User Manual

BTS-RBN-5G-IRU-2-DC

Industrial 5G Router

Firmware v7.4.0710 · Revision October 2026 · BATS Wireless

1. Overview

The BATS Wireless BTS-RBN-5G-IRU-2-DC is a compact industrial 5G router: a 5G/LTE modem feeds a Gigabit Ethernet LAN and dual-band Wi-Fi, powered from 7–16 V DC. This manual covers installation, configuration and operation for firmware version v7.4.0710.

What it does

• Shares a 5G SA/NSA or 4G LTE cellular connection with wired and wireless devices (default mode).
• Keeps the link up unattended: hardware and software watchdogs, link health checks, and automatic modem reset or reboot on failure.
• Connects remote sites through VPN: IPsec, OpenVPN, WireGuard, L2TP, PPTP and GRE.
• Supports routing features for M2M use: firewall, port mapping, static, policy and dynamic routing (RIP, OSPF), VRRP failover, SNMP and DDNS.

Specifications

2. Hardware and installation

The router is supplied as a sealed enclosure with four external connections: four SMA antenna ports for the cellular radio, one Gigabit Ethernet port, a 2-pin DC power input, and a Nano-SIM slot. Wi-Fi uses a built-in antenna intended for short-range setup and local access.

Connections

Safety

• Observe power polarity. Polarity is screen-printed on the enclosure next to the DC input. Reversing + and − can damage the router.
• Stay within 7–16 V DC. Higher or lower voltage can damage the router. Power draw is under 500 mA at 12 V.
• Power off before inserting or removing the SIM. The slot is not hot-pluggable.
• Connect the cellular antennas before applying power. Transmitting into an open port can damage the radio.

Antennas

The cellular radio uses all four SMA ports at once, so connect an antenna to every port.

• Use antennas rated for 5G and LTE (typically 600–6,000 MHz) with SMA male connectors.
• Space the antennas apart and point them in different orientations for the best MIMO performance.
• For remote-mounted antennas, use short, low-loss cable; every metre of cable reduces signal, especially on the 3.3–4.2 GHz 5G bands.
• Check signal quality on the Interface page after installation (section 4) and adjust placement until RSRP and SINR are in the good range.

The internal Wi-Fi antenna gives short range. Plan to configure the router from within a few metres, or use the Ethernet port.

Status indicators

The status LEDs are visible around the Ethernet port.

The LEDs can be switched off under Indicator > LED Light (section 8).

Installation

1. With power disconnected, insert a Nano-SIM into the SIM slot until it latches.
2. Connect four cellular antennas to the SMA ports.
3. Connect the Ethernet port to your computer, switch or equipment.
4. Connect a 7–16 V DC supply to the power input, matching the polarity printed on the enclosure.
5. Wait about 40 seconds for the router to boot. The SYS LED fast-flashes while dialing and goes steady once the cellular link is up. Then connect by Ethernet or Wi-Fi (section 3). The cellular link normally comes up within 1–2 minutes.

3. Getting started

Out of the box the router is a working 5G gateway: insert a SIM, power it up, and connect a computer by Ethernet or Wi-Fi to reach the web interface at http://192.168.8.1 (user admin, password admin).

Connect a computer

By Ethernet: connect the computer to the Ethernet port. It receives an address from 192.168.8.2–192.168.8.250 automatically.

By Wi-Fi: join one of the two default networks, where XXXXXX is the last six digits of the unit's MAC address (also shown on System > Device):

The factory Wi-Fi key is bats2287 or 87654321, depending on the factory configuration; try bats2287 first. The key is not printed on the unit label. Change it during first-time setup.

Log in

1. Open a browser and go to http://192.168.8.1.
2. Enter username admin and password admin, then click Login.
3. The Dashboard opens. The left-hand menu holds every configuration page.

If the login page reports Incorrect password, the credentials have been changed. Contact BATS Wireless support to recover access; the enclosure has no external reset button.

