log-in
FAQ
 
Go to General Configuration FAQ's
View WAN FAQ's
Go to Serial Port FAQ's
Go to Firewall FAQ's
Go to Routing FAQ's
Go to VPN FAQ's
Go to X.25 FAQ's
Go to Monitoring FAQ's
Go to Firmware FAQ's





General

[back to top]

Q: How can I reset my Sarian router to it's factory defaults?
Q: How can I get the latest firmware releases for my Sarian unit?
Q: Can I use Internet Explorer to copy files to and from the Sarian?
Q: I want to connect to my Sarian via an ASY port with Dial-Up Networking but I get a 'Hardware Error' when it trys to dial
Q: When using FlashWriter I cannot access the device on a USB COM port device.
Q: I want to use a Sarian GPRS router as a backup to my main internet router. Can I use the Sarian to get access to the RS232 console port on the router and access it over GPRS?

Q: How can I reset my Sarian router to it's factory defaults ?

A: You can press and hold the 'User' button for 5 seconds to reset the unit back to it's default configuration or use Flashwriter to return the unit to a basic configuration.

Q: How can I get the latest firmware releases for my Sarian unit?

A: Visit the Firmware section for full details

Q: Can I use Internet Explorer to copy files to and from the Sarian?

A: Yes, either from a LAN connection or a Dial-Up Networking connection See FTP with IE for full details.

Q: I want to connect to my Sarian via an ASY port with Dial-Up Networking but I get a 'Hardware Error' when it trys to dial

A: This is usually due to modem speed being set incorrectly, check the speed of the ASY port and change it in both the Windows Control Panel > Phone and Modem Options and the DUN connection properties.

Q: When using FlashWriter I cannot access the device on a USB COM port device.

A: Unfortunately, many USB com port devices are lacking functionality or have bad flow control which is necessary for safe operation of FlashWriter, try using a hardware COM port instead.

Q: I want to use a Sarian GPRS router as a backup to my main internet router. Can I use the Sarian to get access to the RS232 console port on the router and access it over GPRS?

A: Yes, connect the router's console port to the Sarian's ASY port and set it to 'telnet mode' with Configure -> General -> ASY [port] Telnet mode: 'Telnet WITH null stuffing'. It can then be accessed by telneting to the GPRS Sarian on port 400x (where x is the number of the ASY port). Note that a special cable is available from Sarian to connect directly to the special console port interface on Cisco devices. Contact sales for more details.

WAN

[back to top]

Generic WAN

Q: How do I configure a static IP address on a PPP interface?

GPRS Connections
Q: I am connecting by GPRS - what speed and response time should I expect?
Q: Do any Sarian units support Enhanced Data rate for GSM Evolution (EDGE) mode?
Q: I have a GPRS connection to the internet but cannot resolve any hostnames
Q: I have a GPRS router but would like to back-up to GSM/CSD in the event of a GPRS failure - can this be done?
Q: How can I tell the status of my GPRS connection?
Q: How can I get my GPRS router to answer GSM/CSD data calls?
Q: How can I find out the absolute speed of my GPRS connection?
Q: How Do I reset my GPRS Connection?

Q: What do the RSSI Codes mean that appear in the Event log?

ISDN
Q: I keep seeing ISDN events in the trace F3->F7 what does this mean?
Q: When trying to make an ISDN call it fails with 'no cct' in the trace.
Q: What do the different layer 1 state definitions mean?


Wireless
Q: What are the International APN's (Access Point Name) for wireless operators?
Q: What do the signal indicators mean on my Sarian?
Q: Can I choose which network technology my wireless router uses?
Q: How fast are today's wirless networks?

Generic WAN     

Q: How do I configure a static IP address on a PPP interface?

A: To use a static IP address on the PPP interface.....

You should configure the PPP parameters as shown here (configure >> ppp 1 > standard), replacing the IP address and subnet details with your own:

Then to turn off the DHCP client on the PPP interface, browse to PPP x > Advanced and set Request IPCP local address option: to NO.
The DNS server option is on the PPP x standard page, we only support 1 DNS server on the PPP interfaces so enter 1 address here...

