Perle Systems SCS8C DC инструкция обслуживания

IOLAN Device Serve r User’s Guide 1-1 IOLAN SDS/SCS/STS/MDC User’s Guide Version 4.5 Part #5500161-45 July 2013[...]

IOLAN Device Serve r User’s Guide 1-2 Copyright S tatement This document must not be repro duced in any way whatsoever , either printed or electronicall y , without the consent of: Perle Systems Limi ted, 60 Renfrew Drive Markham, ON Canada L3R 0E1 Perle reserves the right to make changes without further notice, to any products to improve reliabi[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 3 Preface ........................ ....................................................... 25 About This Book .............. .................................... ...................... 25 Intended Audience ........... .................................... ...................... 25 Documentation ....[...]

4 T able of Contents Power Supply Specificati ons ........................ ............................ 33 Desktop Models ........... ................................. ................ ............... ........... 33 Power Over Ethernet (PoE) Models ............................. .............. ........ 33 I/O Models ................ ................[...]

5 T able of Contents Medical Unit Models ........... .......................................... ............... ........... 46 Terminal Block Models .. ................................ .............. ............... ........... 46 DC Power Models (excluding Electric Ut ility models) ..... ............ ....... 47 Disconnecting 48V Power Supplies fro[...]

6 T able of Contents Access Platforms ........ ................................. ................ ............... ........... 63 Features................. ............................ ............................ ............... ........... 63 Connecting to the IOLAN Usi ng the CLI.......... ............................ ......... 63 Through the Net[...]

7 T able of Contents Easy Configuration Wiza rd ........................... ............................ 76 Setting Up the Network ............................................................. 77 Using DeviceManager ............. ................................................. .............. 77 Using WebManager ............... ...................[...]

8 T able of Contents Introduction .......................................................... ...................... 92 IP Settings ...... .............................. .............................. ................ 93 IPv4 Settings .............. .................................................................. ........... 93 Overview ..........[...]

9 T able of Contents Overview ................ ................................................. .............. ........... 112 Field Descriptions............... ................................................. ............. 112 Adding/Editing an IPv6 Tunnel .............................................. ........... 113 Chapter 7 Configuring Seria[...]

10 T able of Contents UDP Sockets Profile .............. ................................................. .............. 146 Overview ................ ................................................. .............. ........... 146 Functionality . ................... ............................ .............. ............... ........ 146 General [...]

11 T able of Contents Modbus Slave IP Settings Field Descriptions ....... ................ ........... 182 Adding/Editing Modbus Slave IP Settings ............... .............. ........... 184 Modbus Slave Advanced Se ttings Field Description s ...................... 185 Power Management Profile..... ...............................................[...]

12 T able of Contents Overview ................ ................................................. .............. ........... 211 Functionality . ................... ............................ .............. ............... ........ 211 Field Definitions...... ................................................. .............. ........... 211 Chapter[...]

13 T able of Contents General F ield Descriptions .... ............... ................................. ........... 226 Attributes Field Descriptions ................................................. ........... 227 Kerberos .............. ............................ .......................................... ............ 228 Field Descriptions..[...]

14 T able of Contents L2TP/IPsec ............... ................................ ................................. ............ 248 Field Descriptions............... ................................................. ............. 248 Exceptions ............... ................................ ................................. ............ 249 Fiel[...]

15 T able of Contents UDP Functionality........ ............................................... .............. ............ 266 Overview ................ ................................................. .............. ........... 266 Field Descriptions............... ................................................. ............. 266 I/O UDP Setti[...]

16 T able of Contents I/O Modbus Slave ................... .................................... .............. 292 Modbus Serial Applicati on Connected to the Seri al Port ..... ............ 292 Modbus Serial Applicati on Connected to the Netw ork ......... ............ 292 Modbus TCP Application ...... ................................ ............[...]

17 T able of Contents Adding Clustering Slaves ......... ................................. .............. ............ 306 Overview ................ ................................................. .............. ........... 306 Field Descriptions............... ................................................. ............. 306 Advanced Clusterin[...]

18 T able of Contents SNMP ............................................... .......................................... ............ 319 Overview ................ ................................................. .............. ........... 319 SNMP Tab Field Descriptions ............................................... ........... 319 SNMP Traps Tab F[...]

19 T able of Contents Introduction ................................................................ .............. 339 Managing Configuration F iles ................................................ 339 Saving Configuration Files ... ................................................. .............. 339 Downloading Configuration Files .......... .....[...]

20 T able of Contents Chapter 16 Applicat ions ................................................. 352 Introduction ................................................................ .............. 352 Configuring Modbus .............. .................................... .............. 352 Overview......... ................. ..........................[...]

21 T able of Contents Mapped RADIUS P arameters to IOLAN Parameters ........ ................. 382 Perle RADIUS Dictionary Example ......... ................................. ............ 384 TACACS+ .................... .............................. ........................ ........ 386 Accessing the IOLAN Through a Serial Port Users ....... ....[...]

22 T able of Contents RJ45 ................ ............................ .......................................... ........... 406 DB9 Male ............... ................................. .............................. ........... 407 Appendix E Setting Jumpers ......................................... 408 Introduction ..........................[...]

23 T able of Contents TruePort ................ ............................................................ ........ 420 API I/O Access Over TruePo rt ................................................ 421 API Request Format .............. ................................................. .............. 421 API Response Format .... .................[...]

24 T able of Contents RADIUS Authentication Prob lems ...................... .................... 438 Login Problems ...................... .................................... .............. 439 Problems with Terminals .................................... .................... 439 Unknown IP Address ............. ...................................[...]

25 T able of Contents Configuring the Modbus UID T r anslation Featur e ................ 447 Appendix L Symmetric Key File ..................................... 449 Symmetric Key File ................ .................................... .............. 449 Appendix M Troubleshooting the USB Modem ............ 450 Modem not connecting to th e networ[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 25 Preface About This Book This guide provides the information you need to : z configure the IOLAN z incorporate the IOLAN into you r production environment Intended Audience This guide is for adm inistrators who w ill be configuring the IOLAN. Some prerequisite knowledge is needed to understand th[...]

26 T ypeface Conventions T ypeface Conventions Most text is presented in the type face used in this paragraph. Othe r typefaces are used to help you identify certain types of inform ation. The other typefaces are: Online Help Online help is prov ided in the DeviceManager . Y ou can click on the What’ s This button ( or ) and then click on a field[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 27 About the IOLAN The IOLAN is an Ethernet communi cations/terminal server that allo ws serial devices to be connected directly to LANs. The IOLA N can connect to a wide ra nge of devices including: z T erm inals for multi-user UNIX systems z Data acquisition equipmen t (manufactur ing, laboratory[...]

Introduction 28 IOLAN Featu res 60601-1 and has galvanically isolated EIA-232 serial port s. The MDC model has the advanced secure IOLAN feature set in addition to the general IOLAN functionality . z HL — Offered as a 4-port unit (RJ45 only), this model is a Hazard Location model. The SDS HL model is suitable for use in Class I, Divison 2 groups [...]

Introduction 29 IOLAN Featu res Note 1: Not supported on STS8-D. Note 2: Optional power supply . Sof tware This section describes the suppor ted software features available. Accessing the IOLAN All IOLAN models can be accessed thro ugh any of the following methods: z Easy Config W i zard, an easy configuration wizard that allows you to quickly setu[...]

Introduction 30 IOLAN Featu res z ‘Fixed tty’ support for several operating systems using Perle’ s TruePort utility . z DHCP/BOOTP for automated netwo rk-based setup. z Dynamic statistics and line status inform ation for fast problem diagnosis. z Multisession support when accessing the IOLAN from either the serial port or the network. z Modbu[...]

Introduction 31 IOLAN Featu res z SSH client/server connections (SSH 1 and SSH 2). z SSL/TLS client/server data encryption (TLSv1 and SSLv2). z Ability to setup V irtual Private Networks. z Access to firewalled/Nated devices via HTTP tunnels.[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 32 Hardware and Connectivity Chapter 2 2 Introduction This chapter describes how to physically set up your IOLAN unit. It includes an overview of the IOLAN hardware compon ents and how to power up the IOLAN to make sure it works correctly . IOLAN Component s What’ s Included The following compone[...]

Hardware and Connectivity 33 Power Supply S pecifications A vailable Accessories The following accessories are avai lable for purchase for the various IOLAN models (except medical unit models): z DIN Rail Mounting Kit (35mm) for the desktop models and El ectric Utility models. z IOLAN modem card for SCS rack mount m odels z PCI adapter card for SCS[...]

Hardware and Connectivity 34 Power Supply S pecifications I/O Models The power supply for a deskt op IOLAN I/O model m ust meet the follow ing requirement: z Output between 9-30V DC and a m inimum of 600m A current. z 20 A WG wire. Rack Mount Models (excep t Electric Utility models) DC Power Requirements The IOLAN DC is supplied with an integral T [...]

Hardware and Connectivity 35 Power Supply S pecifications highest voltage at some point, in which case the unit will switch to it. No power loss w ill occur during a switch over . DC Power Requirements HV and DHV models: The IOLAN can be powered via a DC source. The fo llowing are the ranges for the DC vo ltage supported by the unit; Minimum: 88 V [...]

Hardware and Connectivity 36 Getting to Know Y our IOLAN Getting to Know Y our IOLAN This section describes the hardware components found on your IOLAN unit. Overview All IOLANs have the same basic hardware components to allow you to connect to serial devices, connect to the network, monitor LAN and serial activ ity , and manage the u nit. Below is[...]

Hardware and Connectivity 37 Getting to Know Y our IOLAN z External Power Supply —For all IOLAN models, this can be an external AC power supply , DC terminal, or power cord, dependin g on the model. z Console/Serial Switch —Found on desktop models only (rack mount models have a dedicated console port), this switch d etermines whether port 1 fun[...]

Hardware and Connectivity 38 Getting to Know Y our IOLAN The 1-port IOLAN has one serial connection that is one of the follow ing connecto rs: DB25 male, DB25 female, RJ45, or DB9 male. 2-Port This section describes the components found on the IOLAN 2-port models. The 2-port IOLAN has two RJ45 serial connections. The 2-port IOLAN can support an 8-p[...]

Hardware and Connectivity 39 Getting to Know Y our IOLAN 4-Port and 8-Port desktop models This section describes the components found on the IOLAN 4-port models. The 4-port IOLAN model has four RJ45 serial connection s. The STS8-D IOLAN model has ei ght RJ45 serial connections. Serial Activity Power/Ready Link/10/100 Activity (LAN) Serial Ports Ext[...]

Hardware and Connectivity 40 Getting to Know Y our IOLAN I/O This sections describes the basic components found on the IOLAN I/O models. T op View The following image shows a typical IOLAN I/O mo del. Y our I/O model may h ave I/O connectors in slightly different positions. End View The IOLAN I/O model shown is an A4D2 . Different IOLAN I/O m odels[...]

Hardware and Connectivity 41 Getting to Know Y our IOLAN Rack Mount This section describes the bas ic components of a ll rack mount IOLAN mo dels . This example uses the IOLAN SCS with dual Ethernet and dual AC power . Console Port/LED V iew Serial/Ethernet View Power ON/OFF Server LEDs Serial Activi ty Console Port Serial Ports Dual Ethernet PCI C[...]

Hardware and Connectivity 42 Getting to Know Y our IOLAN Medical Unit This section describes the basic components found on the IOLAN medical un it models. T op View Serial View Power/Ethernet V iew Power LAN Activity Serial Ports Power ON/OFF AC Power Ethernet[...]

Hardware and Connectivity 43 Getting to Know Y our IOLAN Electric Utility models This section describes the basic components of the Electric Utility models. This example uses the SDS32C DHV model. Front (LED/Console port)View Back (Serial/Ethernet/power) View Serial ports Ethernet ports Reset switch Power/relay Server LEDs Serial A ctivity Consol e[...]

Hardware and Connectivity 44 Getting to Know Y our IOLAN Cons ole/Se rial Switch Located at the back of the desktop IOLAN models is a switch that controls whether serial port 1 is in Console or Serial mode. Look at your model to verify the directi on of the ON switch position. ON indicates that serial port 1 is in Cons ole mode; ot herwise seria l [...]

Hardware and Connectivity 45 Connecting your IOLAN to the Netwo rk Dedicated Console Port The rack mount IOLAN models have a dedicated Console port , located on the LED side of the IOLAN. Y ou can use the supplied Admin istratio n cable (with the supplied RJ45 J DB9F adapter if needed) to connect a terminal to the Console/Ad min port to view diagno[...]

Hardware and Connectivity 46 Powering up your IOLAN z IOLAN I/O model s with Analog I/O for setting V o ltage/Current. See Appendix E, Setting Jumpers to see how to set the jumpers for your IOLAN desktop model. Medical Unit Models T o pow er up the medical unit IOLAN, perform the following steps: 1. Y ou can attach the multi-function wall plate inc[...]

Hardware and Connectivity 47 Powering up your IOLAN DC Power Models (excludin g Electric Utility models) T o power up th e IOLAN with DC power requirements, perform the following st eps: 1. V erify that the power switch on the IOLAN un it and the power source is in the Off position. 2. Connect the primary and secondary DC input using the following [...]

Hardware and Connectivity 48 Powering up your IOLAN Disconnecting 48V Power S upplies from the IOLAN T o disconnect th e power supply(s) from the IOLAN, do the following: 1. Switch off the IOLAN. 2. Switch of f the power source(s). 3. Disconnect all DC power input cables from the IO LAN terminal connector bl ock. 4. Remove any attached devices to t[...]

Hardware and Connectivity 49 Powering up your IOLAN Wiring up an HV unit NOTES: 1. For terminal# 1 through 6, the use of ring terminals size #6 (M 3.5) is recommended usin g str anded wir e size A WG 18-14. T ighten all screws to a torque of 12 Lb-in (1.36 Nm). 2. For terminal# E, the use of ring terminal size #8 (M 4) is recommended using st rande[...]

Hardware and Connectivity 50 Powering up your IOLAN Wiring up a DHV unit T erminal # Description Usage 1 Normally Open Normally Open is a fail-safe rela y connection. Use this with the Common terminal to act as switch contacts that remain open when the unit is powered of f or in a failure state. 2 Common Common is a fail-safe relay conn ection. Use[...]

Hardware and Connectivity 51 Powering up your IOLAN NOTES: 1. For terminal# 1 thr ough 8, the use of ring terminals size #6 (M3.5) is r eco mmended using stranded wire size A WG 18-14. T ighten all scr ews to a tor que of 12 Lb-in (1.36 Nm). 2. For terminal# E, the use of ring terminal size #8 (M4) is r ecommended using stranded wir e si ze A WG 18[...]

Hardware and Connectivity 52 Powering up your IOLAN NOTES: 1. For terminal# 1 thr ough 7, strip in sulation fr om wire 9/32-5/1 6 (7 -8mm) using stranded wir e size 18-12 A WG . T ighten scr ew to a torque of 4.5 Lb-in (0.51Nm). 2. For terminal# E (Chassis ground), the use of ring terminal size #8 (M4) is r ecommended using stra nded wir e size A W[...]

Hardware and Connectivity 53 Powering up your IOLAN A SPDT set of contacts are provided to the user . These three contact connections are known as "Common", "Normally Open" and "Normally Closed", and are electrically isolated to th e relay . The contacts are rated for voltages up to 30V DC /AC with a maximu m current o[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 54 Configuration Methods Chapter 3 3 Introduction This chapter provides information about th e different methods you can use to configure the IOLAN. Before you can configure the IOLAN, you must assign an IP address to the IOLAN. See the Chapter 4 , Getting S tarted to find out how to assign an IP a[...]

Configuration Methods 55 Configuration Methods Overview Configuration Methods Overview Some of the IOLAN configuratio n methods have the capability o f configuring an IP address, which is the first required configuration step for a new IOLAN. Once the IOLAN has been assigned an IP address, any of the confi guration methods can be used to configure [...]

Configuration Methods 56 Easy Config Wizard Easy Config Wizard The Easy Config W izard is a config uration wizard that will configure all the serial ports on your IOLAN to one of the following: z Console Management z T rue Port (V irtual COM Port) z TCP Sockets (Raw TCP) z Te r m i n a l z Printer (not supported on DS1/TS2 mo dels) z Serial T unnel[...]

Configuration Methods 57 DeviceManager DeviceManager Ov erview The DeviceManager is a W indows ® -based application that can be us ed to connect to the IOLAN to actively manage and configure it or can create new IOLAN co nfiguratio ns offline. See Chapter 5 , Using DeviceManager and W ebManager fo r information on configuring/m anaging the IOLAN w[...]

Configuration Methods 58 DeviceManager All discovered IOLANs will be displayed on the list along with their name and IP address. When a new IOLAN is discovered on the network, that has not yet been assigned an IP address, it will be displayed with an IP Address of Not Configur ed . T o configure the IP address, click on the IOLAN and then click the[...]

Configuration Methods 59 DeviceManager Using DeviceMana ger After you have successfully connected to the IOLAN, D eviceManager displays the following window: Navigating the Options The left-hand navigation tree allo ws you to quickly and easily navigate the various Configuration and Statistics pages of DeviceManager . Further navigatio n is availab[...]

Configuration Methods 60 WebManager Downloading the Configuration When you have completed all your configu ration changes, click the Download All Changes butto n to download the configuration to the IOLAN . Y ou must reboot the IOLAN for your configuration changes to take effect. W ebManager Overview The W ebManager is a web browser-based method of[...]

Configuration Methods 61 WebManager Connecting to the IOLAN Using WebManager Before you can connect to the IOLAN using W ebManager , the IOLA N must already be configured with a known IP address; see Setting Up the Network to configure an IP address on your IOLAN. T o connect to the IOLAN through the W ebManager: 1. Open your web b rowser and type [...]

Configuration Methods 62 WebManager Using WebManager After you have successfully logged into W ebManager , you will see the following: Y ou navigate through the different configuration windows by selecting an option in th e left-hand navigation tree. When you click on an option that is under a folder , more nav igation options are displayed: The Ne[...]

