0% found this document useful (0 votes)

687 views211 pages

Manual Tecnico Bulletplusac-Cat9

Uploaded by

Dante Falcon

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

687 views211 pages

Manual Tecnico Bulletplusac-Cat9

Uploaded by

Dante Falcon

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 211

Microhard Systemcs INC

BulletPlusAC CAT9

Model: BulletPlusAC-CAT9
600Mbps CAT9 LTE Advanced Carrier Aggregation /w 802.11ac

Document: BulletPlusAC.Manual.v1.0.0.pdf
FW: v1.5.0 Build 1007-35

150 Country Hills Landing NW

Calgary, Alberta
Canada T3K 5P3

Phone: (403) 248-0028

Toll Free: 1-855-353-0028
www.microhardcorp.com
Important User Information

Warranty
Microhard Systems Inc. warrants that each product will be free of defects in material and workmanship for a
period of one (1) year for its products. The warranty commences on the date the product is shipped by Micro-
hard Systems Inc. Microhard Systems Inc.’s sole liability and responsibility under this warranty is to repair or
replace any product which is returned to it by the Buyer and which Microhard Systems Inc. determines does
not conform to the warranty. Product returned to Microhard Systems Inc. for warranty service will be shipped
to Microhard Systems Inc. at Buyer’s expense and will be returned to Buyer at Microhard Systems Inc.’s ex-
pense. In no event shall Microhard Systems Inc. be responsible under this warranty for any defect which is
caused by negligence, misuse or mistreatment of a product or for any unit which has been altered or modified
in any way. The warranty of replacement shall terminate with the warranty of the product.
Warranty Disclaims
Microhard Systems Inc. makes no warranties of any nature of kind, expressed or implied, with respect to the
hardware, software, and/or products and hereby disclaims any and all such warranties, including but not lim-
ited to warranty of non-infringement, implied warranties of merchantability for a particular purpose, any inter-
ruption or loss of the hardware, software, and/or product, any delay in providing the hardware, software, and/
or product or correcting any defect in the hardware, software, and/or product, or any other warranty. The Pur-
chaser represents and warrants that Microhard Systems Inc. has not made any such warranties to the Pur-
chaser or its agents MICROHARD SYSTEMS INC. EXPRESS WARRANTY TO BUYER CONSTITUTES MICROHARD
SYSTEMS INC. SOLE LIABILITY AND THE BUYER’S SOLE REMEDIES. EXCEPT AS THUS PROVIDED, MICROHARD
SYSTEMS INC. DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING ANY WARRANTY OF MER-
CHANTABILITY OR FITNESS FOR A PARTICULAR PROMISE.
MICROHARD SYSTEMS INC. PRODUCTS ARE NOT DESIGNED OR INTENDED TO BE USED IN
ANY LIFE SUPPORT RELATED DEVICE OR SYSTEM RELATED FUNCTIONS NOR AS PART OF
ANY OTHER CRITICAL SYSTEM AND ARE GRANTED NO FUNCTIONAL WARRANTY.
Indemnification
The Purchaser shall indemnify Microhard Systems Inc. and its respective directors, officers, employees, suc-
cessors and assigns including any subsidiaries, related corporations, or affiliates, shall be released and dis-
charged from any and all manner of action, causes of action, liability, losses, damages, suits, dues, sums of
money, expenses (including legal fees), general damages, special damages, including without limitation,
claims for personal injuries, death or property damage related to the products sold hereunder, costs and de-
mands of every and any kind and nature whatsoever at law.

IN NO EVENT WILL MICROHARD SYSTEMS INC. BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL,
INCIDENTAL, BUSINESS INTERRUPTION, CATASTROPHIC, PUNITIVE OR OTHER DAMAGES WHICH MAY BE
CLAIMED TO ARISE IN CONNECTION WITH THE HARDWARE, REGARDLESS OF THE LEGAL THEORY BEHIND
SUCH CLAIMS, WHETHER IN TORT, CONTRACT OR UNDER ANY APPLICABLE STATUTORY OR REGULATORY
LAWS, RULES, REGULATIONS, EXECUTIVE OR ADMINISTRATIVE ORDERS OR DECLARATIONS OR OTHERWISE,
EVEN IF MICROHARD SYSTEMS INC. HAS BEEN ADVISED OR OTHERWISE HAS KNOWLEDGE OF THE POSSIBIL-
ITY OF SUCH DAMAGES AND TAKES NO ACTION TO PREVENT OR MINIMIZE SUCH DAMAGES. IN THE EVENT
THAT REGARDLESS OF THE WARRANTY DISCLAIMERS AND HOLD HARMLESS PROVISIONS INCLUDED ABOVE
MICROHARD SYSTEMS INC. IS SOMEHOW HELD LIABLE OR RESPONSIBLE FOR ANY DAMAGE OR INJURY, MI-
CROHARD SYSTEMS INC.'S LIABILITY FOR ANYDAMAGES SHALL NOT EXCEED THE PROFIT REALIZED BY MI-
CROHARD SYSTEMS INC. ON THE SALE OR PROVISION OF THE HARDWARE TO THE CUSTOMER.
Proprietary Rights
The Buyer hereby acknowledges that Microhard Systems Inc. has a proprietary interest and intellectual prop-
erty rights in the Hardware, Software and/or Products. The Purchaser shall not (i) remove any copyright, trade
secret, trademark or other evidence of Microhard Systems Inc.’s ownership or proprietary interest or confiden-
tiality other proprietary notices contained on, or in, the Hardware, Software or Products, (ii) reproduce or modi-
fy any Hardware, Software or Products or make any copies thereof, (iii) reverse assemble, reverse engineer or
decompile any Software or copy thereof in whole or in part, (iv) sell, transfer or otherwise make available to
others the Hardware, Software, or Products or documentation thereof or any copy thereof, except in accord-
ance with this Agreement.

About This Manual

It is assumed that users of the products described herein have either system integration or
design experience, as well as an understanding of the fundamentals of radio communications.

Throughout this manual you will encounter not only illustrations (that further elaborate on the
accompanying text), but also several symbols which you should be attentive to:

Caution or Warning
Usually advises against some action which could result in undesired or
detrimental consequences.

Point to Remember
Highlights a key feature, point, or step which is noteworthy. Keeping
these in mind will simplify or enhance device usage.

Tip
An idea or suggestion to improve efficiency or enhance usefulness.

Information
Information regarding a particular technology or concept.

Regulatory Requirements / Exigences Réglementaires

To satisfy FCC RF exposure requirements for mobile transmitting devices, a separation distance of 23cm or more should be maintained
between the antenna of this device and persons during device operation. To ensure compliance, operations at closer than this distance is not
recommended. The antenna being used for this transmitter must not be co-located in conjunction with any other antenna or transmitter.

Pour satisfaire aux exigences de la FCC d'exposition RF pour les appareils mobiles de transmission, une distance de séparation de 23cm ou
WARNING plus doit être maintenue entre l'antenne de cet appareil et les personnes au cours de fonctionnement du dispositif. Pour assurer le respect,
les opérations de plus près que cette distance n'est pas recommandée. L'antenne utilisée pour ce transmetteur ne doit pas être co-localisés
en conjonction avec toute autre antenne ou transmetteur.

MAXIMUM EIRP
FCC Regulations allow up to 36dBm Effective Isotropic Radiated Power (EIRP). Therefore, the sum of the transmitted power (in dBm), the
cabling loss and the antenna gain cannot exceed 36dBm.

WARNING Réglementation de la FCC permettra à 36dBm Puissance isotrope rayonnée équivalente (EIRP). Par conséquent, la somme de la puissance
transmise (en dBm), la perte de câblage et le gain d'antenne ne peut pas dépasser 36dBm.

EQUIPMENT LABELING / ÉTIQUETAGE DE L'ÉQUIPEMENT

This device has been modularly approved. The manufacturer, product name, and FCC and Industry Canada identifiers of this product must
appear on the outside label of the end-user equipment.

Ce dispositif a été approuvé de façon modulaire. Le fabricant, le nom du produit, et la FCC et de l'Industrie du Canada identifiants de ce
WARNING produit doit figurer sur l'étiquette à l'extérieur de l'équipement de l'utilisateur final.

SAMPLE LABEL REQUIREMENT / EXIGENCE D'ÉTIQUETTE :

BulletPlusAC-CAT9(Contains):

FCCID: RI7LM940
IC: 5131A-LM940

This device complies with Part 15 of the FCC Rules.

Operation is subject to the following two conditions:
(1) this device may not cause harmful interference,
and (2) this device must accept any interference
received including interference that may cause
undesired operation.

Please Note: These are only sample labels; different products contain different identifiers. The actual identifiers should be seen on
your devices if applicable. S'il vous plaît noter: Ce sont des exemples d'étiquettes seulement; différents produits contiennent des
identifiants différents. Les identifiants réels devrait être vu sur vos périphériques le cas échéant.

Revision Description Initials Date

0.0.0 Preliminary. (Firmware v1.5.0-r1006) PEH 02/2018
1.0.0 First Release (v1.5.0-r1007-35) PEH 04/2018

1.0 Overview ......................................................................................................... 9

1.1 Performance Features ....................................................................................................... 9
1.2 Specifications ..................................................................................................................... 10

2.0 QUICK START ................................................................................................. 12

2.1 Installing the SIM Card ....................................................................................................... 12
2.2 Getting Started with Cellular .............................................................................................. 12

3.0 Hardware Features ......................................................................................... 16

3.1 BulletPlusAC ...................................................................................................................... 16
3.1.1 BulletPlusAC Mechanical Drawings ......................................................................... 17
3.1.2 BulletPlusAC Connectors & Indicators ..................................................................... 18
3.1.2.1 Front & Top ................................................................................................ 18
3.1.2.2 Rear & Side................................................................................................ 19

4.0 Configuration.................................................................................................. 20
4.0 Web User Interface ........................................................................................................... 20
4.0.1 Logon Window .......................................................................................................... 21
4.1 System ............................................................................................................................... 22
4.1.1 Summary .................................................................................................................. 22
4.1.2 Settings ..................................................................................................................... 23
Host Name................................................................................................................ 23
Console Timeout ...................................................................................................... 23
Date/Time ................................................................................................................. 24
NTP Server Settings ................................................................................................. 25
4.1.3 Services .................................................................................................................... 26
FTP ........................................................................................................................... 26
Telnet ........................................................................................................................ 26
HTTP/HTTPS ........................................................................................................... 26
4.1.4 Keepalive .................................................................................................................. 28
4.1.5 Maintenance ............................................................................................................. 30
Firmware Upgrade .................................................................................................... 30
Reset to Default ........................................................................................................ 30
Backup & Restore Configurations ............................................................................ 31
4.1.6 Reboot ...................................................................................................................... 32
4.2 Network ............................................................................................................................. 33
4.2.1 Status ....................................................................................................................... 33
4.2.2 LAN ........................................................................................................................... 34
4.2.3 WAN ......................................................................................................................... 39
4.2.4 DHCP (MAC Binding) ............................................................................................... 41
4.2.5 DDNS ....................................................................................................................... 42
4.2.6 Routes ...................................................................................................................... 44
4.2.7 VRRP (Virtual Router Redundancy Protocol) .......................................................... 46
4.2.8 Ports (Switch) ........................................................................................................... 47
4.2.9 Bandwidth (Throttling Control) .................................................................................. 48
4.2.10 Device List ............................................................................................................... 49
4.2.11 Cloud Filter (Content/Security Filter) ....................................................................... 50
4.2.12 WebFilter (MAC/Network Content Filter) ................................................................ 51
4.2.13 LoadBalancer .......................................................................................................... 53

4.3 IPv6 .................................................................................................................................... 55

4.3.1 Status ....................................................................................................................... 55
4.3.2 Setup ........................................................................................................................ 56
4.3.3 Firewall6 ................................................................................................................... 62
4.3.4 OpenVPN6 ............................................................................................................... 65
4.3.5 Route6 ...................................................................................................................... 72
4.4 WWAN ............................................................................................................................... 73
4.4.1 Status ....................................................................................................................... 73
4.4.2 Settings ..................................................................................................................... 74
Dual Cards Management ......................................................................................... 75
APN .......................................................................................................................... 76
4.4.3 SMS .......................................................................................................................... 78
4.4.4 SMS Config .............................................................................................................. 78
4.4.5 Data Usage ............................................................................................................... 83
Data Usage History .................................................................................................. 86
4.5 Wireless ............................................................................................................................. 87
4.5.1 Status ....................................................................................................................... 87
4.5.2 Radio1 ...................................................................................................................... 88
Radio1 Phy Configuration ........................................................................................ 88
Radio Virtual Interface .............................................................................................. 91
4.5.3 Hotspot ..................................................................................................................... 95
4.6 Firewall ............................................................................................................................. 99
4.6.1 Summary .................................................................................................................. 99
4.6.2 General ..................................................................................................................... 100
4.6.3 Port Forwarding ........................................................................................................ 102
4.6.4 MAC-IP List .............................................................................................................. 105
4.6.5 Rules ........................................................................................................................ 107
4.6.6 Firewall Default ......................................................................................................... 109
4.7 VPN .................................................................................................................................. 110
4.7.1 Summary .................................................................................................................. 110
4.7.2 Gateway to Gateway ................................................................................................ 111
4.7.3 L2TP Server/Client ................................................................................................... 117
4.7.4 OpenVPN ................................................................................................................. 121
OpenVPN Server ...................................................................................................... 121
OpenVPN Client ....................................................................................................... 125
4.7.5 VPN Users ................................................................................................................ 127
4.7.6 Certificate Management ........................................................................................... 128
4.8 Router ................................................................................................................................ 129
4.8.1 RIPV2 ....................................................................................................................... 129
4.8.2 OSPF ........................................................................................................................ 130
4.9 Serial .................................................................................................................................. 131
4.9.1 Status ...................................................................................................................... 131
4.9.2 Settings ..................................................................................................................... 132
Data Baud Rate ........................................................................................................ 133
IP Protocol Config..................................................................................................... 135
TCP Client ........................................................................................................... 135
TCP Server .......................................................................................................... 135
TCP Client/Server ................................................................................................ 136
UDP Point-to-Point .............................................................................................. 136
SMTP Client ........................................................................................................ 136
PPP...................................................................................................................... 137
GPS Transparent Mode ....................................................................................... 138

4.10 I/O ....................................................................................................................................... 139

4.10.1 Settings ................................................................................................................... 139
4.11 GPS .................................................................................................................................... 141
4.11.1 Location ................................................................................................................... 141
4.11.2 Settings ................................................................................................................... 142
4.11.3 Report...................................................................................................................... 143
4.11.4 GPSGate ................................................................................................................. 145
4.11.5 UDPTracker............................................................................................................. 148
4.11.6 Recorder.................................................................................................................. 150
4.11.7 Load Record ............................................................................................................ 152
4.11.8 TAIP ........................................................................................................................ 154
4.12 Apps .................................................................................................................................. 156
4.12.1 Modbus ................................................................................................................... 156
4.12.1.1 TCP Modbus ............................................................................................ 156
4.12.1.2 Serial (COM) Modbus .............................................................................. 158
4.12.1.3 Modbus Data Map .................................................................................... 159
4.12.2 Netflow Report ........................................................................................................ 160
4.12.3 Local Monitor .......................................................................................................... 162
4.12.4 Event Report ........................................................................................................... 163
4.12.4.1 Configuration ............................................................................................ 163
4.12.4.2 Message Structure ................................................................................... 164
4.12.4.2 Message Payload ..................................................................................... 165
4.13 Diag .................................................................................................................................... 166
4.13.1 Ping ......................................................................................................................... 166
4.13.2 Traceroute ............................................................................................................... 166
4.13.3 Iperf ......................................................................................................................... 167
4.14 Admin ................................................................................................................................ 169
4.14.1 Users ....................................................................................................................... 169
4.14.2 Authentication (RADIUS) ........................................................................................ 171
4.14.3 NMS ........................................................................................................................ 171
4.14.4 SNMP ...................................................................................................................... 175
4.14.5 Discovery ................................................................................................................ 179
4.14.6 Logout ..................................................................................................................... 180

5.0 AT Command Line Interface .......................................................................... 181

5.1 AT Command Overview ................................................................................................... 181
5.1.1 Serial Port ............................................................................................................... 181
5.1.2 Telnet ...................................................................................................................... 182
5.2 AT Command Syntax ....................................................................................................... 183
5.3 Supported AT Commands ............................................................................................... 184

Appendices .......................................................................................................... 202

Appendix A: Serial Interface ....................................................................................................... 202
Appendix C: Port Forwarding Example ...................................................................................... 203
Appendix D: VPN (Site to Site) Example ................................................................................... 205
Appendix E: Firewall Rules Example ......................................................................................... 207
Appendix G: Troubleshooting ..................................................................................................... 209

The all new BulletPlusAC-CAT9 is a high-performance Cellular Ethernet & Serial Gateway
w/WiFi, equipped with 6x RJ45 Gigabit Ethernet Ports (4 LAN / 2 WAN), dual SIM capability,
2x Programmable I/O, Standalone GPS, 802.11bgna/ac WiFi, and dual serial communication
ports.
The BulletPlusAC-CAT9 utilizes the cellular infrastructure to provide network access to
wired or wireless devices anywhere cellular coverage is supported by a cellular carrier.
The BulletPlusAC uses LTE Advanced with Carrier Aggregation for provide up to 600 Mbps
of cellular data.

