Module 14

Module 14
The GSM/GPRS Modem
Module Objectives
In this module we will discuss:

GSM/GPRS Theory of operation
Schneider recommendations for
configuration
Troubleshooting tips
ETG 3000 V 1.1 Evolutions

TSX ETG 3021 / 3022

GSM / GPRS
Embedded modem
Main V 1.1 features

Provide GSM/GPRS communications on TSX ETG 3021
Euro Band (900-1800 Mhz)
Launch TSX ETG 3022 GSM/GPRS communications - US
frequency (850-1900 MHz)
Call back on ring function: on PSTN and GSM / GPRS
Implement Security features on GPRS over internet
VPN remote access, data encryption support,

IP filtering (mini firewall: filtering of IP client
addresses)
Implement transparent routing access capabilities on
GPRS
When VPN is used
GPRS Overview (General Packet Radio Service)

Available on TSX ETG 3021 / 3022 modules

(V1.1 version)
GPRS is a packet oriented Data Service based on

GSM technology. (Global System for Mobile)
Provides a cost effective solution for wireless and

continuous remote connection to distributed
installations
Main advantages over GSM and PSTN
Internet
Internet
GPRS
GPRS
Network
Network
Communications cost : Data transfer is typically

charged per amount of data exchanged (amount of
megabytes per month),
while data communication via traditional circuit
switching is billed per minute of connection time.
GPRS allows continuous / permanent remote

connections
Higher Data rates than GSM > Theoretically
GPRS/VPN ETG 302X Applications

PC (Internet connected) access to Remote ETG 302x and devices

Using remote devices address
GPRS
GPRS
Network
Network
Internet
Internet
139.158.10.20
Ethernet
VPN
139.158.10.23
139.158.10.24
Modbus
ETG 302x access to Remote ETG 302x and devices

85.20.65.101
Ethernet
Internet
Internet
GPRS
GPRS
Network
Network
139.158.10.20
Ethernet
VPN
85.20.65.110
Modbus
139.158.10.23 139.158.10.24
Modbus
GPRS Communications
During a GPRS connection:
The ETG302x module connects to the GPRS network via
an Access Point Name (APN) given by the GPRS
service provider
The Access Point Name (APN) creates the gateway
between the GPRS network and the internet
The client PC or application is also connected to the
internet.
Internet
Internet
APN
N
VP
GPRS
GPRS
Network
Network
To ensure a secure remote access, ETG302x

modules also implement security services such
as:
VPN (Virtual Private Network)
IP filtering
Data encryption capabilities
GPRS Connection Principles

A SIM card and a specific GPRS subscription / contract

provided by a GPRS service Provider is required
Connections are always established from modem to GPRS

network, and never from GPRS network to modem
Internet
Internet
APN
It is not possible for a client application to directly open a

connection by dialing the ETG302x directly as in PSTN
The ETG 302x module accepts incoming GSM or PSTN calls

and supports Internet Call back function in order to connect
itself to the GPRS network from a remote request
ETG 302x modules provides two modes for connecting

to GPRS network
GPRS
GPRS
Network
Network
Permanent mode:
Automatic connection at startup or after a boot or after
a connection loss
On Demand mode:
on a process or application condition. (via internal
registers)
via Call back function
GPRS Connection Principles (Cont)

Upon a connection:
The ETG302x module receives an IP address
from the provider
Internet
Internet
either a Public IP or a private IP address

either a Static IP or a Dynamic IP address depending
on the GPRS subscription
N
VP
APN
GPRS
GPRS
Network
Network
ETG302x supports both Static or Dynamics IP

addresses.
For Dynamic IP addresses, ETG 302x provides
DynDNS support
Note =S= recommends subscriptions have:
Public APN with public IP address (reachable from
the internet)
Static IP address the service assigns the module a
static IP address. You can eliminate DynDNS
Private/Public APN
Private APN with private IP Address

Dedicated access within a company intranet (same as =S= VPN)
ETG and connected devices can access the internet
Nobody from the internet can reach the ETG and connected devices
Private
APN
Internet/Intranet
Internet/Intranet
GPRS network
Ethernet
Modbus
Public APN with public IP address

