Remote configuration of a router supplied by Meteocontrol for OpenVPN in the icom Connectivity Suite using icom Router Management

In this case study, we explain how to use icom Router Management to remotely configure an INSYS router – supplied by Meteocontrol to its customers – so that it can be integrated into Meteocontrol’s OpenVPN network.

Situation

A Meteocontrol customer has installed an INSYS router in their system, which acts as an internet router. This router is already connected to the customer’s icom Router Management system for regular firmware updates. This router is now to be integrated into the OpenVPN network of the icom Connectivity Suite – VPN from Meteocontrol, so that Meteocontrol can provide services via the VPN tunnel connection. The required VPN configuration for the router is not to be loaded onto the router on-site via an Ethernet connection, as is usually the case, but via the existing connection to icom Router Management.

Solution

Meteocontrol first adds the router to its account for the icom Connectivity Suite – VPN. The configuration file downloaded from the VPN service is then sent to the customer. The customer then uploads the configuration file to the router using icom Router Management.

Prerequisites

In our example solution, we have based our approach on a typical installation with the following initial conditions:

• IP address of the Meteocontrol Bluelog: 192.168.1.20/24

• • IP address of the INSYS routers MIRO-L200: 192.168.1.1/24 (default)

The Meteocontrol configuration PC was set up in the icom Connectivity Suite – VPN and connected to it.

The router was set up in icom Router Management as described here in steps 1 and 2.

The router was set up as described in the Quick Installation Guide.

The router was set up using the Startup Wizard and configured for icom Router Management in step 6.

The router is configured as starting point for the next steps, has a stable internet connection via the cellular network and is connected to the customer’s icom Router Management account.

Steps that have to be taken by Meteocontrol

Before configuring the router in the icom Connectivity Suite – VPN, it is important to find out the local IP address, subnet and port assignments of the customer’s device, as these have already been set. For the rest of this procedure, we will assume that the router can be accessed on both ports via the IP address 192.168.1.1/24.

1. Log in to the icom Connectivity Suite - VPN and add a router as described in this Configuration Guide.  

   Please ensure you configure the following individual settings:
   
   

2. Click on the device information page of this router on Download configuration and download the ASCII configuration file for the icom Connectivity Suite - VPN.
   
   

3. Open the downloaded configuration file in a text editor and add the line cli(‘administration.profiles.activate’) at the end of the configuration, before the end of the Lua block, as follows:
   

   cli("administration.profiles.activate")

   

4. Save the extended ASCII configuration file and send it to the customer via a secure channel.

Steps that have to be taken by the customer

In order to upload the ASCII configuration file to the router, the customer must upload it to their icom Router Management account.

1. Click on the Package Management → File Storage page on Upload and select the ASCII configuration file received from Meteocontrol.
   
   

2. Select ASCII-Configuration as type and click on Upload.
   
   

3. Select the uploaded file, click on   and select Create Update Package.
   

4. Enter a meaningful Name and Description so that you can identify the file later, and click on Crate.
   

5. Click on the Inventory → Router page on behind the router to which you want ro roll out the ASCII configuration and select Deploy update package.
   

6. Check the update package uploaded above and click on Continue >.
   
   

7. If necessary, edit the Name and Description of the update job, select Run immediately, and click on Run update job.
   

8. Click on Go to update jobs.
   

9. Notify Meteocontrol once the update job has changed from Active to Success.
   

Confirmation of successful configuration

The customer can confirm that the configuration has been successful if the connection to the icom Connectivity Suite – VPN is shown as Online in the router’s dashboard.

Meteocontrol can confirm that the configuration has been successful if the router is shown as Online in the icom Connectivity Suite - VPN.