Configuration Methods 63 Command Line Inte rface Command Line Interface Overview The Command Line Interface (CLI ) is a command line option for IOLAN configu ration/management. See the Command Line Interface Refer ence Guide for a full breakdown of all the CLI commands and their functionality . Access Plat forms The CLI is accessed by any applicati[...]

Configuration Methods 64 Menu Through the Serial Port T o connect to the IOLAN throug h th e serial port to configure/manage it using the CLI (or Menu ), see Using a Direct Serial Connection to Specify an IP Address . After you have established a connection to th e IOLAN, you will get a Login: prompt. Y ou can login as the admin user or as a user w[...]

Configuration Methods 65 Menu Using the Menu After you have successfully logged in, type screen at the prompt and press Enter . Y ou will be asked to enter a terminal type, and then you will see the following Menu: To navigate through the Menu options, do th e following: 1. Highlight a Menu option by using the keyboard up and down arrow s to naviga[...]

Configuration Methods 66 DHCP/BOOTP DHCP/BOOTP Overview Several IOLAN parameters can be configured through a DHCP/BO OTP server during the IOLAN bootup. This is particularly usef ul for configu ring multiple IOLANs. Not all configuration parameters are suppor ted in the DHCP/BOO TP configuration (see DHCP/BOOTP Parameters for support ed configurati[...]

Configuration Methods 67 DHCP/BOOTP DHCP/BOOTP Parameters The following paramet ers can be set in th e DHCP/BOOTP bootp file: z SW_FILE —The full p ath, pre-fixed by hostname/IP addr ess (IPv4 or IPv6), and file n ame of the firmware update. z CONFIG_FILE —The full path, p re-fixed by hostname/IP add ress (IPv4 or IPv6), and file name of the co[...]

Configuration Methods 68 SNMP SNMP Overview The IOLAN supports configuration and manage ment through SNMP . SNMP Management tools (SNMP client/MIB browser software) can be used to set IOLAN configurati on parameters and/or view IOLAN statistics. Before you can configure/mana ge the IOLAN usi ng SNMP , you need to set the IOLAN IP address and config[...]

Configuration Methods 69 SNMP Using the SNMP MIB After you have successfully connected to the IOLAN throug h your SNMP Management tool or MIB browser , expand the PERLE-IOLAN-SDS-MIB folder to see the IOLAN’ s parame ter folders. Below is an example of the configur able parameters under the Servic esInfo fo lder . The first variable in each folde[...]

Configuration Methods 70 IOLAN+ In terface IOLAN+ Interface Overview For environments that have bo th IOLAN and IOLA N+ models or for users who prefer to configure using the IOLAN+ Menu or CLI, the IOLAN+ user interface is av ailable. The IOLAN+ interface is supported on all IOLA N SDS, SCS, and STS models up to and including 16 serial ports. Acces[...]

Configuration Methods 71 IOLAN+ In terface Changes to the IOLAN+ Interface Y ou should be aware that the following IOLAN+ configuration fields are no longer supported: z Y ou no longer have the option of selecting access , Authentication/Log ging. Also, kill , reboot , and stat s are not available. z When you select port , the following fields are [...]

Configuration Methods 72 IOLAN+ In terface z When you select lin e , Access , the following fields are not available on the Access Menu: z Authentication z UDP Retries z Interval z When you select lin e , Options , the following fields are not available on the Options Menu: z Opt z HEX z Rlogin/T elnet ** Administrator ** ACCESS MENU REMOTE-ADMI N [...]

Configuration Methods 73 IOLAN+ In terface z When you select access , Remote access sites. , the following fields ar e not available on the Remote Access Systems Screen: z Service type z Inactivity z Login-script z When you select access , Remote site devices. , the following fiel ds ar e not available on the Remote Site Device Screen: z IP Address[...]

Configuration Methods 74 IOLAN+ In terface When you select server , the following fields are not available on the Server Config uration menu: z Debug mode z CR to initiate z SNAP encoding z Boot diagnost ics z NS Port A new parameter was added, Interface , to the to Port Setup Menu, to specify whether you are setting up the serial line as a EIA-232[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 75 Getting S t arted Chapter 4 4 Introduction There are several dif ferent configuration me thods available to configure the IOLAN (see Chapter 3, Configuration Methods for more information). This chapter descr i bes the th ree main mini mal configuration requirements for t he IOLAN through either [...]

Getting S tarted 76 Easy Configuration Wizard Easy Configuration Wizard The Easy Config W izard quick ly sets up the IOLAN’ s network configuratio n and all serial ports to one of the following: z Console Management —Allows users on the network to co nnect to a serial device that is connected to a serial port on the IOLAN. z T ruePort (V irtual[...]

Getting S tarted 77 Setting Up the Ne twork Setting Up the Network The most important part of setting up the net work is assigning an IP address to the IOLAN, whether this is a static IP address or enabling a DHCP/BOOTP-assi gn ed IP address. Y ou shou ld also assign a name to the IOLAN, to make it easier to recognize. This section deals primarily [...]

Getting S tarted 78 Setting Up the Ne twork Using WebManager T o use the W ebManager as your co nfigurator , you must first assign an IP address to the IOLAN . Y ou can use the Easy Config W izard to assign an IP a ddress to the IOLAN or any of the other methods described in this section. Once the IP address is assigned to the IOLAN, simply ty pe t[...]

Getting S tarted 79 Setting Up the Ne twork Using a Direct Serial Conne ction to Enable BOOTP/DHCP If you are using BOOTP , you need to add an entry in the BOOTP server for the IOLAN that associates the MAC address (found on the back of the IOL AN) and the IP address that you want to assign to the IOLAN. After you have made the MA C address/IP addr[...]

Getting S tarted 80 Setting Up the Ne twork Using ARP-Ping You can use the ARP-Ping (Address Resolu tion Protoc ol) me thod to temporarily assi gn an IP address and connect to your IOLAN to assign a permanent IP address. T o use ARP-Ping to temporarily assign an IP address: 1. From a local UNIX/Linux host, type the following at the system command s[...]

Getting S tarted 81 Setting Up the Serial Port(s) Setting Up the Serial Port(s) The DeviceManager and W ebManager ha ve the following serial port profiles that will simplify serial port setup: z Console Management —The Console Management profile c onfigures a serial port to provide network access to a console or administrative port. This pro file[...]

Getting S tarted 82 Setting Up the Serial Port(s) z V irtual Modem —T he V irtual Modem (Vmodem) profile conf igures a serial port to simulate a modem. When the serial devi ce connected to the IOLAN init iates a modem connection, the IOLAN starts up a TC P connection to another IOLA N configured with a V irtual Modem serial port or to a host runn[...]

Getting S tarted 83 Setting Up Users Setting Up Users When you have a user who is accessing a device connect ed to a serial port from the network or who is accessing the network from a device connected to a serial port through th e IOLAN, you can create a user account and configure the user ’ s access privile ges. Notice that there is a Default u[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 84 Using DeviceManager and W ebManager Chapter 5 5 Introduction The DeviceManager and W ebManager IOLAN managers have been designed to be very similar to use. DeviceManager is a Wi ndows ® -based application and W ebM anager is a browser-based application. Both options use the IOLAN’ s IP addres[...]

Using DeviceManager and WebManager 85 Navigating DeviceManager/WebManager Navigating DeviceManager/W ebManager The DeviceManager and W ebManager have very similar navigation methods. The left-h and side of the manager is the navigation tree and the center is the configuration area. The DeviceManager has menu and quick access buttons, whereas the W [...]

Using DeviceManager and WebManager 86 Navigating DeviceManager/WebManager We bManager The W ebManager uses a expandable/collapsible but to ns with folders and pag es for the navigati on tree. Y o u can expand the buttons to view the fold ers and pages to see the available configuration options. When you access a co nfiguration page, you can often n[...]

Using DeviceManager and WebManager 87 Using DeviceManager to Connect to the IOLAN Using DeviceManager to Connect to the IOLAN DeviceManager can connect to existi ng IOLANs or assign an IP ad dress to a new IOLAN. W henever you connect to the IOLAN through the DeviceManag er , you connect as the admin user and must supply the password for the admin [...]

Using DeviceManager and WebManager 88 Using DeviceManager to Connect to the IOLAN Assigning a T emporary IP Address to a New IOLAN Y o u can temporarily assign an IP address to the IOLAN that is connected to your local network segment, for the purpose of connecting to it and downloading a co nfiguration file (cont aining a permanent IP address). T [...]

Using DeviceManager and WebManager 89 Using DeviceManager to Connect to the IOLAN Adding/Deleting IOLANs Manually T o permanently add/delete the IOLAN to/fro m the IOLAN List , click the Add button. The following window is di splayed: T o permanently add the IOLAN to the IOLA N list, click the Add button and type in the IPv4 or IPv6 address of the [...]

Using DeviceManager and WebManager 90 Using WebManager to Connect to the IOLAN Using W ebManager to Connect to the IOLAN W ebManager can only connect to IOL ANs that already have an assign ed IP address. T o connect to the IOLAN, type the IP addr ess of the IOLAN into the Addre ss field as such: http://10.10.234.34 . Y o u will see the login screen[...]

Using DeviceManager and WebManager 91 Managing the IOLAN Opening an Existing Configuration File If you select the File , Open , a browse window is opened so you can select the configuration file you want to edit. IOLAN configuration file s saved in the DeviceManager can be in the IOLAN-native binary format ( .dme ) or as a text file ( .txt ), which[...]

IOLAN SDS/SCS/STS/MDC User’s Guide, V ersion 4.5 92 Network Settings Chapter 6 6 Introduction The Network section is used to configure the parameters that identify the IOLAN within the netw ork and how the IOLAN accesses hosts on the network. The following confi guration windows are available: z IP Settings —This window co nfigures the IOLAN’[...]

93 IP Settings IP Settings IPv4 Settings Overview The parameters in IPv4 settings are used to access the IOLAN and are how the IOLAN accesses the network. . Field Descriptions Configure the following parame ters: System Name The System Name is used for informati onal purposes by such tools as the DeviceManager and is also used in c onjunction with [...]

94 IP Settings IPv6 Settings Overview Configure IPv6 settings when the IOLAN resides in an IPv6 network. Field Descriptions Configure the appropriate parameters: Default Gateway Specify the gateway IP address that will provide general access beyond the local network. Field Format: IPv4 address Default Gateway Obtain Automatically When DHCP/BOOTP is[...]

95 IP Settings IPv6 Autoconfiguration When enabled, the IOLAN will send out a Router Solicitation message. If a Router Advertisemen t message is received, the IO LAN will config ure the IPv6 address(es) and configuration parameters based on the info rmation contained in the advertisement. If no Router Advertisement me ssage is received, the IOLAN w[...]

96 IP Settings Adding/Editing a Cu stom IPv6 Address Y ou can manually add one of the following: z The IPv6 network prefix (and the IOLAN will determ ine an IPv6 address based on the network prefix and the IOLAN MAC address). z The complete IPv6 address. Configure the following parame ters: Create a unique IPv6 address on the network When enabled, [...]

97 IP Settings Advanced Overview The Advanced tab co nfigures Active Standby (SCS and SDS8/1 6/32C models only), D NS update, IPv6 Advertising Router settings, and the Ethernet inte rface(s) hardware speed and duplex. Configure the parameters in the Advanced tab onl y if: z you have already set up Dynamic DNS with DynDNS.com z you want to enable Ac[...]

98 IP Settings Domain Pr efix (Dual Ethernet model s only) A doma in prefix to uniq uely identify th e Ethernet interface to the DNS when the IOLAN has two Ethernet interfaces. The FQDN that is sent to th e DNS will be on e of the following format s, depending on what is configured in the System Settings section on the IPv4 Settings tab: z < Ser[...]

99 IP Settings Interface 1 Hardware Speed and Duplex Define the Ethernet connect ion speed (desktop models can support up to 100 Mbps and rack mount and medical unit mod els can support up to 1000 Mbps). Data Option s: z Auto —automatically detects the Ethe rnet interface sp eed and duplex z 10 Mbps Half Duplex z 10 Mbp s Full Duplex z 100 Mbps H[...]

100 Advanced Advanced Host T a ble Overview The Host table contains the list of hosts that will be accessed by an IP address or Fully Qualified Domain Name (FQDN) from the IOLAN. This tabl e will contain a symb olic name for the host as well as its IP address or FQDN. When a host entry is required el sewhere in the configuration, the symbolic name [...]

101 Advanced Adding/Editing a Host Configure the appropriate parameters: Delete Button Deletes a ho st from the host table Host Name The name of the host. This is used only for the IOLAN configuration. Field Format: Up to 14 characters, no spaces. IP Address The host’ s IP address. Field Format: IPv4 or IPv6 address Fully Qualified Domain Name Wh[...]

102 Advanced Route List Overview Entering routes in the routing li st enables the identification of gateways to be used for accessing specific hosts or external networks from the IOLAN's local network. Functionality There are three types of routes: z Default —A route that provides genera l access beyond your local network. z Host —A route [...]

103 Advanced Adding/Editing Routes From the Rou te List tab, if you click the Add or Edit button, you will be able to add a new or edit an existing route. Configure the appropriate parameters: Ty p e Specify the type of route you want to configure. Data Option s: z Host —A route defined for accessing a specifi c host external to your local networ[...]

104 Advanced DNS/WINS Overview Y ou can configure WINS servers for PPP-client name resolution and DNS servers for PPP-client name resolution and IOLAN host name resoluti on (for example, wh en specifying Bootup file). Functionality Y ou can configure up to four DNS and four WINS servers. If y ou specified a DNS and/or W INS server on the Network , [...]

105 Advanced Editing/Adding DNS/WINS Servers Configure the parameter: RIP Overview The Routing Information Protocol (RIP) is a routin g protocol used with almost every TCP/ IP implementation. It s function is to pass routing inform ation from a router or gateway to a neighboring router(s) or gateway(s). RIP messages contain info rmation about desti[...]

106 Advanced Field Descriptions Configure the appropriate parameters: Ethernet Mode Enable/disable RIP (Routin g Information Protocol) mode for the Ethern et interface. Data Option s: z None —Disables RIP over the Ethernet interface. z Send —Sends RIP over the Ethernet interface. z Listen —Listens for RIP over the Ethernet interface. z Send a[...]

107 Advanced Dynamic DNS Overview Dynamic DNS Service provid ers enable users to access a server co nnected to the internet that has been assigned a dynamic IP address. The IOLAN product line has bu ilt-in support for the DynDNS.com service provider . Refer to www.DynDNS.com for information on setting up an account. Functionality When the IOLAN is [...]

108 Advanced Account Settings Enter the information about your DynDNS.com account so the IOLAN can communicate IP address updates. These settings are global an d apply to all Dynamic DNS setti ngs. Configure the appropriate parameters: User Name Specify the user name used to access the account set up on the DynDNS.org server . Password Specify the [...]

109 Advanced Cipher Suite Field Descriptions The SSL/TLS cipher suite is used to encrypt data between the IOLA N and the client. Y ou can specify up to five cipher groups. The following buttons are available: Va l i d a t e P e e r Certificate Enables/disables peer validation betw een the DynDNS.org server and the IOLAN. This may be desirable, sinc[...]

11 0 Advanced Adding/Editing a Cipher Suite T o see a list of valid cipher suite combinations, see Ap pendix B, SSL/TLS Ciphers . Configure the following parame ters: Encryption Select the type of encryption that will be used for the SSL connection. Data Option s: z Any—W i ll use the first encryption format that can be negotiated. z AES z 3DES z[...]

111 Advanced V alid ation Criteria Field Descriptions If you choose to co nfigure validation criteria, t h e information in the peer SSL/TLS certificate must match exactly the information configu red in this window in order to pass peer authentication and create a valid SSL/TLS connection. Configure the following parame ters: HMAC Select the key-ha[...]

11 2 Advanced IPv6 T unnels Overview IPv6 tunnels transport IPv6 data packets from one IPv6 netwo rk to another IPv6 network over an IPv4 network. In addition to creating the IPv6 tunnel, you mu st also create the route that will transport the data packet s through the IPv4 network in the Route List (see Route List for more information). Field Desc[...]

11 3 Advanced Adding/Editing an IPv6 T unnel When you add/edit an IP v6 tunnel, you are determining how an IPv6 message wi ll reach an IPv6 device through an IPv4 network. Configure the following parame ters: Name The name of the IPv6 tunnel. Field Format: Maximum 16 alpha numeric characters Default: ipv6_tunnel1 Mode The method or protocol that is[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 1 14 Configuring Serial Port s Chapter 7 7 Introduction The Serial section is used to configur e t he serial ports on your IOLAN. The following configuratio n windows are available: z Serial Ports —Configures the type of connectio n that the serial port is being used for . This is accomplished b[...]

11 5 Serial Ports Editing a Serial Port In the Serial Port Settings window , click on a serial port and then click the Edit button , the following w indow is displayed:[...]

11 6 Serial Ports Click the Change Profile b utton to select a different serial port profile if you don’t want the displayed profile: As you select the different serial port profiles, a s hort description and a picture representin g a typical application of the profile is displayed. When yo u ha ve selected the appropriat e profile for the serial[...]

11 7 Serial Port Profiles Resetting a Serial Port When you change a serial port’ s confi guration, you can down load the configuratio n file to the IOLAN and then reset a specific se rial port(s) to see how you cha nge affects the serial port’ s behavior . T o reset a serial port, select To o l s , Reset , Serial Port(s) . Serial Port Profiles [...]

11 8 Serial Port Profiles Hardware T ab Field Descriptions The Hardware tab configures all the serial port hard ware connection information. The window below shows an SDS1 model; your Hardwa re tab might display a subset of the parameters described , depending on the IOLAN mo del and supported hardware. Configure the following parame ters: Serial I[...]

11 9 Serial Port Profiles Duplex Used with a EIA-485 serial interface, specify whether the serial port is Full Duplex (communication both ways at the same time) or Half Duplex (communication in one direction at a time). Default: Full TX Driver Control Used with a EIA-485 serial interface, if your application supports RTS (Request T o Send), select [...]

120 Serial Port Profiles Email Alert T ab Field Descriptions Email notification can be set at the Server and/or serial port levels. Y ou can set unique email notifications for each serial port because the person who administ ers the IOLAN mig ht not be the same person who administers the serial device(s) attached to th e IOLAN port. Th erefore, ema[...]

