install easily. connect securely. manage remotely.
Frequently Asked Questions
Answers to common Junxion scenarios: setting up, configuring, product questions, how tos.
Junxion Box Basics (10)
This quick start guide provides helpful pointers that most users will need for a basic configuration.
Insert your data card into the Junxion Box.
Power up the Junxion Box. Wait two minutes for the Junxion Box to initialize. The status light should be solid red.
Connect your computer to the Junxion Box using the supplied crossover Ethernet cable.
For advanced configurations (or if you are using a carrier other than Sprint, Cingular, or Verizon) the Device Manager can be accessed with a web browser at 192.168.2.1/admin. The default username is 'admin' and the password is 'junxion'. Refer to your User Guide or visit www.junxion.com/support for further assistance.
The Junxion Box allows users to swap cellular modem cards in order to upgrade to a faster data network or switch data services. Beginning with Junxion Platform firmware v1.4, the Junxion Box can automatically detect and configure most data cards, making swapping even easier.
Before swapping cards, either power down the Junxion Box or make sure that the card is properly disconnected from the Junxion Box.
To swap cards with a basic configuration (firmware v1.4 or later):
Verify in the Device Manager that the Junxion Box PC Card Modem option is set to 'Automatically Detected'.
Unplug the Junxion Box. This will power down the Junxion Box and the card in a safe manner.
Swap cellular modem cards.
Plug in the Junxion Box.
For advanced card swapping (custom configurations or firmware before v1.4):
Open the WAN page of the Junxion Box Device Manager. In the PC Card Modem drop-down box, select 'My Card Not Listed' and click on Apply. This will disconnect the data card from the WAN.
Swap cellular modem cards.
Open the WAN page of the Junxion Box Device Manager. In the PC Card Modem drop-down box, select the new card, enter any additional configuration information, and click on Apply.
The Junxion Box will restart and attempt to connect to the WAN network.
To update your firmware, carefully follow these tips to help ensure a trouble-free experience.
Thouroughly read and follow the firmware update instructions.
Write down any custom settings before your Junxion Box is reset to factory defaults.
Take the data card out of the Junxion Box before starting the firmware update.
Set your Junxion Box to factory defaults. You can do this from the Update page of the Junxion Box Device Manager.
When the update is finished, unplug and plug in the Junxion Box to fully reset it.
If you have a Mac computer, the update may take longer than expected. Do not disconnect the Junxion Box during the update process.
If you are using Internet Explorer, you may need to add the Junxion Box Device Manager to the Trusted Sites Zone.
The red 'status' light indicates the connection status. There are three modes:
Solid status light: the Junxion Box is successfully connected to the Internet.
Blinking status light: the Junxion Box does not recognize the cellular PC Card modem or cannot connect to a cellular network. Check the status and settings in the Device Manager to troubleshoot. (Note that the status light also blinks briefly during the boot-up process.)
No status light: the device has just been turned on and is powering up (takes about two minutes).
No. The SSID broadcast cannot be disabled.
Currently, the Junxion Box supports the following cellular carriers and PC Card modems.
Alltel
- Kyocera KPC 650 (1xRTT and 1xEV-DO)
- Sierra Wireless AirCard 555 (1xRTT)
Cingular Wireless (including AT&T)
- Novatel Wireless Merlin U520 (UMTS) and U730 (EDGE/HSDPA)
- Option Wireless GlobeTrotter GT MAX (EDGE/HSDPA) and GT MAX 3.6 (EDGE/HSDPA/GPRS)
- Sierra Wireless AirCard 775 (EDGE), AirCard 860 (EDGE and limited HSDPA), and AirCard 875 (EDGE/HSDPA/GPRS)
- Sony Ericsson GC82 and GC83 (EDGE)
Sprint
- Novatel Wireless Merlin C201 (1xRTT), S620 (1xRTT and 1xEV-DO), and S720 (1xRTT and 1xEV-DO Rev A.)
