westermo MRD-405 Industrial 4G LTE Router User Guide

: June 9, 2024
: westermo

Table of Contents

General information
Safety and Regulations
Description
Interface Specifications
LED Indicators
Protocols and Functionality
Getting Started
Configuration
Dimensions
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)

MRD-405 Industrial 4G LTE Router
User Guide westermo - logo

MRD-405
Industrial 4G LTE Router

General information

Legal Information
The contents of this document are provided “as is”. Except as required by applicable law, no warranties of any kind, either express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose, are made in relation to the accuracy and reliability or contents of this document. Westeros reserves the right to revise this document or withdraw it at any time without prior notice.

Under no circumstances shall Westeros be responsible for any loss of data or income or any special, incidental, and consequential or indirect damages howsoever caused.
More information about Westeros can be found at www.westermo.com
Software Tools
Related software tools are available at https://www.westermo.com/support/productsupport
License and Copyright for Included Free/Libre Open Source Software
This product includes software developed by third parties, including Free/Libre Open Source Software (FLOSS). The specific license terms and copyright associated with the software are included in each software package respectively. Please visit the product web page for more information.
Upon request, the applicable source code will be provided. A nominal fee may be charged to cover shipping and media. Please direct any source code request to your normal sales or support channel.
Management Guide
This product runs MRX Operation System. Instructions for quick start, Configuration and factory reset are found in the Management Guide at www.westermo.com.

Safety and Regulations

Warning signs are provided to prevent personal injury and/or damages to the product.
The following levels are used:

Level of warning

| Description| Consequence personal injury| Consequence material damage
---|---|---|---

WARNING

| Indicates a potentially hazardous situation| Possible death or major injury| Major damage to the product

CAUTION

| Indicates a potentially hazardous situation| Minor or moderate injury| Moderate damage to the product

NOTICE

| Provides information in order to avoid misuse of the product, confusion or misunderstanding| No personal injury| Minor damage to the product

NOTE

| Used for highlighting general, but important information| No personal injury| Minor damage to the product

Before Installation
Read this manual completely and gather all information on the product. Make sure that you understand it fully. Check that your application does not exceed the safe operating specifications for this product.

SAFETY DURING INSTALLATION
The product must be installed by qualified service personnel and built in to an apparatus cabinet or similar, where access is restricted to service personnel only.
Refer to Compliance Information to see the required level of qualified service personnel according to safety standards.
During installation, ensure a protective earthing conductor is first connected to the protective earthing terminal (only valid for metallic housings). Westeros recommends a cross-sectional area of at least 4 mm2.
Upon removal of the product, ensure that the protective earthing conductor is disconnected last.

HAZARDOUS VOLTAGE
Do not open an energized product. Hazardous voltage may occur when connected to a power supply.
PROTECTIVE FUSE
The power supply wiring must be sufficiently fused.
It must be possible to disconnect manually from the power supply.
Ensure compliance to national installation regulations.

RADIO PRODUCTS
Observe the usage limitations of radio products at filling stations, in chemical plants, in systems with explosives or potentially explosive locations.
The product may not be used in airplanes. Exercise particular caution near personal medical aids, such as pacemakers and hearing aids. Never perform work on the antenna system during a thunderstorm.
To fulfill human safety, a minimum separation distance of 20 cm or more should be maintained between the antenna of the product and personnel during operation.

ELECTROSTATIC DISCHARGE (ESD)
Prevent electrostatic discharge damages to internal electronic parts by discharging your body to a grounding point (e.g. use a wrist strap).

Care Recommendations
Follow the care recommendations below to maintain full operation of product and to fulfill the warranty obligations:

Do not drop, knock or shake the product. Rough handling above the specification may cause damage to internal circuit boards.
Use a dry or slightly water-damp cloth to clean the product. Do not use harsh chemicals, cleaning solvents or strong detergents.
Do not paint the product. Paint can clog the product and prevent proper operation.

