Page 91 / 132 Scroll up to view Page 86 - 90
CRADLEPOINT
MBR1200 | USER MANUAL Firmware ver. 1.6.12
© 2010
CRADLEPOINT, INC.
PLEASE VISIT
HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/
FOR MORE HELP AND RESOURCES
PAGE 89
7.4 Firmware
Use the Firmware Upgrade sub-menu to update your router to the latest firmware to
improve functionality and performance. To check for the latest firmware, click the
Check Online Now
button. If you would like to be notified when new firmware is
released, place a check-mark in the box next to
Email Notification of Newer
Firmware Version
. NOTE: You must enter a destination email address in the
Tools
E-mail
submenu in order to receive email notifications of firmware updates.
7.4.1
Firmware Information
This section displays the Current Firmware Version and the Latest Firmware
Version. To check for the latest version, click the
Check Online Now for Latest
Firmware Version
button. To verify the latest firmware version, the MBR1200
checks the Internet.
7.4.2
Manually Upgrade Firmware
Upload Firmware.
To update the firmware, follow these steps:
1. Click the
Browse
button to locate the update file on your computer.
2.
Once you have found the file to be used, click the
Upload
button to start
the firmware update process.
3.
Wait for the router to reboot.
4. Confirm updated firmware revision on the
Status → Device Info
submenu.
7.4.3
Manually Upgrade WIMAX Modem Driver File
Upload WiMAX Modem Driver File. To update the driver follow these steps:
1. Click the
Browse
button to locate the update file on your computer.
2.
Once you have found the file to be used, click the
Upload
button to start the
driver update process.
3.
Wait for the modem to reboot.
4.
Confirm updated firmware revision on the
Tools
Firmware
submenu.
When you are done editing the settings, you must click the
Save Settings
button at the top of the page to make the changes effective and
permanent.
(continued)
Page 92 / 132
CRADLEPOINT
MBR1200 | USER MANUAL Firmware ver. 1.6.12
© 2010
CRADLEPOINT, INC.
PLEASE VISIT
HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/
FOR MORE HELP AND RESOURCES
PAGE 90
7.4.4
Firmware Upgrade Notification Options
Automatically Check Online for Latest Firmware Version.
When this option is
enabled, your router will check online periodically to see if there is a newer version of firmware available. When new firmware is available, you will
see an additional button that initiates a one button update. Simply click the button to download and update the router in one click.
Email Notification of Newer Firmware Version.
When a newer version of firmware is available, a notice will be set to the email address listed
under the
Tools →
Email
sub-menu.
7.4.5
Firmware Update Notes
When a new firmware update file is loaded into the router, the following checks are made to insure that the new file is correct.
1.
Before the new firmware update is loaded into its permanent location (the NVRAM), it is first downloaded into a temporary (RAM) area for
checking.
2.
The downloaded file is first checked against a checksum to insure that the entire file has been downloaded and no data errors have
occurred.
3.
Each firmware file is encoded with a special product identification, which must match the current code in the router. If the two identifiers
match the update is allowed to proceed. If either of these checks fail, the firmware update file is rejected and a failure message given to
the user.
4.
After the new firmware file passes both of these checks, the code is written to the permanent location (NVRAM). Power to the unit must be
maintained during this critical step; do not turn off unit. As the router writes the new code into the permanent location (NVRAM), the user is
presented with a screen on the browser which counts down for 60 seconds. After the 60-second countdown, the unit automatically reboots
and reinitializes.
Page 93 / 132
CRADLEPOINT
MBR1200 | USER MANUAL Firmware ver. 1.6.12
© 2010
CRADLEPOINT, INC.
PLEASE VISIT
HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/
FOR MORE HELP AND RESOURCES
PAGE 91
7.4.6
Firmware Update via the USB
The MBR1200 supports software upgrades via the USB port. A USB storage device (thumb drive) is preloaded with the new software .bin file.
Requirements:
CradlePoint MBR1200 Binary firmware file (i.e. u_mbr1200_2010_03_23.bin) From:
4G Modem Binary firmware file (i.e. u_ modem _5_2_206.bin) From:
CradlePoint MBR1200
USB “Thumb drive” mass storage device formatted FAT or FAT32.
Router Firmware Update
USB Procedure:
Remove the date code from the binary file. Example: u_mbr1200_2010_01_22.bin to
u_mbr1200.bin
.
Copy the u_mbr1200.bin file to the USB Thumb Drive.
This must be in the root not in a folder.
Power on a MBR1200 and wait for the WLAN and POWER lights to go solid green.
Plug-in the USB Thumb Drive into the USB port on the MBR1200
The EC light will come on and blink while it is reading the binary file off the USB Thumb Drive
When the EC light goes solid for 3 seconds or more, pull the USB thumb drive.
At this point, the router will read the file, error check it and will load it.
The router will reboot itself and will be running the new firmware
NOTE: If the file is corrupt, the MBR1200 will reboot and will not load the new firmware.
It is recommend that when you are doing these en
mass, the first few are manually checked by logging into the router with a computer and going to http://192.168.0.1, login with the default
password, and then check the “Status” tab which will show the current router firmware version. Th
e default password is the last 6 character of
the MAC address, which is located on a sticker on the bottom.
Modem File Update
USB Procedure:
Remove the date code from the binary file. Example: u_modem_2009_11_16 to
u_ modem.bin
.
Copy the u_modem.bin file to the USB Thumb Drive.
This must be in the root not in a folder.