ETG and connected devices can access internet
Public can reach ETG and connected devices
PC or other devices from internet
APN
Internet
Internet
GPRS network
Ethernet
Modbus
Note: Requires enhanced security such as VPN. Some ports may be

blocked by provider (ports < 1024). VPN gets around this via a tunnel
More Subscription Details
GPRS
GPRS
Internet
Internet Network
Network
GSM/GPRS service providers typically offer dedicated

subscriptions well adapted to industrial applications, also called
M2M (Machine to Machine) subscriptions.
Various GPRS subscriptions are available with different options:
various different Data exchange rates (billing on data amount in Megabytes per
month)
option for Static IP or Dynamic IP address
Incoming TCP ports blocked or not : some providers are offering only
subscriptions with TCP ports, blocked for security reasons, for instance lower
than port 1024
Note: =S= recommends that you choose subscriptions with:
Public APN with public IP address (visible from internet

a Static IP address
and no TCP ports blocked thus lowering remote connection constraints. It also
allows connections to devices connected to the ETG
You must have the right features in you service or the module will not be able to
do everything it is capable of doing
Dynamic IP Addressing 2 Solutions

What is the ETGs address?
IP = 123,1,2,45
YourETG.DYNDNS.ORG
If your GPRS subscription came with a Dynamic GPRS IP

address, it is changed / renewed frequently by your service
provider.
There are two solutions for Dynamic GPRS IP addresses:
DynDNS service for working with the IP address Publication:
DNS Inc. (DynDns.com) is a free DNS service that allows you to create your own domain name.
There are limits on how many domain names you can have under the free service
Email module emails you its address when connected
VPN Overview
VPN technology allows an ETG302x to establish secure, private, bi-directional,
encrypted tunneled connections over the Internet between your central sites and
your remote equipment
VPN
VPN service provides:

Secured connections between PC connected to
Internet and remote ETG302x gateways

VPN
bringing remote devices 'virtually' into your own LAN. Once

the tunnel mode is established, your programming software
and monitoring tools access the remote device transparently,
as if it are in the same local network.
Secured Site-to-Site Connections via VPN tunnels

between two remote ETG302x gateways.
any device from one site can access any other device in the
remote site. This capability can also be useful for instance
as alternative solution for replacing leased lines between
sites
Getting Ready - GSM Physical Setup - Step 1
1
2

Attach the antenna (1)

Insert the SIM chip in the rear of the ETG (2)
Module Configuration IP Address Step 2
2
1

Connect to the module with an

Internet Browser
Select Setup then Modem (1)
Enter the SIM PIN code (if one
exists)
Many providers dont have one, it
depends on your account
Power up and go to the Modem

Diagnostics area (3)
operator from connection
signal strength good connection
shown
GPRS Configuration Step 3
Select GPRS enable check box and enter the GPRS parameters:

Connection mode: =S= recommends start with On Demand option

Access Point Name ( APN ) : Enter the APN according to your GPRS
provider and contract
Username/Password of the APN
DynDNS optional, if dynamic IP, posts IP to DynDNS account
Helps you connect to module using your custom URL
Apply settings and reboot
Is it Working? Step 4
1
2

If you have trouble establishing a connection, check the log file (1)
Good connection have frames sent/received counters
PC to ETG Connection (no VPN) Step 6
Ethernet
Do this to verify that you can connect to the ETG before VPN
Connect ETG to Internet/Intranet
Connect PC to internet, verify that it can connect to ETG
Firewall issues
No bridging to Ethernet devices inside gateway is possible
VPN Client Overview

VPN server
When connecting a PC to a remote ETG 302x

the ETG302x acts as a VPN server. You must run a
VPN client interface on the PC
VPN required for bridging to Ethernet devices
connected to ETG
VPN
VPN server
When connecting an ETG302x client to a

remote ETG 302x
the ETG302x client can act as a VPN client.
ETG302x VPN setup includes this client
configuration.
VPN
Various VPN clients can be used:

thegreenbow.com VPN client software
(recommended)
Trail version is available
VPN client service provided by Windows operating

systems XP, 2000, Vista (=S= provides a sample
batch file to run this service)
VPN Client Configuration

