The rCell 300 is designed for a variety of industrial and IoT applications. Some of its intended uses include:

• Remote monitoring and control: This device is ideal for remote monitoring and control of equipment and systems in industries such as oil and gas, utilities, and agriculture. The rCell 300 allows for real-time data collection and management of remote locations.
• Smart cities and infrastructure: This device can be used in smart-city applications, including traffic management, environmental monitoring, and electric vehicle charging stations.
• Industrial automation: This device works with current industrial automation equipment (such as RTU) for remote data collection, fault notifications, control/manage field equipment.

The rCell 300 can be used in applications that require equipment to operate in harsh environments. For outdoor deployments, the rCell 300 must be installed in a waterproof enclosure.

Mail Log Tab

GRE Configuration Tab

A typical GRE Configuration page is illustrated here:

Add Tunnel Tab

To add a GRE tunnel, navigate to the Add Tunnel tab. Once all parameters have been configured, select Submit.

IPSec Configuration Tab

A typical IPSec Configuration tab is illustrated here:

Add Tunnel Tab

To add an IPSec tunnel, navigate to the Add Tunnel tab. Once all parameters have been configured, select Submit.

Configuration Parameters

Refer to the following table for information about each IPSec configuration parameter.

¹ For mPower 5.3 and higher, deprecated encryption and hash algorithms are not available for creating new tunnels. But old tunnels that were created in 5.2 or lower will retain the deprecated settings unless changed. Those deprecated settings include: 3DES, ANY, MD5, and SHA-1.

OpenVPN is an open-source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities.

To use OpenVPN, install an OpenVPN application along with an easy-rsa tool and configure OpenVPN on your computer. Then, generate the certificates for the OpenVPN server and client before configuring the device.

To configure OpenVPN client and server on this device the following files are required:

• CA PEM file or CA certificate (.crt)
• Diffie Hellman PEM file (.pem)
• Server Certificate to be used by the device endpoint (.crt)
• Server/Client Key to be used by the device endpoint (.key)

These settings do not function when performing an upgrade to mPower 5.3. The system provides a warning message during upgrade and replaces them with Default. The following TLS cipher suites are not supported: TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA and TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA. Also, the following hash algorithms are not supported: DSA, DSA-SHA, DSA-SHA1, DSA-SHA1-old, ECDSA-with-SHA1, RSA-SHA, RSA-SHA1-2, and SHA.

OpenVPN Configuration Tab

A typical OpenVPN Configuration page is illustrated here:

Add Tunnel Tab

To add a OpenVPN tunnel, navigate to the Add Tunnel tab. Once all parameters have been configured, select Submit.

Configuration 1: OpenVPN Tunnel with TLS Authorization Mode (Device only)

This first configuration establishes the OpenVPN Tunnel connection from a device client to a device server using TLS as Authorization Mode. This involves adding and configuring both OpenVPN Server and Client sides within the device UI.

To add an OpenVPN Server using TLS:

