Tofino Argon 220 Hardware Installation and
Contents
1. While every precaution has been taken in the preparation of this document the publisher and the author assume no responsibility for errors or omissions or for damages resulting from the use of information contained in this document or from the use of programs and source code that may accompany it In no event shall the publisher and the author be liable for any loss of profit or any other commercial damage caused or alleged to have been caused directly or indirectly by this document 039 741 001 04 0410 30 3 10 Content 1 1 1 2 2 2 2 3 24 2 5 2 6 2 7 Safety instructions Legend Device description General device description Description of the device variants Assembly and start up Installing the device 2 1 1 Unpacking and checking 2 1 2 Terminal block for supply voltage and signal contact 2 1 3 Connecting the terminal block start up procedure 2 1 4 Installing the device on the DIN rail grounding 2 1 5 Connecting the data lines 2 1 6 Connection to the network Display elements Controls Basic set up 2 4 1 Default settings 2 4 2 USB interface 2 4 3 V 24 interface Configuration Network modes Disassembly Technical data Technical Support Tofino Argon 220 SA Release 04 04 10 13 13 13 13 14 15 15 16 16 18 19 19 19 21 21 22 23 24 31 Safety instructions This documentation contains instructions which must be observed to ensure your own personal safety and to avoid dam2. 25 Network range TP port Length of a twisted pair segment max 100 m Table 8 TP port 10BASE T 100BASE TX Ports Wave Fiber System at Expansion length tenuation MM 1300 nm 50 125 um 0 8 dB 0 5 km MM 1300 nm 62 5 125 um 0 11 dB 0 4 km Table 9 LWL port 100BASE FX MM Multimode Power consumption power output Device variant Power con Power output sumption at 24 at 24 V DC V DC TX TX 6 9 W 23 5 Btu IT h 8 1 W 27 6 Btu IT h MM TX MM MM 9 5 W 32 4 Btu IT h Order numbers Device Order number Tofino Argon 220 SA TX TX FA TSA 220 TX TX Tofino Argon 220 SA TX MM FA TSA 220 TX MM Tofino Argon 220 SA MM TX FA TSA 220 MM TX Tofino Argon 220 SA MM MM FA TSA 220 MM MM 26 Fiber data 1 0 dB km 800 MHz km 1 0 dB km 500 MHz km Power con Power output sumption at 24 at 24 V AC V AC 7 2 W 24 6 Btu IT h 8 1W 27 6 Btu IT h 9 6 W 32 8 Btu IT h Tofino Argon 220 SA Release 04 04 10 1 2 Interfaces Port 1 Untrusted m Port 2 Trusted V 24 interface USB interface Either TXor MM Twisted pair depending on device variant Either TXor MM Twisted pair depending on device variant TX ports Fiber optic cable MM ports TX ports Fiber optic cable MM ports Standard Connection type Type of fiber Standard Connection type Standard Connection type Type of fiber Standard Connection type ISO IEC 8802 03 10BASE T 100BAS
3. C to 70 C 10 to 95 non condensing Up to 2000 m 795 hPa higher altitudes on request 0 C to 60 C Class 1 according to EN 60825 1 2001 IP 20 Tofino Argon 220 SA Release 04 04 10 EMC and immunity EMC interference immunity EN 61000 4 2 EN 61000 4 3 EN 61000 4 4 EN 61000 4 5 EN 61000 4 6 EN 61000 4 9 EMC emitted inter ference EN 55022 FCC 47 CFR Part 15 Germanischer Lloyd Stability Vibration Shock Tofino Argon 220 SA Release 04 04 10 Electrostatic discharge Contact discharge Air discharge Electromagnetic field 80 2 700 MHz Fast transients burst Power line Data line Voltage surges Power line line line Power line line earth Data line Line conducted interference voltages 150 kHz 80 MHz Impulse shaped magnetic fields Class A Class A Classification and Construction Guidelines VI 7 3 Part 1 IEC 60068 2 6 Test FC test level according to IEC 61131 2 Germanischer Lloyd Guidelines for the Performance of Type Tests Part 1 IEC 870 2 2 table 3 normal requirements according to EN61850 3 EN 61373 Category 1 Class A broadband noise require ments according to EN 50155 IEC 60068 2 27 Test Ea test level according to IEC 61131 2 IEC 870 2 2 table 3 normal requirements according to EN61850 3 EN 61373 Category 1 Class A requirements according to EN 50155 4 kV 8 KV 10 V m 2 kV 1 kV 0 5 kV 1 kV 1 kV 10 V Yes Yes Yes
4. data lines 10 100 Mbit stwisted pair connection These connections are RJ45 sockets 10 100 Mbit s TP ports enable the connection of terminal devices or inde pendent network segments according to the IEEE 802 3 10BASE T 100BASE TX standard These ports support Autonegotiation Autopolarity gt Autocrossing if autonegotiation is activated 100 Mbit s half duplex mode 100 Mbit s full duplex mode 10 Mbit s half duplex mode 10 Mbit s full duplex mode State on delivery autonegotiation activated The socket housing is electrically connected to the bottom panel Tofino Argon 220 SA Release 04 04 10 15 Figure Pin Function 1 2 3 6 4 5 7 8 Not used Table 5 Pin assignment of a TP TX interface in MDI X mode RJ45 socket 100 Mbit s F O connection These connections are DSC connectors 100 MBit s F O ports enable the connection of terminal devices or inde pendent network segments in compliance with the IEEE 802 3 100BASE FX standard These ports support Full or half duplex mode State on delivery full duplex FDX O0 Oo Co 2 1 6 Connection to the network L Connect the device to the local network or the local computer that you want to protect i LO Connect the socket for the connection to the external non secure net work fim e g the Internet This network is used to set up the connec tions to the rem