First-time setup checklist

Work through these before deploying the unit.

• ☐ Change the admin password — System > Password. Enter the current password, the new one twice, and click Modify. You can change the username on the same page.
• ☐ Change the Wi-Fi key — Wireless > 2.4G SSID and Wireless > 5.8G SSID (section 6).
• ☐ Set the time zone — System > Device. The factory default is UTC+8; pick your local zone and click Apply.
• ☐ Set the Wi-Fi country — the radios ship set to China (CN). Set your country on each SSID page so channels and power follow local rules.
• ☐ Disable Telnet — System > Telnet Server. Telnet (port 23) is on by default and sends credentials in clear text. Enable SSH Server instead if you need a shell.
• ☐ Check the APN — Network > LTE/NR. The router picks an APN automatically from its built-in carrier list; set a custom APN only if your carrier requires one (section 5).
• ☐ Back up the configuration — System > Configure > Backup Configure (section 8).

Logging out

Click the logout icon (arrow leaving a box) at the top right of the page. Sessions also end when the router reboots.

4. Web interface tour

The left-hand menu groups about 50 pages into 11 menus; the three status pages at the top (Dashboard, Utilization, Interface) are read-only and the rest are settings. Most settings pages end with Refresh (reload saved values) and Apply (save and activate).

Menu map

This is the menu in the default LTE/NR Gateway mode. Other operation modes (section 8) add or remove Network pages such as WAN and WISP.

Four shortcut buttons above the menu jump to common pages: LTE/NR (signal icon), Wireless (Wi-Fi icon), Interface (list icon) and System > Device (gear icon). The header bar shows the device name, with the logout icon at the top right.

Dashboard

The Dashboard is the home page and refreshes itself. It shows one panel per active interface.

WAN, WAN2 and WISP panels appear only in modes that use them.

Utilization

Shows CPU load (user, system, IRQ, softirq) and memory (total, free, buffers, cached) as live charts. A healthy idle unit sits at a few percent CPU with about 40 MB of its 128 MB free.

Interface

The most detailed status page, and the one to check when diagnosing signal or connection problems.

Reading the signal values

The router reports standard 3GPP measurements. Use these typical ranges to judge antenna placement; RSRP and SINR matter most.

In 5G NSA mode the page shows two sets of values: the LTE anchor and the 5G NR carrier (the 5G fields). Both must be usable for full 5G speeds.

5. Cellular (5G/LTE) configuration

All cellular settings live on Network > LTE/NR; with a supported carrier SIM the defaults connect without changes. The router matches the SIM to its built-in list of 400+ operators and fills in the APN and dial number itself.

Status block

The top of the page shows Status (e.g. Online, Searching, NO SIM, Need PIN), IPv4 Address, Network (operator, technology and signal bars), RSSI/RSRP, ICCID, IMEI, Online Time and Rx/Tx totals. The pause button next to Status disconnects the cellular link until pressed again.

APN and dialing

Turn on APN Custom only when your carrier needs a specific APN (common for private networks, IoT plans and MVNOs).

Force LTE(4G) if 5G signal is weak and unstable, or SA(5G) if your carrier offers standalone 5G and you want to avoid the LTE anchor.

Modem Settings

The Modem Settings button opens advanced modem controls.

With default settings the modem is reset after 3 failed dial attempts, again after 15, then every 37.

Network settings

Turning on Network Status reveals the IP-layer settings. The defaults suit almost every carrier.

Availability Check (link keep-alive)

The router constantly tests that the cellular link really passes traffic, not just that it is registered. When a test fails the set number of times, it takes the Failed TODO action: Reconnection (default), Reset Modem, or Reboot System.

Two default ICMP targets are servers in China. Outside China, replace Test Address 2 and 3 with reachable targets such as 1.1.1.1 and 9.9.9.9, or a host on your own network.

