Inhand ODU2000 Cloud Managed 5G Outdoor Unit User Manual

Inhand ODU2000 Cloud Managed 5G Outdoor Unit

Specifications

• Product Name: InHandNetworks 5G ODU2x02-NATM Series
• Version: V1.3–2023.11

Usage Instructions

Power On
To power on the device, follow these steps:

1. Connect the power cable to the power port on the device.
2. Plug the other end of the power cable into a power outlet.
3. The device will start and the indicator light will turn steady green when the system is working properly.

Network Connection
To connect the device to a network, follow these steps:

1. Connect an Ethernet cable to the Ethernet port on the device.
2. Connect the other end of the Ethernet cable to your network switch or router.
3. The device will establish a network connection automatically.

Configuration
To configure the device, follow these steps:

1. Open a web browser on a computer connected to the same network as the device.
2. Enter the IP address of the device in the address bar of the web browser.
3. Log in to the device using the provided username and password.
4. Follow the on-screen instructions to configure the device settings according to your network requirements.

Declaration
Thank you for choosing our product. Before using this product, please read this manual carefully.
The contents of this manual cannot be copied or reproduced in any form without the written permission of InHand.
Due to continuous updating, InHand cannot promise that the contents are consistent with the actual product information, and does not assume any disputes caused by inconsistency of technical parameters. The information in this document is subject to change without notice. InHand reserves the right of final change and interpretation.
©2023 InHand Networks. All rights reserved.

Conventions

User”.

| A multi-level menu is separated by the double brackets “>>”. For example, the multi-level menu File >> New >> Folder indicates the menu item [Folder] under the sub-menu [New], which is under the menu [File].
Cautions| Please be careful of the content under Cautions, improper action may result in loss of data or device damage.
Note| The note contains detailed descriptions and helpful suggestions.

Technical Support

Email: support@inhandnetworks.com
URL: www.inhandnetworks.com

Overview

5G cellular greatly enhances the flexibility and convenience of the network at any time and anywhere, which means enterprises can easily build a 5G network in just a few minutes to improve the competitiveness of digital business development. The cloud-managed 5G ODU2x02-NATM series, combined with InCloud Manager SaaS service, provides global customers with high-speed, convenient, and secure 5G efficient networks. 5G ODU is a key part of the cellular gateway series launched by InHand for WAN, which can instantly deploy ultra-high speed 5G network by having gigabit cellular uplink without waiting on broadband; supporting dual SIM card switch network; adapting to the harsh environment. 5G ODU can provide a better and more stable network.
Combined with InCloud Manager, 5G ODU forms a cloud-managed network solution, providing global customers with high-speed and secure network access, and simple and convenient network management services to empower your core business.

Product model description
5G ODU2x02-NATM series includes the following models and these models have the same hardware and software versions, but the application market is different.

• ODU2002-NATM: For business networking scenarios
• ODU2102-NATM: For enterprise network office
• ODU2302-NATM: For factory digitalization
• ODU2602-NATM: For smart parks
• ODU2902-NATM: For scenes such as mines and seaports

Hardware

Indicator Description

System

| Off — Power off

Steady in red — System starting Blink in red — System error

Steady in green — System working

Cellular

| Off — Cellular disable

Steady in blue — 4G dialed up Steady in green — 5G dialed up Blink in red — Connection error

Signal

| Off — Connection error

Steady in red — Signal value ≤9 Steady in blue — 10≤Signal level≤19 Steady in green — Signal level ≥ 20,

LAN

| Off — Connection error

Steady in green — LAN port connected Blink in green — LAN port data transmitting

WAN

| Off — Connection error

Steady in green — WAN port connected Blink in green — WAN port data transmitting

Restoring to Default Settings via the Reset Button

To restore to default settings by the reset button, please perform the following steps:

1. When the unit is powered ON, press and hold the reset button for 5-10 seconds.
2. When the System LED is steady on blue, release the RESET button, the system LED will blink in blue, and press the RESET button again.
3. When the System LED is steady on blue, release the RESET button. The unit has been restored to default settings and will start up normally later.

