I(P)WAP-3004
Industrial Multifunction VPN Router w/up to 2x WiFi 11ac + 2 serial ports** + 4 Gigabit Ethernet (PoE) Switch + 2 WAN ports w/ Load Balancing, VPN, Protocol Gateway, Storage**; 24V input

OVERVIEW
Lantech I(P)WAP-3004 series is a next generation industrial multi-function VPN router w/up to 2x 802.11ac Wi-Fi + u 4x Gigabit Ethernet (PoE) switch + 2 WANs + 2 serial ports** that supports advanced function of VPN, Load-balancing, Protocol gateway(Modbus), EMMC Flash Storage**, and WiFi roaming. The dual core CPU with 1.6GHz + 256M flash enables the router to multi-task smoothly.
Support AP/Bridge/Client mode, Mesh roaming
I(P)WAP-3004 supports AP/Bridge/Client mode for different applications.
It also supports client-base roaming to swap between the APs in a network.
Built-in Wireless mesh network(WMN)
I(P)WAP-3004 supports Mesh networks composed of different nodes. The set of SSIDs allow the wireless client to roam freely without the need for complicated account management. With Mesh protocol, it can provide a reliable, scalable, stable and seamless network topology.
IEEE 802.11ac dual band radio up to 2.6Gbps bandwidth
With IEEE 802.11ac capability, I(P)WAP-3004 can operate either 5GHz or 2.4GHz bands, offering the maximum speed of 2.6Gbps bandwidth (1.3Gbps per 1AC). It is also compatible with 802.11g/n that can work with 2.4GHz for longer range transmission.
The WiFi 11ac supports AP/BRIDGE/AP Client modes can be diverse for most of wireless application. Working with Load-balancing “Priority” mode, the AP client can enable router to transmit on WiFi with first priority.
MIMO technology with 3T3R and SMA type connectors
Lantech I(P)WAP-3004 series adapts MIMO technology with smart antenna transmission and reception for 3T3R. With six external detachable omni connectors and optional antennas, I(P)WAP-3004 can have better Wi-Fi coverage.
Wireless WMM QoS
I(P)WAP-3004 supports 802.11e standard which defines a set of Quality of Service for wireless LAN applications as well as WMM (WIFI multimedia)
Advanced security & 16 SSIDs
The security support standards including 64/128bits WEP, WPA/WPA2 PSK (TKIP, AES), 802.1x ensures the best security and active defense against security treads. Lantech I(P)WAP-3004 support up to 16 SSIDs, each SSID has its independent security and encryption.
Load Balancing with 5 mechanisms for multi-WANs
I(P)WAP-3004 supports Load Balancing for WAN connections. There are five schemes for Load Balancing function:
Pack
|Algorithm
|Description
| | --- | --- | --- | |Basic
|Fixed
|All traffic will be distributed to a single WAN.
| | |Failover
|Routes connections through preferred WAN link while others stand-by. Sequentially activating another link if the preferred link fails.
| | |Priority
|Select the active WAN according to priority.
| | |Weighted Round-Robin
|Evenly distribute the traffic over all working WAN links in circular order according to the specified weights.
| | |Custom Route
|Routing through the selected WAN for each specific traffic, ex: TCP/UDP port number and IP address.
|2 port serial connection, Modbus gateway
It builds in 2 port serial connection for RS232, RS422, RS485.
The built-in Modbus gateway can convert Modbus RTU/ASCII to Modbus TCP for device control.
Optional EMMC Flash storage**
The optional EMMC flash storage on the router can offer 8G/16G/32G capacity.
VPN and firewall
Besides traditional VPN peer to peer tunneling, I(P)WAP-3004 support latest Multi-Site VPN function that is an efficient way for mesh tunneling. The registration is under cloud service and encrypted by SSH makes the connection easy and safe.
It supports Multi-Site VPN, OpenVPN, L2TP over IPsec, IPsec, L2 over GRE , IPGRE, and NAT for various VPN applications.
The built-in Layer-4 firewall includes DDoS, IP address filter / Mac address filter / TCP/UDP port number.
