[Link].

com

User Manual
H8922S 3G/4G Router
 H8922S 3G/4G Router User Manual

We Hongdian provide full support to customers, contact us freely if any questions.

Hongdian Corporation

Tower A, Hongdian Building, 100 Huabao Road, Pinghu, Longgang District,

Address
Shenzhen, China
Website [Link]
Technical Support +86-0755-88864288-4
Fax number 0755-83404677
Postalcode 518112

Copyright © Hongdian Corporation. All rights reserved.

All information in this user manual is protected by copyright law. Whereby, no organization or individual shall
copy or reproduce the whole or part of this user manual by any means without written authorization from
Hongdian Corporation.

Trademarks and Permissions

and DTU are the trademarks and logos of Hongdian Corporation. Other trademarks and
logos mentioned in this manual belong to other organizations related. Hongdian Corporation does not own
the rights of other trademarks and logos.

Caution
The content of this document may be updated from time to time due to product version updates or other
reasons. Unless otherwise agreement, this document is intended as a guide for use only. All statements,
information and recommendations in this document do not constitute any express or implied warranty.

Doc. Version 1.0 1

 H8922S 3G/4G Router User Manual

Foreword

Overview
H8922S 4G router is designed and manufactured by Hongdian, it based on 4G cellular network technology, in-
dustrial class quality. With its embedded cellular module, it has been widely used in finance, transportation,
telecom, electricity, security system and other industries. This document introduced how to use H8922S and its
function features.

Product Version
The following table lists the product versions related to this document.

Model Hardware Version Software Version

H8922S V40 V7.2.0_SE

Readers
The document applies to the following persons:
 R&D engineers
 Technical support engineers
 Customers
You are recommended to start from Chapter One if you know and use any Router product of Hongdian for the
first time so as to get a better understanding of the product and the correct usage by reading all the contents
of the document.
You are recommended to select any chapter or section you want to know via the contents below if you have
known or used any Router product of Hongdian or a similar product of any other company.

Brief Introduction of Contents

The usage of H8922S 4G Router is described in the document.

Section Contents

1 Product Introduction H8922S 4G Router and its functional characteristics, product

orientation are introduced in the chapter.

Doc. Version 1.0 2

 H8922S 3G/4G Router User Manual

Section Contents

2 Product Structure H8922S 4G Router software, hardware structures are intro-

duced in the chapter.

3 Installation of H8922S 4G Router How to install H8922S 4G Router is introduced in the chapter.

4 Preparation before Configuration Preparation before H8922S 4G Router configuration is intro-

duced in the chapter.

5 Router Configuration H8922S 4G Router functional configuration is introduced in the

chapter.

6 Typical Application Several typical application modes of H8922S 4G Router is intro-

duced in the chapter.

7 FAQ/Exception handling The causes and handling methods for common faults of H8922S
4G Router during usage are introduced in the chapter.

Conventions
Symbol Conventions

The symbols that may be found in this document are defined as follows.

Symbol Description

Indicates a potentially hazardous situation, which if not avoided, could result in

equipment damage, data loss, performance degradation, or unexpected results.

Indicates a tip that may help you address a problem or save your time.

Provides additional information to emphasize or supplement important points of

the main text.

Command Conventions

Convention Description

Boldface The keywords of a command line are in boldface.

Italic Command arguments are in italics.

[] Items (keywords or arguments) in brackets [ ] are optional.

{ x | y | ... } Optional items are grouped in braces and separated by vertical ars. One item is
selected.

[ x | y | ... ] Optional items are grouped in brackets and separated by vertical bars. One item is
selected or no item is selected.

Doc. Version 1.0 3

 H8922S 3G/4G Router User Manual

Convention Description

{ x | y | ... } * Optional items are grouped in braces and separated by vertical ars. A minimum of
one item or a maximum of all items can be selected.

[ x | y | ... ] * Optional items are grouped in brackets and separated by vertical ars. Several items
or no item can be selected.

&<1-n> The parameter before the & sign can be repeated 1 to n times.

# A line starting with the # sign is comments.

GUI Conventions

Convention Description

Boldface Buttons, menus, parameters, tabs, window, and dialog titles are in boldface. For
example, click OK.

> Multi-level menus are in boldface and separated by the ">" signs.
For example, choose File > Create > Folder.

Keyboard Operations

Format Description

Key Press the key. For example, press Enter and press Tab.

Key 1+Key 2 Press the keys concurrently. For example, pressing Ctrl+Alt+A means the three keys
should be pressed concurrently.

Key 1, Key 2 Press the keys in turn. For example, pressing Alt, A means the two keys should be
pressed in turn.

Mouse Operation

Action Description

Click Select and release the primary mouse button without moving the pointer.

Double-click Press the primary mouse button twice continuously and quickly without moving the
pointer.

Drag Press and hold the primary mouse button and move the pointer to a certain posi-
tion.

Doc. Version 1.0 4

 H8922S 3G/4G Router User Manual

Contents

Foreword .................................................................................................................................. ii
Overview ................................................................................................................................................................ ii
Product Version ...................................................................................................................................................... ii
Conventions .......................................................................................................................................................... iii
1 Product Introduction .............................................................................................................. 1
About this chapter.................................................................................................................................................. 1
Overview ................................................................................................................................................................ 1
1.1 Product positioning .......................................................................................................................................... 1
1.2 Function & Features ......................................................................................................................................... 3
1.3 Technical Specifications ................................................................................................................................... 4

2 Product Structure ................................................................................................................... 5

About this chapter.................................................................................................................................................. 5
2.1 Hardware.......................................................................................................................................................... 5
2.1.1 Appearance & Size .................................................................................................................................. 5
2.1.2 Accessories.............................................................................................................................................. 7

3 Installation of H8922S 4G Router ........................................................................................... 8

About this chapter.................................................................................................................................................. 8
3.1 Unpacking......................................................................................................................................................... 8
3.2 How to install ................................................................................................................................................... 8
3.2.1 SIM/UIM card install ............................................................................................................................... 8
3.2.2 Ethernet cable connection ...................................................................................................................... 9
3.3 Power supply .................................................................................................................................................. 10
3.4 Installation Inspection .................................................................................................................................... 10
4 Preparation before configuration ......................................................................................... 12
About this chapter................................................................................................................................................ 12
4.1 Terminal Panel Indicator Lamp Status ........................................................................................................... 12
4.2 Local Connection Configuration ..................................................................................................................... 13

5 The Configuration of Router ................................................................................................. 22

About this chapter................................................................................................................................................ 22
Overview .............................................................................................................................................................. 22
5.1 Basic configuration ......................................................................................................................................... 22
5.1.1 Logging in to the WEB Configuration Page ........................................................................................... 23
5.2 Network settings ............................................................................................................................................ 24
Overview ........................................................................................................................................................ 24
5.2.1 LAN ........................................................................................................................................................ 24
5.2.2 WAN ...................................................................................................................................................... 25

Doc. Version 1.0 5

 H8922S 3G/4G Router User Manual

5.2.3 Modem ................................................................................................................................................. 28

5.2.4 WLAN .................................................................................................................................................... 34
5.2.5 Parameter select (Recommend to Single module dual SIM version) ................................................... 37
5.2.6 Network type ........................................................................................................................................ 40
5.2.7 Link Backup ........................................................................................................................................... 41
5.2.8 DHCP Service ......................................................................................................................................... 44
5.3 Application Setting ......................................................................................................................................... 46
Overview ........................................................................................................................................................ 46
5.3.1 ICMP check............................................................................................................................................ 46
5.3.2 DDNS configuration .............................................................................................................................. 49
5.3.3 GPS configuration ................................................................................................................................. 50
5.3.4 DTU configuration ................................................................................................................................. 53
5.3.5 SNMP configuration .............................................................................................................................. 59
5.3.6 M2M configuration ............................................................................................................................... 62
5.3.7 Schedule configuration ......................................................................................................................... 63
5.3.8 SMS Settings ......................................................................................................................................... 66
5.3.9 Radius settings ...................................................................................................................................... 67
5.4 Security Configuration.................................................................................................................................... 68
Overview ........................................................................................................................................................ 68
5.4.1 IP Filter .................................................................................................................................................. 68
5.4.2 Domain Filter ........................................................................................................................................ 71
5.4.3 MAC filter .............................................................................................................................................. 72
5.4.4 Remote Access ...................................................................................................................................... 74
5.4.5 Anti-attack ............................................................................................................................................ 77
5.5 Forward configuration.................................................................................................................................... 78
Overview ........................................................................................................................................................ 78
5.5.1 NAT ....................................................................................................................................................... 78
5.5.2 Routing Configuration ........................................................................................................................... 83
5.5.3 QoS........................................................................................................................................................ 86
5.5.4 Dynamic Routing (Optional).................................................................................................................. 88
5.6 VPN configuration .......................................................................................................................................... 96
Overview ........................................................................................................................................................ 96
5.6.1 VPDN configuration .............................................................................................................................. 96
5.6.2 Tunnel configuration........................................................................................................................... 100
5.6.3 IPSec configuration ............................................................................................................................. 102
5.6.4 Open VPN Configuration ..................................................................................................................... 109
5.6.5 DMVPN Configuration......................................................................................................................... 113
5.6.6 EOIP Configuration.............................................................................................................................. 117
5.7 System Management Configuration ............................................................................................................ 118
Overview ...................................................................................................................................................... 118
5.7.1 Local Log ............................................................................................................................................. 118

Doc. Version 1.0 6

 H8922S 3G/4G Router User Manual

5.7.2 Remote Log ......................................................................................................................................... 119

5.7.3 Clock.................................................................................................................................................... 120
5.7.4 Account ............................................................................................................................................... 122
5.7.5 Network Test....................................................................................................................................... 124
5.7.6 Files ..................................................................................................................................................... 125
5.8 Status............................................................................................................................................................ 129
Overview ...................................................................................................................................................... 129
5.8.1 Base Information ................................................................................................................................ 129
5.8.2 LAN ...................................................................................................................................................... 130
5.8.3 WAN .................................................................................................................................................... 131
5.8.4 Modem ............................................................................................................................................... 133
5.8.5 WLAN .................................................................................................................................................. 135
5.8.6 Routing Table ...................................................................................................................................... 138
5.8.7 GPS ...................................................................................................................................................... 139
5.8.8 Traffic Statistics ................................................................................................................................... 140
5.9 RESET button function ................................................................................................................................. 141

6 Typical application ............................................................................................................. 142

About this chapter.............................................................................................................................................. 142
6.1 Overview ...................................................................................................................................................... 142
6.2 Link backup function .................................................................................................................................... 142
Application result ......................................................................................................................................... 143
6.3 Parameter select function ............................................................................................................................ 144
6.4 VPN ............................................................................................................................................................... 147
6.5 Schedule ....................................................................................................................................................... 150
7 FAQ/Exception handling..................................................................................................... 151
About this chapter.............................................................................................................................................. 151
7.1 Hardware Failure .......................................................................................................................................... 151
7.1.1 All LED off ............................................................................................................................................ 151
7.1.2 SIM Slot ............................................................................................................................................... 151
7.1.3 Ethernet Connection ........................................................................................................................... 152
7.1.4 Antenna Connection ........................................................................................................................... 152
7.2 Dial Online Problem ..................................................................................................................................... 152
7.2.1 Dial discontinue .................................................................................................................................. 152
7.2.2 No Signal ............................................................................................................................................. 153
7.2.3 Cannot find SIM/UIM card .................................................................................................................. 153
7.2.4 Poor Signal .......................................................................................................................................... 153
7.2.5 Compress Protocol not match ............................................................................................................ 154
7.3 VPN Problem ................................................................................................................................................ 154
7.3.1 VPDN cannot connect ......................................................................................................................... 154
7.3.2 VPN cannot communicate .................................................................................................................. 154
7.3.3 Router can communicate but subnet cannot ..................................................................................... 155

Doc. Version 1.0 7

 H8922S 3G/4G Router User Manual

7.4 WEB config problem..................................................................................................................................... 155

7.4.1 Updating firmware failure .................................................................................................................. 155
7.4.2 Backup setting problem ...................................................................................................................... 156
7.4.3 Updating patch failure ........................................................................................................................ 156
7.4.4 CFE Updating failure ........................................................................................................................... 156
7.4.5 Update failure in WEB GUI .................................................................................................................. 157
7.4.6 Forget Router Password ..................................................................................................................... 157

Doc. Version 1.0 8

 H8922S 3G/4G Router User Manual

1 Product Introduction

About this chapter

Section Brief Introduction of Contents

1.1 Summary The summary of H8922S 4G Router is briefly introduced in the section.

1.2 Product Orientation The product orientation of H8922S 4G Router is briefly introduced in the sec-
tion.

1.3 Function & features The functions and features of H8922S 4G Router are briefly introduced in the
section.

1.4 Technical Indicators The technical indicators and relevant specifications for H8922S 4G Router are
and Specifications briefly introduced in the section.

Overview
H8922S 4G Router is a wireless router gateway researched and developed based on 4G technology. Besides
the functions such as VPN, firewall, NAT, PPPoE, DHCP of conventional routers, it can also support 4G wireless
dialing to provide wireless high speed bandwidth as high as 100Mbps. H8922S 4G Router has three modes:
single mode single card, single mode dual card, dual mode dual card. and all of the three forms support
802.11n to provide local wireless local area network (WLAN) as high as 150Mbps. The most dominant feature
of H8922S 4G Router is that it can support simultaneous online and backup switch over among various net-
works such as WAN, WLAN and 4G. The backup in various networks can guarantee and maintain communica-
tion links to the greatest extent so as to avoid business loss caused by communication outage. The simultane-
ous online of various networks can facilitate strategy diversion based on business so as to realize the band-
width rationality and adequate utilization of various network channels.
H8922S 4G Router supports the M2M wireless remote comprehensive network management platform inde-
pendently researched and developed by Hongdian. The M2M platform is able to realize the statistics of 4G
wireless network information and status in the place where H8922S 4G Router is used as well as the remote
upgrade and configuration management for H8922S 4G Router.

1.1 Product positioning

Doc. Version 1.0 1

 H8922S 3G/4G Router User Manual

H8922S 4G Router is widely used in power, energy, agriculture, numerical control, information media, finance,
self-service terminals, intelligent logistics, smart oil fields, smart cities, environmental disaster reduction and
other scenarios.
Dual mode backup application for financial industry
H8922S 4G Router can provide guarantees for highly secure transmission of financial data via ways such as IPSec
VPN. The risks of communication outage caused by operators’ network faults can be greatly reduced via its dual
mode switch over function. The typical network is as shown in Figure 1-1

Figure 1-1 Network structure

Dual mode online application for financial industry

H8922S 3G/4G Router dual mode simultaneous online can simultaneously support the functions such as data
transmission for ATM and video monitoring of ATM so as to guarantee the security of ATM operating environ-
ment. The typical network is as shown in Figure 1-2.

Figure 1-2 Schematic diagram of Dual Mode Online Application

On-board communication industry application

H8922S 4G Router supports the transmission on-board videos. In a parking lot, HD video can be transmitted to
nearby WLAN hot spots via WLAN, then transmitted to Internet via WLAN hot spots. When an automobile is
running, relevant data can be transmitted to a video server via 3G/4G network communication. The typical
network is as shown in Figure 1-3.

Doc. Version 1.0 2

 H8922S 3G/4G Router User Manual

Figure 1-3 Schematic diagram of On-board communication industry application

1.2 Function & Features

Basic functions
 Support global bands.
 Supports hot backup failover for various networks such as WAN, WLAN, 4G.
 Supports 802.11b/g/n wireless mode; Supports WLAN AP/station mode.
 Supports the high speed data exchange of 4 LAN interfaces.
 Supports PPPoE dialing at a WAN interface.
 Supports the access of private networks such as VPDN, APN.
 Supports various VPN protocols, such as IPSec, GRE, IPIP, PPTP, L2TP
 Supports GRE over IPSec, IPSec over PPTP/L2TP/GRE/IPIP
 Supports the multi parameter and multifunction combination switchover functions original developed by
Hongdian to realize the flexible and rapid communication switchover of multiple servers and the switch-
over of multiple operators on a single card.
 Supports DHCP Server.
 Optional for GPS
 Optional for serial port, (1 x RS232, 1 x RS485)
 Supports local, long distance, platform firmware/patch upgrade.
 Supports firmware update by CFE (The update method used for when the breakdown of file systems
caused by abnormal conditions such as a power failure during webpage update process happens, which
has a higher efficiency).
 Supports various management methods such as WEB, CLI, SSH and platforms.
 Supports M2M platform management.

Doc. Version 1.0 3

 H8922S 3G/4G Router User Manual

 Supports the backup and import of parameters and Supports the use of private keys to import or export
parameter configurations.
 Supports internal storage of equipment.
 Supports DNS proxy and DDNS.
 Supports NTP network timing.
 Supports SNMP network management
 Supports local logs and remote logs.
 Supports QoS (Quality of Service) (optional), and it can perform various types of QoS bandwidth intelligent
management for business, protocols and IP network segments.
 Supports static routing, RIPv2 (Routing Information Protocol) and OSPF (Open Shortest Path First) dynamic
routing, source address strategy routing.
 Supports fixed time management to effectively control online surfing flow and duration.
 Supports data trigger online and off-line at fixed time or when data is idle.
 Supports the link detection functions such as LCP (Link Control Protocol) detection, ICMP (Internet Control
Message Protocol) detection to guarantee the stability and reliability of wireless network.
 LED status monitoring (The status of power supply, system, 3G/4G network type and signal strength, etc.
is displayed).
 Supports local and remote system running log functions to realize the monitoring of equipment operation
in real time.

1.3 Technical Specifications

Interfaces

 Antenna interface: SMA-K female connector

 Ethernet interface: 4 RJ45 exchange interfaces,10M/100MBase-T adaptive
 WAN interface: 1 RJ45 exchange interface,10M/100MBase-T adaptive
 RESET button: One button to restore the factory button
 DC power outlet: Supply voltage
 ground stud: 1, grounding wire
 6 PIN data terminal: 1, serial port function available

Power supply

 Voltage: +5V ~ +36V DC

 Average idle power consumption: 200mA@12V DC
 Average operating power consumption: 550mA@12V DC

Other parameters

 Net weight: Approx. 540g

 Operating temperature: -30～+75℃
 Storage temperature: -40～+85℃
 Relative humidity: ≤95% (Non-condensing)

Doc. Version 1.0 4

 H8922S 3G/4G Router User Manual

2 Product Structure

About this chapter

Chapter Content

2.1 Hardware H8922S 4G router hardware.

2.2 Structure Structure of H8922S 4G router.

2.1 Hardware
2.1.1 Appearance & Size
Appearance

Figure 2-1 H8922S 4G router appearance

Doc. Version 1.0 5

 H8922S 3G/4G Router User Manual

Size

Table 2-1 H8922S 4G router size

Model Dimension (mm) Interface

 4×10/100Mb LAN interface

 1×10/100Mb WAN interface
H8922S 4G router 176×105×25
 2× SMA-K 3G/4G antenna interface
 1× SMA-K Wi-Fi antenna interface
 2× Standard SIM/R-UIM interface
 1× Standard DC power interfac
 6 PIN data terminal

H8922S 4G router appearance as Figure 2-2, shows

Figure 2-2 H8922S 4G router views

Doc. Version 1.0 6

 H8922S 3G/4G Router User Manual

2.1.2 Accessories
Table 2-2 H8922S 4G router accessories

Accessories name Number Note

H8922S 4G router 1 pcs

CD-ROM 1 pcs Optional

3G/4G antenna 2 pcs

Wi-Fi antenna 1 pcs Optional

GPS antenna 1 pcs Optional

RJ45 cable 1 pcs

Mounting 1 pair Optional

Certificate and warranty card 1 pcs

+12V power adapter 1 pcs

Doc. Version 1.0 7

 H8922S 3G/4G Router User Manual

3 Installation of H8922S 4G Router

About this chapter

Chapter Content

3.1 Unpacking Unpack H8922S 4G router box and the packing list.

3.2 How to install How to install H8922S 4G router with SIM/UIM card and Ethernet cable, etc.

3.3 Power supply Power supply needs of H8922S 4G router.

3.4 Review Review.

3.1 Unpacking
Upon arrival of the equipment, it is necessary to unpack the box and inspect whether the device and accesso-
ries are complete. Generally speaking, the complete set of equipment shall include the parts shown in Table 2-
2. The packing materials shall be properly kept for future use.

3.2 How to install

3.2.1 SIM/UIM card install
H8922S 4G router support dual SIM/UIM card, so you may need insert dual SIM before config it.

Before install SIM/UIM card, disconnect any power resource of the router.

Step 1 Use a small stick push the yellow button on router, the SIM slot will pop out as Figure 3-1
shows.

Doc. Version 1.0 8

 H8922S 3G/4G Router User Manual

Figure 3-1 Pop out SIM slot

Step 2 Put SIM card in slot at proper direction as Figure 3-2 shows.

Figure 3-2 SIM/UIM card install.

---END

3.2.2 Ethernet cable connection

Use Ethernet port directly connect H8922S 4G router and computer, or transferred by a switch.

Single equipment direct connection

Use Ethernet cable with RJ-45 type to directly connect RJ45 port of H8922S 4G Router, as shown below.

Figure 3-3 Single Equipment Direct Connection

Doc. Version 1.0 9

 H8922S 3G/4G Router User Manual

Multiple equipment local area network connection

H8922S 4G Router supports to simultaneously connect to multiple equipments through a switch (such equip-
ments may not be in the same network segment) as shown in the figure below.

Figure 3-4 Multiple Equipments Connection

3.3 Power supply

+5V~+36V direct current supply is used for H8922S 4G Router

3.4 Installation Inspection

Before installation and power-on, the SIM card shall be pressed to inspect whether it is properly inserted. Af-
ter power-on, the working status indicator of the router shall be inspected. The LAN interface will be bright as
soon as power-on, and the RUN lamp will be bright a while later, which means that the system has been
started and working normally.

An antenna must be connected before power-on to avoid the impedance mismatching of RF that causes
unsuccessful dial-up and Internet access due to poor signals.

Operating steps
Step 1 Inspect whether the antenna is correctly connected.
Step 2 Inspect whether the SIM card is correctly and properly installed and confirm whether the
SIM card is valid.
Step 3 Provide power supply for H8922S 4G Router. The following content is about the router
dialing with SIM 1, and it will be the same when using SIM 2.
 After providing power supply, it means that the power supply for the router is normal in
case the LAN interface lamp of H8922S 4G Router connected with a lower computer is
bright.