- Sierra Wireless AirCard 550 (1xRTT), AirCard 580 (1xRTT and 1xEV-DO), and AirCard 595 (1xEV-DO Rev. A/1xRTT)
- Pantech PX-500 (1xEV-DO Rev. A/1xRTT)
- UTStarcom/Audiovox PC5740 (1xRTT and 1xEV-DO)
Verizon Wireless
- Audiovox PC3220 (1xRTT) and PC5220 (1xRTT and 1xEV-DO)
- UTStarcom/Audiovox PC5740 (1xRTT and 1xEV-DO)
- Kyocera KPC 650 (1xRTT and 1xEV-DO)
- Novatel Wireless Merlin V620 (1xRTT and 1xEV-DO)
- Sierra Wireless AirCard 555 (1xRTT) and 580 (1xRTT and 1xEV-DO)
here are two different ways to reset your unit to factory defaults:
You can use the Device Manager to reset the Junxion Box to factory defaults without powering off the unit.
First access the Device Manager by entering 192.168.2.1/admin (or the custom IP address you've configured for the Junxion Box LAN) into the address field of your browser. The default username is 'admin' and the password is 'junxion' unless you have already changed the password.
To reset your Junxion Box settings, go to the Update Page and select the Factory Defaults Reset. This resets all of your settings (passwords, LAN and WAN configuration, security settings, splash page, etc.) to the original factory settings.
If you forget your device manager password or are unable to access the Device Manager, you can reset the Junxion Box during the boot process.
Restart the Junxion Box by pressing the power cycle switch or removing then re-inserting the power cable.
After one to two minutes, the status light will begin to blink rapidly.
Unplug the Junxion Box while the status light is rapidly blinking to reset all configuration settings back to factory defaults.
Note. This procedure works only if the Factory Default Reset Option At Boot option is on. You'll find this option in the Update page; it's on by default.
To check for new updates, go to the Update page in the Device Manager. If the Junxion Box is connected to the Internet, clicking Check Version will provide information about the latest update available from Junxion's web site.
To be notified by email when new updates are available, visit www.junxion.com/support and sign up for Junxion news at the bottom.
A cellular router is a network gateway device that provides, manages, and secures Internet connectivity for local area networks using cellular data services.
Yes, the Junxion Box contains an advanced stateful firewall. Packet filtering in the Junxion Box is achieved using the netfilter/iptables hooks available in the Linux kernel as a standard part of all modern distributions. NAT, port forwading, port restriction, and MAC filtering are all examples of services provided by the Junxion Box firewall.
If you require extended functionality in the Junxion Box firewall please send a feature request to ideas@junxion.com or contact Junxion support.
Integration (10)
Yes, the Junxion Box supports most IP camera configurations. This guide provides tips for common camera configuration issues.
Camera Setup
Turn on and configure your Junxion Box. If you have never done this, please refer to the User Guide that came with the Junxion Box. Make sure your Junxion Box can connect to the Internet before setting up the camera.
Separately, turn on and configure the camera, with the camera's on-board management utility, to use a static IP address on the Junxion Box LAN. Consult the camera's manual if you have any questions. You will want to use an IP address outside of the Junxion Box DHCP address pool specified in the Device Manager. For instance, if the Junxion Box DHCP address pool is 192.168.2.10 - 192.168.2.200, set the camera to have a static IP address of 192.168.2.201.
Plug the camera into port 1 of the Junxion Box using a crossover cable.
From the forwarding page in the Junxion Box Device Manager, configure an unblocked external port to forward it's incoming traffic to the internal IP address and listening port of the camera, then click Apply. Before setting this up, you will need to check with your carrier to verify which incoming ports, if any, are allowed/blocked with your cellular data service plan. For example, if your carrier blocks incoming traffic on port 80, and your camera is setup to listen for incoming requests on port 80, a port forwarding rule could be setup to forward incoming traffic from port 9999 of the Junxion Box to port 80 of the camera's internal IP address. If your Junxion Box has a WAN IP address of 172.28.10.8, the camera could then be accessed by pointing your web browser at http://172.28.10.8:9999.
Troubleshooting
Is your LAN configuration correct? Can a computer on the LAN connect to the camera on the same LAN?
Does your carrier restrict any of the traffic being generated by your camera?
When you connect to the camera over the Internet, are you able to log into the camera admin page? If not, what kind of errors do you get?
Can you ping the IP address/port of the camera?
Carrier Specific Information
(The information put in this section may change and is for general information. Please double check with your carrier for specifics.)