If the product is used in a manner not according to specification, the protection provided by the equipment may be impaired.
If the product is not working properly, contact the place of purchase, nearest Westeros distributor office or Westeros technical support.

Product Disposal

This symbol means that the product shall not be treated as unsorted municipal waste when disposing of it. It needs to be handed over to an applicable collection point for recycling electrical and electronic equipment.
By ensuring this product is disposed of correctly, you will help to reduce hazardous substances and prevent potential negative consequences to both environment and human
health, which could be caused by inappropriate disposal.

Simplified EU Declaration of Conformity
Hereby, Westeros declares that the equipment is in compliance with applicable EU directives. The full EU declaration of conformity and other detailed information are available at the respective product page at www.westermo.com.
Agency Approvals and Standards Compliance

Type	Approval/Compliance

RED

Type Tests and Environmental Conditions

Phenomena	Test	Description	Test levels
ESD	EN 61000-4-2	Enclosure contact	± 6 kV (crib A)*
Enclosure air	± 8 kV (crib A)*
RF field AM modulated	IEC 61000-4-3	Enclosure	10 V/m (crib A)* (80 – 2700

*crib A = no effect, crib B = restart without user intervention

Description

Remote access removes boundaries, eliminates the need for time consuming site visits and provide a network infrastructure suitable for today’s “always-on” society.
The MRD-405 uses the Internet to cost effectively interconnect systems, allowing HMI, PLCs, sensors etc to communicate with each other.
A compact design bundled with all interfaces and LEDs in the front make the unit extremely well suited for industrial applications. Easy integration with other devices is achieved using the built-in two port Ethernet switch.

The stability of mobile connections can be affected by a variety of parameters and in order to ensure constant connectivity, the MRD-series features the customer praised connection manager. The unit will monitor the cellular connection and, without human-interaction, solve most network related issues, preventing unnecessary power cycle site visits!
Devices connected to the Internet require countermeasures towards cyber threats. The MRD-405 offers protection of transmissions from malicious eavesdroppers via encrypted communication tunnels (VPN), and features a simple, yet powerful, packet inspection firewall.
Configuring the unit is very easy with the built-in web-interface, no need for special AT-commands or similar. The device can also provide both management and monitoring
via SMS, for example an SMS could be sent to start a VPN. .

Available Models

Art.no.	Description
3623-0501	MRD-405 Industrial 4G LTE Cellular Router
3623-0515	MRD-405-AU Industrial 4G LTE Cellular Router for Australia

Interface Specifications

Power

For example purpose only. A lot of factors that affect the power consumption, such as signal strength. Example measurement was carried out in-doors in a 25ºC room with “normal” signal strength.

Ethernet TX

To minimize the risk of interference, a shielded cable is recommended when the cable is located inside 3 m boundary to the rails and connected to this port. The cable shield should be properly connected (360º) to an earthing point within 1 m from this port. This earthing point should have a low impedance connection to the conductive enclosure of the apparatus cabinet, or similar, where the unit is built-in. This conductive enclosure should be connected to the earthing system of an installation and may be directly connected to the protective earth.

SIM

Electrical specification| 3 volts SIM supported
Number of slots| 1
Cellular Technologies

Connections

westermo MRD 405 Industrial 4G LTE Router - card
reader

Power connector

| 2-position| Product marking| Direction| Description
---|---|---|---|---
No. 1| +| Input| Supply voltage input DC
No. 2| –| Input| Common

LED Indicators

LED	State	Status	Description
STS	Startup/POST	NOT LIT	Power issue
RED	No wireless network has been detected
Running/Normal	RED FLASH	A wireless network has been detected
GREEN	Power up self test OK/no issues
Connected	GREEN 1 BLINK	Signal strength indication:

1 – Very poor
2 – Normal
3 – Very good
GREEN 2 BLINK
GREEN 3 BLINK
GREEN 4 BLINK
GREEN 5 BLINK
GREEN 6 BLINK

Status Indicator
The status indicator reports the health of the unit. In normal operation, the indicator will be GREEN, if a fault is detected either at boot-up or during normal operation the indicator will light RED, or flash RED. When the unit is first switched on or is reset, the indicator will first light RED, this is normal behavior during boot-up and does not indicate a fault. If the indicator does not light up when power is applied check the power supply voltage and connections.