121 Serial Port Profiles Packet Forwarding T a b Field Descriptions The Packet Forwar ding tab can b e used to control/define how and when serial port data packets are sent from the IOLAN to the network . Configure the following parame ters: From This field can contain an email address that might identify the IOLAN name or some other value. Reply T[...]

122 Serial Port Profiles Custom Packet Forwarding This option allows you to define the packet forwarding rules based on the packet definition or the frame definition. Default: Disabled Packet Definition When enabled, th is group of parameters allows you to set a variety of packet definition option s. The first criteria that is met causes the packet[...]

123 Serial Port Profiles Tr a n s m i t S O F Character(s) When enabled, the SOF1 or SOF1/SOF2 characters will be transmitted with the frame. If not enabled, the SOF1 or SOF1/SOF2 character s will be stripped from the transmission. Default: Disabled EOF1 Character Specifies the End of Frame character, whic h defines when the frame is ready to be tr[...]

124 Serial Port Profiles SSL/TLS Settings T a b Field Descriptions Y o u can create an encrypted connection us ing SSL/TLS for the follow ing profiles: Tr u e P o r t , TCP Sockets , Te r m i n a l (the user ’ s Service must be se t to SSL_Raw ), Serial T u nneling , Virtu al Modem , and Modbus . When you enable this feature, it will automaticall[...]

125 Serial Port Profiles Cipher Suite Field Descriptions The SSL/TLS cipher suite is used to encrypt data between the IOLA N and the client. Y ou can specify up to five cipher groups. The following buttons are available on this win dow: V alidation Criteria Button Click this button to create peer certificat e validation criteria that must be met fo[...]

126 Serial Port Profiles Adding/Editing a Cipher Suite T o see a list of valid cipher suite combinations, see Ap pendix B, SSL/TLS Ciphers . Configure the following parame ters: Encryption Select the type of encryption that will be used for the SSL connection. Data Option s: z Any—W i ll use the first encryption format that can be negotiated. z A[...]

127 Serial Port Profiles V alid ation Criteria Field Descriptions If you choose to co nfigure validation criteria, t h e information in the peer SSL/TLS certificate must match exactly the information configu red in this window in order to pass peer authentication and create a valid SSL/TLS connection. Configure the following parame ters: HMAC Selec[...]

128 Serial Port Profiles Common Name An entry for common name; for exam ple, the host name or fully qualified domain name. This field is case sensitiv e in order to successfully match the information in the p eer SSL/TLS certificate. Data Option s: Maximum 64 characters Email An entry for an email address; for ex ample, acct@anycompany .com. This f[...]

129 Serial Port Profiles Console Management Profile Overview The Console Management profile provides access thr ough the network to a console or administrative port of a server or router attached to the IOLAN’ s serial port. This profile configures the IO LAN’ s serial port to set up a TCP socket that will list en for a T elnet or SSH co nnecti[...]

130 Serial Port Profiles Advanced T ab Field Descriptions The Console Manage ment Advanced tab configures serial port options that may be required by certain applications. Configure the following parame ters: IP Address Users can access serial devices connected to the IOLAN th rough the network by the specified Internet Address (or host na me that [...]

131 Serial Port Profiles Multisessions The number of extra netw ork connections availabl e on a serial port, in additio n to the single session that is always available. Enabling mu ltisessions will permit multiple users to m onitor the same console port. Each user monitoring the port can be assigned differ ent privileges to this port. Range: Depen[...]

132 Serial Port Profiles Session S trings Controls the sending of ASCII strings to serial devices at session st art and session termination as follows; z Send at S tart - If configured, this string will be sent to the serial device on power-up of the IOLAN, or when a kill line command is is sued on this serial port. If the "monitor DSR" o[...]

133 Serial Port Profiles T ruePort Profile Overview T rue Port is especially useful when you want to im prove data security , as you can enable an SSL/TLS connection between th e T r uePort host port and th e IOLAN. TruePort is COM Port redirector that is supplied with the IOLAN. T ruePort can be installe d as a client on a W ork station or Server [...]

134 Serial Port Profiles Configure the following parame ters: Connect to r emote system When enabled, the IOLAN initiates co mmunication to the T ruePort client. Default: Enabled Host Name The configured host that the IOLAN will connect to (must be running T r uePort). Default : None TCP Port The TCP Port that the IO LAN will use to communicate th [...]

135 Serial Port Profiles Adding/Editing Additi onal T ruePort Hosts Y o u can define a list of hosts that the serial devi ce will communicate to through T ruePort Lite or a primary/backup host. Configure the following parame ters: Allow Multiple Hosts to Connect When this option is enabled, multip le hosts can connect to a serial device that is con[...]

136 Serial Port Profiles Adding/Editing a Multihost Entry When you click the Add or Edit button, the Host Entry window appears. The hosts in the multihost list must already be defined. If you add a host that was defined with its fully qualified domai n name (FQDN), it must be resolvable by your configu red DNS server . C Advanced T ab Field Descrip[...]

137 Serial Port Profiles Configure the following parame ters: Signals high when... This option has the following impact based on the state of the TruePort connection: z Tr u e P o r t L i t e M o d e —When enabled, the EIA-232 signals remain active before, during, and after the T ruePort co nnection is established. When disabled, the EIA-232 si g[...]

138 Serial Port Profiles Enable Data Logging When enabled, serial data will be buff ered if the TCP connection is lost. When the TCP connection is re-established, the buffered serial data will be sent to its destination. If us ing the T rueport profil e, data logging is onl y supported in Lite Mode. The minimum d ata buf fer size for all mo dels is[...]

139 Serial Port Profiles Dial Retry The number of times the IO LAN will attempt to re-establish a connection wit h a remote mod em. Range: 0-99 Default: 2 Modem The name of the predefined modem that is used on this line. Phone The phone number to use when Dial Out is enabled.[...]

140 Serial Port Profiles TCP Socket s Profile Overview The TCP Socket profile allows for a serial de vice to communicate over a TCP network. The TCP connection can be initiated from a host on the netw ork and/or a serial device. This is typically used with an application on a W orkstation or Server th at communicates to a device using a specific TC[...]

141 Serial Port Profiles TCP Port The TCP port th at the IOLAN will use to listen for incoming connectio ns. Default: 10000 plus the serial port number , so serial port 5 would have a default of 10005 Allow Multiple Hosts to Connect When this option is enab led, multiple host s can connect to the serial device that is connected to this serial port.[...]

142 Serial Port Profiles Adding/Editing Additional Host s Y o u can define a list of hosts that the serial de vice will communicate to or a primary/backup h ost. Configure the following parame ters: Adding/Editing a Multihost Entry When you click the Add or Edit button, the Host Entry window appears. The hosts in the multihost list must already be [...]

143 Serial Port Profiles TCP Port Specify the TCP port that the IOLA N will use to communicate to the Host . Default: 0[...]

144 Serial Port Profiles Advanced Tab Field Descriptions Configure the following parame ters: Authenticate User Enables/disab les login/password authenticatio n for users connecting from the network. Default: Disabled Enable TCP Keepalive Enables a per-connection TCP keepalive feature. After the configured number of seconds, the connection will sen[...]

145 Serial Port Profiles Idle Timeout Use this timer to close a connecti on because of inactivity . When the Idle Tim eo ut expires, the IOLAN wi ll end the connection. Range: 0-4294967 seconds (about 49 days) Default: 0 seconds so the port will never timeout Session T imeout Use this timer to forcibly close th e session/connection when the Session[...]

146 Serial Port Profiles UDP Socket s Profile Overview The UDP profile configures a seri al port to send or receive da ta to/from the LAN using the UDP protocol. Functionality Y ou can use UDP profile in the following two basic m odes. The first is to send data comin g from the serial device to one or more UDP listeners on the LAN. The second is to[...]

147 Serial Port Profiles The role of each of the configurable pa rameters in an entry depends on the “ Direction” selected. When the direction is " LAN to Serial " the role of the additional parameters is as follo w; z S tart IP Address - This is the IP address of the host from which the UDP data w ill originate. If the data will orig[...]

148 Serial Port Profiles z Port - Serial data being forwarded to the LA N from the serial device will sent to this UDP port. Only data originati ng from the UDP port configured here (as well as originating from a host in the IP range defined for this entry) will be forwarde d to the serial device. Special values for " S tart IP address " [...]

149 Serial Port Profiles This entry is disabled since Direction is set to Disabled . G eneral T ab Field Descriptions Configure the following parame ters: Listen for connections on UDP port The IOLAN will listen for UDP packets on the specified port. Default: 1000+< port-number > (for example, 10001 for serial port 1) Direction The direction [...]

150 Serial Port Profiles Advanced Tab Field Descriptions Configure the following parame ters: Port The UDP port to use. Default: 0 (zero) Session S trings Controls the sending of ASCII strings to serial devices at session st art as follows; z Send at S tart —If configured, this string will be sent to the serial device on power-up of the IOLAN or [...]

151 Serial Port Profiles T e rminal Profile Overview The T erminal profile allows network access from a terminal connected to th e IOLAN’ s serial port. This profile is used to acce ss pre-defined hosts on the network from the terminal. Functionality This profile can be configured for users: z who must be authenticated by the IOLAN firs t and the[...]

152 Serial Port Profiles T erminal T ype Specifies the type of terminal connected to the line. Data Option s: z Dumb z WYSE60 z VT100 z ANSI z TVI925 z IBM3151 TE z VT320 (specifically supporting VT320-7) z HP700 (specifically supporting HP700/ 44) z T erm1, T erm2, T erm3 (user-defined terminals) Default: Dumb Require Login When users access the I[...]

153 Serial Port Profiles Advanced T ab Field Descriptions Configure the following parame ters: When any data is received Initiates a connection to th e specified host when any data is received on the serial port. Default: Disabled When < hexadecimal value > is received Initiates a connection to th e specified host only when the specified char[...]

154 Serial Port Profiles Hotkey Prefix The prefix that a user types to lock a serial port or redraw the Menu. Data Range: z ^a l —(Lowercase L) Locks the serial port until the u ser unlocks it. The user is prompted for a password (any password , excluding spaces) an d locks the serial port. Next , the user must ret ype the password to unlock the [...]

155 Serial Port Profiles User Service Settings Login Settings These settings apply to users who are ac cessing the network from a term inal connected to the IOLAN’ s serial port. The T elnet, Rlogin, SSH, SLIP , PPP settings take effect when the connection method is defined in the user ’ s profile (or are passed to the IOLAN by a RADIUS or T AC[...]

156 Serial Port Profiles Rlogin Settings The Rlogin settings appl y when the User Service is set to Rlogin or the T erminal profile has Require Login selected and specifies an Rlogin connection to a host. Configure the following parameter: Enable Local Echo T oggles between local echo of entered characters and suppr essing local echo. Local echo is[...]

157 Serial Port Profiles When Connect to re mote system is selected, the Rlogin window requires the name of the user who is connecting to the host. Configure the following parame ters: SSH Settings The SSH settings apply when the User Service is set to SSH or the T erminal profile specifies an SSH connection to a h ost. Configure the following para[...]

158 Serial Port Profiles SLIP Settings The SLIP settings apply when the Use r Service is set to SLIP . S trict Host Key Checking When enabled, a host public key (for each host you wish to ssh to) must be downloaded into the IOLAN. Default: Enabled Auto Login When enabled, creates an au tomati c SSH login, using th e Name and Password values. Defaul[...]

159 Serial Port Profiles Configure the following parame ters: Local IP Address The IPv4 address of the IOLAN end of th e SLIP link. For routing to w ork you must enter an IP address in this field. C hoose an address that is part of th e same network or subnetwork as the remote en d; for example, if the remote end is address 192.101.34.146, your loc[...]

160 Serial Port Profiles VJ Compr ession When enabled, V an Jacobson compression is used on this link. When enabled, C-SLIP , or compressed SLIP , is used. When disabled, plain SLIP is used. C- SLIP greatly improves the performance of interactive traffic, such as T elnet or Rlogin. If your user is authenticated by the IOLAN, this VJ compression val[...]

161 Serial Port Profiles PPP Settings The PPP settings apply when the User Service i s set to PPP . Configure the following parame ters: IPv4 Local IP Address The IPV4 IP address of the IOLAN end of the PPP link. For routing to work, you must enter a local IP a ddress. Choose an address that is part of the same network or subnetwork as the remote e[...]

162 Serial Port Profiles IPv6 Remote Interface Identifier The remote IPv6 interface identifier of th e remote end of the PPP link. Choose an address that is part of the same ne twork or subnetwork as the IOLAN. If you enable Negotiate IP Address Automatically , the IOLAN will ignore the remote IP address value you enter here and will allow the remo[...]

163 Serial Port Profiles User Complete this field only if you have specified PA P or CHAP (security protocols) in the Authentication field, and z you wish to d edicate this line to a single remote user , who will be authenticated by the IOLAN, or z you are using the IOLAN as a router (back-to-back with another IOLAN). When Connect is set to Dial Ou[...]

164 Serial Port Profiles Remote Password Complete this field only if you have specified PA P or CHAP (security protocols) in the Security field, and z you wish to dedicate this serial port to a single remote user , and th is user will be authenticat ed by the IOLAN, or z you are using the IOLAN as a router (back-to-b ack with another IOLAN) Remote [...]

165 Serial Port Profiles Authentication Time o ut The timeout, in minutes, dur ing which successful P AP or CHAP authentication must take place (when PA P or CHAP are specified). If th e timer expires before the remote end has been authenticated su ccessfully , the link will be terminated. Range : 1-255 Default: 1 minute Roaming Callback A user can[...]

166 Serial Port Profiles Dynamic DNS Button Launches the Dynamic DNS window when IP Address Negotiation is enabled, which can then update the DNS server wi th the IP address that is negotiated and accepted for the PPP session.[...]

167 Serial Port Profiles Printer Profile Overview The Printer profile allows for the serial port to be configured to support a serial printer device that can be access by the network. General T ab Field Descriptions Configure the following parameter: Map CR to CR/LF Defines th e default end-of-line t erminat or as CR/LF (ASCII carriage-return line-[...]

168 Serial Port Profiles Advanced T ab Field Descriptions Configure the following parameter: Session S trings Controls the sending of ASCII strings to serial device at session start as follows; z Send at S tart —If configured, this string will be sent to the serial device on power-up of the IOLAN, or when a kill line command is issued on this ser[...]

169 Serial Port Profiles Serial T u nneling Profile Overview The Serial T unneling profile allows two IOLANs to be connected back-to-b ack over the network to establish a virtual link between two serial ports based on RFC 2217. Functionality The serial device that initiates the connection is the Tu n n e l Client and the destination is the Tu n n e[...]

170 Serial Port Profiles General T ab Field Descriptions Configure the following parame ters: Act As T unnel Server The IOLAN will listen for an incoming connection request on the specified Internet Address on the specified TCP Port . Default: Enabled TCP Port The TCP port that the IO LAN will listen for incoming conn ection on. Default: 10000+seri[...]

171 Serial Port Profiles Advanced T ab Field Descriptions Configure the following parame ters: Break Length When the IOLAN receives a command from its peer to issue a break signal, this paramters defi nes the length of time th e break condition wi ll be asserted on the serial port Default: 1000ms (1 second) Delay After Break This parameter defines [...]

172 Serial Port Profiles V irtual Modem Profile Overview Vir t ua l M o de m (Vmodem) is a feature of the IOLAN th at provides a modem interface to a serial device. It will respond to A T comm ands and provide signal s in the same way that a serially attached modem would. This feature is typically used when you are replacing dial-up modems with the[...]

173 Serial Port Profiles Listen on TCP Port The IO LAN TCP port that the IOLAN will listen on. Default: 10000 + serial port number (for example, serial port 12 defaults to 10012) Connect Automatically At St a r t u p When enabled, automatical ly establishes the virt ual modem connection when the serial port becomes active. Default: Enabled Host Nam[...]

174 Serial Port Profiles Advanced T ab Field Descriptions Configure the following parame ters: Echo characters in command mode When enabled, echoes back characters that are typed in (equivalent to A TE0/A TE1 commands). Default: Disabled DTR Signal Always On Specify this option to make the DTR signal always act as a DTR signal. Default: Enabled DTR[...]

175 Serial Port Profiles Additional modem initialization Y ou can specify additional virtual mode m commands that will affect h ow virtual modem starts. The following comm ands are supported: A TQn, A TVn, A TEn, +++A TH, A T A, A TI0, A TI3, A TS0, A T&Z1, A T&Sn, A T&Rn, A T&Cn, A T&F , A TS2, A TS12, A TO (A TD with no phone [...]

176 Serial Port Profiles Phone Number to Host Mapping If your modem application dials using a phone nu mber , you can add an entry in the Pho ne Number to Host Mapping window that can be accessed by all se rial ports configured as V irtual Modem. Y ou need to enter the phone number sent by your modem app lication and the IOLAN IP address and TCP Po[...]

177 Serial Port Profiles Control Signal I/O Profile Overview The Control Signal I/ O profile is onl y available on IOLAN I/O models. When you configure a serial port for Control Signal I/O , you are using the DSR, DCD, CTS, DTR, and R TS serial pins for I/O channel Digital Input (DSR, DCD, and CTS) or Digital Outp ut (DTR and R TS). Functionality T[...]

178 Serial Port Profiles Input Signal Field Descriptions See Digital I/O Extension for information about the I/O Extension tab. Configure the following parame ters: Description Provide a description of the channel, making it easier to identify . Data Option s: Maximum 20 characters, including spaces Latch Latches (remembers) the activity transition[...]

179 Serial Port Profiles Output Signal Fi eld Descriptions See Digital I/O Extension for information about the I/O Extension tab. Configure the following parame ters: Email When enabled, sends an email alert to an email account(s ) set up in the System settings when an alarm is triggered or cleared. The email alert data includes the severity level [...]

180 Serial Port Profiles Modbus Gateway Profile Overview Each serial port can be configured as either a Modbus Master gateway or a Modbus Slave gateway , depending on your configuration and req uir ements. If your mo del supports I/O, see Modbus I/ O Access for more information on using the Modbus protocol to access I/O data. Functionality The Modb[...]