Verizon. Does not block any ports used by cameras on their network.
Cingular. In order to use Cingular with an IP camera you will need to contact Cingular Customer Care to have a public APN provisioned to your account. After you've obtained a public APN, you can then proceed to setup port forwarding on the Junxion Box.
Sprint. To use Sprint service with an IP camera, you will need to setup port forwarding. Make sure that the external port is not port 80 (use port 9999, for example). You can setup whatever port you want for the internal port.
The Junxion Box is a flexible platform which can be accessed and controlled remotely in several different ways.
If your carrier does not firewall the Junxion Box, you may be able to directly access the Device Manager through the external WAN IP address of the Junxion Box. Open a browser and enter the IP address followed by /admin to access the Device Manager. For example, 172.16.1.1/admin. If you do not have a static IP address from your carrier, you can use a Dynamic DNS service to track the IP address of your Junxion Box. Refer to the User Guide for more information.
If you have multiple Junxion Boxes deployed, you can use Field Commander™ to monitor, configure, and update all of your Junxion Boxes from one page. To learn more about Field Commander, or to create your own secure Field Commander project, visit www.junxion.com/fieldcommander.
If you need to access a device or computer that is behind the Junxion Box (connected to the Junxion Box LAN), you have several options.
Use the IP Passthrough feature to give the WAN IP address to a single LAN client attached to port 2 of the Junxion Box. This is best used if you have a VPN or similar device that does not need a local IP address from the Junxion Box (192.168.2.x for example).
You can setup a DMZ which will forward all inbound traffic to a single IP address on the network. Make sure that the computer connected to the the Junxion Box LAN has a static LAN IP address. This is best used if you only have one computer that is receiving traffic from the Internet.
You can use port forwarding to forward inbound traffic to other ports and IP addresses on your internal network. Make sure that each computer you are forwarding traffic to on the internal network has a static LAN IP address. This is best used if you have several computers, each providing a unique service on different port numbers.
For more information, refer to the User Guide or contact Junxion support. It is also helpful to check with your carrier in advance to see what types of restrictions, if any, they have on inbound traffic with your cellular data service plan.
The splash screen feature can be helpful in public deployments when an announcement or legal notice needs to be displayed prior to browsing. If turned on, this feature will display a custom greeting page in any web browser when new users first connect. New users will not be able to reach the Internet until they click through this page by selecting the Connect button.
Note. New users connecting to a splash enabled Junxion Box, using a web application besides their browser, may not see the splash page and will be unable to successfully connect through to Internet.
A splash screen should not be used to secure the Junxion Box Internet connection. Encryption and MAC address filtering options are available for securing connections to the Junxion Box.
The splash page feature can be configured through the Device Manager. For information on accessing the Device Manager, please refer to the User Guide.
The WAN Juggler option ensures persistent connectivity by automatically choosing between your designated primary and secondary data services.
WAN Juggler automatically detects WAN service failure by monitoring a known IP address. When a failure is detected, the Junxion Box will automatically route all traffic to the secondary service. It will continue to monitor the primary service and will switch back when the connection is restored. If the Junxion Box on-board VPN client is being used when the primary service is lost, the VPN tunnel will not be restored on the secondary service. It will be restored when the primary service is available again. If a persistent VPN tunnel is desired, an administrator can go into the Device Manager when the connection is lost and reconnect the VPN. The VPN concentrator will need to be configured to accept the connection from the data card.
To setup WAN Juggler:
Go to the WAN page of the Junxion Box Device Manager.
Click on the radio button for 'WAN Juggler' in the Select Backhaul section.
Fill in the Ethernet Backhaul fields with the appropriate information for the Ethernet WAN connection that will be plugged into port 2 of the Junxion Box.
Select the Primary Interface as either Ethernet or PC Card. The primary interface should be the more reliable of the two connections.
The primary route IP is a known reliable IP address that is regularly checked (pinged) to determine Internet connectivity. The default is Junxion's public web site. It can be changed to another IP address as needed. The interval is in seconds and determines how often the IP address is checked. Usually the default settings are the best.
Several sections will appear that require more information.
When you have finished, click on Apply. Connect the WAN Ethernet cable to port 2 if you have not already.