Remote Gateway address from either DYNdns or IP address

Preshared key must match key setup in module. Used to
authenticate the connection
IKE encryption used for key authentication
VPN Configuration

Module Remote Address = PC or

different ETG
Preshared key = same in both VPN
Client & Module
Tunnel Mode - use if you wish to
connect to devices on inside of gateway
Remote LAN virtual LAN must match
in Thegreenbow and in the module (1)
Module Setup
PC to ETG
tunnel
PC connects to internet
Firewall issues
Launch tunnel connection
Ethernet
Authentication, tunnel created
When tunnel is established, communication to ETG and attached devices is possiple

No VPN tunnel necessary for serial out of ETG
Most likely want to use VPN for security access
ETG to ETG
ETG1
Ethernet

ETG2
tunnel
Etg1 calls Etg2

Etg2 calls back network
On first data exchange attempt, tunnel is created
Data exchange takes place
Ethernet
ETG to ETG, PC to ETG

tun
nel
Ethernet
ETG1

Ethernet
tunnel
ETG2
Etg1 calls Etg2

Etg2 calls back network
On first data exchange attempt, tunnel is created
PC could also be added and can connect to either ETG and to
connected PLCs
Module
Exercise
1 14 Demo
Configuring an ETG for ESM Modem Operation

Module 14 - GSM Modem

Uploaded by

Copyright:

Available Formats

Module 14 - GSM Modem

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Module 14 - GSM Modem

Uploaded by

Copyright:

Available Formats

The GSM/GPRS Modem

In this module we will discuss:

ETG 3000 V 1.1 Evolutions

TSX ETG 3021 / 3022

Main V 1.1 features

VPN remote access, data encryption support,

When VPN is used

GPRS Overview (General Packet Radio Service)

Available on TSX ETG 3021 / 3022 modules

GPRS is a packet oriented Data Service based on

Provides a cost effective solution for wireless and

Main advantages over GSM and PSTN

Communications cost : Data transfer is typically

GPRS allows continuous / permanent remote

Higher Data rates than GSM > Theoretically

GPRS/VPN ETG 302X Applications

PC (Internet connected) access to Remote ETG 302x and devices

ETG 302x access to Remote ETG 302x and devices

To ensure a secure remote access, ETG302x

GPRS Connection Principles

A SIM card and a specific GPRS subscription / contract

Connections are always established from modem to GPRS

It is not possible for a client application to directly open a

The ETG 302x module accepts incoming GSM or PSTN calls

ETG 302x modules provides two modes for connecting

GPRS Connection Principles (Cont)

either a Public IP or a private IP address

ETG302x supports both Static or Dynamics IP

Private APN with private IP Address

Public APN with public IP address

Note: Requires enhanced security such as VPN. Some ports may be

More Subscription Details

GSM/GPRS service providers typically offer dedicated

Various GPRS subscriptions are available with different options:

Note: =S= recommends that you choose subscriptions with:

Public APN with public IP address (visible from internet

Dynamic IP Addressing 2 Solutions

If your GPRS subscription came with a Dynamic GPRS IP

DynDNS service for working with the IP address Publication:

Email module emails you its address when connected

VPN service provides:

bringing remote devices 'virtually' into your own LAN. Once

Secured Site-to-Site Connections via VPN tunnels

Getting Ready - GSM Physical Setup - Step 1

Attach the antenna (1)

Module Configuration IP Address Step 2

Connect to the module with an

Power up and go to the Modem

GPRS Configuration Step 3

Connection mode: =S= recommends start with On Demand option

Helps you connect to module using your custom URL

Apply settings and reboot

PC to ETG Connection (no VPN) Step 6

VPN Client Overview

When connecting a PC to a remote ETG 302x

When connecting an ETG302x client to a

Various VPN clients can be used:

VPN client service provided by Windows operating