netasq 3g modem - media.netasq.commedia.netasq.com/iberia/docs/naentno_3gmodem-procedure.pdf ·...

UTM Firewall – version 9

NETASQ 3G MODEM

CONNECTING AND CONFIGURING

Document version: 1.0 Reference: naentno_3Gmodem-procedure


Copyright NETASQ 2012

NN

ETASQ

3G M

OD

EM

2

Table of contents

1. REQUIREMENTS & PRESENTATION 3

2. INSTALLATION 4

3. FIREWALL CONFIGURATION 5

4. DEBUGGING AND MONITORING 11

APPENDIX 1: MODEM SPECIFICATIONS 14

APPENDIX 2: LIST OF APNS 15



NN

ETASQ

3G M

OD

EM

3

1. Requirements & presentation

Here are the requirements that need to be met before configuring your NETASQ 3G modem in a

3G network.

You will need the following devices:

A NETASQ 3G modem

A NETASQ UTM appliance, with firmware in at least V9.0.3 (V9.0.3.2 for the U30S model).

A SIM card with a valid subscription

Overview of the NETASQ 3G modem

The Status LEDs

The following table sets out explanations of LED statuses.

Green LED

Blinking Looking for network

Slow blinking 3G/UMTS connection with the service provider has been established

Fast blinking Transferring data via the 3G/UMTS connection

Steady 3G/UMTS connection with the service provider has been established, but no data transferred

Green + red LED

Slow blinking 2G connection with the service provider has been established

Fast blinking Transferring data via the 2G connection

Steady 2G connection with the service provider has been established, but no data transferred

Red LED Steady Error (no SIM card or 2G/3G connection not established)



NN

ETASQ

3G M

OD

EM

4

2. Installation

Before configuring your NETASQ firewall, you must follow the instructions below in order to

prepare the devices.

1. The NETASQ firewall must be up and running.

2. On the 3G modem, use a pointed object to

press the eject button next to the SIM card slot.

3. Insert the SIM card into its slot.

4. Slide the SIM card slot into the 3G modem.

5. Connect the 3G modem to your NETASQ

firewall using the USB cable.

6. The red LED will light up. This means that the

3G modem is ready to be configured.



NN

ETASQ

3G M

OD

EM

5

3. Firewall configuration

1. Log onto the web administration interface by entering the following address in your

browser: https://(firewall_address)/admin/

In the Configuration menu, select the Interfaces module.

Click on the “Add” menu, and select “Add a modem”, which will launch a wizard.

2. Name your 3G connection, and customize this interface by adding comments and

assigning a color (optional). Click on “Next”.



NN

ETASQ

3G M

OD

EM

6

1. Select "3G" in the "Modem type" drop-down list.

3. Configure your APN (Access point name). Ensure that you select the right name assigned

by your operator, as APN naming errors are the most frequently encountered.

You can find information on how to configure your APN at this address:

http://www.vysoo.com/apn.php or refer to APPENDIX 2: List of APNs

The best way to obtain this configuration is to ask your operator for information.

4. Enter the number to dial.

5. Configure the remote server’s default IP address. Enter the IP address of your choice, but

ensure that it is not already in use in another network that goes through the firewall.

6. Enter the PIN code of your SIM card.

NOTE For the name of the server, there is also the option of the NETASQ firewall

dynamically generating objects with the operator’s data.

You can automatically restrict the MSS value in order to avoid the fragmentation of

TCP traffic on the 3G connection.

http://www.vysoo.com/apn.php



NN

ETASQ

3G M

OD

EM

7

1. Click on "Next" to go on to the next step.

2. Enter the ID and password to access the 3G network.

3. For default gateways, specify whether you wish to:

Add the gateway obtained to the list of main gateways: select this option if you

wish to configure a link in load balancing mode.

Add the gateway obtained to the list of backup gateways: select this option if you

wish to configure a backup mode in the event the main gateway fails.

Not add the gateway obtained to any list: this option can be configured later.



NN

ETASQ

3G M

OD

EM

8

4. Click on “Next” to go on to the next step.

5. A summary of the configuration will appear.

6. Click on “Next” to go on to the next step.

7. You can now see your modem interface on the list of interfaces in the menu.

8. In Advanced properties, you can set the active status of the connection to “permanent” or “if

there is traffic (on demand)”. The second option means that the connection will be activated if

the NETASQ firewall detects traffic.



