if a link on one of theconfigured switch ports is established. If this option is
selected, enter the Switch port mask and Switch speed mask
(hexadecimal).
Timer – timer. The LED blinks with the configured on/off
frequency. If this option is selected, enter the On-State Delayand Off-State Delay in milliseconds to indicate how long the
LED should be On or Off.
USB Device – usbdevice or usbport. The LED turns On if
USB device is connected. If this option is selected, choose
the USB device name or USB port.

ePack User Manual for E210 and E220 Series Devices64

7: System

Table 7.6-1: LED Configuration

7.7 Backup / Flash Firmware
System > Backup / Flash Firmware
Backups should be run to keep the working configuration data. The backup file can used to restore
configuration on the router or to configure a new router with the same settings.
The backup consists of all policies and all other user related information. After generating the
backup, you need to upload the file to restore the backup.
Note• Configuration archive is not compatible between versions 2.x and 3.x.

7.7.1 Actions
System > Backup / Flash Firmware > Flash Operations

Figure 7.7-1: Backup Restore and Flash Firmware
ePack User Manual for E210 and E220 Series Devices65

7: System

Parameters

Description

Backup/Restore
Download Backup

Click Generate archive button to download a .tar archive file ofthe current configuration files.

Reset to defaults

Click Perform Reset button to reset the firmware to its default
configurations.
This is valid only with squashfs images.
Note
The router can also be reset by pressing the reset button on therouter.
• Press and hold for more than 5 seconds for router to do afactory reset.
• Press and hold for more than one second but less than 5seconds for router to reboot.
• For any pressed or released event to be detected theduration of the press/release event must be at least 200ms.

Restore backup

Click Upload archive button to upload a previously generated
backup archive.

Flash image
Image

Click Flash image button to upload a sysupgrade compatible
image for replacing the running firmware.
When the binary image is loaded (.bin file), a file integrity check isdone through the use of md5 algorithm. You should verify the
md5 value with the one given along with the binary file.
When uploading the binary image, the UI will prompt to "Keepsettings and retain the current configuration." This is selected bydefault. If you deselect it, the device configuration will be reset tofactory setting after updating to the new firmware.
Avoid the "Keep settings" option when upgrading from version
2.x to 3.x or downgrading from 3.x to 2.x.

Table 7.7-1: Backup - Restore and Flash Operations

ePack User Manual for E210 and E220 Series Devices66

7: System

7.7.2 Configuration
System > Backup / Flash Firmware > Flash Operations
The custom files to be preserved during an upgrade should be added to the backup list text area,
one per line.

Figure 7.7-2: Backup File List Configuration

Parameters
Open list

Description
Click to open the list of default files and directories that should
be preserved during an upgrade.
Add the custom or additional files in the text area, one per line.

Table 7.7-2: Backup File Configurations

ePack User Manual for E210 and E220 Series Devices67

7: System

7.8 Custom Commands
System > Custom Commands
Write and execute custom shell commands from the web interface.

7.8.1 Dashboard
System > Custom Commands > Dashboard
View and run the custom commands from the dashboard. Custom commands support special
characters as arguments.

Figure 7.8-1: Custom Command Dashboard

Parameter
Run

Description
Execute the command.

Table 7.8-1: Custom Command Dashboard

ePack User Manual for E210 and E220 Series Devices687: System

7.8.2 Configure
System > Custom Commands > Configure
Configure the custom commands that can be run on the dashboard.

Figure 7.8-2: Custom Commands Configuration

Parameter

Description

Description

A short text description of the command.

Command

The command to execute on the shell terminal.
To specify a file to be executed, the file must be copied to the/usr/sbin directory on the router. Files not in env PATH require
the complete file path and should be executable.

Custom arguments

Check the box to allow user to provide additional commandline arguments while running this command.

Public access

Check the box to allow the command to be executed and theoutput downloaded without prior authentication.

Add

Click to add an instance of a custom command.

DeleteClick to delete the custom command.

Table 7.8-2: Custom Commands Configuration

ePack User Manual for E210 and E220 Series Devices69

7: System

7.9 Reboot
System > Reboot
Router will be rebooted and will reload the configuration.
Note• Any unsaved configuration will be lost when the router is rebooted.

Figure 7.9-1: System Reboot

System > Reboot > Schedule Reboot
Set a schedule to periodically reboot the router. Frequency can be set by time of day (hour andminute), day of week, and day of month. The scheduled item must be enabled in order for the
reboot to be performed.

Figure 7.9-2: Schedule Reboot

ePack User Manual for E210 and E220 Series Devices70

8: VPN

VPN
VPN
A Virtual Private Network (VPN) is a tunnel, carrying traffic of a private network from one endpoint
system to another over a public network such as the Internet. The traffic of private network so
carried over public network does not know about the existence of the intermediate hops between
the two endpoints. Similarly, the intermediate hops are also not aware that they are carrying the
network packets that are traversing the tunnel. The tunnel may optionally compress and/or encrypt
the data, providing enhanced performance and some measure of security.
Note• The Lantronix E2xx routers support additional tunneling protocols. For L2TP, PPtP, or GRE
protocol configuration, please see Section 8.1.2 Interface Protocols.

8.1 IPSec (Internet Protocol Security)
VPN > IPSec
IP Security (IPSec) is a suite of protocols designed for cryptographically secure communication at the
IP layer (layer 3). The router uses IPSec standard IPSec protocol to protect traffic. The identity ofcommunicating users is checked with the user authentication based on Pre-shared keys or X.509
certificates.
The IPSec VPN instance can be started or stopped from the Web UI or by sending an SMS AT+VPN
command. See Figure 9.6-2 for command syntax.

Figure 8.1-1: IPSec VPN Instance
IPSec is used for Gateway-to-Gateway VPN connection.
To create an IPSec interface instance:
1. Go to VPN > IPSec, and click Add.
2. Under Gateway to Gateway, click Add.

ePack User Manual for E210 and E220 Series Devices71

8: VPN

8.1.1 Gateway to Gateway
8.1.1.1 General Settings
VPN > IPSec > Edit > General settings

Figure 8.1-2: IPSec General Configuration

Parameters

Description

Profile NameEnter the Profile Name to identify the Gateway–to-Gateway IPSec
VPN connection.

Proto Type

Gateway to Gateway is the only available option.

EnableCheck to enable the connection.

Remote IPSec Gateway

Enter the remote WAN IP Address or domain name of the remote
IPSec Gateway server.

Remote AddressEnter the remote LAN IP Address and subnet of the remote IPsec
gateway server for use on the VPN connection.

ePack User Manual for E210 and E220 Series Devices72

8: VPN

Parameters

Description

Remote ID

Enter the ID of the remote network as configured on the remote
IPSec gateway server.

MethodSelect the interface used to establish the tunnel.

Static – indicates that you will specify the interface to be used
to establish the tunnel
Auto – uses the interface that is active from the Load Balancer(MWAN) policies
Route

Available if Static is selected in Method field.
Select the interface used to configure IPSec:

Wan
Wifi
Cellular
PolicyAvailable if Auto is selected in Method field.
Select the MWAN policy to use.

Interface

Displays the IP address of the interface used for the VPN
connection.

Left/NATed Address

Local LAN IP address and subnet.

Network Addres Translation

Select to enable NAT over IPsec VPN for overlapping subnets.

Local AddressEnter the local network IP Address and subnet mask of thegateway for use on the VPN connection.

Local IDEnter the ID of the local gateway as configured on the remote
IPSEC gateway server. Note: On the remote server, it may bedisplayed as "remote ID."

Key Mode

Select the type of Key mode in use for VPN connection:

Pre shared Key
X.509 certificate
Preshared-Key

This field is available if Pre shared Key is selected in the Key
Mode field.
Enter the Pre shared key. The peer uses the key to authenticate
each other from Internet Key Exchange.

Use Scep Client

This field is available if X.509 Certificate is selected as Key Mode.
The Simple Certificate Enrollment Protocol (SCEP) is used toenroll the certificate from the SCEP server by providing server
URL and password.

Certificate Name

These fields are available if Use SCEP client is selected.

Certificate Type

Select certificate enrolled in SCEP Client page as Certificate
Name.
Select Certificate Type:

pem
der

ePack User Manual for E210 and E220 Series Devices73

8: VPN

Parameters

Description

Cert.

These fields are available if Use SCEP client is not selected.

Key

The certificate files must be uploaded to the directory listed in
the field.

CA Cert.

For example, to upload the Cert. file in the "etc/ipsec.d/certs/"
folder, click Select file… to open the root directory. Navigate toand click "etc" to open the "etc folder.

Navigate to the "ipsec.d" and "certs" folders in the same way.
In the "certs" folder, click Upload file… and select the cert file tobe uploaded.

Repeat this procedure with the Key and CA Cert files.
Single hop IP for watchdog

Enter the IP address to be used for monitoring purposes. The
application will ping the IP defined here and will restart thedevice if the ping fails. This could be the LAN IP address of the
IPSEC gateway server.

Monitor interface ping
failureSelect Yes to ping the IP address defined in single hop IP for
watchdog.
Select No if you don't want the monitor interface to ping thesingle hop IP address.
The default is No.

Table 8.1-1: IPSec General Configuration

ePack User Manual for E210 and E220 Series Devices74

8: VPN

8.1.1.2 Advanced Settings
VPN > IPSec > Edit > Advanced settings
Advanced Settings contains IPSec policies defined in the remote IPSec gateway server.

Figure 8.1-3: IPSec Advanced Configuration

Parameters
IKE Mode

Description
Select the mode that IKE protocol uses to authenticate and/or
encrypt the peers.

Main
Aggressive
Key Exchange

Select the mode of encryption key exchange between two
communicating peers:

IKEV1
IKEV2
The default mode of Internet Key Exchange is IKEV1.
IKE Encryption

Select the cipher type to use for the internet key exchange (IKE):

Any
AES

ePack User Manual for E210 and E220 Series Devices75

8: VPN

Parameters

Description
AES-128
AES-192
AES-256
3DES
DES
AES-128-GCM-64
AES-192-GCM-64
AES-256-GCM-64
AES-128-GCM-96
AES-192-GCM-96
AES-256-GCM-96 AES-128-GCM-128
AES-192-GCM-128 AES-256-GCM-128
The cipher type “Any” is the default IKE Encryption.

IKE Hash

The IKE hash is used for authentication of packets for the key
exchange.
Select the IKE Hash type to use for VPN connection:

Any
MD5
SHA1
SHA2 256
SHA2 384
SHA2 512
The hash type “Any” is the default IKE hash.
IKE DH Group

Select the desired Diffie-Hellman group to use:

Group 1 (768)Group 2 (1024)
Group 5 (1536)
Group14 (2048)
Group 15 (3072)
Group 16 (4096)
Group 19 (ecp256)
Group 20 (ecp384)
Higher groups are more secure but also require longer togenerate key.
The group “Any” is selected by default.
IPSec Encryption

Select the type of IPSec encryption for VPN connection:

Any
AES
AES-128
AES-192
AES-256
3DES
DES
AES-128-GCM-64

ePack User Manual for E210 and E220 Series Devices76

8: VPN

Parameters

Description
AES-192-GCM-64
AES-256-GCM-64
AES-128-GCM-96
AES-192-GCM-96
AES-256-GCM-96 AES-128-GCM-128
AES-192-GCM-128 AES-256-GCM-128
The cipher type “Any” is the default IPSec Encryption.

IPSec Hash

The IPSec hash is used for authentication of packets for the key
exchange.
Select the IPSec Hash type to use for VPN connection:

Any
MD5
SHA1
SHA2 256
SHA2-384
SHA2-512
The hash type “Any” is the default IPSec hash.
DH Group

Select the desired Diffie-Hellman group to use:

Group 1 (768)Group 2 (1024)
Group 5 (1536)
Group14 (2048)
Group 15 (3072)
Group 16 (4096)
Group 19 (ecp256)
Group 20 (ecp384)
Higher groups are more secure but also require longer togenerate the key.
The group “Any” is selected by default.
DPD Keep Alive TimeEnter the time in seconds for interval between Dead Peer
Detection keep alive messages.

DPD Timeout

Enter the time in seconds of no response from peer before Dead
Peer Detection times out.

IKE Re-key TimeEnter the time in seconds between changes of the encryption
key. To disable changing the key, set it to 0.

SA Life TimeEnter the time in seconds for the security association lifetime.

DPD Action

Select the desired Dead Peer Detection action. This action must
be taken when a dead Internet Key Exchange Peer is detected.

Strict Cipher

When enabled both routers should match ciphers.

Table 8.1-2: IPSec Advanced Configuration

ePack User Manual for E210 and E220 Series Devices

77

8: VPN

8.2 OpenVPN
OpenVPN is an open-source software application that implements virtual private network (VPN)
techniques for creating secure point-to-point or site-to-site connections. It uses the OpenSSL library
to provide encryption of both the data and control channels. OpenVPN can run over User Datagram
Protocol (UDP) or Transmission Control Protocol (TCP) transports, multiplexing created SSL tunnels
on a single TCP/UDP port. OpenVPN fully supports IPv6 as protocol of the virtual network inside atunnel and the OpenVPN applications can also establish connections via IPv6. It has the ability towork through most proxy servers (including HTTP) and is good at working through Network addresstranslation (NAT) and getting out through firewalls. The server configuration has the ability to "push"certain network configuration options to the clients. These include IP addresses, routing commands,
and a few connection options.
E210 and E220 series routers support OpenVPN client, server, and pass through.

8.2.1 OpenVPN Instances
VPN > OpenVPN
The OpenVPN client will attach itself to the configured OpenVPN server over any available WAN,
LAN, or Cellular network interface. If the auto-connect function is enabled, OpenVPN will not only
connect over available WAN but also switch between WANs when one WAN fails-over to anotherand also auto start on every reboot. The OpenVPN client must be enabled to be operational.
To create an OpenVPN instance, use the template based configuration or upload your own OVPN
configuration file. The E210 and E220 routers come with pre-defined client templates and server
templates.
Note• You must manually enter the DNS from Network > DHCP and DNS.

ePack User Manual for E210 and E220 Series Devices78

8: VPN

Figure 8.2-1: OpenVPN Service Configuration

Parameters

Description

OpenVPN instances
EnabledClick Enabled to allow restarting of OpenVPN in case the router isrebooted.

Started

Displays the status of OpenVPN instance, whether the instance isrunning or not.
If the status is running, Yes is displayed along with Process ID(PID), else No.

Start/Stop

Click to start or stop the OpenVPN instance.
Note:• The VPN instance can be started or stopped using SMS bysending an SMS AT+VPN command. See Figure 9.6-2 forcommand syntax.

Port

Displays the port number. This port is for communication
between the server (listening) and client.

ProtocolDisplays the protocol used for communication. The available
protocols are TCP and UDP.
The default protocol is UDP.

ePack User Manual for E210 and E220 Series Devices

79

8: VPN

Parameters
TunnelDescription
Displays the type of networking interface to use for tunnel, via
the TUN/TAP driver. Can be tun or tap.
The default value is tun.

Template based
configuration

Create a VPN instance for client or server based on templates.
After adding the instance, you can edit its configuration.
Instance name – select the OpenVPN instanceSelect template – select the client or server template to use as
the basis for the instance.
Click Add to add the instance.
After successful upload, the new OpenVPN instance will appear
under the OpenVPN Instances section. You can modify the
OpenVPN configuration directly in the web interface

OVPN configuration file
uploadCreate a VPN instance using a configuration file. Select the
OpenVPN instance name and then click Browse to locate theconfiguration file.
Click Upload to upload the selected file and create theconfiguration for the OpenVPN instance..
After successful upload, the new OpenVPN instance will appear
under the OpenVPN Instances section. Click Edit to view andmodify the configuration file in an editor and to optionally, add
the user and password authentication credentials for the
OpenVPN server.

Table 8.2-1: OpenVPN Service Configuration

ePack User Manual for E210 and E220 Series Devices80

8: VPN

8.2.2 Edit OpenVPN Instance from Template

Figure 8.2-2: OpenVPN Service Configuration for Client ModeePack User Manual for E210 and E220 Series Devices818: VPN

Parameters

Description

OpenVPN Client
Verb

Select the output verbosity level. Higher the verbosity, higher willbe the internal log details.

nobindIf selected, do not bind to local address and port
If you want to run multiple VPN clients on the same host, it's
advisable to select "nobind".

comp_lzo

Select Yes to use fast lzo compression.

ClientCheck to enable the OpenVPN client mode and disable the
OpenVPN server mode.

remoteThe IP address or host name of the remote server that the client
will try to connect to.
The client will attempt to connect in the order specified.

ca

Upload the Certificate authority file.
The certificate and key files are uploaded to the /etc/openvpn/
folder on the router using the web interface.
For example, to upload the CA cert file:
Click the icon next to "ca" to display the directory structure of therouter.

Navigate to and click "etc" to select the "etc" folder.

Next, navigate to and select the "openvpn" folder.
Under /etc/openvpn/, click Upload file… and select the file to be
uploaded.

ePack User Manual for E210 and E220 Series Devices82

8: VPN

Parameters

Description

Repeat this procedure with the other certificate and key files.
dhUpload the Diffie Hellman parameters file. This parameter isrequired only in Server mode.

cert

Upload the local certificate filekey

Upload the local private key file

Additional Field – Add

Displays additional configuration parameters for the VPN
instance or additional files that can be uploaded. Select the fieldand click Add.

OpenVPN Server
verb

Verbosity level of the output. Higher verbosity level will produce
more detailed internal log output.

server_bridge

Enter the IP Address and Subnet Mask for server mode

comp_lzo

Select Yes to use fast lzo compression.

keepalive

Server sends the keepalive packets to the client.
Default is 10 60.

ca

Upload the Certificate authority file.
The certificate and key files are uploaded to the /etc/openvpn/
folder on the router using the web interface.
Please see the ca field in the OpenVPN Client section of this tablefor details describing the certificate upload procedure.

dhUpload the Diffie Hellman parameters filecert

Upload the local certificate filekey

Upload the local private key file

Additional Field – Add

Displays additional configuration parameters for the VPN
instance or additional files that can be uploaded. Select the fieldand click Add.

Table 8.2-2: OpenVPN Service Configuration

ePack User Manual for E210 and E220 Series Devices838: VPN

8.2.3 Edit OpenVPN Instance from Configuration File
After uploading the OVPN configuration file, the new instance appears under OpenVPN Instances.
To edit the OpenVPN instance, click Edit. This displays the OVPN configuration file. You may also add
the user and password authentication credentials for the OpenVPN server.

Figure 8.2-3: OpenVPN Edit Configuration FileePack User Manual for E210 and E220 Series Devices84

9: Services

9 Services
The E210 and E220 series routers are equipped with services complementing the routing features.
These services include:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

Dynamic DNSAgentsSD(HC)/MMC card
SNMPD
SNMPTRAPD
Modbus Master
Modbus Slave
DNP3
IEC 104 Master
DNP3 to IEC104
DOTA
Page Selector
SMS
Reporting AgentGPS
Keepalived
Last Gasp
SerialService Actions
Events
GSM UpdateuHTTPdSCEP Client

ePack User Manual for E210 and E220 Series Devices85

9: Services

9.1 Dynamic DNS
Services > Dynamic DNS

Dynamic DNS (Domain Name System) is a method of keeping a static domain/host name linked to a
dynamically assigned public IP address allowing your server to be more easily accessible fromvarious locations on the Internet.
This section lets you configure your DDNS service so that your router automatically updates yourpublic IP to your DDNS provider. Before starting this configuration, you should already haveregistered a DNS name with a compatible DDNS service provider. Compatible DDNS providers arelisted here: https://openwrt.org/docs/guide-user/services/ddns/client.

9.1.1 Basic Settings
Services > Dynamic DNS > Basic Settings

Figure 9.1-1: Dynamic DNS Basic Configuration

ePack User Manual for E210 and E220 Series Devices869: Services

Parameters
EnableDescription
Select to enable Dynamic DNS.
Clear to disable Dynamic DNS.
Dynamic DNS allows the router to be reached with a fixedhostname while having a dynamically changing IP Address.

Lookup Hostname

Name to identify the host that you want to use on DDNS server.
This is the domain name that you registered with your DDNS
service provider.
The hostname is received from the dynamic DNS service
provider.

IP address version

Select the IP address version - IPv4 or IPv6.

DDNS Service Provider[IPv4/IPv6]

Select the DDNS service provider from the drop down list.

DomainThe domain that you want to update. Usually the same as the
lookup hostname.

Username

Username of DDNS account.
The username is received from the DDNS service provider.

Password

Password of DDNS account.
The password is received from DDNS service provider.

Use HTTP Secure

Select to use HTTPS with the DDNS provider.
Otherwise, leave it unchecked.

Path to CA-certificate

This field is visible if HTTPS is selected.
Enter the directory or file path of the ssl certs.
To run HTTPS without verification of server certificates (insecure),
enter IGNORE.

Table 9.1-1: Dynamic DNS Basic Configuration

ePack User Manual for E210 and E220 Series Devices87

9: Services

9.1.2 Advanced Settings
Services > Dynamic DNS > Advanced Settings

Figure 9.1-2: Dynamic DNS Advanced Configuration

Parameters
IP address source [IPv4/IPv6]

Description
Select the IP Address source: Network, Interface, URL, or Scriptand enter the appropriate configuration details.
Network

Network (IPv4) - Select the software Interface name to readsystems IPv4 address from.
Interface

Interface - Select the physical network interface from theavailable options

ePack User Manual for E210 and E220 Series Devices88

9: Services

Parameters

Description
URL

URL to detect - Enter the URL to read systems IP address
from. The source IP Address by default is URL.
Event Network (IPv4) – network on which the ddns updater
scripts will be run
Bind Network – leave as "default" or select the network to use
for communication
ScriptScript - Enter the script path and file name.
Event Network (IPv4) – network on which the ddns updater
scripts will be run
Force IP Version

Select if you want to force the usage of either IPv4 or IPv6 only.

DNS-ServerEnter DNS server domain name or IP address if you want tooverride the default DNS server to detect the registered IP.
Enter IP address or FQDN.

PROXY-ServerEnter the proxy server to use for detection and updates.
Format: [user:password@]proxyhost:port
IPv6 address must be given in square brackets:[2001:db8::1]:8080

Log to syslog

Select log level to save the logs in Syslog server, or select No
logging to save only critical errors.
Available options:

No logging, Info, Notice, Warning, Error.
The default setting is Notice.
Log to file

Select to allow the detailed messages to be written to a log file.

Table 9.1-2: Dynamic DNS Advanced Configuration

9.1.3 Timer Settings
Services > Dynamic DNS > Timer Settings

ePack User Manual for E210 and E220 Series Devices89

9: Services

Figure 9.1-3: Dynamic DNS Timer Settings Configuration

Parameters

Description

Check IntervalSpecify the time interval after which the DDNS server should
check and update the IP address of the router.
Default is 10 minutes.

Force IntervalSpecify the time interval after which the DDNS server should
check for and force update the IP address of your server even if it
is not changed.
The Force Interval should be greater than the Check Interval.
Default 72 hours.

Error Retry Counter

The number of retries to attempt before the script stops
execution.
Default setting is 0 which indicates infinite retries.

Error Retry IntervalEnter the time interval after which the router must retry to
update the obtained WN IP address with the DNS name or thehost name.
Default 60 seconds.

Table 9.1-3: Dynamic DNS Timer Settings Configuration

9.1.4 Log File Viewer
Services > Dynamic DNS > Log File Viewer
Click Read/Reread log file to display the Dynamic DNS service logs.

ePack User Manual for E210 and E220 Series Devices90

9: Services

Figure 9.1-4: Dynamic DNS Log File Viewer

ePack User Manual for E210 and E220 Series Devices91

9: Services

9.2 Agents
Services > Agents
Agents are customized applications loaded on the router that communicate with a specificdevice/data management platform.
By default, Lantronix Wireless Automation Server (MWAS) agent is loaded on the router, whichfacilitates bi-directional data communication between devices connected to the router (mainly using
dynamic IP Address) and a centralized server through a kalkitech compatible MWAS server.
[ Device/SCADA <=> Kalkitech(sever) ] <=> [ MWAS(agent) <=> Device/PLC ]Figure 9.2-1: Agent Configuration

Parameters

Description

AgentsAgentsSelect the Agent from the dropdown list:

MWAS – Lantronix Wireless Acquisition System
EnableClick to enable the selected agent.

LAN IP/URLEnter the IP Address of remote/field device.

LAN PORTEnter the Port number of remote/field device.

WAN IP/URLEnter the IP Address of the M2M Gateway.

WAN PORTEnter the Port number of the M2M Gateway.

Enable WAN Backup IP

Click to enable the backup Gateway Server.

Backup WAN IP/URL - Enter the IP Address of backup M2M
Gateway.
Backup WAN Port - Enter the Port number of backup M2M

ePack User Manual for E210 and E220 Series Devices92

9: Services

Parameters

Description
Gateway.

Table 9.2-1: Agent Configurations

9.3 SD(HC)/MMC Card
Services > SD(HC)/MMC Card
The E210 series devices provides one microSD-XC card slot that supports an SD(HC) card or MMC
card for external file storage.
The SD(HC)/MMC card should be formatted before it is mounted in the E210 device.

Figure 9.3-1: SD(HC)/MMC Card

Parameters

Description

MMC device

Enter the device name.

Mount point

Enter the mount point directory to the filesystem provided by theSD(HC)/MMC card, relative to the root directory.

Auto mount

Select to mount the device automatically when the router boots.
If unselected, the device must be mounted manually.

Options

Enter Linux mount options to be run when the device is mounted.

Table 9.3-1: SD(HC)/MMC Card Configuration

ePack User Manual for E210 and E220 Series Devices93

9: Services

9.4 SNMPD
Services>SNMPDThe E210 and E220 series gateways use Net-SNMP to implement SNMP v1, v2c, and v3 using both
IPv4 and IPv6 to remotely manage and monitor network components and systems. The
implementation includes an SNMP agent for responding to SNMP requests or actions from the
SNMP manager, an SNMP-TRAP application for receiving and processing SNMP notifications (ortraps), and support for a number of applications to retrieve information from an SNMP capabledevice (snmpget, snmpgetnext, snmpwalk), retrieve statistics (snmpstatus), and write configurationon the device (snmpset).
The configuration of the SNMP agent and SNMP-TRAP application configuration files (mainly
snmpd.conf and snmptrapd.conf) is done using the web interface. Likewise, operations such as
enabling or disabling the agent, and trap receiver are done using the web interface. Most
management operations and monitoring, however, will be done through the SNMP manager.
Prerequisites to use this feature include having knowledge of SNMP and having a network
management system (NMS) with which to monitor the network.
For more information about Net-SNMP or SNMP in general, please refer to the Net-SNMP web site.
For information about using SNMP management systems, see the appropriate documentation foryour NMS application.