5. locking gate pull this down with out tilting the screwdriver and fold the device up Figure 4 Disassembly Tofino Argon 220 SA Release 04 04 10 23 Technical data General technical data Dimensions WxHxD Weight Power supply Tofino Argon 220 SA TX TX 60mm x 145 mm x 123 mm Tofino Argon 220 SA TX MM Tofino Argon 220 SA MM TX Tofino Argon 220 SA MM MM Tofino Argon 220 SA TX TX Tofino Argon 220 SA TX MM Tofino Argon 220 SA MM TX Tofino Argon 220 SA MM MM Redundant power supply Safety extra low voltage SELV redundant inputs disconnected Relevant for North America NEC Class 2 power source max 5A 615g Operating voltage Overload current protection at input Insulation voltage between operating voltage con nections and housing Non replaceable fuse FAULT signal contact Switching current Switching voltage Environment Storage temperature ambient air Humidity Air pressure Operating tempera Surrounding air ture Protection classes Laser protection Protection class Mounting 24 35 mm DIN rail DIN EN 60175 Rated voltage range DC 12 to 48 V DC Max voltage range DC min 9 6 to max 60 V DC Rated voltage range AC 24 V AC Max voltage range AC min 18 to max 30 V AC 800 V DC Protective elements limit the insulation voltage to 90 V DC 1mA max 1 A SELV max 60 V DC or max 30 V AC SELV Relevant for North America NEC Class 2 40
6. 4 10 The LEDs V 24 R and flash in sequence of left to right indicating a USB Save is in progress If the USB Save function fails the FAULT LED will flash The number of flashes will indicate the specific step at which the failure occurred see table 6 After the USB Save or Fault has completed all LEDs will return to their previous state USB Load To load a configuration to the device from a USB storage device proceed as follows Press the SLR button 2 times The LED amp glows Note Each button press will illuminate amp LED to yellow working from left to right see page 18 Save Load Reset button SLR The USB Save begins after 5 seconds The LEDs s and V 24 R flash in sequence of right to left indicating a USB Load is in progress If the USB Load function fails the FAULT LED will flash The number of flashes will indicate the specific step at which the failure occurred see table 6 After the USB Load or Fault has completed all LEDs will return to their previous state 2 4 3 V 24 interface The V 24 interface is not active in this version of firmware 2 5 Configuration You configure the device using the Tofino Central Management Platform CMP You will find further information in the Tofino CMP User s Guide on the CD ROM Tofino Argon 220 SA Release 04 04 10 21 2 6 Network modes The device can operate in one of 4 modes Mode Description LED Decommis Co
7. 5 Supports gt Autonegotiation gt Autopolarity P Autocrossing gt Full or half duplex mode MM Media type Fiber optic cable Standard ISO IEC 8802 03 100BASE FX Connection type DSC Type of fiber Multimode Supports Full or half duplex mode Table 3 Naming TOFINO 220 P1 Faut P1 Faur P1 Faut MODE DOC mer pos j MODE as V 24 m ays V 24 R SAVE Tofino Argon 220 SA Tofino Argon 220 SA Tofino Argon 220 SA Tofino Argon 220 SA TX TX MM TX MM MM TX MM Port 1 Port 2 Untrusted I Trusted e Device variant TX MM TX MM Tofino Argon 220 SA TX TX X X Tofino Argon 220 SA TX MM X X Tofino Argon 220 SA MM TX X X Tofino Argon 220 SA MM MM X X Table 4 Device variants Trusted and untrusted ports Tofino Argon 220 SA 12 Release 04 04 10 2 Assembly and start up The devices have been developed for practical application in a harsh indus trial environment The installation process is correspondingly simple On delivery the device is ready for operation The following procedure has been proven to be successful for theassembly of the device Unpacking and checking Connect the terminal block for voltage supply and signal contact and connect the supply voltage Install the terminal block start up procedure Install the device on the DIN rail grounding Connect the data lines 2 1 Installing the devi
8. Activity Lights up Flashing alter nately Meaning The supply voltage is on The supply voltage is too low The supply voltage is on The supply voltage is too low Meaning Signal contact is closed it is not reporting an error The signal contact is on immediately after power is applied and will remain on until the operating system initialization is complete After the power up initialization is complete this LED indicates hardware or firmware fail ure The device operating system did not start The LSM service did not start A USB load or save error occurred Meaning The device is in passive or decommissioned mode The device is in operational mode The device is in test mode Meaning The saving of the device diagnostic or log files to the USB storage device is about to begin The saving of the device diagnostic or log files to the USB storage device is in prog ress Meaning The load of the configuration files from the USB storage device is about to begin The load of the configuration files from the USB storage device is in progress Meaning Thereset of the device to the factory defaults is about to begin Thereset of the device to the factory defaults is in progress 17 Port state LED Display Color Activity Meaning Link status None No valid connection Port 1 Link status Green Lights up Valid connection Port 1 data Yellow Flashing Data traffic Port 1 Link status None No