Default Settings

2

| ****

Wi-Fi

| − Wi-Fi  2.4G  AP  mode  enabled,  SSID: ODU2002-followed with the last 6 letters of the MAC address.

−     Auth Method is WPA2-PSK.

−     Password is the last 8 letters of serial number.

3

| ****

Ethernet

| −     PoE LAN1 enabled, IP address: 192.168.1.1, Netmask: 255.255.255.0. DHCP server enabled, 192.168.1.2~ 192.168.1.254.

−     WAN/LAN2 enabled as WAN, DHCP client mode.

4

| Management Services| −     HTTPS(443) enabled.

−     Disable     HTTPS/SSH/ping     from     cellular/WAN

interface.

5| Username and

password

| −     adm/123456

Login and Access to the Internet

Before powering on, please insert the SIM card and connect the 5G antenna to the device. Or connect the Ethernet cable to the WAN/LAN2 interface.

Using Instruction

Connect via Mobile Phone
Step 1: Install the InCloud APP by scanning the following QR code on a mobile phone.

Step 2: Click the “Device” directory below to enter the [Device] page, click the menu button in the upper right corner, and select [Add Device]. Scan the QR code on the ODU to add device.

Step 3: After scanning the code successfully, configure the name, serial number, and description information of the device.
Step 4: If ODU cannot connect to the Internet, click “Configure local device” on the [Device] page, scan the QR code on the device again and then configure the device to connect to the Internet. Mobile phones will connect to ODU’s Wi-Fi after scanning the QR code in “Configure local device”.

Connect via PC

• Step 1: Connect PoE LAN1 interface on ODU and PC with Ethernet cable.
• Step 2: Set the IP of the PC via DHCP or fixed IP address, the PC IP address and ODU address should be in the same segment.
  Use DHCP to obtain the address automatically (recommended). The DHCP server function is enabled by default on the LAN port of ODU.

Use a fixed IP address, the PC and the device must be in the same segment. On PC side, the IP address needs to be configured as any address in 192.168.1.2~192.168.1.254, the gateway should be 192.168.1.1, the subnet mask should be 255.255.255.0, and the DNS server should be 8.8.8.8 or operator DNS server address.

Step 3: Open a browser and enter the device’s default address 192.168.1.1 in the browser address bar. After entering the username and password (default: admin/123456), enter the device’s WEB management interface. If the page prompts that the webpage is not secure, open the hidden or advanced options and select “Proceed to website”.

Step 4: Check the network status in the “Interface Status” in “Dashboard”. The device connects to the Internet successfully if the “Cellular” or “WAN” icon turns green. Click the corresponding icon to view interface information such as signal strength, IP address, and traffic consumption.
Step 5: If ODU cannot connect to the network, click “Internet” on the left navigation bar, and click the edit button behind the “Cellular” or “WAN” to set up network parameters. The device enables the dial-up function and WAN by default, please wait for a few minutes to go online, and re-enable the dial-up if it is not dialled.

Web Configuration

Dashboard
Click “Dashboard” in the left menu, and check Device Information, Interface Status, Traffic Statistics and Wi-Fi information of the device.

Click interface icon in Interface Status, and check detailed information of the interface in the right menu.

Status
Click “Status” in the left menu, and check link status, signal, log and other information of the device.

Link Monitor
The Link Monitor page displays the health of each uplink, as well as the throughput, latency and packetloss rate on each uplink interface.

Cellular Signal
The Cellular Signal page displays the SIM card signal strength on the cellular interface, as well as other parameters such as RSSI, SINR, and RSRP.

Clients
The Clients page displays details about each client connected to ODU, such as device name, IP address, MAC address, traffic statistics, and online duration.

VPN: Check the status and the traffic consume of the VPN in ODU in VPN page.

Events

• ODU will record event logs like user login, configuration change, link change, reboot and other events on the Events page,
• By selecting start date, end date and event type, narrow the scope of retrieval and view a certain type of event.

Logs
Check the logs recorded during the operation of the device, which can be used for troubleshooting when the ODU can not work properly.

• Clear Logs: clear current running logs.
• Download Logs: download running logs.
• Download Diagnostic Logs: download log information for troubleshooting, it contains system running logs, device information, and device configuration.