SMS

Network > LTE/NR SMS lists received text messages (contact, ID, date, content) and can delete them. Turn on SMS Function to receive. HE Agent lets an authorized phone number (Command Contact) send configuration commands by SMS; each message must start with the Command Prefix. Use a hard-to-guess prefix if you enable it.

AT commands

Debug > AT command (LTE/NR) opens an interactive terminal to the modem. Use it for diagnostics such as AT+QENG="servingcell" (serving-cell details) or AT+QNWPREFCFG (band and mode preferences on Quectel modules). Close the terminal before leaving the page. Changes made directly by AT command can conflict with the router's own modem management.

GNSS (GPS)

The modem has a GNSS receiver, but this enclosure has no GNSS antenna, so leave GNSS off on the LTE/NR page.

6. Network configuration

The Ethernet port and both Wi-Fi radios are bridged into one 192.168.8.0/24 network behind the cellular link, with the router's firewall dropping unsolicited traffic from the internet by default. This section covers the local network, Wi-Fi, clients, firewall and forwarding, routing, and VPN.

LAN (Network > LAN)

Network > Hosts adds local DNS names (hostname to IP). Clients must use the router as their DNS server for these names to resolve.

Wi-Fi

The 2.4 GHz and 5.8 GHz radios each have an SSID page (main network and radio settings), an MSSID page (second and third SSID), an ApClient page (connect to another Wi-Fi as a client), and a Clients page (connected devices with RSSI, traffic and a kick option).

Other per-SSID options: Hide SSID, Isolate Clients (stops clients talking to each other), Clients ACL (MAC allow/deny list), WMM and WPS. Radio options: STBC, Short GI and Tx Power.

Use WPA2-PSK with AES for the best compatibility and security, and disable WPS if it is not needed.

Clients (Station menu)

Firewall (Network > Firewall)

The firewall applies to the external (cellular) interface. Defaults are secure: Default Action = Drop for anything not explicitly allowed.

The rule table adds exceptions by extranet address, intranet address, protocol and port, with an Accept or Drop action. Only enable WEB Access from the internet after changing the admin password, and preferably restrict it to known source addresses with a rule.

Most carrier SIMs use carrier-grade NAT (a private 10.x or 100.64.x address). Inbound access from the internet then needs a public/static-IP SIM, or a VPN.

Port forwarding

Routing

VPN

Each VPN page lists its tunnels with status, addresses and traffic; click + to add one and open it to edit. Every tunnel type offers IP Masquerade (NAT), Default Route (send all traffic through the tunnel), Route Table and Custom DNS.

Prefer WireGuard, IPsec (IKEv2, AES256, SHA256, DH14+) or OpenVPN with certificates. PPTP and plain GRE are not secure on their own.

Certificates for IPsec and OpenVPN can be generated on the router under Debug > CA Center.

Other network services

7. Applications and management services

Beyond routing, the router offers network-based applications for monitoring and remote management, found in the Application, Indicator and System menus. The firmware also contains serial-port, Remote IO and GNSS applications; these have no connection on this enclosure and should be left disabled.

AT Port Agent (Application > AT Port Agent)

Exposes the modem's AT command port over the network, as a client to a server or as a local TCP server, so remote tools can query the modem. Requires AT Port to be on in Network > LTE/NR. Do not expose it to the internet.

SNMP (Application > SNMP Agent)

Off by default. Settings: port (161), read-only and read-write community strings (defaults “rocommunity” and “rwcommunity” — change both), SNMPv3 with MD5/SHA authentication and DES/AES privacy, and system name, contact and location. Custom OIDs under .1.3.6.1.4.1.2022.5xx report model, name, firmware, MAC, LAN IP and modem identifiers.

Camera integration (Indicator menu)

Camera OSD writes live data (cellular status, GPS, sensor values or custom text) onto up to four on-screen-display lines of a Hikvision, Univision or ViewSheen IP camera. Camera GPS pushes NMEA position to the camera at a set interval. Both are off by default; enter the camera's IP address and credentials to use them.