Support Routing Protocol: Static route / RIPv2 / OSPF / BGP / EIGRP
Lantech router series supports two routing methods: static routing and dynamic routing. Dynamic routing makes use of RIPv2, OSPF, EIGRP and BGP. The user can either choose one routing method to establish the routing table.
DIDO for alarm & email notice; Event log; Remote Web control
2 sets of DIDO function can support additional high/low physical contact for designate applications besides Port / Power events, for example, DIDO function can trigger alarm if the router was moved or stolen. In case of events, the I(P)WAP-3004 will immediately send email and trap.
When the router is at remote area with limited access, Web control can help to get router status or remotely reboot.
Wide range input voltage from 9V-56VDC; PoE model built-in 4 port PoE at/af with 80W@12V /24V/48V
The I(P)WAP-3004 is able to work from 9VDC to 56VDC and PoE model built-in PoE at/af with PoE budget 80W@12V /24V/48V that is particular good for vehicle, rail train, depot etc. application.
Environmental monitoring for inside router info& alerting; Graphic WI-FI signal strength
The built-in environmental monitoring can detect router ambient temperature, voltage, current and total PoE load where can send the SNMP traps Syslog, and email alert when abnormal.
The graphic WI-FI signal strength shows connection status at a glance.
USB port for back up, restore configuration and upgrade firmware; Dual image firmware
The built-in USB port can upload/download the firmware through USB dongle for router replacement
It supports dual-image firmware to choose which one to start.
Dual image firmware
It supports dual-image firmware to choose which one to start.
Editable login page of captive portal
The I(P)WAP-3004 supports editable captive portal function that allows administrator to force end-users redirect to authentication page.
Ruggedized industrial design and FCC, CE & E-marking** certificate
The I(P)WAP-3004 is designed to meet with industrial network environment with IP 30 housing. It passed tests under extensive Industrial EMI and environmental vibration and shocks standards.
With CE & FCC radio certification for WIFI and E-marking certificate, the I(P)WAP-3004 is best for outdoor community, vehicle, process control automation etc. For more usage flexibilities, I(P)WAP-3004 supports wide operating temperature from -20°C to 70°C & -40°C to 70°C(-E model)
Built-in Managed Switch Function
Managed switch function is built-in and provides various L2+ functions for network aggregation deployment. It delivers ports and PoE management, VLAN, QoS, multicast, redundant ring, and security functions.
*Future Release
**Optional
FEATURES
- High Speed Air Connectivity: WLAN interface support up to 2.6Gbps link speed(2AC) or 1.3Gbps (1AC)
- Built-in 4 Gigabit switch + 2 WAN port
- PoE model with 80W@12V /80W@24V&48V PoE budget
- EMMC-FLASH storage**
- Dual band 2.4G and 5GHz with 802.11ac/a/b/g/n
- Support 2.4Ghz operating within the following frequency bands:
- 2.412~2.472 GHz
- Support 5Ghz operating within the following frequency bands:
- 5.180GHz~5.825GHz
- MIMO smart antenna technology with 3T3R
- 6 SMA type connectors for WiFi
- Output power : <24dBM
- Transmit power adjustment
- VAP (virtual access point) support up to 16 SSIDs
- Support AP/Bridge/Client/Mesh mode
- Support Client-base roaming
- Support 802.11s Wireless Mesh Network
- IEEE 802.11h DFS and automatic TPC
- Traffic control for each SSID
- Band preference for same SSID services on dual band
- Highly Security Capability: WEP64/128bits/ WPA/ WPA-PSK (TKIP,AES)/ WPA2/ WPA2-PSK (TKIP,AES)
- HTTP/HTTPS/Telnet/SSH & Administration access
- Support IPv6 & IPv4 protocol
- Support Routing Protocol: Static route / RIPv2 / OSPF / BGP / EIGRP
- Radius Authentication, EAP-TLS, EAP-TTLS, PEAP; SSID broadcast disable supported
- Multiple channel bandwidths of 20MHz and 40MHz for 2.4G.
- Multiple channel bandwidths of 20MHz, 40MHz and 80MHz for 5G only.
