Fixed IP SIM Guide

Security Best Practices for using the H685 4G with Fixed Public IP SIM Cards

1. Change Default Credentials Immediately

• Update the default admin username and password on the router.
• Change the default Wi-Fi SSID and password.
• Avoid using easily guessable passwords—use strong, complex combinations

2. Configure the Firewall

• Ensure the router’s firewall is enabled, it is as default.
• Block all unnecessary inbound ports, default settings will block all ports from WAN.
• Only open ports that are essential for your application (e.g., port forwarding for CCTV).

3. Use Port Forwarding with Caution

• Only forward ports that are absolutely necessary.
• Restrict access to specific IP addresses or ranges where possible.
• Regularly audit open ports and close unused ones.

4. Enable VPN for Remote Access

• Use VPN (e.g., IPSec or OpenVPN) to securely access the router and connected devices.
• Avoid accessing the router directly over the public IP without encryption.

5. Disable Unused Services

• Turn off services like Telnet, or remote web access if not required. (Network > Firewall > Security.)
• Use HTTPS instead of HTTP for secure web interface access.

6. Harden the Router Against Brute-Force Attacks

• To protect your router from unauthorized access attempts, configure it to automatically block IP addresses that repeatedly fail to log in with the correct credentials.

  This can be set under:

  Network > Firewall > Security > HTTP

  We recommend the following settings:

  • Maximum Login Attempts: 10
  • Lockout Duration: 60 minutes

7. Regularly Update Firmware

• Check for firmware updates from the manufacturer and apply them to patch security vulnerabilities.

8. Use a Private APN (Optional)

• For added security, consider using a Fixed IP SIM with a private APN to isolate your traffic from the public internet.

if you have ordered a Fixed IP SIM card for use with your Proroute H685 router then the following guide shows you how to configure the APN settings to get your router connected.

Before you start please ensure that you have your Fixed IP SIM Card APN settings as these will be different to the standard APN settings used by the mobile networks.

Configuring Devices on the LAN

When using a Fixed Public IP SIM card, it’s typically because you intend to access devices on the local network remotely via port forwarding. To ensure this works correctly, your LAN devices must be properly configured.

IP Addressing Requirements

Your devices must be on the same subnet as the router. For example, if the router’s IP address is set to 192.168.8.1, then your devices should use IP addresses within the 192.168.8.xxx range.

Additionally, the default gateway on each device must be set to the router’s IP address. Without this, port forwarding will not function correctly.

Example Device Configuration

• IP Address: 192.168.8.100
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.8.1

In this setup:

• The IP address is the unique address assigned to your device.
• The default gateway is the router’s IP address, which routes traffic to and from the internet.