Power on a MBR1200 and wait for the WLAN and POWER lights to go solid green.
Plug-in the USB Thumb Drive into the USB port on the MBR1200
The EC light will come on and blink while it is reading the binary file off the USB Thumb Drive
When the EC light goes solid for 3 seconds or more, pull the USB thumb drive.
At this point, the router will read the file, error check it and will load it.
The router will reboot itself and will be running the new firmware
NOTE: If the file is corrupt, the MBR1200 will reboot and will not load the modem file.
It is recommend that when you are doing these en
mass, the first few are manually checked by logging into the router with a computer and going to http://192.168.0.1, login with the default
password, and then check the “Status” tab which will show the current router firmware version. The default password is the la
st 6 character of
the MAC address, which is located on a sticker on the bottom.
Page 94 / 132
CRADLEPOINT
MBR1200 | USER MANUAL Firmware ver. 1.6.12
© 2010
CRADLEPOINT, INC.
PLEASE VISIT
HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/
FOR MORE HELP AND RESOURCES
PAGE 92
7.5 IPsec VPN
Use the IPsec sub-menus to set policies that are used to
create a secure connection to a private network or allow
others to connect in a very secure way.
7.5.1
Add IPsec Policy
In this section you can add and edit IPSec policies to connect
via private networks. Please note that the policies must
match between routers when creating a connection. In other
words, while the names of the policies can be different, the
Hash, Cipher, Group, Timeouts, Pre-shared keys, or manual
settings must correspond for a successful connection.
Name.
Add a name to identify the polity and distinguish one
policy from another.
VPN Tunnel.
Tunnel mode allows a remote network to
appear as though it is a part of the local network. All
machines behind the remote LAN will be visible to the local
network. Transport mode, enabled by un-checking the VPN
Tunnel
check
box,
creates
an
encrypted
connection
terminating
at
the
remote
network‟s
router.
Inbound
connections are then forwarded to the appropriate machine
on the remote LAN. Please note: Transport mode requires
the additional step of a configured port forward policy. Only
data sent and received across networks with an IPSec policy
will be encrypted for both Tunnel and Transport.
Log messages related to IPSec VPN can be found on the
Status
Logs
page. To reduce the number of log
messages generated by IPSec negotiations un-check the
Firewall & Security
checkbox in the
Log Options
section.
Remote Gateway.
While this can be the WAN IP of the
remote network it is recommended you use a dynamic DNS account host name. You can configure your DynDNS settings in the
Tools
Dynamic DNS
page. By using the remote router‟s dynamic DNS host name when configuring your IPSec p
olicy updates of the remote WAN IP
are compensated for while connecting to a VPN.
(continued)
Page 95 / 132
CRADLEPOINT
MBR1200 | USER MANUAL Firmware ver. 1.6.12
© 2010
CRADLEPOINT, INC.
PLEASE VISIT
HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/
FOR MORE HELP AND RESOURCES
PAGE 93
Remote Network.
This is the address of the remote LAN. The network IP
addresses of the local and remote network must not be the same. Set, for
example the local IP to 192.168.0.1 (default CradlePoint LAN IP) and the
remote network to 192.168.30.1. In this case the IP specified in your policy
for Remote Network should be 192.168.30.0. For CradlePoint routers, this IP
can be configured in the
Basic →
Network
page.
Remote Submask.
This is the corresponding subnet mask of the remote
network.
Local Network.
As with the Remote Network configuration description
above, this is the local network's IP address, which should be different from
the Remote Network's LAN IP address. If your local IP is 192.168.0.1 the
value specified in your policy for Local Network should be 192.168.0.0.
Local Submask.
This is the corresponding subnet mask of the local network.
Hash Algorithm.
The hash is used to compare, authenticate, and validate
that data across the VPN arrives in its intended form and to derive keys used
by IPSec. This section is used for both phase 1 and phase 2 of the IKE key
negotiation. While the default configuration is MD5, for increased security SHA algorithms are recommended.
Cipher Algorithm.
The cipher is used to encrypt messages used by IPsec. This selection is used for both Phase 1 and Phase 2 of the IKE key
negotiation. The default cipher is AES.
DH Group.
The DH (Diffie-Hellman) Group is a property of IKE. It is used to determine the length of prime numbers associated with key
generation. The strength of the key generated is partially determined by the strength of the DH Group. Group 5, for instance, has greater strength
than Group 2. Mismatched group settings between policies when creating a VPN will cause your connection to the remote network to fail.
Phase 1 Key Lifetime.
The lifetime of the generated keys of Phase 1 of the IPSec negotiation from IKE.
Phase 2 Key Lifetime.
The lifetime of the generated keys of Phase 2 of the IPSec negotiation from IKE.
Pre-Shared Key.
A secret password used to derive keys, which both parties will have to know.
Save Policy.
Adds a new policy to the IPSec Policy List. After adding the policy to the list you will need to save the settings at the top of this page
before the policy will take effect.
Clear Form.
While adding or updating a policy, the Clear Form button can be selected to reset the values to their default states.
Advanced.
Shows you a menu to configure advanced settings.
When you are done editing the settings, you must click the
Save Settings
button at the top of the page to make the changes effective and
permanent.
(continued)

Rate

3.5 / 5 based on 2 votes.

Popular Cradlepoint Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top