9.4.1 SNMP Architecture
A typical SNMP implementation includes the following components:
•

•
•

•

Network Management System (NMS) – a combination of hardware devices and software(SNMP manager) used to monitor and administer a network. The manager polls the deviceson the network for information about network connectivity, activity, and events.
Managed device – any device on the network that is managed by the NMS.
SNMP agent – the SNMP process that resides on the managed device and communicates with
the SNMP manager. It responds to requests for information or actions from the manager andgenerates SNMP notifications (traps). The agent also controls access to the agent’s MIB.
Management Information Base (MIB) – collection of objects that specify the information thatthe agent provides to the SNMP manager.

9.4.2 SNMP Versions
The E210 and E220 series software supports the following versions of SNMP: SNMPv1, SNMPv2c and
SNMPv3/USM.
••

SNMPv1 – Simple Network Management Protocol, defined in RFC 1157. Security is based oncommunity strings.
SNMPv2c – The community string-based Administrative Framework for SNMPv2. SNMPv2c isdefined in RFCs 1901, 1905, and 1906. Security is based on community strings.

ePack User Manual for E210 and E220 Series Devices94

9: Services•

SNMPv3/USM – SNMPv3 is defined in RFCs 3413-3415. It provides secure access to devices byauthenticating and encrypting packets over the network. SNMPv3 provides message integrity,
authentication, and encryption security features.

SNMP
Model

Level

Authentication

Encryption

v1

noAuthNoPriv

Community String

No

v2c

noAuthNoPriv

Community StringNo

v3

noAuthNoPriv

UsernameNov3

authNoPriv

MD5 or SHA

No

v3

authPriv

MD5 or SHA

DES or AES

Table 9.4-1: SNMP Security Models and Levels

9.4.3 SNMP Configuration
Services>SNMPDThe SNMP agent must be configured to use the version of SNMP that is supported by the
management station. An agent can communicate with multiple managers. You can configure the
SNMP agent to support communication with one management station using SNMPv1, one using
SNMPv2c, and one using SNMPv3.
The web interface allows you to configure the SNMP settings. The configuration specifies directives
in the following areas.
••••

agent behaviour
access control to the agent (VACM)
system information and monitoring
active monitoring of the local system

SNMP Configuration consists of the following sections:•••

General Settings
View-based Access Control Model (VACM) Settings
Trap Settings

9.4.3.1 SNMP General Settings
To view and configure SNMP General Settings, go to:Services>SNMPD>General Settings

ePack User Manual for E210 and E220 Series Devices95

9: Services

Figure 9.4-1: SNMP General Settings

ePack User Manual for E210 and E220 Series Devices96

9: Services

The below table lists the configuration details for General Settings:
Parameters

Description

EnableSelect to enable the SNMPD application.

EngineID

Displays the SNMP engine ID, which is required to respond to
SNMPv3 requests. This value is auto-generated when the agent isfirst started.

agentaddress

Defines a list of listening addresses on which to receive incoming
SNMP requests.
The default agent behavior is listening on all interfaces on UDP
port 161. This is equivalent to the following directive:
agentaddress udp:161 or simply agentaddress 161
To configure this field, specify one or more listening addresses
using the format: [<transport-specifier>:]<transport-address>
Examples:•UDP:161, UDP6:161 – accept requests on all IPv4 and IPv6
interfaces on UDP port 161•

localhost:161 – accept requests on the local loopback interface
on UDP port 161•

127.0.0.1 – accept requests on the local loopback interface(UDP is implied)•

UDP:161, UDP6:161, TCP:161, TCP6:161 – accept requests on
all IPv4 and IPv6 interfaces on UDP port 161 and TCP port 161

Other combinations are also valid.
System Information

Displays the system group information. System name, contact
and location can be set through the SNMP Manager.
•

sysName – default is Lantronix-<Model Name>-<device MAC
address•

sysContact – default is root@localhost•

sysLocation – default is Unknown•

sysDesr – default ‘uname -s -n -r -v -m’ command output is notwritable using a set request

Process Monitoring
Process Monitoring

Monitors the processes running on the local system and registers
a command that can be run to fix errors.
This table displays the processes that are being monitored andprovides options to add, edit or delete items from the monitoringtable.
•

Click Add to add an entry to the process monitoring table.
Enter the process name and other details as shown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

Process Name

Name of the process that is being counted.

Max Process

Maximum number of processes that should be running.

ePack User Manual for E210 and E220 Series Devices97

9: Services

Parameters

Description
Generates an error flag if the number of processes detected isgreater than the maximum specified.

Min Process

Minimum number of processes that should be running.
Generates an error flag if the number is less than the minimum.

Enable Fix Action

Tells the agent to attempt to fix the problem by calling theoperation specified in the fix action.
The command will not be invoked automatically.

Program name (Procfix Action)

The command that gets run when the error is detected, and thefix action field is enabled.

Arguments

Arguments that are supported.

Disk Usage Monitorng
Disk Usage Monitoring

Monitors the minimum threshold specified in KB or as apercentage of the total disk space and registers an error if theavailable disk space is less than the minimum required space
configured for it. Disk usage monitoring section also allows formonitoring of all disks found on the system according to a
specified percentage threshold. (See Include all disks.)
This table displays the disks being monitored for disk usage andprovides options to add, edit, or delete items from the monitoringtable.
•

Click Add to add an entry to the disk usage monitoring table.
Enter the partition and space details as shown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

Partition

Path where the disk is mounted.

Minimum Space

Minimum space or minimum percentage must be configured.
•

Minimum space required on the disk in KB before the errors
are triggered.

•

Minimum space required on the disk as a percentage of thetotal disk space before the errors are triggered.

Include All Disks

Enables monitoring of all disks found on the system.

Minimum Percent

Minimum space required as a percentage of total disk space of alldisks before the errors are triggered.
Note:
The threshold for individual disks can be configured using thepartition directives above.

System Load Monitoring
Load Monitoring

Displays the system load monitoring details if configured.
Monitors the load average of the local system.

Enable Load Monitoring

Enables monitoring of system load averages.

1 - Minute Max. Load

The one-minute maximum load average before errors are triggered.

ePack User Manual for E210 and E220 Series Devices98

9: Services

Parameters

Description

5 - Minute Max. Load

The five-minute maximum load average before errors are triggered.

Swap Space Threshold (in KB)

Amount of swap space (in KB) available on the local system.
The default threshold is 16 MB. If the available swap space is lessthan 16 KB if not user-configured, or less than the configured
value, and if Default Monitoring is enabled, it will generate a
notification to SNMP traps.

Log File Monitoring
Log File Monitoring

Monitors the size of the log files and registers an error if the size
exceeds the maximum size configured for it.
Limit: Up to 20 files can be monitored.
This table displays log files being monitored for file size limits andprovides options to add, edit or delete items from the monitoringtable.
•

Click Add to add an entry to the log file monitoring table. Enterthe details as shown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

File Path

File path and name of the file to be monitored.

Maximum Size

Maximum file size in KB before errors are triggered.

Table 9.4-2: SNMP General Settings Configuration

9.4.3.2 SNMP View-based Access Control Model (VACM) Settings
SNMP v1/v2c/v3-USM follow the VACM model. VACM determines whether to allow access to a
managed object in a local MIB by a remote principal. VACM makes use of a MIB that defines theaccess control policy for the agent and makes it possible to use remote configuration.
To view and configure VACM Settings, go to:Services>SNMPD>VACM Settings

ePack User Manual for E210 and E220 Series Devices99

9: Services

Figure 9.4-2: SNMP VACM Settings

ePack User Manual for E210 and E220 Series Devices100

9: Services

The below table lists the configuration details for VACM Settings:
Parameters

Description

Com2Sec Configuration
Com2Sec Configuration

The com2sec directive maps a v1/v2c community string and asource IP or network address to a security name (username).
This table displays com2Sec entries and provides options to add,
edit, or delete items from the table.

Security name•

Click Add to add an entry to the com2sec table. Enter thedetails as shown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

Username specifies the security name to which this source andcommunity string are to be mapped.
Security name can contain alphanumeric characters, dash,underscore, or period. No spaces or other special charactersallowed.

SourceCommunity

Source can be one of the following:•

restricted source – a specific hostname or address.

•

subnet – represented as IP/Mask (10.10.10.10/255.255.255.0)
or IP in CIDR notation (10.10.10.10/8) or the IPv6 equivalents.

•

global – use “default”•

localhost – use “localhost” or 127.0.0.1

Specifies the community (user credential) to use for SNMP
requests.
The same community string can be specified in separatecom2sec directives.

Group Configuration
Group Configuration

The group directive maps a security name in the specified
security model (see Table 9.4-1 on page 96) into a named group.
This table displays groups and provides options to add, edit, ordelete items from the table.
•

Click Add to add an entry to the group table. Enter the details
as shown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

Note:• Several group directives can specify the same group name,allowing a single access setting to apply to several users
and/or community strings.
• All members of one group have the same access rights.
• A user cannot belong to more than one group for each of the
security models.

ePack User Manual for E210 and E220 Series Devices101

9: Services

Parameters

Description
Groups must be set up for the community-based models
separately. You would typically create two group directives
for a single com2sec directive, one for v1 and one for v2c.

•

Group Name

VersionSecurity NameGroup name can contain alphanumeric characters, dash,underscore, or period. No spaces or other special charactersallowed.
•

v1

•

v2c

•

usm

Security name should be one of the security names defined in
the com2sec configuration.

Access Configuration
Access Configuration

The access directive maps a group name to an access level(noauth, auth, or priv) and read/write/notify scope for a specified
security model (v1, v2c, v3/usm, or any).
The table displays access entries and provides options to add,
edit, or delete items from the table.
•

Click Add to add an entry to the access table. Enter the details
as shown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

Group NameGroup name should be one of the group names defined in Groupconfiguration.

Context

Default context is the empty string “”, which equates to “none”.
For v1 or v2c, context will be empty (“none”).

Version

•

v1

•

v2c

•

usm

•

any

This value should match the SNMP version of clients that willconnect to this agent.
Security Name

Security name should be one of the security names defined in
the com2sec configuration.

Access Configuration
Access Configuration

The access directive maps a group name to an access level(noauth, auth, or priv) and read/write/notify scope for a specified
security model (v1, v2c, v3/usm, or any).
The table displays access entries and provides options to add,
edit, or delete items from the table.
•

Click Add to add an entry to the access table. Enter the details
as shown below.

ePack User Manual for E210 and E220 Series Devices102

9: Services

Parameters

Description•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

Group NameGroup name should be one of the group names defined in Groupconfiguration.

Context

Default context is the empty string “”, which equates to “none”.
For v1 or v2c, context will be empty (“none”).

Version

•

v1

•

v2c

•

usm

•

any

This value should match the SNMP version of clients that willconnect to this agent.
Level

•

noauth•auth – (authNoPriv) use strong authentication•priv – (authPriv) use strong authentication and encryption

For v1 or v2c, set the level to noauth.
For usm, set the level to at least the minimum level required. The
SNMPv3–USM security level must be configured to this level orhigher.
Match

Read

Write

NotifySpecifies how the context should be matched against the context
of the incoming request.
•

exact – context name must match exactly (default)•

prefix – only the first part of the context name must match

Specifies the view to be used for GET requests.
•

unspecified – if left unspecified, it will be treated as none - noaccess•none – no access•custom – name of the view from the view table

Specifies the view to be used for SET requests.
•

unspecified – if left unspecified, it will be treated as none - noaccess•none – no access•custom – name of the view from the view table

Specifies the view to be used for TRAP/INFORM requests.
•

unspecified – if left unspecified, it will be treated as none - noaccess•none – no access•custom – name of the view from the view table

View
View

Creates a named view, which determines what part of the MIB
the access control is applied to.

ePack User Manual for E210 and E220 Series Devices103

9: Services

Parameters

Description
The table displays view entries and provides options to add, edit,
or delete items from the table.
•

Click Add to add an entry to the view table. Enter the details asshown below.

•

Click Edit to modify a table entry.

•

Click Delete to delete an entry from the table.

View Name

View name can contain alphanumeric characters, dash,underscore, or period. No spaces or other special charactersallowed.

Type

Specifies whether to include or exclude the elements of thesubtree from the MIB view.
•

included – the MIB view includes all the elements of the subtree•

excluded – the MIB view excludes all the elements of thesubtreeOID

The OID defining the root of the subtree to include or exclude
from the named view.

Mask (optional)

List of hex octets optionally separated by ‘.’ or ‘:’ with the set bits
indicating which sub identifiers in the view OID to match against.
Recommended to ignore this field.

Engine ID Configuration
Engine ID Configuration

Engine ID is required to respond to SNMPv3 requests. This ID isdetermined automatically but can be configured manually. The
string must be consistent through time and should not change orconflict with another agent’s engine ID. For this reason, it isrecommended that you use the default values unless you knowwhat you are doing.

EnableEnables the engine ID.

engineID

Specifies that the engine ID should be built from the given text
string.
Default: lantronix

engineIDTypeSpecifies that the engineID should be built from given type.
Type 1 – IPv4 address
Type 2 – IPv6 address
Type 3 – MAC address (default)

engineIDNic

Specifies that the engine ID should use the following interface
when determining the MAC address. Only required if engine ID
Type 3 is specified. Default: eth0

SNMPv3 with (USM) Configuration
SNMPv3 with (USM)
Configuration

Create one or more SNMPv3 users.
The table displays SNMPv3 with USM users and provides options
to add, edit, or delete items from the table.
•

Click Add to add an entry to the table. Enter the details as

ePack User Manual for E210 and E220 Series Devices104

9: Services

Parameters

Description
shown below.
•

Click Edit to modify an entry.

•

Click Delete to delete an entry from the table.

User Name

Map the security name from the VACM com2sec table here.

Security Level

Security level can be:

Auth Protocol•

NoAuth,NoPriv – no authentication or privacy protocol•

Auth,NoPriv – has authentication (MD5|SHA), no privacy
protocol•Auth,Priv – has authentication (MD5|SHA), and has privacy
protocol (DES|AES)

Select the authentication protocol.
•

MD5

•

SHA

SHA authentication requires SSL.
Auth Password

Enter the MD5 or SHA passphrase to use for authentication.
The passphrase must be at least 8 characters.

Priv Protocol

Select the privacy protocol
•

DES

•

AES

DES and AES require SSL.
Priv Password

Enter the privacy protocol passphrase.
The passphrase must be at least 8 characters.

Table 9.4-3: SNMP VACM Settings Configuration

9.4.3.3 SNMP Trap Settings
The SNMP agent is configured to generate Trap Notifications.
To view and configure SNMPD Trap Sender settings, go to:Services>SNMPD>Trap Settings

ePack User Manual for E210 and E220 Series Devices

105

9: Services

Figure 9.4-3: SNMP Trap Settings
The below table lists the configuration details for Trap Settings:
Parameters

Description

EnableAuthentication Failure Trap
EnableIf enabled, generates authentication failure traps. This is disabled
by default.

Enable Default Monitors

Monitors the UCD-SNMP-MIB tables for problems. The
monitored events (process, load, disk usage, log file) should firstbe configured on the General Settings page.
By default, the agent will check the default monitors once on
start-up and then every 10 minutes.

Enable Link Up/Down
Notification

Monitors the ifTable for changes in network interfaces link status
and generates linkUp or linkDown notifications as appropriate.

Trap Configuration
VersionSpecifies the SNMP version. Can be v1, v2c, or v3.

ePack User Manual for E210 and E220 Series Devices106

9: Services

Parameters

Type

Description•

For v1, community and host are required.

•

For v2c, type, community, and host are required.

•

For v3, type, username, security level, and host are required.

Select the type as trap or inform.
For information about SNMPv3 notification behavior and thedifference between traps and informs, see the following tutorial:
http://www.net-snmp.org/tutorial/tutorial5/commands/snmptrap-v3.html
To use type inform, the SNMP manager must also support informmessages.

User Name

Username is the SNMP v3 security name, as defined in VACM
settings.

Security Level

Security level can be:•

NoAuth,NoPriv – no authentication or privacy protocol•

Auth,NoPriv – has authentication (MD5|SHA), no privacy
protocol•Auth,Priv – has authentication (MD5|SHA), and has privacy
protocol (DES|AES).

If Auth,NoPriv or Auth,Priv are selected, additionals fields will be
displayed. Enter the authentication and privacy protocol details
as needed.
Community

Defines the v1 or v2c community string to be used when sending
traps.

Host

Defines the IP address and port that the trap should be sent to.
Typically, this could be localhost:162 or the IP and port of the
SNMP manager.
The well known SNMP Trap port is port 162.

Table 9.4-4: SNMP Trap Settings Configuration

ePack User Manual for E210 and E220 Series Devices107

9: Services

9.5 SNMPTRAPD
Services>SNMPTRAPD
The SNMP-TRAP application listens for incoming SNMP notifications. When it receives a notification,
it can log the notification, pass the details to a handler program, or forward the trap to anothernotification receiver.

9.5.1 SNMP-TRAP Configuration
To view and configure SNMP-TRAP settings, go to:Services>SNMPTRAPD>General Settings

ePack User Manual for E210 and E220 Series Devices108

9: Services

Figure 9.5-1: SNMPTRAPD General Settings

ePack User Manual for E210 and E220 Series Devices109

9: Services

The below table lists the configuration details for SNMPTRAPD General Settings:
Parameters

Description

GeneralEnableEnables the SNMPRAP application

Ignore Authorization Failure

Select to ignore authentication failure traps.

SNMP-TRAP Daemon Configiration
VersionSpecifies the SNMP version. Can be v1, v2c, or v3.
•

For v1, community and host are required.

•

For v2c, type, community, and host are required.

•

For v3, type, username, security level, and host are required.

Community

Specifies the community used for v1 and v2c authorization.
Notifications using the specified community will be allowed to beprocessed per the notification handling configuration.

UsernameEnter the SNMP v3 username, as defined in VACM settings.

Type

Select the type as trap or inform.
For information about SNMPv3 notification behavior and thedifference between traps (unacknowledged) and informs(acknowledged), see the following tutorial:
http://www.net-snmp.org/tutorial/tutorial5/commands/snmptrap-v3.html

EngineID

Specifies the EngineID value. For use only with SNMPv3 traps.

Security Level

Security level can be:
NoAuth,NoPriv – no authentication or privacy protocol
Auth,NoPriv – has authentication (MD5|SHA), no privacy protocol
Auth,Priv – has authentication (MD5|SHA), and has privacy protocol(DES|AES).
Enter the authentication and privacy protocol type andpassphrase as appropriate for the selection.

SourceUsed for v1 and v2c authorization. The source field specifies thatthe configuration should only apply to notifications received fromthe listed sources.

OID

Specifies the OID defining the root of the subtree to add to or
exclude from the named view.

Logging Configuartion
Log

Enables log.

Logging Location

Specifies where to log the notifications, either to a local file on
the gateway or to the syslog. Select one:

Format1•

Specific file – enter the file path•

syslogSpecify the format used to display SNMPv1 traps.

ePack User Manual for E210 and E220 Series Devices110

9: Services

Parameters

Description
If no format is defined, the default Net-SNMP format will be
provided. For information about the format specification, see
http://www.net-snmp.org/docs/man/snmptrapd.html.

Format2

Specify the format used to display SNMPv2c and SNMPv3 traps.
SNMP v2c and v3 use the same PDU format.
If no format is defined, the default Net-SNMP format will be
provided. For information about the format specification, see
http://www.net-snmp.org/docs/man/snmptrapd.html.

Notifications Handling
ExecutePass the details of the trap to a specified handler program.

Execute OID

Invokes the specified program with the given arguments
whenever a notification is received that matches the OID token.
For SNMPv2c and SNMPv3 notifications, this token will becompared against the snmpTrapOID value taken from thenotification.
For SNMPv1 traps, the generic and specific trap values and theenterprise OID will be converted to the equivalent OID per RFC
2576.
If the OID field is the token default then the program will be
invoked for any notification not matching another OID-specifictraphandle entry

Program

Program name with path specified followed by a space separated
arguments if any. For example, /usr/bin/xyz 1 2 3Net

Forward the trap to another notification receiver.
Note:
Do not use this directive for SNMPv3

Net OIDSee description for execute OID above

Destination

Forwards notifications that match the specified OID to anotherreceiver.

Table 9.5-1: SNMPD General Settings Configuration

ePack User Manual for E210 and E220 Series Devices111

9: Services

9.6 Modbus Master
Services>Modbus Master
Modbus Master configures the gateway as a master device that connects to slave devices. It
supports Modbus RTU through a serial line or Modbus TCP through a TCP/IP network.
Modbus RTU based serial slave devices can also be connected via the Ethernet through an existing
Modbus TCP/IP network. Any device having access to a given Modbus implementation will be able toperform the full range of operations that the implementation supports.

9.6.1 Serial Transmission Mode
The E210 and E220 series gateway can be configured to communicate on Modbus networks using
RTU. Modbus RTU can use the available serial interface. To use Modbus on the serial line, configure
the Modbus master settings, the Serial port communication parameters, and the mode for thedesired serial interface.

9.6.2 Ethernet Transmission Mode
The E210 and E220 series gateway can be set up to communicate on Modbus networks using TCP/IP.
The Modbus Protocol header is added to the start of each Modbus message and the slave address
and CRC are removed. Modbus TCP uses TCP port 502 and includes a single byte function code
(1=255) preceded by a 6 byte header.
To use Modbus using TCP/IP, configure the Modbus master settings on the gateway. Separately,
configure the Modbus slave settings on the Modbus TCP device.
The below table shows the structure of the Modbus application protocol header.

9.6.3 Modbus Master Configuration
Services>Modbus Master>Configuration

Figure 9.6-1: Modbus Master Configuration
This page lets you enable or disable the Modbus master, configure the Modbus master settings, andview the status of active Modbus connections. When a connection is active, the remote client
information is displayed as well as the number of protocol data units (PDUs) that have been sent andreceived.

ePack User Manual for E210 and E220 Series Devices112

9: Services

The Modbus configuration settings are contained in a Modbus configuration file, which is a CSV
formatted file that you can generate using the Modbus Configuration Utility at: https://
modbus.d2sphere.com. The following configuration sections can be configured: the target serverwhere the data will be reported, up to six (6) polling groups, up to five (5) upload groups, andModbus logger details.
Parameters

Description

EnableClick to enable Modbus Master on the selected interface.

Upload Configuration File

Upload the Modbus configuration file (CSV formatted file). This
file contains all the configuration for the Modbus server.
Generate the Modbus configuration file using
https://modbus.d2sphere.com/.
Click Select file... and then click Upload file to upload theconfiguration file from the local drive to the /etc folder on thegateway.

Table 9.6-1: Modbus Master Configuration Settings
Click Save & Apply after configuring the above settings.

9.6.4 Data Window
Services>Modbus Master> Data Window

Figure 9.6-2: Modbus Master Data Window
This page shows data by polling group. The polling groups are defined in the configuration file.
1. Click Enable Data Window to allow data to be read from the data window. This enables data
logging for 5 minutes.
2. Select the polling group number and click Show Data to display the data for the specified
polling group.

ePack User Manual for E210 and E220 Series Devices

113

9: Services

9.6.5 Download
Services>Modbus Master>Download

Figure 9.6-3: Modbus Master Download
This page allows you to download the Modbus configuration file in CSV format.
Click Download to download the Modbus configuration file. The file is downloaded, or a message isdisplayed if there is no Modbus configuration file found.

ePack User Manual for E210 and E220 Series Devices

114

9: Services

9.7 Modbus Slave
Service>Modbus Slave
The Modbus protocol exchanges information using a request-reply mechanism between a master(client) and a slave (server). The master-slave principle is a model for a communication protocol inwhich one device (the master) controls one or more other devices (the slaves). The slaves can only
send replies to the master.
The master initiates all communication transactions. Each slave has a unique id, responding to themaster only when addressed by the master.

9.7.1 Modbus Slave Configuartion
Go to Services>Modbus Slave

Figure 9.7-1: Modbus Slave Setings

ePack User Manual for E210 and E220 Series Devices

115

9: Services

Click Data Address Register Mapping File to display the register mapping addresses and description
for the different parameters.
The various parameters reported by the Modslave are listed in the table below.
Parameters

Description

Enable/Disable Modbus
Slave
Modbusslave Enable

Select Enable to enable Modbusslave

Modslave Connection Configuration
Slave ID

Each slave in a network is assigned a unique unit address from 1
to 247. When the master requests data, the first byte it sends isthe Slave address. This way each slave knows after the first byte
whether to acknowledge or ignore the message.

Type

Select the interface that the server listens on.
Internal – listens on LAN. Select IP and enter port.
External – listens on WAN/WiFi/Cellular with automatic fallback.

IP Address

IP address of the device

Port

Port number used

Modslave Reporting Parameters
GPS
LAN
WAN
Cellular

Select Enable for the parameter to enable it.

WIFI
GENERAL
Schedule-Trigger
Schedule DIO Toggler
Click Add to view and select the parameter options.
EnableSelect Enable to enable DIO toggler

Mode

Select Mode

Digital IO 1
Digital IO 2
State

Select State

Low
High
Day of the week

Select Day of the weekMonth

Select Month

Date

Select DateePack User Manual for E210 and E220 Series Devices

116

9: Services

Parameters

Description

Hour

Select Hour

MinuteSelect Minute

Click Save & Apply

Table 9.7-1: Modbus Slave Configuaration

9.8 DNP3
Services>DNP3The E210 and E220 series gateway acts as a DNP3 outstation. DNP3 is an open standard
communication protocol used in many SCADA environments. DNP3 facilitates Modbus RTU to DNP3
conversion which enables DNP3 master (DNP3 SCADA) to connect and monitor The Modbus RTU
device.

9.8.1 Configuring DNP3 Outstation for Modbus RTU to DNP3 conversion
To view and configure DNP3 Outsation, go to:Services>DNP3>Outstation

ePack User Manual for E210 and E220 Series Devices

117

9: Services

Figure 9.8-1: DNP3 Outstation Settings

ePack User Manual for E210 and E220 Series Devices118

9: Services

Parameters

Description

Outstation
EnableSelect to enable DNP3

DNP3 Server Configuartion
ProtocolTCP is the selected protocol.

Type

Select the interface that the DNP3 server listens on.
Internal – listens on LAN. Select IP and enter port.
External – listens on WAN/WiFi/Cellular with automatic fallback.

IP

IP address of LAN interface (required if Internal type is selected)

Port

Server listen port

DNP3 Link Layer Configuartion
Local DNP3 Address

DNP3 master address.
Note:
Ensure that the link-layer local/remote addresses are
configured correctly to avoid communication problems. There is
no standard default address.

Remote DNP3 Address

DNP3 remote outstation address

DNP3 Database Configuration
Database points
Modbus Configuartion
EnableSelect Enable to add Modbus configuration.

Upload Configuration File

Upload and then select the Modbus Master configuration file in
CSV format.