Vonage and other VoIP providers in the U.S. support the ability to add fax services or use your existing fax machine with a VoIP box.
When coupled with a Junxion box, the primary limiting factor of VoIP faxing becomes the upload speed. Vonage recommends having at least a 90k upload speed to make a successful connection. When using a cellular modem card, the upload speed can be significantly less than a high-speed land connection.
Usually, receiving faxes with a cellular modem card is not a problem, but (because of the upload speed) sending faxes can be.
If you are unable to send or receive faxes, here are a few things to try:
Change your bandwidth usage. Vonage offers a Bandwidth Saver feature that may be able to buffer the uploaded data more efficiently. Click here for more information.
Some cellular modem cards have faster upload speeds than others. Make sure you're using the card that will give you the fastest upload speed based on your location and carrier.
The Junxion Box does not have an onboard RADIUS server, but it can be integrated with third party solutions. Contact support if you have any questions regarding this.
The Junxion Box does not support any PC Express cards at this time. They draw a different amount of power than regular PCMCIA cards.
No. The Junxion Box uses its own failover mechanism.
If you use a card that is in our supported card list, you may be able to use manual APN / dialstring settings to connect.
IP passthrough and the DMZ host options pass all previously unfiltered incoming WAN traffic to an internal host.
In IP passthrough mode, all incoming Internet traffic, not filtered by your carrier, is passed to a host connected to Ethernet port 2 of the Junxion Box. The host must be setup with a static IP address and gateway address that matches the WWAN IP address and gateway address of the Junxion Box as specified on the WAN page of the Device Manager.
When a DMZ host is configured, all incoming Internet traffic, not filtered by your carrier or port forwarded to another device, is passed to the specified host on your local network. The DMZ host must be setup with an IP address on the same subnet as the Junxion Box LAN IP address.
Note. IP passthrough and a DMZ host cannot be used concurrently. When enabled, these services will bypass the Junxion firewall and pass incoming Internet traffic directly to their respective clients. This may present a security risk as the clients are fully exposed to the Internet. For more information about IP passthrough and DMZ, consult the User Guide.
Field Commander (3)
Field Commander is Junxion's remote management solution. Field Commander enables enterprise and government customers to have remote control over single Junxion Boxes or thousands of units in the field. Logging in to an intuitive browser-based user interface provides access to easily and securely monitor, configure and update remote Junxion Boxes.
Visit www.junxion.com/fieldcommander for more information and to try the online demo.
Field Commander is available as a hosted solution at no cost for all existing/new Junxion Boxes with firmware version 1.5 or higher. The hosted solution is managed by third party partners at redundant geographically diverse locations. Field Commander licensed software is available with Junxion set-up support when independent hosting is preferred.
To sign up for a free hosted Field Commander account, fill out the online form here. Confirmation of the account setup will be emailed to you within 24 hours.
Troubleshooting (7)
If you have trouble connecting to the Junxion Box using Ethernet:
-
Make sure your computer is setup for DHCP addressing or set to a static IP address, on the same subnet as the Junxion Box (192.168.2.0/24 by default), outside of it's DHCP IP address pool.
-
Check your cable. You need a crossover Ethernet cable (included with the Junxion Box) if you are connecting your computer directly to the Junxion Box. You may need to use a standard (straight through) Ethernet cable if your computer is connecting to the Junxion Box through a separate router or hub. Some networking equipment and computers have auto-sensing ports that can use either cable type.
If you have trouble connecting to the Junxion Box using Wi-Fi:
-
Make sure the 'Junxion_Box' network name is selected in the list of available networks with your computer's Wi-Fi connection software.
-
Turn the Wi-Fi connection on your computer off and then on again.
-
Restart your computer.
-
Check to see that your computer's network configuration is consistent with the configuration of the Junxion Box. For example, your computer's IP address should be set either for DHCP or for a static IP address outside the range of the DHCP IP pool addresses specified in the Device Manager.
-
For Windows users, check to see if you have Service Pack 2 or higher installed. To determine if you have Service Pack 2 installed, open the Control Panel and then open the System application.
-
Change the Wi-Fi channel in the Junxion Box Device Manager. You may be having interference on a certain channel.