Providing reliable Cellular Ethernet bridge functionality as well gateway service for most
equipment types which employ an RS232/485, RJ45 or WiFi interface, the BulletPlusAC can
be used in a limitless types of applications such as:

• High-speed backbone • Legacy network/device

• IP video surveillance migration
• Voice over IP (VoIP) • SCADA (PLC’s, Modbus,
• Facilitating internetwork Hart)
wireless communications • Mobile Internet Access
• WiFi Hotspot

1.1 Performance Features

Key performance features of the BulletPlusAC-CAT9 include:

• Fast, reliable connection speeds to LTE/HSPA/HSPA+ Networks

• 2x Programmable Analog/Digital Inputs

• DMZ and Port Forwarding

• 6x 10/100/1000 Ethernet Ports (2WAN/4LAN)

• Standalone GPS (TCP Server/UDP/SMTP Reporting)

• User interface via local console, telnet, web browser

• Compatibility with virtually all PLCs, RTUs, and other RS232/485 serial devices.

• Local & remote wireless firmware upgradable

• User configurable Firewall with IP/MAC ACL

• IP/Sec secure VPN and GRE Tunneling

• IPv6 Addressing, Firewall, OpenVPN and Routing Capabilities

• Industrial Temperature Rating (-40oC to +85oC)

1.2 Specifications

BulletPlusAC-CAT9

BulletPlusAC-CAT9 Bands: LTE FDD LTE TDD HSPA+ Bands 1, 2, 3, 4, 5, 7, 8, 12, 13,
17, 20, 25, 26, 28, 29, 30, 66, 38, 40, 41 1, 2, 4, 5, 8
LTE 2DL carrier aggregation combinations
North America
B2+B2, B2+B4, B2+B5, B2+B12, B2+B13, B2+B17, B2+B29,
B2+B30, B4+B4, B4+B5, B4+B7, B4+B12, B4+B13, B4+B17,
B4+B29, B4+B30, B5+B30, B12+B12, B12+B30, B25+B25,
B25+B26, B25+B41, B26+B41, B29+B30, B41+B41
LTE 3DL carrier aggregation combinations
North America
B2+B2+B12/17, B2+B2+B13, B2+B2+B4, B2+B4+B5,
B2+B4+B12, B2+B4+B13, B2+B4+B29, B2+B5+B30,
B2+B12+B12, B2+B12+B30, B2+B29+B30, B4+B4+B5,
B4+B4+B7, B4+B4+B12, B4+B4+B13, B4+B5+B30,
B4+B12+B12, B4+B12+B30, B4+B29+B30, B25+B26+B41,
B25+B41+B41, B26+B41+B41, B41+B41+B41

BulletPlusAC-CAT9 Features: LTE: Up to 600 Mbps DL w/3x CA DL, 256QAM DL

Up to 75 Mbps UL w/UL 64 QAM
HSPA+ Rel. 8: DL/UL up to 42/11,5 Mbps
General
Serial Interface: Data: RS232, RS485, RS422
Console: RS232
Serial Baud Rate: 300bps to 921kbps

USB*: USB 2.0

(*Future)

Wi-Fi Module - RF specification frequency range 2400 – 2483.5 MHz

5745 -- 5825 MHz
Tx power: 0dBm to 30dBm adjustable
802.11 b/g/n/a/ac standard
sensitivity: -97dBm@ 1Mbps
spread method: OFDM, DSSS
modulation: QPSK/16QAM/64QAM
channel bandwidth: 20 MHz
access point, client

Ethernet: 4 x LAN 10/100/1000 BaseT, Auto - MDI/X, IEEE 802.3

2 x WAN 10/100/1000 BaseT, Auto - MDI/X, IEEE 802.3

WIFI: 802.11bgna/ac - Access Point & Client (Station) Modes

I/O: 2x Programmable Analog/Digital Inputs or up to 2x Digital Outputs

60mA current sink on open drain

SIM Card: 2x Micro SIM 1.8 / 3.0V 3FF size

PPP Characteristics: Dial on Demand/Idle Time

Network Protocols: IPv4, IPv6, TCP, UDP, TCP/IP, TFTP, ARP, ICMP, DHCP, HTTP,
HTTPS, SSH, SNMP, FTP, DNS, Serial over IP

General Specifications (Continued)

Environmental
Operation Temperature: -40oF(-40oC) to 185oF(850C)

Humidity: 5% to 95% non-condensing

Mechanical
Dimensions: 5.05”” (128mm) X 3.0” (76mm) X 1.2” (30mm)

Weight: Approx. 350 grams

Connectors: Antenna(s): CELL, DIV, GPS: SMA Female

3x WiFi: RP-SMA Female
Data, etc: Data: DE-9 Female (RS232/RS485)
Console: DE-9 Female (RS232)
Ethernet: 6x RJ-45
PWR, I/O: Power: SMT: 4-Pin Micro MATE-N-LOK AMP 3-794618-4
Mating Connector: 4-Pin Micro MATE-N-LOK AMP 794617-4

GPS Antenna Requirements:

- Frequency Range: 1575.42 MHz (GPS L1 Band)
- Bandwidth: +/- 2 MHz
- Total NF < 2.5dB
- Impedance 50ohm
- Amplification (Gain applied to RF connector): 19dB to 23dB
- Supply voltage 1.5V to 3.05V
- Current consumption - Typical 20mA (100mA max)
- Cellular Power Antenna Rejection + Isolation:
- 824 - 915 MHz > 10dB
- 1710 - 1785 MHz > 19dB
- 1850 - 1980 MHz > 23dB

This QUICK START guide will walk you through the setup and process required to access the
WebUI configuration window and to establish a basic wireless connection to your carrier.

Note that the units arrive from the factory with the Local Network setting configured as
‘Static’ (IP Address 192.168.168.1, Subnet Mask 255.255.255.0), in DHCP server mode.

2.1 Installing the SIM Card

✓ Before the BulletPlusAC can be used on a cellular network a valid SIM Card for your Wire-
less Carrier must be installed. Insert the SIM Card into the slot as shown, the top SIM
slot is for SIM1: (The contacts should face down, and the notch to the right)

To reset to factory SIM Card Slot (s)

defaults, press and hold
the CFG button for 8
seconds with the
BulletPlusAC powered up.
The LED’s will flash
quickly and the modem
will reboot with factory
defaults.
2.2 Getting Started with Cellular

✓ Connect the Antenna’s to the applicable ANTENNA jack’s of the BulletPlusAC.

✓ Connect the power connector to the power adapter and apply power to the unit, the CPU
LED will flash during boot-up, once on solid, proceed to the next step.

Use the MHS-supplied

power adapter or an
equivalent power source.

7-30VDC

✓ Connect A PC configured for DHCP directly to a LAN port of the BulletPlusAC, using an
Ethernet Cable. If the PC is configured for DHCP it will automatically acquire a IP Address
from the BulletPlusAC.

✓ Open a Browser Window and enter the IP address 192.168.168.1 into the address bar.

192.168.168.1
The factory default network
settings:

IP: 192.168.168.1
Subnet: 255.255.255.0
Gateway: 192.168.168.1
✓ The BulletPlusAC will then ask for a Username and Password. Enter the factory defaults
listed below.

The Factory default login:

User name: admin

Password: admin

You will be required to change the

default password when you login
for the first time.

The factory default login:

User name: admin

Subnet: admin

It is always a good idea to

change the default admin
login for future security.

✓ Once successfully logged in, the System Summary page will be displayed.

Auto APN: The BulletPlusAC

will attempt to detect the
carrier based on the SIM card
installed and cycle through a
list of commonly used APN’s
✓ If the SIM card is installed, but an APN has not been specified. The BulletPlusAC will try
to provide quick network to use Auto APN (default) which may provide quick network connectivity, but may not
connectivity. work with some carriers, or with private APN’s.

✓ To set or change the APN, click on the WWAN > Settings tab and enter the APN supplied
by your carrier in the APN field. Some carriers may also require a Username and Pass-
word.

✓ On the WWAN > Status Tab, verify that a WAN IP Address has been assigned by your
carrier. It may take a few minutes, so try refreshing the page if the WAN IP Address
doesn’t show up right away. The Activity Status should also show “Connected”.

✓ If you have set a static IP on your PC, you may need to add the DNS Servers shown in
the WWAN Status Menu to you PC to enable internet access.
Ensure the default
passwords are changed. ✓ Congratulations! Your BulletPlusAC is successfully connected to your Cellular Carrier.

✓ To access devices connected to BulletPlusAC remotely, one or more of the following must
be configured: Port Forwarding, DMZ or VPN Tunnel.

✓ Ensure that all default passwords are changed to limit access to the modem.

Set up appropriate firewall

rules to block unwanted ✓ For best practices and to limit data charges it is critical to properly set up the
incoming data. firewall. (Especially important for Public Static IP addresses.)

3.1 BulletPlusAC
The BulletPlusAC is a fully-enclosed unit ready to be interfaced to external devices with standard
connectors as discussed below.

Image 3-1: BulletPlusAC

The BulletPlusAC Hardware Features Include:

• Standard Connectors for:

• 6x 10/100/1000 Ethernet Ports (RJ45 - 2xWAN / 4xLAN)
• 2x Serial Port (DB9) - 1 Console/Data (RS232), 1 Data (RS232/RS485)
• 4-Pin: MATE-N-LOK Type Connector for Power / I/O 1/2
• Cellular Antenna (Main/DIV - SMA Female Antenna Connection x2)
• GPS Antenna (SMA Female Antenna Connection)
• WiFi Antenna (RP-SMA Female Antenna Connection x3)
• Status/Diagnostic LED’s for RSSI(x3), GPS, WIFI, Status
• Dual SIM (Micro-SIM (3FF)) Card Slots
• MicroSD Slot (Internal/Future Development)
• CFG Button for factory default / firmware recovery operations
• USB 2.0 Connector (Internal/Future Development)

3.1.1 Mechanical Drawing

3.1.2 Connectors and Indicators

3.1.2.1 Front & Top

On the front of the BulletPlusAC is the CFG Button, USB Port, Main, Diversity, GPS & WIFI Antenna
Connectors and SIM Card Slots. The top of the Bullet are the status indicators, RSSI, GPS, WIFI and
Status.

Drawing 3-1: Bullet Front & Top View

The USB port is a future development to be available in later releases of firmware.

CFG (Button) - Holding this button while powering-up the BulletPlusAC will boot the unit into FLASH FILE
SYSTEM RECOVERY mode. The default IP address for system recovery (only - not for normal access to
the unit) is static: 192.168.1.39. Hold for 1 second for httpd recovery mode, 5 seconds for tftp recovery
mode, or 10 seconds for master reset. If button is held for longer than 15 seconds the button will be ig-
nored.

If the unit has been powered-up for some time (>1 minute), depressing the CFG Button for ~10 seconds
(unit will reboot) will result in FACTORY DEFAULTS being restored, including the static factory IP address.
This IP address is useable in a Web Browser for accessing the Web User Interface.

Receive Signal Strength Indicator (RSSI) - As the received signal strength increases, starting
with the furthest left, the number of active RSSI LEDs increases.
The factory default network
settings: Tx(Red)/Rx(Green) LED’s - The Tx/Rx LED’s indicate carrier (cellular) traffic.
IP: 192.168.168.1
Subnet: 255.255.255.0
Gateway: 192.168.168.1
GPS - Indicates that the optional standalone Signal RSSI1 RSSI2 RSSI3
GPS module has synchronized and is ready (dBm)
for use.
(-85, 0] ON ON ON
Status LED - The Power/Status LED indi- (-90, -85] ON ON FLASH
cates that power has been applied to the
module. Flashing indicates normal operation. (-95, -90] ON ON OFF
(-100, -95] ON FLASH OFF
SIM Card - This slot is used to install SIM
card(s) provided by the cellular carrier. Ensure (-105, -100] ON OFF OFF
that the SIM card is installed properly by pay- (-109, -105] FLASH OFF OFF
ing attention to the diagram printed next the
SIM card slot. Other SCANNING SCANNING SCANNING

Table 3-1: RSSI LED’s

3.1.2.2 Rear & Side View

On the sides of the BulletPlusAC are the Console (RS232) & Data Ports (RS232/485) and on the back are
the Power, Ethernet (LAN/WAN) and the 2x Programmable I/O.

Drawing 3-2: BulletPlusAC Rear & Side View

The Serial Port (RS232/485 DCE) on the side of the unit is Pin RS485 RS485
used for RS232/485 Serial Data based field devices at 300 No. RS232 Half-Dup
Full-Dup
bps to 921kbps.
1 DCD
The Console Port (RS232 only) on the opposite side of the
unit can be used for console AT commands or can be 2 RXD TX- Data-
configured as a second data port. The default console 3 TXD RX+
settings are 115.2/8/N/1.
4 DTR
The Ethernet Ports (2LAN/WAN) are 10/100 Mbps RJ-45
5 Ground
interfaces used to connect devices Ethernet based field
devices. 6 DSR

Programmable I/O– The Bullet has 2 programmable Analog/ 7 RTS RX-

Digital Inputs or 2 Digital Outputs. Maximum recommended 8 CTS TX+ Data+
load for the output pin is 150mA @ 30 Vdc (Vin).
9 N/C
Vin+/Vin– is used to power the unit. The input Voltage range
is 7-30 Vdc. Table 3-2: Data RS232/485 Pin Assignment

PoE – The BulletPlusAC, if equipped, can also be powered

using Passive PoE on the Ethernet Port (WAN1), via a PoE injector.

Caution: Using a power Ethernet RJ45 Connector Pin Number

supply that does not
provide proper voltage Vin+ Vin-
may damage the modem. Source
1 2 3 4 5 6 7 8 IO-1 IO-2
Voltage

9 - 30 Vdc Data Data Data DC+ DC+ Data DC- DC-

Table 3-3: Ethernet PoE Connections

4.0 Web User Interface

Image 4-0-1: WebUI

The factory default network Initial configuration of an BulletPlusAC using the Web User (Browser) Interface (Web UI) method involves
settings: the following steps:
IP: 192.168.168.1
Subnet: 255.255.255.0 • configure a static IP Address on your PC to match the default subnet or if your PC is configured for
Gateway: 192.168.168.1 DHCP, simply connect a PC to a LAN port of the BulletPlusAC and it will be assigned a IP address
automatically.

• connect the BulletPlusAC (LAN) port to your PC using an Ethernet cable

• apply power to the BulletPlusAC and wait approximately 60 seconds for the system to load

• open a web browser and enter the factory default IP address(192.168.168.1) of the unit:

• logon window appears; log on using default Username: admin Password: admin

• use the web browser based user interface to configure the BulletPlusAC as required.

• refer to Section 2.0: Quick Start for step by step instructions.

In this section, all aspects of the Web Browser Interface, presented menus, and available configuration
options will be discussed.

4.0.1 Logon Window

Upon successfully accessing the BulletPlusAC using a Web Browser, the Logon window will appear.

For security, do not allow the

web browser to remember the
User Name or Password.

Image 4-0-2: Logon Window

The factory default User Name is: admin

The default password is: admin

Note that the password is case sensitive. It should be changed (discussed further along in this section),
but once changed, if forgotten, may not be recovered.
It is advisable to change the
login Password. Do not
FORGET the new password When entered, the password appears as ’dots’ as shown in the image below. This display format prohibits
as it cannot be recovered. others from viewing the password.

The ‘Remember my password’ checkbox may be selected for purposes of convenience, however it is
recommended to ensure it is deselected - particularly once the unit is deployed in the field - for one
primary reason: security.

If the BulletPlusAC is restored to factory defaults the password is also restored to the original default
password.

It is required to change the password upon initial login, once the password is changed, it will be
required to login to the unit once again with the updated password.