Table 9.8-1: DNP3 Outstation Settings Configuration

9.8.2 Modbus Master configuration file for DNP3 Outstation
To configure the Modbus Master configuration file:
1. Go to Services> Modbus Master>Configuration
2. Generate the Modbus Master configuration file using the Modbus Configuration Utility at:https://modbus.d2sphere.com. The sections that can be configured by the tool are: thetarget server where the data will be reported, up to six (6) polling groups, up to five (5)upload groups, and Modbus logger details. The configuration file is generated as a CSV file.
3. Open the Modbus configuration file in a text editor, and add the DNP3 parameters to theconfiguration. For a sample, see the section below, Sample CSV with DNP3 Parameters
4. Save the configuration file in CSV format.

9.8.3 Sample CSV with DNP3 Parameters
DNP3 parameters are displayed in blue text.

ePack User Manual for E210 and E220 Series Devices

1199: Services

ConfigurationStart,,,,,,,,,,,,
ModbusExtraInfoStart,,,,,,,,,,,,
NULL,1000,1000,1,12345,,,,,,,,
ModbusExtraInfoEnd,,,,,,,,,,,,
PollingGroupStart,,,,,,,,,,,,
Group1Start,,,,,,,,,,,,
Group1,10,1,1,0,0,0,0,,,,,
QueryStart,,,,,,,,,,,,
Query1,1,3,100,2,NULL,NULL,,,,,,
Tag1,0,8,7,1,0,4,NULL,NULL,NULL,0,0,0
Tag2,8,8,7,1,0,4,NULL,NULL,NULL,0,0,0
QueryEnd,,,,,,,,,,,,
QueryStart,,,,,,,,,,,,
Query2,2,1,100,1,NULL,NULL,,,,,,
Tag1,0,1,1,1,0,4,NULL,NULL,NULL,0,0,0
QueryEnd,,,,,,,,,,,,
QueryStart,,,,,,,,,,,,
Query3,3,3,100,1,NULL,NULL,,,,,,
Tag1,0,4,4,1,0,4,NULL,NULL,NULL,0,0,0
QueryEnd,,,,,,,,,,,,
Group1End,,,,,,,,,,,,
PollingGroupEnd,,,,,,,,,,,,
DNP3_MappStart,,,,,,,,,,,,
NodeStart,,,,,,,,,,,,
5,3,1,12345,0,,,,,,,,
Tag1,1,Query1,,,,,,,,,,
Tag2,1,Query1,,,,,,,,,,
NodeEnd,,,,,,,,,,,,
NodeStart,,,,,,,,,,,,
2,1,2,12345,0,,,,,,,,
Tag1,1,Query2,,,,,,,,,,
NodeEnd,,,,,,,,,,,,
NodeStart,,,,,,,,,,,,
4,1,3,12345,0,,,,,,,,
Tag1,1,Query3,,,,,,,,,,
NodeEnd,,,,,,,,,,,,
DNP3_MappEnd,,,,,,,,,,,,

ePack User Manual for E210 and E220 Series Devices120

9: Services

9.8.4 DOTA
Services > DOTA
DOTA (download over the air) will allow you to remotely update your firmware using the Lantronix
server or your custom server.

9.8.5 Lantronix Server
Services > Dota > Lantronix ServerThis page allows you to check for available firmware and to upgrade or downgrade the firmware
from the Lantronix D2Sphere server.

Figure 9.8-1. Download over the Air (DOTA) using Lantronix server

Parameters
ChannelDescription
Select the D2Sphere channel on which to look for the firmware
update files. The options are Development, Beta, and Released.
The default channel option is Released.

Check for update

Click to check for available updates on D2Sphere.

Available Firmware

Displays a list of firmware for the router that is available on theserver. Select the firmware from this list and click Update now to
upgrade or downgrade on the router.

Force Upgrade

Check this box for forceful upgrade or downgrade of the router's
firmware version.

Upgrade/Downgrade

Click Update now to download the firmware selected in the
Available Firmware list.

Table 9.8-1: DOTA for Lantronix Server

ePack User Manual for E210 and E220 Series Devices

121

9: Services

9.8.6 Custom Server
Services > Dota > Custom ServerThis page allows you to update the router firmware using a custom download over- the-air (DOTA)
server.

Figure 9.8-2: DOTA Custom Server Settings

Parameters
Update now

Description
After setting the parameters on the Custom Server page, click
Update now to download the firmware pointed to by the URL
and the filename below.

Custom Server Settings
If the custom server is not configured, DOTA service will configure the D2Sphere server.
ProtocolSelect HTTP or HTTPS as the protocol of the custom server.

URL/IPEnter the URL or the IP address of the custom DOTA server. The
entry must include http/https.

ePack User Manual for E210 and E220 Series Devices122

9: Services

Parameters

Description

FilenameEnter the name of the router firmware file to be accessed for the
update.

UsernameEnter the server login username.

Password

Enter the server login password.

Timeout in Minutes

Enter the period of time to wait for the download to complete.
The download process will be aborted after the timeout period
expires.
The default value is 10 minutes.

RetriesEnter the number of retry attempts allowed to check anddownload the latest firmware file from the server.
The default number of retries is 3.

Table 9.8-2: DOTA Custom Server Configuration
Note:• DOTA update can also be triggered using SMS by sending the SMS AT+DOTA command after
setting the custom server configuration from the Web UI (shown above) or by sending the
AT+DOTASETTINGS command using SMS from a registered Mobile Number. See Figure 9.9-2 forsyntax details.

ePack User Manual for E210 and E220 Series Devices

123

9: Services

9.9 IEC 104 Multi-master
Services>IEC 104 Master
The E210 and E220 series routers support the IEC104 protocol to monitor remote devices.

9.9.1 IEC 104 Multi-master Configuartion
Got to Services>IEC 104 MasterFigure 9.9-1: IEC 104 Multi-master settings
Parameters

Description

EnableClick to enable IEC104 Multi-master on the selected interface.

Upload Configuration File

Upload the IEC 104 Multi-master configuration file (CSV
formatted file). This file contains all the configuration for the IEC
104 Multi-master server.
Click Select file... and then click Upload file to upload theconfiguration file from the local drive to the /etc folder on thegateway.

Table 9.9-1: IEC 104 Multi-master configuration

ePack User Manual for E210 and E220 Series Devices

124

9: Services

9.10 DNP3 to IEC104
Services>DNP3 to IEC104
The E210 and E220 series routers support protocol conversion from DNP3 to IEC104

9.10.1 DNP3 To IEC104 Configuration
Go to Services>DNP3 to IEC104

Figure 9.10-1: DNP3 to IEC104 Settings
Parameters

Description

EnableClick to enable DNP3 to IEC104

Local DNP3 Address

DNP3 master address

Remote DNP3 Address

Remote DNP3 outstation address

Poll Interval

The period of time between the end of the timeout period or thecompletion of the network request and the next request for dataon the network.

Database Path

Location on the device.

Upload Configuration File

Upload the IEC 104 Master configuration file (CSV formatted file).
This file contains all the configuration for the IEC 104 Masterserver.
Click Select file... and then click Upload file to upload theconfiguration file from the local drive to the /etc folder on thegateway.

Table 9.10-1: DNP3 to IEC104 Configuration

ePack User Manual for E210 and E220 Series Devices125

9: Services

9.11 Page Selector
This page allows a root user to hide certain pages from the admin user view.

9.12 SMS
Services > SMS
The SMS feature lets you send SMS messages to the router to request diagnostics information fromthe router, configure router settings, or initiate certain router actions such as DOTA upgrade orstarting or stopping the VPN.

9.12.1 SMS Configuration
Services > SMS > SMS Configuration
You can configure up to four administrator mobile numbers to receive SMS messages containing
router diagnostics information after a command is sent by SMS. The mobile number format is asfollows:+<countrycode><phonenumber>
You should include the preceding special character “plus (+)”. Example: +9198xxxxxxxx

Figure 9.12-1: SMS Configuration
Parameters

Description

SMS Configuration
EnableEnable remote SMS configuration.

AT Enable

Enable remote AT commands using SMSPDU Enable

Enable PDU to support long SMS messages and to send Flash SMS
messages. Now SMS Text and PDU mode support 16-bit data

ePack User Manual for E210 and E220 Series Devices126

9: Services

Parameters
SMS Administrator

Description
Displays up to four Administrators configured to receive thediagnostics information of the router via SMS after an SMS
command is sent.
Note• If no number is configured, then the router will accept SMS
from any number.
For each administrator to be configured, enter the mobile
number with country code.
The format of mobile number must be:+<countrycode><phonenumber> with a preceding special
character “plus (+)”.
Example: +9198xxxxxxxx

Table 9.12-1: SMS Service Configuration

ePack User Manual for E210 and E220 Series Devices127

9: Services

SMS AT Commands
The following figure shows the supported SMS command syntax.

Figure 9.12-2: SMS AT Commands
The following table describes the command syntax:#

Name

Command Syntax

1

RebootAT+REBOOT=1

2

Cell Diagnostics

AT+CELLDIAG?

3

LAN Diagnostics

AT+LANDIAG?

4

WAN Diagnostics

AT+WANDIAG?

5

WAN Ping

AT+WANPING=<IPA>
Parameter:

ePack User Manual for E210 and E220 Series Devices128

9: Services

#

Name

Command Syntax
IPA- IP address of the WAN interface to ping.

6

LAN Ping

AT+LANPING=<IPA>
Parameter:

IPA – IP address of the LAN interface to ping
7

WWAN Ping

AT+WWANPING=<IPA>
Parameter:

IPA- IP address of the WAN interface to ping.
8

CELL Ping

AT+CELLPING=<IPA>
Parameter:

IPA- IP address of the WAN interface to ping.
9

Enable Remote Access

AT+REMACC=<1/0>
Parameter:

1/0 – Set 1 to enable, set 0 to disable remote access
10

Hardware Information

AT+HWI?

11

Software Information

AT+SWI?

12

Start/Stop VPN

AT+VPN=<VPN Type>,<VPN Name>,<start/stop>
Parameters:

VPN type – Openvpn or ipsec
VPN name – VPN instance nameStart/stop – action to start or stop the vpn
13

Install/Update IPK

AT+IPKDOTA=<Name of IPK
file>,<install/upgrade/remove/autoremove>,<For
install/upgrade: 0-Both Default & Custom URL, 1-Default URL, 2Custom URL>
Parameters:

Name of IPK file – IPK file name that OPKG will install,
upgrade, or remove.
install/upgrade/remove/autoremove – action that OPKG willrun
location to check for the package for install or upgrade. This
argument is not required for remove or autoremove.

14

Lan Settings•

0 - Both default server URL & custom URL. Both servers
should be running, otherwise it will return a failed
response.

•

1 – default server URL•

2 – custom server URL

AT+IPLAN=<IPv4 address>,<SubnetMask>
Parameters:

IPv4 address – The IP address of the LAN interface
Subnet mask – Subnet mask of the LAN IP address
15

Dota Custom Settings

AT+DOTASETTINGS=<HTTP/HTTPS>,<Server URL>,<Filename>,<Username>,<Password>,<Timeout>,<Retry>ePack User Manual for E210 and E220 Series Devices129

9: Services

#

Name

Command Syntax
Parameters:

HTTP/HTTPS – protocol of the custom server
Server URL – server URL, must include http: or htttps:
File name – name of the file to be accessed for the update
Username – server user name
Password – server password
Timeout – period of time to wait for the download to complete(minutes)
Retry Parameters – number of retry attempts to check anddownload the file from the server.
16

OPKG Configuration
Settings

AT+OPKGSETTINGS=<Server URL>
Parameter:

Server URL – Enter the URL of the17

Manage Digital Output

AT#OUT=<GPO1/GPO2>,<OPEN/CLOSE>
Parameters:

GPO1/GPO2 – the pin to be configured
OPEN/CLOSE – Set OPEN for low, or CLOSE for high.
18

AT Command

AT#ATCMD='<AT command string>',<Timeout>
Description: The command passed in the AT command string will
be sent directly to the internal GSM module.
Parameters:

AT command string – AT command such as AT+CSQ (signal
quality) or AT+CREG? (to check the registration status of
GSM module).
Timeout – Timeout value should be an integer in seconds. If
the timeout value is set to 0, don't wait for a response. Issue
the command and leave it.
Example: AT#ATCMD=AT+CSQ,5 - to check signal strength
19

DOTA Action

AT+DOTA=<C/M>,<update/check>[,<released/beta/development>,<filename>]
Parameters:

C/M – C for custom server, M for D2Sphere
update/check – whether to update the router with thespecified filename or to check for available updates
released/beta/development – the release channel on theD2Sphere server to use for the update/checkfilename – filename of the package to use for the update
20

Cellular Settings

AT+IPGPRS=<1>,<Apn>,<Username>,<Password>,<AuthType>,<Data-Roam>
Parameters:

1 or 1/2 – SIM slot number. 1 slot is supported on E22x
models. 2 slots are supported on E21x models only.
Apn – access point name provided by the cellular network
providerUsername – username if auth type is pap, chap, or pap/chap

ePack User Manual for E210 and E220 Series Devices130

9: Services

#

Name

Command Syntax
Password – password if auth type is pap, chap, or pap/chapAuth-type – none, pap, pap/chap, or chap (the auth-type
parameter is case sensitive, must be all lowercase)Data-Roam – Enter 0 for disabled or 1 for enabled

21

Get Serial FTP
Configuration

AT+SERIALFTPCONFIG?

22

Set Serial FTP
Configuration

AT+SERIALFTPCONFIG=<File Name>,<IMEI-0/1>,<Server
Address>,<Port>,<Username>,<Password>,<Directory Path>
Parameters:

File Name – Destination file name
IMEI-0/1 - 0 to exclude IMEI number and 1 to include IMEI
number.
Server Address – FTP server addres
Port – Port No. used
Username – FTP username
Password – FTP password
Directory Path – Location on the server
23

Send Serial Data

AT+SERIALDATA=<Data>

24

Change SIM Priority

AT+SIMPRIORITY=<1/2>
Parameters:

1/2 – SIM slot number
Only for E210 devices.
25

Module Dota

AT+MODULEDOTA=<M/C>,<update/check>,<sierra_fw/volte_patc
hes>,<firmware/patch filename>Parameters:

M – Lantronix Server
C – Customserver
update – Update firmware
check – Check availablity
sierra fw – Cellular firmware
volte pacthes – Patches
firmware filename – Fimware filename
patch filename – Patch filename
Note:
If you want to use custom server, first execute command no.26
AT+MODULEDOTASETTINGS to the set custom URL, filename andthen execute this command.
26

Module Dota Custom
Settings

AT+MODULEDOTASETTINGS=<Server URL>,<File name>Parameters:

Server URL: URL of custom server
File name: Firmware or Patch File name

Table 9.12-2: SMS AT Command Syntax

ePack User Manual for E210 and E220 Series Devices131

9: Services

9.12.2 Ethernet SMS
Services > SMS > Ethernet SMS
This service enables the device connected on LAN to initiate an SMS using Ethernet port.

Figure 9.12-3: Ethernet SMS Configuration
Parameters

Description

SMS Configuration
EnableCheck to enable the Ethernet SMS.

Enter the port number. The port number range
is from 0 to 65535.

Port

Table 9.12-3: Ethernet SMS Configuration
To send an SMS you need to open a TCP client connection on the LAN IP and configured port. Oncethe connection is created, issue the following commands:
To send an SMS
AT#SENDSMS=+<Mobile Number with Country Code><Message with CTRL+D>

To read an incoming SMS
AT#READSMS=<ALL or SMS ID><Enter>To delete an SMS
AT#DELSMS=<ALL or SMS ID><Enter>

The internal SMS buffer is 10 messages – meaning, 11th incoming SMS will be over written on the 1st
SMS

9.12.3 Live Message
Services > SMS > Live Message
Sends SMS from the web interface: You can also send SMS, read SMS and delete SMS from the webinterface as shown in the screenshot below.
ePack User Manual for E210 and E220 Series Devices132

9: Services

Figure 9.12-4: SMS Live Message Configuration
Note:• To activate the Live Message feature, you must first enable the Ethernet SMS feature.
• To send SMS, add a # symbol preceding the phone number instead of the + symbol.

ePack User Manual for E210 and E220 Series Devices133

9: Services

9.13 Reporting Agent
Services > Reporting AgentThe Reporting agent captures current information from the router on a periodic basis and sends it toa generic device management server using TCP/UDP/HTTP/HTTPS protocol.
The information obtained from the router includes device information and the following groups:
•
•
•
•
•

LAN
WAN
Cellular
Wi-Fi
GPS

Figure 9.13-1. Reporting Agent (Cellular shown)
Parameters

Description

Enable All

Select check box to enable all settings for all interfaces.

Disable All

Select check box to clear all settings for all interfaces.

LAN Parameters
LAN

Select to enable individual LAN settings.
•

Status•Uptime•IP

ePack User Manual for E210 and E220 Series Devices134

9: Services

Parameters

Description•

Data usage

WAN Parameters
Select to enable individual WAN settings.
•

Status•Uptime•IP•

Gateway•

DNS•

Data usage

Cellular Parameters
Select to enable individual Cellular settings.
•

Status•Uptime•IP•

Gateway•

DNS•

Data usage

•

RSSI

•

Roaming Status•

Operator Name•

Network Status

•

IMSI

Wi-Fi Parameters
Select to enable individual Wi-Fi settings.
•

Status•Uptime•IP•

Gateway•

DNS•

Data usage•

Wifi Client Info

GPS Parameters
Select to enable individual GPS settings.
•

Time

•

Latitude•Longitude•

Altitude

Table 9.13-1: Reporting Agent Configuration

ePack User Manual for E210 and E220 Series Devices

135

9: Services

9.13.1 Sending Data
Services > Reporting Agent > Enable data Send
The reporting agent sends captured data using any of the following protocols:
TCP/UDP/HTTP/HTTPS.
When sending data over TCP, you can define a custom string sequence for start of frame and end offrame. You can also configure a backup server. The router will send data to the backup server after
three unsuccessful retries to the primary device management server. It will continue to send data to
the backup server until the backup server fails or the device reboots.

Figure 9.13-2 Reporting Agent Enable Data Send (TCP)

Parameters

Description

Device Info

Select to allow reporting agent to retrieve device IMEI
information.

Reporting Agents

Select the reporting agent. Generic agent is the default selection.

Enable Data Send

Select to enable data send.

ePack User Manual for E210 and E220 Series Devices136

9: Services

Parameters

Description

ProtocolSelect the protocol used in the data transmission.
Options are TCP, UDP, HTTP, or HTTPS. Depending on the
protocol that you selected, the server fields will vary somewhat.

Starting string of the frame

When TCP is selected, a start of frame sequence can be used toindicate the first frame of the data sent by the reporting agent.
This string must be less than 20 characters in length.

Ending string of the frame

When TCP is selected, a start of frame sequence can be used toindicate the first frame of the data sent by the reporting agent.
This string must be less than 20 characters in length.

IP1/URL1

Enter the IP address or the URL of the destination server.

Port1

Enter the port number (for TCP and UDP).

TCP Timeout

Enter the timeout in seconds to switch between primary andbackup IP in case of connectivity failure.
TCP user timeout value should be between 10 and 900 seconds.

BackupThis option is available when TCP protocol is selected. SelectBackup check box to configure the backup TCP server.

IP2/URL2
Port2
The backup IP will be used after 3 failed attempts to send data to
primary server. Reporting agent will continue to send data to
backup server until the backup server fails or the device reboots.
Send Interval in Second

The period of time between two data transmissions.

Table 9.13-2: Reporting Configuration Agent Data Send

9.13.2 Data Format
The following example shows the data format of the output considering all parameters selected in
the interfaces and TCP protocol selected@IMEI=352948070039411,Lan Status=Connected,Lan IP(IPv4)=192.168.1.1,Lan
Uptime(Seconds)=329501,Lan TX bytes=572260469,Lan RX bytes=117212098,Wan
Status=Connected,Wan IP(IPv4)=192.169.1.110,Wan Uptime(Seconds)=329389,Wan
Gateway=192.169.1.1,Wan DNS=27.109.1.2 27.109.1.3,Wan TX bytes=75455301,Wan RX
bytes=344481735,Cellular Status=Enabled,Cellular IP(IPv4)=,Cellular
uptime(Seconds)=,Cellular Gateway=,Cellular DNS=,Cellular TX bytes=208,Cellular RX
bytes=0,RSSI(ASU)=99,Roaming Status=N/A,Operator Name=N/A,Network Status=Not
Registered,IMSI=ERROR,Wifi Status=Enabled,Wifi IP(IPv4)=192.169.2.116,Wifi
Uptime(Seconds)=383,Wifi Gateway=192.169.2.1,Wifi DNS=192.169.2.1,Wifi TX
bytes=14135074,Wifi RX bytes=34397774,Wifi Client
Info={(MAC;IP;TX;RX)(6C:19:8F:0B:7A:78;192.169.2.1;305;5209)},Time(GMT)=,Latitude(degree.mmsss)=,Longitude(degree.mmsss)=,Altitude(in meters)=,Model=E225LITE,Kernel
Version=3.10.49,Local Time=Tue Mar 14 06:11:25 GMT 2017,System

ePack User Manual for E210 and E220 Series Devices137

9: Services
Uptime(Seconds)=329530,Firmware Version=Lantronix E220 2.2.0
RC8,DI1=,DO1=,DI2=,DO2=#@IMEI=352948070039411,
Lan Status=Connected,
Lan IP(IPv4)=192.168.1.1,
Lan Uptime(Seconds)=329501,
Lan TX bytes=572260469,
Lan RX bytes=117212098,
Wan Status=Connected,
Wan IP(IPv4)=192.169.1.110,
Wan Uptime(Seconds)=329389,
Wan Gateway=192.169.1.1,
Wan DNS=27.109.1.2 27.109.1.3,
Wan TX bytes=75455301,
Wan RX bytes=344481735,
Cellular Status=Enabled,
Cellular IP(IPv4)=x.x.x.x,
Cellular uptime(Seconds)= abc,
Cellular Gateway=y.y.y.y,
Cellular DNS=z.z.z.z,
Cellular TX bytes=xxx,
Cellular RX bytes=yyy,
RSSI(ASU)=22,
Roaming Status=N/A,
Operator Name=N/A,
Network Status=Not Registered,
IMSI=ERROR,
Wifi Status=Enabled,
Wifi IP(IPv4)=192.169.2.116,
Wifi Uptime(Seconds)=383,
Wifi Gateway=192.169.2.1,
Wifi DNS=192.169.2.1,
Wifi TX bytes=14135074,
Wifi RX bytes=34397774,
WifiClientInfo={(MAC;IP;TX;RX)(6C:19:8F:0B:7A:78;192.169.2.1;305;5209)},
Time(GMT)=,
Latitude(degree.mmsss)=,
Longitude(degree.mmsss)=,
Altitude(in meters)=,
Model=E225LITE,
Kernel Version=3.10.49,
Local Time=Tue Mar 14 06:11:25 GMT 2017,
System Uptime(Seconds)=329530,
Firmware Version=Lantronix E220 2.2.0 RC8,
DI1=,
DO1=,
DI2=,
DO2=#

ePack User Manual for E210 and E220 Series Devices138

9: Services

9.14 GPS
Services > GPS
Some E210 and E220 series router models have a built-in GPS receiver that receives GPS data fromGPS satellites for synchronizing the GPS time and position data.

Figure 9.14-1: Services > GPS enable data
The GPS data can be sent in NMEA data format to an external TCP/UDP/HTTP/HTTPS server on areal-time basis.
You can also configure a backup server. The router will send data to the backup server after three
unsuccessful attempts to the primary device management server. It will continue to send data to the
backup server until the backup server fails or the device reboots.

ePack User Manual for E210 and E220 Series Devices139

9: Services

Figure 9.14-2: GPS Service Configuration

Parameters

Description

GPS Parameters
GPS Enable

Select GPS Enable check box to display current GPS data.

Time (GMT)Time in hh:mm:ss

Latitude (degree.mmsss)

Latitude in ddmm.mmmm

N/S-Indicator

N = North or S = South

Longitude (degree.mmsss)

Longitude in ddmm.mmmm

E/W-Indicator

E = East or W=West

Position-Fix-Indicator

Indicates the type of signal or technique used by the GPS receiver
to determine its location.

0 – Fix not available or invalid
1 – GPS SPS Mode, fix valid
2 – Differential GPS, SPS Mode, fix valid
3 to 5 – Not supported
6 – Dead Reckoning Mode, fix valid
Number of Satellites Used

Number of satellites used to receive GPS signals.
The range for the number of satellite used is 0 to 12.

HDOP

Horizontal Dilution of Precision (HDOP) indicates the relative
accuracy of the horizontal position

Altitude (in meters)

Altitude above mean sea level

Status

Displays the status.
A = Data valid
V = Data not valid

ePack User Manual for E210 and E220 Series Devices140

9: Services

Parameters

Description

Speed

Speed over ground in knots

Course of Ground

Track, or intended direction of travel

ProtocolEnable Data Send

Select Enable Data Send check box to send data to the selectedserver. It sends the GPS information in NMEA format.

ProtocolSelect the TCP protocol only.

IP1/URL1

Enter the primary IP Address.

Port1

Enter the Port Number.

Backup

Click to allow using of backup IP, in case sending of the data fails
using primary IP Address. In case the backup IP Address fails,
primary IP Address will be used. Three such trials will be
executed.

IP2 – Enter the backup IP Address.
Port2 – Enter the backup Port Number.
Polling Interval (in seconds)

The period of time between the end of the timeout period or thecompletion of the network request and the next request for dataon the network.

Send Interval (in seconds)

The period of time to wait between attempts to send GPS datausing the primary IP address or backup IP.

Table 9.14-1: GPS Service Configuration

ePack User Manual for E210 and E220 Series Devices141

9: Services

9.14.1 Sample GPS Frames
9.14.1.1 GSV Format$GPGSV,4,1,16,21,50,358,38,22,28,272,37,29,53,164,36,18,51,319,31*7E•

IMEI number is added at the start of every frame
Parameters

Description

MID GSV Parameters
MID

GSV Protocol Header
Example – $GPGSV

Number of Messages(1)Total number of GSV messages to be sent in this group
Example – 4

Message Number(1)Message number in this group of GSV messages
Example – 1

Satellites in View(1)16Satellite ID

Channel (Range 1 – 32)
Example – 21

Elevation

Channel 1 (Maximum 90)
Example – 50 degrees

AzimuthChannel (True, Range 0 – 359)
Example – 358 degrees

SNR (C/N0)

Range 0 -99, null when not tracking
Example – 38dBHz….

….

Satellite ID

Channel 4 (Range 1 – 32)
Example – 18

Elevation

Channel 4 (Maximum 90)
Example – 51 degrees

AzimuthChannel 4 (True, Range 0 - 359)
Example – 319 degrees

SNR (C/N0)

Range 0 – 99, null when not tracking
Example – 31 dBHz

Checksum*71<CR><LF>

End of message termination

Table 9.14-2: GSV Data Format
Depending on the number of satellites tracked, multiple messages of GSV data may be required. In
some software versions, the maximum number of satellites reported as visible is limited to 12, eventhough more may be visible.