-
Try turning off WEP or WPA encryption in the Device Manager. If you can connect when encryption is turned off, you may be entering incorrect WPA or WEP login information into your computer or device.
-
If you are using a MacBookPro, see Why can't I connect with my MacBookPro via Wi-Fi?.
If you are trying to connect to the Junxion Box through the cellular WAN:
-
Your carrier may be filtering incoming traffic to the Junxion Box with a firewall. Check with your carrier to see what types of restrictions, if any, they have on inbound traffic with your cellular data service plan.
-
If you are using Field Commander™ for remote management, check to see that your box is alive and getting good cellular reception.
The Ethernet, Wi-Fi, and TCP/IP network interfaces used by the Junxion Box comply with industry standards. Connection issues may be related to the proper use of these standards and not the Junxion Box itself. For additional help connecting your computer or device to the Junxion Box, please refer to the networking instructions provided by your operating system.
See VPN Configuration.
When the Junxion Box first connects to the WAN, it checks the cellular signal strength. Since the Junxion Box does not query signal strength dynamically, you will need to reboot the WAN interface each time you want to query signal strength. The WAN interface can be rebooted through the Device Manager or by power cycling the Junxion Box.
The speed of your cellular Internet connection is directly proportional to signal strength and current network congestion. Getting the best possible cellular reception will help boost your WAN throughput.
Here are some tips for maximizing cellular signal in marginal coverage areas:
-
Reorient the Junxion Box. Move the Junxion Box so it is near a window.
-
Try using the Junxion Box outside. This can determine if the building is hindering the cell phone signal or if there is overall poor reception.
Currently, the Wi-Fi driver on the MacBookPro is incompatible with the encryption on the Junxion Box. You may want to enable MAC address filtering on the Junxion Box to keep your access point secured.
This is an error with your browser, click on the BACK button and then click on the REFRESH button. That will show the changes. You may want to try using a different browser if the issue persists.
If you've lost Device Manager password, you will need to reset your Junxion Box to factory defaults. See How do I reset my Junxion Box to factory defaults?
If you are receiving email from your DDNS provider claiming abuse of their services, check your Update Interval. It is usually a good idea to set the Update Interval high enough so you don't upset your DDNS service provider with frequent unecessary updates. Frequent DDNS updates usually require the purchasing of premium DDNS services. Check your DDNS providers policy for more information.
Support (4)
If your question isn't answered by the User Guide or the self-help resources located at www.junxion.com/support, you can contact customer support by filling out the support request form or by calling Junxion's support team at the telephone number listed below.
direct: 206.686.8988
For troubleshooting help with Junxion's support team, a Junxion Box log file can provide valuable information about the unit.
To capture a log file:
-
Connect to the Junxion Box via a crossover Ethernet cable.
-
With your browser, go to: http://192.168.2.1/admin/debug or http://[your LAN IP address]/admin/debug
-
Click on the 'Generate Debug' button and save the file to your computer.
This file can be then be attached to the support ticket you create at www.junxion.com/support or included in any email correspondence with Junxion.
If you feel that your Junxion Box is in need of repair, please contact Junxion support. Returns will only be authorized after other attempts at support have been made by Junxion's support team.
Each Junxion Box carries a one-year limited warranty that covers most product repairs and replacements (see warranty for detail). Junxion will repair or replace approved units and ship back (leaving Junxion's facility) within 3 to 4 business days. An optional Junxion Care™ extended warranty provides service, support, and replacements for units no longer covered by their original warranty. Units out of warranty can be serviced for a flat fee plus a charge for any replacement parts.
Note. All repaired and replacement units will be reset to default factory settings.
A lot of the features in the Junxion Box are there because of suggestions and requests from people that use them in the field everyday. If you have ideas for enhancing the Junxion Box, please send your comments or suggestions to us at ideas@junxion.com.
VPN Configuration (10)
Currently, we do not have any default VPN settings. There are many individual ways to integrate a Junxion Box into your VPN. We recommend contacting support if you have any questions or run into problems with your configuration. Be prepared to give as many details as possible.
The Junxion Box currently supports integration with Cisco VPN servers. The Junxion Box can integrate with other VPN servers which use similar protocols. Junxion support will work with you to determine a viable solution.
