1

configure terminal

Enters global configuration mode.

2

snmp-server enable traps vlpwa

Enables virtual LPWA traps to monitor modem status changing.

3

snmp-server enable traps snmp linkup linkdown

Enables linkUp and linkDown traps to monitor modem heartbeat event.

4

end

Exits to privileged EXEC mode.

5

write memory

Saves the configurations.

modem door open/close

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 1 };

modem exceeds maximum temperature threshold

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 2 };

modem temperature returns to normal from overheat

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 3 };

modem falls below minimum temperature threshold

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 4 };

modem temperature returns to normal from undercooling

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 5 };

modem FPGA upgrade starts

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 6 };

modem exceeds maximum CPU threshold

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 7};

modem CPU usage returns to normal

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 8 };

modem exceeds maximum memory threshold

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 9};

modem memory usage returns to normal

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 10 };

modem exceeds maximum storage threshold

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 11};

modem storage usage returns to normal

{ 1, 3, 6, 1, 4, 1, 9, 9, 830, 0, 12 };

modem power on/off

interface FastEthernet_ID linkUp/linkDown

modem agent heartbeat

interface virtual-lpwa_ID linkUp/linkDown

1

configure terminal

Enters global configuration mode.

2

interface Virtual-LPWA vlpwa-id

Enters the vlpwa interface which is to be configured.

3

lpwa modem timezone [timezone ]

Specifies the timezone variables as the configuration for the LoRaWAN modem. The value is based on the IANA Timezone database. Please check the /usr/share/zoneinfo/ folder in your PC host.

timezone —Name of time zone, for example, Asia/Shanghai.

Example:

lpwa modem timezone Asia/Shanghai

4

end

Exits to privileged EXEC mode.

5

write memory

Saves the configurations.

1

configure terminal

Enters global configuration mode.

2

interface Virtual-LPWA vlpwa-id

Enters the vlpwa interface which is to be configured.

3

lpwa modem ipsec enable

Enables IPSec. By default, IPSec is disabled.

4

lpwa modem isakmp <xauth-user> <xauth-pw> <peer-ip> group <name> <psk-key> <lifetime>

Specifies the XAUTH credential’s username, password, and the IP address of the right participant’s interface. Matches this information to the IKEID group with group name, pre-shared key for remote peer, and lifetime in seconds.

5

end

Exits to privileged EXEC mode.

6

write memory

Saves the configurations.

1

configure terminal

Enters global configuration mode.

2

interface Virtual-LPWA vlpwa-id

Enters the vlpwa interface which is to be configured.

3

Configure SCEP by using a configuration file or profile method. Choose one of the following:

• lpwa modem scep [{flash:|nvram: } <SCEP_Configuration_File> ]
• lpwa modem scep [profile]

To configure by file, enter the SCEP configuration file. This file must be provided with the following formatted:

url <SCEP server URL used for enrollment>
country <2 letter country name>
province <Province/State>
locality <Location>
organization <Organization>
unit <Organization Unit>
common-name <Common Name>
type <SCEP server type: NDES>
persistent <Store certificates in modem; default is false>
key-length <Length of keys; 1024, 2048 (default) or 4096>

Example:

lpwa modem scep flash:scep_conf

SCEP Configuration File Example:

url http://172.19.234.54:80/certsrv/mscep/mscep.dll
country CN
province Nanning
locality Nanning
organization Cisco
unit iot
common-name cisco-iot
type ndes
persistent false
key-length 1024

To configure the parameters individually, use the profile methord.