The gateway address is configured in Configure > IP Routes > Default route 0
The Source address and mask should be left blank.

GPRS Connections    

Q: I am connecting by GPRS - what speed and response time should I expect?

A: A ping round-trip-time of <700ms is considered exceptional for GPRS you can expect ping times up to 1.5 seconds. Speed varies by operator but you can expect up to 20 44Kb/s donwstream and 10 22Kb/s upstream. Speeds can be more than this where the operator supports higher coding schemes (e.g. CS3 or CS4) which typically relates to North American networks.

Q: Do any Sarian units support Enhanced Data rate for GSM Evolution (EDGE) mode ?

A: The Sarian ER series support EDGE with automatic fallback to GPRS, speeds of up to 177Kb/s have ben observed in tests. Check out the ER2110 details in the product section.

Q: I have a GPRS connection to the internet but cannot resolve any hostnames.

A: Check your PC's IP settings and make sure you have the Sarian as the DNS host.

Q: I have a GPRS router but would like to back-up to GSM/CSD in the event of a GPRS failure - can this be done?

A: Yes, See Application Note 12 for full details.

Q: How can I tell the status of my GPRS connection?

A: From the web interface Status -> GPRS Module also see GPRS Status for full details.

Q: How can I get my GPRS router to answer GSM/CSD data calls?

A: You will need to add an initialisation string to enable the data bearer under Configure -> GPRS -> Modem Init 0 -> at+cbst=71,0,1 then you can configure a PPP instance to answer the call.

Q: How can I find out the absolute speed of my GPRS connection?

A: Currently neither the GPRS modules used in the Sarian units nor the network itself makes this information available.

Q: How Do I reset my GPRS Connection?

A: GPRS connections are more likely to go stale than other PPP type connections. When this happens, the connection remains up, but no data is transmitted.

Fortunately, there is a mechanism for dealing with this issue. We have a very useful firewall which can inspect the state of the connection based off of ICMP or TCP traffic and then declare an interface OOS or Out Of Service. This involves turning the firewall for the PPP port on and making sure the correct firewall rules are in place. For example:

Pass out break end on PPP 1 proto TCP from addr-ppp 1 to any flags S!A inspect-state oos 60 t=10 c=5 d=10

This rule allows packets out, but it monitors the state of the TCP connections. If a TCP connection is not made, the interface is declared OOS for 60 seconds. It has 10 seconds to find a connection, has 5 connection attempts, and if after 10 connection attempts it still fails, the interface will be rebooted. In essence, you'll be turning the interface off and back on.

You'll want to follow that up with a second rule just allowing the rest of the traffic through like:

pass break end.

If you put these two lines in a file called fw.txt, upload it to the router and then turn the firewall on for PPP 1, you'll have the solution to your problem. If you like, you can adjust the C and D values down to 1 or 2 to cause them to reboot quickly.

Q: What do the RSSI Codes mean that appear in the Event log?

A: These are messages from the Siemens MC45 GPRS module, and are quite normal.

URC stands for Unsolicited Result Codes - these are mostly just informative messages generated by the module, and occur whenever the status of something changes in the module. The most common status change is when the signal quality changes (rssi = received signal strength indication). The values are in the range 0 .. 5, where:

0 = signal strength <= -112 dBm
1-4 = signal strength in 15 dBm steps
5 = signal strength >= -51 dBm

This would look like the following in the Event log:

13:13:06, 03 Jul 2007,GPRS URC CIEV: signal,0
13:13:03, 03 Jul 2007,GPRS URC CIEV: signal,3
13:07:21, 03 Jul 2007,GPRS URC CIEV: signal,0

ISDN    

Q: I keep seeing ISDN events in the trace F3->F7 what does this mean?

A: These are layer 1 status messages from the BRI interface, where F7 is the final working state of the line, see I.430 for more details. You would typically see this when connecting in your ISDN line, if you see F8 messages (loss of framing) then this can indicate a problem with the line.

Q: When trying to make an ISDN call it fails with 'no cct' in the trace.