Internet

• Click “Internet” in the left menu to check and configure the uplink interfaces and multi-link work mode of ODU.
• Please exercise caution when changing Internet settings which may cause network interruption.

Uplink Table
Check and edit WAN and Cellular interface in Uplink Table. It supports editing the cellular threshold policy on this page, and dragging icons in the Priority column to reprioritize the interfaces.

Notes: If delete the WAN interface on this page, the WAN/LAN2 port will work as LAN. The WAN/LAN2 port will change back to WAN if add WAN interface again. When deleting WAN, all configurations on this interface like the static routes, inbound and outbound rules, port forwarding etc. will be removed.

ODU supports three types of WAN interface:

DHCP: The DHCP service is enabled on the WAN interface by default. Therefore, ODU can connect to the Internet immediately if connect WAN interface to upstream network device which enables DHCP server.
Static IP: Manually assign an IP address obtained from the carrier or upstream network device.
PPPoE: Set the PPPoE service on WAN so that ODU can dial up to the Internet through the broadband service.

Uplink Setting
Configure link detection items and optimal forwarding mode for uplink interfaces.

• Link detection is enabled by default. In the private network environment, please manually configure the address in “Test Connectivity to” or disable the link detection function to prevent the cellular interface from working abnormally.
• If the detection function is disabled, it will not display latency, jitter, packet loss rate, or signal strength on the Status page.
• If the “Test Connectivity to” address is empty, the system will detect the primary DNS server address obtained by each interface, otherwise, the system will use this address as the detection address for all uplink interfaces.
• In Link Backup mode, ODU will monitor enabled items and trigger a link switch when any item exceeds the threshold. If there is no item enabled, the link switch will only be triggered based on the priority and connectivity of the links. In Load Balancing mode, ODU will distribute data traffic to all available links.

Local Network: Check and configure LAN of the device in Local Network page.

Edit the network: Click the Edit button on the right to edit LAN IP, enable/disable the DHCP server and change the range of the DHCP address.

Wi-Fi: Configure ODU to serve as Wi-Fi AP to provide SSID for wireless network access.

Edit Wi-Fi: Click the Edit button on the right, and configure the SSID, password or other parameters of this Wi-Fi.

VPN
VPN is intended to establish a private network on the public network for encrypted communication. A VPN router enables remote access by encrypting data packets and converting the destination address of data packets. VPN can be realized by a server, hardware, or software. Compared with the traditional DDN private line or frame relay, VPN provides a more secure and convenient remote access solution.

IPSec VPN
IPsec is a group of open network security protocols developed by IETF. At the IP layer, data source authentication, data encryption, data integrity, and anti-replay functions are used to ensure the security of data transmission between communication parties on the Internet, which reduces the risk of leakage and eavesdropping, ensures the integrity and confidentiality of data, and the security of service transmission for users.

On the IPSec VPN page, click the Add button on the left to build a new IPSec tunnel.

• Name: specify the name of the IPSec VPN created on the device, which is used for local VPN management.
• IKE Version: specify the version of the IKE protocol used on ODU, IKEv1 or IKEv2.
• Pre-Shared Key: specify the authentication key for IKE negotiation, which must be consistent on both sides.
• Uplink Interface: specify the local uplink interface used to establish the IPSec VPN tunnel.
• Peer Address: specify the IP address of the peer device.
• Notes: The peer IP address must be set to 0.0.0.0 if working as an IPSec server. Tunnel Mode: specify the IP packet encapsulation mode on the IPSec VPN tunnel, which can be tunnel mode or transmission mode.
• Local Subnet : specify the IP address segment of the traffic to be sent out by the ODU through the IPSec VPN tunnel.
• Peer Subnet : specify the IP address segment used for communication on the other end of the IPSec VPN tunnel.