9. E TX RJ45 Multimode ISO IEC 8802 03 100BASE FX DSC ISO IEC 8802 03 10BASE T 100BASE TX RJ45 Multimode ISO IEC 8802 03 100BASE FX DSC The V 24 interface is not active in this version of firmware USB storage device Table 10 Overview interfaces Tofino Argon 220 device Scope of delivery Terminal block 6 pin Connection CD ROM with user manual Installation user manual Tofino Argon 220 SA Release 04 04 10 Power supply Signal contact 27 Accessories Note Please note that products recommended as accessories may have characteristics that do not fully comply with those of the corresponding product This may limit their possible usage in the overall system Name Order number Tofino Argon Central Management Platform FA CMP 100 Tofino Argon Firewall LSM LSM FW 100 Tofino Argon Secure Asset Management LSM LSM SAM 100 Tofino Argon Modbus TCP Enforcer LSM LSM MBT 100 Tofino Argon VPN Server LSM LSM VPNS 100 Tofino Argon VPN Client LSM LSM VPNC 100 Tofino Argon Event Logger LSM LSM LOG 100 Tofino Argon VPN PC Client Lizence LSM VPNL 100 Underlying norms and standards Name EN 61000 6 2 2005 Generic norm immunity in industrial environments EN 55022 2006 A1 2007 IT equipment radio interference characteristics IEC EN 60950 1 2006 Safety for the installation of IT equipment EN 61131 2 2003 Programmable logic controllers EN 50121 4 2000 Railway applications EMC emitted interf
10. Systems The devices support the following security functions Stateful Firewall FW Virtual Private Network VPN Denial of Service Traffic Limiter Device Detection and Identification Secure Asset Management Security Alarm and Event Logging All security functions are installed as separately purchased Loadable Secu rity Modules LSM These can be added or removed at any time Name Order number Tofino Argon Firewall LSM LSM FW 100 Tofino Argon Secure Asset Management LSM LSM SAM 100 Tofino Argon Modbus TCP Enforcer LSM LSM MBT 100 Tofino Argon VPN Server LSM LSM VPNS 100 Tofino Argon VPN Client LSM LSM VPNC 100 Tofino Argon Event Logger LSM LSM LOG 100 Tofino Argon VPN PC Client Lizence LSM VPNL 100 The devices support the following network modes Passive Mode Test Mode Operational Mode The Tofino Argon 220 devices are designed for the special requirements of industrial automation They meet the relevant industry standards provide very high operational reliability even under extreme conditions and also long term reliability and flexibility The devices work without a fan The voltage is supplied redundantly Mount the devices by simply snapping them onto a DIN rail Tofino Argon 220 SA 10 Release 04 04 10 Among others the devices have the following important features Management Tofino Central Management Platform CMP Protocol Syslog Redundant power X Safety extra low voltage SELV redundant inputs disconnected
11. TOFINO Hardware Installation Guide Tofino Argon 220 Security Appliance Release 04 04 2010 220 TOFINO 220 TOFINO 220 TOFINO 220 pese Oe ee roe ee MODE MODE sfs V 24 R wys V 24 R ws V 24 R V 24 R ioh O ROADS tone RESET RESET ESET RESET A 3 A A ag a NM A A 4 5 b ERE pir zit pir 0 Y 40 INEO V dA YMO G0 Tofino Argon 220 SA Tofino Argon 220 SA Tofino Argon 220 SA Tofino Argon 220 SA TX TX MM TX MM MM TX MM Technical Support support tofinosecurity com 039741001040410000 Copyright Information Byres Security Inc While this information is presented in good faith and believed to be accurate Byres Security Inc disclaims the implied warranties of merchantability and fitness for a particular purpose and makes no express warranties except as may be stated in its written agreement with and for its customers In no event is Byres Security Inc liable to anyone for any indirect special or conse quential damages The information and specifications in this document are subject to change without notice Tofino Tofino Industrial Security Solution and Tofino Intrinsically Secure are trademarks of Byres Security Inc Other brand or product names are trademarks of their re spective owners