(1)

ePack User Manual for E210 and E220 Series Devices142

9: Services

9.14.1.2 GGA Format$GPGGA,120133.0,1907.469671,N,07250.544473,E,1,05,1.0,43.1,M,-64.0,M,,*42•

Parameters

Description

MID GGA Parameters
MID

GGA Protocol Header
Example – $GPGGAUTC Time

Time in hhmms.sss
Example – 120133.0

LatitudeLatitude in ddmm.mmmm
Example – 1907.469671

N/S-Indicator

N = North or S = South
Example – N

Longitude

Longitude in ddmm.mmmm
Example – 07250.544473

E/W-Indicator

E = East or W = West
Example – E

Position-Fix-Indicator

Indicates

0 – Fix not available or invalid
1 – GPS SPS Mode, fix valid
2 – Differential GPS, SPS Mode, fix valid
3 to 5 – Not supported
6 – Dead Reckoning Mode, fix valid
Example – 1
Satellite-Used

Number of satellite used to receive GPS signals.
The range for the number of satellite used is 0 to 12.
Example – 05

HDOP

Horizontal Dilution of Precision
Example – 1.0

MSL Altitude

Altitude in meters.
Example – 43.1 meters

Units

Example – M meters

Geoid Seperation

Geoid-to-ellipsoid separation.
Ellipsoid altitude = MSL Altitude + Geoid Separation
Example – -64.0 meters

Units

Example – M meters

Age of Diff.Corr.

Null fields when DGPS is not used.4
The units is sec.

Diff. Ref.Station ID-

ePack User Manual for E210 and E220 Series Devices143

9: Services

Parameters

Description

Checksum*42<CR><LF>

End of message termination

Table 9.14-3: GGA Data Format

ePack User Manual for E210 and E220 Series Devices

144

9: Services

9.14.1.3 VTG Format$GPVTG,0.0,T,0.3,M,0.0,N,0.0,K,A*20•

Parameters

Description

MID VTG ParametersMID

VTG Protocol Header
Example – $GPVTG

CourseMeasured heading
Example – 0.0 degrees

Reference

True
Example – T

CourseMeasured heading
Example – 0.3 degrees

Reference

Magnetic(1)Example – M

Speed

Measured horizontal speed
Example – 0.0 knots

Units

Knots
Example – N

Speed

Measured horizontal speed
Example – 0.0 km/hr

Units

Kilometers per hour
Example – K

ModeIndicates

A – Autonomous
D – DGPSE – DRN – Output Data Not Valid
R – Course Position(2) (3) (4)S – Simulator
Example – A
Checksum*20<CR><LF>

End of message termination

Table 9.14-4: VTG Data Format
CSR does not support magnetic declination. All “course over ground” data are geodetic WGS84
directions.
(1)

Position was calculated based on one or more of the SVs having their states derived from almanac
parameters, as opposed to ephemerides.
(2)

ePack User Manual for E210 and E220 Series Devices145

9: Services(3)

This feature is supported in the GSD4e product only.

(4)This feature is supported in the GSD4e product, version 1.1.0 and later.

ePack User Manual for E210 and E220 Series Devices146

9: Services

9.14.1.4 RMC Format$GPRMC,120133.0,A,1907.469671,N,07250.544473,E,0.0,0.0,150915,0.3,W,A*1E•

Parameters

Description

MID RMC Parameters
MID

RMC Protocol Header
Example – $GPRMC

UTC Time

Time in hhmmss.sss
Example – 120133.0

Status(1)A = Data valid
V = Data not valid
Example – A

LatitudeTime in ddmm.mmmm
Example – 1907.469671

N/S-Indicator

N = North or S = South
Example – N

Longitude

Longitude in ddmm.mmmm
Example – 07250.544473

E/W-Indicator

E = East or W = West
Example – E

Speed Over Ground

Measured in knots.
Example – 0.0

Course Over Ground

True.
Measured in degrees
Example – 0.0

Date

Date in ddmmyy
Example – 150915

Magnetic Variation(2)E = East or W = West
Measured in degrees
Example – 0.3

East/West Indicator(2)W = West
Example – W

ModeIndicates

A – Autonomous
D – DGPSE – DRN – Output Data Not Valid
R – Course Position(3) (4) (5)ePack User Manual for E210 and E220 Series Devices147

9: Services

Parameters

Description
S – Simulator
Example – A

Checksum*1E<CR><LF>

End of message termination

Table 9.14-5: RMC Data Format
A valid status is derived from all the parameters set in the software. This includes the minimum
number of satellites required, any DOP mask setting, presence of DGPS corrections, etc. If thedefault or current software setting requires that a factor is met, and then if that factor is not met thesolution will be marked as invalid.

(1)

CSR Technology Inc. does not support magnetic declination. All courses over ground data are
geodetic WGS84 directions relative to true North.
(2)

Position was calculated based on one or more of the SVs having their states derived from almanac
parameters, as opposed to ephemerides.
(3)

(4)

This feature is supported in the GSD4e product only.

(5)This feature is supported in the GSD4e product, version 1.1.0 and later.

ePack User Manual for E210 and E220 Series Devices148

9: Services

9.14.1.5 GSA Format$GPGSA,A,3,18,20,21,22,29,,,,,,,,2.4,1.0,2.2*36•

Parameters

Description

MID GSA ParametersMID

GSA Protocol Header
Example – $GPGSA

Mode1

M – Manual: Forced to operate in 2D or 3D modeA – 2D Automatic: Allowed to automatically switch 2D/3D
Example – A

Mode2

1 – Fix not available
2 – 2D (<4 SVs used)3 – 3D (>3 SVs used)
Example – 3

Satellite Used(1)SV on Channel 1
Example – 18

Satellite Used(1)SV on Channel 2
Example – 20….

….

Satellite Used

SV on Channel 12PDOP(2)

Position Dilution of Precision
Example – 2.4

HDOP(2)

Horizontal Dilution of Precision
Example – 1.0

VDOP(2)

Vertical Dilution of Precision
Example – 2.2

Checksum*33<CR><LF>

End of message termination

Table 9.14-6: GSA Data Format(1)

Satellite used in solution.

(2)

Maximum DOP value reported is 50. When 50 is reported, the actual DOP may be much larger.

ePack User Manual for E210 and E220 Series Devices149

9: Services

9.15 Keepalived
Services > Keepalived
The Keepalived service (Keepalived is a Linux daemon that provides frameworks for load balancing
and high availability of the servers connected to the router) uses Virtual Router Redundancy
Protocol (VRRP) to check the health of load balanced routers and elect a router on the network thatwill serve a particular IP.
In a typical configuration, VRRP groups two or more routers into a virtual router, where one router isthe master (active) server and the other is the backup node. The master server has a higher priority
than the backup server. The master server transmits multicast VRRP advertisement packets atregular intervals, and the backup servers listen for these advertisement packets. If the backup
servers fail to receive three consecutive VRRP advertisements, the backup router with the highest
priority becomes the new master router so that the system remains functional.
The configuration for the backup server will be similar to that of the master server, with the
exception of the values for priority, state, and interface (depending on the system hardware
configuration).

9.15.1 General
Services > Keepalived > General

Figure 9.15-1 Keepalived General settings

Parameters

Description

GeneralDetailed Log

Select to enable detailed keepalived general/common logs.

Syslog levelSet the log level from 0-4, with 4 being the most detailed.

Table 9.15-1: Keepalived General Configuration

ePack User Manual for E210 and E220 Series Devices150

9: Services

9.15.2 Keepalived Global
Services > Keepalived > Keepalived Global
This provides general settings for the Keepalived service.

Figure 9.15-2: Keepalived Global Configuration

Parameters

Description

Keepalived Global
Vrrp startup delay

Enter the time in seconds to delay before starting VRRP.

Global Router Id/nameEnter the global router ID/name. A default name is provided, but
you can modify it if you want. It doesn't have to be the hostname,but it must be unique for each device in a pool.

Keepalived config file

Select the Keepalived configuration file.
Settings in the configuration file will supersede settings
configured on the Keepalived UI pages except for all scripts

ePack User Manual for E210 and E220 Series Devices151

9: Services

Parameters

Description
loaded in Tracking Scripts, and the User Notify settings in VRRP
Instances.
The name of the script should match the ones in theconfiguration file settings.

Remove configuration for
Keepalived

Unlink the uploaded keepalived configuration so as to fill theconfigurations manually.

User

The user for script execution.

Enable Script Security

Select to prevent running any scripts that were configured to be
run as root if any part of the path is writable by a non-root user.

Enable dynamic interfaces

Select to enable dynamic interfaces. Once enabled, next to
Dynamic interfaces, select Allow or None

Table 9.15-2: Keepalived Global Configuration

ePack User Manual for E210 and E220 Series Devices152

9: Services

9.15.3 Tracking Scripts
Services > Keepalived > Tracking Scripts
This page is used to create blocks of tracking scripts that can be used by various Keepalived instances
to be configured in the same router. Keepalived will run the tracking script to determine the healthof the host and increase or decrease the priority of the router by the value of the weight.

Figure 9.15-3: Keepalived Tracking Scripts Configuration

Parameters

Description

Tracking Scripts
Name of trackscript block

Enter the tracking script block name.

ScriptSelect the tracking script file to upload it to the router.
The file is uploaded to the /usr/sbin/ folder. The script nameshould start with "keepalived_" and end with ".sh".

ePack User Manual for E210 and E220 Series Devices1539: Services

Parameters

Description

Remove script

Click to remove the tracking script.

TrackScript intervalEnter the time interval between script invocations in seconds.
Default is 1 second

WeightEnter the weight to adjust the priority if the tracking script fails.
Range is -253 to 253. Positive value will increase the priority.
Negative value will decrease the priority. Setting it to zero (0) will
ignore the weight, which means that any VRRP instancemonitoring the script will transition to the fault state after the failcount number of consecutive failures of the script. A script
returning 0 (zero) is success and everything else is fail.

TrackScript pass countEnter the required number of successes for OK transition.

TrackScript fail countEnter the required number of fails for NOK transition.

Table 9.15-3: Keepalived Tracking Scripts Configuration

9.15.4 Tracking Interfaces
Services > Keepalived > Tracking Interfaces
This page is used to configure which interfaces Keepalived will monitor. If a monitored interface fails,
Keepalived will adjust the priority of the host according to the configured weight of the tracking
interface.

Figure 9.15-4: Keepalived Tracking Interfaces Configuration

ePack User Manual for E210 and E220 Series Devices154

9: Services

Parameters

Description

Tracking Interfaces
Name of interface block

Enter the name of the tracking interface block

Interfaces

Select the interface to monitor for changing the state of therouter or decreasing the weight.

WeightEnter the weight to adjust the priority if the interface is present
or absent.
Range is -253 to 253. Positive value will increase the priority.
Negative value will decrease the priority. Default is 0 (zero), whichmeans that the router will fail in case of the interface notrunning.

Table 9.15-4: Keepalived Tracking Interfaces Configuration

9.15.5 Tracking Processes
Services > Keepalived > Tracking Processes
This page is used to create tracking process blocks that Keepalived can use to monitor the health of
the router. If the monitored process stops running, Keepalived will adjust the priority of the hostaccording to the weight of the tracking process.
Note:• To monitor a process after you've added it, you must restart the Keepalived service manually.

Figure 9.15-5: Keepalived Tracking Processes Configuration

ePack User Manual for E210 and E220 Series Devices155

9: Services

Parameters

Description

Tracking Processes
Name of process block

Enter the name of the process block.

Process

Enter the name of the process to monitor for running state.

WeightEnter the weight to adjust the priority if the process is notrunning.
Range is -253 to 253. Positive value will increase the priority.
Negative value will decrease the priority. Default is 0 (zero), whichmeans that the router will fail in case of the interface notrunning.

Table 9.15-5: Keepalived Tracking Processes Configuration

9.15.6 Virtual IP
Services > Keepalived > Virtual IP
Configure the Virtual IP address for the VRRP instance.

Figure 9.15-6: Keepalived Virtual IP

ePack User Manual for E210 and E220 Series Devices156

9: Services

Parameters

Description

Virtual IP
Name of address block

Enter the name of the address block.

Virtual ipaddressEnter the Virtual IP address and netmask that will be used by thevirtual router.

Physical device

Select the device used for the virtual IP.

Scope of the virtual ip

Select the scope. Options include: global, site, link, host,nowhere.

Table 9.15-6: Keepalived Virtual IP Configuration

ePack User Manual for E210 and E220 Series Devices157

9: Services

9.15.7 VRRP InstancesServices > Keepalived > VRRP Instances
The VRRP instance is the individual instance of the VRRP protocol running on an interface to bemonitored by Keepalived.
The General and Advanced settings define the VRRP instance. The User Notify settings allow
Keepalived to run specified scripts when the router transitions from backup to master state or
master to backup state.

Figure 9.15-7: Keepalived VRRP Instances (General Configuration)

ePack User Manual for E210 and E220 Series Devices158

9: Services

Parameters

Description

VRRP Instances > General Settings
EnableClick to enable the VRRP instance.
The VRRP instance defines and configures VRRP behavior to run
on a specific interface.

Name of InstanceEnter a name for the VRRP instance.

Virtual Router ID

Enter the router ID. This number should be the same for all
routers on the virtual router.
Unique number from 1 to 155.

Interface to look for

Select the interface that needs to be monitored for switching.

Virtual Router Priority

Enter the priority. The router with the highest priority will be themaster.

Delay

Enter the interval in seconds that VRRP will wait between sending
advertisement packets.
Default is 1 second.

DebugEnter the debug level, from 1 to 4.
Note: Debug level is not implemented yet by Keepalived.

Initial Virtual Router State

Select the initial virtual router state as MASTER or BACKUP.
This is for initial state only. As soon as the other routers in thevirtual router group come up, an election will be held and therouter with the highest priority will become MASTER.

Enable Authentication

Select to enable authentication. Authentication type can be PASS
(suggested) or AH – IPSec (not recommended).
PASS is a simple text password. This should be the same value on
all machines in the virtual router. Only the first eight (8)characters are used.
Note: Authentication was removed from the VRRPv2
specification, and use of the option is non-compliant and cancause problems.

VRRP Instances > Advanced Settings
Virtual IPs

Enter the Virtual IP block. The router will assume this IP when it
becomes Master and release it when it changes to Backup. Add
blocks configured in Virtual IP.

Track Process

Enter the track process block that the VRRP instance will monitor.
Add blocks configured in Tracking Process.

Track interface

Enter the track interface block that the VRRP instance will
monitor. Add blocks configured in Tracking Interfaces.

Track Script

Enter the tracking script block that the VRRP instance will
monitor. Add blocks configured in Tracking Scripts.

VRRP Instances > User Notify Settings
Notify master Script

Select the notify master script which will be run when the routerePack User Manual for E210 and E220 Series Devices159

9: Services

Parameters

Description
becomes Master.

Remove master script

Remove the notify master script.

Notify backup Script

Select the notify backup script which will be run when the router
becomes Backup.

Remove backup script

Remove the notify backup script.

Table 9.15-7: Keepalived VRRP Instances Configuration

9.16 Last Gasp
The Last Gasp feature is available on E220 series routers only. The Last Gasp feature sends a lastgasp message to a mobile number to report the abrupt loss of power to the router.
Last Gasp configuration includes a mobile number that Last Gasp will attempt to contact, and shorttext messages for power restore or power. Last Gasp is enabled by default.

Figure 9.16-1 Last Gasp (E220 series devices only)

Parameters

Description

Last Gasp
EnableSelect to enable last gasp.
Enabled by default.

Mobile NumberEnter the mobile number that Last gasp will attempt to contact
when power is lost.

Power restore text

Enter the message for power restore.

Power failure text

Enter the message for power failure.

Table 9.16-1: Last Gasp Configuration (E220 series devices only)

ePack User Manual for E210 and E220 Series Devices160

9: Services

9.17 Serial
Services > Serial
The E220 series router provides one RS-485 serial port, which can be configured in half-duplex or
full-duplex mode by means of a switch on the E220 series hardware.
The E210 router provides one RS-232 9-pin serial port. Optionally, the RS-232 port can be converted
to an RS-485 port using the Snap Cap™ SC485 add-on. The RS-485 port can be configured in halfduplex or full-duplex mode by means of a switch on the Snap Cap SC485 add-on.
For wiring configuration details for the E220 series RS-485 in half-duplex mode, see Appendix A.
Wiring Diagrams.

9.17.1 Serial Configuration
The Serial configuration parameters such as baud rate must be configured for the data connection to
the serial port. You can set the serial configuration mode as:•••Transparent
Modbus RTU to Modbus TCP
AT command

Figure 9.17-1: Serial Configuration

ePack User Manual for E210 and E220 Series Devices161

9: Services

Parameters

Description

Serial Configuration
Path

The path to the serial device. The default path is "dev/ttyS1".

Is baudrate custom

Select the box to add a custom baud rate between 2400 bps and230400 bps in the Baud Rate field.

Baud Rate

Select a baud rate from the list of pre-defined options or enter
the custom baud rate between 2400 bps and 230400 bps.
The default baud rate is 115200.

Data bit

Select the number of data bits:
The valid range is from 5 to 8.
The default data rate is 8.

ParityA parity bit is added to the end of the string of binary code thatchecks if the number of bits in the string with value one is evenor odd. It is used for detecting error.
Select the parity bit:

Odd
Even
None
The default is None.
Stop bit

Select the number of stop bits:

1
2
The default stop bit is 1.
Timeout in Seconds

Enter the idle timeout in seconds for serial data completion.

Mode

Select the mode of serial communication:
Transparent

Transparent mode of communication does not alter any data
structure before or during the data communication.
Modbus RTU to Modbus TCP:

This mode converts the Modbus RTU data to/from serial to
Modbus TCP before transmitting over TCP network.
AT command:

Enables to send and receive SMS via AT commands.

Table 9.17-1: Serial Configuration

9.17.2 Serial Data Send Configuration
The Data Send configuration is used to select the protocol and serial operating mode settings. If the
TCP protocol is selected, the router can operate in TCP server or TCP client mode. In TCP servermode, the router will listen on the local port for network communication from TCP clients on the
LAN interface (type=internal) or the WAN interface (type=external). In TCP client mode, the serial
device connects to a remote TCP server at a specified IP and port, or to a backup server, for the data

ePack User Manual for E210 and E220 Series Devices162

9: Services

transmission. The data from the serial port can be sent via TCP using any of the available TCP
interfaces.
The other protocol option is FTP, which allows the serial device to send a file to an FTP server. See
Section 9.14.2.3 Data Send Configuration for FTP

9.17.2.1 TCP Server Mode Configuration

Figure 9.17-2: Data Send Configuration – Server Mode on WAN Interface

Figure 9.17-3: Data Send Configuration – Server Mode on LAN Interface

Parameters

Description

EnableSelect the box to enable sending serial data

ProtocolSelect the protocol.

For TCP, select TCP.

ePack User Manual for E210 and E220 Series Devices163

9: Services

Parameters

Description
For FTP transport, select FTP.

Mode

Select the serial operating mode.
Note:• Server mode operation requires a public IP address on theexternal interface (WAN).

For TCP server mode, select Server.
For TCP client mode, select Client
Type

This setting is available if TCP Protocol and Server Mode settings
are selected.

Select External to listen for network connections on the WAN
interface.
Select Internal to listen for network connections on the LANinterface.
External – serial port listens on WAN interface
Port

Enter the WAN port to listen on.

Internal – serial port listens on LAN interface
IP

Enter the IP address of the LAN interface to listen on

Port

Enter the port of the LAN interface to listen on

Table 9.17-2: Data Send Configuration - Server Mode

9.17.2.2 TCP Client Mode Configuration

Figure 9.17-4: Data Send Configuration – Client ModeePack User Manual for E210 and E220 Series Devices164

9: Services

Parameters

Description

EnableSelect the box to enable sending serial data

ProtocolSelect the protocol.

For TCP, select TCP.
For FTP transport, select FTP.
Mode

Select the serial operating mode.

For TCP server mode, select Server.
For TCP client mode, select Client
IP

Enter the IP address of the remote TCP server

Port

Enter the port of the remote TCP server

Backup Server Enable

Select the box to enable a backup TCP server

Backup IP

Enter the IP address of the remote backup TCP server

Backup PortEnter the port of the remote backup TCP server

Socket Timeout Enable

Select the box to enable a socket timeout value.

Inactivity Timeout inSeconds

If Socket Timeout is enabled, enter the inactivity timeout value inseconds.

Table 9.17-3: Data Send Configuration - Client Mode

9.17.2.3 Data Send Configuration for FTP

Figure 9.17-5: Data Send Configuration FTP Protocol

ePack User Manual for E210 and E220 Series Devices165

9: Services

Parameters

Description

EnableSelect the box to enable sending serial data.

ProtocolSelect the protocol.

For TCP, select TCP.
For FTP transport, select FTP.
File NameEnter the file name of the file to transmitted.

IMEI

Select the box to add the IMEI to the file name.

Date Format

Select the date format to be appended to the file name.

FTP Server AddressEnter the IP address of the FTP server.

FTP Server PortEnter the port number of the FTP server.

User NameEnter the FTP server user name.

Password

Enter the FTP server password.

Directory PathEnter the directory path on the FTP server where the file will beplaced.

Table 9.17-4: Data Send Configuration FTP Protocol

ePack User Manual for E210 and E220 Series Devices

166

9: Services

9.18 Service Actions
Services > Service Actions
This page displays a list of all the available services and allows the administrator to manage system
resources. You can start, stop, reload, or restart the service; and enable or disable automatic startupof the service when the device is rebooted.
Note• Only perform service actions if you understand the outcome. Stopping or disabling certain
services could adversely affect the operation of the router and require a device reset.

Figure 9.18-1: Service Actions

ePack User Manual for E210 and E220 Series Devices

167

9: Services

9.19 Events
Services > Events
E210 and E220 routers are equipped with two digital inputs/outputs (I/O). Digital inputs range is 3V
to 24V and the same input pins are also available to be used as open collector digital output withmaximum 200mA @ 24V. The Event Management page allows you to map actions to events
respective to the digital I/Os.

9.19.1 Event Management
Services > Events

Figure 9.19-1: Event Service Configuration

Parameters

Description

Event Management
EnableClick to enable the events

Event

Select the event from the available options
DIO is by default are pulled up to high voltage level.

ActionSelect the action from options.

Close/Open digital Output # 1/2 – to close or open the digitalpinStart VPN – start VPN
Stop VPN – stop VPN
SMS – to send the event details using the SMS.
Switch Digital Output – Change the state of Digital Output
Reboot – To reboot the router.
POWER_SAVEMODE_ON
POWER_SAVEMODE_OFF
Mobile Number/VPN TypeEnter the mobile number. The mobile number format must be:<countrycode><phonenumber>.
If the action is to start or stop the VPN, then enter the type of theePack User Manual for E210 and E220 Series Devices168

9: Services

Parameters

Description
VPN such as ipsec, pptp, l2tp, or openvpn.

Text/VPN NameEnter the text message that will be sent to the configured mobile
number in case of event occurs.
If the action is to start or stop the VPN, then enter the VPN
instance name.

Table 9.19-1: Event Service Configuration

ePack User Manual for E210 and E220 Series Devices169

9: Services

9.20 GSM Update
Services>GSM Update
The GSM Update feature allows you to remotely upgrade the cellular module firmware and VOLTEPatch. You can use Lantronix Server or Custom Server as the source for available firmwares.

9.20.1 Lantronix Server
Service>GSM Update>Lantronix ServerThis page allows you to check for available firmware and to upgrade the firmware from the Lantronix
D2Sphere server.

Figure 9.20-1: GSM Update Lantronix Server
Parameters

Description

Type of Upgrade

Select the type of upgrade.
•

Firmware•Volte Patch

Check for update

Click to check for available updates on D2Sphere.

Available Firmware

Displays a list of firmwares for the cellular module, available on
the server. Select the firmware from this list.

Upgradeclick Update now to upgrade the router.

Upgrade/Downgrade

Click Update now to download the firmware selected in the
Available Firmware list.

Table 9.20-1: GSM Update configuration for Lantronix Server

9.20.2 Custom Server
Services>GSM Update>Custom ServerThis page allows you upgrade the router firmware from a custom server.

ePack User Manual for E210 and E220 Series Devices170

9: Services

Figure 9.20-2: GSM Update Custom Server
Parameters

Description

Server URL/IPEnter URL/IP of the custom server

Filename

Add the required firmware version. Click Save & Apply and thenclick Update now.

Table 9.20-2: GSM Update configuration for Custom Server
Note:
GSM update can also be triggered using SMS by sending the SMS AT+MODULEDOTA command froma registered mobile number. For custom server use the command AT+MODULEDOATSETTINGS after
setting the configuration from the Web UI (shown above). See Figure 9.12-2 for syntax details.

ePack User Manual for E210 and E220 Series Devices171

9: Services

9.21 uHTTPd
uHTTPd is the standard web server that runs the web interface and provides support for multiple
instances, TLS (SSL), and other web server features.

9.21.1 General Settings
Services > uHTTPd > General Settings
The uHTTPd Main instance is provided by default and is used for configuring the router. You cancreate new instances and configure the server settings by clicking the Add button.

Figure 9.21-1: uHTTPd Service General Settings Configuration

ePack User Manual for E210 and E220 Series Devices

172

9: Services

Figure 9.21-2: uHTTPd Self-signed Certificate Configuration
Parameters

Description

MAIN
HTTP listeners (address:port)

Either HTTP listener or HTTPS listener is required.
Enter the ports and addresses to listen on for HTTP access.
Use 0.0.0.0/[::] to bind to all devices present. Enter a specific IP
address to restrict binding to a specific interface.

HTTPS listener (address:
port)

Either HTTP listener or HTTPS listener is required.
Enter the ports and addresses to listen on for HTTPS access.
Use 0.0.0.0/[::] to bind to all devices present. Enter a specific IP
address to restrict binding to a specific interface.

Redirect all HTTP to HTTPS

Select this option to redirect all HTTP to HTTPS.

Ignore private IPs on public
interface

Select to ignore requests from private IP addresses (RFC1918)
directed to the server's public IPs.
The default setting is to ignore the requests from private IPs.

HTTPS Certificate (DER
Encoded)Upload the HTTPS cert file. Click the icon to expand the directory
structure (from root).

HTTPS Private Key (DER
Encoded)Upload the HTTPS private key file. Click the icon to expand the
directory structure (from root).

Remove old certificate andkey

Click to remove old certificate and key files

Remove configuration forcertificate and key

Click to remove the cert, key, and configuration information.

Add

Click to add another instance.

uHTTPd Self-signed Certificate Parameters
Valid for # of Days

Enter the validity time (number of days) of the generated
certificate.
Default: 730 days

ePack User Manual for E210 and E220 Series Devices173

9: Services

Parameters
Length of key in bits

Description
Enter the length of the generated RSA key in bits
Default: 2048

Server hostnameEnter the server hostname covered by the certificate.
Default: Lantronix

CountryCountry of the certificate issuer

StateState of the certificate issuer

Location

Location/city of the certificate issuer

Table 9.21-1: uHTTPd Service General Configuration

ePack User Manual for E210 and E220 Series Devices174

9: Services

9.21.2 Full Web Server Settings
Services > uHTTPd > Full Web Server Settings
Full Web Server Settings provide additional configuration for the uHTTPd service.