Doc. Version 1.0 10

 H8922S 3G/4G Router User Manual

 After a certain period, it means the router system is started in case the RUN indicator lamp
of the router is bright.
 After the RUN indicator lamp is bright for a while, it means that the router has found the
module and started dialing in case the NET indicator lamp is bright and flashing quickly.
 During the dialing process, the RF lamp will be bright, which means that the router has ac-
quired the signal strength of the SIM card, and the network signal strength can be judged
 as per the flashing condition of the RF lamp. See “4.1 Terminal Panel Indicator Lamp Status”
for details.
 Upon the completion of router dialing, in case the NET lamp is normally on, it means that
the connected network is 3G/4G. In case it is flashing slowly, it means that the connected
network is 2G/2.5G/2.75G.

For different modules, the durations for the router to find all modules are various; in addition, the durations for dial-
ing are various due to different networks. Therefore, for different modules, the durations of router dialing and acquir-
ing IP addresses may vary. However, the router dialing process is exactly as specified above.
---End

Doc. Version 1.0 11

 H8922S 3G/4G Router User Manual

4 Preparation before configuration

About this chapter

Section Brief Introduction of Contents

4.1 Terminal Panel In- The terminal panel indicator lamp status of H8922S 4G Router is briefly intro-
dicator Lamp Status duced in the section.

4.2 Local Connection The local connection configuration process after installing H8922S 4G Router is
Configuration briefly introduced in the section.

4.1 Terminal Panel Indicator Lamp Status

There are 10 LED indicators on the front panel of the H8922S 4G Router to indicate the working status and
network status of the H8922S 4G Router. The status of the indicators is shown in Table 4-1.

Table 4-1 LED instruction

Indicator lamp Status description

name

PWR,SYS
 Normally on: the system is started and working normally.
 Off: the system is not completely started (within 10 seconds after power-on or dur-
ing restarting).
 Normally on: the connection of interfaces and other equipment via network cable
WAN
is normal.
 Flashing: There has data sending and transmission.
 Off: no network cable is inserted or the connection of interfaces and other equip-

ment via network cable is abnormal.

 Same as the status for WAN.
LAN1~4

RF
 Normally on: the signal strength is good, 21~31.
 Quick flashing (0.5s flashing): the signal strength is medium, 11~20.
 Slow flashing (2s flashing): the signal strength is poor, 1~10.
 Off: no signal.

 Normally on: the dialing is successful and 3G/4G network is Connected.

NET
 Slow flashing (2s flashing): the dialing is successful and 2G/2.5G/2.75G network is

connected.
 Quick flashing (0.5s flashing): in process of dialing.
 Off: fail to find any module or dialing is forbidden.

 Normally on: The router turns on WiFi.

WLAN

Doc. Version 1.0 12

 H8922S 3G/4G Router User Manual

Indicator lamp Status description

name
 Flashing: there is data communication.
 Off: The router turns off WiFi.

4.2 Local Connection Configuration

Precondition
 Already power on H8922S 4G router
 Ethernet cable connect to H8922S 4G router
For details on the Ethernet connection, see "3.2.2 Ethernet Cable Connection." H8922S 4G Router local connec-
tion configuration includes the specified IP mode and DHCP automatic IP acquisition mode. The following two
configuration modes are described in detail.

Specify the IP
Step 1 Click “start > control panel”, find “Network Connections” icon and double click it to enter,
select “Local Area Connection” corresponding to the network card on this page. Refer to
the figure below.

Figure 4-1 Network Connection Window

Step 2 Double-click “Local Area Connection” to open the window of “Local Area Connection Sta-
tus” , as shown in Figure 4-2.

Doc. Version 1.0 13

 H8922S 3G/4G Router User Manual

Figure 4-2 Local Area Connection Status

Step 3 Click “Properties” in the window of”Local Area Connection Status” to open the window of
“Local Area Connection Properties”.

Figure 4-3 Internet Protocol (TCP/IP)

There are two configuration methods for the latter configuration, the regular method
configuration and the advanced configuration.
 General configuration

Doc. Version 1.0 14

 H8922S 3G/4G Router User Manual

[Link]-click “Internet Protocol (TCP/IP)” in the window of “Local Area Connection Prop-
erties” to open the window of “Internet Protocol (TCP/IP) Properties” . Modify the general
network configuration in the General tab. As shown in Figure 4-5

Figure 4-4 Internet Protocol (TCP/IP) Properties Window

IP address: 192.168.8.* (*indicates any integral between 2 to 254)

Subnet mask: [Link]
Default gateway: [Link]

Remember:
H8922S 4G Router LAN port factory default parameter:
IP address: [Link]
Subnet mask: [Link]
H8922S 4G Router factory default login parameter:
Management interface login IP address: [Link]
Login name: admin
Login password: admin
2. Click "OK" to complete the configuration.

 Advanced configuration

Doc. Version 1.0 15

 H8922S 3G/4G Router User Manual

In the original network environment configuration (steps 1 to 3), you do not want to inter-
rupt the local PC to continue LAN communication, and you can consider adding advanced
configuration when configuring the Router.

1. Click “Advance” in Figure 4-5 to open Advanced TCP/IP Settings, as shown in Figure 4-6.

Figure 4-5 Advanced TCP/IP Settings

2. Click “Add” in the IP address (R) to fill in the IP address to be configured, as shown in
Figure 4-7.

Figure 4-6 TCP/IP address

3. Click "Add" to complete the configuration..

Doc. Version 1.0 16

 H8922S 3G/4G Router User Manual

Due to the H8922S 4G Router factory default parameters,

IP address: [Link]
Subnet mask: [Link]
Therefore, in the window of “Internet Protocol (TCP/IP) Properties” , the Default Gateway and Subnet Mask are
configured as H8922S 4G Router factory [Link] that causes unsuccessful dial-up and Internet access due
to poor signals.

---END

DHCP automatically obtains IP

H8922S 4G Router has a built-in DHCP (Dynamic Host Configuration Protocol) server, which automatically as-
signs an IP (Internet Protocol) address to the terminal (or PC) connected to it according to preset parameters.

The H8922S 4G Router's built-in DHCP service is turned on at the factory. The DHCP service is enabled before
the function is configured.

Step 4 Click “Start > Control” Panel. In the window that opens, double-click “Network Connections”,
as shown in Figure 4-8.

Figure 4-7 Window of Network Connection

Step 5 Right-click “Local Area Connection 2” and click “Properties” in the pop-up menu to open the
window of”Local Area Connection 2” , as shown in Figure 4-9.

Doc. Version 1.0 17

 H8922S 3G/4G Router User Manual

Figure 4-8 Properties of local connection 2

Step 6 In "This connection uses the following items (O):", select "Internet Protocol (TCP/IP)" and
double-click to enter the "Internet (TCP/IP) Properties" window, as shown in Figure 4-10.

Figure 4-9 Properties of internet (TCP/IP)

Doc. Version 1.0 18

 H8922S 3G/4G Router User Manual

Step 7 If the Internet Protocol (TCP/IP) attribute is as shown in Figure 4-8, no change is required.
If the Internet Protocol (TCP/IP) attribute is not as shown in Figure 4-10, select "Automati-
cally obtain an IP address" in "General".
Step 8 Click “OK” to complete the configuration.
---END

Configuration check

Step 9 Click “Start > Run”, enter the “cmd” command in the input box of “Run” and press Enter.
Open the “Run” window, as shown in Figure 4-11.

Figure 4-10 The window of "Run"

Step 10 In the window of "Run", enter the command "ipconfig". For the configuration method of
the above two connections, the IP Address displayed in the "ipconfig" window is different:in
the specified IP configuration method, the IP Address shows the IP address entered in Figure
4-3, as shown in Figure 4-11. In the configuration method of automatically obtaining IP ad-
dress from the router DHCP, the IP Address is displayed as "2~254". The random number,
as shown in Figure 4-12. The window shown in Figure 4-12 shows that the IP configuration
is normal.

Doc. Version 1.0 19

 H8922S 3G/4G Router User Manual

Figure 4-11 The execution result of "ipconfig" of Specifying the IP address

Figure 4-12 The execution result of "ipconfig" in DHPC automatically obtaining IP mode.

Step 11 Enter the following command in the command line window to confirm whether the connec-
tivity is normal
Ping [Link]
If the interface shown in Figure 4-14 appears, the local computer is properly connected to
the H8922S 4G Router.

Doc. Version 1.0 20

 H8922S 3G/4G Router User Manual

Figure 4-13 Connectivity verification results

---END

Doc. Version 1.0 21

 H8922S 3G/4G Router User Manual

5 The Configuration of Router

About this chapter

Section Brief Introduction of Contents

5.1 Overview the configuration of the H8922S 4G Routers in the WEB mode is introduced in
this section briefly .

5.2 basic configuration what the H8922S 4G Routers need to complete before performing advanced
configuration is introduced in this section briefly.

5.3 Application the H8922S 4G Router application configuration, and how to configure it are
introduced in this section briefly.

5.4 Security the H8922S 4G Router security configuration, and how to configure it are intro-
duced in this section briefly .

5.5 Forward the H8922S 4G Router forwarding configuration, and how to configure it are
introduced in this section briefly .

5.6 VPN the H8922S 4G Router VPN functions, and how to configure them are intro-
duced in this section briefly .

5.7 System The H8922S 4G Router system management configuration, and the specific
configuration and operation methods are introduced in this section briefly .

5.8 Status This section briefly introduces the H8922S 4G Router status query, and status
query method.

Overview
H8922S 4G Router can be configured by WEB mode, which is easy to operate and intuitive. After the local con-
nection configuration of the PC and the H8922S 4G Routers is completed according to the "Local Area Connec-
tion Configuration", you can start Internet Explorer or other browsers on the PC and log in to the H8922S 4G
Routers for configuration.

5.1 Basic configuration

Through the "5.2.2 Network Settings", you can realize the basic functions of dial-up Internet access and access
to the public network.

Doc. Version 1.0 22

 H8922S 3G/4G Router User Manual

5.1.1 Logging in to the WEB Configuration Page

Step 1 Open the Internet Explorer browser of the configuration computer and enter
"[Link] in the address bar. Enter the authentication page of the user login
identity, as shown in Figure 5-1.

Figure 5-1 The Local authentication page of the user login identity

Figure 5-2 Identity authentication page for user Radius login

Step 2 To log in as Local, just enter "Username", "Password" and then click "Login" to log in to the
WEB configuration page of H8922S 4G Router.
Step 3 To log in as Radius, you need to select "Radius Authentication", then enter the radius
username and password, and click "Login" to log in to the WEB configuration page of the
H8922S 4G Router.

When logging into the system for the first time. The default username is admin and the password is admin. To
change the password, please refer to "5.7.5 User Management".
---END

Doc. Version 1.0 23

 H8922S 3G/4G Router User Manual

5.2 Network settings

Overview
The network settings mainly complete LAN, WAN, WLAN, mobile network, parameter selecting, network type,
link backup, DHCP server and other configurations. After the configuration is completed, the basic network
communication needs can be met.

5.2.1 LAN
The LAN port configuration is mainly used for the connection between the router and the lower device, so that
the lower device can access the external network through the router, and at the same time ensure normal
communication between the network segments connected to the router.
Step 1 Log in to the WEB configuration interface of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration page”.
Step 2 Click “Network > LAN”.
Open the page of LAN , as shown in Figure 5-3.

Figure 5-3 The page of LAN

Step 3 Set the connection parameters of the LAN port.

Doc. Version 1.0 24

 H8922S 3G/4G Router User Manual

Table 5-1 The instruction of LAN Parameter

Parameter Details Operation

Host name The name of router Manual input, Maximum length limited to 32 word
type character,Please refer to the “Parameter Spec-
ification Table” for input specifications.

IP1~4 Used to divide subnets, these Enter it manually. Format: A.B.C.D/M, please refer
subnets can communicate with to "Parameter Specification Table" for input specifi-
each other, and IP1~4 represent [Link] default IP1: [Link]/24, and IP2~4
4 subnets. are input in the above format, but the contents be-
tween the two cannot be the same.

Loopback The virtual interface address of Enter it manually. Format: A.B.C.D/M, please refer
address the router, which is configured to “Parameter Specification Table” for input speci-
and will not disappear due to the fications.
LAN interface being closed.

Lan Config- Duplex mode and port rate for The following pull frame selection method is used
ure setting the lan port to select the port rate and duplex mode. The de-
fault is auto mode.

Step 4 Click Save to complete the configuration of connection type of the LAN port .

When the user changes the IP1 address, if the page does not automatically jump, please make sure that the user's computer has
the same network address as the modified LAN address, or set the computer to automatically obtain the IP, and then enter the
new one in the browser.

---END

5.2.2 WAN
The WAN is mainly used to connect to the Internet through Ethernet. The connection modes are static IP,
DHCP, and PPPoE.

Step 1 Log in to the WEB configuration page of the H8922S 4G Router.

For details, see “5.2.1 Logging In to the WEB Configuration page”.
Step 2 Single click “network > WAN”.
Open the page of WAN , as shown in Figure 5-4.

Doc. Version 1.0 25

 H8922S 3G/4G Router User Manual

Figure 5-4 The page of WAN

Step 3 Configure the connection type of the WAN port

The parameter description is shown in Table 5-2.

Table 5-2 The instruction of WAN connection type parameter

Parameter Details Operation

Dropdown List Selection:

 Static IP:manually configure the IP address of the in-
terface. If you need to access the Internet through the
WAN, you need to add the gateway, DNS, and default
Connection The connection type of the route to the network type.
Type WAN.  DHCP: The DHCP client automatically obtains the IP

address. If you need to access the Internet through

the WAN, you need to add the default route configu-
ration to the network type.
 PPPoE: PPPoE dial-up obtains IP (usually an external

ADSL modem for ADSL dial-up Internet access). If you

need to access the Internet through the WAN, you
need to add the default route configuration in the
network type.
“Connection Type” select “Static IP”

IP Configure when "Connec- Format: A.B.C.D/Mask

tion Type" selects "Static Please refer to the”Parameter Specification Table”

Doc. Version 1.0 26

 H8922S 3G/4G Router User Manual

Parameter Details Operation

IP". for input specifications. For example:
[Link]/24

“Connection Type” select “DHCP”

IP get IP address from DHCP Select DHCP

“Connection Type” select “PPPoE”

The unique identifier of an PPPoE is not configurable.

interface. It is used when The interface name of the PPPoE configured on the
other functions are in- web page is specified by the system. The interface
Interface Name voked or associated with name is: pppoe.
the interface. For exam-
ple, you can configure the
route of the interface and
control the disable and
enable of the interface.

Configure the PPPoE ser- General WORD type, maximum 64 bytes, can not be
Service Name vice name, which is usu- empty, please refer to "Parameter Specification Ta-
ally used for identification ble" for input specifications.
and judgment between
the client and the server.
It is usually provided by
the server. The ADSL dial-
up is provided by the ISP.

The username/password Generally, the WORD type/CODE type, each of which

Username/Pass- used for PPPoE dialing is has a maximum length of 64 bytes, is not empty. For
word usually provided by the the input specification, please refer to the "parame-
server. The ADSL dial-up is ter specification table".
provided by the ISP.

Advanced parameters are Click "Hide" to display the parameters of the ad-
used in special cases. It is vanced settings.
usually not recom-
Advanced set- mended. For the parame-
tings ter description of "Ad-
vanced Settings", please
refer to the related pa-
rameters in Table 5-3.

Wan Configure Duplex mode and port The following pull frame selection method is used to
rate for setting the wan select the port rate and duplex mode. The default is
port auto mode

Step 4 Single click “save” to complete the configuration of wan port.

---END

Doc. Version 1.0 27

 H8922S 3G/4G Router User Manual

5.2.3 Modem
Mobile network is one of the core functions of H8922S 4G Router. H8922S 4G Router supports single-mode
single-card dialing and single-mode dual-card backup dialing. It provides high-speed wireless broadband access
for users. Internet access speeds of 3G can usually reach 1 to 5 Mbps, 3.5G networks can reach be up to 20
Mbps, and LTE can be up to nearly 100 Mbps.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Single click “Network > Modem”.
Open the page of Modem, as shown in Figure 5-5.

Figure 5-5 The page of Modem

Step 3 “Add”, ”Edit”,” Delete”, “Enable”, and “Disable” actions for Mobile Network Parameters.
Action:
 Add
1. Click “Add” to display the Add page of modem Configuration, as shown in Figure 5-6..

Doc. Version 1.0 28

 H8922S 3G/4G Router User Manual

Figure 5-6 The page of Modem(single-mode dual-card)

2. Add the "Modem" parameter. Table 5-3 describes the parameters of the modem.

Table 5-3 The instruction of the parameters of the modem

Parameter Details Operation

Auto-dialup Enable the current modem parameter Button selection:

for modem dialing. Only one of the ena-  Enable

bled modem parameters is running (ran-  Disable

dom or other functions are controlled). When the button is clicked, it will be grayed out
When multiple sets of modem parame- to indicate that the current state is in effect. If
ters are disabled, modem dialing is disa- "Enable" is grayed out, it indicates that the
bled. function or parameter is enabled.
APN The unique identifier of an interface. It is Alphanumeric WORD type, up to 12 bytes, non-
used when other functions are invoked empty,please refer to"Parameter Specification
or associated with the interface. For ex- Table" for input specifications.
ample, you can configure the route of
the interface and control the disable and
enable of the interface.
Service Code A type of code identifier for a net- CODE type, maximum 64 bytes, please refer
work, usually a fixed network of ser- to "Parameter Specification Table" for input
vices has a fixed service code. specifications.

Doc. Version 1.0 29

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Username The identity of the access operator WORD type / CODE type, each of which has
/Password network is used to access different a maximum length of 64 bytes, which are
private network services to isolate dif- both present or empty at the same time.
ferent private networks in the case of
private network services.

PIN Personal Identification Number, the Alphanumeric WORD type, please refer to
identification password of the SIM "Parameter Specification Table" for input
card, the user can use the PIN code to specifications.
unlock and lock the SIM card to pre-
vent illegal users from using it.

SIM card Single-mode dual-card mode configu- Radio button selection

(configura- ration option for specifying the SIM  SIM1
tion items card when dialing.  SIM2
only in sin-
gle-module
dual-card
mode)

Network Use this option to force the required The drop-down box option options include:
 auto
Type access network type to 2G or 3G/4G.
 wcdma
Usually used when a network is unsta-
 edge
ble or only wants to work on a net-
 fdd-lte
work
 tdd-lte
 td-scdma
 evdo
 cdma

The drop-down box according to the type of the

module will correspond to different network
types, and AUTO means 2G/3G/4G adaptation.
Connection Used to select different connection Drop-down box options:
mode methods to obtain an IP address from
the base station
 pppd
 dhcp
 bridge
The dhcp mode is used by default. The
bridge mode can only be selected when it is
in the EC25 series module.

Keepalive Used to maintain a communication con- Keepalive function switch:

nection with the base station to prevent
the base station from kicking off the mo-
 off
dem
 On
The default is off
Address is manually entered:
Enter the service address detected by tcpping.
If not entered, use the gateway address of the
modem as the service address.
Port is manually entered:
Enter the corresponding port address. use

Doc. Version 1.0 30

 H8922S 3G/4G Router User Manual

Parameter Details Operation

port 22 by default.
Interval is manually entered:
Enter the Tcpping packet sending interval.
Ithe default is 10 (seconds).
advanced It is not recommended to configure the Click to display the advanced settings.
settings advanced parameters of PPP dialup. It is
usually used when the private network
service server has matching require-
ments. The dialing advanced options of
VPDN and PPPoE are the same as the mo-
dem advanced options, as shown in Fig-
ure 5. 8 is shown.
Authentication (It needs to match the server when configuring. The default is all negotiation.)

CHAP Challenge-Handshake Authentication

Disable
Protocol, a way to send real password
Negotiation
when build ppp link, improved secu- CHAP is prior to PAP
rity

PAP Password Authentication Protocol

 Disable
 Negotiation
 Disable
MS-CHAP MS-CHAP
 Negotiation
Microsoft Challenge-Handshake Au-
thentication Protocol
Based on MPPE

MS2-CHAP MS-CHAP second version

 Disable
 Negotiation
 Disable
EAP PPP Extensible Authentication Proto-
 Negotiation
col

Compress (It needs to match the server when configuring. The default is all disabled.)

Compres- Negotiate which compress control

 Disable
sion Control protocol used on PPP link
 Negotiation
Protocol

Ad- Whether compress IP address

 Disable
dress/Con-
 Negotiation
trol Com-
pression

Protocol Whether compress Whether com-

 Disable
Field Com- press IP address
 Negotiation
pression

VJ TCP/IP Whether allow TCP/IP to communi-

 Disable
Header cate by compressing VJ
 Negotiation
Compress

Connection- Whether allow TCP/IP to communi-

 Disable
ID cate by compressing ID in the first
 Negotiation

Doc. Version 1.0 31

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Compres-
sion

More

Debug Enable PPP dialing log, default value is

 Disable
enable, in order to check more info
 Negotiation
about dialing, suggest no changing

Peer’s DNS Auto get peer DNS when PPP dialing.

 Disable
DNS is necessary if want visit domain
 Negotiation
name. In order to forbid LAN pc visit
domain name, you may disable it

LCP inter- After PPP dialing succeed, LCP is Value area : 1~512
val/Retry needed to keep PPP link alive. Also it Unit: second
could be used to quickly spot network
interrupt and reconnect Default value: 30/5

MTU the number of bytes of the maximum Value area : 128~16364 byte
transfer unit by PPP interface, some-
times financial data has request on
this

MRU the number of bytes of the maximum Value area : 128~16364 byte
receive unit by PPP interface, some-
times financial data has request on
this

Local IP Set the local IP address when PPP di- A.B.C.D,

aling, need ISP support Example: [Link]

Remote IP Set the remote IP address when PPP A.B.C.D,

dialing, need the support of ISP Example: [Link]

Professional
 nomppe Do not suggest modify, please contact us for
 mppe required help if necessary
 mppe stateless
 nodeflate
 nobsdcomp
 default-asyncmap

Doc. Version 1.0 32

 H8922S 3G/4G Router User Manual

Figure 5-7 The page of Modem (Single module single SIM)

3. Click “Save” to complete the parameter configuration for Modem..

 Modify
As shown in Figure 5-5, determine a parameter configuration record and click Modify to
modify the parameter record. The parameter description is shown in Table 5-3.
 Delete
As shown in Figure 5-5, determine a parameter configuration record and click Delete to
delete the parameter record.
 Enable
As shown in Figure 5-5, determine a parameter configuration record and click Enable to
enable the parameter record.
 Disable
As shown in Figure 5-5, determine a parameter configuration record and click disable to
disable the parameter record.
 Refresh
Click “Refresh” to refresh the current page.