Factory Default Reset Switch
The reset switch is used to restore the configuration of the MRD to factory default settings. The switch is accessed through a small hole on the front of the unit, next to the STS LED.
To reset the configuration:

Power down the unit.
Use a suitable tool and depress the reset switch.
Power up the unit ensuring the switch remains depressed for approximately 10 seconds after power is applied. The STS LED will flash twice to indicate a reset.
The router will now re-boot as normal with the factory default settings.
Note: Using the Factory Default Reset Switch will erase all existing configuration settings and restore the factory default settings. This includes the network connection
profile settings APN, user name and password.

Protocols and Functionality

Ethernet Technologies	IEEE 802.3 for 10BaseT IEEE 802.3u for 100BaseTX
Layer-2 Qu’s	IEEE 802.1p Class of Service
Positioning (GNSS)	Passive and Active antenna GPS/GLONASS/BeiDou/Galileo/QZSS

IP Routing, Firewall, VPN

and Cyber Security

| Static IP routing
Tasteful inspection Firewall/ACL, NAT, Port Forwarding 1 x IPsec VPN, PSK & X.509, Fail-over
1 x OpenVPN/SSL VPN client Simple Certificate Enrollment Protocol (SCEP) RADIUS PPP Dial in/Dial out
Manageability| Management tools
• Web interface (HTTP and HTTPS)
• Command Line Interface (CLI) via SSHv2 and TELNET
• SNMPv1/v2c/v3
• SMS Control
Flexible alarm/event handling system Syslog (log files and remote syslog server) SNTP (NTP client)
DHCP client and server DDNS (Dynamic DNS update client)

Getting Started

Installing the SIM Card
Insert the SIM card into the SIM card reader with the contacts facing up.
Note: Before removing or inserting the SIM card, ensure that the power has been turned off and the power connector has been removed from the MRD.

Connecting the Antenna(s)
The unit has one antenna connector (SMA). Please ensure that the connecting nut is done up tightly in order to make a good connection.
Connecting the Power Supply
Connect the Power Supply The MRD requires a DC power source in the voltage range of 10 to 36 VDC. The unit is designed to self protect from permanent damage if the voltage exceeds 36 VDC or if reverse polarity is applied. The router may need to be returned for service if this occurs. The router can also be damaged if there is any potential difference between the chassis ground, power (–) input, or antenna shield.
Before connecting any wiring, ensure all components are earthed to a common ground point. An external isolator will be required if a positive earth power supply is used.

Ethernet

The Ethernet ports are on the front of the unit and are marked LAN 1 and LAN 2, each port has a LED indicating the connection speed and a LED indicating activity as shown in figure below. Both ports are capable of auto- negotiation, meaning cross-over cables are not required. The Ethernet ports are switched, allowing more than one Ethernet device to be connected to the unit at one time.

Configuration

Accessing and Using the Web Interface
All configuration of the MRD can be done via the web interface. In order to view the web pages a computer with a fixed IP address, on the same sub-net as the MRD, will need to be connected to one of the LAN ports.
The default IP settings of the MRD are:

IP Address: 192.168.2.200
Netmask: 255.255.255.0

The recommended IP settings for the PC used to configure the MRD Router:

IP Address: 192.168.2.100
Netmask: 255.255.255.0
Default Gateway: 192.168.2.200
Primary DNS: 192.168.2.200

Note: Although it is possible to connect the MRD directly to a Local Area Network (LAN) it is recommend that the network configuration as described in this section is performed prior to doing so. The DHCP server of the unit is by default disabled.