Figure 9.21-3: uHTTPd Service Full Web Server Configuration

Parameters

Description

MAIN
Index page(s)Enter the index file to use for directories. Usually index.html orindex.php.

CGI filetype handler

Enter the interpreter to associate with file endings in the cgi
scripts directory.

Do not follow symlinks
outside document root

If selected, the http/https server will not follow symbolic links
outside the document root.

ePack User Manual for E210 and E220 Series Devices175

9: Services

Parameters

Description

Do not generate directory
listings

If selected the http/https server will not generate directory
listings.

Aliases

Maps URL to filesystem locations outside the document root.
Format should be/old/path=/new/pathRealm for Basic AuthEnter the realm for basic authentication when prompting theclient for credentials.
The default is "Lantronix", which is the local hostname.

Config file (e.g. forcredentials for Basic Auth)Enter the path of the configuration file for credentials for basic
authentication and additional settings.
The server will not use HTTP authentication if this field is blank.

404 ErrorEnter the virtual URL of file or CGI script to handle 404 (file notfound) request. It must begin with a forward slash '/'.

uHTTPd Self-signed Certificate Parameters
Valid for # of Days

Enter the validity time (number of days) of the generated
certificate.
Default: 730 days

Length of key in bits

Enter the length of the generated RSA key in bits
Default: 2048

Server hostnameEnter the server hostname covered by the certificate.
Default: Lantronix

CountryCountry of the certificate issuer

StateState of the certificate issuer

Location

Location/city of the certificate issuer

Table 9.21-2: uHTTPd Service Full Web Server Configuration

ePack User Manual for E210 and E220 Series Devices

176

9: Services

9.21.3 Advanced Settings
Services > uHTTPd > Advanced Settings

Figure 9.21-4: uHTTPd Service Advanced Configuration

ePack User Manual for E210 and E220 Series Devices177

9: Services

Parameters

Description

MAIN
Document root

Enter the directory path to the server document root. By default
the root is /www.

Path prefix for CGI scripts

Enter the prefix for CGI scripts, relative to the document root.
Leave it blank to disable CGI support.

Virtual path prefix for LUA
scripts

Enter the prefix for sending requests to the embedded LUA
interpreter, relative to the document root. Leave it blank todisable LUA support.

Full real path to handler for
Lua scripts

Enter the full path to the Lua handler script to initialize LUA
runtime on server start. This field is required if Lua prefix is
given, otherwise it's optional.

Virtual path prefix for ubus
via JSON-RPC integration

Enter the URL prefix for ubus via JSON-RPC handler, relative tothe document root. Leave it blank to disable UBUS.

Override path for ubus
socketEnter the override ubus socket path

Enable JSON-RPC CrossOrigin Resource Support

Select to enable CORS HTTP headers on JSON-RPC API.

Disable JSON-RPC
authorization via ubus
session API
Maximum wait time for Lua,
CGI, or ubus execution

By default, this setting is disabled.
If selected, do not authenticate JSON-RPC requests against the
UBUS session API.
By default the requests are authenticated.
Enter the maximum wait time for CGI, LUA or ubus requests inseconds. If no output is generated within the timeout period, therequested executables are terminated.
Default is 60 seconds.

Maximum wait time for
network activity

Enter the maximum wait time for network activity. If no network
activity occurs within the timeout period, the requested
executables are terminated and the connection is shut down.
Default is 30 seconds.

Connection reuse

Sets the time limit for connection reuse.

TCP Keepalive

Number of unanswered keep alive requests allowed.
Default: 1

Maximum number ofconnections

Enter the maximum number of concurrent connections allowed.
If the limit is reached, further TCP connection attempts arequeued until the number of connections is below the limit.
Default: 100

Maximum number of script
requests

Enter the maximum number of concurrent requests. If the limit isreached, further requests are queued until the number ofrequests drops below the limit.
Default: 6

Maximum wait time for rpc
timeout in seconds perEnter the maximum wait time for RPC timeout in seconds.
Default: 55

ePack User Manual for E210 and E220 Series Devices

178

9: Services

Parameters

Description

requests
uHTTPd Self-signed Certificate Parameters
Valid for # of Days

Enter the validity time (number of days) of the generated
certificate.
Default: 730 days

Length of key in bits

Enter the length of the generated RSA key in bits
Default: 2048

Server hostnameEnter the server hostname covered by the certificate.
Default: Lantronix

CountryCountry of the certificate issuer

StateState of the certificate issuer

Location

Location/city of the certificate issuer

Table 9.21-3: uHTTPd Service Advanced Configuration

ePack User Manual for E210 and E220 Series Devices

179

9: Services

9.22 SCEP Client
Services > SCEP Client
The Simple Certificate Enrollment Protocol (SCEP) client is used to enroll the certificate from the
SCEP server by providing server URL and password.
The SCEP Client page displays the SCEP certificates, their status and validity. This page allows you to
perform the following actions related to certificates:
•
•
•
•
•

Add – Add a new certificate.
Edit – Edit a certificate.
Delete – Delete a certificate.
Enroll – Enroll a newly created certificate.
Renew – Renew an expired certificate.

Figure 9.22-1: SCEP Client Page
Click Add Certificate to create a new certificate.

9.22.1 Certificate Details
Services > SCEP Client > Add Certificate
The Certificate Details page displays.

ePack User Manual for E210 and E220 Series Devices180

9: Services

Figure 9.22-2: SCEP Client Certificate Details
Parameters

Description

Name

Enter a name for the certificate.

Key Type

Select key type:

RSA (default)
Key Lenth

Select key length:7681024 (default)
2018
3072
Subject NameCountryEnter country name (should consist only 2 characters, e.g., IN, US,
UK etc.).

StateEnter state name.

LocalityEnter locality name.

Organization

Enter organization name.

Organization UnitEnter organization unit name.

ePack User Manual for E210 and E220 Series Devices

181

9: Services

Parameters

Description

Common NameEnter a common name.

Subject Alternative
Alternate Name

Select an alternate name:

Cert IP
Cert DNS
Cert Email
None (default)
SCEP Server Credentials
SCEP Server URL

Enter the URL for SCEP server.

Password

Enter SCEP server password.

Table 9.22-1 : SCEP Client Certificate Details Configuration
Note: The Subject Name is a combination of the fields under it. The Subject Name should be uniquefor every certificate.
Once you enter values for all the fields, click Save & Apply. The new certificate displays on the SCEP
Client page.

Figure 9.22-3: SCEP Client page with new certificate
Click Enroll. The Certificate Enrolled Successfully message displays. Click OK. The status of the newcertificate changes.

Figure 9.22-4: SCEP Client page with new certificate enrolled
In the case a certificate expires, click Renew to renew the certificate.

ePack User Manual for E210 and E220 Series Devices

182

10: Network

10 Network
The ePack software provides the administrator several options to customize the Network
configurations adhering to the organization’s requirements. To configure the Network parameters,
the following sub-sections are available:
•
•
•
•
•
•
•
•
•

Interfaces
Wireless
Switch
DHCP and DNS
Hostnames
Static Routes
Diagnostics
FirewallLoad Balancing

10.1 Interfaces
Network > Interfaces
The Interfaces section provides the overview and status of the network interfaces for LAN, WAN,
Cellular, and WWAN. It also provides the configuration parameters for each of these interfaces,
which allow you to configure or update the protocol assignment, gateway metric, DNS configuration,
bridge interface configuration, firewall zone assignment, and DHCP server configuration according to
your requirements.
Additionally, from the Interfaces page, you can add new virtual interfaces, such as GRE, L2TP, PPP, or
PPtP VPN instances.
The Network Interfaces section contains following pre-configured network interfaces:•

CELLULAR

•

LAN

•

WAN/WAN6•

WWAN/WWAN6

ePack User Manual for E210 and E220 Series Devices

18310: Network

10.1.1 Interfaces Overview
Network > Interfaces
This page provides a summary view of the interfaces on the router and general interface settings.

Figure 10.1-1: Interfaces Overview
Parameters

Description

Interfaces Overview
Network

Displays all the configured Network Interfaces. The defaultinterfaces are: LAN, CELLULAR, WAN, WAN6, WWAN, WWAN6
In addition, it displays any custom interfaces that have been
added.
Note• When Wi-Fi is configured as Client, Interface WWAN will
become active.

Status

Displays the status of the interface. See Section 10.1.2.

ePack User Manual for E210 and E220 Series Devices

184

10: Network

Parameters
Actions

Description
Select the action to be taken for the interface.

Restart – Connects the interface or reconnects the alreadystarted interface.
Stop – Stops the interface.
Edit – Allows you to edit the interface settings.
Detete – Deletes the interface.
Note• Default interfaces have pre-defined configurations andshould not be deleted.
Add new interface

Click Add new interface to add a virtual interface. See Section
10.1.8.

Global Network Options
IPv6 ULA-Prefix

Displays the IPv6 Unique Local Address (ULA)-Prefix

Network Watchdog
EnableSelect this box to enable or clear the box to disable the Network
Watchdog.
The network watchdog monitors the connectivity of all WAN(external network) interfaces. In the absence of connectivity
resulting in Network down, the router resets itself.
By default, the network watchdog is in enabled mode.

Time

If the network watchdog is enabled, enter the watchdog timeout
in minutes.

Wan as Lan
EnableSelect the box to enable the WAN port to act as a LAN interface.
This will provide two LAN interfaces on the router.

Table 10.1-1: Network Interfaces Overview

ePack User Manual for E210 and E220 Series Devices

185

10: Network

10.1.2 Interface Status

Figure 10.1-2: WAN Interface Status
The Interface Status displays the following details associated to interface:•••

Protocol – Displays the protocol assigned to the interface.
Uptime – Displays the amount of time that the interface has been active since the lastinterface connection/reconnection. The format is dd:hh:mm:ss, and is displayed in 24 hour
clock format. Uptime is displayed for all active interfaces.
MAC-Address – MAC Address of the physical interfaces.
Note• MAC Address is displayed for LAN, WAN, WWAN and OpenVPN interfaces.

•
•
•
•

RX – Amount of data received in bytes over an Interface. RX is displayed for all the interfaces
for a particular session.
TX – Amount of data transmitted in bytes over an Interface. TX is displayed for all theinterfaces for a particular session.
IPv4 – Displays IPv4 Address of the interface.
IPv6 – Displays IPv6 Address of the interface.

ePack User Manual for E210 and E220 Series Devices

186

10: Network

10.1.3 Interface Protocols
The Protocol field on the Edit Interface > General Settings page allows assigning the protocol withrespect to the router model number. Table 10.1-2 shows the available protocol options for each of
the interfaces. When configuring an interface, please make sure that the protocol selection isappropriate for the interface.

Interface
LAN

WAN

WWAN

Cellular

Static Address









DHCP client









DHCPv6 client









GRE









L2TP









Unmanaged









PPP









PPPoE









PPtP









Cellular









QMI Cellular









Relay Bridge









Protocols

Table 10.1-2: Network Interface Protocols

The protocols should be assigned to interfaces as shown in Table 10.1-2 based on how the user
wants the interfaces to work. The interface requires additional selection or configuration of settings
such as default gateway, gateway metric, DHCP server, and firewall zone to name a few. Thesesettings may be mandatory, optional, or not used by the interface; the interface configuration
depends on both the protocol selected as well as the organization's requirements.
Please review the following before configuring the LAN, WAN, and WWAN interfaces.
•

If any two interfaces in Table 11.1-2 have the same protocol (for example, Static Address is
assigned to LAN and WAN interfaces), the settings for configuring the interface will be nearly
the same. For this reason, the protocols are described below. Refer to Sections 10.1.3.1 to10.1.3.6 for descriptions of the protocol settings.

ePack User Manual for E210 and E220 Series Devices

187

10: Network•

The LAN interface should use Static Address. On the LAN interface, the Gateway is not
required and DHCP server is optional, It can be used if you want the router (DHCP server) todynamically assign IP addresses to clients connecting to the LAN.

•

WAN and WWAN interfaces should use either Static Address, DHCP client, or DHCPv6 client.
WAN also supports using PPPoE protocol. On the WAN and WWAN interfaces with Static
Address as the assigned protocol, gateway is required for external interface, but it is not
used for internal use. On the WAN and WWAN interfaces, the DHCP server should bedisabled ("Ignore interface" will be selected).

All the other protocols listed in Table 10.1-2 are supported after you add a virtual interface based on
the requirement. For example, if an L2TP VPN is set up, a virtual interface with L2TP protocol should
be used to configure the L2TP VPN connection. For descriptions on these protocols, see Section
10.1.8 Add Virtual Interface.
The physical or virtual interfaces can be set to Unmanaged, if no protocol is desired. This setting may
be used to enumerate an interface for firewall purposes.

10.1.3.1 Static Address
The following table describes the Static Address protocol settings.
Parameters

Description

General Settings
Protocol

Static Address – Static configuration with fixed address andnetmask

Bring up on bootAllows the interface to be live after every reboot.
Bring up on boot is checked by default.

IPv4 AddressEnter the IPv4 Address. This IP Address must be used to accessthe Router. The default IP Address is 198.162.1.1 for LAN.

IPv4 Netmask

Select the IPv4 Netmask.

IPv4 Gateway

Enter the IPv4 Address for Gateway.

IPv4 broadcast

Enter the IPv4 Address for broadcast.

Use Custom DNS servers

Enter the IP address of the custom DNS server. Click the + button
to add more DNS servers.

IPv6 assignment length

Select the IPv6 assignment length.
Available Options•

64 or 60 – Assign a part of the given length of public IPv6prefix to this interface.

•disabled – do not assign part of the prefix to this interface•--custom-- – Assign a part of the given length of public IPv6prefix to this interface.

IPv6 assignment length is disabled by default.
If assignment length is disabled, enter the following:

IPv6 address - Enter the IPv6 Address.
IPv6 gateway - Enter the IPv6 Address for Gateway.

ePack User Manual for E210 and E220 Series Devices

188

10: Network

Parameters

Description
IPv6 routed prefix - Enter the public prefix to direct the client
distribution to the router.
If assignment length is 60, 64, or custom, enter the following:

IPv6 assignment hint -Enter hexacimal subprefix ID for thisinstance to assign prefix parts.
IPv6 suffix - Enter the IPv6 suffix.
Advanced Settings
Use builtin IPv6 management

Allows to use the built in IPv6 management configuration.

Force link

Select this option to assign interface properties regardless of thelink being active or not.
If not selected, items are assigned only after the link has become
active.
Default is not selected.

Override MAC address

Click to override the default MAC Address for the WAN Interface.
On factory reset, it will be set to default MAC address.

Override MTUEnter the number of bytes indicating the largest physical packet
size that the network can transmit.
The default MTU size is 1500 bytes. Blank value represents auto
MTU sizeUse gateway metricEnter the gateway metric. It ensures a separate routing entry forthe respective interface in the main routing table.
The default metric is 5.

Physical Settings
Bridge Interfaces

Click to enable creating a bridge over multiple interfaces.

Enable STP – Check to enable the Spanning Tree Protocol
over the bridge.
Enable IGMP snooping – Check to enable IGMP snoopingon the bridge.
Interface

Select the interface to be configured.
Select more than one interface, if parameter creating a bridgeover multiple interfaces is enabled.

Firewall Settings
Create/Assign firewall -zone

Select the firewall zone to be assigned to the interface.
Select unspecified – or – create to remove the interface orassign a new zone to the interface respectively.
Enter the name of the new zone in the text box and click Save &Apply button.

DHCP Server - DHCP Server is used only for LAN interfaces
DHCP > General Setup
Ignore Interface

Check to disable the DHCP interface.

ePack User Manual for E210 and E220 Series Devices

189

10: Network

Parameters

Description
Note• If DHCP server is disabled for the interface, all the LAN
devices connected to the router should have a static LAN IP
configured.

Start

Lowest leased address as offset from the network address.
Example• If your LAN IP address is 192.168.1.1 and the parameter Start
is configured as 100, then the starting IP Address of theleased IP Address range is 192.168.1.100

Limit

Maximum number of leased addresses that can be configured.
Example• If your LAN IP Address is 192.168.1.1, the parameter Start isconfigured as 100, and parameter Limit is configured as 150,
then a total of 150 devices are configured. Thus the leased
IP Address range is 192.168.1.100 to 192.168.1.249.

Lease time

Remaining time until which the device can use the DHCP serverleased IP Address.
Note• IP address allocated by the router will disappear from the
Wi-Fi / Overview / Associates stations list only after
individual lease time for each IP expires.

DHCP > Advanced Settings
Dynamic DHCP

Check to allocate DHCP IP addresses dynamically to the clients.
When unchecked, service will be provided only to the clients
having the static IP Address.

Force

Check to override the current configured Server and use DHCP
server.

IPv4-Netmask

Enter the IPv4 netmask.
This netmask will override the netmask used by the clients. In
normal scenario netmask is calculated from the subnet.

DHCP-Options

Define additional DHCP options
Example• "6,192.168.2.1, 192.168.2.2" which advertises different DNS
servers to clients.

DHCP > IPv6 Settings
Router AdvertisementService

Select the Router Advertisement-Service mode; disabled, servermode, relay mode, hybrid mode.

DHCPv6-Service

Select the DHCPv6-Service mode; disabled, server mode, relay
mode, hybrid mode.

ePack User Manual for E210 and E220 Series Devices

190

10: Network

Parameters

Description

NDP-Proxy

Select the NDP mode; disabled, server mode, relay mode, hybrid
mode.

DHCPv6-Mode

Select the DHCPv6-Service mode:

StatelessStatefulStateless + StatefulStateful only
Always announce default
router

If ticked Announce as default router even if no public prefix isavailable.

Announced DNS servers

Add the DNS servers

Announced DNS domains

Add the DNS domains.

Table 10.1-3: Static Address Protocol Settings

ePack User Manual for E210 and E220 Series Devices

191

10: Network

10.1.3.2 DHCP Client
The following table describes the DHCP Client protocol settings.

Parameters

Description

General Settings
ProtocolDHCP client – Address and netmask are assigned by DHCP.

Bring up on bootAllows the interface to be live after every reboot.
Bring up on boot is checked by default.

Hostname to send whenrequesting DHCP

Hostname of the router

Advanced Settings
Use builtin IPv6 management

Allows to use the built in IPv6 management configuration.

Force link

Select this option to assign interface properties regardless of thelink being active or not.
If not selected, items are assigned only after the link has become
active.
Default is not selected.

Use broadcast flag

Check to use the broadcast flag.
This flag is generally used by the ISP’s.

Use default gateway

Click to configure a default gateway route.
None of the gateway routes are configured by default.

Use DNS server advertisedby peer

Allows advertising the DNS server address.
Use DNS server advertised by peer for WAN interface is checkedby default.
If unchecked, the advertised DNS server addresses are ignored.

Use gateway metricEnter the gateway metric.
The Load Balancer uses these Metric values to determine priorityof a WAN.
The default metric is 4.

Client ID to send whenrequesting DHCPEnter the Client ID that shall be sent when requesting DHCP.

Vendor Class to send whenrequesting DHCP

To allocate DHCP IP Addresses based on Vendor Class.

Override MAC address

Click to override the default MAC Address for the WAN Interface.
On factory reset, it will be set to default MAC address.

Override MTUEnter the number of bytes indicating the largest physical packet
size that the network can transmit.
The default MTU size is 1500 bytes. Blank value represents auto

ePack User Manual for E210 and E220 Series Devices

192

10: Network

Parameters

Description
MTU size

Physical Settings
Bridge Interfaces

Click to enable creating a bridge over multiple interfaces.
Enable STP – Check to enable the Spanning Tree Protocol overthe bridge.
Enable IGMP snooping – Check to enable IGMP snooping on thebridge.

Interface

Select the interface to be configured.
Select more than one interface if parameter creating a bridgeover multiple interfaces is enabled.

Firewall Settings
Create/Assign firewall -zone

Select the firewall zone to be assigned to the interface.
Select unspecified – or – create to remove the interface orassign a new zone to the interface respectively.
Enter the name of the new zone in the text box and click Save &Apply button.

Table 10.1-4: DHCP Client Protocol Settings

10.1.3.3 DHCPv6 Client
The following table describes the DHCPv6 Client protocol settings.
Parameters

Description

General Settings
ProtocolDHCPv6 Client – Address and netmask are assigned by DHCP

Bring up on bootAllows the interface to be live after every reboot.
Bring up on boot is checked by default.

Request IPv6-addressEnter the behavior for requesting addresses. Options are try(default), force, and disabled

Request IPv6-prefix of length

Enter the IPv6 address prefix length in bits. Options are:Unspecified
Automatic (default)
disabled – use if you want single IPv6 address for the AP
without a subnet for routing
48, 52, 56, 60, 64 –hinted prefix length
custom – enter custom prefix length
Advanced Settings
Use builtin IPv6 management

Allows to use the built in IPv6 management configuration.

Force link

Select this option to assign interface properties regardless of theePack User Manual for E210 and E220 Series Devices

193

10: Network

Parameters

Description
link being active or not.
If not selected, items are assigned only after the link has become
active.
Default is not selected.

Use default gateway

Click to configure a default gateway route.
None of the gateway routes are configured by default.

Custom delegated IPv6
prefixEnter the custom IPv6 prefix to be used.

Use DNS server advertisedby peer

Allows advertising the DNS server address.
Use DNS server advertised by peer for WAN interface is checkedby default.
If unchecked, the advertised DNS server addresses are ignored.

Client ID to send whenrequesting DHCPEnter the Client ID that shall be sent when requesting DHCP.

Override MAC address

Click to override the default MAC Address for the WAN Interface.
On factory reset, it will be set to default MAC address.

Override MTUEnter the number of bytes indicating the largest physical packet
size that the network can transmit.
The default MTU size is 1500 bytes. Blank value represents auto
MTU size

Physical Settings
Bridge Interfaces

Click to enable creating a bridge over multiple interfaces.

Enable STP – Check to enable the Spanning Tree Protocol
over the bridge.
Enable IGMP snooping – Check to enable IGMP snoopingon the bridge.
Interface

Select the interface to be configured.
Select more than one interface, if parameter creating a bridgeover multiple interfaces is enabled.

Firewall Settings
Create/Assign firewall -zone

Select the firewall zone to be assigned to the interface.
Select unspecified – or – create to remove the interface orassign a new zone to the interface respectively.
Enter the name of the new zone in the text box and click Save &Apply button.

Table 10.1-5: DHCPv6 Client Protocol Settings

10.1.3.4 PPPoE
The following table describes the PPPoE protocol settings.

ePack User Manual for E210 and E220 Series Devices

194

10: Network

Parameters

Description

General Settings
ProtocolPPPoE – Point to Point Protocol over Ethernet

Bring up on bootAllows the interface to be live after every reboot.
Bring up on boot is checked by default.

PAP/CHAP usernameEnter the PAP/CHAP username. The default password is admin.

PAP/CHAP password

Enter the PAP/CHAP password.

Access Concentrator

Enter the access concentrator name.

Service NameEnter the service name.
Note• Access Concentrator name and Service Name gets auto
populated from PPPoE Access Point Router if they are notexplicitly provided

Advanced Settings
Use builtin IPv6
management

Allows to use the built in IPv6 management configuration

Force link

Select this option to assign interface properties regardless of thelink being active or not.
If not selected, items are assigned only after the link has become
active. This is the default.

Obtain IPv6-Address

Allow IPv6 negotiation on the PPP link

Use default gateway

Select to use the default gateway. If unselected, no default route
will be configured.

Use DNS servers advertisedby peer

Select to use DNS servers advertised by peer, otherwise ignore
advertised DNS servers.

Use gateway metricEnter gateway metric.

LCP echo failure threshold

Enter the number of LCP echo request failures allowed before
considering the peer dead. Set to zero (0) to ignore failures.

LCP echo interval

The LCP echo interval in seconds. LCP echo failure thresholdmust be set, otherwise this value is ignored.

Host-Uniq tag content

Enter the custom Host-Uniq tag to be used.

Inactivity timeout

Enter the inactivity timeout in seconds, Close the connection if
the timeout is reached or enter zero (0) to ignore inactivity
timeout.

Override MTUEnter MTU size in bytes. The default is 1500 bytes.

Physical Settings
Bridge Interfaces

Click to enable creating a bridge over multiple interfaces.

Enable STP – Check to enable the Spanning Tree Protocol
over the bridge.
Enable IGMP snooping – Check to enable IGMP snooping

ePack User Manual for E210 and E220 Series Devices

19510: Network

Parameters

Description
on the bridge.

Interface

Select the interface to be configured.
Select more than one interface, if parameter creating a bridgeover multiple interfaces is enabled.

Firewall Settings
Create/Assign firewall -zone

Select the firewall zone to be assigned to the interface.
Select unspecified – or – create to remove the interface orassign a new zone to the interface respectively.
Enter the name of the new zone in the text box and click Save &Apply button.

Table 10.1-6: PPPoE Protocol Settings

10.1.3.5 Cellular
The following table describes the Cellular protocol settings.
Parameters

Description

General Settings
Protocol

Cellular - CDMA, UMTS, or GPRS connection using an AT-style 3G
modem

Bring up on bootAllows the interface to be live after every reboot.
Bring up on boot is checked by default.

Enable IP PassthroughEnables the device connected to its WAN interface, to receive IP
address from cellular network.

Cellular Module

Displays the Cellular module

Modem device

Displays the cellular modem device

Service Type

Select the cellular service type to use or select Automatic to let
the device use the best available network

IP Protocol

Select from IPv4, IPv4 + IPv6, or IPv6.

Advanced Settings
Use builtin IPv6 management

Allows to use the built in IPv6 management configuration.

Force link

Select this option to assign interface properties regardless of thelink being active or not.
If not selected, items are assigned only after the link has become
active.
Default is not selected.

Enable IPv6 negotiation on
PPP link

Click to enable IPv6 negotiation on PPP link.

Modem init timeout

Enter the maximum wait time in seconds for the modem to

ePack User Manual for E210 and E220 Series Devices

196

10: Network

Parameters

Description
become ready.
The default modem initiation timeout 20 seconds.

Use default gateway

Click to configure a default gateway route.
None of the gateway routes are configured by default.

Use gateway metricEnter the gateway metric.
The default metric is 5.

Use DNS servers advertisedby peer

For Cellular protocol only.

MTU Size/Override MTUEnter the number of bytes indicating the largest physical packet
size that the network can transmit.

Select the box to use DNS servers advertised by peer.

The default MTU size is 1500 bytes. Blank value represents auto
MTU size
Firewall Settings
Create/Assign firewall -zone

Select the firewall zone to be assigned to the interface.
Select unspecified – or – create to remove the interface orassign a new zone to the interface respectively.
Enter the name of the new zone in the text box and click Save &Apply button.

SIM Settings (E220 series) or SIM1/SIM2 Settings (E210 series)
PDP Type

Enter the IP stack mode as IPv4, IPv6, or IPv4/IPv6 (dual stack).