A: 'no cct' means no circuit and usually indicates that both 'B' Channels on the BRI line are in use, if you share your channels with analogue phones (e.g. BT Highway) then each phone call will utilise a 'B' Channel.

Q: What do the different layer 1 state definitions mean?

A: The following codes will be displayed in the Sarian's even log when using ISDN:

F1 - Inactive
In this inactive (powered-off) state, the terminal equipment (TE)1 is not transmitting and can not detect the presence of any input signals.

F2 - Sensing
This state is entered after the TE has been powered on but has not determined the type of signal (if any) that the TE is receiving. When in this state, a TE may go into a low power consumption mode.

F3 - Deactivated
This is the deactivated state of the physical protocol. Neither the network termination (NT)2 nor the TE is transmitting. When in this state, a TE may go to a low power consumption mode.

F4 - Awaiting Signal
When the TE wishes to initiate activation, it sends an Activation signal to the NT and awaits a response.

F5 - Identifying Input
At first receipt of any signal from the NT, the TE stops sending Activation signals and awaits the activation signal or synchronized frame from the NT.

F6 - Synchronized
When the TE has received an activation signal from the NT, it responds with a synchronized frame and is awaiting a synchronized frame from the NT.

F7 - Activated
This is the normal active state, with the protocol activated in both directions. Both the NT and the TE are transmitting normal frames. State F7 is the only state where B-channel and D-channel contain operational data.

F8 - Lost Framing
This is the condition when the TE has lost frame synchronization and is awaiting re-synchronization.


Wireless

Q: What are the International APN's (Access Point Name) for wireless operators?

A: Please click on the attached excel document: Download International APN List



Q: What do the signal indicators mean on my Sarian?

A:The signal strength is shown in “negative dB”, which means that the stronger the signal, the lower the number. As a guide -51dB would be a very strong signal, only normally obtained very close to a cell site. -115dB represents no signal. If your unit reports -115dB try reorienting the antenna or consider adding an external antenna. On units equipped with GPRS modules, there are three LEDs on the front panel that will indicate the strength of the signal, as shown in the table below. The minimum recommended strength indication is 2 LEDs. If you have no or 1 LEDs lit, it is recommended that you fit an external antenna to the unit.

LEDs Lit Signal Strength
None Under -113 dBm (effectively no signal)
1 -112 dBm to -87 dBm (weak signal)
2 -86 dBm to -71 dBm (medium strength signal)
3 -70 dBm to -51 dBm (strong signal)

Q: Can I choose which network technology my wireless router uses?

A: A HSDPA/3G unit can be configured to specifically connect to the desired Radio access technology:

The following initialisation string may be used to control the radio access technology on the a router:

What you need to do is connect to the Sarian via the web interface and navigate to the following location,

Configure-> GPRS Module->SIM 1

Use the first available blank initialisation string and enter the following

NOVATEL only
$NWRAT=n,2

Where n is:
0 for automatic
1 for GSM only (GSM = GPRS / EDGE)
2 for WCDMA only (WCDMA = 3G / HSDPA)

OPTION only
_OPSYS=n,2

Where n is:
0 for GSM only (GSM = GPRS / EDGE)
1 for WCDMA only (WCDMA = 3G / HSDPA)
5 for automatic

BOTH MODULES, continue here:
Save the changes and drop your PPP instance to initialise.
Sometimes the module requires a power cycle to initialise.
When reverting to automatic selection it is not enough to remove the initialisation string you must specify the correct number for automatic.

Please note that if you specify the chosen network technology and for whatever reason that technology is not avaialable you will be left without any service at all.

Q: How fast are today's wirless networks?

A: Please see the table below for details

  GPRS EDGE 3G HSDPA 3.6 HSDPA 7.2 HSUPA

Theoretical Max Upload Data rate kb/s

42.8 118.4 64 384 384 1.8Mb/s
Real Life Experience Data rate kb/s 10-20 80-100 50-60 200-300 200-300  
             

Theoretical Max Download Data rate kb/s

85.6 177.6 384 3.6Mb/s 7.2Mb/s 7.2Mb/s

Real Life Experience Data rate kb/s

30-40 130-160

180-230

600-900    

PPP

[back to top]

Q: What Serial Port Settings should I have on my PC?