4.1 System
The main category tabs located at the top of the navigation bar separate the configuration of the
BulletPlusAC into different groups based on function. The System Tab contains the following sub menu’s:

• Summary - Status summary of entire radio including network settings,

version information, and radio connection status
• Settings - Host Name, System Log Settings, System Time/Date
• Services - Enable/Disable and configure port numbers for SSH, Telnet, HTTP
and HTTPS services
• Keepalive - Configure System keep alive to ensure network/internet access.
• Maintenance - Remote firmware Upgrades, reset to defaults, configuration backup
and restore.
• Reboot - Schedule reboots and/or immediately reboot the system.

4.1.1 System > Summary

The System Summary screen is displayed immediately after initial login, showing a summary and status of
all the functions of the BulletPlusAC in a single display. This includes information about the System,
WWAN (Cellular Carrier), LAN/WAN network status and wireless (WIFI) status.

The System Summary page

will Auto Refresh, each time
this happens a small amount
of data is used. If viewing
over the Cellular Network this
data could add up to a
significant amount over a long
period of time.

Image 4-1-1: System Summary Window

4.1.2 System > Settings

System Settings

Options available in the System Settings menu allow for the configuration of the Host Name, Description,
Console Timeout and System Log server settings.

Image 4-1-2: System Settings > System Settings

Host Name/Description
The Host Name is a convenient identifier for a specific BulletPlusAC Values (characters)
unit. This feature is most used when accessing units remotely: a
convenient cross-reference for the unit’s WAN/Carrier IP address. This BulletPlusAC (varies)
name appears when logged into a telnet session, or when the unit is
reporting into Microhard NMS System. up to 30 characters
The description provides an additional field for text characters, but is
not displayed anywhere but in this field.

Console Timeout (s)

This value determines when a console connection (made via Console Values (seconds)
Port or Telnet) will timeout after becoming inactive.
60
0-65535

CFG Reset to Default Button

Enabled by default, when the CFG button on the front of the Values (Selection)
BulletPlusAC is held down for 10s while the unit is powered up, the
unit will reset and all settings will be reset to factory defaults. When Enable
disabled the unit will reset, but the settings will not be overwritten. Disable

System Syslog Server IP

The BulletPlusAC can report system level events to a third party Syslog IP Address
server, which can be used to monitor events reported by the BulletPlusAC.
0.0.0.0
The system syslog can also be viewed locally by using the following URL
and inserting the BulletPlusAC IP Address:

http://xxx.xxx.xxx.xxx/cgi-bin/webif/request.sh?syslog

System Syslog Server Port

Enter the UDP listening port of the Syslog Server. The default port number UDP Port
is generally 514, but could vary from Server to Server.
514

Time Settings

The BulletPlusAC can be set to use a local time source, thus keeping time on its own, or it can be
configured to synchronize the date and time via a NTP Server. The options and menus available will
change depending on the current setting of the Date and Time Setting Mode, as seen below.

Network Time Protocol (NTP)

can be used to synchronize the
time and date or computer
systems with a centralized,
referenced server. This can
help ensure all systems on a
network have the same time
and date.

Image 4-1-3: System Settings > Time Settings

Date and Time Setting Mode

Select the Date and Time Setting Mode required. If set for ‘Use Local Values (selection)
Time’ the unit will keep its own time and not attempt to synchronize
with a network server. If ‘Synchronize Date And Time Over Network’ is Use Local Time Source
selected, a NTP server can be defined. Synchronize Date And Time
Over Network

Date
The calendar date may be entered in this field. Note that the entered Values (yyyy-mm-dd)
value is lost should the BulletPlusAC lose power for some reason.
2015.04.01 (varies)

Time
The time may be entered in this field. Note that the entered value is Values (hh:mm:ss)
lost should the BulletPlusAC lose power for some reason.
11:27:28 (varies)

Timezone
If connecting to a NTP time server, specify the timezone from the Values (selection)
dropdown list.
User Defined (or out of date)

POSIX TZ String
This displays the POSIX TZ String used by the unit as determined by Values (read only)
the timezone setting.
(varies)

NTP Server
Enter the IP Address or domain name of the desired NTP time server. Values (address)
pool.ntp.org

NTP Port
Enter the IP Address or domain name of the desired NTP time server. Values (port#)
123

NTP Client Interval

By default the modem only synchronizes the time and date during Values (seconds)
system boot up (default: 0), but it can be modified to synchronize at a
regular interval. This process does consume data and should be set 0
accordingly.

4.1.3 System > Services

Services in the BulletPlusAC can be disabled/enable as well as changing the default ports used for either
security considerations or resource considerations. The changes are applied after a reboot. There are also
options to load or generate a HTTPS Certificate and control SSH options.

Image 4-1-4: System > Services

FTP Upgrade
The FTP service can be enabled/disabled using the Services Status Values (checkbox)
Menu. The FTP service is used for firmware recovery operations.
Enable / Disable

Web UI
The default web server port for the web based configuration tools used Values (selection)
in the modem is port 80 (http) and port 443 (HTTPS).
HTTP/HTTPS
Change as required, but keep in mind that if a non standard port is HTTP
used, it must be specified in a internet browser to access the unit. HTTPS
(example: http://192.168.168.1:8080).

Telnet
Using the Telnet Service Enable/Disable function, you can disable the Values (port)
Telnet service from running on the modem. The port used by the
Telnet service can also be modified. The default is 23. 23

SSH
Using the SSH Service Enable/Disable function, you can disable the Values (port)
SSH service (Port 22) from running on the modem. The port used by
the SSH service can also be modified. The default is 22. 22

4.1.4 System > Keepalive

The Keep alive tab allows for the configuration of the keep alive features of the BulletPlusAC. The
BulletPlusAC can check for activity on the Wireless Interface, The CLI (Command Line Interface), The
WEBUI, and ensure that they are working as expected. In the event that the BulletPlusAC does not detect
activity on a interface it will reboot to attempt to resolve any issues that may have occurred.

Image 4-1-5: System > Keepalive

Keep Alive
Enable or Disable the keep alive functions of the modem. If it is Values (Selection)
disabled, the user can configure the Traffic Check separately. The unit
will monitor traffic on the Cell interface. Enable / Disable

Traffic Check
Monitors traffic on the Cell interface as well as the WAN interface if the Values (Selection)
WAN port is configured as independent in the Network Settings. If the
Bullet detects that there is no activity on the above interfaces it will Enable / Disable
attempt a ICMP, HTTP or DNS Lookup as configured below to
determine if service has been lost.

CLI Activity
Monitors the activity of CLI. If the console isn't accessed within the Values (Selection)
certain period which is specified by Console Timeout in System-
Settings web page, the modem will send out the connection request. Enable / Disable

Web UI Activity
Monitors the activity of Web UI. If the Web UI isn't accessed or Values (Selection)
refreshed within the certain period which is specified by Console
Timeout in System-Settings web page, the modem will send out the Enable / Disable
connection request.

Type
Once the connection is lost, the modem will send one of the requests Values (Selection)
to the remote host to determine the connection status. If the modem
fails to get the response, it will re-send the request within the seconds ICMP
specified by Keepalive Interval below: HTTP
DNS Lookup
ICMP: Send a "ping" request
HTTP: Send a "wget" request to a HTTP server
DNS Lookup: Send a "dslookup" request to a DNS server

Host Name
Specify a IP Address or Domain that is used to test the modems Values (IP or Domain)
connection. The modem will send out the connection requests to the
specified Host. 8.8.8.8

Keepalive Interval
The Interval value determines the frequency, or how often, the unit will Values (seconds)
send out PING messages to the Host. The BulletPlusAC will first
attempt to re-initialize the cellular model before performing a full 300
system reboot, thus the interval may be delayed by up to 120 seconds)

Keepalive Retry
The Keepalive Retry is the maximum number of connection failures Values (number)
such as “Host unreachable” the unit will attempt before the unit will
reboot itself to attempt to correct connection issues. The default 20
number is 20, and valid value is from 10 to 200.

4.1.5 System > Maintenance

Firmware Upgrade

Occasional firmware updates may be released by Microhard Systems which may include fixes and/or new
features. The firmware can be updated wirelessly using the WebUI.

Image 4-1-6: Maintenance > Firmware Upgrade

Erase Current Configuration

Check this box to erase the configuration of the BulletPlusAC unit Values (check box)
during the upgrade process. This will upgrade, and return the unit to
factory defaults, including the default IP Addresses and passwords. unchecked
Not checking the box will retain all settings during a firmware upgrade
procedure.

Firmware Image
Use the Browse button to find the firmware file supplied by Microhard Values (file)
Systems. Select “Upgrade Firmware” to start the upgrade process.
This can take several minutes. (no default)

Reset to Default

The BulletPlusAC may be set back to factory defaults by using the Reset to Default option under System >
Maintenance > Reset to Default. *Caution* - All settings will be lost!!!

Backup & Restore Configuration

The configuration of the BulletPlusAC can be backed up to a file at any time using the Backup
Configuration feature. The file can the be restored using the Restore Configuration feature. It is always a
good idea to backup any configurations in case of unit replacement. The configuration files cannot be
edited offline, they are used strictly to backup and restore units.

Image 4-1-7: Maintenance > Reset to Default / Backup & Restore Configuration

Name this Configuration / Backup Configuration

Use this field to name the configuration file. The .config extension will automatically be added to the
configuration file.

Restore Configuration file / Check Restore File / Restore

Use the ‘Browse’ button to find the backup file that needs to be restored to the unit. Use the ‘Check
Restore File’ button to verify that the file is valid, and then the option to restore the configuration is
displayed, as seen above.

The Keep WWAN Settings box can be selected before the restore process is started, if it is selected the
BulletPlusAC will retain the current carrier settings and not overwrite them with the settings contained in
the backup file.

4.1.6 System > Reboot

The BulletPlusAC can be remotely rebooted using the System > Reboot menu. As seen below a button
‘Reboot now’ is provided. Once pressed, the unit immediately reboots and starts its boot up procedure. The
BulletPlusAC can also be restarted on a regular basis by setting up a daily/weekly/monthly schedules.

Image 4-1-8: System > Reboot

Status
Use this option to enable or disabled schooled reboots. If enabled the Values (selection)
BulletPlusAC will reboot at the interval defined below.
Disable / Enable

Type
Schedule daily, weekly or monthly reboots. Setting up a reboot Values (selection)
schedule can help keep the modem connected to the cellular carrier
and prevent physically rebooting the modem if located at a remote Reboot Daily
destination. Reboot Weekly
Reboot Monthly

Days / Time
If set for weekly, days are counted from Sunday to Saturday (0 to 6), Values (selection)
and if set to monthly the days are counted 1 to 31. Multiple days can
be specified by separating with a comma ‘,’. 1,
Set the time of day (24hr clock) for which to reboot the device.

4.2 Network

4.2.1 Network > Status

The Network Status display gives a overview of the currently configured network interfaces including the
Connection Type (Static/DHCP), IP Address, Net Mask, Default Gateway, DNS, and IPv4 Routing Table.

You can also view statistical information about the interfaces including Received (RX) and Transmitted
(TX) bytes and packets for each network interface.

Image 4-2-1: Network > Network Status

4.2.2 Network > LAN

LAN Port Configuration

The BulletPlusAC features 4x LAN ports that can be used for connection of devices on a local network.
The WAN1 port can also be bridged with the LAN therefore providing up to 5 LAN ports. By default the
LAN has a static IP Address assigned, 192.168.168.1. Also, by default the LAN is running a DHCP server
to provide IP Addresses to devices that are connected to the physical LAN port (s) (directly or via a switch).

DHCP: Dynamic Host

Configuration Protocol may
be used by networked Image 4-2-2: Network > Network LAN Configuration
devices (Clients) to obtain
unique network addresses LAN Add/Edit Interface
from a DHCP server.

Advantage:
The BulletPlusAC has the capability to have multiple SSID’s for the WiFi radio. New Interfaces can be
Ensures unique IP addresses added for additional SSID’s, providing, if required, separate subnets for each SSID. By default any
are assigned, from a central additional interfaces added will automatically assign IP addresses to connecting devices via DHCP.
point (DHCP server) within a Additional interfaces can only be used by additional WIFI SSID’s (virtual interfaces).
network.

Disadvantage:
The address of a particular
device is not ‘known’ and is
also subject to change.

STATIC addresses must be

tracked (to avoid duplicate
use), yet they may be
permanently assigned to a
device.

Image 4-2-3: Network > LAN Port Configuration

Spanning Tree (STP)

Within any IP network, each This option allows the BulletPlusAC to participate in the Spanning Tree Values (selection)
device must have its own protocol with other devices to prevent local loops. By default this is
unique IP address. disabled. Off / On

IGMP Snooping
This feature allows a network switch to listen in on the IGMP Values (selection)
conversation between hosts and routers. By listening to these
conversations the switch maintains a map of which links need which IP Enable
The factory default
multicast streams. Disable
network settings:

IP: 192.168.168.1 Connection Type

Subnet: 255.255.255.0
Gateway: 192.168.168.1 This selection determines if the BulletPlusAC will obtain an IP address Values (selection)
from a DHCP server on the attached network, or if a static IP address
will be entered. If a Static IP Address is chosen, the fields that follow DHCP
must also be populated. Static

IP Address
A SUBNET MASK is a bit
If ‘Static’ Connection Type is selected, a valid IPv4 Address for the Values (IP Address)
mask that separates the network being used must be entered in the field. If ‘DHCP’ is chosen
network and host (device) this field will not appear and it will be populated automatically from the 192.168.168.1
portions of an IP address. DHCP server.
The ‘unmasked’ portion
leaves available the
information required to
identify the various devices
on the subnet.
Netmask
If ‘Static’ Connection Type is selected, the Network Mask must be Values (IP Address)
entered for the Network. If ‘DHCP’ is chosen this field will not appear
and it will be populated automatically from the DHCP server. 255.255.255.0

DNS Mode
If the Connection Type is set to DHCP, you can use Auto for the DNS Values (selection)
Within any IP network, each
Mode and a DNS server will automatically be defined. If the connection
device must have its own type is set as static, DNS servers can be manually specified. Auto
unique IP address. Manual

Primary DNS / Secondary DNS

Set the primary and alternate DNS (Domain Name Server) for use by Values (selection)
devices on the LAN port, if required.
Auto
Manual

LAN DHCP

A BulletPlusAC may be configured to provide dynamic host control protocol (DHCP) service to all attached
(either wired or wireless (WiFi)-connected) devices. By default the DHCP service is enabled, so devices
that are connected to the physical Ethernet LAN ports, as well as any devices that are connected by WiFi
will be assigned an IP by the BulletPlusAC. The LAN DHCP service is available for each interface, and is
located in the add/edit interface menus.

Image 4-2-4: Network > DHCP Server

DHCP Server
The option is used to enable or disable the DHCP service for devices Values (selection)
Prior to enabling this service, connected to the LAN Port(s).
verify that there are no other
devices - either wired (e.g.
Enable / Disable
LAN) or wireless with an
active DHCP SERVER
service. (The Server issues Start IP Address
IP address information at the
request of a DHCP Client,
which receives the
Select the starting address DHCP assignable IP Addresses. The first Values (IP Address)
information.) octets of the subnet will be pre-set based on the LAN IP configuration,
and can not be changed. 192.168.168.100

Number of Address
Set the maximum number of IP addresses that can be assigned by the Values (integer)
BulletPlusAC.
150

Lease Time
The DHCP lease time is the amount of time before a new request for a Values (minutes)
network address must be made to the DHCP Server.
720

Alternate Gateway
Specify an alternate gateway for DHCP assigned devices if the default Values (IP Address)
gateway is not to be used.
(IP Address)

Preferred DNS Server

Specify a preferred DNS server address to be assigned to DHCP Values (IP Address)
devices.
DNS: Domain Name Service (IP Address)
is an Internet service that
translates easily-
remembered domain names
into their not-so-easily-
remembered IP addresses.
Alternate DNS Server
Being that the Internet is Specify the alternate DNS server address to be assigned to DHCP Values (IP Address)
based on IP addresses, devices.
without DNS, if one entered
the domain name (IP Address)
www.microhardcorp.com (for
example) into the URL line of
a web browser, the website
‘could not be found’).
WINS/NBNS Servers
Enter the address of the WINS/NBNS (NetBIOS) Server. The WINS Values (IP/Domain)
server will translate computers names into their IP addresses, similar
to how a DNS server translates domain names to IP addresses. (no default)

WINS/NBT Node Type

Select the method used to resolve computer names to IP addresses. Values (selection)
Four name resolution methods are available:
B-node: broadcast none
P-node: point-to-point b-node
M-node: mixed/modified p-node
H-node: hybrid m-node
h-node

VLAN Configuration
The BulletPlusAC has the capability to add multiple network interfaces, as such it may be desirable to
segment these different subnets. The BulletPlusAC features 802.1Q VLAN. 802.1Q VLAN uses tagging to
allow separation of network segments. Ports can belong to multiple VLANs. A Trunk port can be configured
to communicate with other VLAN switch by adding all configured VLANs to a single port. The native VLAN1
is used by default, it is important that any connected VLAN switch use the same Native VLAN.