Service Type

Select the cellular service type to use or select Automatic to let
the device use the best available network.

APN

Enter the Access Point Name provided by the cellular network
operator.

PIN

Enter the PIN of the SIM card

PUKEnter the PUK (personal unblocking key) used to unblock the SIM
card if the PIN code has been repeatedly entered incorrectly

Authentication TypeEnter the authentication method used for the cellularconnection. PAP, PAP/CHAP, CHAP (these require username andpassword) or None

Enable roaming

Enable data roaming on the cellular interface

Cid

Only on E220 series. Enter Cid value or leave as default

Table 10.1-7: Cellular Protocol Settings

ePack User Manual for E210 and E220 Series Devices

197

10: Network

10.1.3.6 QMI Cellular
The following table describes the QMI Cellular protocol settings.
Parameters

Description

General Settings
ProtocolQMI Cellular – USB modems using QMI protocol

Bring up on bootAllows the interface to be live after every reboot.
Bring up on boot is checked by default.

Enable IP PassthroughEnables the device connected to its WAN interface, to receive IP
address from cellular network through epack router.

Modem device

Displays the modem device

Primary SIM

Only available on E210 series devices that have dual SIM support.
SIM1 or SIM2

Retries

Only available on E210 series devices that have dual SIM support.
Enter the number of retry attempts to make on the primary SIM
before switching to the secondary SIM in case of data connection
failures. After the retry limit has been reached, the device willconnect via the secondary SIM.

Period after which therouter will try and return toprimary SIM

Only available on E210 series devices that have dual SIM support.

Routine switch to secondary
SIM

Only available on E210 series devices that have dual SIM support.

Enter the number of minutes after failover to the secondary SIM
that the router should wait before attempting to switch back to
the primary SIM.

Enter the number of minutes after which the interface shouldswitch from primary to secondary SIM.

Advanced Settings
Use builtin IPv6 management

Allows to use the built in IPv6 management configuration.

Force link

Select this option to assign interface properties regardless of thelink being active or not.
If not selected, items are assigned only after the link has become
active.
Default is not selected.

Enable IPv6 negotiation on
PPP link

Click to enable IPv6 negotiation on PPP link.

Modem init timeout

Enter the maximum wait time in seconds for the modem tobecome ready.
The default modem initiation timeout 20 seconds.

Use default gateway

Click to configure a default gateway route.

ePack User Manual for E210 and E220 Series Devices

19810: Network

Parameters

Description
None of the gateway routes are configured by default.

Use gateway metricEnter the gateway metric.
The default metric is 5.

MTU Size/Override MTUEnter the number of bytes indicating the largest physical packet
size that the network can transmit.
The default MTU size is 1500 bytes. Blank value represents auto
MTU size

Firewall Settings
Create/Assign firewall -zone

Select the firewall zone to be assigned to the interface.
Select unspecified – or – create to remove the interface orassign a new zone to the interface respectively.
Enter the name of the new zone in the text box and click Save &Apply button.

SIM Settings (E220 series) or SIM1/SIM2 Settings (E210 series)
PDP Type

Enter the IP stack mode as IPv4, IPv6, or IPv4/IPv6 (dual stack).

Service Type

Select the cellular service type to use or select Automatic to let
the device use the best available network.

APN

Enter the Access Point Name provided by the cellular network
operator.

PIN

Enter the PIN of the SIM card

PUKEnter the PUK (personal unblocking key) used to unblock the SIM
card if the PIN code has been repeatedly entered incorrectly

Authentication TypeEnter the authentication method used for the cellularconnection. PAP, PAP/CHAP, CHAP (these require username andpassword) or None

Enable roaming

Enable data roaming on the cellular interface

CidEnter Cid value or leave as default

Table 10.1-8: QMI Cellular Protocol Settings

ePack User Manual for E210 and E220 Series Devices

19910: Network

10.1.4 CELLULAR Interface
Network > Interfaces > CELLULAR
This page allows you to configure the Cellular interface parameters. Actual parameters may differ
based on your router model number. When the Cellular interface is first enabled or when the routeris factory reset, the router detects the GSM module and assigns the appropriate protocol. The
protocol can be either Cellular for Sierra HL GSM modules or QMI Cellular for Sierra WP GSM
modules.
Interface configuration settings will vary depending on the assigned protocol. For descriptions of the
Cellular protocol and QMI Cellular protocol settings, see Section 10.1.3.5 and Section 10.1.3.6,
respectively.
To edit the interface:
1. Go to Network > Interfaces, select CELLULAR and click Edit.

Figure 10.1-3: Cellular Interface General Settings
2. Configure the interface settings respective to the router model number.
a. See Section 10.1.3.5 for Cellular or Section 10.1.3.6 for QMI Cellular protocol
settings.
b. General Settings - Protocol should not be changed for the cellular interface.
c. Firewall Settings - Firewall zone should be set as WAN zone.
d. SIM Settings – For E210 series models that support dual SIM, two SIM settings tabs
will be displayed. See the figure below. For devices that support only a single SIM,
one SIM Settings tab will be displayed.

ePack User Manual for E210 and E220 Series Devices

200

10: Network

Figure 10.1-4: Cellular Interface SIM Settings
3. Click Save.
4. On the Network Interfaces overview page, click Save & Apply to save the configuration on
the router.

ePack User Manual for E210 and E220 Series Devices

201

10: Network

10.1.5 LAN Interface
Network > Interface > LANThis page allows you to configure the LAN interface with respect to the router model number.
The LAN interface should use Static Address. Gateway is not required.
DHCP server may be used to dynamically assign an IP address to clients connecting to the LAN. If
DHCP server is disabled for the interface, all the LAN devices connected to the router should have astatic LAN IP configured.
DHCP Server
The DHCP server maintains a database of available IP addresses and configuration information.
When it receives a request from a client, the DHCP server determines the network to which the
DHCP client is connected, and allocates an IP address or prefix appropriate for the client, and sends
configuration information appropriate for that client.
DHCP servers typically grant IP addresses to clients for a limited interval called a lease. DHCP clientsare responsible for renewing their IP address before that interval has expired, and must stop using
the address once the interval has expired, if they have not been able to renew it. DHCP is used forIPv4 and IPv6. While both versions serve the same purpose, the details of the protocol for IPv4 andIPv6 are sufficiently different that they should be considered separate protocols.
The router acts as the DHCP server and assigns the IP Address to device(s) connected to the
network.
Interface configuration settings are determined mainly by the protocol selection. For a description of
the Static Address protocol settings, see Section 10.1.3.1.

ePack User Manual for E210 and E220 Series Devices

20210: Network

To edit the interface:
1. Go to Network > Interfaces, select LAN and click Edit.

Figure 10.1-5: Lan General Settings
2. Configure the interface settings respective to the router model number.
a. See Section 10.1.3.1 for Static Address protocol settings.
b. General Settings – Protocol should be Static Address for the LAN interface. Gateway
is not required.
c. Physical Settings – By default, the LAN interface bridges the eth0.1 and wlan0
physical interfaces.

ePack User Manual for E210 and E220 Series Devices

20310: Network

d. Firewall Settings - Firewall zone should be set as LAN zone.
e. DHCP Server – DHCP server may be used to assign IP address to clients connecting
to the LAN. To enable the DHCP server, make sure that the check box "Ignore
Interface" is not selected, and configure the other DHCP settings.
3. Click Save.
4. On the Network Interfaces overview page, click Save & Apply to save the configuration.

ePack User Manual for E210 and E220 Series Devices

20410: Network

10.1.6 WAN and WAN6 Interface
Network > Interface > WAN or WAN6This page allows you to configure the WAN and WAN6 interface parameters.
WAN interface supports IPv4 or dual mode IPv4/IPv6. WAN6 interface supports IPv6 mode.
Otherwise, the WAN and WAN6 interfaces provide similar functionality and are configured in asimilar manner.
The WAN or WAN6 interface will use either Static Address, DHCP client, DHCPv6 client, or PPPoE
protocol. If you assign Static Address as the protocol, IPv4 gateway is required for external interface,but should not be used for internal use. DHCP server should be disabled.
The interface configuration parameters will depend on the assigned protocol. For descriptions of theStatic Address, DHCP Client, or PPPoE protocol settings, see Section 10.1.3.1, Section 10.1.3.2, orSection 10.1.3.4, respectively. For DHCPv6 Client, see Section 10.1.3.3.
To edit the interface:
1. Go to Network > Interfaces, select WAN and click Edit.

ePack User Manual for E210 and E220 Series Devices

20510: Network

Figure 10.1-6: WAN Interface (Static Address)
2. Configure the interface settings respective to the router model number.
a. See Section 10.1.3.1 for Static Address, Section 10.1.3.2 for DHCP client, or Section
10.1.3.4 for PPPoE protocol settings.
b. General Settings – To update the WAN protocol, select the protocol and click the
Switch Protocol button. IPv4 gateway is required for external interface but should
not be used for internal use.

ePack User Manual for E210 and E220 Series Devices

206

10: Networkc. Firewall Settings - Firewall zone should be set as WAN zone.
d. DHCP Server – DHCP server should be disabled. Make sure to select "Ignore
Interface."
3. Click Save.
4. On the Network Interfaces overview page, click Save & Apply to save the configuration.

ePack User Manual for E210 and E220 Series Devices

20710: Network

10.1.7 WWAN and WWAN6 Interface
Network > Interface > WWAN or WWAN6This page allows you to configure the WWAN and WWAN6 interface parameters. When the Wirelessinterface is configured as Client, the WWAN interface will become active.
WWAN interface supports IPv4 or dual mode IPv4/IPv6. WWAN6 interface supports IPv6 mode.
Otherwise, the WWAN and WWAN6 interfaces provide similar functionality and are configured in asimilar manner.
The WWAN or WWAN6 interface will use either Static Address, DHCP client, or DHCPv6 client
protocol. On the WWAN interface, if you assign Static Address as the protocol, IPv4 gateway isrequired for external interface, but should not be used for internal use. DHCP server should bedisabled.
Interface configuration settings will vary depending on the assigned protocol. For descriptions of theStatic Address, DHCP Client or DHCPv6 Client, see Section 10.1.3.1, Section 10.1.3.2, or Section
10.1.3.3, respectively.
To edit the interface:
1. Go to Network > Interfaces, select WWAN and click Edit.

Figure 10.1-7: WWAN General Settings
2. Configure the interface settings respective to the router model number.
a. See Section 10.1.3.1 for Static Address or Section 10.1.3.2 for DHCP protocol
settings.
b. General Settings – To update the WWAN protocol, select the protocol and click the
Switch Protocol button. If Static IP address protocol is selected, IPv4 gateway isrequired for external interface, but should not be used for internal use.

ePack User Manual for E210 and E220 Series Devices

20810: Networkc. Advanced Settings - Similar to WAN DHCP settings, except the metric is fixed bydefault for other features to work as per requirement.
d. Firewall Settings - Firewall zone should be set as WAN zone.
e. DHCP Server – DHCP server should be disabled. Make sure to select "Ignore
Interface."
3. Click Save.
4. On the Network Interfaces overview page, click Save & Apply to save the configuration.

ePack User Manual for E210 and E220 Series Devices

20910: Network

10.1.8 Add Virtual Interface
You can create a virtual network interface to configure a VPN tunnel that encapsulates data inside atransport protocol. GRE, L2TP, PPP, and PPtP, are examples of tunneling protocols that the ePack
software supports.
In general, virtual interfaces can also be used for other reasons, such as to configure a relay bridge toextend the wireless network or for VLANs (see Section 10.3 Switch).
Note• Adding a virtual interface may require complex configuration modifications in the load balancer
settings. For more details, please visit Lantronix Technical Support.
To add a new interface:
1. Go to Networks > Interfaces, and click Add new interface below the list of existing
interfaces.
2. Enter the interface name. The name must include only alpha numeric characters and special
character underscore ( _ ).
3. Select the protocol to assign to the interface
4. Click Create interface to create the interface.
5. Configure the interface settings relative to the selected protocol.
a. The first field below the protocol selection is Bring up on boot. This is enabled bydefault and will start the interface when the router is booted.
b. For the remaining configuration details, refer to Table 10.1-9: Tunnel Protocols
Configuration.
6. Click Save to save the new interface.
7. Click Save & Apply to apply the configuration to the router.

Figure 10.1-8: Add New Interface

ProtocolGRE

Parameters
GRE point-to-point tunnel over IPv4
General Settings

Bring up on boot – Start the interface when the device is

ePack User Manual for E210 and E220 Series Devices

21010: Network

ProtocolParameters
booted. Selected by default.
Enable GRE tunnel – Enable GRE on the interface.
GRE Server Address – Enter the WAN IP address or domainname of the remote GRE server.
Local Address – Enter the WAN IP address of the router
Local Tunnel Address – Enter the local IP address of therouter on the GRE tunnel
Remote Tunnel Address – Enter the remote IP address on
the GRE tunnel
Keepalive Interval (in minutes) – The amount of time before
sending a keepalive probe packet to check the connection
Keepalive Retries – The number of unanswered echo
requests before considering the peer deadInterface – Enter the interface to bind to GRE. GRE cannot
move from one interface to another. It must be bound to aparticular interface.
Advanced Settings

Use builtin IPv6 management - Allows to use the built inIPv6 management configuration
Force link - Select this option to assign interface properties
regardless of the link being active or not.
If not selected, items are assigned only after the link has
become active. This is the default.
Firewall Settings

Select the WAN zone as the firewall zone.
L2TP

PPP over L2TP pseudowire tunnel
General Settings

Bring up on boot – Start the interface when the device isbooted. Selected by default.
L2TP Server – Enter the public IP address of the VPN server
for L2TP connection
PAP/CHAP username – Enter the PAP/CHAP username.
The default password is admin.
PAP/CHAP password – Enter the PAP/CHAP password.
Advanced Settings
Advanced settings are similar to those of PPPoE with a few
exceptions as noted below. See Section 10.1.3.6 for a descriptionof the configuration.
Keepalive Requests is similar to LCP echo failure threshold.
Checkup Interval is similar to Inactivity timeout.
L2TP does not include fields for LCP echo interval or Host-Uniq tag
content.
Firewall Settings

Select the WAN zone as the firewall zone.
PPP

PPP protocol for dialup modem connections
General Settings

ePack User Manual for E210 and E220 Series Devices

21110: Network

ProtocolParameters
Modem device – Select the modem device from the list.
PAP/CHAP username – Enter the PAP/CHAP username.
The default password is admin.
PAP/CHAP password – Enter the PAP/CHAP password.
Advanced settings
Advanced settings are similar to those of PPPoE. See Section
10.1.3.6 for a description of the configuration.
Firewall Settings

Select the WAN zone as the firewall zone.
PPtP

Point to Point Tunneling Protocol (PPtP) VPN
General Settings

VPN Server – Enter the public IP Address or DNS name of
the remote VPN Server for the PPTP connection.
PAP/CHAP username – Enter the PAP/CHAP username.
PAP/CHAP password – Enter the PAP/CHAP password. The
default password is admin.
Interface – Select the interface that the device will use toinitiate the PPtP connection.
Unspecified – use the active interface to make the connection.
Advanced Settings
Advanced settings are similar to those of PPPoE. See Section
10.1.3.6 for a description of the configuration.
One additional setting is described below:

Use mppe – Select to enable encryption if this setting isenabled on the remote server.
Firewall Settings

Select the WAN zone as the firewall zone.
Note:• Enabling PPtP will also enable a 20mins PPtP watchdog which
will reboot the router in absence of an active PPtP
connection for a period of 20 mins.

Table 10.1-9: Tunnel Protocols Configuration

10.1.8.1 Relay Bridge
The Relay Bridge protocol provides an option to implement bridge behavior (on IPv4 only) to extend
the wireless network. The virtual interface must have a local IPv4 address to access the bridgeconnection and relay between two networks.

ePack User Manual for E210 and E220 Series Devices

212

10: Network

10.2 Wireless
Network > Wireless
The Wireless interface on the router can work in different modes:
•
•

•

•

•

•

Master mode as a Wi-Fi access point – The router provides Internet to other host machines
in its network over Wi-Fi. It can get Internet connection from WAN or cellular.
Client mode as a Wi-Fi client – The router will act as a client to existing wireless networks.
The router will accept the Internet access through wireless access provided by another service
provider and then distribute the access to the machines connected to the router on its LAN
interface.
WDS access point and WDS client modes – Wireless Distribution System (WDS) allows theinterconnection of access points in an IEEE 802.11 network. It allows you to bridge tworouters (as WDS access points) wirelessly to extend the Wi-Fi network. WDS client mode
allows a router to connect to a WDS access point. WDS with WPA-PSK, WPA2-PSK, WPAPSK/WPA2-PSK Mixed Mode encryption modes are supported.
802.11s mode – The IEEE 802.11s amendment for mesh networking to the IEEE 802.11
Wireless LAN standard focuses on mechanisms for connecting wireless devices without
having to set up infrastructure. The 802.11s mode allows interconnecting routers to
implement a mesh network.
Ad-hoc and Pseudo Ad-hoc (ahdemo) modes – Ad-hoc mode is used to allow two stations tocommunicate directly without an intermediary. Pseudo ad-hoc (ahdemo) mode is a variant of
ad-hoc mode. Ad-hoc and pseudo ad-hoc modes were used in earlier implementations ofmesh networks, but have been succeeded by 802.11s mesh networks.
Monitor mode – this is a client mode setting in which the wireless interface will listen to all
traffic, not just its own.

The router can act as master as well as client at the same time provided that the router's Wi-Fi client
is connected to any AP.

Figure 10.2-1: Wireless Overview

ePack User Manual for E210 and E220 Series Devices

213

10: Network

Parameters

Description

Wireless Overview
Status and Details

Displays the following details:

SSID – A Service Set Identifier (SSID) is a public identifier of
32 characters that uniquely names a Wi-Fi connection.
Mode – Displays the mode of WLAN interface like Access
Point Mode or Client Mode.
BSSID – Displays Basic Service Set Identification (BSSID); 24
bit MAC Address of Wireless Access Point.
Encryption – Displays the data encryption method.
Channel – Wi-Fi channel
Tx-Power – Transfer power limit
Signal Strength – Displays the signal strength in percentage
Bitrate – Data transfer rate
Country – country code
Scan

Click to scan and detect the available wireless connections.
Scanning must be done when the router is changed from Mastermode to client mode.

RestartClick to restart the radio interface.

Add

Click to add an new network instance.

Enable/Disable

Click to enable or disable the network instance.

Edit

Click to edit the network instance.

RemoveClick to remove the network instance.

Associated Station
Network

Displays the SSID that the station is connected to.

MAC-Address

Displays the MAC Address of the computers and/or devices thatare connected to the router.

Host

Displays the Host name of the computers and/or devices that areconnected to the router.

Signal/Noise

Displays the signal strength in dBm.
Noise in dBm.

RX Rate/TX Rate

Displays the data transfer rate at which the data is received.
Data transfer rate at which the data is transmitted.

Table 10.2-1: Wireless Connection and Associated Stations Overview

ePack User Manual for E210 and E220 Series Devices

21410: Network

10.2.1 Wireless Network Configuration
Network > Wireless > Add/Edit
Wireless network configuration consists of device and interface settings. The wireless device settings
specify radio properties such as channel, driver type and power. The wireless interface configuration
defines the wireless network settings on top of the wireless device.

10.2.1.1 Device Configuration
Network > Wireless > Add/Edit
The wireless device configuration parameters are shown in the top half of the Wireless Configuration
page. The following figure shows an example of the device configuration settings.

General Setup

Figure 10.2-2: Wireless Device General Configuration (E228 device)

Parameters
StatusDescription
Displays the following details:

Mode – Displays the mode of the wireless interface.
SSID – A Service Set Identifier (SSID) is a public identifier of
32 characters that uniquely names a Wi-Fi connection.
BSSID – Displays Basic Service Set Identification (BSSID); 24
bit MAC Address of Wireless Access Point.
Encryption – Displays the data encryption method.
Channel – Displays the channel and frequency
Tx-Power – Displays the transmit power in dBm

ePack User Manual for E210 and E220 Series Devices

215

10: Network

Parameters

Description
Signal/Noise – Displays the signal strength and noise in dBm
Bitrate/Country – Displays the bit rate and country code

Wireless network is enabledThis field allows you to enable or disable the network. The label
displays either "Wireless network is enabled" or "Wirelessnetwork is disabled."
Click Enable or Disable to update the network operation status.

Operating Frequency/ChannelChoose the channel frequency and width from the drop downmenu, or choose ‘auto’, to select it automatically. Channels aredefined in 5 MHz increments and are 20 MHz wide, so it's
recommended to select 'auto' or to select channels that don't
overlap with channels used by other access points in theimmediate area of the access point that you are configuring. You
may also add a custom channel.

Maximum Transmit Power

Select the transmit power.
The default selection is 20dBm or 100mW.

Table 10.2-2: Wireless Device General Configuration
Advanced Settings

Figure 10.2-3: Wireless Network Device Advanced Configuration

ePack User Manual for E210 and E220 Series Devices

216

10: Network

Parameters

Description

Country CodeChoose the country code corresponding to the country where
the router is operational. This ensures that the channels available
in that country are enabled. You can choose driver default toallow the driver to make the selection. By choosing ‘00’ (World),
the router will select the appropriate channel in your country.

Allow legacy 802.11b rates

Select to allow 802.11b rates

Distance Optimization

Displays the distance (in meters) of the farthest machine in yournetwork from the router. Used to optimize the operation of the
Wi-Fi network.
Default is auto.

Fragmentation Threshold

Displays the Fragmentation threshold value (in number of bytes).
Fine-tuning Fragmentation Threshold parameter can result ingood throughput but a wrong value can result in low throughput.
The range of values is 256 to 2346 bytes. In a noisy environment,a smaller value of Fragmentation Threshold may result in more
efficient communication.
Default is off.

RTS/CTS Threshold

Displays the RTS/CTS threshold between 0 to 2347 bytes, typicalvalue being 500. This setting is for advanced users. It prevents
collision of wireless packets, particularly in case of hidden nodes
or in a noisy environment.
Default is off.
Note
• In case of access point setting, it is recommended not to use
RTS/CTS threshold.

Beacon Interval

Displays the interval between each of the beacons sent by theaccess point. Value is in milliseconds.
Default is 100.

Table 10.2-3: Wireless Device Advanced Configuration

10.2.1.2 Interface Configuration
Wireless > Add/Edit
The wireless interface configuration parameters are shown in the bottom half of the WirelessConfiguration page. To configure the interface settings, first select the Mode. The Mode and yourspecific network requirements will determine how you configure the interface settings. In general,
the wireless interface mode will be one of the following: access point (master), client, point-to-point
or a mesh network. The wireless interface may also operate in monitor mode, in which it simply
listens to all wireless traffic, not just its own.
Figure 10.2-4 shows the General Setup tab of the Wireless Interface configuration in Access Point(Master) mode.

ePack User Manual for E210 and E220 Series Devices

217

10: Network

Table 10.2-4 shows the configuration parameters for the General Setup tab for all modes. 802.11s
general settings are described separately from the other mode settings.
The remaining Wireless Interface configuration settings are also described in this section.
General Setup

Figure 10.2-4: Wireless Interface General Configuration (Access Point mode)

Parameters
Mode

Description
Select the Wi-Fi Interface mode.
Available Options

Access Point – router will act as an access point (master
mode)
Client - router will act as a wireless client
Ad-Hoc – point to point connection between two stations
without an intermediary
802.11s – used for mesh networking
Pseudo Ad-Hoc (ahdemo) – variant of ad-hoc mode thatprovides a point to point connection between two stations
without an intermediary
Monitor – client mode setting where wireless interface will
listen to all traffic, not just its own.
Access Point (WDS) – used for bridging two routers as WDS
access points wireleslly to extend the Wi-Fi network. WDS
with WPA-PSK, WPA2-PSK, WPA-PSK/WPA2-PSK Mixed
Mode encryption modes are supported.
Client (WDS) - WDS client mode allows a router to connect toa WDS access point.
The default mode is Access Point.

ePack User Manual for E210 and E220 Series Devices

218

10: Network

Parameters

Description

Mode: All modes except 802.11s
ESSID

Displays the device name assigned to the router.
The default name is Lantronix E22X for E220 series routers or
Lantronix E21X for E210 series routers.

BSSID

This field is displayed for Client, Client (WDS), and Ad-Hoc modes
only.
Basic Service Set Identifier (BSSID) - 48-bit MAC address for theaccess point of the BSS. This can be left blank.

Network

Select LAN for the Access Point or WWAN for Client Mode toconfigure the Router as LAN or WWAN respectively.

Hide ESSID

Select Hide ESSID, to hide ESSID when client machines scan foravailable Wi-Fi networks.

WMM ModeThis field is displayed for Access Point and Access Point (WDS)
only.
Wi-Fi Multimedia (WMM) is a subset of the 802.11e wireless LAN(WLAN) specification that enhances quality of service (QoS) on a
network by prioritizing data packets.
Note• 802.11n spec requires devices to support 802.11e (Quality ofService [QoS] enhancements for wireless LAN) in order touse HT (High Throughput) link rates, i.e. higher than 54
Mbps. WMM's Traffic Identifier (TID) field is key toaggregation mechanisms, including blockacknowledgement (block ACK), that enable 802.11n's highthroughput rates.
Since WMM support is required for products to be certified for802.11n, WMM comes enabled by default in all Wi-Fi Certified n
APs and wireless routers. So even if you don't have any WMMaware devices on your network, leave WMM enabled or you may
find your clients connecting only at 54 Mbps rates.

Mode: 802.11s
Mesh Id

Enter the Mesh ID to uniquely identify the Mesh BSS (Basic
service set). This should be 0 to 32 byte ASCII string. The Mesh ID
is similar to the SSID.

Network

Select LAN to configure as a LAN network.

Table 10.2-4: Wireless Interface General Configuration

ePack User Manual for E210 and E220 Series Devices219

10: Network

Wireless Security
Allows you to configure the encryption mode for the wireless interface.

Figure 10.2-5: Wireless Interface Wireless Security Configuration (Access Point mode)

Parameters
Encryption

Description
Select the Encryption mode for Wi-Fi network.
Available Options

No Encryption
WPA-PSK/WPA2-PSK Mixed mode
WPA2-PSK
WPA-PSKWEP Shared Key
WEP Open System
The default encryption mode is WPA-PSK/WPA2-PSK Mixed
mode.
Note: If 802.11s or Pseudo Ad-hoc mode is selected, theencryption mode should be set to No Encryption.

ePack User Manual for E210 and E220 Series Devices

220

10: Network

Parameters
CipherDescription
For all encryption modes except No Encryption.
Select the cipher suitable to the Router.
Available Options

Auto
Force CCMP (AES)
Force TKIP
Force TKIP and CCMP (AES)
The default cipher is auto mode.
Key

Enter the key respective to cipher type802.11r Fast Transition

This setting is displayed only if the interface is an Access Point.
Select to enable fast roaming among access points that belong to
the same Mobility Domain.
This setting is disabled by default.