181 Serial Port Profiles Configure the following parame ters: Advanced Field Descriptions Configure the following parame ters: Mode Specify how the Modbus Gateway is defined on the serial port. Data Optio ns: z Modbus Master —T ypically , the Modbus Master is connected to the Serial Port and is communicating to Modbus Slaves on the network. z Mod[...]

182 Serial Port Profiles Modbus Slave IP Setti ngs Field Descriptions This window is used to configure the Modbus Slaves. Idle Timeout Use this timer to close a connecti on because of inactivity . When the Idle Tim eo ut expires, the IOLAN wi ll end the connection. Range: 0-4294967 seconds (about 49 days) Default: 0 (zero), which does not timeout, [...]

183 Serial Port Profiles The following buttons are available: Add Button Adds an entry into the Modbus Destination Slave IP Sett ings table. Edit Button Edits an entry in the Modbus Des tination Slave IP Settings table. Delete Button Deletes an entry from the Modbus Destination Slave IP Settings table.[...]

184 Serial Port Profiles Adding/Editing Modbus Slave IP Settings Configure the following parame ters: UID S tart Whe n Destination is set to Host and you have sequen tial Modbus Slave IP addresses (for example, 10.10.10.1, 10.10.10 .2, 10.10.10.3, etc.), you can specify a UID range (not supported with IPv6 addresses) and the IOLAN will automaticall[...]

185 Serial Port Profiles Modbus Slave Advanced Settings Field Descriptions Configure the following parame ters: End IP Addr ess Displays the ending IP address of the TCP/Ethernet Modbus Slaves, based on the Start IP address and the UID rang e (not supported for IPv6 addresses). Field Format: IPv4 address Protocol Specify the protocol that is used b[...]

186 Serial Port Profiles Embedded When this option is selected, the address of the slave Modbus devi ce is embedded in the message header . Default: Enabled Remapped Used for single device/port operation . Older Modbus devices may not inclu de a UID in their transmission h eader . When this option is selected, you can specify the UID that will be i[...]

187 Serial Port Profiles Power Management Profile Overview The Power Management profile appli es when there is a Perle R emote Power Switch (RPS) connected to the serial port. This pro file is used to configure the RPS. See RPS Control for information on how to actively management the RPS. Functionality The Power Management profile configures a ser[...]

188 Serial Port Profiles Configure the following parame ters: Editing Power Management Plug Settings Field Descriptions Configure the following parame ters: Session S trings Controls the sending of ASCII strings to serial devices at session start as follows; z Send at S tart —If configured, this string will be sent to the serial device on power-u[...]

189 Serial Port Profiles Monitoring T ab Field Descriptions Configure the following parame ters: Monitor Host This is the host which is to be monitored via PING s. If the host stops responding to the PINGs, the power on t his plug will be cycled in an attempt to recover the host. Default: None Ping z Interval -Specify the frequency ( in minutes ) a[...]

190 Serial Port Profiles Wa it B e f o r e Cycling Power Enables a d elay before cycling the power on the plug. This delay allows for th e sending of notification(s) of the impending po wer cycle. Notifications can be sent to a user on the console port o f the host being monitored and/or v ia email. This gives system administrato rs the time to tak[...]

191 Serial Port Profiles Remote Access (PPP) Profile Overview The Remote Access (PPP) profile configures a serial port to allow a remote user to establish a PPP connection to the IOLAN’ s serial port . This is typically used with a modem for dial -in or dial-out access to the network or a wireless W AN card. Functionality There are two options fo[...]

192 Serial Port Profiles General T ab Field Descriptions Configure the following parame ters: IPv4 Local IP Address The IPV4 IP address of the IOLAN end of the PPP link. For routing to work, you must enter a local IP a ddress. Choose an address that is part of the same network or subnetwork as the remote en d; for example, if the remote end is addr[...]

193 Serial Port Profiles Dynamic DNS Field Descriptions Dynamic DNS can be enabled and conf igured on a serial port level. If you enable Dynamic DNS and leave the parameters blank, the Dynamic DNS system parameters will be used ( Network , Advanced , Dynamic DNS tab). Configure the following parame ters: IPv6 Local Interface Identifier The local IP[...]

194 Serial Port Profiles Authentication T ab Field Descriptions Configure the following parame ters: Password Specify the password used to access the DNS server . Account Settings Button Click this button to configure th e Dynamic DNS DynDNS.org account informatio n. See Account Settings for inform ation on how to configure the Account Settings win[...]

195 Serial Port Profiles User Complete this field only if you have specified PA P or CHAP (security protocols) in the Authentication field, and z you wish to d edicate this line to a single remote user , who will be authenticated by the IOLAN, or z you are using the IOLAN as a router (back-to-back with another IOLAN). When Connect is set to Dial Ou[...]

196 Serial Port Profiles Remote Password Complete this field only if you have specified PA P or CHAP (security protocols) in the Security field, and z you wish to dedicate this serial port to a single remote user , and th is user will be authenticat ed by the IOLAN, or z you are using the IOLAN as a router (back-to-b ack with another IOLAN) Remote [...]

197 Serial Port Profiles Advanced T ab Field Descriptions Configure the following parame ters: Routing Determines the routing mode (RIP , Routing Information Protocol) used on the PPP interface.This is the same function as the Framed-Routing attribu te for RADIUS authenticated users. Data Optio ns z None —Disables RIP over the PPP interface. z Se[...]

198 Serial Port Profiles Configure Request Time o ut The maximum time, in seconds, that LCP (Link Control Protocol) will wait before it considers a configure request packet to have been lost. Range : 1-255 Default: 3 seconds Configure Request Retries The maximum num b er of time s a configure request packet will be re-sent before the link is te rmi[...]

199 Serial Port Profiles Dial In If the device is remote and will be dialing in via modem or ISDN T A, enable this para meter . Default: Disabled Dial Out If you want the modem to dial a number when the serial port is started, enable this para meter . Default: Disabled Dial In/Out Enable this option when you want the seri al port to do either of th[...]

200 Serial Port Profiles Remote Access (SLIP) Profile Overview The Remote Access (SLIP) profile configures a serial port to al low a remote user t o establish a SLIP connection to the IOLAN’ s serial port . This is typically used with a modem for dial -in or dial-out access to the network. General T ab Field Descriptions Configure the following p[...]

201 Serial Port Profiles Advanced T ab Field Descriptions Configure the following parame ters: MTU The Maximum T ransmission Unit (MTU) parameter restricts the size of individual SLIP packets being sent by th e IOLAN. Enter a value between 256 and 1006 bytes; for example, 512. Th e default value is 256 . If your user is authenticated by the IOLAN, [...]

202 Serial Port Profiles Session S trings Controls the sending of ASCII strings to serial device at session start as follows; z Send at S tart —If configured, this string will be sent to the serial device on power-up of the IOLAN, or when a kill line command is issued on this serial port. If the "monitor DSR" or "monitor DCD" [...]

203 Serial Port Profiles Custom Application Profile Overview The Custom App/Plugin profile is used in conjunction with custom applicatio ns created for the IOLAN by using the Perle SDK. See the SDK Pr ogrammer ’ s Guide (the SDK and guide are accessible via a request form located on the Perle website a t www.perle.com/supportfiles/SDK_Reque st.sh[...]

204 Serial Port Profiles Session S trings Controls the sending of ASCII strings to serial device at session start as follows; z Send at S tart —If configured, this string will be sent to the serial device on power-up of the IOLAN, or when a kill line command is issued on this serial port. If the "monitor DSR" or "monitor DCD" [...]

205 Port Buffering Port Buffering Overview The Port Buffering feature allows data activity on th e IOLAN’ s serial ports to be held in memory for viewing at a later st age with out affecting the normal operation of the serial ports. Functionality Port Buffering is required by system administrators to capture important informat ion from devices at[...]

206 Port Buffering R emote Port Buffers The Remote Port Buffering fe ature allows data recei ved from serial ports on th e IOLAN to be sent to a remote server on the LAN. The re mote server , supporting Network File System (NFS), allows administrators to capture and analyze data and messages from the serial device connected to the IOLAN serial port[...]

207 Port Buffering Enable Remote (NFS) Buffering Enables/disables port buffering on a re mote system. When you enable this option, you have the ability to save the buf fered data to a file(s) (one file is created for each serial port) and/or send it to the Sy slog host for viewing on the Syslog host’ s monitor . Default: Disabled NFS Host The NFS[...]

208 Advanced Advanced Advanced Serial Settings T a b Overview Advanced serial por t settings apply to all serial ports. Field Descriptions Configure the following parame ters: Process Break Signals Enables/disables prop rietary inband SS H break signal processing, the T elnet break signal, and the out-of-band break signals for TruePort. Default : D[...]

209 Advanced Data Logging Buffer Size The minimum d ata buf fer size for all mo dels is 1 KB. The maximu m data buffer size is 2000 KB for DS1/ TS2/STS8 D, all other mo dels are 4000 KB. If the data buffer is filled, incoming serial data will overwrite the old est data. Va l u e s : 1-2000 KB (DS1 /TS1/STS8D) - Default 4 KB Va l u e s : 1-4000 KB ([...]

210 Advanced Modems T ab Overview You need to configure a modem if there is a mode m connect ed to the IOLAN. If your IOLAN mo del contains an internal modem or a PCI slot (SCS models) for a modem card , a permanent modem string called internal_m odem or IOLAN modem , respectively , exists permanently in your configurat ion. Functionality Modems ar[...]

21 1 Advanced Tr u e P o r t B a u d R a t e T a b Overview The T ruePort utility acts as a COM port redirector that allows applicat ions to talk to serial devices across a network as though the serial devices were directly attached to th e server . For IOLAN I/O models, you can also monitor and control I/ O through the T ruePort client . Functiona[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 212 Configuring Users Chapter 8 8 Introduction Y ou can configure up to four users in the IOLAN’ s local user database for all DS, SDS, and STS 1-port to 4-port desktop models, in addition to the admin user . Y ou can configur e up to 48 use rs in the IOLAN’ s local user database for all STS, [...]

213 User Settings User Settings Overview The Users window allows y ou to add, edit, and delete users from the IOLAN. Functionality The Users window displays the users who have b een configured. Y ou can add users, edit existing users, or delete us ers from this window . Y ou cannot delete the pre configured admin user . See Adding/Editing Users for[...]

214 Adding/Editing Users Adding/Editing Users General T a b Overview The General tab configures the basic user information. Functionality Y ou must, minimall y , provide a User Name and Level for a user . Field Descriptions Configure the following parame ters: User Name The name of the user . Restrictions: Do not use spaces. Password The password t[...]

215 Adding/Editing Users Level The access that a user is allowed. Data Option s: z Admin —The admin level user has total access to the IOLAN. Y ou can create more than one admin user acco unt but we recommend that y ou only have one. They can monitor and conf igure the IOLAN. Users configured with this level can acces s the unit either via se ria[...]

216 Adding/Editing Users Services T a b Overview The Services tab configures the connection parameters for a user . Any connection parameters configured in this window will overri de the serial port connection parameters. Functionality When a T erminal profile is set for th e serial port and Require Login has been selected, user ’ s accessing the[...]

217 Adding/Editing Users TCP Port When the User Service is Te l n e t , this is the target port number . The default value will change based on the type of Service selected; the most common known port numbers are used as the default values. IPv4 Address Used for User Service PPP or SLIP , sets the IP address of the remote user . Enter the address i[...]

218 Adding/Editing Users Advanced T a b Overview The Advanced tab is used to configure those parameters th at control the user session; this includes session length, language, the hotkey used for swit ching between sessions, acces s to clustered ports, etc. Field Descriptions Configure the following parame ters: Enable VJ Compression Used for User [...]

219 Adding/Editing Users Session T imeout The amount of tim e, in seconds, before the IOLAN forcibly closes a user ’ s session (connection). The default value is 0 (zero), meaning that the session timer will not expire (the session is open perm anently , or until the user logs out). The Use r Session Time out will override all other Serial Port S[...]

220 Adding/Editing Users Sessions T ab Overview The Sessions tab is used to configure specific connections for users who are accessing the network through the IOLAN’ s serial port. Functionality Users who have successfully logged into the IOLAN ( User Service set to DS prompt ) can start up to four login sessions on network hosts. These users sta[...]

221 Adding/Editing Users Session 1, 2, 3, 4 Y ou can con figure up to four (4) session s that the user can select from to connect to a specific host after that user has successfully logged into the IOLAN (used only on serial ports configured for the T erminal profile). Data Option s: z None —No connection is configured for this session. z Te l n [...]

222 Adding/Editing Users Serial Port Access T ab Overview The Serial Port Access tab controls the user’ s read/write access on any given IOLAN serial port. This pertains to users that are connecting from the network to a serial over a Console Management type session. This can be useful wh en you have m ultiple users connecting to the same serial [...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.1 223 Introduction The Security group includes the following con figuration options: z Authentication —When a serial port is configured for the Console Management or TCP Sockets profile, the user can be authenticated either locally in the IOLAN user profile or externally . This option configur es [...]

224 Authentication connection. Therefore, an y parameters configured by RADIUS or T ACACS+ will override the same parameters configured in the IOLAN. See Appendix A, RADIUS and T ACACS+ for more information. Authentication In the Authentication windo w , you can select up to two methods of authentication mad e up of external authentication options [...]

225 Authentication Local Overview When Local authentication is selected, the user must either be configur ed in the IOLAN’ s User List or you must en able Guest users. Field Descriptions Configure the following parame ters: Enable Guest Mode Allow users who are not defined in the Users dat abase to log into the IOLAN with any user ID and the spec[...]

226 Authentication RADIUS Overview RADIUS is an authentication method that the IOLA N supports that can send back User information; see RADIUS on page 363 for more informati on on the User parameters that can be sent back by RADIUS. Ge neral Field Descriptions Configure the following parame ters: First Authentication Host Name of the prim ary RADIU[...]

227 Authentication Attributes Field Descriptions Configure the following parame ters: Account Port The port that the RADIUS host listens to for accounting requests. Default: 1813 Enable Accounting Authenticator Enables/disables whether or not the IOLAN validates the RADIUS accounting response. Default: Enabled Retry The number of times the IOLAN tr[...]

228 Authentication Kerberos Field Descriptions Configure the following parame ters: Use the following NAS-IP-Address When enabled, the IOLAN will send the specified IPv4 address to the RADIUS server . Default: Disabled IP Address The IPv4 address that the IOLAN will send to the RADIUS server . Default: 0.0.0.0 Automatically determine NAS- IPv6-Addr[...]

229 Authentication L DAP/Microsof t Active Directory Overview LDAP (Light weight Direct ory Access Protocol) i s an applicati on protocol for queryi ng and modifying directory services running over TCP/IP . It is also used as a method of authenticating users. Microsoft Active Directory is an L DAP like directory service. It can be used for authenti[...]

230 Authentication If you are using LDAP or Microsoft Active Directo ry with TLS , you need to do wnload a CA list to the IOLAN that includ es the certificate authority (CA) that si gned the LDAP certi ficate on the LDAP host by selecting To o l s , Ad vanced , Keys and Certificates . See Keys and Certificates for more information on the LDAP certi[...]

231 Authentication TA CACS+ Overview T ACACS+ is an authentication meth od that the IOLAN supports that can send back User information; see Appendix A, RADIUS and T ACACS+ for more information on the User param eters that can be sent back by T ACACS+. Field Descriptions Configure the following parame ters: Authentication/ Authorization Primary Host[...]

232 Authentication Se curID Overview If you need to reset t h e SecurID secret, select To o l s , Res et , Reset SecurID Node Secret . Field Descriptions Configure the following parame ters: Accounting Primary Host The primary T ACACS+ host th at is used for accounting. Default: None Accounting Secondary Host The secondary T ACACS+ host that is us [...]

233 Authentication N IS Field Descriptions Configure the following parame ters: Encryption T ype The type of encrypti on that will be used for SecurID se rver comm unicatio n. Data Option s: DES, SDI Default: SDI s Legacy If you are running SecurID 3.x or 4.x, you need to run i n Le gacy Mode . If you are running SecurID 5.x or above, do not select[...]

234 SSH SSH Overview The IOLAN contains SS H Server software that you need to configure if the IOLAN is going to be accessed via SSH. If you specify more than one Authen tication method and/or Cipher , the IOL AN will negotiate with the client and use the first au thentication me thod and ciph er that is compatible with both systems. Functionality [...]

235 SSH Users Passing Through the IO LAN Using SSH (Dir/Sil) This scenario applies to seri al ports configured for the T erminal profile and are requ ired to login to the IOLAN. The user ’ s service is set to the SSH pr otocol, therefore, users first log into the IOLAN and then are connected to a specified host (configured for the user when User [...]

236 SSH Field Descriptions Configure the following parame ters: Note: Some combinat ions of cipher groups are not available on FIPS firmware versions. SSH-1 protocol is no t available on FIPS firmware versions. Allow SSH-1 Protocol Allows the user ’ s client to negotiat e an SSH-1 connection, in addition to SSH- 2. Default: Disabled RSA When a cl[...]

237 SSL/TLS SSL/TLS Overview When SSL/TLS is configured, data is encrypted be tween the IOLAN and the ho st/device (which must also support SSL/TLS). When you configure the SSL/TLS settings in t he System section, you are configuring the default gl obal SSL/TLS settings ; you are not configu ring an SSL/TLS server . Functionality Y o u can create a[...]

238 SSL/TLS Field Descriptions Configure the following parame ters: SSL/TLS V ersion Specify whether you want to use: z Any —The IOLAN will try a TLSv1 connectio n first. If that fails, it will try an SSLv3 connection. If that fails, it will try an SSLv2 connection. z TLSv1 —The connection will use only TLSv1. z SSLv3 —The connection will use[...]

239 SSL/TLS Cipher Suite Field Descriptions The SSL/TLS cipher suite is used to encrypt data between the IOLA N and the client. Y ou can specify up to five cipher groups. The following buttons are availabl e on the Cipher Suite window: Note: Some comb inations of cipher grou ps may not be avai lable on some fi rmware versions. Add Button Adds a cip[...]