NN

ETASQ

3G M

OD

EM

9

9. Once everything is ready, the LED will become green and blink slowly. You will find more

information on the status of LEDs in Requirements & presentation chapter.



NN

ETASQ

3G M

OD

EM

10

10. Upon the creation of the 3G modem, the following objects are added on the firewall and can be used for configuring your NETASQ UTM appliance:

Firewall_3G_Connection_Name IP address of your 3G modem’s interface

Firewall_3G_Connection_Name_dns1 IP address of the main DNS server

Firewall_3G_Connection_Name_dns2 IP address of the secondary DNS server

Firewall_3G_Connection_Name_peer IP address of the gateway to access the 3G

network. This is usually this defaut gateway.

11. To enable and use the 3G connection as the main internet access for example, select Firewall_3G_Connection_Name_peer as the default gateways in the Routing module.

12. Lastly, to use the 3G connection as the main internet access for your internal networks, you can configure your NAT policy accordingly (Security policy > Filter and NAT module). In the NAT tab, select “Firewall_3G_Connection_Name” as the source object in “Traffic after translation”.



NN

ETASQ

3G M

OD

EM

11

4. Debugging and Monitoring

NETASQ REAL-TIME MONITOR, which is built into the NETASQ Administration Suite,

allows you to monitor and keep track of your appliance fleet.

1. In the Events module in NETASQ REAL-TIME MONITOR, you can monitor details of events that occurred on the 3G modem’s interface in the system context. This will also allow you to know the connection’s status (established or ended).

NOTE To view the “context” column, right-click on the column zone. Select the context entry in the Columns menu. You can then filter system alarms by right-clicking on this column and selecting the option Filter by this column.

2. In the Interfaces menu, you can view the 3G modem’s statistics.

3. In NETASQ REAL-TIME MONITOR, the hardware module indicates the quality of the signal and the name of the 3G access provider.



NN

ETASQ

3G M

OD

EM

12

NETASQ serverd command line interface (CLI)

1. In CLI mode (console or SSH), all the interfaces on a firewall can be listed using the “ifinfo” command. Your 3G interface will be listed by its name with the interface reference “ngx” (“x” being the

interface number of the 3G modem). In our example, it is “ng0”.

2. To check whether traffic is going through the 3G connection, you can listen on this interface

using the “tcpdump” command, as indicated below:

This is what a tcpdump command returns on a 3G interface:

If you wish to view this interface’s configuration, you can use the “tail” command (or the

commands cat, more, less, depending on your preference.)

The interface’s configuration is located in the file /usr/Firewall/ConfigFiles/network



NN

ETASQ

3G M

OD

EM

13

The following is an example:

[DIALUP0] # USB 3G MODEM CONNECTION

STATE=1

REQUESTDNS=1

DIALAUTHNAME=ORANGE

DIALAUTHKEY=ORANGE

DIALMODE=DDIAL

DIALTYPE=GPRS

DIALPHONE="*99#"

DIALAPN=ORANGE-MIB

DIALSIMPIN=0000

DIALDEFPEER=10.10.10.10

NAME=3G_MODEM

COLOR=FF0000



NN

ETASQ

3G M

OD

EM

14

APPENDIX 1: Modem Specifications

NETASQ 3G-MODEM (NA-EXT-3GM)

Frequencies

EDGE/GPRS/GSM Quad-band 850/900/1800/1900MHz

HSDPA/UMTS Tri-band 850/1900/2100 MHz

Access/Standards

HSUPA 3GPP R6, up to 5.76Mbps(max) UL, Category 4

HSDPA 3GPP R5, up to 7.2 Mbps(max) DL, Category 8

WCDMA(UMTS) Up to 384 Kbps DL and UL

EDGE(EGPRS) 3GPP Release4, class 10, up to 236.8Kbps DL and 118.4Kbps UL

GPRS/GSM Up to 85,6 Kbps DL and 42,8 Kbps UL

SIM Interface

Standard 6 PIN interface

USB Interface

USB 2.0

Power Supply

5Vdc by USB interface

Dimensions

71(D)×49(W)×20(H)mm

Weight

Hardware 50g Enhanced antenna 55g

Operational Temperature

-20 to +60°C

Certifications

CE, FCC, ROHS

ANTENNA

Interface

SMA

Frequency range

800-2800 (MHz)



NN

ETASQ

3G M

OD

EM

15

APPENDIX 2: List of APNs

To obtain the list of APNs, go to the link http://www.vysoo.com/apn.php or look up the list below.