802.11w Management Frame
Protection

This setting is displayed if the interface is an Access Point or
Client.
Select the 802.11w MFP option. The options are Disabled,
Optional, and Required.
The default value is Disabled.

Enable key reinstallation(KRACK) countermeasures

This setting is displayed only if the interface is an Access Point.
Select to enable KRACK countermeasures.
This setting is disabled by default.

Table 10.2-5: Wireless Interface Wireless Security Configuration
MAC-Filter
The MAC-Filter settings apply to the interface configuration only when Access point mode (or Accesspoint -WDS) is selected.

Figure 10.2-6: Wireless Interface MAC-Filter Configuration (Access Point mode)

Parameters
MAC-Address Filter

Description
MAC Address Filter is use to allow or block certain client MAC
Addresses.
Available Options

DisableAllow listed only – If this option is selected, choose the client
MAC Addresses to allow.

ePack User Manual for E210 and E220 Series Devices

221

10: Network

Parameters

Description
Allow all except listed – If this option is selected, choose theclient MAC Addresses to block.
This setting is disabled by default.

Table 10.2-6: Wireless Interface MAC Filter Configuration

ePack User Manual for E210 and E220 Series Devices

222

10: Network

Advanced Settings

Figure 10.2-7: Wireless Network Interface Advanced Configuration (Access Point mode)

Parameters
Isolate Clients

Description
This setting appears in Access Point or Access Point (WDS) mode
only.
Prevent wireless clients on the wireless network from interactingwith each other.

Forward mesh peer traffic

This setting appears in 802.11s mode only.
By default this setting is selected to enable the interface toforward mesh peer traffic.

ePack User Manual for E210 and E220 Series Devices

223

10: Network

Parameters

Description
Clear the box to disable.

RSSI threshold for joining

This setting appears in 802.11s mode only.
Set the minimum RSSI value that peer radios must have for thestation establish a link with it.
Other options:Enter 0 to ignore an RSSI threshold.
Enter 1 to use the driver default.

Interface nameSpecifies a custom name for the Wi-Fi interface, which isotherwise automatically named.

Short Preamble

Select to enable optional use of short preamble.

DTIM Interval

Displays the Delivery Traffic Indication Message (DTIM) period
value which determines how often a beacon frame includes aDTIM. This option only impacts access point interfaces.
Default is 2. Range is 1-255.

Time interval for rekeying
GTK

GTK rekey interval of WPA security in seconds.

Disable Inactivity Polling

Select to disable inactivity polling.

Default is 600.

Disabling the inactivity polling allows the router to disconnect
stations based on inactivity timeout so that idle stations are more
likely to be disconnected even if they are still in range of theaccess point.
Station inactivity limit

Specify the station inactivity limit in seconds. If a station does notsend anything within this time period, the router sends a request
to verify whether it is still in range. If the request is not
acknowledged, the station will be disassociated and deauthenticated.
Default is 300 seconds.

Maximum allowed Listeninterval

Displays the number of beacon periods that stations are allowed
to remain asleep.
Default 65535

Disassociate on Low
Acknowledgement

Select to enable or disable.
Disassociate stations based on excessive transmission failures orother indications of connection loss. Availability depends ondriver capabilities.
Enabled by default.

Table 10.2-7: Wireless Network Interface Advanced Configuration

ePack User Manual for E210 and E220 Series Devices

224

10: Network

10.3 Switch
Network > Switch
The E210 and E220 routers provide a common default VLAN configuration that contains a single
network interface (eth0), leading to a 5-port VLAN enabled switch that is virtually partitioned into a
LAN and WAN network by using VLANs.
By default, VLAN functionality is enabled as shown by the check box in the image below.
Note• For assistance configuring the switch functionality, please contact Lantronix Technical Support.

Figure 10.3-1: Switch Configuration

ePack User Manual for E210 and E220 Series Devices

22510: Network

10.4 DHCP and DNS
Network > DHCP and DNS
Dynamic Host Configuration Protocol (DHCP) is a network protocol that is used to configure network
devices to communicate on an IP network. A DHCP client uses the DHCP protocol to acquireconfiguration information, such as an IP address, a default route, and one or more DNS server
addresses from a DHCP server. The DHCP client then uses this information to configure its host.
Once the configuration process is complete, the host is able to communicate on the network.
For more details about basic setup of DHCP server on the LAN side refer to Network > LAN > DHCP
Server.
DHCP and DNS sub-sections allows you to configure the advanced options like custom DNS servers,
custom lease files, advanced TFTP settings and MAC Address based IP Address allocation.

ePack User Manual for E210 and E220 Series Devices

226

10: Network

10.4.1 General Settings
Network > DHCP and DNS > General Settings

Figure 10.4-1: DHCP Server and DNS Forwarder General Configuration

Parameters

Description

Server Settings
Domain required

Check to allow forwarding of DNS request only if they havedomain name.

Authoritative

Check to authorize the DHCP in the local network.

Local serverEnter the local server domain specification. These domain names
are only resoled using DHCP or host files.

Local domain

Enter the local domain suffix appended to DHCP names and hostePack User Manual for E210 and E220 Series Devices

227

10: Network

Parameters

Description
file entries.

Log queries

Log the DNS request received in the syslog server.

DNS forwardingsEnter the DNS Server names to forward the received DNS
requests.

Rebind protection

Check to discard upstream RFC1918 responses

Allow localhost

Check to allow upstream responses in the 127.0.0.0/8 range, e.g.
for RBL services

Domain whitelistEnter the list of domain name to allow RFC1918 responses.

Local Service Only

Select to accept DNS queries only from hosts whose address is
on a local subnet.

Non-wildcard

Select to bind only configured interface addresses, instead of thewildcard address.

Listen Interfaces

Restrict listening to the specified interfaces.

Exclude Interfaces

Prevent listening on the specified interfaces.

Active DHCP Leases
Hostname

Name of the device that is connected to the router and has beenleased an IP Address by DHCP server.

IPv4-Address

IPv4 Address assigned to the device connected to the router.

MAC-Address

MAC address of the device connected to the router.

Leasetime remaining

Remaining time until which the device can use the DHCP serverleased IP Address.

Active DHCPv6 Leases
Hostname

Name of the device that is connected to the router and has beenleased an IPv6 Address by DHCPv6 server.

IPv6-Address

IPv6 Address assigned to the device connected to the router.

DUID

DUID (Device Unique Identifier) of the device connected to therouterLeasetime remaining

Remaining time until which the device can use the DHCPv6 severleased IPv6 Address.

Static Leases
Hostname

Name of the device that is connected to the router and has been
assigned a static IP Address.

MAC-Address

MAC address of the device connected to the router.

IPv4-Address

IPv4 Address to be assigned to the device connected to therouter.

IPv6-Suffix (hex)

IPv6 Address to be assigned to the device connected to therouter.

Table 10.4-1: General Configuration of DHCP Server and DNS-Forwarder

ePack User Manual for E210 and E220 Series Devices

228

10: Network

10.4.2 Resolv and Host Files
Network > DHCP and DNS > Resolv and Host File

Figure 10.4-2: DHCP and DNS Resolv and Host File Configuration

Parameters

Description

Use /etc/ethers

Check to use /etc/ethers for configuring the DHCP-Server.

Leasefile

Enter the directory path name where given DHCP-leases will be
stored.

Ignore resolve file

Check to ignore the resolved file.

Resolve file

Enter the local DNS file.

Ignore /etc/hosts

Check to ignore the hosts file.

Additional Hosts file

Enter the additional host files.

Table 10.4-2: Resolv and Host File Configuration for DHCP and DNS

ePack User Manual for E210 and E220 Series Devices229

10: Network

10.4.3 TFTP Settings
Network > DHCP and DNS > TFTP Settings
This page provides settings to configure the router as a Trivial File Transfer Protocol (TFTP) server,which can be used to serve files for download to a remote TFTP client.

Figure 10.4-3: DHCP and DNS TFTP Configuration

Parameters

Description

Server Settings
Enable TFTP server

Check to enable TFTP server.
By default, the TFTP server is in disabled.

TFTP server root – Enter the Root directory for the files
served using TFTP.
Network boot image – Enter the Filename of the boot image
which is advertised to the clients.

Table 10.4-3: TFTP Configuration for DHCP and DNS

ePack User Manual for E210 and E220 Series Devices

230

10: Network

10.4.4 Advanced Settings
Network > DHCP and DNS > Advanced Settings

Figure 10.4-4: DHCP and DNS Advanced Configuration
ePack User Manual for E210 and E220 Series Devices

231

10: Network

Parameters

Description

Server Settings
Suppress logging

Suppress logging of the routine operation of DHCP. Errors andproblems will still be logged.

Allocate IP Sequentially

Force DHCP server to allocate IP addresses sequentially, startingfrom the lowest available address.
In this mode, clients that allow a lease to expire are more likely tomove IP address.

Filter private

Check to deny the reverse lookups for local networks.

Filter uselessCheck to deny the requests that cannot be answered by publicname servers.
By default the request are forwarded.

Localize queries

Check to localize hostname depending on the requesting subnet
if multiple IP Addresses are available.

Expand hosts

Check to add local domain suffix to names served from hosts
files.

No negative cache

Check to deny caching the negative replies, e.g. for non-existingdomains.

Additional Servers file

List of DNS servers to forward requests to.

Strict order

DNS servers will be queried in the order of the resolve file.

All Servers

Select to query all upstream DNS servers.

Bogus NX Domain OverrideEnter the hostname that supply bogus NX domain results.

DNS server port

Enter the listening port for inbound DNS queries.
The default DNS server port is 53.

DNS query port

Enter the fixed source port number for outbound DNS queries.
The default DNS query port is “any”

Max. DHCP leases

Enter the maximum number of allowed DHCP leases that are
active.
By default unlimited DHCP leases are allowed.

Max. EDNS0 packet size

Enter the maximum allowed size of EDNS.0 UDP packets.
The default EDNS.0 UDP packet size is 1280.

Max. concurrent queries

Enter the maximum number of concurrent DNS queries allowed.
By default 150 concurrent DNS queries are allowed.

Size of DNS query cacheEnter the maximum number of cached DNS entries.
By default, 150 DNS entries are cached. Maximum is 10000. A
value of zero (0) means no caching.

Table 10.4-4: Advanced Configuration for DHCP and DNS

ePack User Manual for E210 and E220 Series Devices

232

10: Network

10.4.5 Static Leases
Network > DHCP and DNS > Static leases

Figure 10.4-5: DHCP and DNS Static Leases

Parameters

Description

Active DHCP Leases
Hostname

Name of the device that is connected to the router and has beenleased an IP Address by DHCP server.

IPv4-Address

IPv4 Address assigned to the device connected to the router.

MAC-Address

MAC address of the device connected to the router.

Leasetime remaining

Remaining time until which the device can use the DHCP serverleased IP Address.

Active DHCP6 Leases
Hostname

Name of the device that is connected to the router and has beenleased an IPv6 Address by DHCPv6 server.

ePack User Manual for E210 and E220 Series Devices

233

10: Network

Parameters

Description

IPv6-Address

IPv6 Address assigned to the device connected to the router.

DUID

DUID (Device Unique Identifier) of the device connected to therouterLeasetime remaining

Remaining time until which the device can use the DHCPv6 severleased IPv6 Address.

Static Leases
Hostname

Name of the device that is connected to the router and has been
assigned a static IP Address.

MAC-Address

MAC address of the device connected to the router.

IPv4-Address

IPv4 Address to be assigned to the device connected to therouter.

IPv6-Suffix (hex)

IPv6 Address to be assigned to the device connected to therouter.

Table 10.4-5: DHCP and DNS Static Leases

10.5 Hostnames
Network > Hostnames

Figure 10.5-1: Hostnames Configuration

Parameters

Description

Host entries
HostnameEnter the Hostname.

IP addressEnter the IP Address of the host.

Table 10.5-1: Hostnames Configuration

ePack User Manual for E210 and E220 Series Devices

234

10: Network

10.6 Static Routes
Network > Static Routes
You can configure the static routes to define the method for communication between two different
networks located in two different domains.

10.6.1 Static IPv4 Routes
Network > Static Routes > Static IPv4 Routes

Figure 10.6-1: Static IPv4 Routes Configuration

Parameters

Description

General Settings
Interface

Select the name of the logical interface assigned the static IPv4
Address.

TargetEnter the target host IPv4 Address or Network if the target is a
network.

IPv4-Netmask

Enter the IPv4 Netmask of the static route.

IPv4-Gateway

Enter the IPv4 Gateway of the static route.

Advanced Settings
MetricEnter the metric of the static route.

MTU

Enter the number of bytes indicating the largest physical packet
size that the network can transmit.
The default MTU size is 1500 bytes. A blank value represents auto
MTU size.

ePack User Manual for E210 and E220 Series Devices

235

10: Network

Parameters

Description

Route type

Select the route type.
Available options:

unicast – route entry describes real paths to the desitnations
covered by the route prefix
local – destinations are assigned by this host. Packets arelooped back and delivered locally.
broadcast – destinations are broadcast addresses. Packets
are sent as link broadcasts.
multicast – special type used for multicast routing.
unreachable – these destinations are unreachable
prohibit – these destinations are unreachable.
blackhole – these destinations are unreachable. Packets are
discarded silently. Local senders get an ENVAL error.
anycast – these destinations are anycast addresses assigned
to this host.
Route table

Define the table ID to use for the route. The ID can be either anumeric table index ranging from 0 to 65535 or a symbolic alias
declared in /etc/iproute2/rt_tables. The following special aliases
are also recognized: local (255), main (254), default (253).

Source Address

Specify the preferred source address when sending todestinations covered by the target.

On-Link route

If enabled, the gateway is on link even if the gateway doesn'tmatch any interface prefix.

Table 10.6-1: Static IPv4 Routes Configuration

10.6.2 Static IPv6 Routes
Network > Static Routes > Static IPv6 Routes

Figure 10.6-2: Static IPv6 Routes Configuration

ePack User Manual for E210 and E220 Series Devices

236

10: Network

Parameters

Description

General Settings
Interface

Select the logical interface assigned the static IPv6 Address.

TargetEnter the target host IPv6 Address or Network CIDR if the target
is a network.

IPv6-Gateway

Enter the IPv6 Netmask of the static route.

Advanced Settings
MetricEnter the metric of the static route.

MTU

Enter the number of bytes indicating the largest physical packet
size that the network can transmit.
The default MTU size is 1500 bytes. Blank value represents auto
MTU size

Route type

Select the route type.
Available options:

unicast – route entry describes real paths to the desitnations
covered by the route prefix
local – destinations are assigned by this host. Packets arelooped back and delivered locally.
broadcast – destinations are broadcast addresses. Packets
are sent as link broadcasts.
multicast – special type used for multicast routing.
unreachable – these destinations are unreachable
prohibit – these destinations are unreachable.
blackhole – these destinations are unreachable. Packets are
discarded silently. Local senders get an ENVAL error.
anycast – these destinations are anycast addresses assigned tothis host.
Route table

Define the table ID to use for the route.

Source Address

Specify the preferred source address when sending todestinations covered by the target.

On-Link route

If enabled, the gateway is on link even if the gateway doesn'tmatch any interface prefix.

Table 10.6-2: Static IPv6 Routes Configuration

ePack User Manual for E210 and E220 Series Devices

237

10: Network

10.7 Diagnostics
Network > Diagnostics

Figure 10.7-1: Diagnostics Network Utilities

Parameters

Description

Network Utilities
Ping

IP Address or fully qualified domain name to be pinged.
It determines network connection between Router and host on
the network. The output shows if the response was received,
packets transmitted and received, packet loss if any.

Traceroute

IP Address or fully qualified domain name
It determines network connection between Router and host on
the network. The output shows all the routers through whichdata packets pass on way to the destination system from thesource system, maximum hops and Total time taken by the
packet to return measured in milliseconds.

Nslookup

IP Address or fully qualified domain name that needs to beresolved.
Name lookup is used to query the query the Domain Name
Service for information about domain names and IP addresses. It
sends a domain name query packet to a configured domainname system (DNS) server. If you enter a domain name, you getback the IP address to which it corresponds, and if you enter an
IP address, then you get back the domain name to which itcorresponds. In other words, it reaches out over the Internet to
do a DNS lookup from an authorized name server, and displays
the information in the user understandable format.

Table 10.7-1: Diagnostics Configuration

ePack User Manual for E210 and E220 Series Devices

238

10: Network

10.8 Firewall
Network > Firewall
E210 and E220 routers follow a Zone Based firewall concept.
Every interface of the E210 or E220 router, physical or virtual, needs to be assigned to a Firewall
Zone, however one firewall zone can have multiple interfaces.
By default, there are two zones, the LAN zone and WAN zone.
You can create a new LAN or WAN zone either from the Firewall section or when you create an
additional network interface. You can associate multiple interfaces to the Firewall Zones and define
the rules of communication between them.

10.8.1 General Settings
Network > Firewall > General Settings
Concept of zone based Firewall
A zone section groups one or more interfaces and serves as source or destination for forwarding,rules, and redirects. Masquerading (NAT) of outgoing traffic is controlled on a per zone basis. Notethat masquerading is defined in the outgoing interface.
•••

INPUT rules for a zone describe what happens to traffic trying to reach the router itself
through an interface in that zone.
OUTPUT rules for a zone describe what happens to traffic originating from the router itself
going through an interface in that zone.
FORWARD rules for a zone describe what happens to traffic passing between different
interfaces in that zone.

By default, there are 2 zones which are already created in the Router, LAN Zone and WAN Zone. All
traffic from LAN to WAN has no restrictions but all incoming traffic on WAN side is blocked unless a
port forwarding rule is set or unless a particular port is opened.
Drop vs Reject
DROP• less information is exposed• less attack surface• client software may not cope well with it (hangs until connection times out)
• may complicate network debugging (where was traffic dropped and why)
REJECT• may expose information (like the ip at which traffic was actually blocked)• client software can recover faster from rejected connection attempts• network debugging easier (routing and firewall issues clearly distinguishable)

ePack User Manual for E210 and E220 Series Devices

239

10: Network

Figure 10.8-1: Firewall Zones General Configuration

Parameters

Description

General Settings
Enable SYN-flood protection

Check to enable SYN-flood protection. SYN-flood protection will
enable spamming detection and block whenever there is a spam
attack.

Drop invalid packet

Check to drop the invalid packets that are not matching any
active connection.

Input

Select to accept or reject the inbound traffic to all the interfaces.

OutputSelect to accept or reject the outbound traffic from all theinterfaces.

ForwardSelect to accept or reject the forwarded traffic from all theinterfaces.

Zones (Applies to configured zone)
Zone Forwarding

Select the zones between which the Zone forwarding rule will be

ePack User Manual for E210 and E220 Series Devices

240

10: Network

Parameters

Description
applicable.

Input

Select to accept or reject the inbound traffic to all the configured
zones.

OutputSelect to accept or reject the outbound traffic from all theconfigured zones.

ForwardSelect to accept or reject the forwarded traffic from all theconfigured zones.

Masquerading

Check to allow IP Masquerading.

Table 10.8-1: General Configuration for Firewall Zone

10.8.1.1 Add/Edit Firewall Zone
Network > Firewall > General Settings > Add/Edit
General Settings

Figure 10.8-2: Firewall Zone General Configuration
ePack User Manual for E210 and E220 Series Devices

24110: Network

Parameters

Description

Static IPv4 Routes
NameEnter the name of the zone.

Input

Select to accept, reject or drop the inbound traffic to all theconfigured zones.

OutputSelect to accept, reject or drop the outbound traffic from all theconfigured zones.

ForwardSelect to accept, reject or drop the forwarded traffic from all theconfigured zones.

Masquerading

Check to allow IP Masquerading.

MSS clamping

Check to allow MSS clamping.

Covered networks

Select the network interfaces that must be included in the zone
configuration.

Inter-Zone Forwarding
Allow forward to destination
zones

Select to allow or deny forwarding traffic to the configured
destination zone.

Allowed forward fromsource zones

Select to allow or deny forwarding traffic from the configured
source zone.

Table 10.8-2: General Configuration for Firewall Zone (LAN)ePack User Manual for E210 and E220 Series Devices242

10: Network

Advanced Settings

Figure 10.8-3: Firewall Advanced Configuration

Parameters

Description

Covered devices

List of raw network device names attached to this zone

Covered subnets

List of IP subnets attached to this zone.

Restrict to address family

Select IP Address family for configuring firewall for LAN zone
from available options.
Available Options

IPv4
IPv6
IPv4 and IPv6
Restrict Masquerading togiven source subnets

Enter the source subnet to which the masquerading must be
restricted.

Restricts Masquerading togiven destination subnets

Enter the destination subnet to which the masquerading must be
restricted.

ePack User Manual for E210 and E220 Series Devices

24310: Network

Parameters

Description

Enable logging on this zone

Check to enable logging of all the activities on the Zone.

Table 10.8-3: Advanced Configuration for Firewall Zone (LAN)
Conntrack Settings

Figure 10.8-4: Firewall Conntrack Configuration

Parameters
Allow "invalid" traffic

Description
Select to allow invalid traffic. More specifically, when selected, norules can be installed that reject forwarded traffic with conntrackstate equal to invalid.
Disabled by default.

Automatic helper
assignment

Automatically assign conntrack helpers for the zone.

Table 10.8-4: Firewall Conntrack Configuration

ePack User Manual for E210 and E220 Series Devices

244

10: Network

Extra iptables arguments

Figure 10.8-5: Firewall IPtables arguments configuration

Parameters

Description

Extra source arguments

Extra arguments passed directly to iptables for sourceclassification rules.

Extra destination arguments

Extra arguments passed directly to iptables for destination
classification rules

Table 10.8-5: Firewall iptables arguments configuration

ePack User Manual for E210 and E220 Series Devices245

10: Network

10.8.2 Port Forwards
Network > Firewall > Port Forwards
By default, all WAN side ports are closed. Port forwarding allows remote computers to connect to a
specific computer or service within the LAN by opening the WAN port and redirecting the connection(and data) on that port to an internal LAN IP and port.

Figure 10.8-6: Firewall Port Forwards

Parameters

Description

Match

Displays the WAN TCP/UDP ports for matching the conditions
before forwarding it to LAN device.

Forward to

Displays the destination IP Address to which the traffic must be
forwarded.

EnableCheck to enable the Port Forwarding rule.

Table 10.8-6: Firewall Port Forwards

ePack User Manual for E210 and E220 Series Devices

246

10: Network

10.8.2.1 Add Port Forwarding Rule
All the WAN side ports on the E210 and E220 routers are closed by default. For any WAN sideconnection to reach the internal LAN, a port-forwarding rule must be configured that maps the WAN
port to an internal LAN IP Address and port. Also, the router provides advanced port-forwarding
configurations, where in addition to WAN port; the WAN IP Address can be mapped with LAN IP
Address and LAN port.

Figure 10.8-7: Firewall Port Forwards General Configuration

Parameters

Description

Port Forwards General Settings
Name

Enter the name of the Port Forwarding Rule.

ProtocolSelect the protocol.
Available options:TCP
TCP + UDP
UDP
ICMP
unspecified
customSource Zone

Specify the traffic source zone. This must refer to one of theePack User Manual for E210 and E220 Series Devices

247

10: Network

Parameters

Description
firewall zones, usually WAN.

External PortEnter the WAN port of the external network.

Destination zone

Specify the traffic destination zone. This must refer to one of thefirewall zones, usually LAN.

Internal IP addressEnter the LAN IP address of the internal network.

Internal port

Enter the LAN port number of the internal network.

Port Forwards Advanced Settings
Source MAC Address

The rule will match incoming traffic from the specified source
mac address.

Source IP Address

The rule will match incoming traffic from the specified source IP
address.

Source port

The rule will match incoming traffic from the specified source
port number.

External IP AddressEnter the external IP address of the router.

Enable NAT Loopback

Enable NAT loopback to allow one machine on the LAN network
to access another machine on the LAN through the external IP
address of the router

Extra arguments

Passes additional arguments to iptables. Should be used with
care.

Table 10.8-7: Port Forwarding Configuration for Firewall Zone

ePack User Manual for E210 and E220 Series Devices

248

10: Network

10.8.3 Traffic Rules
Network > Firewall > Traffic Rules
Traffic rules allow or restrict access to specific ports or hosts. Rule actions can be configured toaccept, drop, or reject traffic.
When configuring rules, if source and destination are given, the rule matches forwarded traffic. If
only source is given, the rule matches incoming traffic. If only destination is given, the rule matches
outgoing traffic. If neither source nor destination are given, the rule defaults to an outgoing traffic
rule.

Figure 10.8-8: Firewall Zone Traffic Rules
Parameters

Description

Traffic Rules
These rules define policies for traffic communication between the different zones, primarily
used for traffic shaping.
Name

Displays the name of the Traffic Rule.

Match

Displays the details of the Traffic Rule configuration and theconditions in which the rule is applicable.

ActionAction to be taken on the traffic when the rule conditions are
satisfied. Indicates whether the rule is for incoming, forwarded,or outgoing traffic.

EnableCheck to enable the Traffic Rule.

Add

Click to Add a new traffic rule.

Table 10.8-8: Traffic Rule Overview for Firewall Zone

ePack User Manual for E210 and E220 Series Devices249

10: Network

10.8.3.1 Add Traffic Rule
Traffic rules can be used to achieve the following results:
•
•
•
•
•
•

Block / redirect generic data types for example: ICMP, DHCP requests etc.
Block certain MAC addresses on the LAN side
Block communication with one or more public IP addresses
Block communication with all except one or more IP address
Open specific ports on WAN side
DMZ rules and zone creation

Figure 10.8-9: Firewall Traffic Rules General Configuration

Parameters

Description

General Settings
Name

Enter the name of the traffic rule.

ProtocolSelect the Protocol from the available options.
Available Options

TCP – Allows only TCP traffic to the open port
UDP – Allows only UDP traffic to the open port
TCP+UDP – Allows both TCP and UDP traffic to the open port
Source zone

Select the traffic source zone. This is usually WAN zone.

Source address

Match incoming traffic from the specified source IP addressePack User Manual for E210 and E220 Series Devices

250

10: Network

Parameters

Description

Source port

Match incoming traffic from the specified source port

Destination zones

Select the destination firewall zone. If specified the rule applies toforwarded traffic, otherwise it is treated as an input rule.

Destination address

Match incoming traffic directed to the specified destination IP
address. If no destination zone is specified, the rule is treated as
an input rule.

Destination port

Match incoming traffic directed to the specified destination port.

ActionSets the target parameter to indicate the firewall action.
Options include:

AcceptRejectDrop
Mark
Notrack.
Advanced Settings
Restrict to address familyEnter the protocol family to generate iptables rules for.
Options include: ipv4, ipv6, or any.

Source MAC address

Match incoming traffic from the specified MAC address.

Extra arguments

Enter extra arguments to pass to iptables. This can be used to
specify additional match options.

Time Restrictions
Week Days

If specified, only match traffic during the given days of the week.