1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Select Add Tunnel.
3. Enter the Name.
4. Select the Type as SERVER from the dropdown.
5. You can also enter an optional Description.
6. Under OpenVPN Tunnel Configuration, enter the following fields (using TLS as Authorization Mode):
   1. Interface Type as TUN from the dropdown.
   2. Authorization Mode as TLS from the dropdown.
   3. Protocol as UDP.
   4. VPN Subnet.
   5. Port number.
   6. VPN Netmask.
   7. LZO Compression as ADAPTIVE from the dropdown.
   8. Hash Algorithm as DEFAULT.
   9. NCP (Negotiable Crypto Parameters) as DEFAULT.
   10. Min. TLS Version as 1.2.
   11. TLS Cipher Suite as DEFAULT.
   12. Enter the contents of the following files generated from the easy-rsa tool. You can copy and paste this content from the certificate files after opening from a text editor like Notepad (all required):
       • CA PEM (.crt)
       • Diffie Hellman PEM (.pem)
       • Server Certificate PEM (.crt)
       • Server Key PEM (.key)
       Note: Use the same CA PEM certificate and parameters as the server for the OpenVPN clients.
7. Remote Network Routes create a route from the server network to the client network. This allows the server to get access to the client’s network. In the OpenVPN Tunnel Network Routes, select Add:
   1. Enter the Remote Network Route (should be the client subnet). For example, if the client IP address is 192.168.3.1, enter 192.168.3.0.
   2. Enter the Remote Network Mask (usually 255.255.255.0).
   3. You may enter Gateway (optional).
   4. Select Add.
8. The system displays your recently-added Push Route with the client subnet (remote network route + mask).
9. Push Routes create a route from client’s network to the server’s network. This allows clients to get access to the server’s network. Under Push Routes:
   1. Select Client To Client box if you want this optional feature (this establishes a connection between multiple clients that are connected to the server).
   2. In the Push Network Route, select Add.
   3. In the dialog box, enter the Remote Network Route (same address as the server subnet above).
   4. Enter the Remote Network Mask (same as above).
   5. Optional: You may enter Gateway.
   6. Select Add.
      Note: If you use Static Key Authorization Mode, the Push Routes do not work.
10. The system displays your recently-added Push Route with the client subnet (remote network route + mask).
11. Select Preview to view the tunnel configuration.
12. Select Submit.
13. Select Save and Apply to save your changes

To add an OpenVPN Client using TLS:

1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Select Add Tunnel.
3. Enter the Name of the tunnel.
4. Select the Type as CLIENT from the dropdown.
5. Optional: Enter a Description.
6. Under OpenVPN Tunnel Configuration, enter the following fields (using TLS as Authorization Mode):
   1. Interface Type as TUN from the dropdown.
   2. Authorization Mode as TLS from the dropdown.
   3. Protocol as UDP.
   4. Remote Host (server public IP address).
   5. Remote Port number.
   6. LZO Compression as ADAPTIVE from the dropdown.
   7. Hash Algorithm as DEFAULT.
   8. NCP (Negotiable Crypto Parameters) as DEFAULT.
   9. Min. TLS Version as 1.2.
   10. TLS Cipher Suite as DEFAULT.
   11. Enter the contents of the following files generated from the easy-rsa tool. You can copy and paste this content from the certificate files after opening from a text editor like Notepad (all required):
       • CA PEM (.crt)
       • Client Certificate PEM (.crt)
       • Client Key PEM (.key)
7. If you use TLS as Authorization Mode, you do not need configure or add Remote Network Routes. The server adds the routes if the server's Push Routes are already configured. If you use Static Key as Authorization Mode, you must add and configure Remote Network Routes.
8. Select Preview to view the tunnel configuration.
9. Select Submit.
10. Select Save and Apply to save your changes.

Now the device client can access the device server subnet. You can ping the IP address of the device server subnet from the client console to test this.

Configuration 2: OpenVPN Tunnel with TLS Authorization Mode (Device and Connected PC)

This second configuration provides access between a device server and its subnet and device client and its subnet. An additional configuration is needed on the device server side. This also allows your PC to connect with the device server and ultimately to the device client through that server.

1. Configure the device server as shown under how to add an OpenVPN Server using TLS.
2. Open device console, go to /var/config/ovpnccd/openVPNServerName. Create the folder if not present in the device.
3. Create a file that has the client certificate name with the following information:
   1. iroute [Client_Subnet] [Mask]
   2. example -- echo “iroute 192.168.3.0 255.255.255.0” > mtrClient1
4. For each client, you must create a separate file in the folder /var/config/ovpnccd/yourserverName.
   Note: Make the file name the same as the Common Name value used to create the certificate.
5. Configure device client as shown under how to add an OpenVPN Client.

Once properly configured, you should have a connection between the device server and device client and their subnets. Your PC can also connect with the device server and thus the device client through that server.

Configuration 3: OpenVPN Tunnel with Static Key Authorization Mode (device server and client)

This third configuration establishes the OpenVPN Tunnel connection from a device client to a device server using Static Key as Authorization Mode. This involves adding and configuring both OpenVPN Server and Client sides within the device UI.