Image 4-2-5: Network > VLAN

VLAN Name
VLAN names can be added to aid in VLAN identification (purpose, I,e Values
Engineering, Accounting, etc).
(no default)

VLAN ID
When adding a VLAN you must select a VLAN ID. Select between 2 Values
and 127 for valid VLAN IDs.
2 (2-127)

Port 1 - 2
Assign port to the current VLAN. Values (selection)
Excluded: Not part of the current VLAN Excluded
Tagged: In 802.1Q this assigns the current VLAN to the port, Tagged
Untagged: In port based VLAN this assigns a port to the current Untagged
VLAN.

Network
Allows the user the ability to assign specific configured network Values (selection)
interfaces to a specific VLAN. (802.1Q)
None
LAN
(additional network interfaces)

4.2.3 Network > WAN

WAN Configuration
The WAN configuration refers to the wired WAN connections on the BulletPlusAC. The WAN ports can be
used to connect the BulletPlusAC to other networks, the internet and/or other network resources.

Image 4-2-6: Network > WAN Configuration

DHCP: Dynamic Host

Configuration Protocol may Working Mode
be used by networked
devices (Clients) to obtain
unique network addresses
Use this to set the function of the physical WAN RJ45 port. If set to Values (selection)
from a DHCP server. independent WAN , the physical WAN port will operate as a standard
WAN port. Alternatively it can be configured to be bridged to the LAN, Independent WAN
Advantage: and operate as a second LAN port, or even as an independent LAN.
Ensures unique IP addresses Bridged with LAN Port
are assigned, from a central Independent LAN
point (DHCP server) within a
network.
Connection Type
Disadvantage:
The address of a particular
device is not ‘known’ and is
This selection determines if the BulletPlusAC will obtain an WAN IP Values (selection)
also subject to change. address from a DHCP server, or if a static IP address will be entered.
If a Static IP Address is chosen, the fields that follow must also be DHCP
STATIC addresses must be populated.
tracked (to avoid duplicate Static
use), yet they may be
permanently assigned to a
device. IP Address
If ‘Static’ Connection Type is selected, a valid IPv4 Address for the Values (IP Address)
network being used must be entered in the field. If ‘DHCP’ is chosen
this field will not appear and it will be populated automatically from the (no default)
DHCP server.

Netmask
If ‘Static’ Connection Type is selected, the Network Mask must be Values (IP Address)
entered for the Network. If ‘DHCP’ is chosen this field will not appear
and it will be populated automatically from the DHCP server. (no default)

Default Gateway
If the BulletPlusAC is integrated into a network which has a defined Values (IP Address)
gateway, then, as with other hosts on the network, this gateway’s IP
address will be entered into this field. If there is a DHCP server on the (no default)
network, and the Connection Type (see previous page) is selected to
be DHCP, the DHCP server will populate this field with the appropriate
gateway address.

Default Route
The Default Route parameter allows you to set this interface as the Values (selection)
default route in the routing table. This is result in all data being sent to
the WAN interface if there the destination network is not directly No / Yes
connected (LAN, WIFI etc), and no other route has been specified
(4G). In cases where the WAN is the primary connection this would be
set to Yes.

DNS Mode
Select between Manual or Auto for DNS server(s) for the WAN Values (selection)
interface. If set to Auto the BulletPlusAC will try to automatically detect
the DNS servers to use, which is normally the case when the WAN is Manual / Auto
DHCP. Manual required the DNS addresses to be known and entered
below.

Primary DNS
DNS (Domain Name Service) Servers are used to resolve domain Values (IP Address)
names into IP addresses. If set to auto and the Connection Type is set
for DHCP the DHCP server will populate this field and the value set (no default)
can be viewed on the Network > Status page. To add additional static
servers, enter them here.

Secondary DNS
DNS (Domain Name Service) Servers are used to resolve domain Values (IP Address)
names into IP addresses. If set to auto and the Connection Type is set
for DHCP the DHCP server will populate this field and the value set (no default)
can be viewed on the Network > Status page. To add additional static
servers, enter them here.

4.2.4 DHCP (MAC Binding)

In some applications it is important that specific devices always have a predetermined IP address. This
menu allows for MAC Address binding to a IP Address, so that whenever the device that has the specified
MAC address, will always get the selected IP address from the DHCP service. In this situation, all attached
(wired or wireless) devices can all be configured for DHCP, but still get a known IP address.

Image 4-2-7: Network > MAC Address Binding

Name
The name field is used to give the device a easily recognizable name. Values (characters)
(no default)

MAC Address
Enter in the MAC address of the device to be bound to a set IP Values (MAC Address)
address. Set the IP Address in the next field. Must use the format:
AB:CD:DF:12:34:D3. It is not case sensitive, but the colons must be (no default)
present.

IP Address
Enter the IP Address to be assign to the device specified by the MAC Values (IP Address)
address above.
(minutes)

Static Addresses
This section displays the IP address and MAC address currently assigned through the DCHP service, that
are bound by it’s MAC address. Also shown is the Name, and the ability to remove the binding by clicking
“Remove _______”.

Active DHCP Leases

This section displays the IP Addresses currently assigned through the DCHP service. Also shown is the
MAC Address, Name and Expiry time of the lease for reference. The ‘Release All’ button terminates all
active leased and requires all connected devices to request new network information (IP/Subnet/etc)

4.2.5 Network > DDNS

Unless a carrier issues a Static IP address, it may be desirable to use a Dynamic DNS (DDNS) service to
track dynamic IP changes and automatically update DNS services. This allows the use of a constant
resolvable host name for the BulletPlusAC.

Image 4-2-8: Network > DDNS

DDNS Status
This selection allows the use of a Dynamic Domain Name Server Values (Selection)
(DDNS), for the BulletPlusAC.
Enable
Disable

Network
If the BulletPlusAC is using a wired WAN (ISP) as well as a Cellular Values (Selection)
carrier, specific which will use the DNS service.
Auto
WWAN
WAN

Periodic Update
When the BulletPlusAC powers up and comes online it will report any Values (Selection)
IP Address changes to the selected DNS service. Additionally the
BulletPlusAC can periodically update the service as configured. 5 minutes
15 minutes
Some Dynamic DNS service providers do not allow periodic updates, 60 minutes
or updates for the same IP address. Please review your chosen 4 hours
service providers policy before enabling this feature. 8 hours
24 hours

Service
This is a list of supported Dynamic DNS service providers. Free and Values (selection)
premium services are offered, contact the specific providers for more
information. changeip ovh
dyndns regfish
eurodyndns tzo
Hn Zoneedit
Noip Customized
Ods DMSmadeEasy

User Name / Password

Enter a valid user name and password for the DDNS service selected Values (characters)
above.
(none)

Host
This is the host or domain name for the BulletPlusAC as assigned by Values (domain name)
the DDNS provider. Use the provided button to query the server (if
configured correctly) (none)

URL
This field appears when “custom dns” is selected. Values (characters)
How to fill URL: (none)
Use placeholder ${user} for username; ${pwd} for password; ${host}
for hostname; ${ip} for IP address.
eg: http://${user}:${pwd}@exampleddns.com/update?
hostname=${host}&myip=${ip}

4.2.6 Network > Routes

Static Routes Configuration

It may be desirable to have devices on different subnets to be able to talk to one another. This can be
accomplished by specifying a static route, telling the BulletPlusAC where to send data.

Image 4-2-9: Network > Routes

Name
Routes can be names for easy reference, or to describe the route Values (characters)
being added.
(no default)

Destination Subnet
Enter the network IP address for the destination subnet. Values (IP Address)
(192.168.168.0)

Gateway
Specify the Gateway used to reach the network specified above. Values (IP Address)
192.168.168.1

Netmask
Enter the Netmask for the destination network. Values (IP Address)
255.255.255.0

Metric
In some cases there may be multiple routes to reach a destination. Values (Integer)
The Metric can be set to give certain routes priority, the lower the
metric is, the better the route. The more hops it takes to get to a 255.255.255.0
destination, the higher the metric.

Interface
Define the exit interface. Is the destination a device on the LAN, LAN1 Values (Selection)
(If physical WAN port is bridged as an independent LAN), 3G/4G
(cellular), USB or the WAN? LAN / LAN1 / WAN / Cell / USB
None

4.2.7 Network > VRRP

The BulletPlusAC when paired with other VRRP enabled devices (another BulletPlusAC or compatible
devices) can provide redundant internet access for LAN devices by using VRRP (Virtual Router
Redundancy Protocol) as illustrated below. If a connected device needs to access the internet it will use
whichever virtual router has the highest priority, if that device is not available the next router with the higher
priority will router the traffic.

Internet

BulletPlusAC VRRP Router

LAN: 192.168.220.11 LAN: 192.168.220.12

Virtual Router IP:

192.168.220.211

PC/LAN Device
LAN: 192.168.220.50
Gateway: 192.168.220.211
Switch

Image 4-2-10: Network > VRRP

VRRP Status
Enable or disable the VRRP service on the BulletPlusAC. To change Values (Selection)
settings the VRRP service must be disabled (then submitted) and then
re-enabled. Enable / Disable

Virtual Router IP
This is the IP Address of the virtual router, this must be the same on all Values
devices participating in VRRP. This is the IP that any attached LAN
PC/device would use as its default gateway. 192.168.220.211

Virtual Router ID
This is the Router ID. Each router/ participating in VRRP should have Values
a router ID to distinguish between them.
2

Router Priority
This is the Router priority. This number to assigned to each router to Values
determine which router(s) will be used first or as the primary. The
higher the ID, the higher the priority. 150

4.2.8 Network > Ports

The Network > Ports menu can be used to determine the characteristics of the physical Ethernet interfaces
on the BulletPlusAC. As seen below the Mode (Auto/Manual), Auto-Negotiation, Speed (10/100Mbit/s) and
the Duplex (Full/Half) can all be configured on the BulletPlusAC.

Image 4-2-11: Network > Ports

4.2.9 Network > Bandwidth

The BulletPlusAC features Bandwidth Throttling, which allows the upload/download of connected
networks/users data speeds to be limited to a specified value. Network Bandwidth Throttling can be
implemented by each physical Ethernet interface as seen in the image below.

Image 4-2-12: Network > Bandwidth Throttling

Rule Name
The rule name is used as a reference to be able to help identify which Values (chars)
interface or network is attached to the affected network interface.
rule1

Network
Select the physical interface to be affected by the Bandwidth Throttling Values (selection)
as defined below.
(varies)

Upload Bandwidth Enable

Enable or disable uploading on the specified interface. This prevent Values (selection)
data from being uploaded to a server. (i.e uploading/sending videos or
other files to a server). Enable / Disable

Upload Bandwidth
Set the data limit (speed) for file uploads if uploads have been allowed Values (kbps)
using the Upload Bandwidth Enable.
10000

Download Bandwidth Enable

Enable or disable downloading on the specified interface. This prevent Values (chars)
data from being downloaded from a server. (i.e downloading files,
internet browsing etc). Enable / Disable

Download Bandwidth
Set the data limit (speed) for file downloads if downloads have been Values (kbps)
allowed using the Download Bandwidth Enable.
30000

4.2.10 Network > Device List

The Network > Device List shows the current ARP table for the network adapters. The MAC address and
IP address are shown, however not only DHCP assigned devices are listed in the device list, any devices,
even those statically assigned, that are connected through the local network interface (RJ45) are
displayed, including those connected through a hub or switch.

Image 4-2-13: Network > Device List

4.2.11 Network > Cloud Filter

The BulletPlusAC provides Cloud based content filtering and security using the third-party service by Open
DNS. OpenDNS is a service which offers free or premium DNS services with added security, phishing
protection and optional, advanced content filtering. To get started with OpenDNS an account must first be
created and activated with OpenDNS by visiting their website.

Image 4-2-14: Network > Cloud Filtering

OpenDNS Cloud Filter

Enable or Disable the OpenDNS cloud based filtering & security. Values (selection)
Enable / Disable

Disable Bypassing OpenDNS

If enabled all clients connected through the BulletPlusAC will be forced Values (selection)
to use OpenDNS and is subject to any and all content filtering and
security, to prevent circumvention. Enable / Disable

Status
When Cloud Filter is enabled, this status will be refreshed every 30 Values (selection)
seconds, showing the OpenDNS status. For OpenDNS to be active,
the status must be green and show "Connected to OpenDNS". Enable / Disable

User Name / Password

Enter the user name and password for the OpenDNS account that was Values (selection)
specified during registration and setup of the service.
Enable / Disable

4.2.12 Network > Webfilter

The BulletPlusAC can provide comprehensive content filtering, limiting access to specific websites and
other content. By MAC Address, the BulletPlusAC allows content to be filtering regardless of the assigned
IP address. Filtering can also be applied on a entire network, limiting access to any connected device.

Image 4-2-15: Network > Web Filtering

Webfilter Status
Enable or Disable the Webfilter of the BulletPlusAC. Values (selection)
Enable / Disable

Filter HTTPS
Check Filter HTTPS will redirect all port 443 traffic into the webfilter. Values (selection)
(Please make sure system DNS works.)
Enable / Disable

MAC Address Webfilter Default Setting

Default setting can be used for MAC addresses where all addresses Values
may be allowed (Allow) with a few exceptions, or where all addresses
are block (Deny), with a few exceptions. 00:00:00:00:00:00 Allow
After a Default rule has been applied, exceptions can be added by
adding MAC Webfilter Rules.

MAC Webfilter Rules

Add MAC Webfilter rules to apply filtering. If a default rule has been Values
added these rules can be used to specify exceptions. MAC Webfilter
Rules can also be applied to limit access to just one or a few websites Mac1
by simply adding the to the MAC Webfilter list without using a default 00:00:00:00:00:00
rule. Company.com
Deny
Name: Add a name for the MAC Webfilter Rule. 50
Enabled
MAC Address: Enter the MAC Address to apply rule to.

Domain/URL/IP: Enter the Domain Name or URL of the website control access for, i.e.
www.company.com. To ensure the full domain is blocked, enter the most inclusive domain, i.e.
.company.com will block www.company.com and images.company.com and videos.company.com.
Alternatively you can use an IP address or address range written in CIDR notation, i.e. 8.8.8.0/24.

Action: Specify if the rule Allows access or Denies access to the specified address.

Rule Priority: The Rule Priority is used to determine the order rules are evaluated. Higher priority rules
(bigger number) are evaluated first and the first one to match has its assigned action taken."

Enabled: Enable or Disable the MAC Webfilter rule.

MAC Address Webfilter Default Setting

When a network is set to Allow (Blacklist) it will allow access to all sites Values (selection)
not blocked in the Filter Rules. Selecting Deny (Whitelist) will only
allow access to websites with an Allow action in the Filter rules, all Allow / Deny
other sites will be blocked.

MAC Webfilter Rules

Add Network Webfilter Rules to allow or deny access to specified Values
content. The Network rules work with the Network Webfilter Default
Settings. net1
LAN
Name: Add a name for the MAC Webfilter Rule. Company.com
Deny
Network: Select the local network for which the rule applies. 50
Enabled
Domain/URL/IP: See description in MAC Filtering Rules above.

Action: See description in MAC Filtering Rules above.

Rule Priority: See description in MAC Filtering Rules above.

Enabled: Enable or Disable the Network Webfilter rule.

4.2.13 Network > LoadBalancer

The LoadBalancer allows for the configuration of load balancing and failover features of the BulletPlusAC.

