Introduction

Cisco’s IoT Operations Dashboard (IoT OD) provides cloud-based management for IoT routers, network devices, and more. Configuration of the managed devices is based on templates that are designed to be easy to use, without significant experience required with theCisco IOS command line enviorment that is traditionally used for configuration and management.

A set of eCVD templates (Cisco Validated Design) templates can be leveraged to configure IR1101 routers (network devices). The IR1101 series routers (network devices) have one integrated template that can fit the requirements for each network device as well as a specialized Roadways template for the Transportation industry. For more information and to download the templates, go to the eCVD repository.

These eCVD templates are designed, developed, and validated by Cisco to provide the most-used features. When added to the IoT OD, they provide a form-based user interface that enables you to get your IoT deployments up and running. You can also modify the eCVD templates to create more custom templates. IR1101 devices also support Dual LTE (2 SIM cards).

Note: The UPT variable changed from 1.20 to 1.21 and device properties have enhanced search capability.

Dual LTE functionality

IR1101 network device Dual LTE functionality provides a wider range of supported configuration options. The following two scenarios show dual LTE functionality.

See Dual LTE Support for more information on IR1101 devices.

Template functions

The tables and images shown below describe the settings used in the IR1101 eCVD template.

Feature Name Heading/Field Values Description
WAN Uplink

(Can provide up to 4 uplinks, depending on the configuration.)
IR1101 devices support dual LTE. Therefore, a device can accommodate:

* 2 modems and 1 SIM card
* 1 modem and 2 SIM cards
WAN Uplink 1 (2 modems)

Interface

Description

IP Address for IP SLA Test

Cellular Access Point Name (If Applicable)



Name of the WAN Uplink 1 Interface Alphanumeric field
Valid IP Address for Uplink 1
Name of the APN for Uplink 1
Enables or disables (“shutdown”) the selected WAN interface. At least one WAN interface must be enabled.

If the device has two modems (Dual LTE), WAN Uplink 1 is the primary connection. WAN Uplink 2, in enabled, provides a backup connection.
WAN Uplink 1 (1 modem 2 SIM cards)

Enable Second SIM (If Applicable)

Second Cellular Access Point Name (If Applicable)

Jitter

RTT (Round Trip Time)
Pull-down list: Name of the WAN Uplink 1 Interface Name of the second APN for Uplink 1

Numeric field in milliseconds (default 30ms)

Numeric field in milliseconds (default 500ms)
In devices with only one modem and two SIM cards, Uplink 1 serves as the primary and should be set to Cellular. The second SIM card is configured in the Enable Second SIM field.

Select Installed if there is a second SIM card.

The threshold, in ms, before the the SIM card switch is triggered.

Click Details below the field to show the constraints.

The threshold, in ms, before the the SIM card switch is triggered.
Click Details below the field to show the constraints.
WAN Uplink 2

Interface

Description
IP Address for IP SLA Test
Cellular Access Point Name (If Applicable)


Name of the WAN Uplink 2 Interface Alphanumeric field (240 character limit) Valid IP Address for Uplink 2 Name of the APN for Uplink 2
For dual LTE, one device with two modems, WAN Uplink 2 provides a backup connection (cellular or ethernet).
WAN Uplink 3

Interface

Description

IP Address for IP SLA Test

Cellular Access Point Name (If Applicable)



Name of the WAN Uplink 3 Interface Alphanumeric field (240 character limit) Valid IP Address for Uplink 3

Name of the APN for Uplink 3
Enables or disables (“shutdown”) the selected WAN interface. At least one WAN interface must be enabled.

Could be Ethernet Cellular 1 or Cellular 2

WAN Uplink with one device and two modems using WAN Uplink 1 and 2 (Cellular1 and Cellular2)

WAN Configuration two modems

WAN Uplink one device with one modem and two SIM cards installed

WAN Uplink SIM card

Feature Name Heading/Field Values Description
Device Settings The device settings interface allows you to set the domain and the time zone of the device.
Host
Local Domain Name
<string> (Default: Local) Name of the domain for the template.
Time Settings
Router Local Timezone (Drop-down)
UTC+12 ANAT
UTC+11 SBT
UTC+10 AEST
UTC+9 JST
UTC+8 CST
UTC+7 WIB
UTC+6 BST
UTC+5 UZT
UTC+4 GST
UTC+3 MSK
UTC+2 CEST
UTC+1 BST
UTC+0 GMT
UTC-1 CVT
UTC-2 WGST
UTC-3 ART
UTC-4 EDT
UTC-5 CDT
UTC-6 MST
UTC-7 PDT
UTC-8 AKDT
UTC-9 HDT
UTC-10 HST
UTC-11 NUT
UTC-12 AoE
Provides a drop-down list of all available timezones and their offset from GMT

Device Settings screen

Device Settings screen

Feature Name Field Values Description
Device Management This interface lists essential user information where the user, password, and privilege level is listed. There is also an Add User button the allows multiple users to manage a device.
User Name alphanumeric field Provides the username
User Password alphanumeric field with special characters Provides the user password
Privilege Level <string> Lists the role and privileges for the user on the gateway
Add User button button Adds a user to the list

Device Management Screen

Device Management screen

Feature Name Heading/Field Values Description
DHCP Dynamic Host Configuration Protocol

DHCP IP Address for VLAN

DHCP IP Address for VLAN1 Network

IP Address for IP SLA Test

Cellular Access Point Name (If Applicable)

<IP Address>
<IP Address> (For VLAN 1)

Valid IP Address for Uplink 1

Name of the APN for Uplink 1

<IP Address>
Provides the IP Address of the IP host in the IP network.
DHCP Exclude Range

DHCP exclude range start IP

DHCP exclude range end IP

<IP Address>

<IP Address>
Provides both start and end IP Addresses not to be used for assigning clients.
IP DHCP Helper Address

DHCP Helper IP Address

<IP Address>
Provides the IP address VLAN interface or a router Ethernet interface.