When using Static Key, the OpenVPN tunnel is created between only two end-points, the client and server. You cannot connect more than one client to the server in this mode. Remote Network Route must be specified in both configurations, client and server, in order to establish the connection between subnets.

To add an OpenVPN Server using Static Key:

1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Select Add Tunnel.
3. Enter the Name.
4. Select the Type as SERVER from the dropdown.
5. Optional: Enter a Description.
6. Enter the following fields (using STATIC KEY as Authorization Mode):
   1. Interface Type as TUN from the dropdown.
   2. Authorization Mode as STATIC KEY from the dropdown.
   3. Protocol as UDP.
   4. Local Address as DEFAULT.
   5. Port number.
   6. Remote Address as DEFAULT.
   7. LZO Compression as ADAPTIVE from the dropdown.
   8. Hash Algorithm as DEFAULT.
   9. NCP (Negotiable Crypto Parameters) as DEFAULT.
   10. Generate and enter the Static Key PEM (required). Both server and client must use the same static key. See example below:

       -----BEGIN OpenVPN Static key V1-----
                     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
       
       -----END OpenVPN Static key V1-----

7. Remote Network Routes create a route from the server network to the client network. This allows the server to get access to the client’s network. In the OpenVPN Tunnel Network Routes, select Add:
   1. Enter the Remote Network Route (should be the client subnet). For example, if the client IP address is 192.168.3.1, enter 192.168.3.0.
   2. Enter the Remote Network Mask (usually 255.255.255.0).
   3. Select Add.
8. The system displays your recently-added Remote Network Route with the client subnet (remote network route + mask).
   Note: Push Routes are not required with Static Key as Authorization Mode.
9. Select Preview to view the tunnel configuration.
10. Select Submit.
11. Select Save and Apply to save your changes.

To add an OpenVPN Client using Static Key:

1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Select Add Tunnel.
3. Enter the Name.
4. Select the Type as CLIENT from the dropdown.
5. Optional: Enter a Description.
6. Enter the following fields (using STATIC KEY as Authorization Mode):
   1. Interface Type as TUN from the dropdown.
   2. Authorization Mode as STATIC KEY from the dropdown.
   3. Protocol as UDP.
   4. Local Address as DEFAULT.
   5. Remote Host.
   6. Remote Address as DEFAULT.
   7. Remote Port number.
   8. LZO Compression as ADAPTIVE from the dropdown.
   9. Select the NCP (Negotiable Crypto Parameters) as DEFAULT from dropdown.
   10. Select the Hash Algorithm as DEFAULT from dropdown.
   11. Min. TLS Version as 1.2.
   12. TLS Cipher Suite as DEFAULT.
   13. Enter the Static Key PEM (required). Both server and client must use the same static key. See example below:

       -----BEGIN OpenVPN Static key V1-----
       
       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
       
       -----END OpenVPN Static key V1-----
       
       

7. Remote Network Routes create a route from the server network to the client network. This allows the server to get access to the client’s network. In the OpenVPN Tunnel Network Routes, select Add:
   1. Enter the Remote Network Route (should be the client subnet). For example, if the client IP address is 192.168.3.1, enter 192.168.3.0.
   2. Enter the Remote Network Mask (usually 255.255.255.0).
   3. Select Add.
8. The system displays your recently-added Remote Network Route with the client subnet (remote network route + mask).
   Note: Push Routes are not required with Static Key as Authorization Mode.
9. Select Preview to view the tunnel configuration.
10. Select Submit.
11. Select Save and Apply to save your changes.

Configuration 4: OpenVPN Tunnel with Static Key Authorization Mode and TCP

This fourth configuration establishes the OpenVPN Tunnel connection from a device client to a device server using Static Key as Authorization Mode and TCP protocol (instead of UDP for the third configuration). This involves adding and configuring both OpenVPN Server and Client sides within the device UI.