240 SSL/TLS Adding/Editing a Cipher See Appendix B, SSL/TLS Ciphers on page 375 for a list of valid SSL/TLS ciphers. Configure the following parame ters: Encryption Select the type of encryption that will be used for the SSL connection. Data Option s: z Any—W i ll use the first encryption format that can be negotiated. z AES z 3DES z DES z ARCFOU[...]

241 SSL/TLS V alid ation Criteria Field Descriptions If you choose to co nfigure validation criteria, t h en the in formation in th e peer SSL/TLS certificate must match exact ly the inform ation configured in this window in order to pass peer authenticatio n and create a valid SSL/TLS connection. Configure the following parame ters: HMAC Select th[...]

242 VPN VPN Overview A V irtual Private Networ k (VPN) creates a secure, dedicated comm unications network tunnelled through another network. Y o u can configure the IOLAN for: z a host-to-host V irtual Private Network (VPN) connection z a host-to-network VPN connection z a network-to -netwo rk VPN connection z or host/network-to-IOLAN VPN con nect[...]

243 VPN IKE Phase 1 Proposals The following IKE Phase 1 proposals ar e suppo rted by the IOLAN VPN gateway: z Ciphers —3DES, AE S z Hashes —MD5, SHA1 z Diffie-Hellman Groups —2 (MODP1024), 5 (MODP1536), 14 (MO DP2048), 15 (MODP3072), 16 (MODP4096), 17 (MODP6144), 18 (MODP8192 ) ESP Phase 2 Proposals The following ESP Phase 2 proposals ar e su[...]

244 VPN Adding/Editing the IPsec T unnel When you click the Add button or select an IPsec tunnel and click the Edit button, the following window is di splayed: Configure the following parame ters: Name Provide a name for the IPsec VPN tunn el to make it easy to id entify . T ext Characteristics: Maximum of 16 charact ers, spaces not allowed Authent[...]

245 VPN Secr et/Remote V alidation Criteria Button Depending on the Authentication Method : Shared Secr et —Specify the text-based secret th at is used to authenticate the IPsec tunnel (case sensitive). This ap plies to all VPN tunnels (IPsec and L2TP/IPsec). X.509 Certificate —Specify the remote X.509 certi ficate validation criteria that must[...]

246 VPN Shared Secret Field Description When the Authentication Method is set to Shared Secret , you can enter a secret that applies to all VPN tunnels (both the IPsec and L2TP/IPsec protocols) to successf ully authenticate and create a valid connection. Configure the following parameter: Remote Next Hop The IP address of the router/gateway th at w[...]

247 VPN Remote V alidation Crit eria Field Descriptions When the Authentication Method is set to X.509 Certificate , you can configure the remote validation criteria. The informati on in the re mote X.509 certificate must match exactly the information configured in this window in order to successfully authenticate and create a valid connection. Con[...]

248 VPN L2TP/IPsec In order to create a VPN tunnel on Windows XP ® , you must use the L2TP/IPsec protocol. When L2TP/IPsec is enabled, the IOLAN will li sten for L2TP/IPsec VP N tunnel requests. When you enable L2TP/IPsec, you are requiri ng that all access to the IOLAN go through th e L2TP/IPsec tunnel, so y ou must configure an y exceptions firs[...]

249 VPN Exceptions Exceptions allow specific hosts or any host in a network to access the IO LAN outside of a VPN tunnel. This is especially useful when allowi ng local network hosts access to the IOLAN when VPN tunnels have been configured for remote user security . Field Descriptions The following buttons are available: Remote V alidation Criteri[...]

250 VPN Adding/Editing a VPN Exception The following parameters are available: Advanced Field Description Configure the following parameter: Delete Button Highlight an Exceptio n List entry and click the Delete button to remove the entry from the list. IP Address The IP address of the hos t that will communicate with the IOLAN outside of the VPN tu[...]

251 HTTP Tunneling HTTP Tunneling Overview A HTTP tunnel is a firewall-safe communication channel between two IOLA N’ s. HTTP tunnels can transport arbitrary TCP/IP or UDP/IP data for applications su ch as T elnet/SSH or any other TCP application and most UDP applications. Y o u can configure the IOLAN for: z a serial-to-serial HT TP tunnel conne[...]

252 HTTP Tunneling Configuring HTTP T u nnel Field Descriptions The following parameters are availa ble for configurin g a HTTP T unnel.: Name Provide a name for this tunnel. This name must match the tunnel name on the tunnel peer IOLA N DS. Connect to Provide the Host name or IP addr ess of the listening IOLAN DS. Proxy Settings If a proxy server [...]

253 HTTP Tunneling Configuring HTTP T u nnel Proxy Proxy servers are used in larger co mpanies and organizations. Ask y our network administ rator if you need to configure a Proxy server . Field Descriptions . The following parameters are av ailable for configuring the Proxy specific parameters. Use HTTP Proxy Enables the Proxy paramete rs. Host/IP[...]

254 HTTP Tunneling Configuring HTTP T u nnel Proxy Advanced Field Descriptions Configuring HTTP T u nnel Destination The following buttons are available. Keepalive Interval The number of seconds between sendin g keepalives for HTTP connections. Keepalives are used to prevent idle conn ections from closing. In most cases this value does not need to [...]

255 HTTP Tunneling Field Descriptions Configure the following parameters if host access via a tunnel is needed. Each entry in the list box defines the application a nd port numbers an external client will use to access the destination host or application. Edit Button Highlight an HTTP Tunnel Destination entry and click the Edit button to change the[...]

256 HTTP Tunneling Destination Port The port number used by the destination host or destination application. Local IP Al ias Users can access the HTTP tunnel through this IP address. Typically this field is only needed if the IOLAN has a listener on the same local TCP port. If not en- tered, the IP address of the IOLAN is used. Limited access to at[...]

257 Services Services Overview Services are either daemon or clie nt processes that run on the IOLAN. Y ou can disable any of the services for security reasons. Functionality If you disable any of the daem ons, it can af fect how the IOLAN can be used or accessed. For example, if you disable W ebManager (HTTPS and H TTP) services, you will not be a[...]

258 Services DeviceManager DeviceManager daemon process in the IOLA N. If you disable this service, you will not be able to connect to the IO LAN with the DeviceManager application. The DeviceManager listens on port 33812 and sends on port 3381 3. Default: Enabled W ebManager (HTTP) W ebManager daemon process in the IOLAN listening on port 80. Defa[...]

259 Keys and Cert ificates Keys and Certificates When you are using SSH, SSL/TLS, L DAP/Microsoft Active Directory , or HTTPS, you will need to install keys and/or certificates or get server keys in order to make those op tions work properly . All certificates need to be created an d all keys need to be generated outside of the IOLAN, with the exce[...]

260 Keys and Cert ificates Host Name The name of the host for which you are downloading the SSH Host Public or Private Key to the IOLAN. IPsec T unnel Name Select the IPsec tunnel th at the RSA public k ey is being used to authenticate.[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 261 Configuring I/O Interfaces Chapter 10 10 Introduction There is a line of IOLANs that can control/monitor the following types of I/O: z Analog Input z Digital Input/Outpu t z Relay Output z T emperature Input Some of the models are I/O combinations and some of the mo dels support one I/O type, [...]

262 Settings Settings Overview The I/O Interfaces Setting s window configures the parameters that are global to all I/O channels. I/O Access Functionality Field Descriptions Configure the following parame ters: Enable I/O Access to Modbus pr otocol Enables/disables Modbus as the commun ication protocol for all the I/O channels. Default: Disabled UI[...]

263 Settings Advanced Slave Modbus Settings The parameters in this window configure global Modbu s gateway settings that apply to all serial ports configured first as the Modbus Ga teway profile and then as a Modbus Slave . Configure the following parame ters: Idle Timeout Use this timer to close a connecti on because of inactivity . When the Idle [...]

264 Settings TCP/UDP Port The netw ork port number that the Slave Gateway will listen on fo r both TCP and UDP messages. Default: 502 Next Request Delay A delay , in milli seconds, to allow serial slave(s) to re-enable receivers before issuing next Modbus Master request. Range: 0-1000 Default: 50 ms Enable Serial Modbus Br oadcasts When enabled, a [...]

265 Settings Failsafe T imer Functionality Overview The Failsafe Timer tab configures the I/O failsafe timer . The Failsafe T imer is enabled on a global basis and provides a trigger mechan ism that can be confi gured for each channel when no I/O traffic has occurred for the specified amount of time. This traffic information would include any stati[...]

266 Settings UDP Functionality Overview The UDP tab configures the I/O UDP broadcast settings . The I/O UDP broadcast feature periodically broadcasts the I/O channel status in a UDP message. Y ou can configure up to four sets of IP address entries (each entry cons isting of a start and end IP address range) to broadcast I/O status data. Th e broadc[...]

267 Settings I/O UDP Settings Configure the following parame ters: UDP Entry W hen enabled, broadcasts I/O status (data) to the speci fied range of IP addresses. Default: Disabled St a r t I P A d d r e ss The first host IP add ress in the range of IP addresses (for IPV4 or IPV6) that the IOLAN will listen for messages from and/or send messag es to[...]

268 Settings T emperature Functionality Overview The T emp erature tab configures the temperature scale settings for T4 models. Field Descriptions Configure the following parameter: T emperature Scale Select the temperature s cale that will be used to display temp erature data. Data Option s: Fahren heit or Celsius Default: Celsius[...]

269 Channels Channels The Channels section displays the I/O Channels window , through which you can enable/disabl e the I/O channels. Highlight a channel and then click the Edit button to configure th e parameters for that channel. Analog Overview Analog channels monitor current/ voltage input. Note that the internal jumpers must match the software[...]

270 Channels Field Descriptions Configure the following parame ters: Description Provide a description of the channel, making it easier to identify . Data Option s: Maximum 20 characters, including spaces Ty p e Select the type of input b eing measured. Data Option s: Cu rrent or V oltage Default: Current Range Select the range for the measurement [...]

271 Channels Digit al Input Overview When the channel is set for digital i nput, it monitors voltag e or current. Note that t he internal jumpers must match t he software settin g and must be set to Input, which is the default; see Digital I/O Module to find out how to set the internal jumpers. Functionality The Digital input channels allow you to [...]

272 Channels Field Descriptions Configure the following parame ters: Description Provide a description of the channel, making it easier to identify . Data Option s: Maximum 20 characters, including spaces Input Mode When selected, the channel will be read ing the status of the line (input). The internal jumpers must match the software configurat io[...]

273 Channels Auto Clear Mode W hen enabled, automatical ly clears the alarm when the trigger condition changes; for example, if the Tr i g g e r is Inactive and the alarm is triggered, once the input becomes active again, the al arm will automatically be cleared Default: Enabled Manual Clear Mode When enabled, a triggered al arm must be manually cl[...]

274 Channels Digit al Output Overview When the channel is set for digital output, either voltage is appl ied to the channel or the channel is grounded. Note that the internal jumpers must match the software setting and must be set to Output (by default, they ar e set to Input); see Digital I/O Module to find out how t o set the internal jumpers. Fu[...]

275 Channels Field Descriptions Configure the following parame ters: Description Provide a description of the channel, making it easier to identify . Data Option s: Maximum 20 characters, including spaces Output Mode When selected, the channel will drive the line (output). The internal jumpers must match the software configurat ion, so if you chang[...]

276 Channels Pulse Mode When Output is set to Pulse , you can specify the m anner of the pulse. Data Optio ns: z Continu ous —Continu ously pulses active and inactive. z Count —Pulses an active/inactive sequen ce for the specified number of times. Default: Continuous Pulse Count The channel output will pulse for the sp ecified number of times; [...]

277 Channels Relay Overview Relay channels can open or close a contact for a higher voltage circuit using a lower level control voltage. The Relay output channels work as a physi cal on/off switch, and are used to drive higher voltage devices with a lower controlling voltage. Y ou can configure the following Relay output channel opt ions: z Y ou ca[...]

278 Channels Field Descriptions Configure the following parame ters: Description Provide a description of the channel, making it easier to identify . Data Option s: Maximum 20 characters, including spaces Output Specify how the channel output will be handled. Data Option s: z Manua l —Y ou must manually manipulate the channel output. z Pulse —A[...]

279 Channels Digit al I/O Extension Overview The Digital I/O extension feature c onnects a digital i nput signal to digital output (s)/relay(s) and/or a TCP/IP application over an IP ne twork. Therefore, when the state of the digital input changes, you can also change the state of the di gital output or relay channel or output serial signal pin on [...]

280 Channels Functionality The Digital I/O extension feature requires th e digital input to be connected to one or more dig ital outputs/relays (local or on another IO LAN model) , ou tput serial signal p ins, and/or TCP/IP applications. In order to create a successful connect ion between the input and output or application, one side must be must b[...]

281 Channels Field Descriptions The Local conn ection option is dif f erent depending on whether you are con figuring a Digital Input or a Digital Output/Relay channel. The Local connection option for Digital Input lists all the local Digital Output channels or output seri al signal pins that it is associated with. Digital Input can be connected to[...]

282 Channels Allow Multiple Hosts to Connect When this option is enabled, multip le I/ O channels and/or TCP/IP appl ications can connect to this cha nnel/serial signal pin. Default: Disabled Connect to When enabled, the channel/serial signal pin initiates commun ication to another I/O channel or a TCP/IP application. Default: Enabled Host Name The[...]

283 Channels Adding/Editing Additional Host s Y o u can define a list of hosts that the I/O ch annel will communicate to or a primary/backup host. Configure the following parame ters: Adding/Editing a Multihost Entry When you click the Add or Edit button, the Host Entry window appears. The hosts in the multihost list must already be defined (see Ho[...]

284 Channels Temperature T em perature input channels monitor R TD or th ermocouple temperature sensors in puts for the most common ranges. Y ou can also conf igure severity alarms that can send an email, a syslog message, and/or an SNMP trap when an al arm is triggered o r cleared; See A larm Settings for more info rmation about the alarms. R TD r[...]

285 Channels Field Descriptions Configure the following parame ters: Description Provide a description of the channel, making it easier to identify . Data Option s: Maximum 20 characters, including spaces Ty p e Specify the type of sensor you are using to measure temperature. Data Option s: R TD, Thermocouple Default: RT D Range Specify the tempera[...]

286 Channels Alarm Settings Analog and T emperature input models support an Al arm mechanism in which you can specify up to five severity levels of alarm trig gers and clear levels; the alarm triggers/cl ear levels can activate in either increasing or decr easing severity levels. Each time an alarm is triggered or cleared, you can specify any combi[...]

287 Channels Advanced Analog Alarm Settings The advanced Analog Alarm Sett ings window expands the basic alarm setti ngs options to up to five severity levels. Configure the following parame ters: Send Syslog Alert When enabled, sends a message to sysl og when an alarm is triggered or cleared. The syslog entry includes the se verity level and the v[...]

288 Channels T rig ger If the Tr i g g e r T y p e is Low , an alarm is triggered when the input drops below the specified Tr i g g e r value; other severity level trigger values must decrease in value with each subsequent level. If th e T rigger T ype is High , an alarm is triggered when the input is higher than the specified Tr i g g e r value; o[...]

289 I/O UDP I/O UDP Industrial applications often mo nitor the status of I/ O devices such as sensors, alarms, relays, etc. by polling for I/O data. The IOLAN’ s I/O UDP feature can help to minim ize network traffic by broadcasting I/O status to industrial applicatio ns on specified intervals, providing I/O status in a timely manner . The IOLAN?[...]

290 I/O UDP Analog Section The Analog Section of the UDP p acket is comprised of I/O data for each enabled Analog channel. z Section Length —The total length of the Analog section (this value will vary , the field length is 2 Bytes). This value w ill vary because it will contain one Analog Channel Data subsection (18 bytes) for each Analog channe[...]

291 I/O UDP Digit a l/Relay Section The Digital/Relay Section of the UDP packet provides the status of Digital and Relay chan nels. The data for the status of each channel is represented by 1 byte, with each bit representing a channel (least significant bit format). z Length —The length of Digit al/Relay Section within the UDP packet (this value [...]

292 I/O Modbus Slave UDP Unicast Example For an example of the I/O UDP uni cast, see the sample program, ioudpbcast.c , found on your CD- ROM. I/O Modbus Slave If you have a Modbus se rial or TCP application, it can access I/O connected to the IOLAN when the I/O Global Modbus Slave is enabled. Y ou must supply a unique UID fo r the IOLAN, as it wil[...]

293 Modbus I/O Access Modbus TCP Application If you have a Modbus R TU or Modbus ASCII pr ogram, you can access the I/O by connecting to the IOLAN over the n etwork. Modbus I/O Access The section defines the function codes and register s you will need to acces s the I/O through Modbus TCP , Modbus serial, or Modbu s serial/T ruePort. Function Codes[...]

294 Modbus I/O Access I/O Coil/Registe r Descriptions This section contains descriptions of I/O coils: z MB_REG_DI_SENSOR —S tatu s of Digital input. 1 is Active, 0 is Inactive. If Invert Signal is configured on , 0 is Active, 1 is Inactive. If input is Latched , returns latched status. z MB_REG_DI_SENSOR_ALARM_ST A TE —Indication if input is i[...]

295 Modbus I/O Access Serial Port Coil/Register Descriptions This section contains descriptions of serial port coils: z MB_REG_DI_DSR —The status of the DSR input signal. 1 is Active, 0 is Inactive. If Invert Signal is configured on , 0 is Active, 1 is Inactive. If input is Latched , returns latched status. z MB_REG_DI_DSR_ALARM_ST A TE —The al[...]

296 Modbus I/O Access A4D2/A4R2 Registers The following coils and registers are su pported by the IOLAN A4D2 and A4R2 I/O models: *For DI alarm state, read will get state, write will clear alarm. Data Model A1 A2 A3 A4 D1/R1 D2/R2 R/W Coils: MB_REG_DI_SENSOR ----- ----- ----- ----- 6149 6150 R * MB_REG_DI_SENSOR_ALARM_ST A TE ----- ----- ----- ----[...]

297 Modbus I/O Access D4/D2R2 Registers The following coils and registers are su pported by the IOLAN D4 and D2R2 I/O models: *For DI alarm state, read will get state, write will clear alarm. Serial Pin Signals The following coils and registers are su pported by the IOLAN I/O models: Data Model D1 D2 D3/R1 D4/R2 R/W Coils: MB_REG_DI_SENSOR 6145 614[...]