IKE Policy:

• Encryption: specify the encryption algorithm for IKE.
• Authentication: specify the authentication algorithm for IKE.
• DH Groups: specify the DH key exchange mode.
• Lifetime: specify the lifetime of the IKE SA. The default value is 86400 seconds. IPSec Policy:
• Security Protocol: specify the security protocol used for ERP. Encryption: specify the encryption algorithm of the ESP protocol. Authentication: specify the authentication algorithm for ESP.
• PFS Groups : specify the Perfect Forward Secrecy (PFS) mode, which improves the communication security through an additional key exchange in Phase 2 negotiation.
• Lifetime: specify the lifetime of the IPSec SA. The default value is 86400 seconds.

L2TP VPN
Layer 2 Tunneling Protocol (L2TP) is a tunnelling protocol for virtual private dial networks (VPNs). This protocol establishes a tunnel from a remote site to the headquarters of an enterprise over a public switched telephone network (PSTN) or integrated services digital network (ISDN) through Point-to-Point Protocol (PPP) negotiation. This tunnel allows remote users to connect to the intranet of the enterprise in a secure way.

Server
Generally, an L2TP server is deployed at the headquarters of an enterprise to provide remote access for employees. On the VPN page, choose L2TP VPN > Server to display the L2TP server configuration.

• Name: t he name of the L2TP server, cannot be changed.
• Status: enable or disable L2TP server. This function is disabled by default.
• Uplink Interface: s pecify the uplink interface used to establish a tunnel from L2TP server.
• VPN Connection Address: specify the gateway address for the L2TP client.
• IP Pool: System will assign an IP address to the L2TP client from the specified IP address pool.
• User Name/Password : specify the user name and password for L2TP negotiation, which must be consistent on both ends of the tunnel.
• Authentication Mode: specify the authentication mode for the L2TP tunnel.
• Enable Tunnel Authentication: Please make sure both ends of the tunnel are configured with the same user name and password if enable this option.

Client: Click Add button on the left to configure L2TP client parameters and establish a tunnel with remote L2TP server.

• Name: specify the local name of the L2TP client tunnel.
• Status: enable or disable the L2TP client tunnel.
• NAT: enable or disable NAT for packets forwarded by the ODU for the LAN device.
• Uplink Interface: specify the uplink interface used to establish the L2TP tunnel.
• Server Address: specify the IP address used by the remote L2TP server.
• User Name/Password: specify the user name and password for L2TP negotiation, which must be consistent on both ends of the tunnel.
• Authentication Mode: specify the authentication mode for the L2TP tunnel.
• Enable Tunnel Verification: Please make sure both ends of the tunnel are configured with the same server name and verification key if enable this option.

Security
Click “Security” in the left menu to enter the Security page, and configure advanced security features including firewall, policy-based routing, and traffic shaping.

Firewall
Set inbound or outbound rules, port forwarding and MAC address filter in the firewall.

Inbound/Outbound Rules

• Users can set rules to control data traffic based on an interface. For example:
• Users can use inbound rules to forbid some of IP addresses from accessing to router when under attack from such IP.
• Users can use outbound rules to forbid some client devices from accessing to public network.

Outbound rules: Inside network access to outside network, allow all data by default.
InBound rules : Outside network access to inside network, forbid all data by default.

Click Add button in the left to add a new rule.

• Name: set the local identifier of the inbound rule.
• Status: enable or disable the rule.
• Interface: set the traffic forwarding interface. For an outbound rule, select the interface from which traffic is sent out. For an inbound rule, select the interface on which traffic is received.
• Protocol: set the protocol type of packets to be matched, supports Any, TCP, UDP, ICMP, and Custom.
• Source: set the source IP address of packets to be matched, support IP address or retain the default option Any.
• Destination: set the destination IP address of packets to be matched, support entering an IP address or retain the default option Any.

Port Forwarding

• When the outside network accesses to specific ports of the ODU, the system will transfer this data to corresponding ports of the inside device according to relevant port forwarding rules. So that the service deployed in LAN will be available in the public network, and the same public IP address can be used to access plenty of services by using multiple port forwarding rules.
• For example, after setting port forwarding rules like below, when users from the public network try to access to ODU’s port 2000 on WAN, the system will transfer the request to 192.168.1.23:8080 in LAN.