Month Days

If specified, only match traffic during the given days of themonth.

Start Time (hh.mm.ss)

Specify a time to start matching traffic.

Stop Time (hh.mm.ss)

Specify a time to stop matching traffic.

Start Date (yyyy-mm-dd)

Specify a date to start matching traffic.

Stop Date (yyyy-mm-dd)

Specify a date to stop matching traffic.

Time in UTC

Select to interpret all time values as UTC time instead of local
time.

Table 10.8-9: Firewall Traffic Rule Configuration

ePack User Manual for E210 and E220 Series Devices

25110: Network

10.8.4 Custom Rules
Network > Firewall > Custom Rules
The shell script allows you to add customized rules for Firewall. Commands are executed after the
firewall is restarted immediately after the default ruleset has been loaded.

Figure 10.8-10: Firewall Custom Rules Configuration

ePack User Manual for E210 and E220 Series Devices

252

10: Network

10.9 Load Balancing
Network > Load Balancing
Load balancing is a mechanism that enables balancing traffic between various links. It distributes
traffic among various links, optimizing utilization of all the links to accelerate performance and cut
operating costs. The order of Interface priority depends on the metric assigned to the interface.

10.9.1 How it works
Load balancing is determined by the load metric i.e. weight. Each link is assigned a relative weight
and the router distributes traffic across links in proportion to the ratio of weights assigned toindividual link. This weight determines how much traffic will pass through a particular link relative tothe other links.
Administrator can set the metric weight and define how the traffic should be directed to providers
to best utilize their bandwidth investments. Weight can be selected based on:••

Link capacity (for links with different bandwidth)
Link/Bandwidth cost (for links with varying cost)

Note• The default configuration of the load balancer is in Failover Mode with the highest priority given
to WAN, followed by WWAN and then followed by Cellular.
Concept of MWAN
Since E series have multiple sources of Internet, one or more sources of Internet could be used at
the same time. Using one source of Internet and failing over to another one by defining priorities iscalled Failover. Once the source with a higher priority is online, the same will be used as a primarysource of internet
Priority can be defined by setting the Metric. the lower the metric, the higher the priority.
When to failover and when to rollback is dependent on which interfaces are online and which ones
are offline. Online and offline interface status is based on the PING responses to a particular server
at a particular time interval. You can speed up the failover by sending PING packets in a shorter
interval and you can add reliability by adding multiple server candidates.
Load Balancing is where two or more sources of Internet are used at the same time and the load
which is essentially the connections is split between the multiple interfaces in the ratio of theirweights assigned.
E Series provides a feature called WAN affinity where a particular source IP, Destination IP or a data
type can be bound to a particular interface. For this, you need to set rules and apply the rules to aparticular policy. However you need to first have appropriate members which correspond to physicalinterfaces in a particular policy.
In summary:•••Members correspond to individual interfaces where you can set metric and weight
Policy consists of a member or group of members
Rules are to be applied to a policy

ePack User Manual for E210 and E220 Series Devices

253

10: Network

10.9.2 Globals
Network > Load Balancing > Globals

Figure 10.9-1: MWAN Interface Globals Configuration

Parameters

Description

Firewall mask

Enter the firewall mask value in hexadecimal, starting with 0x.

Logging

Select to enable global firewall logging and select the log level.

Update IntervalEnter the update interval for the interface routing table.
Default is 5 seconds.

Routing table lookup

Enter an additional routing table to be scanned for connected
networks

Table 10.9-1: MWAN Interface Globals Configuration

ePack User Manual for E210 and E220 Series Devices

254

10: Network

10.9.3 Interfaces
Network > Load Balancing > Interfaces

Figure 10.9-2: MWAN Interfaces
Parameters

Description

Interface

Name of the available Interface.

Enabled

Displays the Interface status is enabled or disabled.

Tracking Method

Displays the method used to track the interface.

Tracking Source

Displays the tracking source is address or interface.

Tracking reliability

Displays the number of tracking IP Addresses. The
acknowledgement/responses from these tracking IP Addresses
are considered to determine the Interface as up/down.

Ping interval

Displays the time in seconds between sending two successive
ping packets.

Interface down

Displays the number of consecutive failed attempts after which
the interface is declared offline.

Interface up

Displays the number of consecutive successful pings after which
the interface is declared online.

MetricMetric assigned to the Interface from the Advanced Interface
Configuration Settings page.

Error

Displays if an error has occurred during the Interface
configuration.
Error messages are displayed as warnings.

Table 10.9-2: MWAN Interface

ePack User Manual for E210 and E220 Series Devices

25510: Network

Note• Configuring a large number of Tracking IP Addresses, a high Ping count, or a low Ping interval
time will result in faster switchover but will consume more data. For more details on loadbalancing, visit the Lantronix Technical Support website.

ePack User Manual for E210 and E220 Series Devices

25610: Network

10.9.3.1 Edit Interface
Network > Load Balancing > Interfaces

Figure 10.9-3: MWAN Interface Edit Configuration

ePack User Manual for E210 and E220 Series Devices

257

10: Network

Parameters
EnabledDescription
Enable the Interface.

No – Interface do not participate in Load Balancing.
Yes – Interface is enabled and can connect to Internet. Onceenabled it can be tracked using ping configuration.
Initial State

Offline – traffic goes via this interface only if the load balancer
has checked the connection first.
Online – the interface is marked as online immediately.
Default is Online

Internet Protocol

Displays the internet protocol of the interface as IPv4 or IPv6.

Tracking hostname or IP
address

IP Address to which the ping requests are sent from the interface
to determine if the interface is up or down.
Leave the field blank to assume the interface is always online.

Tracking method

Select the tracking method in use. Default is ping.

Tracking source

Select the tracking source to use. Options are Interface or
Address

Tracking reliability

Enter the number of responses that must be received fromtracking IP Addresses to consider the Interface as up.

Ping countEnter the number of ping packets that will be sent.
The default ping count is 5.

Ping size

Size of the ping request in bytes.
Default value is 56.

Max TTL

Displays the Max Time to Live (Max TTL) timer value to be
included in the packets that tells the recipient how long to holdor use the packet before expiring or discarding the packet or
data.

Check link quality

Select to check link quality otherwise leave box unselected.

Ping timeout

Enter the time to wait for a response to ping request sent before
declaring the interface unreachable. The wait time is in seconds.
The default value depends on the interface used. Cellular will
have different values to reduce data consumption.

Ping intervalSpecifies the time in seconds between sending ping packets.
The default ping interval is 5 seconds.

Interface down

The number of consecutive failed attempts after which theinterface is declared down.
The default value depends on the interface used. Cellular will
have different values to reduce data consumption.

Interface up

The number of consecutive successful attempts to determine thereliability of the network connection through the interface.
The default value depends on the interface used. Cellular will
have different values to reduce data consumption.

ePack User Manual for E210 and E220 Series Devices

258

10: Network

Parameters
MetricDescription
Displays the Interface Metric.
The route with least metric is considered as best route.
The default metric assigned to the interface is 1.
For load balancing between two interfaces, both the interfaces
must have the same metric value on the Member configuration
page.

Table 10.9-3: MWAN Interface Edit Configuration

10.9.4 Members
Network > Load Balancing > Members
Members correspond to individual interfaces where you can set metric and weight.

Figure 10.9-4: MWAN Interface Members

Parameters

Description

Member

Displays the Interface member notation number.

Interface

Displays the name of the interface.

Metric

Displays the metric assigned to the interface.
The interface with the lowest metric has the highest priority andall data is always routed through it.
Note• If two or more interfaces have same metric configured andthat metric is lowest compared to other interfaces, then theePack User Manual for E210 and E220 Series Devices259

10: Network

Parameters

Description
data/load is balanced and data/load is distributed among
the two interfaces in the ratio of the respective weight.

WeightDisplays the weight assigned to the interface. Members with thesame metric will distribute load based on the weight value.

Add

Enter the name of the new interface to be added.

Table 10.9-4: MWAN Interface Members

10.9.4.1 Add/Edit Member
Network > Load Balancing > Members

Figure 10.9-5: MWAN Interface Members Configuration
Parameters

Description

Interface

Select the name of the interface.

MetricEnter the Interface Metric.
The route with lowest metric is considered as best route.
For load balancing between two interfaces, both the interfaces
must have the same metric value.

WeightEnter the Interface Weight.
The default metric assigned to the interface is 2.
For load balancing between two interfaces, both the interfaces
must have the same metric value. The route with higher weight
carries more traffic. Also the connections will be distributed
amongst the interfaces with the same weight and not the actual
data traffic

Table 10.9-5: MWAN Interface Members Configuration

ePack User Manual for E210 and E220 Series Devices

260

10: Network

10.9.5 Policies
Network > Load Balancing > Policies
Policies define how traffic is routed through the different WAN interfaces. Policy consists of amember or group of members. If a policy has one member, traffic will only go out through thatmember. If a policy more than one member, members within the policy with a lower metric haveprecedence and are used first. Members with the same metric will be load balanced based on theassigned weights values. Policy can also be configured to use one member and then fail over toanother.

Figure 10.9-6: MWAN Interface Policy
Parameters
PolicyDescription
Name of the policy.
The name must be 15 characters or less, and may containcharacters A-Z, a-z, 0-9, _ and no spaces.
Policies must not share the same name as configured interfaces,
members or rules.

Members assigned

Interface members to which the policy is applied.

Last resort

Displays the failover routing behavior when all WAN policy
members are offline. .

Errors

Displays if an error has occurred during the Policy configuration.
Error messages are displayed as warnings.

Add

Add a new policy

Table 10.9-6: MWAN Interface Policy
ePack User Manual for E210 and E220 Series Devices261

10: Network

10.9.5.1 Add/Edit Policy
Network > Load Balancing > Policies

Figure 10.9-7: MWAN Interface Policy Configuration

Parameters

Description

Member used

Select the interface to apply the policy on traffic passing throughthe interface

Last Resort

Select the failover routing behavior when all WAN policy
members are offline. .
Available options:

unreachable (reject)blackhole (drop)default (use main routing table)

Table 10.9-7: MWAN Interface Policy Configuration

ePack User Manual for E210 and E220 Series Devices262

10: Network

10.9.6 Rules
Network > Load Balancing > Rules
A rule specifies what traffic to match and what policy to assign for that traffic.
The web UI also lists key points to consider when configuring rules as shown in the figure below..

Figure 10.9-8: MWAN Interface Rules

Parameters

Description

Rule

Displays the rule name.

Source address

Displays the Source IP Address.

Source port

Displays the Source Port number.

Destination address

Displays the Destination IP Address.

Destination port

Displays the Destination Port number.

ProtocolDisplays the protocols on which the rule is applicable.

Policy assigned

Policy to be applied to the rule.

Errors

Displays if an error has occurred during the rule configuration.
Error messages are displayed as warnings.

AddEnter the name of the new rule and click Add. Continue
configuring the rule parameters.

Table 10.9-8: MWAN Interface Rules

ePack User Manual for E210 and E220 Series Devices263

10: Network

10.9.6.1 Add/Edit Rule
Network > Load Balancing > Rules

Figure 10.9-9: MWAN Interface Rules Configuration

Parameters

Description

Source addressEnter the Source IP Address.

Source PortEnter the Source Port number.

Destination addressEnter the Destination IP Address.

Destination port

Enter the Destination Port number.

ProtocolSelect the protocols on which the rule is applicable.

StickySelect Yes to allow traffic from the same source IP address within
the timeout limit to use the same WAN interface as the previous
session.
Otherwise, select No.

ePack User Manual for E210 and E220 Series Devices

26410: Network

Parameters
Sticky timeout

Description
Enter the stickiness timeout value in seconds.
If no value is entered, this defaults to 600.

IPset

Enter the name of the IPset rule.
IPset lets you route traffic over WAN interfaces based on a set of
IP addresses. When the ipset option is configured, the rule will
match traffic directed at the given destination IP address to theipset set.

Logging

Select Yes to enable firewall logging. The global load balancing
logging setting must also be enabled.
Otherwise, select No.

Policy assigned

Policy to be applied to the rule.

Table 10.9-9: MWAN Interface Rules Configuration

ePack User Manual for E210 and E220 Series Devices

26510: Network

10.9.7 Notification
Network > Load Balancing > Notification

Figure 10.9-10: MWAN Notification

ePack User Manual for E210 and E220 Series Devices266

11: Percepxion

11 Percepxion
The E210 and E220 series gateways come integrated with Percepxion cloud platform to allow for the
remote management of devices.

11.1 Percepxion Configuration
To view and configure the Percepxion Client, go to:
Percepxion>Client

Figure 11.1-1: Percepxion Client Status

Figure 11.1-2: Percepxion Client Settings

ePack User Manual for E210 and E220 Series Devices

267

11: Percepxion

Figure 11.1-3: Percepxion Client Connection1/Connection2 Settings
The below table lists the configuration details of the Percepxion Client settings:
Parameters

Description

EnableSelect to enable or clear to disable the Percepxion client.

Device ID

Read only. Displays the gateway’s Device ID. Device ID may beprovisioned through Lantronix Provisioning Manager.
Note:
Device id can only be provisioned once. It will persist acrossresets.

Device Key

Read only. Shows whether the gateway’s Device Key has been
configured. Device Key may be configured through the Lantronix.

ePack User Manual for E210 and E220 Series Devices

268

11: Percepxion

Parameters

Description
Provisioning Manager.

Serial Number

Read only. Displays the serial number of the device.

Device NameEnter the Percepxion Device Name.

Device Description

Enter the Percepxion Device Description.

Status Update Interval (inminutes)Enter the frequency that the gateway updates the device status
to Percepxion. The valid range is between 1 minute and 1440
minutes (1 day).

Send Dynamic Updates

Enable to receive RSSI and Temperature updates.

Content Check Interval (inhours)

Enter the frequency that the gateway checks Percepxion for
updates to configuration or firmware. The valid range is between
1 hour and 2160 hours (90 days).

Apply Firmware Upgrades

Select to allow firmware updates to be applied via Percepxion.
Enabled by default.

Apply Configuration
UpgradesSelect the option to indicate when to apply configuration
updates.
•

Always: always apply configuration updates.

•

Never: never apply configuration updates.

Reboot After Update

Automatically reboot device after configuration update.

Allow Remote Connections

Select to allow remote connections or clear to disable. Enabled
by default.

Remote Access Local Port

Local port for remote access connection.

Audit Log

Enable or disable audit log.

Active Connection

Select the connection instance to use when connecting toPercepxion. You can configure two connections. The
configuration options for Connection 1 and Connection 2 arelisted below.

Connection1/Connection2
Connect To

Select Cloud or On-premise connection.

Host

Enter the host name or IP address of the Percepxion server, used
to register the device.

Port

Enter the Percepxion port. Default: 443

Secure Port

Select to enable or clear to disable the Percepxion client secure
port 443.

Validate Certificates

Select to enable or clear to disable the validation of thePercepxion server certificates. To validate certificates, both MQTT
Security and Secure Port must be enabled.

Local Port

Local port for Percepxion MQTT client. When configured, a totalof 32 consecutive ports will be reserved.

MQTT State

Enable or disable MQTT.

ePack User Manual for E210 and E220 Series Devices269

11: Percepxion

Parameters

Description

MQTT PortEnter the port number of the Percepxion MQTT server. Whenconfigured, a total of 32 consecutive ports will be reserved.

MQTT Security

Select to enable SSL for MQTT.

MQTT Local Port

Local port for Percepxion MQTT client. When configured, a totalof 32 consecutive ports will be reserved.

Use Proxy

Select to enable the use of a proxy for this connection. If enabled,
complete the proxy fields displayed under the Use Proxy field.
They are disabled by default.

Proxy Type

Proxy server type. The supported type is SOCKS5.

Proxy Host

Hostname or IP address of the proxy server to be used.

Proxy Port

Port of the proxy server to be used. Default port is 80.

User Name

Username for the proxy server.

Password

Password of the proxy server.

Table 11.1-1: Percepxion Client Settings Configuration

ePack User Manual for E210 and E220 Series Devices

27012: Discovery

12 Discovery
Network discovery allows your computer to locate other computers and devices on the network.
This setting also allows other computers to see your computer. If enabled, the device responds toauto-discovery messages on port 0x77FE.

12.1 Query Port
Discovery>Query PortThis page displays the current query port statistics and the configuration option to enable or disable
discovery. Query port is enabled by default.

Figure 12.1-1: Discovery Query Port
To enable or disable query port discovery:
1. Under Configuration, select Enable.
2. Click Save & Apply.

ePack User Manual for E210 and E220 Series Devices271

Appendix A. Wiring Diagrams

Appendix A. Wiring Diagrams
RS485 Wiring diagram
Half Duplex (Left) RS485 Full Duplex (Right)

Power over Ethernet

ePack User Manual for E210 and E220 Series Devices

272

Appendix B. LED Behavior

Appendix B. LED Behavior
Ethernet Port LEDs
The ethernet port LEDs on the side panels of the E210 and E220 devices indicate link and activity
status for WAN and LAN connections.
LED Color

State and Description

Amber LED (Link indicator)

Solid ON
When light is on, this LED indicates valid
link detection.

Green LED (Activity indicator)

Blinking ON
When light is blinking, this LED indicatestraffic or data activity on the port.

Top Panel LEDs for E220 Series
The top panel of the E220 devices features 6 LEDs to indicate critical system information.

Name

Color and State

Alert

ePack User Manual for E210 and E220 Series Devices

OFF

Description
No alert, device is runningsmoothly273

Appendix B. LED Behavior

Name

Color and StatePowerRed ON

Hardware fault (hightemperature or problem withmodule), Cellular Module
reboot, Linux Kernel booting

OFF

Power offGreen ON

Power onOFF
SignalAmber Flashing
Amber ON

Network

Activity

WI-FI

Description

No signal(CSQ=0 to 5, 97, 98, 99)
Weak signal(CSQ > 6 to 12)
Strong signal(CSQ >12)

OFF

Not registered on a cellular
network.

Amber Flashing

Registered on a roaming cellular
network

Amber ON

Registered on home cellular
networkOFF

Cellular data service is notconnected

Amber Flashing

Data Transfer over Cellular
Network

Amber ON

Cellular data service isconnected

OFF

Wi-Fi network is inactive

Blue Flashing

Traffic on Wi-Fi network

Blue ON

Wi-Fi network is up andactivated

Top Panel LEDs for E210 Series
The top panel of Lantronix E210 Series Routers features 7 LEDs to indicate critical system
information.

ePack User Manual for E210 and E220 Series Devices

274Appendix B. LED Behavior

Name

Color and State

Alert

Power

SIM in use

OFF

No alert, device is runningsmoothly

Red ON

Hardware fault (hightemperature or problem withmodule), Cellular Module
reboot, Linux Kernel booting

OFF

Power offGreen ON

Power on

On

SIM 1

Flashing

SIM 2

OFF
SignalAmber Flashing
Amber ON

Network

Activity

ePack User Manual for E210 and E220 Series Devices

Description

No signal(CSQ=0 to 5, 97, 98, 99)
Weak signal(CSQ > 6 to 12)
Strong signal(CSQ >12)

OFF

Not registered on a cellular
network.

Amber Flashing

Registered on a roaming
cellular network

Amber ON

Registered on home cellular
networkOFF

Cellular data service is notconnected

275

Appendix B. LED Behavior

Name

Color and State

WI-FI

ePack User Manual for E210 and E220 Series Devices

Description

Amber Flashing

Data Transfer over Cellular
Network

Amber ON

Cellular data service isconnected

OFF

Wi-Fi network is inactive

Blue Flashing

Traffic on Wi-Fi network

Blue ON

Wi-Fi network is up andactivated

276

Appendix C. List of Acronyms

Appendix C. List of Acronyms
AcronymDescription

2G

2nd Generation

3G

3rd Generation

AES

Advanced Encryption Standard

AP Client

Access Point Client

CHAP

Challenge handshake protocol is used by PPP to authenticate
users and can be used with many VPNs.

CSQ

Cellular Signal Strength (CSQ). It ranges from 0 to 32.

DHCP

Dynamic Host Configuration Protocol (DHCP) is a standardized
networking protocol used on Internet Protocol (IP) networks for
dynamically distributing network configuration parameters, suchas IP addresses for interfaces and services.

DIO

Digital Input/Output

DMZ

In computer security, a DMZ or Demilitarized Zone is a physicalor logical sub network that contains and exposes anorganization's external-facing services to a larger and un-trusted
network, usually the Internet.

DNS

Domain Name System (DNS) is a hierarchical distributed naming
system for computers, services, or any resource connected to theInternet or a private network

DynDNS, DDNS

Dynamic DNS (DDNS) is a method of automatically updating a
name server in the Domain Name System (DNS), often in realtime, with the active DNS configuration of its configured
hostnames, addresses or other information.

EDGE

Enhanced Data rates for GSM Evolution (EDGE) is a digital mobile
phone technology that allows improved data transmission rates
as a backward-compatible extension of GSM.

GPRS

General packet radio service (GPRS) is a packet oriented mobile
data service on the 2G and 3G cellular communication system's
global system for mobile communications

GPS

Global Positioning Satellite

GSM

Global system for mobile communications

HT Physical mode

High Throughput Physical Mode

ICMPInternet Control Message Protocol (ICMP) is one of the main
protocols of the Internet Protocol Suite. It is used by network
devices, like routers, to send error messages

IGMP

Internet Group Management Protocol is a communications
protocol used by hosts and adjacent routers on IP networks toestablish multicast group memberships

ePack User Manual for E210 and E220 Series Devices

277

Appendix C. List of Acronyms

AcronymDescription

IKEv1 and IKEv2

Internet Key Exchange (version 1 or version 2) is an encryption
key exchange mode used between two peers.

IP SecInternet Protocol Security is a protocol suite for securing Internet
Protocol (IP) communications by authenticating and encrypting
each IP packet of a communication session

ISP

Internet service provider

L2TP

Layer Two Transport Protocol

LAN

Local Area Network

LED

Light emitting diode

LLTD

Link Layer Topology Discovery is a proprietary Link Layer
protocol for network topology discovery and quality of service
diagnostics

M2M

Machine to machine

MAC address

Media access control address is a unique identifier assigned to
network interfaces for communications on the physical network
segment

MD5

MD5 is a message digest algorithm used as a checksum to verify
data integrity

MTU

Maximum transmission unit of a communications protocol of alayer is the size (in bytes) of the largest protocol data unit thatthe layer can pass onwards

MWAN

multiple WAN interface

NAT

Network address translation is a methodology of modifying
network address information in Internet Protocol (IP) datagram
packet headers while they are in transit across a traffic routing
device for the purpose of remapping one IP address space intoanother.

NTP

Network Time Protocol is a networking protocol for clock
synchronization between computer systems over packetswitched, variable-latency data networks

PAP

Password authentication protocol is a password based protocol
used by PPP (point to point protocol) to authenticate users andcan be used with many VPNs. PAP is considered less secure than
CHAP or some other authentication protocols.

PPP

Point to Point Protocol

PPPoE

Point-to-Point Protocol over Ethernet

PPTP

Point-to-Point Tunneling Protocol

PSK

Pre-shared key

QoS

Quality of Service

RFRadio Frequency

ePack User Manual for E210 and E220 Series Devices

278Appendix C. List of Acronyms

AcronymDescription

Rx

Reception

SCP

Secure Copy Protocol

SHA1/SHA2

Secure Hash Algorithm is an encryption cipher type

SIM

Subscriber identity module

SMS

Short Message Service

SPI

Serial Peripheral Interface

SSH

Secure Shell

SSID

Service set identification

STP

Spanning Tree Protocol is a network protocol that prevents loops
when switches or bridges are interconnected through multiple
paths.

TCP

Transmission Control Protocol

TKIP

Temporal Key Integrity Protocol

Tx

Transmission

UDP

User Datagram Protocol

VPN

Virtual private network

VRRP

Virtual Router Redundancy Protocol

WAN

Wide Area network

WPA/WPA2

Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II(WPA2) are security protocols for wireless networks. WPA uses
Temporal Key Integrity Protocol (TKIP) for encrypted datatransfer and Extensible Authentication Protocol (EAP) for
authorizing users. The more secure WPA2 requires using thestronger encryption method Advanced Encryption Standard.
(AES).

ePack User Manual for E210 and E220 Series Devices279

Appendix D. Running Commands

Appendix D. Running Commands
Commands can be run on the E210 and E220 series gateways using the following methods:•

SSH (login as root using SSH)
The user has full control and can run commands as described.

•

System/Custom commands
The user can run commands as described. It is not recommended to run a command or seriesof commands (in a series, commands are separated by semicolon) which take more than 60s
to complete or require additional user interaction. For example: vi.

•

Percepxion/CLI commands
The user can run commands as described. It is not recommended to run a command or seriesof commands (commands separated by semicolon) which take more than 60s to completeor require additional user interaction. For example: vi.

The following types of commands are available:•••

Bash commands
opkg commands
UCI commands

Bash Commands
Bash shell is distributed with Busybox which provides a lightweight implementation of common Linuxcommands.
BusyBox is a multi-call binary. A multi-call binary is an executable program that performs the same job
as more than one utility program. That means there is just a single BusyBox binary, but that single
binary acts like many utilities. This allows BusyBox to be smaller since all the built-in utility programs
can share code for many common operations.
Please refer to https://www.busybox.net/downloads/BusyBox.html for usage of these commands.
Note:• Some configuration and commands may not be available on the gateway.

ExampleslsList directory contents
To show current directory commands:

ePack User Manual for E210 and E220 Series Devices

280

Appendix D. Running Commands

ifconfig
Configure a network interface
To show information for eth1 interface:

ip
Replaces the older and now deprecated ifconfig command. The ip command can display andadminister the network configuration of a system. It is used to view, add, and delete network
interfaces, routing table entries, and IP addresses.
To show current routing table:

cat
Displays the contents of a file
To show contents of a file:ePack User Manual for E210 and E220 Series Devices281

Appendix D. Running Commands

logread
Displays logs for diagnostics and troubleshooting
To show syslogd diagnostic logs:

opkg Commands
The functionality of the system can be upgraded by downloading and installing pre-made packages
from package repositories. The packages may be built using the SDK or hosted on the Lantronix
package server (at updates.d2sphere.com).
opkg update
Update the packages list
opkg install
Install software package
opkg remove
Remove software package

ExampleePack User Manual for E210 and E220 Series Devices

282

Appendix D. Running Commands

Please refer to https://openwrt.org/docs/guide-user/additional-software/opkg for usage of the opkg
command.
Note:• The System > Software menu on the Web GUI of the gateway provides methods to configure repositories
and install software packages. See Software on page 60

UCI Commands
Unified Configuration Interface (UCI) is a small utility written in C (a shell script-wrapper is available
as well) and is intended to centralize the whole configuration of the router.

ExampleTo change Percepxion client status update interval:

Please refer to https://openwrt.org/docs/guide-user/base-system/uci or usage of the UCI
commands.
Note:• Some configuration and commands may not be available on the router.

ePack User Manual for E210 and E220 Series Devices283