To add an OpenVPN Server using Static Key and TCP:

1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Select Add Tunnel.
3. Enter the Name.
4. Select the Type as SERVER from the dropdown.
5. Optional: Enter a Description.
6. Enter the following fields (using STATIC KEY as Authorization Mode):
   1. Interface Type as TUN from the dropdown.
   2. Authorization Mode as STATIC KEY from the dropdown.
   3. Protocol as TCP.
   4. Local Address as DEFAULT.
   5. Remote Host.
   6. Remote Address as DEFAULT.
   7. Remote Port number.
   8. Hash Algorithm as RSA-SHA1.
   9. LZO Compression as ADAPTIVE from the dropdown.
   10. NCP (Negotiable Crypto Parameters) as CAMELLIA-256-CBC.
   11. Min. TLS Version as NONE.
   12. TLS Cipher Suite as DEFAULT.
   13. Generate and enter the Static Key PEM (required). Both server and client must use the same static key. See example below:

       -----BEGIN OpenVPN Static key V1-----
       
       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
       
       -----END OpenVPN Static key V1-----
       
       

7. Select Next.
8. Remote Network Routes create a route from the server network to the client network. This allows the server to get access to the client’s network. In the OpenVPN Tunnel Network Routes, select Add:
   1. Enter the Remote Network Route (should be the client subnet). For example, if the client IP address is 192.168.3.1, enter 192.168.3.0.
   2. Enter the Remote Network Mask (usually 255.255.255.0).
   3. Select Add.
9. The system displays your recently-added Remote Network Route with the client subnet (remote network route + mask).
   Note: Push Routes are not required with Static Key as Authorization Mode.
10. Select Preview to view the tunnel configuration.
11. Select Submit.
12. Select Save and Apply to save your changes.

To add an OpenVPN Client using Static Key and TCP:

1. Go to Tunnels > OpenVPN Tunnels > OpenVPN Tunnel Configuration.
2. Select Add Tunnel.
3. Enter the Name.
4. Select the Type as CLIENT from the dropdown.
5. Optional: Enter a Description.
6. Enter the following fields (using STATIC KEY as Authorization Mode):
   1. Interface Type as TUN from the dropdown.
   2. Authorization Mode as STATIC KEY from the dropdown.
   3. Protocol as TCP.
   4. Local Address as DEFAULT.
   5. Remote Host.
   6. Remote Address as DEFAULT.
   7. Remote Port number.
   8. Hash Algorithm as RSA-SHA1.
   9. LZO Compression as ADAPTIVE from the dropdown.
   10. NCP (Negotiable Crypto Parameters) as CAMELLIA-256-CBC.
   11. Min. TLS Version as NONE.
   12. TLS Cipher Suite as DEFAULT.
   13. Generate and enter the Static Key PEM (required). Both server and client must use the same static key. See example below:

       -----BEGIN OpenVPN Static key V1-----
       
       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
       
       -----END OpenVPN Static key V1-----
       
       

7. Select Next.
8. Remote Network Routes create a route from the server network to the client network. This allows the server to get access to the client’s network. In the OpenVPN Tunnel Network Routes, select Add:
   1. Enter the Remote Network Route (should be the client subnet). For example, if the client IP address is 192.168.3.1, enter 192.168.3.0.
   2. Enter the Remote Network Mask (usually 255.255.255.0).
   3. Select Add.
9. The system displays your recently-added Remote Network Route with the client subnet (remote network route + mask).
   Note: Push Routes are not required with Static Key as Authorization Mode.
10. Select Preview to view the tunnel configuration.
11. Select Submit.
12. Select Save and Apply to save your changes.

SSH Key Management

SSH public keys are managed in this section of the Users page.

Public keys that have been added to a user's account are listed in this section as well.

Add a New Public Key

To create a new public key associated with a user account click Add Public Key as shown here:

Paste the key into the Key field and assign a Title to the key:

The system will not allow a public key to be added/created for a user if one has already been added.

View a Public Key

To view a public key, click on the icon associated with the key to be viewed.

Delete a Public Key

To delete a public key, click on the icon associated with the key to be deleted.