- Wi-Fi Multimedia (WMM) and 802.11e traffic prioritization
- Support Multi-Site VPN for mesh tunneling as well as Open VPN, L2TP over IPsec, IPsec, L2 over GRE , IPGRE and NAT for secured network connection
- The built-in Layer-4 firewall includes DDoS, IP address filter / Mac address filter / TCP/UDP port number.
- Support SNMP v1/v2c/v3
- NAT/ DMZ/ Port Forwarding
- Load Balancing supports 5 mechanisms between multiple WANs
- Built-in 2 x serial ports**(RS232/RS422/RS485)
- Supports 2DI / 2DO (Digital Input / Output)
- Built-in Modbus gateway converting Modbus RTU/ASCII to Modbus/TCP for serial ports
- Event alerting by Syslog, SNMP Trap, Email, Relay ; Permanent local log rotation / Maxi 1K records
- Remote Web control to get status or re-boot by Web
- Graphic WIFI signal strength
- Support SNTP to synchronize system clock
- Support LLDP discovery protocol
- Support DHCP Server and Client
- Built-in environmental monitoring for system input voltage, current and ambient temperature; Able to set alert when abnormal
- Dual image firmware to choose which to start
- Firmware upgradeable through TFTP/HTTP
- Configuration backup and restoration
- Supports text configuration file for system quick installation
- USB port to upload/download firmware by USB dongle
- Reset button for factory default mode
- Support editable captive portal login page
- IP 30 housing for industrial environment
- DIN-Rail and Wall-mount** installation
- Operation temperature -20~70C or -40~70C(-E model)
Pack
|Algorithm
|Description
| | --- | --- | --- | |Basic
|Fixed
|All traffic will be distributed to a single WAN.
| | |Failover
|Routes connections through preferred WAN link while others stand-by. Sequentially activating another link if the preferred link fails.
| | |Priority
|Select the active WAN according to priority.
| | |Weighted Round-Robin
|Evenly distribute the traffic over all working WAN links in circular order according to the specified weights.
| | |Custom Route
|Routing through the selected WAN for each specific traffic, ex: TCP/UDP port number and IP address.
|*Future Release
**Optional
SPECIFICATIONS
WLAN Interface
Radio Frequency Type
|DSSS, OFDM
| |Wireless Standard
|IEEE 802.11ac/n/a 5GHz
IEEE 802.11b/g/n 2.4GHz
Wireless bandwidth
|5GHz: Up to 1300Mbps
2.4GHz: Up to 450Mbps
Modulation
|802.11b: DSSS
802.11a/g:
OFDM (BPSK, QPSK, 16-QAM, 64-QAM)
802.11n:
OFDM (BPSK, QPSK, 16-QAM, 64-QAM)
802.11ac:
OFDM (BPSK, QPSK, 16-QAM, 64-QAM, 256-QAM)
Operating Frequency
|IEEE 802.11 a/b/g/n ISM Band, 2.412GHz~2.472GHz, 5150MHz~5850MHz
| |Transmission Rate
|IEEE802.11ac: up to 1300Mbps
IEEE802.11b: 1 / 2 / 5.5 / 11 Mbps