Management agents (System menu)

Leave Remote Agent off unless instructed by BATS Wireless support. Consider turning off Local Control broadcast responses on untrusted LANs.

8. System administration

Day-to-day administration is under System and Debug. Note that by default the router reboots itself every few days (see Auto Reboot below).

Device (System > Device)

Shows Device Name (editable), Model, Date Code, MAC Address, Current Time, Time Source and Run Time, with a System Reboot button.

Copy from computer sets the clock from your browser when NTP is unavailable.

Operation modes

The Network menu changes to match the selected mode, for example adding WAN or WISP pages.

Configuration backup and restore (System > Configure)

Save Default Configure is useful for fleets: set up one unit, save it as the default, and the reset button will then return it to your baseline instead of factory settings.

Factory reset

To restore factory settings, log in and click System > Configure > Factory Configure. The router restores defaults and reboots.

After a reset the LAN returns to 192.168.8.1 and the login to admin/admin.

Firmware (System > Software)

The page shows Firmware Version, Firmware SDK and Firmware Identifier.

1. Obtain firmware for this model from BATS Wireless support.
2. Back up the configuration.
3. Under Upgrade, choose the file and confirm. Keep power stable until the router reboots (several minutes).

Upgrade Online checks the firmware update server for newer firmware and shows its change log. The bootloader is recoverable, so an interrupted upgrade can be retried. The Current FPK List shows installed feature packages; Default FPK&Configure returns both packages and configuration to factory state.

Password (System > Password)

Changes the admin username and password. Enter the original password and the new one twice, then click Modify.

Auto Reboot (System > Auto Reboot)

Factory defaults for Idle Reboot: minimum run time 208,800 s (58 h), no-client duration 300 s, maximum run time 295,200 s (82 h). Choose Point with a quiet-hours time if scheduled downtime matters, or Disable for always-on links.

Remote access services

Enable HTTPS and SSH, disable Telnet, and use Designated Address Access to limit who can connect.

Command-line interface

Telnet and SSH give a configuration shell (log in with the admin credentials). It reads and writes the same settings as the web interface.

Useful components: ifname@lte2 (cellular link), modem@lte2 (modem), ifname@lan (LAN), wifi@nssid and wifi@assid (2.4/5.8 GHz SSIDs), forward@firewall, land@machine.

Debug tools

LED Light (Indicator > LED Light)

Turns the status LEDs around the Ethernet port on or off, for example for covert or light-sensitive installations.

9. Troubleshooting

Start with Interface (signal and link state) and Debug > Syslog; most problems show up in one of the two.

Cellular connection

Slow or unstable 5G

• Check SINR first on the Interface page. Below 0 dB the link will be slow and unstable even with good RSRP.
• Make sure all four cellular antennas are connected and spaced apart; MIMO needs all of them.
• In NSA mode, a weak LTE anchor drops the 5G carrier. Try forcing LTE(4G) to compare stability, or SA(5G) if the carrier supports it.
• Keep HW Accelerate enabled; without it the CPU limits throughput.
• Measure with Diagnostic > Iperf2 against a known server to separate radio problems from LAN or Wi-Fi problems.

Access and login

Wi-Fi

Unexpected reboots

• Every 2–3 days: the default Auto Reboot schedule (section 8).
• After link failures: the Availability Check action is set to Reboot System, or the dial-failure thresholds were reached.
• Random: check the power supply can deliver 2 A at 7–16 V without sagging, and that the DC connector is fully seated with correct polarity.

Collecting information for support

Before contacting support, note the firmware version (System > Software), modem firmware and signal values (Interface page), and download the system log (Debug > Syslog) and a configuration backup.

Appendix A. Factory default settings

Appendix B. Network ports used by the router

Appendix C. Glossary