298 T ruePort I/O T ruePort I/O Y o u can see a sample API I/O over T ruePort program called ioapiotp .c on the CD-ROM. T ruePort/Modbus Combination If you have a Modbus serial application running on a PC that is connected to a network, you can use T ruePort as a virtual serial connection to comm unicate with the IOLAN over the network to access I/[...]

299 T ruePort I/O API Over T ruePort Only If you have a custom application that talks to a se rial port, you can use T rue Port as a virtual serial port to communicate with the IOL AN over the network to access I/O data using the Perle API. Y ou also have the option of enabling SSL as a security option to encrypt the data that is communicated betwe[...]

300 Accessing I/O Data V ia T ruePort Accessing I/O Dat a V ia T ruePort Introduction Analog and Digital I/O data, as well as output c ontrol, can be accessed in several ways. T o have access from an applicatio n running on a workstation or serv er , the I/O Applications Program Interface (API) provided within T rue port can be used. This API uses [...]

301 Accessing I/O Data V ia T ruePort Format of API Commands There are two groups of commands: z Get Commands —Retrieve values of the I/O channel registers z Set Commands —Set values on the I/ O channel registers. I/O Channel registers are all assigne d unique addresses, which need to be referenced in all of the commands. Please refer to the do[...]

302 Accessing I/O Data V ia T ruePort Example 1: Read the status of the fi rst digital input (DI1) on a D2R2 unit. DI1 sensor is a coil register with the decimal val ue of 6145 (hex 0x1801). Request: 0x01 0x18 0x01 0x00 0x01 Response: 0x01 0x01 0x 01 (Digital input 1 is active) Example 2: Read the values for the Inactive Signal Width, Active Signal[...]

303 Accessing I/O Data V ia T ruePort Successful Response Format Unsuccessful Response Format Example 1: T urn on the first relay on a D2R2 unit. The first relay (R1) is a digital out coil register with a decimal value of 6659 (hexadecimal 0x1A 03). Request: 0x0F 0x1A 0x03 0x00 0x01 0x01 0x01 Response: 0x0F 0x1A 0x03 0x00 0x01 Example 2: T urn on t[...]

304 I/O SNMP T raps Error Codes I/O SNMP T rap s When you enable SNMP tr aps for Digital and Analog inputs, a value is re turned when an alarm triggers or clears. This section decodes the SNMP specific trap numbe rs. The value returned from the trap will be the I/O channel number that is generating the trap. Code Name Descripti on 01 Illegal Functi[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 305 Configuring Clustering Chapter 11 11 Introduction Clustering is a way to provide access to the serial port s of many IOLANs through a single IP address. Clustering Slave List Overview The IP address that will be used to access all clustere d serial ports will be that of the Ma ster IOLAN in th[...]

306 Clustering Slave List Adding Clustering Slaves Overview When you add a clustering slav e IOLAN entry , you are adding the IOLAN that users will access through this master IO LAN. Field Descriptions Configure the following parame ters: Server Name Specify a name for the slave IO LAN in the clustering group. This name does not have to correspond [...]

307 Clustering Slave List Advanced Clusteri ng Slave Options Overview The Advanced button provides a means of configuring each individual se rial port’ s name, connection protocol, and port association in the clustered IOLA N slave. The Clustering S l ave Settings window displays each clustered serial port slave entry , you need to click the Edit[...]

308 Clustering Slave List Slave TCP Port Specify the TCP Port number configur ed on the Slave IOLAN that is associated to the port number you are configuring. Range: 1-99999 Master TCP Por t Specify the TCP port number you want to map to the Slave IOLAN TCP Port. User ’ s will use this TCP port number to access the Slave IOLAN’ s port. Default:[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 309 Configuring the Option Card Chapter 12 12 Introduction SCS models have a built-in option card slot that supports one of the following options cards (purchased separately): Perle IOLAN modem card PCMCIA W ireless W an card USB modem card Fiber optic card offered in Fast Ethernet or Gigabit spee[...]

310 Configuring a Wireless (PCMCIA) W AN Card Configuring a Wireless (PCMCIA) W AN Card Overview SCS IOLAN mod els support a wireless W AN card that can be installed to permit access to the IOLAN via the internet or ot her W AN netw ork. If you are using a USB modem, please see Configurin g a USB Modem . When the PCI card type has been configured t[...]

31 1 Configuring a Wireless (PCMCIA) W AN Card When you click the Adva nced button, the Remote Access (PPP) profile is displayed. The wireless W AN card uses PPP to co mmunicate with its w ireless provider . See Remote Access (PPP) Profile for information on how to configure PPP . APN Specify the APN required by your internet provider to access the[...]

312 Configuring a USB Mode m Configuring a USB Modem Overview SCS IOLAN mod els support a USB W ireless Modem that can be installed to permit access to the IOLAN via the internet or ot her W AN netw ork. If you are using a PCMCIA W ireless Card, See Configuring a W ireless (PCMCIA) W AN Card . When the PCI card type has been configured to be USB , [...]

313 Configuring a USB Mode m When you click the Adva nced button, the Remote Access (PPP) profile is displayed. The USB modem uses PPP to communicate wi th its wireless provider . See Remote Access (PPP) Profile for information on how to configure PPP . PIN If you have locked your SIM using a PIN, you must enter this PIN here in order to allow the [...]

314 Configuring a Fiber Optic Card Configuring a Fiber Optic Card Overview SCS IOLAN models support the ability to replace th e second Ethernet interface with a fiber optic connection. Field Descriptions Configure the following parame ters: No additional configuration is required for the fiber card. The fiber card will now replace th e second Ether[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 315 Configuring the System Ch apter 13 13 Introduction This chapter describes the alerts (ema il and syslog) that can be configured for the IOLAN and the advanced options (SNMP , time, custom applications/plugins, and other miscellaneous configuration options) that you will want to look at to see [...]

316 Alerts Field Descriptions Configure the following parame ters: Enable Email Aler t Enables/disables a global em ail alerts setting. Even if this option is disabled, you can still configure individu al serial port email alerts. Wh en this option i s enabled, individual serial ports can inherit these email alerts settings. Default: Disabled Level[...]

317 Alerts Password Enter the password associated with th e user configured in “Username”. Maximum size of password is 64 characters. Encryption Choose the type of encryption desired. V alid options are; None - All informatio n is sent in the clear . SSL - Select this if your email server requires SSL. TLS - Select this if your email server req[...]

318 Alerts Syslog Overview The IOLAN can be configured to se nd s ystem log messages to a sysl og daemon ru nning on a rem ote host if the Sysl og service is activated. Y ou can configure a primary and seco ndary host for the syslog information and specify the level for which you want syslog informati on sent. Field Descriptions Configure the follo[...]

319 Management Management SNMP Overview If you are using SNMP to manage/configure the IOLAN, or to view statistics or traps, you must set up a User in SNMP version 3 or a Community in SNMP version 1,2 to allow your SNM P manager to connect to the IOLAN; this can be done in th e DeviceManager , W ebManager , CLI, or Menu. Y ou must then load the per[...]

320 Management Internet Address The IP address of the SNMP manager that will send requests to the IOLAN. If the addr ess is 0.0.0.0 , any SNMP manager with the Community name can access the IOLAN. If you specify a network address, for example 172.16.0.0 , any SNMP manager within the local network with the Community name can access the IOLAN. Field [...]

321 Management SNMP T raps T ab Field Descriptions Configure the following parame ters: V3 Read-Only Auth Algorithm Specify the authentication algorithm that will be used for the read-only user . Data Option s: MD5, SHA Default: MD5 V3 Read-Only Auth Password T ype in the read -only user ’ s authenticati on password. V3 Read-Onl y Confirm Passwor[...]

322 Management Ty p e Select between T rap and Info rm. Inform requires the ho st receiving the trap to acknowledge the receipt of the trap. Community The name of the group that devices and management stations runni ng SNMP belong to. Community only appli es to SNMP v1 and v2c Tim e ou t This is only used for Inform traps. S el ect the number of se[...]

323 Management Ti m e Overview Y o u can set standard and summer time (day light savings time) in the IOLAN. Y ou can specify the summer time settings as absolute, on a fixed date and time, or relative, on something lik e the third day of the third week at this time in June. Functionality The IOLAN has a real-time internal clock, allowing the date [...]

324 Management NTP/SNTP Mode The NTP/SNTP mode. Data Option s: z None —NTP/SNTP is turned off. z Unicast —Sends a request packet periodi cally to the Primary host. If communication w ith the Primary host fails, the request will be sent to the Secondary host. z Broa dcast/Mu lticast —Listen for any broadcasts from an NTP/SNTP server and then s[...]

325 Management Time Zone/Summer T ime T ab Field Descriptions Y o u can configure an automatic summer ti me (daylight savings time) time change. Configure the following parame ters: Time Zone Name The name of the time zone to be displayed during standard time. Field Format: Maximum 4 character s and minimum 3 characters (do not use angled brackets [...]

326 Management Custom App/Plugin Overview Y o u can create custom applications for th e IOLAN by using the Perle SDK. See the SDK Pr ogrammer ’ s Guide (the SDK and guide are accessible via a request form located on the Perle website at www.perle.com/supportfiles/SDK_Request.s html ) for information about the functions that are supported. Y ou mu[...]

327 Management Advanced T ab Field Descriptions Configure the following parame ters: Bootup Files T ab Field Descriptions Use System Name in Prompts Displays the System Name field value instead of default product name. When enabled, the Server Name is displayed in the IOLAN login pro mpt, CLI prompt, W ebManag er login screen, and the heading of th[...]

328 Management Y ou must have a SFTP/TFTP server running on any host that you are uploading or downl oading files to/from. When you specify the file path, the path must be relative to the default path set in your SFTP/TFTP serv er software. Configure the following parame ters: EasyPort W eb Select Java if communication is via po rt 23(T elnet) or p[...]

329 Management Message of the Day (MOTD) T ab Field Descriptions The message of the day is displayed when users log into the IOLAN through a telnet or SSH session or through W ebManager or EasyPort W eb. There are two ways to retrieve the message of the day to be displayed to users when they log into the IOLAN: z The message of the day file is retr[...]

330 Management TFTP T ab Field Descriptions Y ou must have a TFTP server running on any host that you are uploading or downl oading files to/from. Configure the following parame ters: Note: TFTP file transfers send via UDP packets. W h en the packet delivery is interrupted for any reason and a timeout occurs, that packet is resent if the retry coun[...]

331 Management SFTP T ab Field Descriptions Y ou must have a SFTP server running on any host that you are uploadin g or downloading files to/from. These are global SFTP settings. They are used whenever the user speci fies “SFTP” as the protocol to be used for the file transfer . Configure the following parame ters: Note: Some combinat ions of c[...]

332 Management Console Port T ab Field Descriptions This tab is found on rack mount models and is used to configure th e Admin/Console port. Configure the following parame ters: Authentication RSA Allow RSA to be used as the method of authenticating the IOLAN. Authentication DSA Allow DSA to be used as the me thod of authenti cating the IOLAN. Auth[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 333 Controlling the RPS, I/O Channels, IPsec Chapter 14 14 Introduction The Control section appears when the IOLAN is connected to a Remo te Power Switch and/or an I/O model or you want to control the IPsec tunnel. RPS Control Overview When a Remote Power Switch’ s (RPS ) console port is attache[...]

334 RPS Control Plug Control Overview When you click the Plug Control button, you can power on/off individual plugs. Field Descriptions The “ Power S tatus ” field above can contai n the following values; • On - Power is currently being applied to the plug. • Off - Power is currently not being applied to the plug. The “ Monitor Host S tat[...]

335 RPS Control Power Controls the power state of the plug as follows; On Button - T urns the selected plug on. Off Button - T urns the selected plug off. Cycle Button - T urns the selected plug off and then on. Monitor Host If host monitoring has been en abled on this plug, these buttons control the state of the feature as follows; On Button - Ena[...]

336 Serial Port Power Control Serial Port Power Control Overview The Serial Port Power Control win dow allows you to manage the power plugs that have been associated with the serial de vices connected to the IOLAN. Field Descriptions The following buttons are available: Power Plug St atus This Power Plug St atus window displays the status of all th[...]

337 I/O Channels I/O Channels Overview When the DeviceManager is connected to an I/ O model IOLAN, the I/O S tatus/Control option is available. Y ou can view the I/O status and manually control such options as clearing alarms, clearing minimum/maximum values, resetting the chann e l(s), and activating/deactivating outp ut. The following buttons are[...]

338 IPsec T unnel Control IPsec T unnel Control Y ou can start, stop, and restart all the IPsec tu nnels. When you start the IPsec tunnels, the Boot Action configured for each IPsec tunnel is what determines its state. The following buttons are available: S tart Button Starts all IPsec VPN tunnels. St o p B u t t on Stops all IPsec VPN tunnels. Res[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 339 System Administration Chapter 15 15 Introduction This chapter addresses the functions that the admin u ser or a user with Admin Level privileges might do. This chapter uses the DeviceManager as the configuration method described in most administrative functions. As a general rule, admi nistrat[...]

340 Managing Configuration File s Downloading Configuration Files Y ou can download a configuration file to the IOLAN by doing the followi ng: z In DeviceManager: 1. Connect to the IOLAN to retrieve the current configuration file. 2. Open the configuration file you want to download to the IOLAN by sel ecting File , Import Configuration fro m a File[...]

341 Managing Configuration File s Downloading Configuration Files to Multiple IOLANs Y ou can download a configuration file to multiple IO LANs at the same time by doing the follo wing in DeviceManager (DeviceManager is the on ly confi gurator that does this functi on): 1. Select To o l s , Download Configuration to Multiple IOLAN s . 2. Specify th[...]

342 Managing Configuration File s 4. Click the Download> button to start the download process. A status window will display with the configuration download status. Uploading Configuration Files When you upload a configuration to the Dev iceM anager , you are upload ing the IOLAN’ s working configuration file. In most other configurators (t he [...]

343 Downloading IOLAN Firmware Resetting the IOLAN to the Default Configuration The RESET button is av ailable on all IO LAN models (except medical unit models). The button allows you to reset the IOLAN to its Perle or cust om factory defaul t configuration. The Power/Ready LED color and the resetting of the IOLAN default configuration vary de pend[...]

344 Calibrating I/O Calibrating V olt age When calibrating the IOLAN Analo g input for voltage, you will need a calibration meter that is better than .1% volts precision. When you calibrate one channel, all voltage channels are automatically calibrated for that range; if another channel is set for a dif ferent range, you will need to calibrate that[...]

345 Calibrating I/O Calibrating Analog Channels Analog Input can be calibrated for An alog and T emperature IOLAN models. Select the channel you want to calibrate. Th is example uses an A4 model that has channel A1 set to Current with a Range of 0 to 20mA. If you have not disabled confirmation messages ( To o l s , Options in DeviceManager only), y[...]

346 Setting the IOLAN’ s Date and Ti me Setting the IOLAN’ s Date and Time When you set the IOLAN’ s time, th e connection method and time zone settings can af fect the actual internal clock time that is being set. For example, if you are c onnecting to the IO LAN through the DeviceManager and your PC ’ s time zone is set to Pacific St anda[...]

347 Resetting the SecurID Nod e Secret Resetting the SecurID Node Secret If you are using SecurI D external authenticat ion, you can select To o l s , Rese t , Reset SecurID Node Secret in DeviceManager and Administration , Reset , SecurID Secret in W ebManager to reset the node secret. Y ou do not need to reboot the IOLAN for this to take effect, [...]

348 Language Support T ranslation Guidance To help you with your translation, of supplied ASCII text language fil es we offer the following guidance: z The IOLAN will support languages other than English (and the supplied German and French languages). The English lan guage file, english.txt , displays the character length of each line at the beginn[...]

349 Downloading T erminal Definition s Downloading T erminal Definitions All terminal ty pes can be used on the IO LAN. Some terminal types which are not already defined in the IOLAN, however , are unable to use Full Screen mode (menus) and may not be able to page through sessions properly . When installed, the IOLAN has several defined terminal ty[...]

350 Resetting Configuration Paramete rs For example: Resetting Configuration Parameters You can reset the IOLAN to its factory defau lt settings (t his will reset it to the Perle factory d efault or custom factory default settings, depending on what ha s been configured) through any of the following methods: z Y o u can push in the recessed button [...]

351 Lost admin Password Lost admin Password If the admin user password is lost, there are only two possible ways to recover it: z reset the IOLAN to th e factory defaults z have another user that has Admin level ri ghts, if one is already configured, reset the admin password[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.1 352 Applications Chapter 16 16 Introduction This chapter provides examples of how to integrate the IOLAN within different network environments or applications. Each scenario provides an example of a typical setup and describes the configuration steps to achieve the IOLAN functionality feature. Con[...]

353 Configuring Modbus Modbus Gateway Settings The scenarios in this s ection ar e used to illustrat e how the IO LAN’ s Modbus Gateway settings are incorporated into a Modbus device enviro nment. Depending on how your Modb us Master or Slave devices are distributed, th e IOLAN can act as both a Slave and Master Gateway(s) on a multiport IOLAN or[...]

354 Configuring Modbus Modbus Serial Port Settings Modbus Master Settings When the Modbus Masters is attached to the IOLAN’ s seri al port, configure th at serial port to the Modbus Ga teway profile acting as a Modbus Master . Y ou must configure the Modbus TCP Slaves on the TCP/Ethernet side so th e IOLAN can properly route messa ges, using the [...]

355 Configuring Modbus Modbus Slave Settings When you have Modbus Slaves on the serial side of the IOLAN, configure the serial port to the Modbus Gatewa y profile acting as a Modbus Slave. There is only one Slave Gateway in the IOLAN, so all Modbus serial Slaves must be configured uniquely for that one Slave Gateway; all serial Modbus Slaves must h[...]

356 Configuring PPP Dial On Demand Configuring PPP Dial On Demand The IOLAN can be configured to access remote networks via modems connected to the serial interface of the IOLA N. By configuring the IOLAN for the Remote Access (PPP) pro file, data that is destined for the rem ote network will initiate a modem connection to the remote network t o ro[...]