IR807(config-if)#lpwa modem scep profile
IR807(config-if-vlpwa-scep)#?
Enter parameters for scep. country, locality, name, org, province, 
unit & url must all be present.
 country       Country server located in
 default       Set a command to its defaults
 exit          Exit from if-vlpwa-scep sub mode
 keylen        Specify key length 1024, 2048 or 4096
 locality      Locality of server
 name          Name of the certificate
 no            Negate a command or set its defaults
 organization  Organization of the server
 persistent    Specify persistency of the key
 province      State or Province
 type          Specify type
 unit          Business unit within server 
               organization
 url           Specify url

Note : In either file or profile method, “ndes” is the default and only supported SCEP type. However, you can enter SCEP type as xpki in either method. This option may or may not work. It has not been tested and will not be officially supported until a future re

4

end

Exits to privileged EXEC mode.

5

write memory

Saves the configurations.

1

configure terminal

Enters global configuration mode.

2

interface Virtual-LPWA vlpwa-id

Enters the vlpwa interface which is to be configured.

3

lpwa modem authentication mandatory enable

Enables mandatory security level in modem, which is disabled by default. When enabled, IR807 will shut down corresponding vlan or subinterface for ACT2 authentication failure or version mismatch to prevent further attacking. When disabled, IR807 will only send notifications to IoT FND when the same situations happen, without shutting down vlan or subinterface.

4

lpwa modem authentication timeout <subinterface/vlan name > <subinterface/vlan number > time <time >

Specifies a timeout protection for a suspended vlpwa interface (one with no traffic up from corresponding vlan or subinterface). You need to set the subinterface or vlan manually with a time (in minute) threshold. If the mandatory security level is also enabled, the corresponding vlan or subinterface will be shut down after the time threshold. If the mandatory security level is disabled, only a notification will be sent to IoT FND.

5

end

Exits to privileged EXEC mode.

6

write memory

Saves the configurations.

virtual-lpwa vlpwa-id [modem | packet-forwarder ]

Management for the LoRaWAN modem virtual-LPWA interface:

• modem —Manage the modem clock.
• packet-forwarder —Manage the packet forwarder.

virtual-lpwa vlpwa-id modem [cacert | clock | delete | install | reboot | upload ]

Management for the LoRaWAN modem:

• cacert —Clean the certificates stored in the modem.
• clock —Manage the modem clock.
• delete —Delete uploaded file(s) on the modem.
• install —Install the modem firmware.
• reboot —Reboot the modem hardware.
• upload —Upload a file to the modem.

virtual-lpwa vlpwa-id packet-forwarder [restart | start | stop ]

Management for the LoRaWAN modem packet-forwarder:

• restart —Restart packet-forwarder.
• start —Start packet-forwarder.
• stop —Stop packet-forwarder.

virtual-lpwa vlpwa-id modem clock set hh:mm:ss {dd Mon yyyy}

Management the clock for the LoRaWAN modem:

hh:mm:ss: —Current time.

dd Mon yyyy —Day, month, and year.

Example:

modem clock set 20:30:30 31 Mar 2016

show virtual-lpwa vlpwa-id modem [gps | info | ipsec | led | log | statistics | status | uploads ]

Displays the information of the LoRaWAN modem:

• gps —Displays modem GPS information.
• info —Displays modem information.
• ipsec —Displays modem IPSec status and detailed information.
• led —Displays modem LED information.
• log —Displays modem logs.
• statistics —Displays modem statistics.
• status —Displays modem status.
• uploads —Lists uploaded files.

show virtual-lpwa vlpwa-id packet-forwarder [info | log | status ]

Displays the information of the LoRaWAN modem packet-forwarder software:

• info —Displays packet-forwarder information.
• log —Displays packet-forwarder logs.
• status —Displays packet-forwarder status.

debug vlpwa all

Enables all vlpwa debug messages.

undebug vlpwa all

Disables all vlpwa debug messages.

debug vlpwa [decode | detail | errors | memory | raw | registry | session | timers | trace ]

Enables the following vlpwa debug messages:

• decode —Decoded packet information.
• detail —Detailed trace information.
• errors —Errors.
• memory —Memory information.
• raw —Raw packet information.
• registry —Registry information.
• session —Session information.
• timers —Timers information.
• trace —Trace information.