A: When making a serial connection from the Sarian to a PC or laptop, this can be done using a terminal emulator program such as Hyperterminal or Teraterm. Connect to the serial port using a straight through serial cable.

The following settings need to be made:

Port - Set this to match the PC port that the Sarian is connected to (eg COM2)
Baud rate - 115200
Data - 8 Bit
Parity - None
Stop - 1 bit
Flow control - None

Firewall

[back to top]

Q: I have enabled my firewall but FTP traffic is getting blocked even thought there are rules for allowing FTP-CNTL and FTP-DATA through
Q: How do I NAT (Network Addres Translate) the source and destination of a packet?
Q: What ports do i need to open on the firewall to allow IPSec tunnels

Q: I have enabled my firewall but FTP traffic is getting blocked even thought there are rules for allowing FTP-CNTL and FTP-DATA through.

A: If you are using NAT then the Sarian will need to change the FTP-CNTL data going through it, this can be turned on using the firewall rule pass out proto ftp from any to any inspect-state

Q: How do I NAT (Network Addres Translate) the source and destination of a packet?

A: Both of the laptops need to be able to talk to each other, however they have no routes pointing at the Sarian.

The Sarian uses the following setup:

Use either Port Isolate mode or use the Group option to place Eth 1 in another Hub Group.

Eth 0 & 1:
Firewall turned on, NAT is off.

Firewall config:

pass in break end on eth 0 from 192.168.0.5 to addr-eth 0 -> addr-eth 1 to 192.168.20.5
pass out break end on eth 0

pass in break end on eth 1 from 192.168.20.5 to addr-eth 1 -> addr-eth 0 to 192.168.0.5
pass out break end on eth 1

Firewall Diagram

Q: What ports do i need to open on the firewall to allow IPSec tunnels

A: To allow IP Sec traffic through a firewall you will need to ensure the following ports / protocols are allowed.

IKE - TCP/UDP 500
IKE Float -TCP/UDP 4500
Compression if used - Protocols 4 & 108
ESP - Protocol 50
L2TP (windows Client VPN) - UDP 1701

Examples

pass break end proto udp from any port=1701 to any inspect-state

pass break end on PPP 1 proto udp from any to addr-ppp 1 port=500 inspect-state
pass break end on PPP 1 proto udp from any to addr-ppp 1 port=4500 inspect-state
pass in break end on eth 3 proto 50 from any to addr-eth 3 inspect-state
pass break end on eth 3 proto 4 from addr-eth 3 to any inspect-state
pass break end on eth 3 proto 108 from addr-eth 3 to any inspect-state

#This Last rule allows traffic over the Eroute, in the example the eroute number is 0
pass break end oneroute 0

Routing

[back to top]

Q: Can I create a raw TCP connection from the command line to a remote host?
Q: I would like to replace a modem-modem link with an IP connection - how can this be done?
Q: I would like to use a Sarian GPRS unit as a backup for my main internet router
Q: I am using Microsoft DDNS service but the Sarain does not register its IP address
Q: What are the default settings for the PPP instances on a Sarian?

Q: Can I create a raw TCP connection from the command line to a remote host?

A: Yes, See Application Note 2 for full details.

Q: I would like to replace a modem-modem link with an IP connection - how can this be done?

A: The Sarian supports many modes of operation to 'spoof' modem commands, if the target host is IP enabled you can use TCPDIAL or Adaptive-rate over IP for end-to-end emulation.

Q: I would like to use a Sarian GPRS unit as a backup for my main internet router

A: Sarian GPRS devices support the VRRP protocol for redundant backups as well as advanced probing features (called VRRP+) that allow the Sarian to detect the loss of even a remote link and cause the Sarian to take over routing.

Q: I am using Microsoft DDNS service but the Sarain does not register its IP address

A: The Sarian units can update to an RFC-compliant DDNS service, currently Microsoft's DDNS is proprietary

Q: What are the default settings for the PPP instances on a Sarian?