357 Setting Up Pri nters 6. Next you need to create a gateway and destination route entry . Select Network , Adv anced , and the Route List tab. For the destination, if you want the connection to be able to reach any host in the remote network, set the Ty p e to Netw ork and specify the net work IP addr ess and subnet/prefix bits; if you want the c[...]

358 Setting Up Pri nters Remote Printing Using RCP When setting up a serial port that acces ses a printer using RCP , do the following: 1. Set the se rial port to Printer and configure the Spe ed , Flow Cont rol , Sto p B i ts , Parity , and Bits parameters so that they match the printer ’ s po rt settings. 2. Save your settings and restart the s[...]

359 Configuring a Virtual Private Network Configuring a V irtual Private Network Y o u can configure the IOLAN to act as a V irtua l Private Network (VPN) gateway using the IPsec protocol. Any of the followi ng scenarios can be configured using one IOLAN and a host/server running IPsec software or two IOLANs, each actin g as the VPN gateway . All t[...]

360 Configuring a Virtual Private Network[...]

361 Configuring a Virtual Private Network 2. Use a utility (for example, Op enswan’ s newhos tkey/show hostkey utilities) to generate the RSA signature public ke y . Co py the pu blic key portion to a file usin g the following format: < description >=< keydata > or just < keydata > For example: # RSA 1024 b its scs48_vpn Tue Jan[...]

362 Configuring a Virtual Private Network Network-to-Network The following examples shows how to configure a network-to-network IPs ec tunnel. This example uses the X.509 Certificate authentication method, so it includes the configuratio n requirements for the X.509 certificate. NA T T raversal (NA T_T) is enabled in this example (on both sides) be[...]

363 Configuring a Virtual Private Network 3. If the signer of the remote X.509 certi ficate has no t already been included in the CA list file that has already been downloaded to the IOLA N, you need to add (append) the signer of the X.509 certificate to the CA list file and then dow nl oad the file to the IO LAN by select ing To o l s , Advanced ,[...]

364 Configuring a Virtual Private Network %defaultroute is entered for the Local IP Address because the IP address is DHCP assigned and is therefore subject to change. 2. The following window configures the Right IOLAN VPN Gateway: %defaultroute is entered for the Local IP Address because the IP address is DHCP assigned and is therefore subject to [...]

365 Configuring a Virtual Private Network VPN Client-to-Network The following example shows how to configu re a VPN client-to-network IPsec tunnel. In this example, the IOLAN will accept VP N connections from multiple VP N clients on private networks that want to access the public 199.24 .0.0 subnetwork through the VPN gateway . NA T T raversal (NA[...]

366 Configuring HTTP Tunnels Configuring HTTP T unnels Serial-to Serial The following example will demonstrate how to set up a serial device (VT1 00 T ermin al) to serial device (Linux host, console port) connection via an HTTPS tunnel. HTTPS will be used because data security is required. Because IOLAN 1 is behind th e firewall, it will need to in[...]

367 Configuring HTTP Tunnels Configure a “Listen for connection” HTTP tunnel on IOLAN 2 On IOLAN 1, under Serial port configuration, select serial ports and co nfigure for T erm inal profile. Check HTTPS for se- cure tunnel connection. This must match config- uration IOLAN 1 Match name on IOLAN 1 Protocol - Telnet Select tunnel1 Add host IP add[...]

368 Configuring HTTP Tunnels On IOLAN 2, under serial port configuration , select serial port and configure for Console Management profile. . The setup for HTTP T unnel seri al-to-serial is now complete . Serial-to Host The following example w ill demonstrat e how to setup a serial device (Poi nt o f Sale terminal) to an IP host (100.10.60.3) conne[...]

369 Configuring HTTP Tunnels Configure a “connect to” HTTP tunnel on IOLAN 1 Configure a “Listen for connection” HTTP tunnel on IOLAN 2 Add The IP host to the host table on IOLAN 2. IP address of IOLAN 2 Match name on IOLAN 2 Match name on IOLAN 1[...]

370 Configuring HTTP Tunnels Configure the serial port on IOLA N 2, as follows; When IOLAN 1 boots, it will establish an HTTP tunnel to IOLAN 2. IOLAN 2 will initiat e a connection between the serial device and th e IP host. The connection will use the destination TCP port 20001. The setup for HTTP T unnel Ho st-to-Serial is now complete . Host-to [...]

371 Configuring HTTP Tunnels Configure a “connect to” HTTP tunnel on IOLAN 1 10.10.50.2 100.10.50.1 IOLAN 1 IOLAN 2 HTTP T unnel Data 100.10.50.60 TFTP Server TFTP Client 10.10.100.2 IP address of IOLAN 2 Match name on IOLAN 2[...]

372 Configuring HTTP Tunnels Configure a “Listen for connection” HTTP tunnel . On IOLAN 1, under HTTP T unnel , add a T unnel destination. The setup for HTTP T unnel Ho st-to-Host is now complete . Match name on IOLAN 1 Local Port number for TFTP packets Destination Port number for TFTP packets Select predefined tunnel entry Select UDP IP addre[...]

373 Configuring HTTP Tunnels T u nnel Relay The following example will demonstrate how to setup an IP host (10.10.10.10) to an IP Host (10.10.1 1.11) connection using HTTP tunnels when bo th hosts are sitting behind a firew all. T o do this, a third IOLAN which is not behind a firewall is required. Because IOLAN 1 and IOLAN 3 are both behind a fire[...]

374 Configuring HTTP Tunnels Configure a “Listen for connection” HTTP tunnel on IOLAN 2 Configure a second “Listen for connection to IOLAN Match name on IOLAN 1 Match name on IOLAN 3[...]

375 Configuring HTTP Tunnels Configure a “connect to” HTTP tunnel on IOLAN 3 On IOLAN 1, under HTTP T unnel , add a T unnel destination IP address of IOLAN 2 Match name on IOLAN 2 This is the port num- ber the telnet client will use. Destination port num- ber to be used by IOLAN 1 for commu- nications. Default starts at 40001. Select tunnel1 Se[...]

376 Configuring HTTP Tunnels On IOLAN 2, under HTTP T unnel , add a T unnel destination. The setup for HTTP T unnel Relay is now complete . Local port number to be used by IOLAN 2 for communications. Destination port s et to 23 for Telnet protocol Select tunnel2 Select TCP IP address of final destination Telnet host Note: This value must match d es[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 377 RADIUS and T ACACS+ Appendix A A Introduction This chapter describes the parameters that can be passed to the IOLAN when a user logs into the IOLAN (serial port set to profile T erminal ) from external authenti cation RADIUS and T ACACS+ servers. RADIUS Although RADIUS can be u sed strict ly f[...]

RADIUS and T A CACS+ 378 RADIUS 6 Service-T ype Response Indicates the service to us e to connect the user to the IOLAN. A value of 6 indicates administrative access to the IOLAN. Su pported values are: z 1—Login z 3—Callback-Login Equivalent to the IOLAN User Service set by T ype 15, Login-Service. z 2—Framed z 4—Callback-Framed Equivalent[...]

RADIUS and T A CACS+ 379 RADIUS 16 Login-TCP-Port Response Indicates the TCP port with which the user is to be connected when the Service-T ype is set to 1 (Login) or 3 (Callback-Login). 19 Callback-Number Response Specifies the callback phone number . This is the same implementation as 20 (Callback-ID), but takes precedence if 20 is set. 20 Callba[...]

RADIUS and T A CACS+ 380 RADIUS 61 NAS-Port-T ype Response For reverse telnet and reverse ssh connections, a type of V irtual (5) will be sent. For a PPP connection type a type of Asyn c (0) will be sent. For all direct connect service types a type of Async (0) will be sent. 87 NAS-Port- Id Response For sessions originating from the serial port: &l[...]

RADIUS and T A CACS+ 381 RADIUS Accounting Message This section describes the attributes which w ill be in cluded by th e IOLA N when sending an accounting message to the RADIUS server . T ype Name Description 1 User-Name The name of the user to be authenticated. 4 NAS-IP-Address IP Address of IOLAN LAN interface. 5 NAS-Port If the user is connecte[...]

RADIUS and T A CACS+ 382 RADIUS Mapped RADIUS Parameters to IOLAN Parameters When authentication is being d one by RADIUS, there are severa l Serial Port and User parameters that can be set by the RADIUS se rver . An y parameters sent by that RADIUS server that are not supported by the IOLAN are discard ed. Below is a list of the RADIUS parameters [...]

RADIUS and T A CACS+ 383 RADIUS Framed-Address Remote IP Address field under either SLIP or PPP . Caution: the exception to the above rule is a Framed-Address value of 255.255.255.254. Wh en this value is specified in the RADIUS file, the unit will use the Remote IP address configured for a PPP line in the IOLAN. Framed-Netmask IPv4 Subnet Mask fie[...]

RADIUS and T A CACS+ 384 RADIUS Perle RADIUS Dictionary Example The IOLAN has defined V endor Specific R ADIUS attributes in order for the RADIUS server to be configured to support the IOLAN features of Line Access Rights an d Us er Level. These attributes have been defined in Supported RADIUS Parameters on page 377 to allow the RADIUS server to be[...]

RADIUS and T A CACS+ 385 RADIUS ATTRIBUTE Perle-Line-Access-Port -30 130 int eger Perle ATTRIBUTE Perle-Line-Access-Port -31 131 int eger Perle ATTRIBUTE Perle-Line-Access-Port -32 132 int eger Perle ATTRIBUTE Perle-Line-Access-Port -33 133 int eger Perle ATTRIBUTE Perle-Line-Access-Port -34 134 int eger Perle ATTRIBUTE Perle-Line-Access-Port -35 1[...]

RADIUS and T A CACS+ 386 T ACACS+ VALUE Perl e-Line-Access-Port-3 Read-Output -Input-Write 7 VALUE Perl e-Line-Access-Port-4 Disabled 0 VALUE Perl e-Line-Access-Port-4 Read-Write 1 VALUE Perl e-Line-Access-Port-4 Read-Input 2 VALUE Perl e-Line-Access-Port-4 Read-Input- Write 3 VALUE Perl e-Line-Access-Port-4 Read-Output 4 VALUE Perl e-Line-Access-P[...]

RADIUS and T A CACS+ 387 T ACACS+ service = tcp_clear { addr = port = } IPv4 or IPv6 address TCP port number Settings when Perle_User_Service is set to 2. service = slip { routing = addr = } true (Send and Listen) false (None) IPv4 or IPv6 address Settings when Perle_User_Service is set to 3. service = ppp { routing = addr = port = ppp-vj-sl ot-com[...]

RADIUS and T A CACS+ 388 T ACACS+ Accessing the IOLAN Th rough a Serial Port User Example Settings The following example shows the pa rameters that can be set for users who are accessing the IOLAN from the serial side. These settings should be in cluded in the T ACACS+ user configuration file. Service = EX EC { priv-lvl = x # x = 12-1 5 (Admin) # x[...]

RADIUS and T A CACS+ 389 T ACACS+ service = pp p { routing=x # x = true (Send and Listen) # x = false (Non e) addr = x.x.x.x # ipv4 or ipv6 addr ppp-vj-slot- compression = x # x =t rue or false callback-dia lstring = x # x = numb er to callbac k on } service = ss h { addr = x.x.x .x # ipv4 or ipv6 ad dr port = x # tcp_port # } service = ss l_raw { [...]

RADIUS and T A CACS+ 390 T ACACS+ Accessing the IOLAN from the Network User Example Settings The following example shows the pa rameters that can be set for users who are accessing the IOLAN from the Ethernet side. These set tings should be included in the T ACACS+ user configuration fi le. # Settings f or telnet/SSH access service = ra ccess { pri[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 391 SSL/TLS Ciphers Appendix B B Introduction This appendix contains a table that shows valid SSL/TLS cipher combinations. V alid SSL/TLS Ciphers This chart displays all of the valid SSL/TLS combinations. Note: Some combinat ions of cipher groups are not available on FIPS firmware versions. Full N[...]

SSL/TLS Ciphers 3 92 V alid SSL/TLS Ciphers DES-CBC-SHA SSLv3 Kx=RSA Au=RSA Enc=DES 56 Mac=SHA1 DES-CBC-MD5 SSLv2 Kx=RSA Au=RSA Enc=DES 56 Mac=MD5 EXP-EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH (512) Au=RSA Enc=DES 40 Mac=SHA1 EXP-EDH-DSS- DES-CBC-SHA SSLv3 Kx=DH(512) Au=DSS Enc=DES 40 Mac=SHA1 EXP-DES-CBC-SHA SSLv3 Kx=RSA(512) Au=RSA Enc=DES 40 Mac=SHA1 EXP-[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 393 V irtual Modem A T Commands Appendix C C V irtual Modem Initialization Commands Y ou can initialize the modem connection using any of the fo llowing commands: Note: V irtual Modem initializatio n commands are only suppo rted on IOLAN firmware and configurators version 3.2 or higher . Command D[...]

Virtual Modem A T Command s 394 Virtual Modem Initialization Command s AT & Z 1 Set command allows the user to store an IP address and port number or phone num ber to use when making a conn ection. The user will issue an A TDS1 to cause the IOLA N to initiate the connection. AT & S n Sets the behavior of IOLAN’ s DTR signal. (DSR from a D[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 395 Pinout s and Cabling Diagrams Appendix D D Serial Pinout s DB25 Male This section defines the pinouts for the DB25 male connection used on the 1-port IOLAN . The power out pin (Pin 9) is available in the SDS model on ly . The following table provides pinout information: Pinout EIA-232 EIA-422 [...]

Pinouts and Cabling Diagrams 396 Serial Pinouts The power in pin (pin 12) can be 9-30V DC. DB25 Female This section defines the pinouts for the DB25 female connection used on the 1-port IO LAN. The power out pin (Pin 9) is available in the SDS m odel only . The following table provides pinout information: 18 RT S + 19 RT S - 20 (out) DTR 21 RxD+ Rx[...]

Pinouts and Cabling Diagrams 397 Serial Pinouts The power in pin (pin 12) can be 9-30V DC. RJ45 The RJ45 serial connector is av ailable on IOLAN rack mount, desktop, Sun/Cisco, and medical unit models. The RJ45 pinouts vary depending on th e IOLAN model. See the appropriate section for the RJ45 pinout informatio n specific to your IOLAN model. 15 R[...]

Pinouts and Cabling Diagrams 398 Serial Pinouts RJ45 (for desktop a nd rack mount models) This section defines the pinouts for the R J45 c onnection. 1-port, 2-port, and 4-port desktop IOLAN models have a 10-pin RJ45 connector , how ever they can support an 8-pin connector if there is no requirement for power in (pin 1) or power out (pin 10). The S[...]

Pinouts and Cabling Diagrams 399 Serial Pinouts RJ45 (for SCS48C/SCS32C /SCS16C/SCS8C models) This section defines the pinouts for the R J45 connection for the SCS48C/ SCS32C/SCS16C/SCS8C (Sun/Cisco) models only . The following table provides pinout information, including the different pinouts for the Admin port and serial ports: Pinout 8-pin EIA-2[...]

Pinouts and Cabling Diagrams 400 Serial Pinouts RJ45 (for SDS32C/SDS16C/SDS8C) Dual Ethernet and El ectric Utility models This section defines the pinouts for the R J45 connection for th e Dual Ethernet (SDSxxC m odels) and Electric Utility models. The serial ports can be set to operate in EIA-2 32, EIA-422 or EIA-485 mode. The table provides the p[...]

Pinouts and Cabling Diagrams 401 Serial Pinouts RJ45 (for medi cal unit models) This section defines the pinouts for the R J 45 connection for the medical unit models. The following table provides pinout information: DB9 Male (Serial Only) This section defines the pinouts for the D B9 male co nnecti on used on the 1-port IOLAN that is serial only ([...]

Pinouts and Cabling Diagrams 402 Power Over Ethernet Pinouts DB9 Male I/O This section defines the pinouts for the DB9 male connection used on th e 1-port IOLAN I/O models. The following table provides pinout information: Power Over Ethernet Pinout s This section defines the pinouts for the R J45 Et hernet connection used on the IOLAN SDS P or IOLA[...]

Pinouts and Cabling Diagrams 403 EIA-232 Cabling Diag rams EIA-232 Cabling Diagrams This section shows how to create EIA-232 cable s that are compatible with the Device Server. T erminal DB25 Connector The following diagrams show how the null modem cable should be configured when connecting to a terminal DB25. DB25 Male DB25 Female IOLAN DS1 DB25 ([...]

Pinouts and Cabling Diagrams 404 EIA-232 Cabling Diag rams RJ45 This cabling table does NOT apply to SCS48C/SCS32C/S CS16C/SCS8C (Sun/Cisco), SDS32C/SDS16C/SDS8 C (Electrical Utility) or medical unit models. Cabling for SCS48C/SCS32C/SCS16C/SCS8C (Sun/Cis co) and SDS32C/SDS16C/SDS8C (Electrical Utility). IOLAN RJ45 T erminal DB25 (DTE) 10-pin 8-pin[...]

Pinouts and Cabling Diagrams 405 EIA-232 Cabling Diag rams DB9 Male IOLAN DS1 DB9 Male T erminal DB25 (DTE) 3 (TxD) 3 (RxD) 2 (RxD) 2 (TxD) 7 (R TS) 5 (CTS) 8 (CTS) 4 (R TS) 6 (DSR) 20 (D TR) 5 (GND) 7 (GND) 4 (DTR) 6 (DSR)[...]

Pinouts and Cabling Diagrams 406 EIA-232 Cabling Diag rams Modem DB25 Connector The following diagrams show how a standard straight through cable should be configured when connecting to a D B25 modem. DB25 Male RJ45 This cabling table does NOT apply to SCS48C/SCS32C/S CS16C/SCS8C (Sun/Cisco), SDS32C/SDS16C/SDS8 C (Electrical Utility) or medical uni[...]