When the button is gray, it indicates that the corresponding action is already in effect. When you click Enable,
the Enable button is grayed out to indicate that the feature or parameter is currently enabled.

Doc. Version 1.0 33

 H8922S 3G/4G Router User Manual

---END

5.2.4 WLAN

H8922S 4G Router provides two functions of WLAN AP and Station client. Through the AP function, H8922S 4G
Router can provide wireless LAN hotspots. Through the Station client function, H8922S 4G Router can be con-
nected to other AP device,The lower device of the H8922S 4G Router can access the external network through
the connected AP device.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration page”.
Step 2 Single click “Network > WLAN”.
Open the page of WLAN. When you select different WLAN working modes (AP, Station),
the displayed pages are shown in Figure 5-8 and Figure 5-9. When the WLAN working
mode selects the station, you need to scan the surrounding APs to select an AP to access,
as shown in Figure 5-10.

Figure 5-8 The page of AP mode configuration

Doc. Version 1.0 34

 H8922S 3G/4G Router User Manual

Figure 5-9 The page of Station mode configuration

Figure 5-10 The Scanning page when selecting a station

Step 3 Configure parameters related to WLAN. The parameter description is shown in Table 5-4.

Table 5-4 The instruction of WLAN parameter

Parameter Details Operation

WLAN Status Enable or disable WLAN feature Dropdown List

 Enable
 Disable
Basic Setting

Doc. Version 1.0 35

 H8922S 3G/4G Router User Manual

Parameter Details Operation

SSID The identity of the WLAN server. General WORD type, maximum 32 bytes,
please refer to "Parameter Specification Ta-
ble" for input specifications.

Wireless WLAN work mode, support ap/station Dropdown List

Mode  ap
 station
Network WLAN network mode, different net- Dropdown List
Mode work models are quite different  b represents the network rate of WLAN is
transmission rates, default bgn 11Mbps
mixed mode. When operating mode  bg represents the network rate of WLAN
is selected AP, the AP needs to man- is11Mbps,54Mbps(Auto- Negotiation)
ually set the network mode; When  bgn can support 11Mbps,54Mbps,150Mbps
working mode selection station or mixed mode
repeater, AP network mode for the
selected network mode, can not be
modified manually.

Channel The working channel of the Dropdown List

WLAN,which can be configured ac-  auto
cording to the specific needs of the  1~11
network environment. The default is
auto. Auto indicates channel adaptation. When
there is no interference, channel 6 is used by
default. When the same channel interfer-
ence occurs, it automatically jumps to the
channel with less interference.

Bandwidth Bandwidth configuration when Dropdown List

WLAN work at 802.11n  20MHz
 40MHz
40MHz represents high speed mode of
802.11n.

AP Isolate The WLAN clients connected to the Dropdown List

AP are isolated so that the clients  Enable
cannot access each other.  Disable
Broadcast Sta- Used to configure the WLAN SSID is Dropdown List
tus broadcasted so that clients can  Enable
search the SSID, usually do not want  Disable
other people to search and disable
WLAN function, disable it means
hidden SSID function in a network
environment, users want to con-
nect, you need to manually add the
SSID

IP Distribu- The address communicated with the Dropdown List

tion(when AP when the H8922S4G Router is  dhcp: get IP address from DHCP
Wireless connected to the AP.  static: manually set IP address

Doc. Version 1.0 36

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Mode is sta-
tion)

IP(when Wire- When "IP allocation" selects static, Format: A.B.C.D

less Mode is you need to configure the address to please refer to “Parameter Specification Ta-
station) establish communication with the ble”for input specifications.
AP.

WLAN Encryption

Security Mode Configure the WLAN encryption Dropdown List

mode to disable when cryptographic  disable
authentication is not required. WEP  wpa
encryption is relatively easy to crack,  wpa2
it is recommended to use WPA en-
cryption

wpa/wpa2(WiFi Protected Access)

Algorithms Encryption algorithms Dropdown List

 tkip
 aes
WPA Share WLAN encryption key, used to con- WORD or Number type, refer to "Parameter
Key nect the specified SSID Specification Table"

WPA Renewal The time interval for the AP to verify Value area: 120-86400
Interval the WLAN client key; if the verifica- Units: Seconds
tion is passed, the WLAN connection
is continued, and if the verification
fails, the WLAN connection is dis-
connected.

When the working mode select station , H8922S 4G Router will automatically match according to the selected AP and the corre-
sponding encryption algorithm (to keep consistent with AP encryption); shared key update interval is required to fill in the con-
nections of AP key and interval.

---END

5.2.5 Parameter select (Recommend to Single module dual SIM ver-

sion)
H8922S 4G Router parameter switching function is a backup switching function independently developed by
our company, with multi-function combination backup and switching. The main application scenarios are: multi-
server mutual backup, multi-operator backup (in many countries, one SIM card supports multiple operators,
one carrier is abnormally switched to another carrier), and application scenarios in which the functional param-
eters need to be bundled but they requires backup switching between each other.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.

Doc. Version 1.0 37

 H8922S 3G/4G Router User Manual

For details, see “5.2.1 Logging In to the WEB Configuration page”.

Step 2 Single click “Network > parameter select”.
Open the page of “Parameter Select” , as shown in Figure 5-11.

Figure 5-11 The page of “Parameter select”

Step 3 Configure the parameters related to Parameter Select.

The "parameter rules" corresponding to "add", "edit", "delete", "enable", and "delete".
Action:
 Add
1. Click “Add”. The configuration page of “Parameter Select” is displayed, as shown in Figure 5-12.

Figure 5-12 The configuration page of “Parameter Select”

Doc. Version 1.0 38

 H8922S 3G/4G Router User Manual

2. Add a "parameter select" rule.

Table 5-5 The instruction of Parameter

Parameter Details Operation

Status Enable the current rule. All enabled rules have only
 Enable
one rule running at a time, and the associated inter-
 Disable
faces in all disabled rules are disabled. For example,
select modem0, ipsec1, vpdn2 in rule0, and modem0,
ipsec1, and vpdn2 are disabled if rule0 is disabled.

Basic settings

Rule name Name identifier of a rule of parameter select , used Value area : [0,9]
to distinguish different rules.

Interval/Retry The interval between detections and the maximum Value area : 1~512
Times number of failures. If the number of failures reaches Units: seconds/time
the configured number, switch to the next rule to
work. Default: 60/3

Running timeout It is used to limit the maximum working time of the cur- Value area : 1~65535
rent rule. This parameter is invalid in rule0. This param-
eter is configured in other rules and switches to rule0 Units: seconds
after reaching the maximum working time. If it is not
configured, it is switched in the order of rule. Configura-
tion is not recommended when there is usually no strict
master/slave requirement.
Add interface detection rules

Interface name Name of the interface associated with the rule, such The drop-down box op-
as the modem interface name: modem0, modem2. tion is automatically
produced depending on
the number of interface
names currently config-
ured in the system.

Check method The detection method is divided into interface state Dropdown List
detection and ICMP detection, and it is determined  state
whether it is necessary to switch to the next rule by  icmp
checking the status or the link (switching after reach-
ing the maximum number of failures).

Destination IP It only needs to be configured when the icmp detec- Format:A.B.C.D,

tion method is selected. It is used to configure the please refer to the “Param-
icmp detection destination address. eter Specification Table”for
input specifications.
For example: [Link]
3. Click "Add" to complete the rule addition.
 Delete
Click “Delete” to delete the selected Parameter Select Rule.
 Enable
Click "Enable" to enable and apply the Parameter select Rule.
 Disable

Doc. Version 1.0 39

 H8922S 3G/4G Router User Manual

Click “Disable” to disable the Parameter Select Rule.

 Refresh
Click “Refresh” to refresh the current page.

To ensure that the user controls the uplink and downlink of the router, the H8922S 4G Routers provide multiple functions for the
modem/modem2, such as parameter select, link backup, ICMP detection, task management, and trigger [Link] task man-
agement is to perform the action on the modem/modem2 and keep the state after the action is executed, and the parameter
select, the link backup, and the ICMP detection all perform the action on the modem/modem2 but do not maintain the state.
Therefore, the function of parameter select, ICMP detection, and task management trigger setting can only be performed on the
modem/modem2 without conflict, and can be used together.
In addition, when using the parameter select and link backup functions at the same time, make sure that the two functions use
different interface types. If you need to use, please contact our technical support staff.

---END

5.2.6 Network type

Provide the user with a configuration page for the default route.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration Interface”.
Step 2 Single click “Network > Network type”.
Open the page of “Network Type” , as shown in Figure 5-13.

Figure 5-13 the page of “Network Type”

Step 3 Configure parameters related to “Network Type”. The parameter description is shown in Table 5-6.

Table 5-6 The instruction of Parameter of “Network Type”

Parameter Details Operation

Default route Default route Dropdown List

Gateway When the default route is wan and wan Format:A.B.C.D

is static IP, you need to configure the

Doc. Version 1.0 40

 H8922S 3G/4G Router User Manual

Parameter Details Operation

next hop gateway address of the wan Example: [Link]
port address. If you need to access the
domain name, you need to configure
DNS.

DNS type Configure the DNS type of the router. If Dropdown List
you select an interface, you can obtain  interface
the DNS automatically by using inter-  custom
face dialing. If the WAN is static IP, you
must manually set the DNS.

DNS1/DNS2 Configured when the DNS type is se- Format:A.B.C.D

lected as the custom. Manually config- Example: [Link]
ure the DNS address. You can configure
up to two.

Interface Configured when the DNS type is se- Dropdown List

name lected as the interface. After the config-  modem
uration, the router uses the DNS ob-  eth1
tained by the interface associated with  eth0
the DNS. Therefore, you need to pay Eth0 indicates that the associated WAN
special attention to whether the inter- port uses PPPoE dialup or DHCP to obtain
face can obtain DNS. DNS. Pay special attention to the eth0 is
invalid when the WAN is a static IP ad-
dress. If the PPP dialing configuration dis-
ables the peer DNS, the modem is inva-
lid. eth1 indicates the DNS obtained by
the WLAN.
Step 4 Single click “save” to complete the configuration of “Network Type “.

When the "default route" selects the "eth0" interface and the WAN port is switched from DHCP or static IP
to PPPoE, the default route of the router needs to click "Save" on the page of"Network Type" to take ef-
fect and display.
---END

5.2.7 Link Backup

The H8922S 4G Routers implement the multi-network link backup function in combination with the actual needs
of the customer. They can implement mutual backup between wireless and wireless, wireless and wired links,
and can quickly switch to backup when a link fails. The link ensures the connectivity and stability of the commu-
nication link of the lower computer, thus ensuring that the data service of the user is not affected. H8922S 4G
Router supports both cold and hot backup modes. The advantage of hot backup is that it can communicate
directly after link switching. However, the disadvantage is that communication costs will be generated when
the backup link is online in real time, which increases the cost.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.

Doc. Version 1.0 41

 H8922S 3G/4G Router User Manual

Step 2 Click “Network>Link Backup”.

Open the page of Link Backup , as shown in Figure 5-14.

Figure 5-14 The page of “Link Backup”

Step 3 Click “Add” to open the page for adding the “Link Backup” rule, as shown in Figure 5-15.

Figure 5-15 The page for adding the “Link Backup” rule

Step 4 Configure parameters related to”Link Backup”. The parameter description is shown in Table 5-7.

Table 5-7 Link Backup Parameter

Parameter Details Operation

Status Enable or Disable Link Backup feature

 Enable
 Disable

Doc. Version 1.0 42

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Rule Name Link Backup rule name identification

 Value area: 0-9
Note:
0 can act as chain link or backup link, 1-9 only can act as
backup link
1-9 can take the priority according to the number, the
smaller the number the greater the priority

Running Link operate mode include: Dropdown List

Mode main: Link operate mode is main link  main
backup: Link operate mode is backup link
 backup

Backup Backup mode include: cold and hot

 Dropdown List
Mode
 cold
Hot refers to the corresponding link treatment enabled,  hot
the advantage of hot backup is switching fast, deficiency is
when the link online will increase the cost of network
overhead and charges. Cold refers to only the interface of
current working link is enabled, and the others, as the in-
terfaces of non-working link, are in offline state.

Running
If the current link is main link, shows the main link stability Value area:1-65535
Timeout time
 if the current link is backup link, shows the shortest work-
Units: seconds
ing time
Note:
Running timeout is only suitable for switching between mas-
ter and slave
Interface Interface used for link switching Dropdown List
 modem 0
Name
 modem 1
 eth1
 eth0

Check Mode Link detection mode, it supports icmp detection and wget Dropdown List
 icmp
detection mode (http)
 http

The default mode is icmp

Check IP or Icmp: Detects the IP address or domain name through the WORD type,
Domain ping packet. If the ping fails, the detection fails. up to 64 characters,
Http: Detect ip address or domain name through wget please refer to parame-
mode, wget ip or domain name needs to bring http ters regulation format

Interval/Re-
 The normal detection interval and the maximum number  Value area:1-65535
try Times of failures of the link. The maximum number of failures ar-  Units: seconds/times
rives to switch the link.

Step 5 Single click “save” to complete the configuration of “Link Backup”.

Doc. Version 1.0 43

 H8922S 3G/4G Router User Manual

When the link backup function is enabled, the default route of the router is the default route of the link
backup [Link] the link backup is the master-slave switchover, the master link is switched to the primary
link as soon as the primary link is detected successfully.
---END

5.2.8 DHCP Service

The Dynamic Host Configuration Protocol (DHCP) is a network protocol for a local area network. After the DHCP
function is enabled, the lower device can automatically obtain the dynamic IP.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Single click “Network > DHCP Server”.
Open the page of “DHCP Server” , as shown in Figure 5-16.

Figure 5-16 The page of “DHCP Server”

Step 3 Configure “DHCP Server” Settings.

.

Doc. Version 1.0 44

 H8922S 3G/4G Router User Manual

Table 5-8 lists the DHCP server settings parameters

Parameter Details Operation

DHCP Server Enable or Disable DHCP feature

 Enable
 Disable
Basic Settings(DHCP is not recommended configure in the case of no special network requirement)

IP Pool The DHCP client can get the scope of IP address. The
 Dropdown List
IP addresses range assigned for the DHCP client Se-
 br0
 custom
lecting interface represents using network segment
that the interface belongs to. This option can be
configured to specify the IP address range of the
lower machine, for example: only hope at most
four machine can automatically obtain the IP

Start IP Configure the starting IP address of the DHCP ad- Manual input
dress pool when the address pool is selected as cus- Format: A.B.C.D/Mask
tom.
Example: [Link]

End IP Configure the ending IP address of the DHCP ad- Manual input
dress pool when the address pool is selected as cus- Format: A.B.C.D/Mask
tom.
Example: [Link]

Gateway DHCP client access gateway IP source, divided into Dropdown List
Type default, br0, eth0, custom four categories, associ- Default value: default
ated interface, the interface IP assigned to the
DHCP client as a gateway

Gateway When the gateway type selects custom, it is usually Format: A.B.C.D
used when specifying the lower-end gateway IP. Example: [Link]

DNS Type DHCP client access to the DNS IP source, has a de- Dropdown List
 default
fault, modem, eth0, br0, custom and so on, gen-
 modem
erally do not recommend to modify the configura-
 eth0
tion, especially under the dual modem application
 br0
scenario configuration is not recommended
 custom

Configuring for the default is

based on DNS address which is
allocated by the router itself
DNS1/DNS2 Configure the IP address of the DNS obtained by the Format: A.B.C.D
DHCP client when the DNS type is Custom. Example: [Link]
Lease Time After the DHCP client obtain an IP on IP lease time, Value area: 120-86400
the client usually renegotiates obtain an IP address Units: seconds
lease time in more than half the time. IP lease time
is mainly used to release idle IP to avoid that IP ad- Default value: 3600
dress resources are also occupied after the DHCP
client shutdown

IP, MAC binding is used to assign a fixed MAC within the specified range of IP addresses

IP Binding with the specified MAC: when a DHCP client Manual input

Doc. Version 1.0 45

 H8922S 3G/4G Router User Manual

Parameter Details Operation

sends a DHCP request, the IP address with the cli- Format: A.B.C.D/Mask
ent’s MAC binding will be assigned to the DHCP cli- Example: [Link]
ent. The IP address will not be assigned to the other
client with different MAC address even if it is not in
use.

MAC Configure DHCP to obtain an IP ,need to specify the WORD Type MAC Format
DHCP client's MAC address Example: [Link]

---END

5.3 Application Setting

Overview
Based on years of customer experience for different applications, besides SNMP, DDNS, H8922S 4G router has
developed many functions for wireless network equipment, such as ICMP check, M2M terminal management
function, task management function .

5.3.1 ICMP check

The wireless network has abnormal phenomena such as fake links (the IP address is dialed but the link is un-
reachable), and is usually maintained by LCP. The H8922S 4G Routers provide more reliable ICMP link detection
in addition to this detection mode. The ICMP detection mainly detects the communication link through the ping
packet detection mode, and performs the action set by the user when detecting the link abnormality, thereby
realizing rapid recovery of the link and the system. The ICMP link detection is mainly used to detect the wireless
link at the beginning of the design. The H8922S 4G Routers support the detection of tunnel links such as VPNs,
support multi-rule simultaneous detection, and support up to 10 ICMP detection rules.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, see “5.2.1 Logging In to the WEB Configuration page”.
Step 2 Click “applications > ICMP Check”.
Open the page of “ICMP Check” , as shown in Figure 5-17.

Figure 5-17 The page of “ICMP Check”

Doc. Version 1.0 46

 H8922S 3G/4G Router User Manual

Step 3 "Add," "Edit," "Delete," "Enable," and "Disable" operations for "ICMP Detection."
Add
1. Click “Add”. The Add page of ICMP Detection is displayed, as shown in Figure 5-18.

Figure 5-18 The Add page of ICMP Detection

2. Configure parameters for the ICMP detection service. The parameter description is shown in Table 5-9.

Table 5-9 ICMP check rules Parameter instruction

Parameter Details Operation

ICMP check To enable or disable ICMP check rules, multiple rules can Button
service be used simultaneously, and one specific rule can be disa-  Enable
bled  Disable
Basic Config

Rule Name ICMP Check rule name, just to distinguish different rules WORD type, max 12
bytes

Check Type Destination address of ICMP check, it supports two meth- Dropdown list:
ods of detecting ICMP and Domain.  icmp
 domain
Destination The destination address of the ICMP detection can be ei- WORD type, max 64
Address ther IP or domain name. To set the domain name, you bytes
need to ensure that the router is configured correctly.

Doc. Version 1.0 47

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Destination A backup destination address of ICMP check, if “destina- WORD type, max 64
backup tion address” cannot be linked by ICMP check, the “desti- bytes
nation backup” address will be checked, if still cannot
linked, the router will recognize ICMP check fails

Interval/Re- Check time interval and max check failure times when link Value area : 1~65535
try Times is OK, if check failure times reaches the max times, then Unit: second/time
“timeout action “ will be executed, e.g. “modem reset”

Source Inter- Router sends an ICMP detected packet's source address Dropdown List options
face  br0
 modem
 eth0

Timeout ac- An action when check failure times reach max failure times. Dropdown List options
tion Can be modem-reset, reboot, custom
 modem-reset: modem
redials
 modem2-reset: mo-
dem2 redials
 reboot: router reboots
 custom: customized ac-

tion
Run com- If “Timeout action” is “custom”, this shall be configured. WORD type, max 64
mands Commands are BGO operation. It is not suggested to use, bytes
if need, please contact our technical engineers

3. Single click “save” to finish the addition of a ICMP check rule.

If the ICMP is normal, it is sent according to the ICMP detection interval. If an abnormality occurs, the ICMP
packet is sent continuously according to the abnormal ICMP detection. If the detection destination address is
unreachable, the backup address is detected. If the number of times the backup address fails to be detected
also reaches the number of retransmissions, the router performs a "timeout action".
 Modify
As shown in Figure 5-18, determine a parameter configuration record and click Modify to modify the parameter
record. The parameter description is shown in Table 5-9.
 Delete
As shown in Figure 5-18, determine a parameter configuration record and click Delete to delete the parameter
record.
 Enable
As shown in Figure 5-18, determine a parameter configuration record and click Enable to enable the parameter
record.
 Disable
As shown in Figure 5-18, determine a parameter configuration record and click Disable to disable the parame-
ter record.
 Refresh
Click “refresh” to refresh the current page.

Doc. Version 1.0 48

 H8922S 3G/4G Router User Manual

---END

5.3.2 DDNS configuration

DDNS is an abbreviation of Dynamic Domain Name System. The DDNS protocol provides a corresponding query
function between dynamic IP and domain name. DDNS allows users to access the router's page through a do-
main name on any PC that can connect to the public network. Of course, the network corresponding to the SIM
card used by the router must be a public network accessible address, so that the domain name can be accessed
to access the router.
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications” > “DDNS”.
Open the page of DDNS , as shown in Figure 5-19.

Figure 5-19 The page of DDNS

Step 3 Configure DDNS parameter. The parameter description is shown in Table 5-10.

Table 5-10 DDNS Parameter instruction

Parameter Details Operation

DDNS Service Set whether enable DDNS service func- Button

tion  Enable
 Disable
Basic Config

Doc. Version 1.0 49

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Service Provider Select the DDNS service provider that Dropdown List options
router currently supports, don’t support  322
other providers  88ip
 dnsexit
 dyndns
 zoneedit
 changeip
 noip
 dnsomatic
 duckdns

Token Enter when the Service Provider selects Word type,Maximum 64 bytes.
duckdns

Server Port Set the port number of the DDNS server Value area: 1~65535
provided by the service provider. The de- If empty, it means 80 port
fault port number is 80

Username/Pass Set user name/password of the DDNS Normal WORD type/CODE type, Maxi-
word service registered in the service provider mum 64 bytes.

User Domain Set the domain of the DDNS service pro- Normal WORD type, max 64 bytes
vided by the service provider

Update Interval Set the interval of the DDNS client ob- Value area: 120~86400
tains new IP, suggest 240s or above Unit: seconds

Step 4 Click “Save” to complete the configuration of DDNS.