IEEE802.11a/g: 6 / 9 / 12 / 18 / 24 / 36 / 48 / 54 Mbps
IEEE802.11n: up to 450Mbps
IEEE 802.11b/g/n(2.4Gbps)
|Output Power Tx +/- 2dB(per chain)
18dBm @ 1~11Mbps
18dBm @ 6~54Mbps
20/20dBm @ MCS0~MCS7 (HT20/40)
Receiver Sensitivity Rx +/- 2dB
≦-95dBm @ 1~11Mbps
≦-92dBm @ 6~18Mbps
≦-88dBm @ 24Mbps
≦-85dBm @ 36Mbps
≦-81dBm @ 48Mbps
≦-80dBm @ 54Mbps
≦-94dBm @ MCS0 (HT20/40)
≦-76dBm @ MCS7 (HT20/40)
IEEE 802.11a/n/ac(5Gbps)
|Output Power Tx +/- 2dB(per chain)
20dBm @ 6~24Mbps
16dBm @ 36~54Mbps
19/18dBm @ MCS0 (HT20/40)
16/16dBm @ MCS7 (HT20/40)
19/18/18dBm @ MCS0 (VHT20/40/80)
13/13/13dBm @ MCS8 (VHT20/40/80)
13/13dBm @ MCS9 (VHT40/80)
Receiver Sensitivity Rx +/- 2dB
≦-92dBm @ 6~18Mbps
≦-86dBm @ 24Mbps
≦-84dBm @ 36Mbps
≦-81dBm @ 48Mbps
≦-80dBm @ 54Mbps
≦-93dBm @ MCS0 (HT20/40)
≦-71dBm/≦-80dBm @ MCS7 (HT20/40)
≦-90dBm @ MCS0 (VHT20/40/80)
≦-69dBm @ MCS8 (VHT20/40/80)
≦-66dBm @ MCS9 (VHT40/80)
Encryption Security
|WEP : (64-bit ,128-bit key supported)
WPA /WPA2 : IEEE802.11i(WEP and AES encryption)
WPA-PSK (256-bit key pre-shared key supported)
EAP,MD5,EAP,TLS,EAP,TTLS,EAP
PEAP
Wireless Security
|SSID broadcast disable
|Physical Ports & System
Connectors
|10/100/1000T: 6x ports RJ 45 (PoE model incl 4 PoE ports)
USB x 1
RS-232 connector: 1 x RJ 45
Serial connector : 2 DB9
RP-SMA connector for Wi-Fi 2AC: 6 (female)
RP-SMA connector for Wi-Fi 1AC: 3 (female)
Power & P-Fail connector: 1 x 6-pole terminal block
DIDO : 1 x 5-pole terminal block
Serial Baud Rate
|1000Kbps high data rate, 250kbps normal for RS232 ; 20Mbps high data rate, 250kbps normal for RS422/RS485
| |Serial Data Bits
|5, 6, 7, 8
| |Serial Parity
|odd, even, none, mark, space
| |Serial Stop Bits
|1, 1.5, 2
| |RS-232
|TxD, RxD, RTS, CTS, DTR, DSR, DCD, GND
| |RS-422
|Tx+,Tx-, Rx+, Rx-,GND
| |RS-485 (2-wire)
|Data+, Data-,GND
| |Isolation protection
|Input power to I/O: 1.5KV isolation
Input power to Ethernet 1.5KV isolation
Input power to PoE port 1.5KV isolation (PoE model)
DI/DO
|2 Digital Input (DI) :
Level 0: -30~2V / Level 1: 10~30V
Max. input current:8mA
2 Digital Output(DO): Open collector to 40 VDC, 200mA
LED Indicators
System & Power
|Per unit: Power 1 (Green), Power 2 (Green), P-Fail (Red) , Ring Master(Green), Storage(Green), Serial1/Serial2(Green)
| |10/100/1000Base-T(X) port indicator
|Link/Activity (Green), Speed (1000T: Yellow; 10/100TX: off), PoE (Green, PoE model)
| |Fault
|Red: Ethernet link down or power down
|Fault Contact
Relay
|Relay output to carry capacity of 1A at 24VDC
|Power
Input power
|Dual DC input, 9~56VDC (24V model)
| |PoE Budget (PoE model)
|80W@12V/24V/48V
| |Power consumption (Typ.)