The best solution is to ask your operator for information.

Argentina

Operator Service APN Username Password CTI internet.ctimovil.com.ar [blank] [blank]

Personal gprs.personal.com [mobile number] adgj

Australia

Operator Service APN Username Password

Optus internet [blank] [blank] Telstra GPRS telstra.internet [blank] [blank] CDMA X qncuser ssqnc CDMA 1X X [email protected] telstra Three 3netaccess a a Vodafone vfinternet.au [blank] [blank]

Austria


Drei drei.at [blank] [blank] Max Online Metro gprsmetro GPRS [blank] T-Mobile A (Max Online) gprsinternet GPRS [blank] T-Mobile A (Max Online Business) business.gprsinternet GPRS [blank] Mobilkom A1 A1.net [email protected] [blank] OneNet web.one.at [user specific] [user specific] tele.ring web [email protected] web

Azerbaijan


Azercell internet [blank] [blank]

Belarus


Velcom web.velcom.by web web

Belgium


BASE (Orange) orangeinternet [blank] [blank] BASE-pro busint.base.be BusinessInternet busint Mobistar web.pro.be mobistar mobistar Proximus internet.proximus.be [blank] [blank]

Brasil


Claro claro.com.br claro claro Oi gprs.oi.com.br [blank] [blank] TIM tim.br tim tim

Bulgaria


GloBul internet.globul.gl globul [blank]

Canada


Microcell internet.fido.ca fido fido

Chile


Entel PCS imovil.entelpcs.cl entelpcs entelpcs Telefonica Movil web.tmovil.cl web web

Costa Rica

http://www.vysoo.com/apn.php



NN

ETASQ

3G M

OD

EM

16


IceRegular iceregular [blank] [blank]

Croatia


T-Mobile web.htgpr 38591 38591 VIPNET Start gprs0.vipnet.hr 38591 38591 VIPNET Pro gprs5.vipnet.hr 38591 38591 VIPNET 3G 3g.vip.hr 38591 38591

Czech Republic


Cesky Mobil (contract) internet [blank] [blank] Cesky Mobil (prepaid) cinternet [blank] [blank] Eurotel (contract) internet [blank] [blank] Eurotel Go gointernet [blank] [blank] Paegas Internet internet.click.cz [blank] [blank] Telefonica (contract) internet [blank] [blank] Telefonica (Go) gointernet [blank] [blank] T-Mobile internet.t-mobile.cz [blank] [blank] Vodafone (contract) internet [blank] [blank] Vodafore (pre-pay) ointernet [blank] [blank]

Denmark


3 [none] [blank] [blank] Orange DK web.orange.dk [blank] [blank] Sonofon [blank] [blank] [blank] TDC internet [blank] [blank]

Dominican Republic


Orange orangenet.com.do [blank] [blank]

Egypt


Click Vodafone internet.vodafone.net internet internet MobiNil mobinilweb [blank] [blank]

Estonia


EMT internet.emt.ee [blank] [blank] RLE internet [blank] [blank]

Finland


Dna internet [blank] [blank] Elisa internet rlnet internet Radiolinja internet rlnet internet Sonera internet [blank] [blank] Song internet.song.fi song@internet songnet

France


Bouygues ebouygtel.com [blank] [blank] @ privé a2bouygtel.com [blank] [blank] @ publique fipbouygtel.com [blank] [blank] only VPN vpnbouygtel.com [blank] [blank] Bouygues (B2Bouygtel) pro b2bouygtel.com [blank] [blank] Orange orange.fr orange orange orange.ie orange orange internet-entreprise orange orange Orange MIB orange-mib mportail mib SFR websfr [blank] [blank] EEEPC slsfr