DDNS in China: 88IP ([Link]), 3322 ([Link])

DDNS outside of China: DNSEXIT ([Link]), ZONEEDIT ([Link]), CHANGEIP ([Link]), DYNDNS
([Link]), NOIP ([Link]), DNSOMATIC ([Link]), DUCKDNS ([Link])
The IP address obtained from the SIM/UIM card service provider changes each time the router is restarted. If the user uses the
DDNS domain name when logging in to the router remotely, the user can log in to the router page regardless of how the router's
modemIP address changes.

---END

5.3.3 GPS configuration

GPS (Global Positioning System) global positioning system for the geographical location of equipment, generally
used in conjunction with electronic maps, can be used to monitor mobile vehicles or theft.

Step 1 Log in to the H8922S 4G Router WEB configuration page.

For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications >GPS” to open the page of “GPS”,as shown in Figure 5-20 .

Doc. Version 1.0 50

 H8922S 3G/4G Router User Manual

Figure 5-20 The configuration page of “GPS”

Step 3 Configure GPS parameter.

Table 5-11 The instruction of GPS Parameter

Parameter Details Operation

GPS Service Enable GPS service. Radio button selection.

 Enable
 Disable

Basic settings

Work Mode The working mode of the router Drop-down box selection.
GPS function, the default "Client".

Type GPS data positioning type selec-

 Radio button selection.
tion, support GPS and GPS+BeiDou
 GPS
 GPS+BeiDou
two ways
Only when the module type is EC25 series, the
page can select GPS+BeiDou
Local Port The router specifies the port used Value range: 1 to 65535
to report GPS data.

Protocol The protocol used by the router for Radio button selection
GPS data transmission.
 TCP
 UDP

Doc. Version 1.0 51

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Server IP or IP address or domain name of the Format:

Domain GPS server. A.B.C.D or word type

Server Port The port used by the GPS server. Value range: 1 to 65535

Packet header Set the content in the GPS data Enter it manually.
message data header Maximum input length: 64 bits

Packet tailer Setting content at the end of the Enter it manually.

data of the GPS data message Maximum input length: 64 bits

GPS report in- GPS data packet transmission in- Enter it manually.
terval terval Value range: 1 to 65535
Unit: second
Default 120

Step 4 Single click “save” icon to finish the configuration of GPS.

Need to use with GPS antenna

---END

Doc. Version 1.0 52

 H8922S 3G/4G Router User Manual

5.3.4 DTU configuration

H8922SS 4G Router system has built-in communication function with registration center and data center, which
can provide similar DTU (Data Transfer Unit), which is used to convert serial port data into IP data or convert IP
data into serial port. The wireless terminal device that transmits data through the wireless communication net-
work has the function of transparent data transmission function, and also provides a buffer function to avoid
packet loss caused by switching after the data center is switched.

Step 1 Log in to the H8922SS 4G Router WEB configuration page.

For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications >DTU” to open the page of “DTU”,and select different working modes, as
shown in Figure 5-21, and Figure 5-22.

 When you select Client in Work Mode, the Data Center Settings tab and the Heartbeat Settings tab are
displayed, as shown in Figure 5-21.
 When”DDP Client”is selected in “Work Mode”, the “Data Center Settings”tab and the “Heartbeat Settings”
tab will be displayed, and the parameter “Identity Code”will be displayed in “Basic Settings”, corresponding
to Figure 5- 22.
 DDP client mode supports TCP and UDP protocols.
 Support TCP, UDP, MQTT when "client mode" is selected in "working mode"

Figure 5-21 The configuration page of DTU server

Doc. Version 1.0 53

 H8922S 3G/4G Router User Manual

Figure 5-22 The configuration page of DTU client

Doc. Version 1.0 54

 H8922S 3G/4G Router User Manual

Figure 5-23 The configuration page of DDP

Step 3 If the DTU works in the server working mode, you need to configure the DTU as the parameter in the server
working mode, as shown in Figure 5-20.
Step 4 If the DTU works in the client/DDP client working mode, set the "working mode" to "DTU client" or "DDP
client" and configure the corresponding parameters. As shown in Figure 5-21 and Figure 5-22. The parameter
description is shown in Table 5-12.

Doc. Version 1.0 55

 H8922S 3G/4G Router User Manual

Table 5-12 The instruction of DTU Parameter

Parameter Details Operation
DTU Service Enable/disable the DTU service. Single box
Enable
Disable
Basic settings
Work Mode DTU working mode, can be set to: Dropdown list selection:
 Server: The router is used as a DTU server. Server
 Client: The router is used as a DTU client. Client
 DDP client: The router is used as a DDP client (the DDP DDPClient
protocol is our proprietary protocol).
Local Port The service port of DTU. Enter it manually.
Range 1-65535
ID(Attributes The identifier of the terminal used to distinguish the client Manual input, the maxi-
that need to be of the DTU. mum length does not ex-
configured when ceed 11 digits.
the working WORD type
mode is selected
as the DDP client)
Protocol The setting of the data transfer protocol type. Radio button selection.
TCP: The TCP protocol is a connection-oriented and reliable You can choose according
transmission protocol, which is suitable for occasions with to your own needs.
high reliability requirements and low sensitivity to commu-
nication efficiency.
UDP：The UDP protocol is a non-connected unreliable trans-
mission protocol. It is applicable to scenarios where the ef-
ficiency requirements are relatively high and the reliability
requirements are relatively low.。
MQTT：MQTT is a TCP-based publish-subscribe protocol.
The initial purpose of the design is to provide extremely lim-
ited memory devices and network-unreliable communica-
tion with low network bandwidth, which is very suitable for
IoT communication. MQTT can only be selected when it is
in Client mode.
Channel Type The setting of data transfer channel type Radio button selection.
 Three Centers: The three-center channel means that You can choose according
three main channels can be set, which can be online at to your own needs.
the same time; the three channels are independent of
each other. If channel 1 fails, it will not affect the com-
munication of the other two channels.
 Active/standby: The active and standby channels refer
to the DTU that can set a primary channel and a
standby channel. When the primary channel fails, the
DTU will automatically switch to the standby channel.
When the standby channel has no data to send, it will
try to connect to the primary channel again.。

Doc. Version 1.0 56

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Received Packet When the DDP client is selected as the working mode, it Enter it manually.
Max Length needs to be configured to indicate the maximum length of Value range: 1 to 65535
the packets that can be received when the UDP+DDP pro- Unit: Byte.
tocol is communicated. If the sent packet exceeds the max-
imum length, the DDP client discards the excess packet.
Received The wait timeout for the DTU serial port to receive data Enter it manually.
Timeout from the data center. Value range: 1 to 65535
Read data within this time within the maximum packet Unit: milliseconds
length of the received packet. If there is data, it will be read
all the time, and the data read during this time will be dis-
played at one time; if there is no data, it is greater than the
timeout period. Then it is considered that the data is read
and displayed to the DTU port serial port tool.
RS232 Data The waiting time for the DTU serial port to send data to the Enter it manually.
Timeout data center. Value range: 1 to 65535
If the data sent in this time has exceeded the maximum Unit: milliseconds
packet length of the UDP/TCP received packet, it will be
sent immediately; if the maximum packet length of the
UDP/TCP received packet is not exceeded, the data is
waited until the last packet idle time is reached. And then
send it together.
Data center settings
[Parameters only need to be configured in the "client", "DDP client" working mode]
Note: When the working mode is "client" and the "transport protocol" is "TCP", you need to configure "service
address 2" and "service port 2" when the working mode is "DDP client".
Server IP or Do- The IP address or domain name of the DTU Data Center Format:A.B.C.D
main Server (DSC). Word type

Server Port The port number of the DTU data center (must be the same Enter it manually.
as the service port set by the server). Range 1-65535
Server IP or Do- The IP address or domain name of the DTU Data Center Format:A.B.C.D
main 2 Server (DSC), used to reserve each other with the "Service Word type
Address".
Server Port 2 The port number of the DSC data center (must be the same Enter it manually.
as the service port set by the server). Range 1-65535
Server IP or Do- The IP address or domain name of the DTU Data Center Format:A.B.C.D
main 3 Server (DSC), used to reserve each other with the "Service Word type
Address".
Server Port 3 The port number of the DSC data center (must be the same Enter it manually.
as the service port set by the server). Range 1-65535
Connect Interval The interval at which the client DTU and the server re-es- Enter it manually.
tablish a connection after the connection fails. Value range: 1 to 65535
Unit: second
Retry Times The maximum number of times the client DTU and the Enter it manually.
server try to connect after the connection fails. Value range: 1 to 65535
Unit: times
MQTT settings

Broker Address Message proxy server address Enter it manually.

Value range: up to 64 char-
acters

Doc. Version 1.0 57

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Broker Port Message proxy server corresponding port Enter it manually.
Value range: 1 to 65535

Username/Pass- Used for MQTT user authentication Enter it manually.

word Value range: up to 64 char-
acters
Client ID The unique identifier of the client, the server is used to as- Enter it manually.
sociate a session. Value range: up to 64 char-
acters
Publish Topic The topic is published, and the client that subscribes to the Enter it manually.
topic can receive the data published by the client. Value range: up to 64 char-
acters
Subscribe Topic Subscribe to the topic, you can receive the data from the Enter it manually.
client that posted the topic. Value range: up to 64 char-
acters
QOS QoS 0: "At most once", message publishing relies entirely The user selects the corre-
on the underlying TCP/IP network. Messages distributed sponding QOS level accord-
may be lost or duplicated. ing to the actual scene.
QoS 1: "At least once" to ensure that the message can ar-
rive, but the message may be repeated.
QoS 2: "Only once", ensuring that the message arrives only
once.
Keepalive .The goal is to maintain the reliability of the long connection Enter it manually.
and the confirmation of whether the two parties are online. Value range: 5 to 120
.The client sets the duration of Keep Alive when connecting. Unit: second
If the server does not receive the client's message within
1.5 * KeepAlive time, it must disconnect the client's net-
work connection.
Heartbeat settings

Heartbeat Data Set the heartbeat to send content (when no data is sent, Enter it manually.
every time the heartbeat time, the router sends the content Maximum input length: 64
once) bits
Heartbeat Inter- Set the interval for heartbeat sending (when no data is sent,
Enter it manually.
val the router will send heartbeat content every other time)。 Value range: 1 to 65535
Unit: second
Serial port parameter setting (mainly used for correct connection between devices connected to the DTU port)

Rate The data transfer rate of the serial port. Drop-down list selection.
Set according to the actual
serial port requirements of
the DTU.
Default: 115200
Parity The way the data is verified. Drop-down list selection.
Set according to the actual
serial port requirements of
the DTU.
Value range: None, Odd,
Even
Default: None (no parity)

Doc. Version 1.0 58

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Databits Data transfer bit. Drop-down list selection.
Set according to the actual
serial port requirements of
the DTU.
Value range: 5, 6, 7, 8
Default: 8
Stopbits Data stop bit Drop-down list selection.
Set according to the actual
serial port requirements of
the DTU.
Value range: 1, 2
Default: 1

5.3.5 SNMP configuration

SNMP(Simple Network Management Protocol)can monitor routers remotely and get to know the status of rout-
ers (Support interface status check, like VPN, modem etc. MIB of our company shall be used).
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications >SNMP” to open the page of “SNMP”, as shown in Figure 5-21 .

Figure 5-24 The configuration page of “SNMP”(the V2 version configuration page above, the following figure is
the V3 version configuration page)

Doc. Version 1.0 59

 H8922S 3G/4G Router User Manual

Step 3 Configure SNMP parameter.

Table 5-13 The instruction of SNMP Parameter

Parameter Details Operation

SNMP service To enable or disable SNMP service Options:

 Enable
 Disable
Basic Config

SNMP Version SNMP version setting, support for SNMPV2c Dropdown list:
and SNMPV3  SNMPV2c
 SNMPV3
Port SNMP port, suggest to be default port161 Value area: 1~65535
Default: 161

Community The community password of the SNMP service WORD type, Maxium 32 bytes
that the SNMP client connects to the router

Doc. Version 1.0 60

 H8922S 3G/4G Router User Manual

Parameter Details Operation

for identification

Trap IP Link-state router report server address Manual input

Format: A.B.C.D/Mask

Trap Port Link-state router report server address’s port Value area: 1~65535
Default: 162

Loopback Status Match with "LAN" page loopback address, in Options:

the "Loopback Status" to "Enable", means  Enable
loopback address configuration successfully,  Disable
the router reported Trap IP packet source ad-
dress is the loopback address, If the "Loopback
Status" to "Disabled" means router IP packet
source address for the LAN port address

Source Interface Used to specify the source address of the mes- Dropdown list:
 default
(configured when sage packet when communicating with the
 br0
SNMP version is SNMP tool.
 modem
selected for
 eth0
SNMPV3)

SNMPv3 Setting

Mode SNMP authentication encryption mode selec- Dropdown list:

tion, support 3 modes: authentication + encryp-  Auth Priv

tion, authentication + no encryption, no authen-  Auth NoPriv

tication + no encryption  NoAuth NoPriv

Usname/Password User username and password authentication. Enter it manually.

The entered username and password must be Username ranges from 1 to 32
the same as those set on the SNMP tool. Other- characters.
wise, the connection cannot be made. Password value range 8~32 char-
acters
Hash (when Mode Authentication mode selection, support MD5 Dropdown list:
selects Auth Priv or and SHA  MD5

Auth NoPriv,  SHA

enter it)
Encryption (when Encryption mode selection, support AES and Dropdown list:
Mode selects Auth DES  AES

Priv, enter it)  DES

Encryption Key (en- Used to encrypt and decrypt data with the snmp Enter it manually.
ter when Mode se- tool The value ranges from 8 to 32
lects Auth Priv) characters.
Step 4 Single click “save” icon to finish the configuration of SNMP.

Doc. Version 1.0 61

 H8922S 3G/4G Router User Manual

Trap: One of the five data types of the SNMP protocol, which refers to the trap message reported by the managed device, indicat-
ing that the device is faulty or changed. H8922S 4G Router reports the type and content of the trap including: modem connection
status and which interface, which SIM card dial, VPDN/TUNNEL/IPSec interface connection and disconnection.
The MIB library corresponding to SNMP can be downloaded from our website. If necessary, please contact our technical staff.

---END

5.3.6 M2M configuration

H8922S 4G router has embedded a WMMP (Wireless Machine-to-Machine Protocol) protocol to realize com-
munication with M2M (Machine-to-Machine) platform which can remotely monitor and manage the routers
and its network, e.g. visit the router, patch upgrading, firmware upgrading, parameter configuration, monitor
the network strength, time delay, flow. Its configuration is as follows:
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications > M2M” to open the page of “M2M” configuration. See below:

Figure 5-25 The page of “M2M” configuration

Step 3 Configure M2M parameter. Parameter instruction is shown in Table 5-13.

Table 5-14 The instruction of M2M Parameter

Parameter Details Operation

M2M service To enable or disable M2M function. This func- Button

tion shall be used with our M2M platform  Enable
 Disable
Basic Config

Doc. Version 1.0 62

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Protocol Data transfer protocol selection between de- Dropdown list:

vice and M2M platform  Mqtt
 wmmp
Server IP or Set the server IP or domain of M2M platform Normal WORD type, max 64
Domain bytes

Server Port WMMP port No, shall be the same with Port Value area: 1~65535
No of M2M platform server

Source Inter- The source interface carried by the data com- Dropdown list:
face (selected munication between the router and the M2M  default
when the pro- platform. When using this function, you need  br0
tocol selects to turn off the MASQ function, otherwise the  Modem
wmmp) message will be sent to change the source IP.  eth0
Status Display the connection status Connected to the platform
shows connected, not connected
to the platform, it shows discon-
nected

Step 4 Single click “save” icon to finish the configuration of “M2M”.

---END

5.3.7 Schedule configuration

This application is to control the online time of the router to better manage network and save 3G/4G flow.
H8922S can add several online periods as per the user’s requirement (e.g. hours of some day). in addition, this
application can support to begin some tasks at a time point (e.g. redial or reboot at 00:00). Supports up to 10
task rules.
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications > Schedule” to open the configuration page of “Schedule”.As shown in
Figure 5-23.

Figure 5-26 The configuration page of “Schedule”

Doc. Version 1.0 63

 H8922S 3G/4G Router User Manual

Step 3 To add a new task management rule, click “Add” to enter the task management rule settings
page, as shown in Figure 5-24.

Figure 5-27 Task management rule settings page

Step 4 Configure task management rule parameters.

Table 5-15 Timing task parameter instruction

Parameter Details Operation

Status Enable timing rules. Multiple rules can be run at the options
same time, or one rule can be disabled. In addition  Enable
to the time-interval type of action tasks, other func-  Disable
tions need to be used together with the NTP ser-
vice. Otherwise, it is difficult to achieve reasonable
time task control.

Basic Config

Task name Name of a timing task Maxium 12 bytes

Task type Task type has action task and status task. Action Dropdown List options:
task is for time point or time interval, while status  modem-online
task is for time period (for “modem-online” and  modem2-online
“modem2-online”), which means that the modem  reboot
will be online (if down, modem will automatically  custom
redial) during the configured time period. Modem

Doc. Version 1.0 64

 H8922S 3G/4G Router User Manual

Parameter Details Operation

will be offline (no dialing) for other time if select “custom”, “schedule” will
be shown to input command (can
be dialup or other command).
Maxium 64 bytes

Action The command is a background operation com- WORD type. Maxium 64 digits
mand, which is usually not recommended. If you
need to configure it, please contact our technical
staff.

Set time

Time type Range or interval for status task or action task Dropdown List options:
 range
 interval
When “time type” select “range”

Clock To input hour and minute. When beginning and Value area: [00:00,23:59]
end hour and minute are the same, it means a time Format: HH:mm-HH:mm
point for action task

Day Days in a month for task Value area: [01,31]

Format: XX-XX

Week Days in a week for task. When “day” and “week” Value area: [1,7]
are both input, it means only if both conditions Format: X-X
meet, the task will begin
1 for Monday

When “time type” select “Interval”

Interval Time interval for action task Value area: 1~65535

Unit: minutes

Step 5 Single click “save” icon to finish the configuration of “Schedule”.

When the time type of the task management is "range", you must first enable "system time",
that is, the NTP service (task management does not support manual time); if the time type
is "interval", you do not need to enable "system time". To use "System Time",please see
"5.7.4 System Time".
Due to the stability of the modem, the router has multiple functions for modem operation,
such as task management, parameter switching, link backup, ICMP detection, trigger setting.
where task management is to change the modem state, while other functions are Change
the modem status but do not keep it, so please take into account other functions when
using task management. If necessary, please contact our technical staff.
---END

Doc. Version 1.0 65

 H8922S 3G/4G Router User Manual

5.3.8 SMS Settings

H8922S 4G Router SMS settings can enable the device SMS function. The mobile phone can use the SMS com-
mand to the device for information query, command configuration, and device restart. This feature is intended
for users who are not comfortable with the device and who need to operate the device. This function can add
a trust number, and the device will execute only the command issued by the added number. You can add up to
20 trust numbers.
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications > SMS” to open the configuration of “SMS”.As shown in Figure 5-25.

Figure 5-28 The configuration of “SMS”

Step 3 Configure “SMS” parameter.

Table 5-16 The instruction of SMS Parameter

Parameter Details Operation

SMS Service Turn on/off SMS service Dropdown list:

Enable
Disable
Phone Num- Add a trust number, and only the Enter it manually.
ber added number can use the service The maximum length is 32 bits. For the input
provided by the SMS function. specifications, please refer to the “Parameter
Specification Table”.
Step 4 Click "Add" to add the entered trust number
Step 5 Click delete to delete the added trust number.

When no trust number is added, the SMS service function can be used for any mobile phone number;when there is a trusted
number, only the trusted number can use the SMS service function.

---END

Doc. Version 1.0 66

 H8922S 3G/4G Router User Manual

5.3.9 Radius settings

Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Applications > Radius” to open the page of “Radius” .As shown in Figure 5-26.

Figure 5-29 The configuration page of Radius

Step 3 Configure the parameters of Radius.

Table 5-17 The instruction of Parameter of Radius

Parameter Details Operation

Server IP or Domain Radius server address, Enter it manually.

support ip and domain Supports up to 64 characters.
format i: A.B.C.D, the domain name is entered in the
correct format of the domain name.

Server Port Radius server listening Enter it manually.

port Input range: 1~65535

Secret Communication key Enter it manually.

with the Radius server Supports up to 64 characters

Source Interface Server IP or domain for The source interface IP carried by the communication
getting the GPS data message with Radius, the MASQ function needs to be
disabled when using this function, otherwise the
source IP may be changed.

Step 4 Single click “save” to finish the configuration of “Radius”.

---END

Doc. Version 1.0 67

 H8922S 3G/4G Router User Manual

5.4 Security Configuration

Overview
Security settings refer to the firewall function of the router and the prevention of network attacks.H8922S 4G
Router supports five security settings: IP filter, domain filter and MAC address filter, Remote Access and network
[Link] user compares the IP address/port, MAC address, and domain name of the incoming router packet
with the firewall rule added by the user, and performs a accepting or dropping action on the data packet match-
ing the firewall rule to allow or prohibit certain network segment accesses the external network and al-
lows/drops other users from accessing the [Link] determining whether the data packet is a legitimate data
packet by the characteristics of the received data packet to achieve the purpose of the device being free from
network attacks.

5.4.1 IP Filter
IP filter refers to judgment whether to allow router to forward the data according to filter rules, thus to manage
internet surfing of PC in LAN. IP filter is used to allow part of PCs in LAN to visit external WAN network or
forbidden some PCs from visiting specific website.
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Security > IP Filter” to open the configuration page of”IP Filter”.As shown in Figure 5-
27.

Figure 5-30 The configuration page of”IP Filter”

In the forwarding filtering rules.

 Black List: The default allows packet forwarding, in line with the list of "discarded" rules packet cannot be
forwarded through the router.
 White List: The default refuses packet forwarding, in line with the list of "accept" rules packet can go
through router forwarding.

Doc. Version 1.0 68

 H8922S 3G/4G Router User Manual

Step 3 Click “Add” to add a new IP filter rule and configure IP filter parameter. There are two types
of IP filter: “Input” and “Forward”, as show in Figure 5-28 and Figure 5-29.