Image 4-2-16: Network > LoadBalancer

Load Balance Enable

Enable or disable the Load Balancing Feature of the BulletPlusAC. Values (selection)
Enable / Disable

Include WWAN in LoadBalancing

By default (when enabled) the BulletPlusAC will apply load balancing Values (checkbox)
to the wired WAN port(s). Check this box to include the WWAN
(Cellular) connection. Enable / Disable

Default Route Gateway

This field displays the current default route used by the WWAN. Values (address)
(varies)

Remote Check IPs

Enter up to two(2) reliable , reachable IP addressed to use to verify Values (address(s))
connectivity. The default are the DNS servers for OpenDNS.
208.67.220.220
208.67.222.222

Failover Priority
For Failover priority, the interface with the lower number will have Values (selection)
priority over the interfaces with a higher number.
10

Weight of the channel

Specify the weight of channel to determine load balancing between Values (number)
interfaces. In the case where interfaces have the same weight value,
the modem will distribute data equally between them. (varies)

4.3 IPv6

4.3.1 IPv6 > Status

The IPv6 Status window provides complete overview information related to the IPv6 portion of the
BulletPlusAC. A variety of information can be found here, such as Network Status for interfaces
configured for IPv6. Information about the IPv6 DNS services, active DHCPv6 Leases and the current IPv6
Routing Table can all be found on the IPv6 > Status window.

Image 4-3-1: IPv6 > Status

4.3.2 IPv6 > Setup

The IPv6 setup windows provides the options required to setup IPv6 on the BulletPlusAC on the Wan and
LAN interfaces.

Image 4-3-2: IPv6 > Setup

WAN6: Upstream Configuration

Physical interface of WAN6

Select the physical interface of WAN6. Values (Selection)
@wan1 (Wired WAN1)
@wan2 (Wired WAN2)
@wifi (WIFI)
@wwan (Carrier)

Status of physical interface

Displays the current status of the physical interface chosen for IPv6. Values (Read Only)
(varies)

WAN6 Connection Method

Select how and in what format the WAN6 interface defines the Values (Selection)
connection information.
DHCPv6 Client
Static Address
IPv6-IPv4 (RFC4213)
IPv6-over-IPv4 (6to4)

Local IPv6 Address for WAN6

When the WAN6 Connection Method is set to Static Address, here is Values (Address)
where the local WAN6 IP Address is defined.
(no default)

IPv6 Gateway
When the WAN6 Connection Method is set to Static Address, here is Values (Address)
where the IPv6 Gateway is defined.
(no default)

IPv6 routed prefix for downstream

Prefix address for distribution to LAN downstream interface. Values (Address)
(no default)

Primary Custom DNS Server

When the WAN6 Connection Method is set to Static Address, enter the Values (Address)
address for the primary custom DNS server.
(no default)

Secondary Custom DNS Server

When the WAN6 Connection Method is set to Static Address, Enter Values (Address)
the address for the secondary custom DNS server.
(no default)

Router Advertisement-Service
When the WAN6 Connection Method is set to Static Address, select Values (Selection)
the Router Advertisement-Service.
Disabled
Relay Mode
Hybrid Mode

DHCPv6-Service
When the WAN6 Connection Method is set to Static Address, select Values (Selection)
the DHCPv6-Service.
Disabled
Relay Mode
Hybrid Mode

NDP-Proxy
When the WAN6 Connection Method is set to Static Address, select Values (Selection)
the NDP-Proxy.
Disabled
Relay Mode
Hybrid Mode

Master interface in relay mode

When the WAN6 Connection Method is set to Static Address, specifies Values (Selection)
whether DHCPv6, RA and NDP in relay mode is a master interface or
not. No / Yes

Remote IPv4 Address

When WAN6 Connection Method is set for IPv6-in-IPv4 mode, enter Values (address)
the remote IPv4 address here.
(no default)

Local IPv6 Address

When WAN6 Connection Method is set for IPv6-in-IPv4 mode, enter Values (address)
the local IPv6 address here.
(no default)

IPv6 routed prefix

When WAN6 Connection Method is set for IPv6-in-IPv4 mode, enter Values (address)
the IPv6 routed prefix here.
(no default)

Tunnel ID
When WAN6 Connection Method is set for IPv6-in-IPv4 mode, enter Values
the Tunnel ID here.
(no default)

Username / Password
When WAN6 Connection Method is set for IPv6-in-IPv4 mode, enter Values
the username and password here.
(no default)

Local IPv4 Public Address

When WAN6 Connection Method is set for IPv6-over-IPv4 (6to4) enter Values (Address)
the local IPv4 public address here.
(no default)

LAN : Downstream Configuration

Router Advertisement-Service
Select the Router Advertisement-Service for the LAN. Values (Selection)
Disabled
Server Mode
Relay Mode
Hybrid Mode

DHCPv6-Service
Select the DHCPv6-Service mode for the LAN. Values (Selection)
Disabled
Server Mode
Relay Mode
Hybrid Mode

NDP-Proxy
Select the NDP-Proxy mode for the LAN. Values (Selection)
Disabled
Relay Mode
Hybrid Mode

DHCPv6-mode
Set the DHCPv6-mode for IPv6 on the LAN. Values (Selection)
Stateless
Stateless + Stateful
Stateful-only

DHCPv6 Lease Time

Set the DHCPv6 lease time in minutes. The is the amount of time that Values (minutes)
an assigned IP address that is issued via DHCP services is valid.
(Minimum 2 minutes) 720

RA Override default route

Set the RA (Router Advertisements) Override for the default route. Values (Selection)
Default
Ignore no public address
Ignore all

Primary Announced DNS server

Set the announced primary DNS server details here. Values (Address)
(No default)

Secondary Announced DNS server

Set the announced secondary DNS server details here. Values (Address)
(No default)

IPv6 assignment length

Prefix size used for assigned prefix to the interface. For example 64 Values (length)
will assign /64-prefixes.
64

IPv6 assignment hint

Hexadecimal subprefix ID for this interface. For example 1234 with an Values
assignment length of 64 will assign prefixes of the form :1234::/64

Local IPv6 address of LAN

You can input your own IPv6 address here but this is usually not Values (Selection)
needed because IPv6 address for the LAN is passed through from the
WAN side. Stateless
Stateless + Stateful
Stateful-only

Global Network Options

IPv6 ULA-prefix
Modify the IPv6 ULA-prefix here. Values (Selection)
Fd80:2d08:3ffo::/48

4.3.3 IPv6 > Firewall6

The IPv6 Firewall6 window allows the configuration of the firewall on the interfaces that are setup for IPv6.
The current Firewall for IPv6 can be viewed, changed and enabled/disabled under the Traffic Rules Status
summary of all current firewall rules.

Image 4-3-3: IPv6 > Firewall6

Traffic Rules Configuration

Rule Name
The rule name is simply a text identifier to label the corresponding rule Values (Characters)
for reference.
(varies)

Action
The Action is used to define how the rule handles the connection Values (Selection)
request.
Accept
ACCEPT will allow a connection, while REJECT (error) and DROP Drop
(quietly dropped), will refuse connections. Reject

Address family
Select if the rule applies only to IPv6 or it should also be applied to Values (Selection)
IPv4.
IPv6 only
Both IPv4 and IPv6

Protocol
The protocol field defines the transport protocol type controlled by the Values (Selection)
rule.
TCP
UDP
TCP+UDP
ICMP
IPSEC-ESP
IPSEC-AH
Protocol 41
ALL

Enable
Enables the specified IPv6 Firewall Rule. Values (Checkbox)
Checked

Source Zone
Specify the source zone/interface. Values (Selection)
lan zone (Covered networks: LAN)
wan2 zone (Covered networks: WAN2WAN6)
wifi zone (Covered networks: WIFI)
wwan zone (Covered networks: WWAN)
any zone
none

Source Port
Specify the source port(s). Multiple ports can be specified as 80 443 Values (Port)
465. Port range can be specified as 100:200 format.
(no default)

Destination Zone
Specify the destination zone/interface. Values (Selection)
lan zone (Covered networks: LAN)
wan2 zone (Covered networks: WAN2WAN6)
wifi zone (Covered networks: WIFI)
wwan zone (Covered networks: WWAN)
any zone
none
this device (input)

Destination Port
Specify the destination port(s). Multiple ports can be specified as 80 Values (Port)
443 465. Port range can be specified as 100:200 format.
(no default)

4.3.4 IPv6 > OpenVPN6

The BulletPlusAC supports OpenVPN6 Server and Client over IPv6. The section below describes the
parameters available for OpenVPN6 Server.

OpenVPN6 Server

Image 4-3-4: IPv6 > OpenVPN6 Server

OpenVPN Mode
Enable/Disable the OpenVPN Mode by selecting the mode to operate in, Values (selection)
Client or Server. When the Server is enabled it will be listening for incoming
connection requests from OpenVPN Clients. Client / Server / Disable

Server Bridge Mode

In Server Bridge Mode the BulletPlusAC logically merges all Ethernet Values (checkbox)
networks, at both ends of the tunnel, as if they were a single Ethernet
subnet. unchecked

Tun-ipv6
Select to indicate this is a IPv6 tunnel. Values (checkbox)
checked

Server-ipv6
Enter the server-ipv6. Values
(no default)

Port
The TCP/UDP port which the server is listening on. Default is 1194 Values (port)
1194

Tunnel Protocol
Select the Tunnel Protocol to be used. The options are TCP and UDP, the Values (selection)
default is UDP.
TCP / UDP / TCP6 / UDP6

MSSFIX/Fragment size
The maximum resulting UDP send packet size after the OpenVPN has Values (size)
fully encapsulated data. Packets exceeding this max value will be
fragmented. 1370

Root Certificate
The root certificate file (CA file) that all the server and clients must have in Values (chars)
common.
ca.crt

Public Server Certificate

The Public Server Certificate which is the certificate file that resides on only Values (chars)
the server.
server.crt

Private Server Key

The private Server Key, which should not be disclosed. Values (chars)
server.key

TLS Auth Key

The server and each client must have a copy of this key to do TLS Values (chars)
authentication.
(no default)

Diffie hellman parameter

Select between 1024 bit and 2048 bit Diffie Hellman keys for security. Values (selection)
DH2048 / DH1024

User/Password Authenication
Select the OpenVPN username as setup/defined in the VPN Users menu. Values (selection)
(no default)

Bridge Gateway IP Address

When set to Server Bridge Mode, the Bridge Gateway IP Address must be Values (IP Address)
specified.
(No default)

Bridge IP Address Range / Netmask

Specify the IP Address Range and Netmask that is used when the Values (IP Address)
OpenVPN Server is set to Server Bridge Mode.
(No default)

Server Virtual Subnet / Subnet Mask

The subnet and subnet mask that the server will create to assign address Values (IP Address)
to itself and the clients.
10.8.0.0

Push DNS to Client

If enabled (Auto) the server will push its DNS server information to the Values (selection)
client. Manual allows the DNS information to be manually entered.
NO / Auto / Manual

Client Isolation
When select yes, the clients will not see each other. Select no, it will allow Values (selection)
different clients to be able to "see" each other. By default, clients will only
see the server. No / Yes

Keep Alive Ping Interval

The keep alive directive causes ping-like messages to be sent back and Values (seconds)
forth over the link so that each side knows when the other side has gone
down. Default 10 seconds. 10

Keep Alive Ping Period

Default 120 seconds. Ping every 10 seconds, assume that remote peer is Values (seconds)
down if no ping received during a 120 second time period. (must be at least
twice the interval specified above) 120

Cipher
Select a cryptographic cipher. Must be the same on Server and Client. Values (selection)
DES-CBC CAST5-CBC
RC2-CBC RC2-64-CBC
DES-EDE-CBC AES-128-CBC
DES-EDE3-CBC AES-192-CBC
DESX-CBC AES-256-CBC
BF-CBC SEED-CBC
RC2-40-CBC NONE

Use LZO Compression

Enable/Disable LZO compression on the VPN link. Lempel–Ziv– Values (selection)
Oberhumer (LZO) is a lossless data compression algorithm.
Enable / Disable

OpenVPN Server Network Settings

OpenVPN supports multiple subnet behind the server/client. In order for the Values (selection)
vpn connection to reach the subnet behind, each subnet must be specified
for the data to be routed correctly. (no default)

OpenVPN6 Client

The BulletPlusAC supports OpenVPN6 and can be configured as a Server or a Client. This section outlines
the configuration of a OpenVPN6 Client.

Image 4-3-5: IPv6 > OpenVPN6 Client

Client Bridge Mode

Select the box to enable Client Bridge Mode. Values (selection)
(unchecked)

Pseudowire Mode
When Client Bridge Mode is selected the option to enable Pseudowire Values (selection)
Mode is made available.
(unchecked)

tun-ipv6
Select the if this is a IPv6 tunnel. Values (checkbox)
(checked)

Tunnel Protocol
Select the Tunnel Protocol to be used. If the server IP below is and IPv6 Values (selection)
address TCP6 or UDP6 should be used, if it is a IPv4 address use TCP or
UDP. TCP / UDP / TCP6 / UDP6

MSSFIX/Fragment size
The maximum resulting UDP send packet size after the OpenVPN has Values (size)
fully encapsulated data. Packets exceeding this max value will be
fragmented. 1370

Server IP/Port
The IP Address and TCP/UDP port which the server is located. This is Values (IP/Port)
generally the Public IP Address of the router/modem where the Server is
running. (no default)

Root Certificate
The root certificate file (CA file) that all the server and clients must have in Values (chars)
common.
ca.crt

Cleint Certificate
The Client Certificate which is the certificate file that resides on only the Values (chars)
client.
client.crt

Client Key
The private Client Key, which should not be disclosed. Values (chars)
client.key

TLS Auth Key

The server and each client must have a copy of this key to do TLS Values (chars)
authentication.
(no default)

Cipher
Select a cryptographic cipher. Must be the same on Server and Values (selection)
Client.
DES-CBC RC2-64-CBC
RC2-CBC AES-128-CBC
DES-EDE-CBC AES-192-CBC
DES-EDE3-CBC AES-256-CBC
DESX-CBC SEED-CBC
BF-CBC NONE
RC2-40-CBC
CAST5-CBC

Use LZO Compression

Enable/Disable LZO compression on the VPN link. Lempel–Ziv– Values (selection)
Oberhumer (LZO) is a lossless data compression algorithm.
Enable / Disable

4.3.5 IPv6 > Route6

It may be desirable to have devices on different subnets to be able to talk to one another. This can be
accomplished by specifying a static route, telling the BulletPlusAC where to send data.

Image 4-3-6: IPv6 > Route6

Target
Enter the target IPv6 address or network CIDR. Values (IP Address)
(no default)

IPv6-Gateway
Specify the IPv6 Gateway used to reach the network specified above. Values (IP Address)
(no default)

Metric
Enter the metric for the static route. Values
0

Interface
Select the interface to which to send the data intended for the target Values (selection)
specified.
LAN
WAN1
WAN2
WIFI
WWAN
wwan1
wwan2
none

4.4 WWAN

4.4.1 WWAN > Status

The WWAN Status window provides complete overview information related to the Cellular Carrier portion
of the BulletPlusAC. A variety of information can be found here, such as Activity Status, Network (Name
of Wireless Carrier connected), Data Service Type (WCDMA/HSPA/HSPA+/LTE etc), Frequency band,
Phone Number etc.

Image 4-4-1: WWAN > Status

Not all statistics parameters displayed are applicable.

The Received and Transmitted bytes and packets indicate the respective amount of data which has been
moved through the radio.

The Error counts reflect those having occurred on the wireless link.

4.4.2 WWAN > Settings

The parameters within the WWAN Configuration menu must be input properly; they are the most basic
requirement required by your cellular provider for network connectivity. The BulletPlusAC can support dual
SIM cards, as described below either slot can be specified as the primary slot and if a connectivity issue
occurs, the unit can be configured to automatically switch to the alternate SIM card.

Image 4-4-2: WWAN > Settings

Carrier Status
Carrier Status is used to Enable or Disable the connection to the Values (Selection)
Cellular Carrier. By default this option is enabled.
Enable / Disable

Connectivity Management
While in Mobile mode the BulletPlusAC will try to retain network Values
services to minimize no coverage areas. When set to Off the
BulletPlusAC will quickly re-scan and reconnect for fixed network Auto
coverage and auto is somewhere between Mobile and Off. Mobile
Off

MTU Size
Allows a user to specify the MTU size for custom applications. In most Values
cases this will be left blank and the system will determine the best
value. (blank)

MTU Size (500~1500/Blank)

Use this field to adjust the MTU (maximum transmission unit), it is Values
recommended to leave blank for most applications. If you are not sure
leave this blank and let the BulletPlusAC decide automatically. (Blank)

SIM Selection
The BulletPlusAC supports one or two SIM cards to be installed. By Values (Selection)
default the primary SIM is the bottom SIM slot, and the unit will try to
connect using SIM1 first, and then if it fails to connect, or loses Dual SIM Cards
connection to a valid carrier, it will then attempt SIM2. SIM Card-1 Only
SIM Card-2 Only

Dual Cards Management

Primary Slot
By default the Primary SIM is the SIM installed into the SIM1 slot on Values (Selection)
the unit. The SIM card installed into the Primary slot will be the Cellular
Carrier in which the BulletPlusAC will attempt to make a connection SIM Card-1
with. This can be modified here. SIM Card-2

Dual Usage Balance Mode

This option is only valid when using dual SIM cards. If enabled the Values (Selection)
BulletPlusAC will switch from the primary SIM to the alternate once the
defined data usage is exceeded. The data usage start date is defined Disable
under the DataUsage tab. Enable
If enabled, set the Primary Monthly Limitation in MB.