Germany



NN

ETASQ

3G M

OD

EM

17


E-Plus internet.eplus.de eplus gprs O2 (GPRS) internet [blank] [blank] postpaid internet [blank] [blank] prepaid pinternet.interkom.de [blank] [blank] (3G) surfo2 [blank] [blank] T-Mobile internet.t-d1.de td1 gprs Vodafone web.vodafone.de [any] [any] prepaid event.vodafone.de [blank] [blank]

Ghana


Areeba internet.spacefon.com [blank] [blank]

Greece


Cosmote internet [blank] [blank] Telestet gnet.b-online.gr your phone number 24680 TIM gint.b-online.gr web web Vodafone GR internet.vodafone.gr [blank] [blank]

Hungary


Pannon (contract) net [blank] [blank] Pannon (flat rate) netx [blank] [blank] Pannon (compressed) snet [blank] [blank] Vodafone (contract, compressed) internet.vodafone.net [blank] [blank] Vodafone (contract, uncompressed) standardnet.vodafone.net [blank] [blank] Vodafone (pre-pay, compressed) vitamax.internet.vodafone.net [blank] [blank] Vodafone (pre-pay, uncompressed) vitamax.snet.vodafone.net [blank] [blank] Westel (contract) internet [user specific] [user specific]

India


AirTel airtelgprs.com [blank] [blank] BPL bplgprs.com bplmobile [blank] Idea Cellular internet [blank] [blank] MTNL Mumbai gprsmtnlmum mtnl mtnl123 Orange portalnmms [blank] [blank]

Ireland


O2 (contract) open.internet gprs gprs O2 (prepaid) pp.internet gprs gprs Vodafone (contract) isp.vodafone.ie vodafone vodafone Vodafone (pre-pay) live.codafone.com vodafone vodafone

Island


Orange internet [blank] [blank]

Israel


Cellcom internetg [blank] [blank] MTC-Vodafone apn01 [blank] [blank] Orange internet [blank] [blank]

Italy


Blu (Contratto) INTERNET [blank] [blank] Blu (Prepagata) PINTERNET [blank] [blank] H3G tre.it [blank] [blank] Vodafone (Omnitel) web.omnitel.it [blank] [blank] TIM ibox.tim.it [blank] [blank] Wind internet.wind [blank] [blank]

Kazakhstan



NN

ETASQ

3G M

OD

EM

18


Beeline internet.beeline.kz internet.beeline [blank]

Latvia


LMT internet.lmt.lv [blank] [blank] Tele2 internet.tele2.lv gprs internet

Lebanon


Cellis FTML internet.ftml.com.lb plugged plugged

Lithuania


Bite GSM banga [blank] [blank] Omnitel (contract) gprs.omnitel.net [blank] [blank] Omnitel (no contract) gprs.startas.lt omni omni

Luxembourg


LUXGSM web.pt.lu [blank] [blank] Tango internet tango tango HSPA tango tango VOXmobile vox.lu [blank] [blank]

Malta


Go Mobile (contract) gosurfing [blank] [blank] Go Mobile (pre.pay) rtgsurfing [blank] [blank]

Mexico


Telcel internet.itelcel.com webgprs webgprs2002

Moldavia


Moldcell internet gprs gprs

Netherlands


KPN Mobile internet KPN gprs O2 internet [blank] [blank] Telfort internet telfortnl password T-Mobile (Ben) acitve internet-act [blank] [blank] T-Mobile internet [blank] [blank] Vodafone normal web.vodafone.nl vodafone vodafone live live.vodafone.com vodafone vodafone business office.vodafone.nl vodafone vodafone

New Zealand


Vodafone www.vodafone.net.nz [blank] [blank]

Nigeria


Globacom gprs wap [blank]

Norway


Telenor Mobil internet model name 1111 Netcom internet.netcom.no [blank] [blank]

Pakistan


Ufone ufone.internet ufone ufone



NN

ETASQ

3G M

OD

EM

19

Panama


Cablw & Wireless apn01.cwpanama.com.pa xxx xxx

Peru


Claro (TIM) tim.pe tim tulibertad

Philippines


Globe Telecoms internet.globe.com.ph globe globe Smart internet witsductoor banonoy Sun Cellular minternet [blank] [blank]