Figure 5-31 The configuration of “Input” type of IP filter

Figure 5-32 The configuration of “Forward” type of IP filter

Doc. Version 1.0 69

 H8922S 3G/4G Router User Manual

Table 5-18 The instruction of IP filter parameter

Parameter Details Operation

Type Select a filter type, you can choose according Dropdown List options
to their needs, "Input" or "Forward"  Input
Input: whether to allow access to the router  Forward
Forward: whether to allow the router for-
warding

Default Action The default action rule. You can select "Ac- Dropdown List options
cept" or " Drop "  Accept
Accept: firewall to accept the package, which  Drop
can be passed
Drop: firewall discards the packet directly

Mirror Rule When the filter type selects "Forward", it Dropdown List options
needs to be configured  Enable
Enable: Base on the configured rules, system  Disable
auto adds totally opposite rules in addition.
Opposite rules mean all the source ad-
dress/port and destination address/port are
reverse in the rules
Disabled: no treatment

Protocol Protocol used by IP packets

 Dropdown List options
 all
 tcp
 udp
 icmp

Source IP
 The source IP address of the packet Manual input
Format: A.B.C.D/Mask
Example: [Link] or
[Link]/24

Source Port The source Port of the packet, when the pro- Value area: 1-65535 or [1-
tocol choose "icmp", it don’t need to con- 65535], it can be a range, or a
figure single port

When the IP Filter type select “Input”

Destination Type Design an IP packet access router interface Dropdown List options
 interface
 any
Interface Configure when Destination Type select “In- Dropdown List options
terface”, means the IP packet access the  br0
router interface  modem
 eth0
 eth1

Doc. Version 1.0 70

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Destination Port IP packet access router ports (when the pro- Value area: 1-65535 or [1-
tocol select "icmp", requires no configura- 65535], it can be a range, or a
tion) single port

When the IP Filter type select “Forward”

Destination IP IP packet destination IP Manual input

Format: A.B.C.D/Mask

Destination Port IP packet destination port Value area: 1-65535 or [1-

65535], it can be a range, or a
single port

Step 4 Single click “save” to finish the configuration of IP Filter rule.

The IP input rule indicates whether other devices are allowed to access the router. The destination address in the rule can only
select the interface of the router. The IP forwarding rule indicates whether IP packets are allowed to be forwarded through the
router. The destination address in the rule can be the interface address of the router. All other IP addresses except.
After the port is configured in the rule, select the "all" protocol to indicate that both "tcp" and "udp" protocols are selected. When
the port is not configured in the rule, select "all" to indicate that "tcp" and "udp" are selected at the same time. "icmp" three
protocols.

--END

5.4.2 Domain Filter

Domain filter support black list and white list. It is used to forbid PCs in LAN from visit some websites or allows
them to visit specific websites.
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Security> Domain Filter” to open the configuration of “Domain Filter”.As shown in
Figure 5-30.

Figure 5-33 The configuration of Domain filter

Doc. Version 1.0 71

 H8922S 3G/4G Router User Manual

 Black list: websites in the blacklist cannot be visited. Click “black list” to forbid visiting the websites in the
list.
 White list: only the websites in the white list can be visited, while other websites cannot be visited. Click
“White list” to activate it.
Step 3 Click “ADD” to add a new domain filter rule and configure domain filtering parameter.

Figure 5-34 The configuration page of Domain filter

Table 5-19 The instruction of Domain Filter parameter

Parameter Details Operation

Domain keyword Keyword of domain for filter WORD type, max 64 digits.
E.g. [Link], the keyword is “google”.

Default action Actions to filter the keyword

 Accept.
 Drop
Step 4 Single click “Save” to finish configuring a rule.
--END

5.4.3 MAC filter

MAC filter also supports black and white lists, which are usually used to control host access to routers. In addi-
tion to this function, the H8922S 4G Routers can also restrict the external network access rights of specific MAC
hosts, or only allow hosts with specific MAC addresses to access the external network.
Step 1 Log in to the H8922S 4G Router WEB configuration page.
For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Security> MAC Filter” to open the configuration page of “MAC Filter”. See below:

Doc. Version 1.0 72

 H8922S 3G/4G Router User Manual

Figure 5-35 The configuration page of MAC Filter

Table 5-20 MAC Filter explanation

Parameter Details Operation

Input configuration

Input Filter To activate MAC in-

 Blacklist: rules in blacklist cannot visit router, other
put filtering black MACs can visit router.
 White list: rules in white list can visit router, other MACs
list / white list.
cannot visit router.
Forward configuration

Forward Filter To activate MAC

 Blacklist: rules in blacklist cannot visit external network,
forward filtering other MACs can visit external network through router.
 White list: rules in white list can visit external network,
black list / white
list. other MACs cannot visit external network through
router.
Step 3 Click “Add” to add a new MAC filter rule and configure MAC filtering parameter. See below:

Doc. Version 1.0 73

 H8922S 3G/4G Router User Manual

Figure 5-36 The configuration of MAC Filter

Table 5-21 The instruction of MAC Filter Parameter

Parameter Details Operation

Basic Settings

MAC MAC to be filtered WORD type MAC for-

mat: XX:XX:XX:XX:XX:XX

Default Action Default actions of the rule. Can be “accept” or “Drop”: To choose “accept” or
 Accept: to accept all packages from this MAC. “Drop”
 Drop: to drop all packages from this MAC.
Filter mode To choose “Input”, “Forward” or “Both”. To choose “Input”, “For-
 Input: all packages visiting router. ward” or “Both”.
 Forward: all packages forwarded by router.
 Both: both Input and forward.

Step 4 Single click “save” to finish the configuration of MAC filter.

---END

5.4.4 Remote Access

For security reasons, the ports 80, 23, 5123, and 443 of the router are usually disabled by default. In order
to facilitate the configuration of the router through a specific interface, the port opening function is added.
In addition, some customers have banned ping service requirements, and the page has added a ping func-
tion that prohibits all ports except the br0 port.

Step 1 Log in to the H8922S 4G Router WEB configuration page.

For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click "Security>Remote Access". Open the configuration page of “Remote Access”, see be-
low:

Doc. Version 1.0 74

 H8922S 3G/4G Router User Manual

Figure 5-37 The page of “Remote Access”

Step 3 Click "Mod" to open or close the 80 (HTTP), 23 (CLI), 5123 (SSH), 443 (HTTPS) ports of dif-
ferent interfaces. See below:

Figure 5-38 The editing page to open Ports

Doc. Version 1.0 75

 H8922S 3G/4G Router User Manual

Table 5-22 Description of port open configuration parameters

Parameter Details Operation

Interface The interface that needs to be configured for the port. No action required
The default is not to choose.

SSH The SSH port can be chosen to open or close . Radio button selection.
 Open
 Close
CLI The CLI port can be chosen to open or close . Radio button selection.
 Open
 Close
HTTP The HTTP port can be chosen to open or close . Radio button selection.
 Open
 Close
HTTPS The HTTPS port can be chosen to open or close . Radio button selection.
 Open
 Close
Step 4 Click Save to complete the configuration of opening or closing the port on the interface.
Step 5 Click the “Mod” button to enable or disable the ping function, see below:

Figure 5-39 The editing page to ping

Table 5-23 Description of port open configuration parameters

Parameter Details Operation

Interface The interface that needs to be configured for the port. The No action required
default is not to choose.

ping The ping can be chosen to turn ping on or off Radio button selection.
 Open
 Close
Step 6 Click Save to complete the configuration that the ping function is open or closed.
---END

Doc. Version 1.0 76

 H8922S 3G/4G Router User Manual

5.4.5 Anti-attack
A DDoS attack is a common type of network attack. If the attacked object is severe, the entire network may be
paralyzed. The device provides DDoS attack defense. This allows the device to reduce this network attack. In
addition, port scanning is also used by some hackers to attack the device. A large number of port scans also
occupy a large amount of resources of the device. The device provides a function of prohibiting port scanning,
which enables the device to reduce illegal port scanning.

Step 1 Log in to the H8922S 4G Router WEB configuration page.

For details, see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click "Security>Anti-attack".
Open the configuration page of “Anti-attack”. See below:

Figure 5-40 The configuration page of “Anti-attack”

Table 5-24 The instruction of Parameter for Anti-attack

Parameter Details Operation

DDoS service The DDos can be chosen to enable or Radio button selection.
disable.  Enable
 Disable
Port Scan Limit The function of port Scan Limit can be Radio button selection.
chosen to enable or disable.
 Enable
 Disable
Step 3 Click "Save"to finish the configuration of “Anti-attack” .
---END

Doc. Version 1.0 77

 H8922S 3G/4G Router User Manual

5.5 Forward configuration

Overview
Forward function of H8922S 4G router includes NAT, Routing, dynamic routing (RIP, OSPF,BGP) (optional) and
QoS .

5.5.1 NAT
The configuration of DNAT rule
The DNAT is a destination address replacement and is used to replace the destination address inside the exter-
nal network access router with the address set by the user.
Step 1 Click "Forward>NAT".
Open the configuration page of “NAT”. See below:

Figure 5-41 The configuration page of “NAT”

Step 2 Click the "Add" button and select a new DNAT rule with the conversion type "DNAT", see
below:

Doc. Version 1.0 78

 H8922S 3G/4G Router User Manual

Figure 5-42 The configuration page of DNAT rule

Step 3 Configure parameters for the DNAT rule.

Table 5-25 DNAT Parameter instruction

Parameter Details Operation

Basic Settings

Protocol The destination address transla- Select from dropdown List:

tion is performed for which proto-  all
col packet.  tcp
 Udp
 icmp
Original Address Type The external address, the address Dropdown List
needs to be converted  interface
 static
Interface (when the initial ad- Indicates the external address of Dropdown List
dress type select “interface” , IP packets to an interface of the  br0
needs to be configured) router  modem
 eth0
 eth1

Original Address (when the ini- The external address, the address Manual input
tial address type select “static”, needs to be converted Format1: A.B.C.D
needs to be configured)
Format2: A.B.C.D/Mask

Original port The port of external IP, the port Value area: 1~65535
need to be replaced

Doc. Version 1.0 79

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Mapping address Internal IP address Format:A.B.C.D

e.g. [Link]

Mapping port The port of Internal IP address Value area :1~65535

Step 4 Single click “save” to finish the configuration.

When a port is configured in the DNAT rule, the protocol selects "all" to select two protocols "tcp" and "udp";
when no port is configured in the DNAT rule, the protocol selects "all" to select "tcp" and "udp" , "icmp"
three kinds of agreements.

The configuration of SNAT rule

SNAT is the source address translation, and its role is to translate source address of IP packets into another
address.
Step 1 Click “Forward > NAT” to open the configuration page of “NAT”.
Step 2 After the conversion type is set to SNAT, the configuration page. See below:

Figure 5-43 The configuration page of SNAT rule

Step 3 Configure the paraneter of SNAT rule.

Doc. Version 1.0 80

 H8922S 3G/4G Router User Manual

Table 5-26 The instruction of parameters of SNAT rule

Parameter Details Operation

Protocol The destination address translation is per- Dropdown List

 all
formed for which protocol packet.
 tcp
 udp
 icmp

Original Address The source address need to be replaced Manual input

Format1: A.B.C.D
Format2: A.B.C.D/Mask

Original Port Source address port to be replaced. Value area: 1-65535 or [1-
65535], it can be a range, or a
single port

Mapping Address The type of new source address after the Dropdown List
 interface
Type source address is replaced
 static

 Dropdown List
Interface Select the interface of the router as source ad-
 br0
dress after replacement
 modem
 eth0
 eth1

Mapping Address New source address after source address re- Format:
placement A.B.C.D

Mapping Port The new port which replaces the original port Value area: 1-65535 or [1-
of source address. 65535], it can be a range, or a
single port

Step 4 Single click “save” to finish the configuration of SNAT rule.

When a SNAT rule is configured with port specified, selecting “all” in protocol means selecting two protocols contain
"tcp", "udp"; when a SNAT rule is configured with no port specified, selecting “all” in protocol means selecting three
protocols contains "tcp", "udp","icmp".
---END

The configuration of MASQ rule

MASQ is also MASQUREADE, address masquerading, which converts the source IP address of all packets for-
warded by the router into the IP address set by the user. The H8922S routers support the conversion of the
source IP address of a packet to an interface address of the router.
Step 1 Click “Forward > NAT” .
open the configuration page of “NAT”and choose Convert Type as MASQ. See below:

Doc. Version 1.0 81

 H8922S 3G/4G Router User Manual

Figure 5-44 The configuration page of MASQ

Step 2 Configure the parameters of MASQ rule.

Table 5-27 The instruction of parameters of MASQ rule

Parameter Details Operation

Interface Select the IP of an interface as the communica- Select from Dropdown List:
tion address between the router LAN and the out-
side.
 br0
 modem
 eth0
 eth1
Step 3 Single click “save” to finish the configuration of MASQ.

MASQ rule: the source address of all packets in the LAN need to be transferred into the specific ip address of the router, so the PC
from the LAN can send packets out; If MASQ rule in the router will be deleted, the router LAN of the PC cannot communicate with
external network.

---END

The configuration of MASQ rule

DMZ is the abbreviation of "demilitarized zone" in English, and the Chinese name is "quarantine zone", also
known as "demilitarized zone". It is to solve the problem that the external network can not access the internal
network server after installing the firewall, and set up a buffer between the non-secure system and the security
system. This buffer is located in the small network area between the internal network of the enterprise and the
external network. In this small network area, you can place some server facilities that must be exposed, such as
enterprise web servers, FTP servers, and forums. On the other hand, through such a DMZ area, the internal
network is more effectively protected, because this kind of network deployment has an additional level for the
attacker compared to the general firewall scheme.

Step 1 Click “Forward > DMZ”. See below:

Doc. Version 1.0 82

 H8922S 3G/4G Router User Manual

Figure 5-45 The configuration page of DMZ

Step 2 Configure the parameters of DMZ rule.

Table 5-28 The instruction of parameters of DMZ rule.

Parameter Details Operation

Interface Select the IP of an interface as the communication Select from Dropdown

address between the router LAN and the outside. List:
 br0
 modem
 eth0
 eth1
Mapping Address The address after the original destination address is Format: A.B.C.D
replaced.

Step 3 Single click “save” to finish the configuration of DMZ.

---END

5.5.2 Routing Configuration

Routing provides a specific forwarding path for routers to forward packets, which must be manually configured
by the user. A route is classified into a static route and a policy route. The static route is a route based on the
destination [Link] is configured. The smaller the priority of the static route of the same destination,
the higher the priority is [Link] policy routing is based on the source address selection route (the router
detects the source address of the received forwarding packet, and then selects the corresponding policy route
forwarding according to the source address), and the policy routing priority is distinguished by 3 to 252 numbers.
The smaller the number, the higher the priority. There is also a priority between static routes and policy routes:
policy routes take precedence over static routes.
Step 1 Click “Forward > Routing” to open the configuration page of “Routing” . See below:

Doc. Version 1.0 83

 H8922S 3G/4G Router User Manual

Figure 5-46 The configuration page of “Routing”

Step 2 Click “Add” to add a new static route, configuration page. See below:

Figure 5-47 The configuration page of Static Routing

Figure 5-48 The configuration page of Policy Routing

Doc. Version 1.0 84

 H8922S 3G/4G Router User Manual

Table 5-29 The instruction of parameters of Routing

Parameter Details Operation

Basic Setting

Routing Type To select “Static Route” or “Pol-

 Dropdown List
icy Route”

When Routing Type is “Static Route”

Network Set the destination IP address Manual input

and subnet mask of static route Format1: A.B.C.D/Mask

Gateway Type Specify gateway type of static Dropdown List

routing, includes:  Static IP
 interface  Interface
 static IP

Gateway Set a next hop IP address of static Dropdown List

route, IP address of the adjacent  If the gateway type selects static IP, gate-
router interface way need to manually input, format:
A.B.C.D
 If the gateway type select interface, the

gateway needs to select from dropdown list

Priority Static route priority configura- Enter it manually.
tion Range: 3-252
The smaller the value, the higher the priority
When Routing Type is “Policy Route”

Source Type Set source address type of policy Dropdown List

route  Static IP
Interface

Network It can be configured when “static Manual input

IP” is selected in source type, by Format1: A.B.C.D/Mask
adding IP address or subnet man-
ually.

Source Interface When source type is policy route, Dropdown List

need to manually set source net-  modem
work address of policy router  eth0
 eth1
Gateway Type Set the next hop IP of policy Dropdown List
route  static ip
 Interface
Gateway When the gateway type select Manual input
"Static IP" to fill in the IP address, Format1: A.B.C.D/Mask
when gateway type is "inter-
face", it will use the selected in-
terfaces as gateway

Doc. Version 1.0 85

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Priority Set policy routing priority, the Value area: [3,252]

priority lower the number, the
higher the priority

Step 3 Single click “save” to finish the static routing setting.

Static routing will forward according to the destination address of the packet, if the router received the packet (e.g. source address
is [Link] destination address is [Link]), it will forward the packet to next hop according to the route which meets with the desti-
nation address ([Link]).
It will forward the packet to next hop according to the route which meets with the destination address ([Link]).
Policy routing will forward according to the source address of the packet, if the router received the packet (e.g. source address is
[Link] destination address is [Link]), it will forward the packet to next hop according to the route which meet with the source
address ([Link]).
Policy routing has higher priority than static routing, policy-based routing priority regardless of how much.

---END

5.5.3 QoS
QoS (Quality of Service) quality of service, is a security mechanism for the network, is a technique to solve the
network bandwidth allocation and network priority and other issues. When the network is overloaded or con-
gested, QoS to ensure that critical traffic is not delayed or dropped, while ensuring the efficient operation of
the network, our H8922S 4G Router supports custom QoS services.
Step 1 Click “Forward > Qos”.
Step 2 Open the configuration page of “Qos”. See below:

Figure 5-49 The page of QoS

Step 3 Click "Add" to create a new QoS rule. See below:

Doc. Version 1.0 86

 H8922S 3G/4G Router User Manual

Figure 5-50 The configuration page of QoS

Step 4 Configure QoS parameters. See below:

Table 5-30 QoS parameter instruction

Parameter Details Option

Rule Name QoS rule name The max to 12 characters

Only set when adds a new rule and the fol-
low-up can not be modified
The rule name can not be repeated, other-
wise the rule will be covered after the rule
is added in front of the cover

Control Interface The interface type of QOS, in- Dropdown List

clude:  br0
 Modem
 eth0
Network The network address that flow in Full in destination address and subnet
and out via the QOS interface, is mask
the object of speed limit. Manual input
Format1: A.B.C.D/Mask

Port The network interface of QOS Value area: 1-65535

You can not configure the port, if not the
configuration represents all ports

Rate Transmission rate of the network Value area: 1~65535

address settings Units: Kbps

Doc. Version 1.0 87

 H8922S 3G/4G Router User Manual

Parameter Details Option

Ceil Rate In ensuring the basic rate and the Value area: 1~65535
spare bandwidth, the maximum Units: Kbps
bandwidth of the network ad-
dress of the communication can
be obtained with higher priority
will be given priority redundant
bandwidth

Priority Set the precedence of the rules Value area: [1,30]

Step 5 Single click “save” to finish QOS setting.

QoS is mainly used to allocate the average bandwidth for the users which access Internet through the router, or assigned specific
users with more bandwidth. If the router is connected with two subnets: [Link]/24 and [Link]/24, the router QOS can
control the rate of these two subnets; If the router's bandwidth is relatively well-off, the router can adjust the bandwidth based
on priority and redundancy of two subnets, that is, the router meets the high priority redundancy bandwidth firstly, then meets
the low priority subnet redundancy bandwidth.

---END

5.5.4 Dynamic Routing (Optional)

RIP configuration
RIP protocol (Routing Information Protocol) is the most widely IGP (Interior Gateway Protocol), it was designed
for the same technology used in small networks, and therefore adapt to most of the campus network and used
in a continuous regional networks that the rate change is not big, H8922S 4G Router supports RIP v2 protocol.
For more complex environments, generally do not use the RIP protocol.
Step 1 Click “Forward > RIP”.
Step 2 Open the configuration page of “RIP”. See below:

Doc. Version 1.0 88

 H8922S 3G/4G Router User Manual

Figure 5-51 The configuration of RIP

Table 5-31 RIP Parameter Instruction

Parameter Details Operation

RIP Service Enable or disable RIP Service Click the button to select.
 Enable
 Disable
Redistribute Connected Whether to redistribute direct Click the button to select.
routes to RIP  Enable
 Disable
Redistribute Static Whether to redistribute static Click the button to select.
routes to RIP  Enable
 Disable
Redistribute Kernel Whether to redistribute kernel Click the button to select.
routes to RIP  Enable
 Disable
Step 3 Click “Add” to add a new RIP route, configuration page. See below:

Doc. Version 1.0 89

 H8922S 3G/4G Router User Manual

Figure 5-52 The configuration page of RIP route

Step 4 Configure RIP route parameter instruction. See below:

Table 5-32 RIP parameter instruction

Parameter Details Operation

Add Type Add the type of RIP Click the button to select Add Type
route  When it is “Network”, need to configure destina-
tion network address.
 When it is “Neighbor”, need to configure neigh-

bor’s IP address
Network(directly connect Add the destination Add the destination network of RIP route
to the router) network of RIP route Format: A.B.C.D/Mask

Neighbor(directly connect Add the neighbor’s IP Add the neighbor’s IP address of RIP route
to the router) address of RIP route Format: A.B.C.D

Step 5 Single click “save” to finish RIP route setting.

RIP is an interior gateway protocol. If the communications between the two routers do not go through another router, the two
routers are adjacent. The RIP protocol specifies that no information exchange between non-adjacent routers.
Routers exchanging information is all the information currently known to the router. That is its own routing table. At a fixed time
to exchange routing information (such as every 30 seconds), then the router receives the routing information to update the
routing table.
RIP protocol "distance" also known as "hops " (hop count), because each through a router hop count is incremented. The RIP
judges a better router according to the less routing hops, as the “shorter distance”. RIP allows a path can contain up to 15 rout-
ers. Therefore, when the distance reach to 16 hops, it means the destination unreachable. RIP visible only for small Internet.

---END

OSPF configuration
OSPF (Open Shortest Path First) protocol is one of the (Interior Gateway Protocol), the most widely used IGP,
for a single AS (autonomous system) in the routing decisions for large networks. OSPF business can be based
whether the user needs to be configured at the factory H8922S 4G Router.
Step 1 Click “Forward > OSPF”.