SIM Card-1/2 Settings

Data Roaming
This feature allows the disabling or enable of data roaming. When data Values (Selection)
roaming is enabled the modem will be allowed to use data when in
roaming status. It is not recommended to allow roaming unless the Enable / Disable
appropriate data plans are in place.

Carrier Operator
In some cases, a user may want to lock onto a certain carrier. There Values (Selection)
are four options to choose from: Auto, SIM based, Manual and Fixed.
Auto
• Auto will allow the unit to pick the carrier automatically. Data roaming is Based on SIM
permitted.
• SIM based will only allow the unit to connect to the network indicated by the Manual
SIM card used in the unit. Fixed
• Manual will scan for available carriers and allow a user to select from the
available carriers. It takes 2 to 3 minutes to complete a scan.
• Fixed allows a user to enter the carrier code (numerical) directly and then the
unit will only connect to that carrier.

Technologies Mode
Select the valid types of Carrier connections allowed. For example if Values (Selection)
set to auto the BulletPlusAC will connect to any data type. If set to
WCDMA only, the BulletPlusAC will only allow connections to WCDMA AUTO
related technologies, for band restrictions select the advanced button. WCDMA, LTE, GSM
GSM Only
WCDMA Only
LTE Only
WCDMA, GSM
LTE,WCDMA
WCDMA, LTE
LTE, GSM

APN (Access Point Name)

The APN is required by every Carrier in order to connect to their Values (characters)
networks. The APN defines the type of network the Bullet is connected
to and the service type. Most Carriers have more than one APN, auto
usually many, dependent on the types of service offered.

Auto APN (default) may allow the unit to quickly connect to a carrier, by cycling through a predetermined
list of common APN’s. Auto APN will not work for private APN’s or for all carriers.

SIM Type
If the BulletPlusAC is to connect to Verizon this box must be checked Values (checkbox)
(and a valid Verizon SIM card must be installed).
Verizon SIM Card (unchecked)

Advanced+

SIM Pin
The SIM Pin is required for some international carriers. If supplied and Values (characters)
required by the cellular carrier, enter the SIM Pin here.
(none)

Authentication
Sets the authentication type required to negotiate with peer. Values (Selection)
PAP - Password Authentication Protocol. Device decide (AUTO)
CHAP - Challenge Handshake Authentication Protocol. PAP
CHAP
Only required if the carrier requires a User Name and Password. No Auth

User Name
A User Name may be required for authentication to a remote peer. Values (characters)
Although usually not required for dynamically assigned IP addresses
from the wireless carrier. Varies by carrier. Carrier/peer dependant

Password
Enter the password for the user name above. May not be required by Values (characters)
some carriers, or APN’s
Carrier/peer dependant

Network+

PDP Type
IPv6 support is related to the BulletPlusAC’s configuration and carrier Values (selection)
network.
IPV4 and IPV6
IP

IP Address
In some cases the Static IP address must be entered in this field if Values (IP Address)
assigned by a wireless carrier. In most cases the IP will be read from
the SIM card and this field should be left at the default value. (none)

Use Remote DNS

If enabled the Bullet with use the DNS server as specified Values (selection)
automatically by the service provider.
Enable / Disable

Default Route
Use this interface as the default route for all outbound traffic unless Values (Selection)
specified in the Network > Routes table.
Yes / No

DNS-Passthrough
When enabled DNS-Passthrough will pass on the WAN assigned DNS Values (Selection)
information to the end device.
Enable / Disable

4.4.3 WWAN > SMS

SMS Command History

The SMS menu allows a user to view the SMS Command History and view the SMS messages on the SIM
Card.

Image 4-4-3: SMS > SMS Command History

4.4.4 WWAN > SMS Config

SMS messages can be used to remotely reboot or trigger events in the BulletPlusAC. SMS alerts can be
set up to get SMS messages based on system events such as Roaming status, RSSI, Ethernet Link
Status or IO Status.

System SMS Command

Image 4-4-4: SMS > SMS Configuration

Status
This option allows a user to enable or disable to use of the following Values (Selection)
SMS commands to reboot or trigger events in the BulletPlusAC:
Enable / Disable

MSC#REBOOT Reboot system MSC#EURD0 trigger event report0

MSC#NMS Send NMS UDP Report MSC#EURD1 trigger event report1
MSC#WEB Send web client inquiry MSC#EURD2 trigger event report2
MSC#MIOP1 open I/O ouput1 MSC#EURD3 trigger event report3
MSC#MIOP2 open I/O ouput2 MSC#GPSR0 trigger gps report0
MSC#MIOC1 close I/O ouput1 MSC#GPSR1 trigger gps report1
MSC#MIOC2 close I/O ouput2 MSC#GPSR2 trigger gps report2
MSC#GPSR3 trigger gps report3

Set Phone Filter

If enabled, the BulletPlusAC will only accept and execute commands Values (Selection)
originating from the phone numbers in the Phone Filter List. Up to 6
numbers can be added. Enable / Disable

System SMS Forward

Image 4-4-5: SMS > System SMS Forward

Status
SMS Messages received by the BulletPlusAC can be forwarded to Values (Selection)
another number. Messages can be saved or deleted from the SIM
after forwarding. Disable / Enable

Forward Phone Number

Enter the number where SMS messages received by the BulletPlusAC Values (Selection)
will be forwarded.
(no default)

Matched Sender / Matched Prefix

Use the Matched Sender and Matched Prefix to filter messages to be Values (characters)
forwarded. Matched sender allows only messages received from
certain number(s). Matched prefix only passes on messages that (no default)
match a specific prefix (first part of message).

System SMS Alerts

Image 4-4-6: SMS > SMS Alerts

Status
Enable SMS Alerts. IF enabled SMS alerts will be send when Values (Selection)
conditions are met as configured to the phone numbers listed.
Enable / Disable

Received Phone Numbers

SMS Alerts can be sent to up to 6 different phone numbers that are Values (Selection)
listed here.
(no default)

Time Interval(s)
SMS alerts, when active, will be sent out at the frequency defined Values (Seconds)
here.
300

Device Alias
The device Alias is text that is sent with the SMS message to provide Values (30 chars)
additional information or help identify the source of the SMS alert.
UserDevice

RSSI Check
Enable or disable the RSSI alerts. Values (Selection)
Disable RSSI check
Enable RSSI check

Low Threshold (dBm)

Set the threshold for RSSI alerts. When the signal strength drops Values (dBm)
below this threshold, an SMS alert will be sent to the number(s)
specified. -99

Carrier Network
Enable or disable SMS Alerts for Roaming Status. Values (Selection)
Disable Roaming Check
Enable Roaming Check

Home / Roaming Status

The BulletPlusAC can send alerts based on the roaming status. Data Values (Selection)
rates during roaming can be expensive and it is important to know
when a device has started roaming. In Roaming
Changed or In Roaming
Changed to Roaming

Ethernet
Enable or disable SMS Alerts for the Ethernet Link status of the LAN Values (Selection)
RJ45 port.
Disable Ethernet check
Enable Ethernet check

Ethernet Link Status

The status of the Ethernet Link of the LAN (RJ45) can be used to send Values (Selection)
SMS Alerts. The link status may indicate an issue with the connected
device. Changed
In no-link
Changed or in no-link
Changed to no-link

I/O Status
SMS Alerts can be sent based on the state changes of the Digital I/O Values (Selection)
lines. Aliases (Text Names) can be set for each I/O to help identify
which I/O is triggering the SMS alert. Disable IO Check
Enable: INPUT Changed
Enable: Output Changed
Enable: INPUT or OUTPUT
Changed.

Low Voltage Check

Send a SMS alert when the supply voltage falls below a specified Values (Voltage)
value. The recovery threshold is the value the supply must return to, to
stop outgoing SMS alerts being set at the specific Time Interval. Low Threshold: 11 V
Recovery Threshold: 12.0 V

4.4.5 WWAN > Data Usage

The Data Usage tool on the BulletPlusAC allows users to monitor the amount of cellular data consumed.
Since cellular devices are generally billed based on the amount of data used, alerts can be triggered by
setting daily and/or monthly limits. Notifications can be sent using SMS or Email, allowing a early warning if
configurable limits are about to be exceeded. The usage data reported by the Data Usage Monitor may not
match the data reported by the carrier, but it gives the users an idea of the bandwidth consumed by the
BulletPlusAC.

Image 4-4-7: WWAN > Data Usage

Status
If enabled the BulletPlusAC will track the amount of cellular data Values (selection)
consumed. If disabled, data is not recorded, even in the Current Data
Usage display.
Disable
Enable

Monthly/Daily Over Limit

Select the notification method used to send alerts when daily or monthly Values (selection)
thresholds are exceeded. If none is selected, notifications will not be sent,
but data usage will be recorded for reference purposes.
None
Send Notice SMS
Send Notice Email
Both SMS & Email

Image 4-4-8: Data Usage > SMS Config

Monthly/Daily Data Unit

Select the data unit to be used for data usage monitoring. Values (selection)
Bytes / K Bytes / M Bytes
G Bytes

Data Limit
Select the data limit for the day or month, used in connection with the data Values (1-65535)
unit is the previous field. If you want to set the limit to 250 Mbytes, select M
Bytes for the data unit, and 250 for the data limit.
500

Period Start Day

For Monthly tracking, select the day the billing/data cycles begins. On this Values (1-31)
day each month the BulletPlusAC will reset the data usage monitor
numbers.
1 (Day of Month)

Additional Notice 1/2

Up to two (2) additional notices can be sent based on a percentage (10- Values (10-500%)
500%) of the threshold value.
(none)

Phone Number
If SMS is selected as the notification method, enter the phone number to Values (phone)
send any SMS messages generated when the data usage exceeds the
configured limits.
+1403

Image 4-4-9: Data Usage > Email Config

Mail Subject
If Email is selected as the notification method, enter the desired email Values (string)
subject line for the notification email sent when daily and/or monthly usage
limits are exceeded. Daily/Monthly Data Usage
Notice

Mail Server(IP/Name)
If Email is selected as the notification method, enter the SMTP server Values (xxx:port)
details for the account used to send the Email notifications. Domain or IP
address with the associated port as shown.
smtp.gmail.com:465

Username
If Email is selected as the notification method, enter the username of the Values (username)
Email account used to send Emails.
@gmail.com

Password
If Email is selected as the notification method, enter the password of the Values (string)
Email account used to send Emails. Most email servers require
authentication on outgoing emails.
***

Authentication
If Email is selected as the notification method, enter the password of the Values (selection)
Email account used to send Emails. Most email servers require
authentication on outgoing emails.
None
SSL/TLS
STARTTLS
SSL/TLS + STARTTLS

Mail Recipient
Enter the email address of the individual or distribution list to send the Values ([email protected])
email notification to.
host@

Data Usage History

The BulletPlusAC provides a Odometer that shows the total data used by the BulletPlusAC. You can also
click on the More link to get a data usage history summary as seen below.

Image 4-4-10: Data Usage > Data Usage Odometer

4.5 Wireless (WiFi)

4.5.1 Wireless > Status

The Status window gives a summary of all radio or wireless related settings and connections.

The General Status section shows the Wireless MAC address of the current radio, the Operating Mode
(Access Point, Client), the SSID being used, frequency channel information and the type of security used.

Traffic Status shows statistics about the transmitted and received data.

Image 4-5-1: Wireless > Status

4.5.2 Wireless > Radio1

Radio1 Phy Configuration

The top section of the Wireless Configuration allows for the configuration of the physical radio module. You
can turn the radio on or off, and select the channel bandwidth and frequency as seen below.

Image 4-5-2: Wireless > Radio Configuration

Radio
This option is used to turn the radio module on or off. If turned off Values (selection)
Wireless connections can not be made. The default is Off.
On / Off

Mode
The Mode defines which wireless standard to use for the wireless Values (selection)
network. The BulletPlusAC supports 802.11a/b/g/n/ac modes as seen
here. Select the appropriate operating mode from the list. 802.11B ONLY
802.11BG
The options below are dependent and vary on the operating mode 802.11NG
chosen here. 802.11A Only
802.11NA
802.11AC

Channel Bandwidth
Only appears when using 802.11a, b or b/g modes. Lower channel Values (selection)
bandwidths may provide longer range and be less susceptible to noise
but at the trade off of data rates. Higher channel bandwidth may 20MHz Normal Rate
provide greater data rates but will be more susceptible to noise and
shorter distance potentials.

High Throughput Mode

Available when mode is set to 802.11ng or na. Select HT20 for a Values (selection)
20MHz channel, or HT40 for a 40 MHz Channel. The 40MHz channel
is comprised of 2 adjacent 20MHz channels and the + and—designate HT20
to use the higher or lower of the adjacent channels. HT40-
HT40+
Force HT40-
Advanced Capabilities (Only shown if box is checked) Force HT40+

MPDU Aggregation (Enable/Disable) - Allows multiple data frames to be sent in a single transmission
block, allowing for acknowledging or retransmitting if errors occur.

Short GI (Enable/Disable) - GI (guard interval) is the time the receiver waits for any RF reflections to settle
before sampling data. Enabling a short GI (400ns) can increase throughput, but can also increase the error
rate in some installations.

HT Capabilities Info - TX-STBC RX-STBC1 DSSS_CCK-40

Maximum AMSDU (byte) - 3839
Maximum AMPDU (byte) - 65535

Channel Width
Available only when operating mode is set to 802.11ac. Select VHT20 Values (selection)
for a 20MHz channel, or VHT40 for a 40 MHz Channel, and VHT80 for
a 80 MHz channel. VHT20
VHT40
VHT80

Channel-Freq
The Channel-Freq setting allows configuration of which channel to operate on, auto can be chosen where
the unit will automatically pick a channel to operate. If a link cannot be established it will try another
channel. Available channels shown will vary on the throughput mode / channel bandwidth selected above.

802.11b, bg 802.11ng 802.11a, na, ac

Auto Ch 01 : 2.412 GHz Auto
Ch 01 : 2.412 GHz Ch 02 : 2.417 GHz Ch 36 : 5.18 GHz
Ch 02 : 2.417 GHz Ch 03 : 2.422 GHz Ch 40 : 5.20 GHz
Ch 03 : 2.422 GHz Ch 04 : 2.427 GHz Ch 44 : 5.22 GHz
Ch 04 : 2.427 GHz Ch 05 : 2.432 GHz Ch 48 : 5.24 GHz
Ch 05 : 2.432 GHz Ch 06 : 2.437 GHz Ch 149 : 5.745 GHz
Ch 06 : 2.437 GHz Ch 07 : 2.442 GHz Ch 153 : 5.765 GHz
Ch 07 : 2.442 GHz Ch 08 : 2.447 GHz Ch 157 : 5.785 GHz
Ch 08 : 2.447 GHz Ch 09 : 2.452 GHz Ch 161 : 5.805 GHz
Ch 09 : 2.452 GHz Ch 10 : 2.457 GHz Ch 165 : 5.825 GHz
Ch 10 : 2.457 GHz Ch 11 : 2.462 GHz
Ch 11 : 2.462 GHz

TX Power
This setting establishes the transmit power level which will be Values (selection)
presented to the antenna connectors at the rear of the BulletPlusAC.
Unless required, the Tx Power should be set not for maximum, but 0 dBm 20 dBm
rather for the minimum value required to maintain an adequate system 4 dBm 21 dBm
fade margin. 5 dBm 22 dBm
Refer to FCC (or as 7 dBm 23 dBm
otherwise applicable) 8 dBm 24 dBm
regulations to ascertain, 9 dBm 25 dBm
and not operate beyond,
the maximum allowable
10 dBm 26 dBm
transmitter output power 15 dBm
and effective isotropic
radiated power (EIRP).
Wireless Distance
The Wireless Distance parameter allows a user to set the expected Values (meters)
distance the WiFi signal needs to travel. The default is 100m, so the
BulletPlusAC will assume that the signal may need to travel up to 100
100m so it sets various internal timeouts to account for this travel time.
Longer distances will require a higher setting, and shorter distances
may perform better if the setting is reduced.