|30.5 Watts
|Physical Characteristic
Enclosure
|IP 30 Metal case
| |Dimension
|74 (W) x 142 (D) x 152 (H) mm
| |Weight
|1000g
|Environmental
Storage Temperature
|-40°C ~ 85°C (-40°F ~ 185°F)
| |Operating Temperature
|-20°C ~ 70°C (-4°F ~ 158°F)
-40°C ~ 70°C (-40°F ~ 158°F) for E model
Operating Humidity
|5% to 95% Non-condensing
|Regulatory Approvals
Safety
|EN 62368
| |EMC
|FCC Part 15B Class A,
EN 55032: 2015,
EN 55024: 2010
IEC 61000-6-2,
IEC 61000-6-4
EMS
|IEC 61000-4-2 (ESD),
IEC 61000-4-3 (RS),
IEC 61000-4-4 (EFT),
IEC 61000-4-5 (Surge),
IEC 61000-4-6 (CS),
IEC 61000-4-8 (PFMF)
Radio Frequency
|EN 301 489-1,
EN 301 489-17,
EN 301 489-19,
EN 301 489-52
EN 302 502,
EN 301 893,
EN 300 328,
EN 62311
Vehicle certificate
|E13**
| |MTBF
|NA
|Software
IPv6/4
|Present
| |Operation Mode
|AP/Bridge/Client/MESH mode
| |Roaming
|Client-base roaming
| |MESH
|Support 802.1s
| |WMM
|WIFI multimedia and 802.11e traffic prioritization
| |VPN
|Multi-site VPN, Open VPN, L2TP, IPSec
| |Firewall
|DDoS, IP address filter / Mac address filter / TCP/UDP port number
| |Security
|WEP64/128bits/ WPA/ WPA-PSK (TKIP,AES)/ WPA2/ WPA2-PSK (TKIP,AES)/SSH/SSL/HTTPS
| |Authentication
|Radius Authentication, EAP-TLS, EAP-TTLS ,PEAP; SSID broadcast disable supported
| |SSID
|16 sets
| |Login Security
|Supports IEEE802.1x Authentication/RADIUS
| |Access Security
|HTTP/HTTPS/Telnet/SSH & Administration; SNMP v1/v2/v3 access for authentication via MD5/SHA(v3) and Encryption via DES/AES(v3)
| |Routing
|Static route / RIPv2 / OSPF / BGP / EIGRP
| |Protocol
|PPPoE Client,DHCP server/client, Adjustable MTU, Port forwarding (NAPT), DMZ; NAT, SNTP, Firewall(Firewall(DDoS; IP address filter / Mac address filter / TCP/UDP port name ),VRRP, DDNS
| |Protocol Gateway
|Modbus on serial ports
| |Management
|SNMP v1,v2c,v3/ Web/Telnet/CLI
| |Environmental Monitoring
|System status for input voltage, current , ambient temperature to be shown in GUI and sent alerting if any abnormal status
| |Graphic signal display
|Graphic WIFI signal strength
| |Timer
|Built-in Real Time Clock to keep track of time always(RTC)
| |Discovery
|IEEE 802.1ab Link Layer Discovery Protocol (LLDP)
| |SNMP trap
|Device cold / warm start
Port link up / link down
DI/DO high / low
Remote Web control
|To reboot router by WebUI
| |Captive portal
|Editable captive portal login page
| |Maintenance
|Firmware upgradeable through TFTP/HTTP
| |Configuration backup & restore
|Supports text configuration file for system quick installation
USB port to upload/download firmware by USB dongle
Software - Load Balancing
5 schemes for multiple WAN(client mode)
|Pack
|Algorithm
|Description
| | --- | --- | --- | |Basic
|
Fixed
|All traffic will be distributed to a single WAN.
| | |Failover
|Routes connections through preferred WAN link while others stand-by. Sequentially activate another link if preferred link failure occurs.
| | |Priority
|Routes connections through preferred WAN link while others stand-by. Sequentially activate other links if overflow occurs.
| | |Weighted Round-Robin
|Evenly distribute the traffic over all working WAN links in circular order according to the specified weights
| | |Custom Route
|Routing through the selected WAN for each specific traffic ex: TCP/UDP port number and IP address.
|*Future Release
**Optional

ORDERING INFORMATION
For -40~75C operational temperature model, the model name will add -E
EMMC Flash Storage
OPTIONAL ACCESSORIES - Management System
OPTIONAL ACCESSORIES - Wi-Fi Antenna
| 2.4/5GHz SMA dipole Wi-Fi antenna, 3dBi (2.4GHz), 4dBi (5GHz) |
| ANT11000056
| Wi-Fi hinge rotatable antenna, WiFi Dual Bands 2.4/5.8GHz, SMA Connector |
OPTIONAL ACCESSORIES - Antenna Base
| Magnetic antenna base for Wi-Fi, RP SMA Jack Base, Length : 1M |









