Lantronix SGX 5150 User Manual

6: Network Settings
SGX 5150 IoT Device Gateway User Guide 62
TM
Interface Select the interface to use to connect to VPN Gateway.
 any
 eth0
 usb0
 wlan0
Remote Network
Endpoint Enter the remote VPN Gateway’s IP Address.
Subnet Enter the subnet behind the VPN Gateway.
ID Enter the identifier expected to receive from the remote host during Phase 1
negotiation.
Router/Next Hop Enter the next-hop gateway IP address for the VPN Gateway.
Local Network
Subnet Enter the subnet the local devices have access to or can be accessed from
the VPN connection.
ID Enter the identifier sent to the remote host during Phase 1 negotiation.
Router/Next Hop Enter the next-hop gateway IP address for this connection to the public
network.
Key Management
Perfect Forward Secrecy
(PFS)
Select to enable or disable the Perfect Forward Secrecy. Enabling this
feature will require IKE to generate a new set of keys in Phase 2 rather than
using the same key generated in Phase 1.
Pre-shared Key (PSK) Enter the Pre-Shared Key used in the IPSec setting between the Local and
VPN Gateway.
ISAKMP Phase 1 (IKE)
Aggressive Mode Select to enable or disable Aggressive Mode. In Aggressive mode, IKE tries
to combine as much information into fewer packets while maintaining
security. Aggressive mode is slightly faster but less secure.
NAT Traversal Select to enable or disable NAT Traversal. If there is an external NAT device
between VPN tunnels, the user must enable NAT Traversal.
Encryption Select the encryption algorithm in key exchange from the drop-down menu.
Authentication Select the hash algorithm in key exchange from the drop-down menu.
DH Group Select the Diffie-Hellman (DH) groups (the Key Exchange group between the
Remote and VPN Gateways) from the drop-down menu.
IKE Lifetime Enter the number of hours for the IKE SA lifetime.
ISAKMP Phase 2 (ESP)
Encryption Select the encryption algorithm in data exchange from the drop-down menu.
Authentication Select the hash algorithm in data exchange from the drop-down menu.
DH Group Select the Diffie-Hellman (DH) groups (the Key Exchange group between the
Remote and VPN Gateways) for Phase 2 from the drop-down menu.
SA Lifetime Enter the number of hours for the SA lifetime in Phase 2.
Unreachable Host Detection
Host Enter the unreachable detection host monitoring the connectivity with the
host on the remote network.
VPN Setting Description

Lantronix SGX 5150 Specifications

General

Certification	FCC ICES-003:2012 RED 2014/53/EU, EMCD 2014/30/EU, EN 300 328 V1.9.1, EN 301 489-1 V1.9.2, EN301 489-17 V2.2.1, EN 301 893 V1.8.1, EN 62311: 2008 AS/NZS CISPR 22, AS/NZS 4268: A1: 2013, AS/NZS 2772.2VCCI EN 55022:2010, EN 55024:2010, EN 61000-3-2:A2 2009, EN 61000-3-3: 2008 UL 60950/CSA 22.2 No. 60950, IEC 60950 CE LVD 2014/35/EU
LED indicators	Yes
Power requirements	9 - 30 VDC
Power over Ethernet (PoE)	No
Power consumption (typical)	1.9 W
Storage temperature (T-T)	-40 - 85 °C
Operating temperature (T-T)	-40 - 70 °C
Operating relative humidity (H-H)	5 - 95 %
Security algorithms	802.1x RADIUS, AES, EAP-FAST, EAP-PEAP, EAP-TLS, EAP-TTLS, FIPS 140-2, MSCHAPv2, TKIP, WPA, WPA2, WPA2-PSK, WPS
Authentication method	RADIUS
Ethernet LAN (RJ-45) ports	1
Supported protocols	IPv4/IPv6, TCP, UDP, ICMP, ARP, Auto-IP, DNS, (S)FTP
Frequency band	2.4 / 5 GHz
Cabling technology	10/100BASE-T(X)
Networking standards	IEEE 802.11a, IEEE 802.11ac, IEEE 802.11b, IEEE 802.11d, IEEE 802.11g, IEEE 802.11h, IEEE 802.11i, IEEE 802.11n, IEEE 802.1x, IEEE 802.3, IEEE 802.3af, IEEE 802.3at, IEEE 802.3u
Ethernet LAN data rates	10, 100 Mbit/s

Weight and Dimensions

Weight	350 g
Dimensions (WxDxH)	110 x 89 x 26 mm