If you are having trouble establishing a VPN tunnel with the Junxion Box, here are some troubleshooting tips to try:
-
Verify that you can ping the Junxion Box and connect to the Device Manager when the VPN is not set up.
-
Make sure the Junxion Box is connected to the Internet (solid red status light) and an external host can be pinged with the VPN turned off.
-
Try pinging the Junxion Box and connecting to the Device Manager with the VPN turned on.
-
Try pinging an external host with the VPN turned on.
-
After setting up the VPN, try pinging the internal and external IP address of the VPN server on the other side of the tunnel.
-
Make sure no other clients are connected to the Junxion Box when testing the connection.
-
Check your VPN settings. The settings in the Junxion Box must mirror the settings of the VPN server. Some VPN server settings may not be compatible with the Junxion Box and must be disabled prior to testing the connection. For more information about available VPN settings, consult the Junxion Box User Guide.
-
View the connection logs from the VPN server. Verify that the Junxion Box is authenticating successfully for both Phase 1 and Phase 2.
Yes, you can use a non-standard time server on the VPN server side. Make sure your time server is reflected on the Junxion Box side by setting the NTP Server field in the VPN section of the Device Manager.
Yes and no. If you are using the Junxion Box to provide VPN access to other devices on the LAN, a secure VPN connection can only exist between the Junxion Box and the remote VPN server. Your computer's VPN client software will not be able to establish a VPN tunnel of it's own through a Junxion Box with VPN enabled.
If you are not using the Junxion Box for VPN services, your computer's VPN client software may be able to establish a VPN tunnel through the Junxion Box to a remote server under one of the following conditions:
-
IP Passthrough enabled with your computer set to the Junxion Box's external WWAN IP address and gateway; plugged into Ethernet port 2.
-
Your computer set as the DMZ host in the Junxion Box. Your computer will need to have a static LAN IP address outside the range of IP addresses in the Junxion Box DHCP pool. The VPN gateway of the client software would need to be set to the external WAN IP address of the Junxion Box.
-
Port forwarding set to forward inbound VPN traffic to your computer. Your computer will need to have a static LAN IP address outside the range of IP addresses in the Junxion Box DHCP pool. By default, most VPN implementations communicate on UDP port 500. The VPN gateway of the client software would need to be set to the external WAN IP address of the Junxion Box.
Yes, but it will have to be accounted for on the VPN server side. This can be accomplished in one of the follwing ways:
-
Have the Junxion Box identify itself by hostname (FQDN). This is accomplished by entering a fully qualified domain name (FQDN) into the My Identity field of the VPN configuration section on the services page in the Device Manager preceded by an '@'. character. For example, @junxionbox.domain.com. The VPN server would then need to be configured to accept authentication by FQDN and not IP address for this host.
-
Have the Junxion Box identify itself by user name (user_FQDN). This is accomplished by entering a username at a FQDN into the My Identity field of the VPN configuration section on the services page in the Device Manager. For example, user@domain.com. The VPN server would then need to be configured to accept authentication by user_FQDN and not IP address for this host.
-
Use a dynamic DNS (DDNS) service to update your IP address. For this to work you will need to sign up for service with a DDNS provider and enter the appropriate configuration information into the DDNS section on the services page in the Device Manager. When the Junxion Box IP address changes, it will updated with the DDNS service. The VPN server would then need to be configured (or scripted) to change it's IP address authentication configuration as DDNS information is updated.
The best VPN connections are ones that are made with full bars of cellular service on 3G network cards. Having the best service coverage and fastest possible cellular modem card will ensure a more stable VPN connection.
Cellular networks may also have more latent connections compared to regular land lines. To help account for this, it may be necessary to adjust the amount of time the tunnel connection is left open on the VPN server side or make adjustments to the WAN Alive interval.
Yes.
The Junxion Box VPN deploys the Openswan implementation of IPsec for Linux.
Here are a few good resources for compatibility and integration information between different VPN servers and implementations of IPsec:
http://www.ipsec-howto.org/t1.html
http://wiki.openswan.org/index.php/Openswan/Interoperate
http://www.novell.com/coolsolutions/appnote/8027.html
http://www.packtpub.com/openswan/book
If are having trouble integrating the Junxion Box into your VPN setup, Junxion support will work with you to determine a viable solution.