DCHP screen

DCHP screen

Feature Name Heading/Field Values Description
DNS/NTP DNS Settings

Primary LAN DNS IP Address
Secondary LAN DNS IP Address
<IP Address>


<IP Address>
Provides IP addresses for both primary and secondary DNS servers.
NTP Settings

Primary Network Time Server

Secondary Network Time Server

Name of the Primary NTS

Name of the Secondary NTS
Provides time for both primary and secondary NTP servers.

DNS/NTP screen

DNS/NTP screen

Feature Name Heading/Field Values Description
Ethernet Settings Shows the interface status of each Ethernet server in use.
Fast Ethernet 1-4

Interface Status

Description for Fast Ethernet 1
Enable/Disable

Name of the Ethernet 1 Fast Server

Short description of the Ethernet 1 Fast Server
Provides information on Ethernet server.

Ethernet Settings screen

Ethernet Settings screen

Feature Name Heading/Field Values Description
VPN Provides VPN information primary and backup headend, as well as WAN tunnel status (enabled or disabled)
Primary HeadEnd

HeadEnd IP Address

HeadEnd Pre-shared key


<IP Address>

Default: none
Creates a Site-to-Site FlexVPN (IPsec) tunnel.

VPN Headend IP Address

Pre-shared key for VPN authentication. The username will be @iotspdev.io by default.
Backup HeadEnd

Backup HeadEnd IP Address

Backup HeadEnd Pre-shared key

<IP Address>


Default: none
Provides a backup for a Site-to-Site FlexVPN (IPsec) tunnel.VPN

Backup HeadEnd IP Address

Backup for pre-shared key for VPN authentication.
Interfaces

Enable VPN Tunnel over Ethernet WAN

Enable VPN Tunnel over First Cellular WAN

Enable VPN Tunnel over Second Cellular WAN


Enabled, Disabled (Ethernet WAN (Disabled)

Enabled, Disabled (Default: First Cellular WAN (Disabled)

Enabled, Disabled (Default: Second Cellular WAN (Disabled)
Enables the selected WAN interface as a valid source interface for the VPN Tunnel.

Enables the selected Cellular WAN interface as a valid source interface for the VPN Tunnel.

Enables the second selected Cellular WAN interface as a valid source interface for the VPN Tunnel. (Functional only if First Cellular WAN is enabled).

VPN screen

VPN screen

Feature Name Heading/Field Values Description
Network Provides information on bandwidth speed, port, and static route.
QoS

Enter Typical Cellular Interface Bandwidth (in kbps)

Select Traffic Type

Enter Qos Priority
Enable/Disable (Default Disabled)

<integer>

Default: None

Available list:
* Broadcast TV,
* Live events,
* Video surveillance,
* Non-interactive data applications,
* Multimedia Collaboration applications,
* Video-On-Demand (VoD) streaming video
* Network Control Plane traffic
* Network operations, administration, and management traffic
* High-definition interactive video applications
* Signaling traffic that supports IP voice and video telephony
* Interactive data applications
* VoIP telephony traffic

Low, Med, Hi (Default: None)
Enable outbound QoS policy for Cellular interface(s).

The actual/typical observed upstream throughput of the cellular interface.

Select a traffic class to map to a QoS service level.
These traffic classes are based on the SRND model described here:
About Configuring Attribute-based Protocol Matching Using SRND.

Apply selected traffic class to a QoS priority group. QoS policies are based off reference configurations described in this document:
Verizon LTE Mobile Private Network Cisco Integrated Services Router
Post Forward Description

Protocol

Private IP



Local Port



Public Port





Description <string>

Protocol (TCP, UDP)

Private IP
Local Port <Integer 1-65535>
Public Port <Integer 1-65535>
Enable port forwarding rule for primary WAN interface (ethernet or cellular1).
Static Routes

Destination Network

Destination Network Netmask <IP Netmask>

Destination Interface
<IP address>

<IP address>

* Ethernet
* Cellular1
* Cellular2
* VPN
* WiFi Uplink
Static IP route out of a specified WAN or VPN interface.

Network screen

Network screen

Feature Name Heading/Field Values Description
Security Provides the type of IP network traffic, the type of umbrella used and the firewall information.
Netflow

Enter IP of Netflow Collector
Enable\Disable

IP Address
Allows Netflow data collection

Destination IP Address to send Netflow data.
Umbrella

Enter Umbrella Token

Domain to bypass
<string>

<regular expression>
Enable Umbrella DNS Security as described in this document: Cisco Umbrella Integration: Umbrella Connector Modes

Regex pattern matching a domain to bypass Umbrella DNS lookup.
Firewall

Allow/Deny

Protocol

Source IP

Source IP Netmask

Port


Allow/Deny

TCP, UDP, ICMP, IP

<IP address>

<IP address>
<Integer from 0 to 65535>
Create a simple access control list to permit or deny traffic from a specific source. ACL is applied in a Zone Based Firewall with Ethernet and Cellular WAN interfaces in a protected INTERNET zone.

Security screen

Security screen

Validated software versions

eCVD Template Version:

Bootstrap Configuration Software Version:

 

Note: This is the initial software that your Cisco IOS router uses to boot up, it is similar to the BIOS of your computer. Just as with IOS, the bootstrap can be upgraded on some router platforms.