Windows PC Network Settings
The following describes how to configure the network settings of a PC with Windows 7 so that it can access the MRD.
Note: This procedure will change the network settings of the Windows PC, if the PC is connected to a network the connection should be removed before performing the changes. To restore the network, settings of the PC record the current settings at Step 7 in the following procedure, then when the MRD has been configured, follow the procedure again and use the recorded values at Step 7.

Open the Control Panel by selecting Start > Control Panel.
Click the Network and Sharing Center icon.
Click Change Adapter Settings.
Double click the Network icon.
The Local Area Connection Status dialog box will be displayed, click the Properties button.
The Local Area Connection Properties dialog box, as shown in Figure 1, will be displayed Click on Internet Protocol (TCP/IPv4) to highlight it and then click the Properties button.
The Internet Protocol (TCP/IP)Properties dialog box, change the settings to match those shown in Figure 2, and then click ”OK.

Note: If a web browser was open prior to making the network changes, then it will need to be closed and re-started before attempting to connect to the MRD.

Accessing the MRD

Open a web browser on the PC and browse to http://192.168.2.200 (the default MRD, IP address) .
A login box will popup. If the box fails to display, re-check the cable connections to the unit and the IP address settings of the PC.

Enter the following login details:

User Name: admin
Password: westernmost
The Status summary page will be displayed, it will be similar to Figure 3.

westermo MRD 405 Industrial 4G LTE Router - Figure 3

Note: If the unit is not yet configured it is likely that the Network Status and Connection Status will indicate a fault condition. This is normal.

Basic Configuration
The three sections below detail the steps needed to configure the MRD for basic packet mode functionality. For details on how to configure the unit for Circuit Switched mode and for more advanced configuration refer to the Advanced Configuration section of the Reference Guide.
Configure the Wireless interface
To access the configuration page for the Wireless interface, click on Wireless. The Basic Wireless configuration page will be displayed as shown in Figure 4. westermo MRD 405 Industrial 4G LTE Router - Figure
4

Network Configuration
The ”Network Configuration “section contains the settings for the operational mode and the frequency band of the unit, the default settings will usually be adequate to connect the MRD to a packet based network.
Setting the SIM Card PIN
The SIM card may have a PIN associated with it and may require the PIN to be entered before the unit can access the SIM. To set the SIM PIN click Edit. A dialogue box as shown in Figure 5 will be displayed.
westermo MRD 405 Industrial 4G LTE Router - Figure 5 Set the box marked ”Enable” and enter the PIN in the ”PIN” and ”Confirm PIN” entry boxes. Then click the ”Update” button to save the PIN.

Adding a Network Connection Profile
To access the wireless packet mode settings click on the ”Packet mode” tab. The screen shown in Figure 6 will be displayed. The page shows the connection configuration details and is divided into two sections. The first section shows the current connection state for the selected profile. The second section lists the available profiles. A connection profile contains the settings required to connect to a provider’s network. The unit allows multiple profiles to be configured to allow quick changes to the network connection settings. For most applications only one profile is required. westermo MRD
405 Industrial 4G LTE Router - Figure 6

The network provider will provide the items listed below which should be entered into the appropriate fields in the ”Add new profile” section as shown in Figure 7.

APN (Access Point Name)
Authentication (None/PAP/CHAP)
Username
Password

westermo MRD 405 Industrial 4G LTE Router - Figure7

Note: In order to set a password click the check-box marked New. The password can now be entered in the text field. The password is visible as it is being typed so that it can be checked for errors prior to being set. Once set the password will no longer be visible.
Note: The provider may not supply a username and password if network authentication is not required. In this case set the Authentication to ”None”, leave the username blank and do not set a password.
Once the data has been entered click the ”Update” button to add the profile. The screen will now change to show the added profile. As this is the only profile entered it will be automatically selected as the current profile and the profile entry will be shaded green to indicate that it is the selected profile.

