1. VPN Setup For Multiple OnCell G3150-HSDPA to One EDR-G903

2. Setup Diagram Get More Than ONE Public IP and EDR-G903!
/24
MASK:
Default Gateway:
Floating Public/Private IP
OnCell G31X0 Series/OnCell 5000 Series
Get More Than ONE Public IP and EDR-G903!
/24
MASK:
Default Gateway:
EDR-G903
Static Public IP
/24
MASK:
Default Gateway:
Floating Public/Private IP
OnCell G31X0 Series/OnCell 5000 Series
What Can You Do With More Than 128 OnCells or Need Load Balance?
Confidential

3. System Requirments OnCell G3150_V2 OnCell G3150-HSDPA EDR-G903
FW: ocg3100_V2_2.3_ rom
SIM card with Public/Private Floating IP
OnCell G3150-HSDPA
FW: ocg3100-hsdpa_1.4_Build_ rom
EDR-G903
FW: EDR_G903_V2.1.rom
WAN is connected to a Static Public IP 3
Confidential
Confidential

4. OnCell G3150_V2/G3150-HSDPA Reset to factory default
IP1: Submask:
IP2: Submask:
Insert SIM and configure the PIN and APN
Enable the system log
Set system time correctly
Setup VPN (See the following page) 4
Confidential
Confidential

5. OnCell G3150-HSDPA

6. OnCell G3150-HSDPA (Firmware Ver.)

7. OnCell G3150-HSDPA (IP)

8. OnCell G3150-HSDPA (CellularSettings)

9. OnCell G3150-HSDPA (VPN Settings-1)

10. OnCell G3150-HSDPA (VPN Settings-2)

11. OnCell G3150-HSDPA (System Log Settings)

12. Repeat Slide 9-14 To Configure Other OnCell G3150

13. EDR-G903 Up to FWR_DEVICE_EDR_G903_V2.2.4_Build_12061815.rom
Reset to factory default
IP: Submask:
Set WAN with a Static IP
Make sure firewall is not blocking anything
Untick the “Enable the accessible IP list” option to allow all IP connections
Under VPN > IPSec > Global Setting, Enable “All IPSec Connection”
Setup VPN (See the following page)
Please make sure “NAT” enable or disable depend on your requirement. 13
Confidential
Confidential

14. EDR-G903 (Firmware Ver.)
FWR_DEVICE_EDR_G903_V2.2.4_Build_ rom

15. EDR-G903 (LAN IP)

16. EDR-G903 (WAN IP)

17. EDR-G903 (VPN-IPSEC-Global Setting)

18. EDR-G903 (VPN-IPSEC Setting-1)

19. EDR-G903 (VPN-IPSEC Setting-2)

20. Once both sides are configured
To be able to communicate between two laptops, make sure both laptops’ network interfaces have their “Default Gateway” configured correctly (OnCell or EDR-G903).
Make sure there is only one Default Gateway on each laptop (this might happen if there are multiple network cards).
Once everything is ready, both laptops should be able to ping each other. 20
Confidential
Confidential

21. OnCell G3150-HSDPA-1 (System Log)
VPN Connection works

22. OnCell G3150-HSDPA-2 (System Log)
VPN Connection works

23. EDR-G903 (IPSEC Status)

24. Ping Device on EDR-G903 From Both Laptops Connected to OnCell G3150-HSDPA

25. First G3150

26. Second G3150

27. Troubleshooting
In the current design, EDR-G903 is acting as the responder (server) and OnCell is acting as the initiator (client).
EDR-G903
It has a public IP and you can ping it from the OnCell Device
If it is behind a firewall, make sure port UDP:500 and UDP:4500 (if NAT-T is enabled) are not blocked
OnCell
If OnCell is behind a firewall, make sure port UDP:500 and UDP:4500 (if NAT-T is enabled) are not blocked
Make sure the above two ports are not blocked by the SIM card Operator
If VPN tunnel is not established after your configuration
Enable OnCell System Log and check which phase it failed on
Double check the failed phase
Capture Wireshark packets from the EDR-G903
Export configuration files from both EDR-G903 and OnCell
Send Moxa TS the capture Wireshark log, configuration files, system log 27
Confidential