A: In the standard shipping config for most products PPP 0 is set to answer incoming PPP calls and PPP 1 is set to dial out on ISDN/GPRS. The MW3520 PPP 1 is pre-configured for ADSL, PPP 2 is pre-configured for ISDN, PPP 3 is pre-configured for GPRS and PPP 4 is configured for internal PSTN modem.

VPN

[back to top]

Q: I want to make an IPSEC tunnel but I have a dynamic client IP address.
Q: Can I create a VPN connection if I am getting an RFC1918 private address from my network provider?

Q: How can I make an IPSEC Main Mode/Aggressive mode connection when both my host and client get dynamic public addresses?
Q: Can I make a VPN connection from my Windows 2000/XP machine to a Sarian?
Q: Can the Sarian make a VPN tunnel to a Cisco PIX unit?
Q: Will the Sarian pass through my L2TP/PPTP VPN client data?
Q: Can the Sarian make a VPN tunnel to a Cisco IOS Router unit?
Q: Can the Sarian make a VPN tunnel to a Cisco 3000 Series VPN Concentrator?
Q: I have an MR2110 and want to create a VPN using 3DES/DES/AES these options do not appear on the menus.
Q: What ports do i need to open on the firewall to allow IPSec tunnels

Q: I want to make an IPSEC tunnel but I have a dynamic client IP address.

A: Use IKE Aggressive Mode on the client, See Application Note 10 for full details.

Q: Can I create a VPN connection if I am getting an RFC1918 private address from my network provider?

A: Yes, Sarian routers support IPsec Aggressive mode with version 3 NAT traversal, See Application Note 5 for full details

Q: How can I make an IPSEC Main Mode/Aggressive mode connection when both my host and client get dynamic public addresses?

A: Use the Dynamic DNS feature and your own or an internet based dynamic DNS service (e.g. dyndns.org, no-ip.org) and use the hostnames as the peer ID's for your connection.

Q: Can I make a VPN connection from my Windows 2000/XP machine to a Sarian?

A: Yes, See Application Note 11 for full details.

Q: Can the Sarian make a VPN tunnel to a Cisco PIX unit?

A: Yes, an application not is in production on this subject. In the meantime, please contact Sarian Support on +44 870 35 000 35 for more information

Q: Will the Sarian pass through my L2TP/PPTP VPN client data?

A: Yes, although for PPTP you will need to enable GRE protocol on your interface.

Q: Can the Sarian make a VPN tunnel to a Cisco IOS Router unit?

A: Yes, See Application Note 9 for full details.

Q: Can the Sarian make a VPN tunnel to a Cisco 3000 Series VPN Concentrator?

A: Yes, this has been tested on numerous occasions.

Q: I have an MR2110 and want to create a VPN using 3DES/DES/AES these options do not appear on the menus.

A: The encryption pack is a extra option on this model, please the contact sales for full details.

Q: What ports do i need to open on the firewall to allow IPSec tunnels

A: To allow IP Sec traffic through a firewall you will need to ensure the following ports / protocols are allowed.

IKE - TCP/UDP 500
IKE Float -TCP/UDP 4500
Compression if used - Protocols 4 & 108
ESP - Protocol 50
PPTP (windows Client VPN) - UDP 1701

Examples

pass break end proto udp from any port=1701 to any inspect-state

pass break end on PPP 1 proto udp from any to addr-ppp 1 port=500 inspect-state
pass break end on PPP 1 proto udp from any to addr-ppp 1 port=4500 inspect-state
pass in break end on eth 3 proto 50 from any to addr-eth 3 inspect-state
pass break end on eth 3 proto 4 from addr-eth 3 to any inspect-state
pass break end on eth 3 proto 108 from addr-eth 3 to any inspect-state

#This Last rule allows traffic over the Eroute, in the example the eroute number is 0
pass break end oneroute 0

X.25

[back to top]

Coming soon

Monitoring

[back to top]

Coming soon

Firmware

[back to top]

Q: Where can I download the latest version of Firmware for my Sarian?

A: Please click here to download the latest firmware version:

 

 

 

© Sarian Systems 2008. Terms & Conditions of Trading All Rights Reserved. Sitemap A Digi International Inc. Company.