1. NetModule Cloud Solution Professional M2M Networking out of the Cloud © 2014 NetModule AG Slide 1

2. Todays M2M Connectivity Offerings Public IP Public static IP Dynamic IP with dynamic DNS update VPN Hardware VPN concentrator NetModule or third party OpenVPN, IPsec, PPTP, … Private APN Private APN and VPN from operator to company intranet Cloud service SAAS model, pay as you go, pay as you grow Private cloud NetModule Cloud Router Software VPN server for Linux © 2014 NetModule AG Slide 2 Poor security, bad availability Data security, ongoing subscription cost Expensive Coordination with IT, politics Privacy Flexibility

3. Applications Machines & Facilities Access to machines for deployment and maintenance Remote parameterization TeamViewer, Remote Desktop, VNC Access to PLCs with the vendors original software (E.g. PLC from Siemens or B&R) Energy & Utilities Measurement stations Substations Weather stations Vehicles Public transportation Trucks, police, ambulance, fire brigade © 2014 NetModule AG Slide 3

4. Customer Needs Integration of various systems Remote stations Control stations, smart phones, tablets, road warriors Enterprise systems (CRM, ERP) Simple to configure Getting access to M2M devices such as NetModule Router NB1600, NB2700, NB3700 Consume M2M networking as a service Security and privacy Separate different customer projects without the overhead of completely new installations. Management and monitoring Central management of M2M devices Easy setup, get new projects up and running fast © 2014 NetModule AG Slide 4

5. Cloud Router System Overview Cloud Router VPN Servers Admin Portal L2TP/IPsec OpenVPN Mobile IP Control Stations Remote Stations VPN © 2014 NetModule AG Slide 5 Application Domain Network Domain M2M Device Domain

6. Cloud Router Composition User Interface Admin portal Command line Applications NMS (Zabbix, …) VPN VPNs (OpenVPN, L2TP/IPsec) Mobile IP home agent Operating System Debian Linux Version 7 (Wheezy) Hardware Physical or virtual hardware amd64 or x86 architecture 20 GB, 512 MB RAM © 2014 NetModule AG Slide 6

7. Features Easy Setup Quick installation on any Debian 7 Linux system Easily attach new NetModule routers via Auto Setup or USB Stick Networking Classic routing 1:1 NAT (all devices appear to be in one network) Mobile IP VPN OpenVPN (NetModule Routers, PCs, …) L2TP/IPsec (smart phones, tablets, PCs,..) Scalability Up to 250 remote stations with standard license Up to 65’000 remote stations with custom license © 2014 NetModule AG Slide 7

8. Customer Admin Portal © 2014 NetModule AG Slide 8

9. Requirements One Debian Linux root server One public IP address or forwarded ports Open / forwarded ports PortTypeServiceComment 434UDPMobile IPOptional component 500, 4500UDPIKE / NAT-T IKE for IPsec -ESPEncapsulating Security Payload 80, 443TCPWeb Manager 1190UDPOpenVPN (auto setup) 1194UDPOpenVPN © 2014 NetModule AG Slide 9

10. Network Map Cloud Router Remote Station 1 e.g. NB1600 Remote Station 2 e.g. NB1600 Remote Station 3 e.g. NB2700 Remote Station n e.g. NB3700 Device 2 VPN Control Station 1 e.g. PC Control Station 2 e.g. Smartphone Control Station k e.g. Tablet VPN LAN Device 3 Device 2 Device 3 Device 2 Device 3 Device 2 Device m © 2014 NetModule AG Slide 10

11. Routed Network Cloud Router Device 2 10.9.1.2 LAN Device 3 10.9.1.3 Device 2 10.9.2.2 Device 3 10.9.2.3 Device 2 10.9.3.2 Device 3 10.9.3.3 Device 2 10.9.n.2 Device m 10.9.n.m Remote Station 1 10.9.1.1 e.g. NB1600 Remote Station 2 10.9.2.1 e.g. NB1600 Remote Station 3 10.9.3.1 e.g. NB2700 Remote Station n 10.9.n.1 e.g. NB3700 © 2014 NetModule AG Slide 11 Control Stations Distinct physical address Devices require individual configuration

12. 1:1 NAT 1:1 NATed Network Cloud Router Device 2 10.8.1.2 192.168.1.2 LAN Device 3 10.8.1.3 192.168.1.3 Device 2 10.8.2.2 192.168.1.2 Device 3 10.8.2.3 192.168.1.3 Device 2 10.8.3.2 192.168.1.2 Device 3 10.8.3.3 192.168.1.3 Device 2 10.8.n.2 192.168.1.2 Device m 10.8.n.m 192.168.1.m Remote Station 1 10.8.1.1 e.g. NB1600 Remote Station 2 10.8.2.1 e.g. NB1600 Remote Station 3 10.8.3.1 e.g. NB2700 Remote Station n 10.8.n.1 e.g. NB3700 © 2014 NetModule AG Slide 12 Same physical address Control Stations Distinct virtual address Devices do not require individual configuration

13. Example for Machine Manufacturer © 2014 NetModule AG Slide 13 PC with VPN Client and application software 10.250.1 (VPN) VPN Router Cloud my.private.cloud.com (Internet) Mobile Router NB1600 10.8.1.1 (VPN) 192.168.1.1 (LAN) SPS 10.8.1.2 (VPN) 192.168.1.2 (lokal) HMI 10.8.1.3 (VPN) 192.168.1.3 (lok.) IPC 10.8.1.4 (VPN) 192.168.1.4 (lok.) Mobile Router NB1600 10.8.2.1 (VPN) 192.168.1.1 (LAN) SPS 10.8.2.2 (VPN) 192.168.1.2 (lokal) HMI 10.8.2.3 (VPN) 192.168.1.3 (lok.) IPC 10.8.2.4 (VPN) 192.168.1.4 (lok.)

14. Licensing Free for up to one control and 2 remote stations Up to 250 remote and 100 control stations with standard license key One license per instance required Up to 65’000 remote stations with custom license Ask for bulk licenses Ask for extensions © 2014 NetModule AG Slide 14

15. Test Cloud Router Debian 7 needed For Windows first install hypervisor https://www.virtualbox.org/wiki/Downloads Install Debian 7 http://cdimage.debian.org/debian-cd/7.1.0/amd64/iso-cd/debian-7.1.0-amd64-netinst.iso Install Cloud Router via shell wget -q ftp://share.netmodule.com/router/cloud/install.sh -O - | bashftp://share.netmodule.com/router/cloud/install.sh © 2014 NetModule AG Slide 15