Enable the Wireless Connection
To complete the configuration of the wireless connection, set the ”Connection state” to ”Always connect” and click the ”Update” button to save the changes. Once the changes have been set, the MRD will initiate a connection. Normally it will take up to 30 seconds to establish a connection. Figure 8 shows the completed wireless configuration. ![westermo MRD 405 Industrial 4G LTE Router

Figure8](https://manuals.plus/wp-content/uploads/2023/03/westermo-MRD-405 -Industrial-4G-LTE-Router-Figure8.png)

Checking the Status of the Connection
To check the status of the connection select ”Status” from the top level menu and then select ”Wireless” from the second level menu. The Wireless status page will be displayed which will look similar to the one shown in Figure 9. The status of the connection will change as the router connects to the network, first it will report ”Checking” then ”Connecting” and finally ”Connected”. To see the value changing the page will need to be reloaded. westermo MRD 405 Industrial 4G LTE Router - Figure9

Configure the LAN Interface and DHCP Server
To access the configuration page for the LAN interface and DHCP Server, select ”Interfaces” from the top level menu. A LAN interface screen similar to the one shown in Figure 10 will be displayed. westermo MRD 405 Industrial 4G LTE
Router - LAN

Setting the IP Address
If it is desired to change the IP address of the LAN port, follow the steps below:

Enter the new IP address and netmask in the ”Interface Configuration table”.
Click Update to set the changes. Once the changes have been set, the IP address of the MRD will change. Enter the new address in the browser on the PC. It will be necessary to login again, following the procedure described in the previous section.

Enabling DHCP
The DHCP server allows clients on the local network to be automatically allocated IP addresses from the MRD. The unit will also provide the clients with network settings like their default route and DNS servers. By default the DHCP server is disabled but if enabled it will be configured to serve IP addresses in the range 192.168.2.210 through
192.168.2.240, and the Default and Maximum lease times have been set to 1440 minutes.
So if these values are consistent with the network that the MRD is connected to, then the DHCP can be enabled by setting the Enabled field to Yes and clicking the Update button.
If the standard settings are not applicable for the connected network, then refer to Figure 10 and follow the steps below, to configure the DHCP server:

Choose a group of available IP addresses on the local network. For example, if the IP address of the MRD is 192.168.2.200 with a netmask of 255.255.255.0, a group chosen could be’192.168.2.100 to 192.168.2.150. This will provide 51 addresses for clients.
Under the ”DHCP Server Configuration table”:
Check the ”Enabled box”.
Enter the first address of the group in the ”Start Address box”.
Enter the last address of the group in the ”End Address box”.
Enter a lease time for the ”Default Lease time”.
Enter a lease time for the ”Maximum Lease time”.
Click ”Update” to set the changes.

Configure Clients to Use the MRD as Their Gateway
The MRD will act as a gateway for connections destined over the wireless interface. The default configuration will provide Network Address Translation and firewalling to protect clients on the local network.
To configure clients to use the MRD as their gateway:

If the clients have a DHCP address allocated by the MRD, they will have learned the necessary settings. No further configuration is needed.
If clients have static IP addresses, set their default route and DNS server to the IP address of the MRD.

Mounting
The MRD-405 should be mounted on 35 mm DIN-rail, which is horizontally mounted inside an apparatus cabinet or similar. Snap on mounting, see figure.
Mount the MRD-405 with the integrated DIN-clip:

Earth connection
For correct function, the ground connection on the unit needs to be properly connected to a solid ground. See figure.

Cooling
This unit uses convection cooling.
Avoid obstructing the airflow around the unit. Spacing is recommended for the use of unit in full operating temperature range and service life.
The router should be mounted in a clean and dry location, protected from water, excessive dust, corrosive fumes, extremes of temperature and direct sunlight. Allow sufficient ventilation to ensure adequate cooling of the router.