Doc. Version 1.0 90

 H8922S 3G/4G Router User Manual

Step 2 Open the configuration page of “OSPF” . See below:

Figure 5-53 The configuration page of OSPF

Table 5-33 OSPF parameter instruction

Parameter Details Operation

OSPF Service Enable or disable OSPF Service Click the button to select
 Enable
 Disable
Redistribute Connected Whether to redistribute direct routes Click the button to select
to OSPF  Enable
 Disable
Redistribute Static Whether to redistribute static routes Click the button to select
to OSPF  Enable
 Disable
Redistribute Kernel Whether to redistribute kernel routes Click the button to select
to OSPF  Enable
 Disable

Step 3 Click “Add” to add a new OSPF route, configuration page. See below:

Doc. Version 1.0 91

 H8922S 3G/4G Router User Manual

Figure 5-54 The configuration of OSPF route

Step 4 Configure OSPF route parameter instruction. See below:

Table 5-34 OSPF route parameter instruction

Parameter Details Option

When Add Type is “Network”,
Network Set the network address as ospf sending Manual input
address Format1: A.B.C.D/Mask

Area Number Used to identify the network (only the Manual input
routers with the same domain address can Value area:[0,65535]
exchange routing information)

When Add Type is “Neighbor”,

Neighbor The router can reach in the next hop Manual input
Format1: A.B.C.D/Mask

When Add Type is “Interface”,

Interface Name The interface of the router

 Dropdown List
 br0
 modem
 eth1
 eth0

 Click the button to select

Interface Attribute Configure the router interface attribute, in-
 cost
clude cost and network
 network

Cost Configure the cost of the router interface, Manual input

used to learn routing table Value area:1-65535

Network Type (when Configure the network type of the router

 Dropdown List
the interface attrib- interface
 broadcast
 non-broad
ute is network)
 point-to-multipoint
 point-to-point

Doc. Version 1.0 92

 H8922S 3G/4G Router User Manual

Step 5 Single click “save” to finish OSPF route setting.

OSPF is a link-state (Link-state) routing protocol, commonly used for the same routing domain. Here, the routing domain is an
autonomous system, which refers to the routers can switch routing information through a unified network switching or routing
protocol routing policy in the AS, all OSPF routers maintains an identical description of the database structure AS, which is stored
in the database link status information corresponding routing domain, OSPF router is through this database to calculate its OSPF
routing table.
As a link-state routing protocol, OSPF link state broadcast data LSA (Link State Advertisement) sent to all routers in an area, which
is different from the distance vector routing protocols. Distance vector routing protocol passed some or all routing information of
the routing table to the adjacent routers.

---END

Doc. Version 1.0 93

 H8922S 3G/4G Router User Manual

BGP configuration
Border Gateway Protocol (BGP) is a routing protocol for an autonomous system running on TCP. BGP is the only
protocol used to handle networks like the size of the Internet, and the only protocol that can properly handle
multiple connections between unrelated routing domains. BGP is built on the experience of EGP. The main
function of the BGP system is to exchange network reachability information with other BGP systems. Network
reachability information includes information about the listed autonomous systems (AS). This information ef-
fectively constructs a topology map of the AS interconnect and thereby clears the routing loop while imple-
menting policy decisions at the AS level.

Step 1 Click “Forward > BGP”.

Step 2 Open the configuration page of “BGP”. See below:

Figure 5-55 The page of BGP

Table 5-35 BGP configuration parameter instruction

Parameter Details Option

BGP Service BGP function is turned on Button selection:

 Enable
 Disable
Gray status indicates the currently se-
lected status

Router As The router is configured with the sys- Manual input

tem number. The same AS is called Value area:[0,65535]
IBGP. The different AS is called EBGP.

Router ID Route ID, which is used in BGP when Manual input

routing Format1: A.B.C.D

Step 3 Click “Save” to finish the basic settings of BGP.

Step 4 Click “Add” to create a new BGP rule. See below:

Doc. Version 1.0 94

 H8922S 3G/4G Router User Manual

Figure 5-56 The configuration page of BGP

Step 5 Configure the rule parameters of the route mode. See below:BGP rule parameter instruc-
tion

Parameter Details Option

When "Notification Type" selects "Network"

Network Set a network segment as the notification Format:

address of the router BGP. A.B.C.D

When "Notification Type" selects "Neighbor"

Neighbor The address of the device that the router Manual input
can reach at one hop. Format: A.B.C.D

Remote As Set the peer peer AS number to be the Manual input

same as the local AS number to establish Value area:[0,65535]
an IBGP neighbor. The local AS number is
inconsistent with the local AS number.

Advanced Set- Advanced option switch Click to expand.

tings The default is the collapsed state

Update Source BGP update source interface selection. Dropdown list:

The update source is the interface used  br0
by BGP to establish a tcp connection  loopback
when BGP establishes a neighbor. If not  modem
specified, the physical network port of  eth0
the interconnect is used by default.  Eth1
Log-neighbor- Print log when neighbor status changes Dropdown list:
changes  Enable
 Disable
Auto Summary Automatic route aggregation switch Dropdown list:
 Enable
 Disable

Doc. Version 1.0 95

 H8922S 3G/4G Router User Manual

Synchronization BGP synchronization switch Dropdown list:

 Enable
 Disable

Step 6 Click “Save” to complete the configuration of the BGP rule.

BGP (Border Gateway Protocol) is a distance vector routing protocol that implements reachable routes be-
tween ASs (Autonomous System) and selects the best route.
BGP advantages:
BGP guarantees the security, flexibility, stability, reliability and efficiency of the network in many aspects.
BGP adopts authentication and GTSM to ensure network security.
BGP provides a variety of routing policies, which can flexibly route routes and guide neighbors to advertise
routes according to policies.
BGP provides route aggregation and route aging to prevent network flapping and effectively improve network
stability.
BGP uses TCP as its transport layer protocol (destination port number 179) and supports association with BGP
and BFD, BGP tracking, and BGP GR and NSR to improve network reliability.
In the scenario where the number of neighbors is large, the number of routes is large, and most of the neigh-
bors have the same egress policy, BGP uses the group-packaging technology to greatly improve the perfor-
mance of BGP packet delivery.
---END

5.6 VPN configuration

Overview
VPN (Virtual Private Network) is a kind of secure local area network based on the Internet. Currently, the H8922S
4G Routers not only support the separate use of the five VPN protocols L2TP/PPTP/GRE/IPIP/IPSEC/OpenVPN,
but also support VPN service is set up on the VPN, that is, VPN OVER VPN, such as GRE over IPSec, IPSec over
PPTP/L2TP/GRE/IPIP. Multi-layer VPN settings can better report the security of user communication data.

5.6.1 VPDN configuration

VPDN English is Virtual Private Dial-up Networks, also known as virtual private dial-up network. It is a kind of
VPN service and is a virtual private dial-up network service based on dial-up users. That is, dial-up access to the
Internet is a secure virtual private network that is built using the bearer function of the IP network combined
with the corresponding authentication and authorization mechanism. It is a technology that has developed rap-
idly in recent years with the development of the Internet.
VPDN supports both L2TP and PPTP protocols.

Doc. Version 1.0 96

 H8922S 3G/4G Router User Manual

Point to Point Tunneling Protocol (PPTP) is a network technology that supports multi-protocol virtual private
networks. It is also a Layer 2 protocol. Through this protocol, remote users can securely access the corporate
network through Windows mainstream operating systems and other systems equipped with peer-to-peer pro-
tocols, and can dial into the local ISP to securely connect to the corporate network through the Internet.
L2TP (Layer Two Tunneling Protocol) Abbreviation for Layer 2 Tunneling Protocol, which is a kind of VPDN (Vir-
tual Private Dial-Up Networking) technology, which is used for channel transmission of Layer 2 data. L2TP pro-
vides a means of remote access control. A typical application scenario is: a company employee dials into the
company's local network access server (NAS) through PPP, thereby accessing the company's internal network,
obtaining an IP address and accessing it. Network resources for the corresponding permissions. The employee's
access to the company's network is as safe and convenient as a corporate LAN.

Step 1 Click “VPN > VPDN” to open the configuration page of “VPDN”.

Figure 5-57 The configuration page of VPDN

Step 2 Click “Add” to add a new VPDN [Link] shown in Figure 5-58.

Figure 5-58 VPDN rule configuration

Doc. Version 1.0 97

 H8922S 3G/4G Router User Manual

Step 3 Configure VPDN rule parameter. See below:

Table 5-36 VPDN rule parameter instruction

Parameter Details Operation

VPDN service To enable or disable the VPDN rule single button:

 Enable
 Disable
Basic Settings

Interface name Name of this VPDN rule Cannot be modified after

save.

protocol VPDN protocol includes Select from Dropdown List,

 L2TP cannot be modified after
 PPTP save.

Service IP or Do- IP or domain of server to be visited To input the IP or domain of

main server to be visited.
Maxium 64 bytes

Username Username of server to be visited To input the username.

Maxium 64 bytes

Password Password of server to be visited To input password.

Maxium 64 bytes

Advanced set- Advanced parameter of PPP link Click “Display”

tings

Authentication & Encryption (matching with the server when configuring, defaults to negotiation)

CHAP Challenge-Handshake Authentication Proto-

 Disable
col, a way to send real password when build
 Negotiation
ppp link, improved security CHAP is prior to PAP

PAP Password Authentication Protocol

 Disable
 Negotiation
 Disable
MS-CHAP MS-CHAP
 Negotiation
Microsoft Challenge-Handshake Authentica-
tion Protocol
Based on MPPE

MS2-CHAP MS-CHAP second version

 Disable
 Negotiation
 Disable
EAP PPP Extensible Authentication Protocol
 Negotiation

Compress (configuration needs to match the server, the default is all disabled)

Compression Con- Negotiate which compress control protocol

 Disable
trol Protocol used on PPP link
 Negotiation

Doc. Version 1.0 98

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Address/Control Whether compress IP address

 Disable
Compression
 Negotiation

Protocol Field Whether compress Whether compress IP ad-

 Disable
Compression dress
 Negotiation

VJ TCP/IP Header Whether allow TCP/IP to communicate by

 Disable
Compress compressing VJ
 Negotiation

Connection-ID Whether allow TCP/IP to communicate by

 Disable
Compression compressing ID in the first
 Negotiation

more

Debug Enable PPP dialing log, default value is enable,

 Disable
in order to check more info about dialing, sug-
 Negotiation
gest no changing

Peer's DNS Auto get peer DNS when PPP dialing. DNS is
 Disable
necessary if want visit domain name. In order
 Negotiation
to forbid LAN pc visit domain name, you may
disable it

LCP Interval/LCP After PPP dialing succeed, LCP is needed to Value area : 1~512
Retry keep PPP link alive. Also it could be used to Unit: second
quickly spot network interrupt and reconnect
Default value: 30/5

MTU the number of bytes of the maximum transfer Value area : 128~16364 byte
unit by PPP interface, sometimes financial
data has request on this

MRU the number of bytes of the maximum receive Value area : 128~16364 byte
unit by PPP interface, sometimes financial
data has request on this

Local IP Set the local IP address when PPP dialing, need A.B.C.D,
ISP support Example: [Link]

Remote IP Set the remote IP address when PPP dialing, A.B.C.D,

need the support of ISP Example: [Link]

Professional
 nomppe Do not suggest modify,
 mppe required please contact us for help if
 mppe stateless
necessary
 nodeflate
 nobsdcomp
 default-asyncmap

Step 4 Single click “save” icon to finish.

After a VPDN rule is added, router will build VPN communication with service address au-
tomatically. To see the tunnel status, click “View” in “Tunnel” tab.

Doc. Version 1.0 99

 H8922S 3G/4G Router User Manual

Figure 5-59 L2TP tunnel status

---END

5.6.2 Tunnel configuration

Tunnel technology transfers data between the networks through the Internet infrastructure. In the whole pro-
cess of transmission, when the encapsulated data package delivered on a public Internet, the logic path which
the packet passes through is called tunnel. GRE and IPIP Tunnel configuration supports two modes.
GRE (Generic Routing Encapsulation, Generic Routing protocol encapsulation) specifies how to use a network
protocol to another network protocol encapsulation method. The main purpose of the GRE protocol, there are
two: internal protocol encapsulation and private address encapsulation.
IPIP tunnel is a simple agreement between two routers for IP packet encapsulation, IPIP tunnel interface will be
like a physical interface in the interface list, many routers including Cisco, basically support the agreement. This
agreement enables multiple network distribution possible.
Step 1 Log in to the H8922S 4G Router configuration page.
For details on how to log in to the device, see 5.2.1 “Logging In to the WEB Configuration
page”.
Step 2 Click “VPN > Tunnel” to open the configuration page of “Tunnel” .
Step 3 Click Add to add a new tunnel rule. See below:

Doc. Version 1.0 100

 H8922S 3G/4G Router User Manual

Figure 5-60 Tunnel configuration

Table 5-37 Tunnel rule parameter instruction

Parameter Details Operation

IP Tunnel Service To enable or disable IP tunnel service Button selection:

 Enable
 Disable
Basic Settings

Tunnel name Name of the tunnel, cannot be modified after An easily identifiable name
save is recommended. Modifica-
tions are not allowed after
saving. The maximum sup-
port input is 8 characters.

Tunnel Mode Tunnel mode: Select from Dropdown List:

 Gre
 ipip
Local virtual IP Virtual IP address of local tunnel Format: interface type
A.B.C.D/M.

Peer virtual IP Virtual IP address of peer tunnel Format: interface type

A.B.C.D/M.

Interface type To choose “interface” or “static IP” Select from Dropdown List.
 Static IP
 Interface
Local Extern in- This parameter will need to be set if “interface” Select from Dropdown List.
terface is selected in “interface type”. Choose any  modem

Doc. Version 1.0 101

 H8922S 3G/4G Router User Manual

Parameter Details Operation

connected interface as external interface  eth0

Local extern IP This parameter need to be set if “static IP” is se- Format: interface type
lected for “interface type”. It is to set IP address A.B.C.D/M.
to external network

Peer extern IP External interface IP of counterpart network Format: interface type

tunnel. Usually a public IP address, also can be a A.B.C.D/M.
LAN IP

Tunnel Key When the tunnel mode is set to gre, the tunnel Enter it manually.
key is set to unlock the tunnel. The two sides of Input range: 0~4294967295
the tunnel must be set consistently.

Keep-alive Inter- The tunnel keepalive detection mechanism is Enter it manually.

val used to detect whether the physical link of the Input range: 1~32767
tunnel is connected. This area is used to set the
sending time of keepalive packets.

Keep-alive Retry The tunnel keepalive detection mechanism is Enter it manually.

used to detect whether the physical link of the Input range: 1~255
tunnel is connected. This is used to set the
keepalive message connection to be received
several times, and the tunnel is disconnected.

Step 4 Single click “save” icon to finish.

---END

5.6.3 IPSec configuration

IPSec (IP_SECURITY) is a protocol built on top of the Internet Protocol (IP) layer. It enables two or more hosts to
communicate in a secure manner. IPSec is the long-term direction of secure networking. It provides proactive
protection through end-to-end security to prevent attacks from private networks and the Internet. The IPSec in
the H8922S and H8922S 4G Routers uses the common phase1 to negotiate with most IPSec servers. The H8922S
4G Routers also support IPSec through other interfaces (such as pulling them through the modem), eliminating
the need for manual operation by the user. IPSec has two modes: tunnel mode and transmission mode.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
Step 2 Click "VPN>IPSEC"
Open the IPSec Configuration page. See below:

Doc. Version 1.0 102

 H8922S 3G/4G Router User Manual

Figure 5-61 The page of IPSec

Step 3 Click “Add” to add a new IPSec rule. There are 3 phases for IPSec configuration:
1. Phase 1 parameter

Figure 5-62 IPSec phase 1 configuration

Doc. Version 1.0 103

 H8922S 3G/4G Router User Manual

Table 5-38 The instruction of parameters of IPSec Phase 1

Parameter Details Operation

Basic Settings

Select Set the phase type of IPSec, including the Select “Phase 1”
first phase, the second phase, and the
third phase.

Policy Name The name of this stage is mainly used for To input the name of phase 1. Cannot be
the matching of the third stage. changed after save.
Supports up to 12 characters of input.

Initial Mode The first phase of IPSec negotiation Select from Dropdown List, “aggr” is rec-
mode, including "main" (main mode) and ommended
"aggr" (barbaric mode).

Encrypt First stage encryption method selection. Select from Dropdown List
 des
 3des
 aes256
 aes192
 aes128
Hash First stage hash algorithm selection. Select from Dropdown List
 md5
 sha1
 sha2_256
Authentica- The first stage of the certification method Select from Dropdown List:
tion selection.  psk
 Rsasig
 xauth
IKE The first phase of the IKE version selec- Select from Dropdown List:
tion.  ikev1
 Ikev2
Pre Share To set pre share key Max 24 letters
Key

Self Identify Configure the IPSEC local ID to indicate You can fill in the IPSec local ID. It must be
the identity of the local end. If not config- the same as the peer ID preset by the IPSec
ured, the IP address is used. peer server.
Maxium 64 bytes.

Match Iden- Configure the IPSEC peer ID to indicate can fill in the IPSec peer ID, which is the
tify the peer identity. If not configured, the IP same as the local ID of the IPSec peer
address is used. server.
Word type,Maxium 64 bytes.

IKE Lifetime Life time of IKE key Value area: 120~86400

Unit: second

Doc. Version 1.0 104

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Group Name Configured here as the key length for the Select from Dropdown List
first phase of IKE negotiation.  group768
 group1024
 group1536
 group2048
 group3072
 Grouo4096
DPD Service To enable DPD service,The DPD peer de- Dropdown list:
tection needs to be supported by the  Enable
peer server. It is used to check whether  Disable
the IKE environment is normal. If the IKE
environment is abnormal, the IKE envi- Click “Enable” to enable the peer detection
ronment is renegotiated to ensure the se- service.
curity and connectivity stability and con-
nectivity of the IPSec environment.

DPD Delay To set DPD check interval time Manual input

Value area : 1~512
Unit: second

DPD Retry Max times to continuous DPD check fail- Manual input
Times ure. Value area: 1~512
Unit: times

Single click “save” to finish the configuration of phase 1 .

In above parameters, “Initial Mode”, “Encrypt”, “Hash”, “Authentication” “Pre Share Key”, “IKE Lifetime”,
“Group Name”DH Group” need to match parameter of IPSec server. “Self Identify” and “Match Identify” needs
to match “match Identify” and “Self Identify” of IPSec sever respectively.

2. Parameter configuration for the second phase. See below:

Doc. Version 1.0 105

 H8922S 3G/4G Router User Manual

Figure 5-63 The configuration page of IPSec phase 2

See below parameters instruction of the second phase of the IPSec rule.

Table 5-39 The parameters of the second phase of the IPSec rule

Parameter Details Operation

Basic Settings

Select Set the phase type of IPSec, including Radio button selection.
the first phase, the second phase, and The second phase of the rule is added
the third phase. here, so select "Phase 2".

Policy Name The name of this stage is mainly used To input the name of phase 2. Cannot be
for the matching of the third stage. changed after save

Encryption Pro- Supports esp Select the authentication encryption pro-

tocol tocol to set from the drop-down list

Encrypt The choice of the second stage en- Select from Dropdown List
cryption method.  des
 3des
 aes256
 aes192
 aes128

Doc. Version 1.0 106

 H8922S 3G/4G Router User Manual

Parameter Details Operation

Hash The second stage of hash algorithm Select from Dropdown List
selection  md5
 sha1
 Sha2_256
Group Name Used when perfect forward encryp- Select from Dropdown List
tion is enabled, here configured as the  group768
key length for IPSec second-phase SA  group1024
negotiation.  group1536
 group2048
 group3072
 Grouo4096
PFS Enabling or disabling perfect forward Select from Dropdown List
encryption, enabling perfect forward Select open or close according to the set-
encryption increases system over- tings of the peer IPSec server.
head, but increases IPSec security.

Lifetime IPSec SA key life time Value area: 120~86400

Unit: second

Local Protoport Configure the protocol and port that Manual input, the front box enters the
the local end needs to encrypt. protocol code, and the rear box enters
the port.

Remote Proto- Configure the protocol and port that Manual input, the front box enters the
port the peer needs to encrypt. protocol code, and the rear box enters
the port.

Transport Mode Supports tunnel, transport and auto. Select from Dropdown List
 auto
 Transport
 tunnel
Local Subnet Set local subnet No need to set for “transport” mode,
only for “auto” and “tunnel”. Format:
A.B.C.D/M

Remote Subnet To set local subnet No need to set for “transport” mode,
only for “auto” and “tunnel”. Format:
A.B.C.D/M
Single click “save” to finish the configuration of phase 2 .

Among the above parameters, the transmission protocol, encryption method, hash algorithm, DH group, per-
fect forward encryption, key lifetime, etc. must be consistent with the IPSec server configuration; if the trans-
mission mode is set to automatic or tunnel mode, the local subnet and the remote terminal network must be
consistent with the configuration of the remote subnet and local subnet in the IPSec server.

Doc. Version 1.0 107

 H8922S 3G/4G Router User Manual

The protocol code of the local protocol port and the remote protocol port must be the same, indicating that
one protocol is encrypted. When the local protocol port and the remote protocol port are configured, IPSec
encrypts the protocol and port, and other communications are not encrypted. When this parameter is not con-
figured, it means that IPSec encrypts all communications.

3. Match phase parameter configuration. See below:

Figure 5-64 The matching phase configuration page

set the matching phase parameters of the IPSec rule. After the configuration is complete,
click “Save”.

When the encrypted interface selects br0 and the br0 interface has multiple addresses, the address selected by
IPSec is the IP1 address of br0.
Table 5-41 describes the parameters of the matching phase of the IPSec rule.

Table 5-40 The parameters of the matching phase of the IPSec rule.

Parameter Details Operation

Basic Settings

Select Set the phase type of IPSec, including the first Radio button selection.
phase, the second phase, and the third phase. The rule added here is the matching
phase, so select "IPSec".

Interface The name of this stage is mainly used for the A maximum of 12-bit strings are al-
Name matching of the third stage. lowed.
Fill in the name of the stage. Cannot
be modified after saving

Match Phase1 To select a matching name of “phase1” Select from Dropdown List.
Select the policy name for the first

Doc. Version 1.0 108

 H8922S 3G/4G Router User Manual

Parameter Details Operation

phase configuration.