Poland


ERA erainternet erainternet erainternet Heyah heyah.pl heyah heyah Idea www.idea.pl idea idea Orange internet internet internet Polkomtel www.plusgsm.pl [blank] [blank]

Portugal


Optimus internet [blank] [blank] TMN internet [blank] [blank] Vodafone PT internet.vodafone.pt [blank] [blank]

Romania


Connex (Vodafone) internet.connex.ro internet.connex.ro connex Orange internet [blank] [blank]

Russia


BeeLine internet.beeline.ru beeline beeline Megafon (dv) internet.dv [blank] [blank] Megafon (kvk) internet.kvk [blank] [blank] Megafon (ltmsk) internet.ltmsk [blank] [blank] Megafon (mc) internet.mc [blank] [blank] Megafon (NWGSM) internet.nw [blank] [blank] Megafon (Siberia) internet.sib [blank] [blank] Megafon (UGSM) internet.ugsm [blank] [blank] Megafon (usi) internet.usi.ru [blank] [blank] Megafon (Volga) internet.volga [blank] [blank] Motiv (uses BeeLine) internet.beeline.ru beeline beeline MTS internet.mts.ru mts mts NCC internet ncc [supplied] NTC internet.ntc [blank] [blank] PrimTel internet.primtel.ru [blank] [blank]

Saint Lucia


Cable & Wireless internet [blank] [blank]

Serbia-Montenegro


Mobtel Srbija internet mobtel gprs Telekom Srbija gprsinternet mts 064

Slovakia


Eurotel internet [blank] [blank] Globtel internet [blank] [blank] Orange internet [blank] [blank]

Slovenia



NN

ETASQ

3G M

OD

EM

20


Mobitel (Internet) internet mobitel internet Mobitel (Internet Pro) internetpro mobitel internet Simobil internet.si.mobil [blank] [blank]

South Africa


Cell-C internet [blank] [blank] MTN internet [blank] [blank] Vodacom internet [blank] [blank]

Spain


Amena internet CLIENTE AMENA Telefonica (Movistar) movistar.es movistar movistar Vodafone (Airtel) airtelnet.es vodafone vodafone

Sweden


Tele2, Comviq GPRS isplnk1.swip.net gprs internet 3G internet.tele2.se [blank] [blank] Telia online.telia.se [blank] [blank] Tre (3G) data.tre.se void void Vodafone (GPRS) internet.vodafone.net [blank] [blank] Vodafone (3G) Services.vodafone.net [blank] [blank]

Switzerland


Orange CH internet [blank] [blank] Sunrise internet internet internet Swisscom gprs.swisscom.ch [blank] [blank]

Turkey


Aycell aycell [blank] [blank] Telsim telsim telsim telsim Turkcell internet gprs gprs

UAE


Etisalat mnet mnet mnet

UK


3 wireless Web three.co.uk [blank] [blank] Jersey Telecom pepper abc abc O2 (contract) Postpaid mobile.o2.co.uk web password O2 (contract, faster) mobile.o2.co.uk faster password O2 UK (pre-pay) payandgo.o2.co.uk payandgo payandgo Orange (pay monthly) orangeinternet user pass Orange (Pay and Go) orangewap Multimedia Orange T-Mobile general.t-mobile.uk user pass Virgin Mobile goto.virginmobile.com user [blank] Vodafone Contract internet web web Prepaid pp.internet web web

Ukraine


Djuice www.djuice.com.ua igprs igprs Jeans www.jeans.ua [blank] [blank] Kyivstar www.kyivstar.ua igprs internet Mobi-GSM internet.urs [blank] [blank]

Uruguay


ANCEL gprs.ancel [blank] [blank]



NN

ETASQ

3G M

OD

EM

21

USA


Cingular isp.cingular [email protected] CINGULAR1 T-Mobile Internet internet2.voicestream.com [blank] [blank]

Uzbekistan


Uzdunrobita net.urd.uz user pass

Venezuela


Digitel TIM gprsweb.digitel.ve [blank] [blank]

[email protected]

netasq 3g modem - media.netasq.commedia.netasq.com/iberia/docs/naentno_3gmodem-procedure.pdf ·...

Documents