• Name: set the local identifier of the port forwarding rule.
• Status: enable or disable the port forwarding rule.
• Interface: set the uplink interface that provides port mapping for internal clients. This interface must have a public IP address.
• Protocol: set the protocol type to which port mapping is applied. TCP, UDP, and TCP&UDP.
• Public Port : set the protocol port on the uplink interface to be mapped.
• Local Address : set the IP address of the target client that external users need to access.
• Local Port : set the protocol port that external users need to access on the target client.

MAC Address Filter
Configure MAC address filter rules for LAN devices to allow or forbid LAN devices to access to Internet.

Blacklist: Devices in the blacklist will not be able to access the Internet.
Whitelist: Only devices in the whitelist are allowed to access the Internet.

Policy-Based Routing
Policy-based routing (PBR) allows ODU to forward different data flows through different links based on configured policies. This feature enables flexible route selection and control, thus improving the link utilization and reducing operational cost of the enterprise. Choose Security > Policy-based Routing and click Add to add a PBR rule.

Notes: The source and destination addresses of the PBR cannot be set as Any at the same time.

Traffic Shaping

• Create shaping policies to apply per-user controls on a per-protocol basis to optimize the network. This function can also reduce bandwidth for recreational traffic, and prioritize bandwidth for critical business traffics.
• Choose Security > Traffic Shaping and click Edit to modify the bandwidth of the uplink interfaces.

Click Add to create a new traffic shaping rule. Traffic shaping policies consist of a series of rules that are performed in order, which is similar to custom firewall rules. There are two main components to each rule: the type of traffic to be limited or shaped (rule definition), and how that traffic should be limited or shaped (rule actions).

Notes:

• Traffic forwarding priority for unmatched rules is medium.
• When Limit Bandwidth is set to 0, the system will not limit the bandwidth. The value of Reserved Bandwidth should not be greater than the Limit Bandwidth.

Services

DHCP server
DHCP implements dynamic IP address allocation in a client/server model. The LAN device sends a request to ODU, and ODU replies with an IP address assigned to the client.

DNS server
Set global DNS server for ODU. The system will use the DNS server on this page if the original DNS server from the uplink interface cannot work.

Fixed Address List
ODU is able to distribute IP addresses based on the client device’s MAC address by using a fixed address list. Distributed IP addresses should be in the range of IP addresses of the local network.

Static Routes
Configure static routes to forward data by a specific route or interface. This list will only display the rules created by the user, and will not show the routes created automatically after modifying the WAN or LAN interface.

Static routes to the same destination IP address or network cannot have the same next-hop address, outbound interface, or priority.

Passthrough Settings
Configure IP passthrough to transparently forward data from the uplink interface to one client device.

After the IP Passthrough mode is enabled, only one client can access to Internet, and Static routing, VPN, Port Forwarding and Policy-Based Routing functions will not work.
The inbound rule needs to be released when accessing the client device.

System

Change the Password
The default username and password of ODU is adm/123456. Please change the password for securiry after first login. Click “adm” on the top right of the web page, click Modify Password in the menu to change the password.

Cloud Management
InCloud Manager (star.inhandcloud.com) is a cloud platform developed by InHand to help enterprises accelerate network deployment, simplify network maintenance, and improve service experience. This platform provides zero-touch deployment, intelligent maintenance and security features to create a good service experience for users. Users can log in to the platform to manage the devices remotely, perform batch configuration, and monitor traffic on the devices.
ODU connects to InCloud Manager automatically. Users can select which InHand platform to connect to on this page, and also disable InCloud Manager in this page.

Remote Access Control
Users can allow or forbid public networks to access ODU and which port for the public network to access ODU on this page. The rules on this page will not influence LAN devices to access to ODU. ODU supports HTTPS when accessing its web configuration page.

System Clock
Select a time zone for the system and enable the NTP server to synchronize time with the target NTP server.

Device Options
Reboot, upgrade firmware or reset ODU to default factory settings in this page.

Notes:

• Before upgrading the firmware, please make sure the new firmware is obtained from an official source.
• If the ODU is connected to InCloud Manager, the platform will synchronise the settings before restore to factory settings. The ODU will only clear historical data.