RTS Thr (256 ~ 2346)

Once the RTS Threshold defined packet size is reached, the system Values (selection)
will invoke RTS/CTS flow control. A large RTS Threshold will improve
bandwidth, while a smaller RTS Threshold will help the system recover On / OFF
from interference or collisions caused by obstructions.

Fragment Thr (256 ~ 2346)

The Fragmentation Threshold allows the system to change the Values (selection)
maximum RF packet size. Increasing the RF packet size reduces the
need to break packets into smaller fragments. Increasing the On / OFF
fragmentation threshold slightly may improve performance if a high
packet error rate is experienced.

Radio1 Virtual Interface

The bottom section of the Wireless Configuration provides for the configuration of the Operating Mode of
the Wireless Interface, the TX power, Wireless Network information, and Wireless Encryption. The
BulletPlusAC can support multiple virtual interfaces. These interfaces provide different SSID’s for different
users, and can also be assigned to separate subnets (Network Interfaces) to prevent groups from
interacting.

Image 4-5-3: Wireless > Radio Configuration

Network
Choose between LAN or WAN for the Virtual Interface. If additional Values (selection)
Network Interfaces have been defined in the Network > LAN section,
the Interface name will also appear here. LAN
WAN
Etc..
(Additional Interfaces…)

Mode
Access Point - An Access Point may provide a wireless data Values (selection)
connection to many clients, such as stations, repeaters, or other
supported wireless devices such as laptops etc. Access Point
Client
If more than 1 Virtual Interface (more than 1 SSID) has been defined,
the BulletPlusAC can ONLY operate as a Access Point, and will be
locked into this mode.

Station/Client - A Station may sustain one wireless connection, i.e. to an Access Point.

Access to Wired client

This parameter, when set to No, will prevent wired and wireless clients Values (selection)
to interact with each other.
Yes / No

TX bitrate
This setting determines the rate at which the data is to be wirelessly transferred.

The default is ‘Auto’ and, in this configuration, the unit will transfer data at the highest possible rate in
consideration of the receive signal strength (RSSI).

Setting a specific value of transmission rate has the benefit of ‘predictability’ of that rate, but if the RSSI
drops below the required minimum level to support that rate, communications will fail.

802.11 a/b/g 802.11n, na (20/40) 802.11ac (20/40/80)

Auto Auto Auto
1 Mbps (802.11b,g) mcs-0 (21/45) Mbps mcs-0 (21/45/97) Mbps
2 Mbps (802.11b,g) mcs-1 (43/90) Mbps mcs-1 (43/90/195) Mbps
5.5 Mbps (802.11b,g) mcs-2 (65/135) Mbps mcs-2 (65/292) Mbps
11 Mbps (802.11b,g) mcs-3 (86/180) Mbps mcs-3 (86/390) Mbps
6 Mbps (802.11a,g) mcs-4 (130/270) Mbps mcs-4 (130/585) Mbps
9 Mbps (802.11a,g) mcs-5 (173/360) Mbps mcs-5 (173/780) Mbps
12 Mbps (802.11a,g) mcs-6 (195/405) Mbps mcs-6 (195/405/NA) Mbps
18 Mbps (802.11a,g) mcs-7 (216/450) Mbps mcs-7 (216/450/975) Mbps
24 Mbps (802.11a,g) mcs-8 (260/540/1170) Mbps
36 Mbps (802.11a,g) mcs-9 (288/600/1300) Mbps
48 Mbps (802.11a,g)
54 Mbps (802.11a,g)

WDS
Wireless Distribution System (WDS), when enabled will follow the Values (selection)
wireless interconnections of access points.
On / Off

ESSID Broadcast
Disabling the SSID broadcast helps secure the wireless network. Values (selection)
Enabling the broadcast of the SSID (Network Name) will permit others
to ‘see’ the wireless network and perhaps attempt to ‘join’ it. On / Off

AP Isolation
When AP Isolation is enabled wireless devices connected to this SSID Values (selection)
will not be able to communicate with each other. In other words if the
BulletPlusAC is being used as a Hot Spot for many wireless clients, On / Off
AP Isolation would provide security for those clients by not allowing
access to any other wireless device.

WMM
WiFi Multimedia (WMM) is a feature that enhances the quality of Values (selection)
service on a network by prioritizing data packets according to data
type. (Video, Voice, Best Effort, Background). On / Off

SSID
All devices connecting to the BulletPlusAC in a given network must Values (string)
use the SSID of the BulletPlusAC. This unique network address is not
only a security feature for a particular network, but also allows other (varies)
networks - with their own unique network address - to operate in the
SSID: Service Set Identifier. same area without the possibility of undesired data exchange between
The ‘name’ of a wireless
network. In an open wireless networks.
network, the SSID is
broadcast; in a closed system
it is not. The SSID must be
known by a potential client for Encryption Type
it to be able to access the
wireless network. The encryption types defines the type of security used for the Wireless Values (selection)
Interface, to join a network a device must know the correct password/
passphrase/key. Disabled
WPA (PSK)
Security options are dependent on the version type. This section WPA2 (PSK)
describes all available options. Export versions may not have all WPA+WPA2 (PSK)
optional available to meet regulatory requirements set government WPA Enterprise (RADIUS)
policies. WPA2 Enterprise (RADIUS)
WPA+WPA2 Enterprise(RADIUS)
Change the default value for
the Network Name to
something unique for your
network. Do this for an
added measure of security
WPA PSK
and to differentiate your
network from others which This is the password, or preshared key that is required by any device Values (string)
may be operating nearby. to connect to the wireless interface of the BulletPlusAC. It is strongly
recommended to always have a password defined, and changed from (varies)
the factory default.

Show Password
Check this box to show the currently configured password for WPA/ Values (selection)
WPA2 encryption passphrase.
unchecked

RADIUS IP Address
If using Enterprise (RADIUS) encryption, enter the IP Address of the Values (IP Address)
RADIUS authentication server here.
(no default)

RADIUS Port
If using Enterprise (RADIUS) encryption, enter the port number of the Values (port)
RADIUS authentication server here.
(no default)

RADIUS Server Key

This is the password, or preshared key that is required by any device Values (selection)
to connect to the wireless interface of the BulletPlusAC. It is strongly
recommended to always have a password defined, and changed from 0123456789
the factory default.

MAC Filter
The MAC Filter can be used to control connections to the BulletPlusAC Values (selection)
WiFi by the MAC address of the connecting devices. When enabled
the BulletPlusAC will either block all connections unless they are Disabled
added (Allow), or it will accept all connection unless they are blocked Allow
(Block). Block

Use the MAC List Add box to create a list of MAC addressed that are
either allowed or blocked below.

4.5.3 Wireless > HotSpot

The Wireless Hotspot configuration is used when providing public hotspot services and it is required to use
a server or web based authentication service to verify users, provide terms of use or other information

Image 4-5-4: Wireless > Hotspot Network Configuration

Hotspot Mode
Use this option to enable or disable the hotspot authentication service. Values (selection)
There are three different options for the Hotspot Mode:
Disable
Simple Internal - Display a simple text based terms of use or Simple Internal
statement to connected users.
Simple External - Display an external webpage Simple External
RADIUS/UAM - Use a 3rd Party Authentication service to RADIUS/UAM
authenticate and/or prompt users to agree to terms of
service.

UAM Login URL

If the Hotspot Mode, RADIUS/UAM is chosen, specify the hotspot URL Values
as given by your service provider. The address of the UAM Server, the
authentication portal. https://
customer.hotspotsystem.com/
customer/hotspotlogin.php

UAM Secret
If the Hotspot Mode, RADIUS/UAM is chosen, this is a secret Values
password between the Redirect URL and the Hotspot given by the
hotspot provider. hotsys123

Hotspot Network Configuration

Hotspot Network
This field is used to specify which configured network is bonded to the Values
hotspot. Sub networks can be created in the Network > LAN menu,
which are dedicated to the hotspot devices. Varies
*The DHCP service for the network used should be turned off as all IP
address assignments will be made by the hotspot service provider.*

Network IP Address
Specify the IP Address of the Hotspot application. All hotspot clients Values
will get an IP address in the same network as the Hotspot.
192.168.182.0

Network Netmask
Specify the Netmask of the Hotspot application. All hotspot clients will Values
get an IP address in the same network as the Hotspot.
255.255.255.0

DNS Domain
Provide your service providers 1st DNS Server domain. Values
Key.chillispot.info

Primary DNS
Specify the Primary DNS server to be used by devices connected to Values
the Hotspot network.
208.67.222.222

Secondary DNS
Specify the Secondary DNS server to be used by devices connected Values
to the Hotspot network.
208.67.222.220

DHCP Start
When devices connect to the BulletPlusAC Wifi and Hotspot is Values
enabled, the Hotspot will assign the IP addresses to the connected
devices, select the starting range here. 3

DHCP End
When devices connect to the BulletPlusAC Wifi and Hotspot is Values
enabled, the Hotspot will assign the IP addresses to the connected
devices, select the ending range here. 250

Hotspot Radius Configuration

Image 4-5-5: Wireless > Hotspot Radius Configuration

Radius NAS ID
This is the RADIUS name of your Hotspot as given by your Hotspot Values
Service Provider.
Microhard_1

Radius Server 1
As assigned by the Hotspot Service Provider, the name or IP address Values
of the primary RADIUS Server.
radius.hotspotsystem.com

Radius Server 2
As assigned by the Hotspot Service Provider, the name or IP address Values
of the alternate RADIUS Server.
radius2.hotspotsystem.com

Radius Auth Port

The Radius Authentication Port Number. The default is 1812. This is Values
provided by your Hotspot service provider.
1812

Radius Acct Port

The Radius Account Port Number. The default is 1813. This is Values
provided by your Hotspot service provider.
1813

Radius Secret
Also called a shared key, this is the RADIUS password assigned by Values
you Hotspot provider.
hotsys123

Radius CoA UDP Port

Specify the Radius CoA UDP Port here. This information is supplied by Values (port)
the hotspot service provider.
3799

Radius Session Timeout

Specify the Radius Session Timeout. In seconds, 0 = disabled. Values (seconds)
3600

Radius Idle Timeout

Specify the Radius Idle Timeout. In seconds, 0 = disabled. Values (seconds)
900

4.6 Firewall

4.6.1 Firewall > Summary

The Firewall Summary allows a user to see detailed information about how the firewall is operating. The
All, Filter, Nat, Raw, and Mangle options can be used to view different aspects of the firewall.

Image 4-6-1: Firewall > Status

4.6.2 Firewall > General

The General Firewall settings allow users to enable or disable the firewall, and to decide which areas of the
modem to protect. The Firewall can also be reset to factory defaults from this area of the WebUI.

In a cellular device such as this, it is highly recommended to configure the firewall to protect any devices
connected to the modem, and to control data usage. This is especially important with units set up with a
public IP address as the modem is effectively on the public internet and is susceptible to a wide range of
threats which may severely impact the data usage. This can be avoided by blocking all Cellular traffic and
setting up specific rules to either open only used ports, or even restrict access to specific IP/networks.

For best practices and to Image 4-6-2: Firewall > General

control data usage it is
critical that the firewall be
configured properly.
WAN Connection
It is recommended to block
all incoming Cellular traffic
and create rules to open
The WAN connection column lists all valid WAN connections for which to Values (read only)
specific ports and/or use apply firewall settings. The warning icon will show when that connection is
ACL lists to limit incoming not available, has a private IP or in the case of WiFi not configured to act WWAN
connections. as a WAN connection. WAN1
WAN2
WIFI

Remote Management
When checked allows remote management of the BulletPlusAC for each Values
valid WAN using the WebUI on HTTP (default is port 80), and HTTPS
When Remote Access is set (default is port 443). If disabled, the configuration cannot be accessed from WWAN (checked)
to ‘Allow’ the modem is any device connected to that interface. WAN1 (checked)
open to anyone, this is not
recommended as it may WAN2 (checked)
impact data usage from The default settings for HTTP and HTTP can be changed under the WiFi (checked)
unwanted sources. System > Services menu.

Remote Access
When unchecked (blocked) the BulletPlusAC will block all requests from Values (check box)
devices on the specified WAN unless specified otherwise in the Rules,
MAC List or IP List configurations. Access to ports 80 (HTTP) and 443 WWAN (unchecked)
(HTTPS-if enabled), is still available unless disabled in the Remote WAN1 (unchecked)
Management option. WAN2 (unchecked)
WIFI (unchecked)

LAN Outgoing
Allows or Blocks traffic from the LAN accessing the specified WAN unless Values (check box)
set up otherwise using the Access Rules, MAC, and IP List configuration.
WWAN (checked)
WAN1 (checked)
WAN2 (checked)
WIFI (checked)

Anti-Spoof
The Anti-Spoof protection is to create some firewall rules assigned to the Values
external interface (WAN & Cellular) of the firewall that examines the source
address of all packets crossing that interface coming from outside. If the Enable / Disable
address belongs to the internal network or the firewall itself, the packet is
dropped.

Packet Normalization
Packet Normalization is the normalization of packets so there are no Values
ambiguities in interpretation by the ultimate destination of the packet. The
scrub directive also reassembled fragmented packets, protecting some Enable / Disable
operating systems from some forms of attack, and drops TCP packets that
have invalid flag combinations.

4.6.3 Firewall > Port Forwarding

The BulletPlusAC can be used to provide remote access to connected devices. To access these devices a
user must define how incoming traffic is handled by the BulletPlusAC. If all incoming traffic is intended for a
specific connected device, DMZ could be used to simplify the process, as all incoming traffic can be
directed towards a specific IP address.

In the case where there is multiple devices, or only specific ports need to be passed, Port forwarding is
used to forward traffic coming in from the WAN (Cellular) to specific IP Addresses and Ports on the LAN.
Port forwarding can be used in combination with other firewall features, but the Firewall must be enabled
for Port forwarding to be in effect. If Remote Access is blocked on the General Tab, additional rules and/or
IP Lists must be set up to allow the port forwarding traffic to pass through the firewall.

If DMZ is enabled and an

exception port for the WebUI
is not specified, remote
management will not be
possible. The default port for
remote management is TCP Image 4-6-3: Firewall > Port Forwarding
80.

DMZ Mode
Enable or disable DMZ Mode for each available WAN (Cellular or Wired). Values (selection)
DMZ can be used to forward all traffic to the DMZ Server IP listed below.
Disable / Enable

DMZ Server IP
Enter the IP address of the device on the LAN side of the BulletPlusAC Values (IP Address)
where all the traffic will be forwarded to.
192.168.100.100

Exception Ports
If the firewall is set to block
incoming traffic on the WAN Enter a exception port number(s) (range is XX:XX) that will NOT be Values (Port #)
and/or Carrier interfaces, forwarded to the DMZ server IP. Usually a configuration or remote
additional rules or IP/MAC
lists must be configured to
management port that is excluded to retain external control of the 0
allow desired traffic access.

Combined with Source NAT

Add an additional SNAT rule for port forwarding. It will modify the source IP Values (selection)
address of the incoming request to make the internal server respond to this
connection as a local request. No / Yes

Firewall Port Forwarding Configuration

Name
This is simply a field where a convenient reference or description is added Values (10 chars)
to the rule. Each Forward must have a unique rule name and can use up to
10 characters. Forward

Source
Select the source for the traffic, from either the Cellular WAN or from a Values (selection)
wired WAN.
WWAN/WAN1/WAN2/WIFI

Protocol
Select the type of transport protocol used. For example Telnet uses TCP, Values (selection)
SNMP uses UDP, etc.
TCP / UDP / Both

External Ports
Port number(s) (for range format is start:stop) of the incoming request Values (Port #)
(from Cellular/WAN-side).
2000

Internal Server IP
Enter the IP address of the intended internal (i.e. on LAN side of Values (IP Address)
BulletPlusAC) server. This is the IP address of the device you are
forwarding traffic to. 192.168.168.2

Internal Ports
Target port number(s) (for range format is start:stop) of the internal server Values (Port #)
on the LAN IP entered above.
3000

Combined with Source NAT

4.6.4 Firewall > MAC-IP List

MAC List configuration can be used to control which physical LAN devices can access the ports on the
BulletPlusAC, by restricting or allowing connections based on the MAC address. IP List configuration can
be used to define who or what can access the BulletPlusAC, by restricting or allowing connections based
on the IP Address/Subnet.

MAC-IP List can be used alone or in combination with LAN to WAN/4G Access Control to provide secure
access to the physical ports of the BulletPlusAC.