Match Phase2 To select a matching name of “phase2” Select from Dropdown List
Select the policy name for the sec-
ond phase configuration.

Destination IP IP or domain name of the IPSec peer server. Fill in the IP or domain name of the
or Domain IPSec peer server.
Maximum allowable input of 64-bit
strings.

Encryption In- To select binding interface of IPSec. to bind Select from Dropdown List
terface VPDN/modem/br0 as local interface of IPSec
initial can support IPSec OVER VPDN. In addi-
tion, after binding, IPSec rule will change as
per the charge of binding interface. Thus can
resume link of IPSec dialing interface and keep
IPSec linked as soon as possible

---END

5.6.4 Open VPN Configuration

OpenVPN is the VPN achievement based on the OpenSSL library's application layer. Compared with the tradi-
tional VPN, it is simple and easy to use. OpenVPN all the communications are based on a signal IP port, and it
use the UDP protocol transports default and recommended. It can also support the TCP protocol. OpenVPN
connection can through most of the proxy servers and work well in the NAT environment. Its server side has
the function of pushing some network configuration information (including IP address, route configuration and
so on) to the client side. OpenVPN offers two types of interfaces for networking via the universal TUN/TAP
driver. It can create either a layer-3 based IP tunnel (TUN), or a layer-2 based Ethernet TAP that can carry any
type of Ethernet traffic. Port 1194 is the official IANA (Internet Assigned Numbers Authority) assigned port num-
ber for OpenVPN.
Step 1 Click "VPN > OpenVPN"to open the configuration page of "OpenVPN". See below:

Doc. Version 1.0 109

 H8922S 3G/4G Router User Manual

Figure 5-65 The configuration page of OpenVPN

Step 2 Set the parameters of Open VPN. See below:

Table 5-41 The instruction of the parameters of OpenVPN

Parameter Detail Operation

OPENVPN Enable OPENVPN Service. Click button options:

Service  Enable
 Disable
Basic Setting

Status OpenVPN connection status display There are two states: disconnected,
connected

Local Virtual Display of virtual interface IP address after Display the IP address of the virtual
IP OpenVPN connection interface

Doc. Version 1.0 110

 H8922S 3G/4G Router User Manual

Parameter Detail Operation

Work Mode Supports two working modes: Dropdown list options:

 Client mode: client type mode  client
 Multi mode: peer to peer working mode (peer
 multi
is non-server) Select the required working mode
from dropdown list.

Dev Dev represents the network interface type, and Dropdown list options:
supports two types:  tun
 Tun(OSI Layer 3):Simulates network layer de-  tap
vice to operate the third layer data packets, Select the required working mode
such as IP packets from dropdown list.
 Tap(OSI Layer 2):Equates to an Ethernet de- Demand consistent with peer.
vice to operate the second layer data packets,
such as Ethernet data frame.

Protocol
Data transfer protocol type settings: Dropdown list options:
 TCP protocol: A kind of connection oriented
reliable transmission protocol, which is suitable
 tcp
for the occasions where the reliability require-
 udp
ment is high and the communication efficiency is Select the required working mode
not high. from dropdown list.
 UDP protocol: A kind of non - connection un- Demand consistent with peer.
reliable transmission protocol, which is suitable
for the scene with relatively high efficiency and
relatively low reliability.
Destination Specifies connected server address WORD type，max 32 bytes.
IP or domain Demand consistent with peer.

Port Specifies connected server port Value range: 1~65535

 Default: 1194
Demand consistent with peer.

Compress Compression protocol: configure whether VPN Click button options:

connection compression is opened.  Enable
If the server is open, the client must open.  Disable

Nobind Configure whether to bind to the specific local Click button options:
port.  Enable
 Disable
Authentica- Configuring the VPN data transfer mode: Dropdown list options:
tion  SSL: encrypt the network connection in  auth
transport layer, high safety factor.  ssl
 Text: transport with text form during trans-
 text
mission, low safety factor Select the required data transfer
 Auth: username + password + ca verification, type from dropdown list.
high security factor

Doc. Version 1.0 111

 H8922S 3G/4G Router User Manual

Parameter Detail Operation

Encrypt Data encryption method Dropdown list options:

 NONE
 MD5
 SHA1
 SHA224
 SHA256
 SHA384
 SHA512
Ca Specifies the file path for the client CA certificate WORD type，max 32 bytes.

Key Specifies the private key path for the current cli- WORD type，max 32 bytes.
ent

Cert Specifies the certificate file path for the current WORD type，max 32 bytes.”。
client

Tls Open TLS, if the server is open, the client must WORD type，max 32 bytes.
also open.
TLS: secure transport layer protocol (TLS) to pro-
vide confidentiality and data integrity between
two communication applications. The protocol
consists of two layers: the TLS record protocol
(TLS Record) and the TLS handshake protocol
(TLS Handshake)

Keep alive The message keepalive mechanism between it Enter it manually.

and the OpenVPN server. Input range: 1~65535
Unit: second

Cipher SSL's encryption algorithm system. Drop box options:

 NONE
 BF-CBC
 DES-CBC
 RC2-CBC
 DES-EDE-CBC
 DES-EDE3-CBC
 DESX-CBC
 RC2-40-CBC
 CAST5-CBC
 RC2-64-CBC
 AES-128-CBC
 AES-192-CBC
 AES-256-CBC
 SEED-CBC

Click “Save” to finish the configuration of OpenVPN.

---END

Doc. Version 1.0 112

 H8922S 3G/4G Router User Manual

5.6.5 DMVPN Configuration

Dynamic Multipoint VPN, dynamic multipoint VPN. DMVPN is a MGRE+NHRP+IPSEC solution that is a simple,
dynamic, and scalable way. DMVPN supports spoke dynamic addresses, adding new spokes, without changing
the hub configuration. The spoke to spoke dynamic generation tunnel is triggered by traffic and is encrypted
using IPSec.
Step 1 Click "VPN > DMVPN".
Step 2 Open the page of “DMVPN” . See below:

Figure 5-66 The page of “DMVPN”

Step 3 Click Add to add a new DMVPN rule. See below:

Doc. Version 1.0 113

 H8922S 3G/4G Router User Manual

Figure 5-67 The configuration page of “DMVPN”

Step 4 Configure DMVPN rule parameters. See below:

Table 5-42 The instruction of the parameters of DMVPN

Parameter Detail Operation

DMVPN Service DMVPN service switch Button selection:

 Enable
 Disable

Gray status indicates the currently selected

status

Basic settings

DMVPN Name DMVPN rule name input Enter it manually.

Input range: 0~3

Peer Extern IP The external interface IP of the peer Fill in the external interface IP of the tunnel
network of the tunnel is usually the peer network.

Doc. Version 1.0 114

 H8922S 3G/4G Router User Manual

Parameter Detail Operation

IP address of the public network. It Format:A.B.C.D
can also be the IP address of differ-
ent intranets.。

Local Virtual IP The virtual IP address of the local Enter it manually.

tunnel. Format:A.B.C.D

Peer Virtual IP The virtual IP address of the local Enter it manually.

tunnel.
Format:A.B.C.D

Tunnel Key Used to unlock the tunnel. The two Enter it manually.
sides of the tunnel must be set con- Input range: 0~4294967295
sistently.

Initiate Mode The first phase of IPSec negotiation Drop-down list selection.
mode, including "main" (main mode)  main
and "aggr" (barbaric mode).  aggr
Select the startup mode to be set from the
drop-down list. Generally, both ends have
NAT and use USERID to suggest "savage
mode".
Encrypt The choice of the first stage encryp- Drop-down list selection.
tion method  des
 3des
 aes256
 aes192
 aes128
Hash The choice of the first stage hash al- Drop-down list selection.
gorithm  md5
 sha1
 sha2_256
Group Name Configured here as the key length for Drop-down list selection.
the first phase of IKE negotiation.  group768
 group1024
 group1536
 group2048
 group3072
 group4096
IKE Lifetime The lifetime of the IKE key. Fill in the appropriate key life cycle.
Value range: 120~86400
Unit: second

Pre Share Key Set the pre-shared key. Fill in the pre-shared key preset by the IPSec
peer server.
An alphanumeric string of up to 64 charac-
ters in length.

Doc. Version 1.0 115

 H8922S 3G/4G Router User Manual

Parameter Detail Operation

Self Identify Configure the IPSEC local ID to indi- You can fill in the IPSec local ID. It must be
cate the identity of the local end. If the same as the peer ID preset by the IPSec
not configured, the IP address is peer server.
used. WORD [Link] alphanumeric string of up to
64 characters in [Link] addition, the local
identifier supports space input.

Match identify Configure the IPSEC peer ID to indi- You can fill in the IPSec peer ID. It must be
cate the peer identity. If not config- the same as the local ID preset by the IPSec
ured, the IP address is used. peer server.
WORD [Link] alphanumeric string of up to
64 characters in [Link] addition, the peer
identifier supports space input.

Lifetime Key lifetime of the IPSec SA (IPSec Fill in the life cycle of the appropriate key.
SA). Value range: 120~86400
Unit: second

SA Algorithm The choice of the second stage en- Drop-down list selection.
cryption and hash combination  des-sha1
 des-sha2_256
 des-md5
 3des-sha1
 3des-sha2_256
 3des-md5
 aes128-sha1
 aes128-sha2_256
 aes128-md5
 aes192-sha1
 aes192-sha2_256
 aes192-md5
 aes256-sha1
 aes256-sha2_256
 aes256-md5
PFS After the key length is selected, the Drop-down list selection.
perfect forward encryption is auto-  close
matically enabled. This is configured  group768
as the key length of the IPSec sec-  group1024
ond-phase SA negotiation.  group1536
 group2048
 group3072
 group4096
Encrypt Inter- Select the binding interface of IPSec Drop-down list selection.
face  modem
 eth0
 br0

In addition, when a virtual interface is config-

ured, such as l2tp, tunnel, etc., it can also be

Doc. Version 1.0 116

 H8922S 3G/4G Router User Manual

Parameter Detail Operation

selected in the drop-down list.

Nhrp Cisco Se- The NHRP next hop routing resolu- Enter it manually.
crets tion protocol is used to solve point- Maximum support input of 64 characters.
to-multipoint environmental data
communication problems. Fill in the
NHRP key here, and it needs to be
consistent with the peer.

Nhrp Hold- NHRP retention time Enter it manually.

time(s) Input range: 1~65535

Step 5 Click”Save” to complete the configuration of DMVPN rule.

---END

5.6.6 EOIP Configuration

An EoIP (Ethernet over IP) tunnel is an Ethernet tunneling protocol established between the IP transport layers
of two routers. It is a free protocol of MikroTik RouterOS. The EoIP interface behaves like an Ethernet transport.
When the bridge function of the router is enabled, all Ethernet data traffic (all Ethernet protocols) will be
bridged as if there is physical between the two routers (with bridging enabled). The switch interface is the same
as the fiber transceiver.
Step 1 Click”VPN>EOIP”.
Step 2 Open the page of “EOIP”. See below:

Figure 5-68 The page of “EOIP”

Step 3 Click “Add” to add a new EOIP rule. See below:

Doc. Version 1.0 117

 H8922S 3G/4G Router User Manual

Figure 5-69 The configuration page of “EOIP”

Step 4 Configure parameters for EOIP rules. See below:

Table 5-43 The instruction of the parameters of EOIP

Parameter Detail Operation

ID Input of EOIP ID value Enter it manually.

Input range: 1~65535
ID cannot be modified after saving
Tunnel Name Input of EOIP's Tunnel Name Enter it manually.
Maximum support for inputting 64 characters.
Can be modified after saving.

Remote Address Input of the peer address Enter it manually.

Format:A.B.C.D

Bridge EOIP bridge port selection Currently only supports br0.

Step 5 Click “Save” to finish the configuration of EOIP rule.

---END

5.7 System Management Configuration

Overview
H8922S 4G Router system management function is mainly to carry out some daily maintenance operations on
the system. For example, through the log to analyze the operation of the system, management of user account
information, network testing, and upgrade of system files.

5.7.1 Local Log

Step 1 Log in to the WEB configuration page of the H8922S 4G Router.

Doc. Version 1.0 118

 H8922S 3G/4G Router User Manual

For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “System>Local Log”.
Open the configuration page of”Local Log”. See below:

Figure 5-70 Local Log tab

Step 3 Select type of “Local Log” and then click “View” to see log.
Click “Clear” to clear the log info in the “Log Table”, and click “Export” to export log in your
local PC.
There are 3 kinds of log:
 Message: system log, to record the running log of router, usually for most of users.
 Application: application program log, to record the Open or close of some application programs.
 Kernel: kernel log of router, usually for R&D engineers.
---END

5.7.2 Remote Log

The remote log is mainly used to connect to the remote log server. The router can upload the local log to the
remote log server. The configuration steps are as follows:
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.

Doc. Version 1.0 119

 H8922S 3G/4G Router User Manual

Step 2 Click “System>Remote Log”.

Open the configuration page of”Remote Log”. See below:

Figure 5-71 The configuration page of Remote Log

Step 3 Configure parameters for the system log. See below:

Table 5-44 The instruction of Remote log parameter

Parameter Details Operation

Log Status To enable or disable remote log Click “Enable”to enable the re-
mote log.

Remote IP or Domain IP address of the remote log server (ei- To input the IP address or domain
ther the IP address of the LAN side PC or to receive log
the public network address).

Remote Port Port number of the remote log server. Default port: 514

Step 4 Single click “save” to finish the configuration of “Remote Log” parameter.

A software tool Syslog is used to receive remote log in server. Syslog can be downloaded at website of [Link]

---END

5.7.3 Clock
H8922S 4G Router supports NTP (Network Time Protocol) network protocol timing. When the NTP network is
paired, the system time of the router can be ensured to correspond to the actual time. The functions such as
task management can be executed at the correct time. Specific steps are as follows.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.

Doc. Version 1.0 120

 H8922S 3G/4G Router User Manual

Step 2 Click “System > Clock” to open the page of “Clock”. See below:

Figure 5-72 “NTP” Time Synch.

Figure 5-73 Manually configure Time Sync Type

Step 3 Configure parameters for system time.

The parameter description is shown in Table 5-46.

Table 5-45 Clock Parameter instruction

Parameter Details Operation

Status To enable to disable Time Syn-

 To click “Enable” or “Disable”
chronization service

Time Synch. Type Type to synchronize system time Select from Dropdown List:
 Ntp(correcting time via the network)

Doc. Version 1.0 121

 H8922S 3G/4G Router User Manual

 manual(using the manual method for proof-

reading time)
When select “NTP” in “Time Synch. Type”

Source Interface The original interface with the Select from Dropdown List:
 modem
NTP server
 eth0
 Br0

Sync Status Display of NTP status NTP synchronization successfully displays

"Sync success"
NTP synchronization failed to display "No
Sync"

NTP Server IP or IP or domain of NTP server Select from Dropdown List

Domain

NTP Server Backup NTP server Manual input server domain or IP address
Backup

NTP Synch. Inter- Interval for NTP client to check Value area: 1~65535
val time with NTP Server. E.g. every Unit: second
10 minutes
Default: 600 s

Time Zone Time Zone Select from Dropdown List

Time Zone Num- For “Custom” option in “Time WORD type

ber Zone”. E.g. +8 or -4

When select “Manual” in “Time Synch. Type”(This page only shows the configured time, the system real time
is in the upper right corner of the WEB page)

Set Date To set date YYYY-MM-DD

e.g. 1970-01-01

Set Time To set time HH:MM:mm

E.g. [Link]

Step 4 Single click “save” to finish the configuration of remote log .

---END

5.7.4 Account
“Account” User provides the ability for users to modify the username/password. At the same time, user man-
agement can modify the access port of the router's WEB and block other users from accessing the route.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “System > Account” to open the page of “Account”.AS shown in figure 5-74.

Doc. Version 1.0 122

 H8922S 3G/4G Router User Manual

Figure 5-74 The page of Account

Step 3 Configure parameters of account.

The parameter description is shown in Table 5-47.

Table 5-46 The instruction of Account parameter

Parameter Details Operation

Account Type Visit the router on web Select from Dropdown List

Account Level Level of account to login Select from Dropdown List

router  Admin: can view and change the parameter.
 Guest: can view parameter and export log and
use “Network Test”.
Current Username Current username Cannot be configured,Displayed as the currently
logged in user.

Admin password Current password Enter the login password of the currently logged
in user.

New Username New username Manual input, max 64 word type.

New Password New password Manual input, max 64 word type.

New password con- To confirm the new pass- Manual input, max 64 word type.
firm word

Port The port on which the Manual input

user logs in to the router Value area 1~65535
page.
Default: 80

Doc. Version 1.0 123

 H8922S 3G/4G Router User Manual

“Account” only provides the user's modification function, and does not provide functions such as adding and
deleting.
If the "port" parameter has not been modified, you can log in to the router page by directly entering the IP
address of the router. If the port is modified to other numbers and the modification is successful, you need to
enter the IP address of the router to log in to the router page.
The admin can only modify the password of the admin itself, but cannot modify the password and parameters
of the guest; the guest itself has no function of “Account”.

Step 4 Click “Save” to finish [Link] the save is successful, the page will automatically
jump to the login page, and the user needs to enter the modified username/password to
enter.
---END

5.7.5 Network Test

The network test includes the commonly used Ping function and Traceroute function. The specific steps are as
follows:
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “System > Network Test” to open the page of “Network Test” . See below:

Figure 5-75 The configuration page of Network Test

Doc. Version 1.0 124

 H8922S 3G/4G Router User Manual

Step 3 Input IP address or domain to be tested in “Destination”, click “Ping, to check whether the
router can be linked with destination. See below:

Table 5-47 The instruction of parameters of Network Test

Parameter Details Operation

Mode Type Choose a different type of network test. single button:

 Ping
 Trace
 MTR
Destination Set the destination IP address or domain Fill in the destination IP address or
name to use for testing. domain name to be used for testing.

Packet Size When the type of network detection is Enter it manually.

"Ping" and "MTR", the size of the packet can Input range: 1~65535
be set.

Don't Fragment When the network detection type is "Ping", Single box.
you can set whether the ping packet carries Unchecked by default
the DF identifier. DF is the identification bit
of the slice.

Reslove Names When the network detection type is "MTR", Single box.
you can set whether to perform name reso- Unchecked by default
lution.

start Click “start” to start the selected network de- No

tection mode.

Trace: Traceroute. Through Traceroute, we can know what path the computer from the computer to the other
end of the Internet is. It takes a long time to send a small packet to the destination device until it returns. Each
device Traceroute on one path is measured 3 times. The output includes the time (ms) of each test and the
name of the device (if any) and its IP address.
---END

5.7.6 Files
Firmware Setting
The H8922S supports upgrading the system files on the local network. Before upgrading, please make sure that
you have obtained the target file of the system update and have saved the update files on the computer on the
LAN.
Step 1 Click “System > Files” to open the page of “Files”.As shown in figure 5-76.

Doc. Version 1.0 125

 H8922S 3G/4G Router User Manual

Figure 5-76 The page of Files

Step 2 Click Browse, select the upgrade file locally, and click Upgrade to start the upgrade. If "Re-
store Default" is selected, the configuration of the router will be restored to the factory
settings after the patch or program is upgraded; if it is not selected, only the patch or pro-
gram will be upgraded, and the parameter configuration of the router will be maintained.
---END

Upgrade in CFE mode

When the program is upgraded to the router (generally, the program upgrade is a comprehensive replacement
upgrade), if the file size exceeds 6MB or the upgrade fails through the WEB configuration page, you can choose
to upgrade in CFE mode. The specific upgrade operation mode is as follows.
Step 1 Add an IP address of the 192.168.1.X network segment on the PC. See below:
For details, see “4.2 Local Connection Configuration”.

Doc. Version 1.0 126

 H8922S 3G/4G Router User Manual

Figure 5-77 Add an IP address

Step 2 Press the RESET interface. Do not release it. Hold it, meanwhile power on router(After
power-on, keep pressing the “RESET”button for 2 to 5 seconds or more and then release
the “RESET”button
Step 3 Enter [Link] into the upgrade page in the browser of the PC, as shown below:

Figure 5-78 The page of upgrading in CFE mode

Doc. Version 1.0 127

 H8922S 3G/4G Router User Manual

Step 4 Click “Browse” and select the upgrade file on the local PC, and then click Upload to start the
upgrade. See below:

Figure 5-79 The Page being upgraded in CFE mode

The upgrade process will last for about 3 to 6 minutes. Please wait patiently and observe
the SYS indicator of the device. If the SYS indicator is on, the program upgrade is successful.

You can also PING br0 address on your PC (ping [Link] –t). if Ping ok, upgrading is OK.

---END

Backup setting

The H8922S series routers support backup and recovery of configuration files. See below:
 Click “Browse”to view the configuration file that needs to be imported locally, and click “Import” to com-
plete the import of the file. If the parameters of the router are incorrect or the file is lost, you can use the
"Import" function to restore the parameters.
 Click “Export” to export the configuration file to the local file to implement file/parameter backup.

Figure 5-80 Backup setting page

After the backup file is imported, the system automatically restarts a Key: adding a key when exporting a file,
you need to enter the key when importing the file. Otherwise, the router will be garbled; the key can be left
blank. If the key is entered incorrectly during import, the router page will not be accessible and the key must be
8 digits.

BGP backup settings

Doc. Version 1.0 128

 H8922S 3G/4G Router User Manual

The routers of the H8922S series support backup and recovery of BGP configuration files, as shown in Figure 5-
81.
 Click “Browse” to view the BGP configuration file that needs to be imported locally. Click “Import” to
complete the import of the file. If the router parameters are incorrect or the
file is lost, you can use the "Import" function to restore the parameters.
 Click Export to export the BGP configuration file to the local device to implement file/parameter backup.

Figure 5-81 The page of BGP Backup setting

Factory setting
H8922S 4G router has function to resume factory configuration. Users can set the configuration to factory mode,
and also can set the current configuration into default configuration and generate a default factory configura-
tion file in router. To resume this default factory setting, users can click “Load” in “factory setting”. If the default
factory configuration file is deleted, the router will be resumed back to initial factory setting.
 Set as default: Save the current configuration as the default factory configuration.
 Restore default: Restore the factory configuration.

View patch information

Figure 5-82 Patch file status bar

 Delete: Delete all patch files.

Reboot
Click the "Restart" button to restart the system.