Configuration Management
User can export the system configuration to local PC as backup, and import the configuration to device to restore the configuration.

Device Alarms
When a user needs to pay attention to some of the events that may occur on the device, the user can select corresponding alarm events and set an email address for the alarm email. ODU will send out an alarm if a selected event occurs, and record unselected events in the log.
ODU supports recording and alarming following events at present:

After configuring the mail server address, port, username and password, ODU will send alarm email through this email. Configure Receiving Email Address and send a test email to this address to check the correctness of the configuration above.

Tools

Ping: Use ICMP protocol to check the connectivity between the source address (ODU itself if the Source is blank) and other IP addresses or domain names in Target.
Enter the IP address or domain name in Target, and click Start to start ping.

Traceroute
Enter the target IP address or domain name, select interface, and click “Start” to test and trace the link situation from ODU to the target.

Capture

• Users can use this feature to catch the data forwarding through specified interfaces.
• By selecting options in the Output drop-down list, the user can view information about the captured data packets or export the information to the PC.

Log Server
Set a remote log server and ODU will upload system logs to this remote log server.

Other Settings
Set web login timeout, enable or disable accelerated forwarding and configure other system settings in this page.

Notes
Cellular forwarding speed will be significantly increased after enabling Accelerated Forwarding, but other functions like traffic shaping or IPSec will not take effort.

FCC STATEMENT

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference, and
2. this device must accept any interference received, including interference that may causeundesired operation.

Note1: This equipment has been tested and found to comply with the limits for a Class A digital device, under part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used by the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

NOTE 2: Any changes or modifications to this unit not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.

RF Exposure
The equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This device should be installed and operated with minimum distance 20cm between the radiator & your body.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. The availability of some specific channels and/or operational frequency bands is country dependent and firmware programmed at the factory to match the intended destination.
The firmware setting is not accessible by the end user.

IC STATEMENT
This device complies with Industry Canada license-exempt RSS standard(s):

Operation is subject to the following Two conditions:

1. this device may not cause interference, and
2. This device must accept any interference, including interference that may cause undesired operation of the device.

CAN NMB-3 (B)
Radiation Exposure Statement:

1. This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
2. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

This radio transmitter [11594A-ODUNATM] has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna types not included in this list that have a gain greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device.

Antenna Requirements:
The following antennae were approved with the prototype:

Operating

Band

| Frequency(MHz)| Description| Antenna

impedance

| Product Type| Antenna

Gain(dBi)

---|---|---|---|---|---
2.4Gwifi| 2412~2462| Fiberglass| 50Ω| BGS-065C(RB

version)

| 4.21
B2| 1850~1910| BGS-065D（RA

version）

| 6.04
B4| 1710~1755| BGS-065D（RA

version）

| 5.15
B5| 824~849| | | BGS-065A（RA

version）

| 1.85
---|---|---|---|---|---
B12| 699~716| BGS-065A（RA

version）

| 1.86
B66| 1710~1780| BGS-065D（RA

version）

| 5.43
B71| 663~698| BGS-065A（RA

version）

| 1.29
B41| 2496~2690| BGS-065D（RA

version）

| 2.77
N25| 1850~1915| BGS-065D（RA

version）

| 6.04
N41| 2496~2690| BGS-065A（RA

version）

BGS-065D（RA

version）

| 3.52

2.77

N66| 1710~1780| BGS-065D（RA

version）

| 5.43
N71| 663~698| BGS-065A（RA

version）

| 1.29

The product is provided with an approved antenna. Use only supplied or approved antenna by Beijing InHand Networks Technology Co., Ltd. Any changes or modifications to the Antenna may void the regulatory approvals obtained for the product.

FAQ

• Can I copy or reproduce the contents of this manual?
  • No, the contents of this manual cannot be copied or reproduced in any form without the written permission of InHand.
• How can I contact technical support?
  • You can contact technical support through email at support@inhandnetworks.com or visit their website at www.inhandnetworks.com.

InHand Networks
Global Leader in Industrial loT
www.inhandnetworks.com

References

• star.inhandcloud.com
• InHand Networks - Accelerate Digital Transformation

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>