Pinouts and Cabling Diagrams 407 EIA-232 Cabling Diag rams DB9 Male IOLAN DS1 DB9 Male Modem DB25 (DCE) 1 (DCD) 8 (DCD) 2 (RxD) 3 (TxD) 3 (TxD) 2 (RxD) 4 (DTR) 20 (DTR) 5 (GND) 7 (GND) 6 (DSR) 6 (DSR) 7 (R TS) 4 (CTS) 8 (CTS) 5 (R TS)[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 408 Setting Jumpers Appendix E E Introduction The IOLAN contains jumpers that you mig ht need to set before you configure it and put it into production. Y ou can set the power out pin, pin 9, to a fixed 5V D C output or t o the external adapter output; this can range from 9-30V DC (if an external [...]

Setting Jumpers 409 Introduction 1-Port IOLAN RJ45 T o change the settings, do the following: 1. Unplug the IOLAN from the electrical outlet and disconnec t everything from the box. 2. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case. Y ou should see the following: 3. T o change the power pin ou[...]

Setting Jumpers 410 Introduction 1-Port IOLAN DB9 T o change the settings, do the following: 1. Unplug the IOLAN from the electrical outlet and disconnec t everything from the box. 2. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case. Y ou should see the following: 3. T o turn line termination on[...]

Setting Jumpers 41 1 Introduction 2-Port IOLAN T o change the settings, do the following: 1. Unplug the IOLAN from the electrical outlet and disconnec t everything from the box. 2. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case. Y ou should see the following: 3. T o change the power pin out, l[...]

Setting Jumpers 412 Introduction 5. Close the IOLAN case by replacing the case lid and the two screws. Y ou can now power it on with the new settings. 4-Port Desktop IOLAN T o change the settings, do the following: 1. Unplug the IOLAN from the electrical outlet and disconnec t everything from the box. 2. Open the case by unscrewing the two side scr[...]

Setting Jumpers 413 Introduction Digit al I/O Module IOLANs that have Digital I/O have an input/o utput jumper that must be set for each channel and must match the software configuration for each channe l. De pending on the model, the placement of the digital I/O board can change, so the diagram below shows how to set jumper for any digital board.T[...]

Setting Jumpers 414 Introduction 2. Open the case by unscrewing the five side scre ws, two on each side plus the grounding screw , and lifting off the top of the case. Y ou should see the following configuration for the analog input board: 3. T o configure Chan nel 1 for V oltage, no jumper sh ould be set (as shown); this is the default setting. T [...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 415 I/O W iring Diagrams Appendix F F Wiring I/O Diagrams This section describes how to wire the vario us IOLAN I/O models. Digit al I/O Make sure the Digital I/O jumpers suppo rt the software setting; see Digital I/O Module for jumper settings. Digit a l Input Wet Cont act If you are using a wet [...]

I/O Wiring D iagrams 416 Wiring I/O Diagrams Digit a l Output Sink For a Digital output sink (ground) config uration for channel D1, follow the diagram below . Digit a l Output Source For a Digital output source (voltag e) configuration for channe l D1, follow the diagram below . D1 D2 GND COM VCC + Battery + - - Device D1 D2 GND COM VCC + Battery [...]

I/O Wiring D iagrams 417 Wiring I/O Diagrams Analog Input Make sure the Analog jumpers su pport the software setting; see Analog Input Module for jumper settings. Current T o connect channel A1 with a 2-wire shielded cab le, connect the positive wire to A1 +, the negative wire to A1-, and optionally the shield to GND. If you have the p ositive/nega[...]

I/O Wiring D iagrams 418 Wiring I/O Diagrams T e mperature Input If you are using R TD sensors, a short detected stat us will be di splayed if the wires are connected improperly . R TD or thermo couple sensors will display an open detection status when the circuit is broken. Thermocouple T o connect to Channel A1 with a 2-wire cable, c onnect the p[...]

I/O Wiring D iagrams 419 Wiring I/O Diagrams RTD 4-Wire In a 4-wire R TD configuration, conn ect the return wire to A1+, the excite wire to A1-, the sense wire to A1s, and leave the f ourth wire disconnected. Relay Output Normally Open Contact T o connect Relay channel R1 for a circuit that is normally inactive, connect one wire to the COM (common)[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 420 Utilities Appendix G G Introduction This chapter provides information on the TruePort and Decoder utilities. Tr u e P o r t T ruePort is a com port redi rector utility for the IOLAN. It can be run in two modes: z T ruePort Full mode —This m ode allows complete device co ntrol and operates ex[...]

Utilities 421 API I/O Access Over T ruePort API I/O Access Over T ruePort Y ou can access IOLAN I/O data through T ruePo rt using the Perle API. The API uses the command/response format. See the ioapiotp.c sample program, found on the product CD-ROM, for an example implementation. API Request Format All data in the Request must be sent as a single [...]

Utilities 422 Decoder Error Codes Decoder If you are using Port Buffering NFS Encryption , you need to run the Decoder utility to view the port buffering logs. See the Readme file to i nstall the Decoder ut ility on any o f the followin g operating systems: z W indows ® 2000 and greater platform z DOS z Solaris x86 z Solaris Sparc 32-bit/64-bit z [...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 423 Accessories Appendix H H Introduction This chapter provides information about peripheral IOLAN options that can be ordered separatel y from the product. Contact your sales representa tive to find out how to order the products listed in this appendix. Inst alling a Perle PCI Card This sections [...]

Accessories 424 Installing a Perle PCI Card 2. Unscrew the four screws along the bottom of the serial si de of the SCS IOLAN. On the SCS 8- port/16-port/32-po rt models, this includes the screw that is at the bottom of the PCI face plate. 3. Slide the top of the IO LAN off of the chassis. 4. Carefully holding the bracket just behind the face plate,[...]

Accessories 425 Installing a Perle PCI Card 7. The black bracket should then fit on the inside of the PCI adapte r card bracket. Align the adapter card bracket and then insert the screw and tighten it to keep it firmly in place. 8. If you are installing the PCI Ad apter card, slide the wireless W AN card into the adapter card. 9. Slide the PCI adap[...]

Accessories 426 S tarter Kit (Adapters/Cable) S t arter Kit (Adapters/Cable) The IOLAN Starter Kit includes the following for all IOLAN models (except the medical unit models): z RJ45F to DB25M DTE Crossover Adapter z RJ45F to DB25M DCE Modem Adapter z RJ45F to DB25F DTE Crossover Adapter z RJ45F to DB9M DTE Crossover Adapter z RJ45F to DB9F DTE Cr[...]

Accessories 427 S tarter Kit (Adapters/Cable) RJ45F to DB25M DCE Modem Adapter The following diagram sh ows the IOLAN RJ45F J DB2 5M DCE modem adapter pinouts. This is model number DBA0013. RJ45F DB25M (TxD) 4 2 (RxD) (RxD) 5 3 (TxD) (GND) 6 7 (GND) (DTR) 8 20 (DTR ) (DSR) 3 6 (DSR) (DCD) 1 8 (DCD) (R TS) 2 4 (R TS) (CTS) 7 5 (CTS)[...]

Accessories 428 S tarter Kit (Adapters/Cable) RJ45F to DB25F DTE Crossover Adapter The following diagram sh ows the IOLAN RJ45 J D B25F DTE crossover adapter pinouts. This is model number DBA0010. RJ45F DB25F (TxD) 4 3 (RxD) (RxD) 5 2 (TxD) (GND) 6 7 (GND) (DTR) 8 6 (DSR) 8 (DCD) (DSR) 3 20 (DTR) (R TS) 2 5 (CTS) (CTS) 7 4 (R TS)[...]

Accessories 429 S tarter Kit (Adapters/Cable) RJ45F to DB9M DTE Crossover Adapter The following diagram sh ows the IOLAN RJ45 J D B9M crossover adapter pinout s. This is model number DBA0021. RJ45F DB9M (TxD) 4 2 (RxD) (RxD) 5 3 (TxD) (GND) 6 5 (GND) (DTR) 8 1 (DCD) 6 (DSR) (DSR) 3 4 (DTR) (R TS) 2 8 (CTS) (CTS) 7 7 (R TS)[...]

Accessories 430 S tarter Kit (Adapters/Cable) RJ45F to DB9F DTE Crossover Adapter The following diagram sh ows the IOLAN RJ45F J DB9 F crossover adapter pinout s. This is model number DBA0020. Sun/Cisco RJ45M Co nnector Cable for Rack Mount Models This is a 3 meter RJ45M J RJ45M 8-wire Sun/Cisco modu lar cable. The fol lowing diagram shows how the [...]

Accessories 431 SCS48C/SCS32C/SCS16C/SCS8C S tarter Kit SCS48C/SCS32C/SCS16C/SCS8C S t arter Kit (Adapters/Cable) The IOLAN Starter Kit includes the foll ow ing for the SCS48C/SCS32C/SCS16C/SCS8C (Sun/Cisco) models: z RJ45F to DB25M DTE Crossover Adapter z RJ45F to DB25M DCE Modem Adapter z RJ45F to DB25F DTE Crossover Adapter z RJ45F to DB9M DTE C[...]

Accessories 432 SCS48C/SCS32C/SCS16C/SCS8C S tarter Kit RJ45F to DB25M DCE Modem Adapter The following diagram sh ows the IOLAN RJ45F J DB2 5M DCE modem adapter pinouts. This is model number DBA0013C. RJ45F DB25M (TxD) 3 2 (TxD) (RxD) 6 3 (RxD ) (GND) 4 (GND) 5 7 (GND) (DTR) 2 20 (DTR ) (DSR) 7 8 (DCD) (R TS) 1 4 (R TS) (CTS) 8 5 (CTS)[...]

Accessories 433 SCS48C/SCS32C/SCS16C/SCS8C S tarter Kit RJ45F to DB25F DTE Crossover Adapter The following diagram sh ows the IOLAN RJ45 J D B25F DTE crossover adapter pinouts. This is model number DBA0010C. RJ45F DB25F (TxD) 3 3 (RxD) (RxD) 6 2 (TxD) (GND) 4 (GND) 5 7 (GND) (DTR) 2 6 (DSR) 8 (DCD) (DSR) 7 20 (DTR) (R TS) 1 5 (CTS) (CTS) 8 4 (R TS)[...]

Accessories 434 SCS48C/SCS32C/SCS16C/SCS8C S tarter Kit RJ45F to DB9M DTE Crossover Adapter The following diagram sh ows the IOLAN RJ45 J D B9M crossover adapter pinout s. This is model number DBA0021C. RJ45F DB9M (TxD) 3 2 (RxD) (RxD) 6 3 (TxD) (GND) 4 (GND) 5 5 (GND) (DTR) 2 1 (DCD) 6 (DSR) (DSR) 7 4 (DTR) (R TS) 1 8 (CTS) (CTS) 8 7 (R TS)[...]

Accessories 435 SCS48C/SCS32C/SCS16C/SCS8C S tarter Kit RJ45F to DB9F DTE Crossover Adapter The following diagram sh ows the IOLAN RJ45F J DB9 F crossover adapter pinout s. This is model number DBA0020C. Sun/Cisco Roll-Over Adap ter for Rack Mount Models This is a RJ45M J RJ45F Sun/Cisco adapter . This model number is DBA0031C. *The Sun/Cisco RJ45M[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 436 T roubleshooting Appendix I I Introduction This chapter provides information that can help reso lve problems with the IOLAN. Hardware T roubleshooting The Power/Ready LED stays red after a boot (See Getting to Know Y our IOLA N for the LED label on your IOLAN unit.): If the IOLAN Power/Ready L[...]

T roub leshooting 437 Communication Issues z Non-critical Error Boot: When the IOLAN cycles through a boot and a non-critical error occurs, such as a bad port, the LED will blink red briefly before displayin g a solid green. Y ou should reboot the IOLAN while monit oring the Console port to view the error information . z Critical Error Boot: When t[...]

T roub leshooting 438 Host Problems Host Problems Cannot access a host by name: z If using DNS or if DNS is required, ensure a na meserver is configured on your IOLAN and is accessible (ping it). z If not using DNS, verify that the host is configured in the Host T able . Check access to the host by pinging it using the host’ s IP address. Cannot [...]

T roub leshooting 439 Login Problems Login Problems Y ou cannot obta in a login on any of the serial ports z Connect via the Admin port and check the settings of the front-mo unted ports; they have probably been set to a profile that does support serial co nnections, such as the Console Management profile (in CLI or Me nu, ‘direct’ or ‘silent[...]

T roub leshooting 440 Unknown IP Address Unknown IP Address Y ou have already configured the IOLAN and you do know your password, and have lost, misconfigur ed, or don't know the IP addr ess of the IOLAN, so you ca nnot obtain a successful login. z If the IOLAN resides within the local network se gment, you can use Devi ceManager to find the I[...]

T roub leshooting 441 Modem Problems Modem Problems The IOLAN is not initializing the modem. z Check your Line Service is set to SLIP or PPP . If your line service is set to any other type, the IOLAN will not initial ize a modem. Y ou will need to configure the modem manuall y . PPP Problems The link fails on start-up when ther e are remote IP addr[...]

T roub leshooting 442 SSL/TLS SSL/TLS If you are experiencing problems obtaining a successful SSL/TLS conn ection, you can set your Syslog Level to Notice and view the syslog for the following messages: Line not SSL enabled. Abort connection when a user who is configured for Service SSL_RA W tries to login on the serial port. The user has been conf[...]

T roub leshooting 443 IPv6 Issues IPv6 Issues Y ou are not seeing the IPv6 address valu e when you attempt to conn ect to the IOLAN. Many W indows ® based systems have IPv6 support already enabled, however, if you need to install IPv6 then follow the procedure below . T o install IPv6 support do the following: 1. In Control Panel, doub le-click th[...]

T roub leshooting 444 Contacting T echnical Support Cont acting T echnical Support Making a T echnical Support Query Who T o Cont act If you bought your produ ct from a registered Perle supplier, you must contact their T echnical Support department; they are qualified to deal with you r problem. Have Y our Product Information Ready When you make a [...]

T roub leshooting 445 Contacting T echnical Support Rep air Procedure Before sending the IOLAN for repair, you must contact your Perle supplier . If, however, you bought your product directly from Perle you can contact direct ly . Customers who are in Europe, Afri ca or Middle East can submit repair d etails via a websit e form. This form is on the[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 446 Dat a Logging Appendix J J Introduction This appendix provides additional info rmatio n about the Data Logging Feature T rueport Profile The following features are not compatible when using the Data Logging feature. z Allow Multiple Hosts to connect z Connect to Multiple Hosts z Monitor DSR or[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 447 Modbus Remapping Appendix K K Introduction This appendix provides additional inform ation about the Modbus Remapping feature. Modbus Remapping Feature The Modbus remapping feature allows a TCP Modbus Mast er to poll a Modbus slave device and have the IOLAN translate the UID to a dif ferent UID[...]

Modbus Remapping 4 48 Configuring the Modbus UID T ra nslation Feature 2. Down load the "modbus_remap" file th at you created to the IOLAN using: z Device Manager: use "to ols-advanced-custom files" d ialog "download ot her file" z W eb Manager: use "administration-cu stom files" page "other file" z[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 449 Symmetric Key File Appendix L L Symmetric Key File This section defines the layout of the NTP/SNTP Symm etric Key file that must be downloaded to the IOLAN in order to use NTP/SNTP server authenticati on feature. Each line of the NTP/SNTP symmetric key file consists of three fields: a key ID i[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 450 T roubleshooting the USB Modem Appendix M M Modem not connecting to the network. This appendix provides some helpful troublesho otin g tips for getting your USB modem to connect to your wireless network. In most cases, the IOLAN will be able to detect, initialize and operate the USB modem auto[...]

T ro ubleshooting the USB Modem 4 51 Modem not connecting to the network. “No USB modem device detected. Pl ease connect a USB modem to one of the USB ports.” Action: The software is not detecting a USB modem in the USB port. If one is inserted, please make sure that it is properly seated in the USB connector . Output: Manufacturer: manufactur [...]

T ro ubleshooting the USB Modem 4 52 Modem not connecting to the network. Action: T ry a different USB modem or s earch the intern et linux comm unity for possible upd ates to the usb_modeswitch configuration fi le for that vendor and product id. The USB modem may also be defective. Contact Perle supp ort if there is no information on the internet [...]

T ro ubleshooting the USB Modem 4 53 USB Modem Support and Custom Options As far as the driver can tell, the USB modem is functioning correctly . If there is no wireless network connectivity , verify the APN, phone number and optio nal PIN#, user and password settings. Each service provider ’ s network will hav e different requirements. See Confi[...]

T ro ubleshooting the USB Modem 4 54 USB Modem Support and Custom Options vvvv = V endo r ID pppp = Storage Product ID At this point, you can either re-boot the IOLA N or kill the PCI port to re-try the USB modem.[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 455 Glossary This chapter provides definitions for Device Server terms. BOOTP (BOOT strap Protocol) An Internet protocol that enables a diskless workstation to discover its own IP address, the IP address of a BOOTP server on the network, and a file to be loaded into memory to boot the machine. Thi[...]

456 P AP (Password Authentication Protocol) Standard authentication protocol for PPP connections. see CHAP RADIUS (Remote Authentication Dial In Users Services) An open standard network securit y server that communicates wi th the P AP protoco l. Reverse Connection Co nnections that originat e from a host that go directly to a serial device through[...]

IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 457 A admin default password 77 lost password 351 analog calibrating 343 API I/O commands 300 , 421 TruePort 299 ARP-Ping, setting an IP address 80 authentication, general 223 B binary configuration file 91 BOOTP parameters 67 setting an IP address 79 C cabling, EIA-232 403 calibrating analog 343 [...]

J Index IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 458 rack mount 45 interface, IOLAN+ 70 I/O Modbus 293 UDP 289 I/O SNMP traps 304 IOLAN+ interface 70 CLI 63 Menu 64 IOLAN+, supported mod els 70 IPsec 243 IPv6, setting an IP addr ess 80 J jumpers line termination 408 power out 408 setting 408 K keys HTTPS 259 SSH 259 L L2TP/IPsec 248 lang[...]

R Index IOLAN SDS/SCS/STS/MDC User ’s Guide, V ersion 4.5 459 host-based 358 LPD 357 RCP 358 product repair 445 R rack mount description 41 , 43 installing 45 RADIUS parameters 226 supported RADIUS parameters 382 RCP printing 358 resetting to factory defaults 350 RIP overview 105 RJ45 ethernet pinouts 402 MDC serial pinouts 401 SCS48C serial pino[...]