5.8 Status
Overview
H8922S 4G Router provides status display information. Through the status page, you can quickly view the basic
information, network status, and routing table information of the router.

5.8.1 Base Information

You can learn the basic information of the H8922S 4G Router system by viewing the basic information of the
H8922S 4G Router. The specific operation method is as follows.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.

Doc. Version 1.0 129

 H8922S 3G/4G Router User Manual

Step 2 Click “Status > Base System information” to open the page of “Base Information”.

Figure 5-83 The page of Base system Information

Click “Refresh” to re-detect the latest parameters of the system and display it to the current page.

Table 5-48 The instruction of parameter of Base information

Parameter Details Operation

Router SN Serial number information of the device Not available

Hardware Version Hardware version information of the device Not available

Software Version Operating system and application software version information Not available
corresponding to the product

Online Time Online time information of device Not available

5.8.2 LAN
By viewing the "LAN Status" information of the H8922S 4G Router, you can learn the basic information of the
"LAN Status" of the H8922S 4G Router. The specific operation method is as follows.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status > LAN” to open the page of “LAN”.As shown in figure 5-84.

Doc. Version 1.0 130

 H8922S 3G/4G Router User Manual

Figure 5-84 The page of “LAN”

Table 5-49 The instruction of LAN

Parameter Details Operation

LAN status Displays whether the status of the current LAN interface function is Not available
enabled or disabled.

IP Displays the IP address configured for the LAN port. Not available

Subnet Mask Displays the network address where the configured LAN interface is Not available
located.

MAC Displays the physical address of the LAN network port. This address Not available
is generally fixed and unique.

Client List List of client information connected to the device through the LAN Not available
port

---END

5.8.3 WAN
By viewing the "WAN Status" information of the H8922S 4G Router, you can learn the basic information of the
"LAN Status" of the H8922S 4G Router. The specific operation method is as follows.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details, please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status > WAN” to open the page of “WAN”. Because the WAN port has three forms
of static IP/DHCP/PPPOE, when the WAN port is in any of these three forms, the WAN status
displays the WAN information in this form. See below:

Doc. Version 1.0 131

 H8922S 3G/4G Router User Manual

Figure 5-85 WAN status in static IP form

Figure 5-86 WAN status in DHCP form

Figure 5-87 WAN status in PPPoE form

Doc. Version 1.0 132

 H8922S 3G/4G Router User Manual

Table 5-50 The instruction of parameters of WAN status

Parameter Details Operation

WAN Status Shows whether the status of the current WAN interface function Not available
is enabled or disabled.

Wan Type Displays the type of the current WAN interface. Not available

Status Displays the configured local IP address of the WAN port. Not available

Local IP Address Displays the network address where the configured WAN inter- Not available
face is located.

Remote IP Displays the physical address of the LAN NIC, which is generally Not available
fixed and unique.

Status display when the WAN port adopts PPPoE mode

Status To show the link status of WAN interface in PPPoE mode Not available

Local IP To show the router IP distributed by PPPoE Not available

Remote IP To show IP of PPPoE server Not available

---END

5.8.4 Modem
By querying the status of the “modem”, you can learn about the "mobile network status" and "mobile network
device information". Therefore, it is determined whether the network and the device are normal according to
the relevant state. It is also conducive to analysis and problem solving of abnormal situations.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status > Modem” to open the page of “Modem”. As shown in figure 5-88. The param-
eter description is shown in Table 5-52.

Doc. Version 1.0 133

 H8922S 3G/4G Router User Manual

Figure 5-88 The page of Modem Status

Table 5-51 The instruction of parameter of Modem

Parameter Details Operation

Modem Select The name of the Modem rule that is currently dialed by the mobile Not available
network.

Up Time The online duration of the H8922S 4G Router after dialing the line is Not available
displayed.

Modem Status H8922S4G Router connection status with the wireless network. Not available
Contains both connected and disconnected states.

Network Type The type of network corresponding to the SIM card currently in ef- Not available
fect.

Signal The signal strength of the wireless network. Not available

Value range: 1 to 31
If there is no signal, the dialing cannot be successful.

IP Address H8922S 4G Router obtained the external network IP address when Not available
dialing.

Doc. Version 1.0 134

 H8922S 3G/4G Router User Manual

Parameter Details Operation

DNS H8922S 4G Router obtains the preferred DNS address when dialing. Not available

SIM Status The working status of the SIM corresponding to the card slot cur- Not available
rently used by the 4G Router.

SIM ICCID The ICCID number of the SIM card. Not available

SIM IMSI The IMSI number of the SIM card. Not available

LAC The location area code used by Modem dialing. Not available

CELL ID The cell ID used by Modem dialing. Not available

RSRP The received power of the reference signal dialed by Modem. Only Not available
displayed when 4G dialing.

SINR The ratio of the signal dialed by Modem to the interference plus Not available
noise. Only displayed when 4G dialing.

Operator Modem dial-up carrier. Not available

Band The frequency band used by Modem dialing. Not available

---END

5.8.5 WLAN
You can learn the basic information about the WLAN of the router by viewing the WLAN Status information of
the H8922S 4G Router. The specific operation method is as follows.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status > WLAN”. The H8922S 4G Routers have WLAN and station modes. See below:

Doc. Version 1.0 135

 H8922S 3G/4G Router User Manual

Figure 5-89 Status page in ap mode

Figure 5-90 Status page in station mode

Doc. Version 1.0 136

 H8922S 3G/4G Router User Manual

Table 5-52 The instruction of Parameter in ap mode

Parameter Details Operation

Basic information

Work Mode The working mode of the WLAN. Not available

SSID Representation of ap. Not available

AP Isolation The isolation status of the WLAN client device. Not available

Channel The working channel of ap. Not available

Network Mode The network mode currently used by ap. Not available

MAC Address The MAC address of the device. Not available

Client information

IP address IP address of the WLAN client. Not available

MAC address MAC address of the WLAN client. Not available

Table 5-53 The instruction of Parameter in station mode

Parameter Details Operation

Basic information

Status The state of the other APs connected to the WLAN when it Not available
is stationed.

Work Mode Station mode Not available

SSID AP ID of the router connection Not available

Channel Working channel of the AP connected to the router Not available

IP Address IP address assigned to the router by the connected AP of the Not available
router

Mask Subnet mask assigned to the router by the connected AP of Not available
the router

Gateway The default gateway assigned to the router by the con- Not available
nected AP of the router

Primary DNS The preferred DNS address assigned to the router by the Not available
connected AP of the router

Secondary DNS The backup DNS address assigned to the router by the con- Not available
nected AP of the router

MAC Address MAC address of the connected AP of the router Not available

---END

Doc. Version 1.0 137

 H8922S 3G/4G Router User Manual

5.8.6 Routing Table

By querying the status of the routing table, you can learn the routing information of the H8922S 4G Router.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status > Routing Table” to open the page of “Routing Table”. See below:The page of
Routing table

Table 5-54 The instruction of Routing table Parameter

Parameter Details Operation

Static route

Network IP address the router can reach Not available

Subnet Mask IP network the router can reach. It is used together with Not available
“Network”

Gateway Next hop IP address which the router will reach Not available

interface Interface from router to gateway Not available

metric Route No which the router reaches destination IP Not available

Policy route

Priority Priority the router select route Not available

---END

Doc. Version 1.0 138

 H8922S 3G/4G Router User Manual

5.8.7 GPS
By querying the status of the routing table, you can learn the GPS information of the H8922S 4G Router.

Step 1 Log in to the WEB configuration page of the H8922S 4G Router.

For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status>GPS”. See below:

Figure 5-91 The page of GPS

Table 5-55 The instruction of GPS Parameter

Parameter Details Operation

GPS Status Display of the on state of the GPS. Not available

UTC Display of world standard time. Not available

Last Fix Time The display of the last specified time. Not available

Number Of Satellites The display of the number of satellites used by GPS. Not available
Used

Number Of Visible Display of the number of satellites available for GPS. Not available
Satellites

Longitude Display of device longitude information. Not available

Latitude Display of device dimension information. Not available

Height The height of the device from sea level. Unit M. Not available

Speed Parallel speed of the device. Not available

Doc. Version 1.0 139

 H8922S 3G/4G Router User Manual

--END

5.8.8 Traffic Statistics

By querying the status of the routing table, you can learn the traffic statistics of the H8922S 4G Routers.
Step 1 Log in to the WEB configuration page of the H8922S 4G Router.
For details ,please see “5.2.1 Logging In to the WEB Configuration Page”.
Step 2 Click “Status>Traffic Statistic”. See below:

Figure 5-92 The page of modem Traffic Statistic

Figure 5-93 The page of WAN Traffic Statistic

Doc. Version 1.0 140

 H8922S 3G/4G Router User Manual

Figure 5-94 The page of LAN Traffic Statistic

Table 5-56 The instruction of Traffic Statistic

Parameter Details Operation

Flow chart The traffic usage information of the interface is displayed in Not available
real time through the picture. The speed of uploading and
downloading can be seen through the picture, the red line in-
dicates uploading, and the blue line indicates download。

Statistics It can display the average speed of uploading and download- Not available
ing within 5min, 10min, and 15min, and the peak speed.

Average(Kb/s) Display of average speed information. Not available

Peak(Kb/s) Display of peak speed information. Not available

--END

5.9 RESET button function

“RESET” button is on the rear panel and next to power interface. This button can be used when the router is in
use or when the router is turned on. Three are 3 functions to press “RESET” button when the router is in use:
 Press “RESET” for about 0~5 seconds, router will reboot.
 Press “RESET” 5-15 seconds, the router will reboot, meanwhile, the router will be resumed to default
factory setting configuration.
 Press “RESET” over 15 seconds, the router will reboot, and get into CFE upgrading. The router is resumed
to default factory setting configuration.
 Press button when the router is turned on:
 Press “RESET” button and turn on the router, and keep pressing “RESET” for 2 seconds. The router
will get into CFE upgrading mode.
---END

Doc. Version 1.0 141

 H8922S 3G/4G Router User Manual

6 Typical application

About this chapter

Chapter Brief introduction of content

6.1 Overview This section briefly introduces several typical application functions of the H8922S
4G Router.

6.2 Link backup func- This section briefly introduces a typical application example of the H8922S
tion Router trigger setting function.

6.3 Parameter select This section briefly introduces a typical application example of the H8922S 4G
function Router parameter select function.

6.4 VPN This section briefly introduces the H8922S 4G Router VPN application examples.

6.4 Schedule This section briefly introduces the practical application examples of the H8922S
4G Router task management functions.

6.1 Overview
The H8922S 4G Routers are widely used. The commonly used functions include on-demand dialing, parameter
link backup, and VPN. The following are some typical application scenarios provided by the H8922S 4G Router
systems.

6.2 Link backup function

Scene introduction
H8922S 4G Router supports link switching between wireless and wireless, wireless and wired. When the working
link of the router fails, it can quickly switch to other links and continue to work on the switched link.
For example, the shopping mall POS card needs a stable network to ensure that if the wired network used by
the POS fails, the H8922S 4G Router can quickly switch to the wireless network to ensure the normal operation
of the POS card card service.

Parameter configuration
In this scenario, you need to perform the configuration of Link Backup. For details, see "Link Backup."

Doc. Version 1.0 142

 H8922S 3G/4G Router User Manual

Figure 6-1 Main link (wan) configuration

Figure 6-2 Backup link (modem) configuration

Application result
After all the parameters are configured, the default route of the router goes to the eth0 (WAN) interface of the
primary link. If the router can ping the IP address of [Link], the router will always work on the primary
link. As shown in Figure 6-3, the backup link modem is always online. If the wired network (WAN port) fails to
ping [Link] due to a fault, the router will switch the link to the modem after multiple failures, so that
the services of the lower computer can be performed normally, as shown in below.

Doc. Version 1.0 143

 H8922S 3G/4G Router User Manual

Figure 6-3 The primary link is detected normally and works on the primary link

Figure 6-4 The primary link fails to be detected and is switched to the backup link.

6.3 Parameter select function

Scene introduction
H8922S 4G Router provides parameter switching function to switch between working or temporarily stopped
links. For example, when the working L2TP link fails to work properly for some reason, it can switch to the
standby PPTP or IPSec link. The H8922S 4G Routers switch multiple links according to the configured parameter
switching rules to ensure the reliability of network communication.

Configuration
In this scenario, you need to perform parameter select. For the configuration procedure, see Parameter select.

Doc. Version 1.0 144

 H8922S 3G/4G Router User Manual

Figure 6-5 Interface configuration

Figure 6-6 The configuration of parameter select 1

Doc. Version 1.0 145

 H8922S 3G/4G Router User Manual

Figure 6-7 The configuration of parameter select 2

When the working L2TP link is disconnected from the server for some reason, the router performs the param-
eter "check icmp" in the parameter switch, and pings the configured destination IP to detect whether the router
is disconnected from the network operator. After failing to ping the destination IP address three times, the
router will switch to the PPTP link, maintain the connection with the server, and continue to work.

Application result
Initially, the PPTP link is used, and then the L2TP connection is disconnected. After the ping [Link] fails,
the router switches to the L2TP link and maintains the connection with the server, as shown in Figure 6-8.

Figure 6-8 The result of parameter select

Doc. Version 1.0 146

 H8922S 3G/4G Router User Manual

6.4 VPN
Scene introduction
VPN is a virtual private network, which is a secure local area network based on the Internet. Currently, the
H8922S 4G Router supports L2TP/PPTP/GRE/IPIP/IPSec/OpenVPN six protocol VPNs.
L2TP is an abbreviation of Layer 2 channel protocol. It is a kind of VPDN (Virtual Private Dial-Up Networking)
technology, which is used for channel transmission of Layer 2 data. L2TP provides a means of remote access
control. The typical application scenario is that a company employee dials into the company's local network
access server (NAS) through L2TP to access the company's internal network, obtain an IP address, and access
it. Network resources for the corresponding permissions. The employee's access to the company's network is
as safe and convenient as a corporate LAN.
Here, IPSec is used to establish a communication link between employees and the company to ensure that
employees work as if they are accessing the corporate LAN, as shown in Figure 6-9.

Figure 6-9 Establishing IPSec communication

PC1 establishes an IPSec link with the company's router through the VPN function of H8922S and uses tunnel
mode communication. The LAN address on the H8922S side is [Link]/24, and the LAN address on the
router side of the company is [Link]/24. Through the established IPSec connection, the two LANs can
communicate securely.

Parameter configuration
In this scenario, you need to configure the VPN function. For the configuration procedure, see 5.6.4 IPSec Set-
tings. Figure 6-10, Figure 6-111, and Figure 6-12 show the configuration.

Doc. Version 1.0 147

 H8922S 3G/4G Router User Manual

Figure 6-10 IPSec Phase 1

Figure 6-11 IPSec Phase 2

Doc. Version 1.0 148

 H8922S 3G/4G Router User Manual

Figure 6-12 IPSec

The same configuration should be used on the router of the company. The difference is that the configuration
of the local end identifier, the peer end identifier, the local subnet, and the terminal network are opposite to
those of the H8922S 4G Router.

Application result
AAfter configuring the parameters of the H8922S 4G Router, and the company router, the two negotiate and
establish an IPSec connection, as shown in Figure 6-13. At this point, the LANs in the two places can access the
remote LAN as if they were accessing the local area network. At the same time, you can ping the company
subnet through this terminal network.

Figure 6-13 IPSec status

~ # ping [Link] -I [Link]

PING [Link] ([Link]) from [Link]: 56 data bytes
64 bytes from [Link]: seq=0 ttl=255 time=1569.360 ms
64 bytes from [Link]: seq=1 ttl=255 time=769.937 ms

--- [Link] ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 769.937/1169.648/1569.360 ms

Doc. Version 1.0 149

 H8922S 3G/4G Router User Manual

6.5 Schedule
Scene introduction
H8922S 4G Router support timing task, by setting timing task, at certain time, router will operate reboot, online
command. Etc. Easier the customer operation. I assume set the router online at certain time and keep a moment,
then reboot every 24 hours. You could set like below.

Figure 6-14 schedule

Application result
Router will be online at 10:05 AM and keep online until 10:08, then offline at 10:09.
And router will reboot every 24 hours count began last reboot.

Figure 6-15 Router online

Figure 6-16 Router off line

Figure 6-17 Router reboot

---END

Doc. Version 1.0 150

 H8922S 3G/4G Router User Manual

7 FAQ/Exception handling

About this chapter

Chapter Content

7.1 Hardware failure Possible hardware failure during using H8922S 4G Router and
how to handle them

7.2 Dial online problem Possible problem during dialing and how to handle them

7.3 VPN Possible problem when connecting VPN

7.4 WEB config problem config problem Possible WEB config problem and how to handle them

7.1 Hardware Failure

7.1.1 All LED off
Phenomenon
Router LED all dark

Possible Reason
 Power supply does not match, it should be 5-36VDC
 No power supply

Solution
 Make sure the power supply is 5~36VDC
 Check the power adapter and cable connection

7.1.2 SIM Slot

Phenomenon
Cannot insert SIM card

Possible Reason
 SIM slot damaged

Doc. Version 1.0 151

 H8922S 3G/4G Router User Manual

 SIM card wrong direction

Solution
 SIM slot damaged, please contact us to repair
 Check the SIM card direction, please make sure the SIM goldfinger is up

7.1.3 Ethernet Connection

Phenomenon
LAN LED dark, cannot visit router WEB GUI

Possible Reason
 Ethernet cable connection problem
 Ethernet cable damage
 PC end network card abnormal

Solution
 Re-connect Ethernet cable
 Change a Ethernet cable
 Check network card setting on PC end

7.1.4 Antenna Connection

Phenomenon
Cannot connect antenna

Possible Reason
 Antenna type do not match
 Wrong connection

Solution
 Please check antenna interface, should be SMA-J
 Please check antenna type, there are 3G/4G and WIFI, GPS antenna, do not mix them

7.2 Dial Online Problem

7.2.1 Dial discontinue
Phenomenon
H8922S 4G Router discontinue during dialing, dial failure

Possible Reason
 SIM card network type do not match

Doc. Version 1.0 152

 H8922S 3G/4G Router User Manual

 SIM charges owed

 Power supply do not match
 Modem setting wrong

Solution
 Change to a suitable SIM card
 Recharge SIM card
 Change to suitable power supply
 Change Modem setting, please check related chapter

7.2.2 No Signal
Phenomenon
H8922S 4G Router modem status show no signal

Possible Reason
 Antenna connect wrong
 Modem cannot online
 Modem offline

Solution
 Connect suitable antenna
 Modem cannot online, check SIM and modem setting
 Modem offline, check router setting, like wake up setting, ICMP setting, check if there are any setting
make router offline

7.2.3 Cannot find SIM/UIM card

Phenomenon
H8922S 4G Router cannot find SIM/UIM card

Possible Reason
 SIM card damage
 SIM bad contact

Solution
 Replace SIM card
 Re-install SIM card

7.2.4 Poor Signal

Phenomenon
H8922S 4G Router no signal or poor signal

Doc. Version 1.0 153

 H8922S 3G/4G Router User Manual

Possible Reason
 Antenna connect wrong
 Area signal weak

Solution
 Check the antenna and re-connect it.
 Contact Telecom Operator to confirm signal problem
 Change to high-gain antenna

7.2.5 Compress Protocol not match

Phenomenon
H8922S 4G Router dial failure, log shows compress protocol not match

Possible Reason
Modem compress protocol do not match with server end

Solution
Change compress protocol setting

7.3 VPN Problem

7.3.1 VPDN cannot connect
Phenomenon
VPDN cannot connect

Possible Reason
 VPDN port work abnormal
 VPDN parameter wrong
 VPDN peer server abnormal

Solution
 Make sure Modem is online
 Set the correct port to VPDN
 VPDN parameter wrong
 Check VPDN peer server

7.3.2 VPN cannot communicate

Phenomenon
VPN already connect, but cannot communicate

Doc. Version 1.0 154

 H8922S 3G/4G Router User Manual

Possible Reason
 Router table config wrong
 VPN peer server config wrong

Solution
 Add related Router table
 Check VPN peer server setting

7.3.3 Router can communicate but subnet cannot

Phenomenon
Router can communicate but subnet cannot

Possible Reason
 VPN peer server config wrong
 Local Router has no MASQ
 Wrong local route table

Solution
 Check VPN peer server setting
 Local Router has no MASQ, please manual add VPN port MASQ
 Wrong local route table, set right route table

7.4 WEB config problem

7.4.1 Updating firmware failure
Phenomenon
Updating firmware failure

Possible Reason
 Auto reboot during updating H8922S 4G Router
 Power supply problem
 Wrong firmware
 Power off during updating router

Solution
 Check setting, disable the function which may cause reboot
 Change to a suitable power supply
 Ask technical support for suitable firmware
 Power off during updating router, please make sure power supply normal

Doc. Version 1.0 155

 H8922S 3G/4G Router User Manual

7.4.2 Backup setting problem

Phenomenon
Router import backup setting failure

Possible Reason
 Backup setting file format wrong
 No reboot after backup setting

Solution
 Choose a right file to import
 Must reboot after import setting, then parameters available

7.4.3 Updating patch failure

Phenomenon
Updating fix patch failure, after updating, view fix patch and found no fix patch

Possible Reason
 Patch format wrong
 Patch name too complicated

Solution
 Check patch format, change to a right one
 Change the patch name to a simple one

7.4.4 CFE Updating failure

Phenomenon
CFE updating failure, firmware edition no change

Possible Reason
 Power supply do not match
 Firmware version or format do not match
 Power off during updating process

Solution
 If power supply do not match, please change then update again
 If firmware version, format do not match, please change then update again
 If power off during updating, please update again

Doc. Version 1.0 156

 H8922S 3G/4G Router User Manual

7.4.5 Update failure in WEB GUI

Phenomenon
Updating by WEB GUI, failed and cannot visit WEB GUI again

Possible Reason
Firmware oversize cause updating failure

Solution
Using CFE mode to update again, and router will restore to factory mode. If after CFE updating, still cannot
visit WEB GUI, please contact us for repairing

7.4.6 Forget Router Password

Phenomenon
Forget router login password

Possible Reason
User has changed the password

Solution
After router power on, push and hold RESET button over 10 seconds then release, then re-power on router,
router will back to factory mode (Username/Password both admin), but patch will reserve

When router is power on, press and hold RESET button around 1s, router will reboot and kept all setting.

Doc. Version 1.0 157