Image 4-6-4: Firewall > MAC-IP List

Firewall MAC List Configuration

Rule Name
The Rule Name field is required to give the rule a convenient name for Values (10 chars)
reference. Each rule must have a unique name, up to 10 characters in
length. mac1

Action
The Action is used to define how the rule handles the connection request. Values (selection)
ACCEPT will allow a connection, while REJECT (error) and DROP (quietly ACCEPT
dropped), will refuse connections. DROP
REJECT

MAC Address
Specify the MAC Address to be added to the list. Must be entered in the Values (MAC Address)
correct format as seen above. Not case sensitive.
00:00:00:00:00:00

Firewall IP List Configuration

Rule Name
The Rule Name field is required to give the rule a convenient name for Values (10 chars)
reference. Each rule must have a unique name, up to 10 characters in
length. ip1

Action
The Action is used to define how the rule handles the connection request. Values (selection)
ACCEPT will allow a connection, while REJECT (error) and DROP (quietly
dropped), will refuse connections. ACCEPT / DROP / REJECT

Source
Enter the specific zone that the IP List will apply to, Cellular, LAN, WAN or Values (Selection)
None (both).
LAN / WAN1 / WAN2 /
WWAN / WIFI

Source IP Address / Prefix

Match incoming traffic from the specified source subnet/prefix. An empty Values (IP Address)
prefix box indicates a single(/32) address.
0.0.0.0

4.6.5 Firewall > Rules

Once the firewall is turned on, rules configuration can be used to define specific rules on how local and
remote devices access different ports and services. MAC List and IP List are used for general access, and
are applied before rules are processed.

It is highly recommended to block as much traffic as possible from the modem, especially when using a
public IP address. The best security would to be to allow traffic only from trusted IP addresses, and only
the specific ports being used, and block everything else. Not configuring the firewall and the firewall rules
correctly could result in unpredictable data charges from the cellular carrier.

Refer to Appendix D for an

example of how to set up a
firewall to block all
connections and then add
access to only specific IP’s
and Ports.

Appendix D: Firewall
Example

Image 4-6-5: Firewall > Rules

Rule Name
The rule name is used to identify the created rule. Each rule must have a Values (10 Chars)
unique name and up to 10 characters can be used.
rule1

Type
The type refers to the direction in terms of source and destination of the Values (selection)
traffic. The fields below will adjust accordingly.
Input
Output
Forward

Action
The Action is used to define how the rule handles the connection request. Values (selection)
ACCEPT will allow a connection, while REJECT (error) and DROP ACCEPT
(quietly dropped), will refuse connections. DROP
REJECT
This is configured based on how the WAN/Carrier Request and LAN to
WAN/Carrier Access Control are configured in the previous menus.

Source
Select the zone which is to be the source of the data traffic. The LAN Values
refers to local connections on the BulletPlusAC..
LAN / WAN1 / WAN2 /
WWAN / WIFI / Any

Source IPs
Match incoming traffic from the specified source IP range. Boxes accept Values (IP Address)
single IP Addresses without network masks, example: 192.168.1.0 to
192.168.1.255 represents all IP Addresses in the 192.168.1.0/24 network. 192.168.0.0 to
(Put same IP in both boxes for a single IP match.) 192.168.0.0

Destination
Select the zone which is the intended destination of the data traffic. 3G/4G Values (selection)
applies to the wireless connection to the cellular carrier and the LAN,
LAN1, USB refers to local connections on the BulletPlusAC. LAN/LAN1/Cell/WAN/USB
None

Destination IPs
Match incoming traffic from the specified destination IP range. Boxes Values (IP Address)
accept single IP Addresses without network masks, example: 192.168.1.0
to 192.168.1.255 represents all IP Addresses in the 192.168.1.0/24 192.168.0.0 to
network. (Put same IP in both boxes for a single IP match.) 192.168.0.0

Destination Port
Match incoming traffic directed at the given destination port or port range. Values (port)
(To specify a port range use a From:To (100:200) format) 0

Protocol
The protocol field defines the transport protocol type controlled by the rule. Values
TCP
UDP
Both
ICMP

4.6.6 Firewall > Firewall Default

The Firewall Default option allows a user to return the modems firewall setting back to the default values
without having to reset the entire modem.

Image 4-6-6: Firewall > Firewall Default

4.7 VPN

4.7.1 VPN > Summary

A Virtual Private Network (VPN) may be configured to enable a tunnel between the BulletPlusAC and a
remote network. The BulletPlusAC supports VPN IPsec Gateway to Gateway (site-to-site) tunneling,
meaning you are using the BulletPlusAC to create a tunnel to a network with VPN capabilities (Another
BulletPlusAC or VPN capable device).

Image 4-6-7: VPN > Summary

4.7.2 VPN > Gateway To Gateway (Site-to-Site)

A Gateway to Gateway connection is used to create a tunnel between two VPN devices such as an
BulletPlusAC and another device (another BulletPlusAC or Cisco VPN Router or another vendor…). The
local and remote group settings will need to be configured below to mirror those set on the other VPN

Image 4-7-8: VPN > Gateway to Gateway

Tunnel Name
Enter a name for the VPN Tunnel. Up to 16 different tunnels can be Values (chars)
created, each requiring a unique name.
(no default)

Enable
Used to enable (checked) is disable (unchecked) the VPN tunnel. Values (checkbox)
Enable (Checked)

Interface
Select the WAN interface used for the Gateway to Gateway VPN. U Values (selection)
WWAN
WAN1
WAN2

Local Group Setup

Local Security Gateway Type

Specify the method for identifying the router to establish the VPN tunnel. Values (selection)
The Local Security Gateway is on this router; the Remote Security
Gateway is on the other router. At least one of the routers must have either IP Only
a static IP address or a dynamic IP with server id to make a connection. IP + Server ID
Dynamic IP + Server ID

IP Only: Choose this option if this router has a static WAN IP address. The WAN IP address appears
automatically. For the Remote Security Gateway Type, an extra field appears. If you know the IP address
of the remote VPN router, choose IP Address, and then enter the address.

IP + Server ID: Choose this option if this router has a static WAN IP address and a server id. The WAN IP
address appears automatically. For the Remote Security Gateway Type, an extra field appears. If you
know the IP address of the remote VPN router, choose IP Address, and then enter the address.

Dynamic IP + Server ID: Choose this option if this router has a dynamic IP address and a server id
(available such as @microhard.vpn). Enter the server id to use for authentication. The server id can be
used only for one tunnel connection.

Interface IP Address
Displays the IP address of the BulletPlusAC, which is the local VPN Values (IP Address)
Gateway.
Current IP Address

Server ID
This option appears when the Local Security Gateway Type specifies that Values (characters)
the Server ID is required for the connection. The Server ID must be in the
format @name, where name can be anything. Both routers must know (no default)
each others names to establish a connection.

Group Subnet IP / Mask -1

Specify the local subnet(s) by entering IP and mask of the local network. Values (IP Address)
(No default subnet IP)
255.255.255.0

Remote Group Setup

Remote Security Gateway Type

Gateway IP Address
If the remote VPN router has a static IP address, enter the IP address of Values (IP Address)
the remote VPN Gateway here.
(no default)

Server ID
This option appears when the Remote Security Gateway Type specifies Values (IP Address)
that the Server ID is required for the connection. The Server ID must be in
the format @name, where name can be anything. Both routers must know (no default)
each others names to establish a connection.

Group Subnet IP / Mask -1

Define the remote network(s) by specifying the local subnet. Values (IP Address)
(No default subnet IP)
255.255.255.0

IPsec Setup

Aggressive Mode
Check the box to enable aggressive mode for IPSec. In aggressive mode Values (checkbox)
the IKE SA negotiation is squeezed into 3 packets, resulting in faster
negotiation, but is less secure. (unchecked)

IKE Strict Mode

Check the box to enable IKE Strict Mode. Values (checkbox)
(unchecked)

IKE DH Group
Select the Diffie-Hellman public key type. Select between 1024, 1536 and Values (selection)
2048 bit. The values on each end of the tunnel must match.
modp1024
modp1536
modp2048

IKE Encryption
Select the IKE Encryption type used. Select the value to match the Phase 1 Values (selection)
Encryption type used by the remote VPN router.
3des
aes
aes128
aes256

IKE Authentication
Sets the IKE Authentication type. Select the value to match the Phase 1 Values (selection)
Authentication used by the remote VPN router accordingly.
md5
sha1

IKE SA Lifetime(s)
Sets the lifetime of the keys used to encrypt data, when the timers run out Values
the tunnel negotiates a new key. The default value is 28800 seconds (8
hours). 28800

Phase 2 Type
Select the type of security protocol to use for phase 2 of the IKE Values (selection)
negotiation. The options are ESP (Encapsulating Security Payload) and AH
(Authentication Header). Must match remote end of tunnel. ESP / AH

Phase 2 Strict Mode

Check the box to enable IKE Strict Mode for phase 2. Values (checkbox)
(unchecked)

Phase 2 DH Group
Select value to match the values required by the remote VPN router. Values (selection)
modp1024
modp1536
modp2048

Phase 2 Encryption
Select value to match the Phase 1 Encryption type used by the remote Values (selection)
VPN router.
3des
aes
aes128
aes256

Phase 2 Authentication
Sets the IKE Authentication type. Select the value to match the Phase 2 Values (selection)
Authentication used by the remote VPN router accordingly.
md5
sha1

Phase 2 SA Lifetime(s)
Sets the lifetime of the keys used to encrypt data for phase 2, when the Values
timers run out the tunnel negotiates a new key. The default value is 3600
seconds (1 hour). 3600

Preshared Key
Set the Preshared Key required to authenticate with the remote VPN Values (characters)
router.
password

DPD Delay(s)
Dead Peer Detection is used to detect if there is a dead peer. Set the DPD Values (seconds)
Delay (seconds), as required.
32

DPD Timeout(s)
Set the DPD (Dead Peer Detection) Timeout (seconds), as required. Values (seconds)
122

DPD Action
Controls the use of Dead Peer Detection (DPD) protocol, which is the Values (seconds)
method to detect the aliveness of a IPsec connection. When DPD is in use,
VPN device will send IPsec DPD packet to the peer and wait for the peer's Hold
acknowledgement. If there is no feedback from the peer, the tunnel is Clear
stopped and unrouted (clear), put in the (hold) state or (restarted). Restart
Backup

4.7.3.1 VPN > L2TP Client

The BulletPlusAC can be configured as a L2TP Server or Client. This section outlines the configuration of a
OpenVPN Client.

Image 4-7-93: VPN > L2TP Client

Tunnel Name
Enter a name for the VPN Tunnel. Up to 16 different tunnels can be Values (chars)
created, each requiring a unique name.
tunnel1

Enable
Used to enable (checked) is disable (unchecked) the VPN tunnel. Values (checkbox)
Enable (Checked)

Local Interface IP Address

This will display the current BulletPlusAC WAN (Cellular) IP Address. Values (IP Address)
Current IP

Remote Gateway IP Address

Enter the IP Address of the Remote Gateway that you wish to establish a Values (IP Address)
connection with.
none

Remote Server ID
Some servers require that you know the Server ID as well as the IP Values
address. Enter the Server ID of the remote router here.
none

Remote Subnet IP
In order to communicate with the devices on the other side of the tunnel, Values (IP Address)
the BulletPlusAC must know which data to pass through the tunnel, to do
this enter the Remote Subnet network IP address here. none

Remote Subnet Mask

Enter the Remote Subnet Mask Values (IP Address)
none

Idle time before hanging up

Enter the Idle time (in seconds) to wait before giving up the PPP Values (seconds)
connection. The default is 0, which means the time is infinite. (0—65535)
0

Username
Enter the Username Values (chars)
0

Preshared Key
The preshared key is required to connect to the L2TP Server. Values (chars)
0

IPSec Setup - See previous sections for additional info.

4.7.3.2 VPN > L2TP Server

The BulletPlusAC can operate as a L2TP Server, allowing VPN connections to be made with L2TP Clients.
The configuration for L2TP Server can be found on the VPN Summary Page. You can then select “Edit”.

Image 4-7-10: VPN > L2TP Server Configuration

Enable
Select the Enable check box to enable the L2TP Server and to view the Values (checkbox)
L2TP Server configuration parameters.
Disabled (unchecked)

IPsec
Use the IPsec checkbox to enable Ipsec on the L2TP Server. The different Values (checkbox)
IPsec parameters are covered in the IPsec section of Gateway-to-Gateway
VPN. Disabled (unchecked)

Local Security Gateway Type

Select the Local Security Gateway type. When set to IP only, clients only Values (selection)
need to know the IP address of the L2TP Server in order to create a
session. In a IP + Server ID selection, the client would need to know the IP IP Only
and a specified ID. IP + Server ID

Server ID
As a extra measure of security a server ID can be specified and remote Values (characters)
client would need to know this ID before they can create a session and
begin authentication. none

Interface
The Interface parameter is a non changeable parameter that is shown to Values
indicate which interface the L2TP Server is listening for incoming
connections from clients. To use an alternate interface, you need to create/ WWAN or WAN1/2
edit a new connection from the VPN > Summary page.

Interface IP Address
The Interface IP Address is a non-changeable field that shows the current Values
WAN or 4G IP address (as defined in the Interface parameter above).
Clients would need this IP address to create a remote connection. xxx.xxx.xxx.xxx

Server IP Address
The Server IP Address is the local LAN IP of the Dragon-LTE. (The default Values (IP Address)
Local IP of the BulletPlusAC is 192.168.168.1)
none

IP Address Range Start

Enter the starting range of IP Addresses to be assigned to clients once Values (IP Address)
they successfully create a tunnel with the L2TP Server.
none

IP Address Range End

Enter the ending range of IP Addresses to be assigned to clients once they Values (IP Address)
successfully create a tunnel with the L2TP Server.
none

IPSec Setup - See previous sections for additional info.

4.7.4 VPN > OpenVPN

OpenVPN Server
The BulletPlusAC supports OpenVPN and can be configured as a Server or a Client. This section outlines
the configuration of a OpenVPN Server.

Image 4-7-11: VPN > OpenVPN Server

Server Bridge Mode

In Server Bridge Mode the BulletPlusAC logically merges both Ethernet Values (checkbox)
networks, at both ends of the tunnel, as if they were a single Ethernet
subnet. unchecked

Tunnel Protocol
Select the Tunnel Protocol to be used. The options are TCP and UDP, the Values (selection)
default is UDP.
TCP / UDP

Port
The TCP/UDP port which the server is listening on. Default is 1194 Values (port)
1194

MSSFIX/Fragment size
The maximum resulting UDP send packet size after the OpenVPN has Values (size)
fully encapsulated data. Packets exceeding this max value will be
fragmented. 1370

Root Certificate
The root certificate file (CA file) that all the server and clients must have in Values (chars)
common.
ca.crt

Public Server Certificate

The Public Server Certificate which is the certificate file that resides on only Values (chars)
the server.
server.crt

Private Server Key

The private Server Key, which should not be disclosed. Values (chars)
server.key

Certificate Revocation List

In PEM format, the Certificate Revocation List is a list of certificates that Values (chars)
have been revoked and should not be trusted.
crl.pem

TLS Auth Key

The server and each client must have a copy of this key to do TLS Values (chars)
authentication.
(no default)

User/Password Authentication
Select the OpenVPN username as setup/defined in the VPN Users menu. Values (selection)
(no default)

Diffie hellman parameter

Select between 1024 bit and 2048 bit Diffie Hellman keys for security. Values (selection)
DH2048 / DH1024

Bridge Gateway IP Address

When set to Server Bridge Mode, the Bridge Gateway IP Address must be Values (IP Address)
specified.
(No default)

Bridge IP Address Range / Netmask

Specify the IP Address Range and Netmask that is used when the Values (IP Address)
OpenVPN Server is set to Server Bridge Mode.
(No default)

Server Virtual Subnet / Subnet Mask

The subnet and subnet mask that the server will create to assign address Values (IP Address)
to itself and the clients.
10.8.0.0

Push DNS to Client

If enabled (Auto) the server will push its DNS server information to the Values (selection)
client. Manual allows the DNS information to be manually entered.
NO / Auto / Manual

Keep Alive Ping Interval

The keep alive directive causes ping-like messages to be sent back and Values (seconds)
forth over the link so that each side knows when the other side has gone
down. Default 10 seconds. 10

Keep Alive Ping Period

Use LZO Compression

Enable/Disable LZO compression on the VPN link. Lempel–Ziv– Values (selection)
Oberhumer (LZO) is a lossless data compression algorithm.
Enable / Disable

OpenVPN Server Network Settings

OpenVPN Client
The BulletPlusAC supports OpenVPN and can be configured as a Server or a Client. This section outlines
the configuration of a OpenVPN Client.

Image 4-7-12: VPN > OpenVPN Celint