12. age to devices and machinery Certified usage Please observe the following The device may only be employed for the purposes described in the catalog and technical description and only in conjunction with external devices and components recommended or approved by the manufacturer The product can only be operated cor rectly and safely if it is transported stored installed and assembled pro perly and correctly Furthermore it must be operated and serviced carefully Supply voltage For safety reasons the devices have been designed to operate at low volt ages Thus they may only be connected to the supply voltage connec tions and to the signal contact with SELV circuits with the voltage restrictions in accordance with IEC EN 60950 1 The supply voltage is electrically isolated from the housing Use only undamaged parts O Relevant for North America For use in Class 2 circuits The device may only be connected to a supply voltage of class 2 that fulfills the requirements of the National Electrical Code Table 11 b If the voltage is being supplied redundantly two different voltage sourc es the combined supply voltages must fulfill the requirements of the National Electrical Code Table 11 b O Relevant for North America For use in Class 2 circuits Only use copper wire conductors of class 1 60 75 C or 75 C Shielding ground The shielding ground of the connectable twisted pairs lines is connected to the front panel
13. as a conductor L Beware of possible short circuits when connecting a cable section with conductive shielding braiding Housing Only technicians authorized by the manufacturer are permitted to open the housing The lower panel of the device is grounded by means of the DIN rail and optionally by means of the separate ground screw O Make sure that the electrical installation meets local or nationally ap plicable safety regulations Tofino Argon 220 SA 4 Release 04 04 10 Theventilation slots must not be covered so as to ensure free air circu lation L The clearance to the ventilation slots of the housing must be at least 10 cm 3 94 in Warning N Never insert sharp objects small screwdrivers wires etc into the inside of the product There is the risk of an electric shock The device must be installed in the vertical position see fig 3 LJ If installed in a living area or office environment the device must be operated exclusively in switch cabinets with fire protection character istics according to EN 60950 1 Environment The device may only be operated at the specified maximum ambient tem perature temperature of the surrounding air at a distance of up to 5 cm 1 97 in to the device and relative air humidity non condensing Install the device in a location where the climatic threshold values specified in the technical data are adhered to Only to be used in an environment with a pollution de
14. ble to encrypt the configuration files The files may have diagnostic files Contact technical sup been corrupted during the transfer pro port cess onto the USB storage device Please try transferring them again If this second transfer attempt is unsuc cessful then please contact technical support 5 The device was unable to load the files The device was unable to copy the en The files may have been corrupted dur crypted diagnostics files to the USB ing the transfer process onto the USB storage device The USB storage de storage device Please try transferring vice may be full them again If this second transfer at tempt is unsuccessful then please con tact technical support 6 The device was unable to shut downthe The device was unable to shut down the USB port Contact technical support USB port Contact technical support 7 The file system on the device has no space to temporarily store the files be fore it copies them to the USB storage device Contact technical support Table 6 FAULT LED diagnostics for USB Load and Save USB Save To save event log and diagnostic information from the device to a USB storage device proceed as follows Press the SLR button 1 time The LED im glows Note Each button press will illuminate an q amp LED to yellow work ing from left to right see page 18 Save Load Reset button SLR The USB Save begins after 5 seconds Tofino Argon 220 SA 20 Release 04 0
15. ce Before installing and starting up the device note the safety instructions see page 4 onwards 2 1 1 Unpacking and checking L Check whether the contents of the package are complete see page 27 Scope of delivery L Check the individual parts for transport damage 2 1 2 Terminal block for supply voltage and signal contact The supply voltage and the signal contact are connected via a 6 pin terminal block with a snap lock Supply voltage The supply voltage can be connected redundantly Both inputs are uncou pled There is no distributed load With redundant supply the power sup ply unit supplies the device only with the higher output voltage The supply voltage is electrically isolated from the housing You can choose between DC or AC voltage when connecting the supply voltage You use the 24 V and 0 V pins to connect the AC voltage fig 1 and fig 2 Note With non redundant supply of the main voltage the device reports a loss of power You can avert this message by supplying the voltage over the two inputs Tofino Argon 220 SA Release 04 04 10 13 Warning N For safety reasons the devices have been designed to operate at low voltages Thus they may only be connected to the supply voltage connections and to the signal contact with SELV circuits with the voltage restrictions in accordance with IEC EN 60950 1 FAULT 4 _ 1 24 2 12 48VDC 12 48V DC Figure 1 Pin assi
16. dures Never start operation with damaged components Only use the devices in accordance with this manual In particular ob serve all warnings and safety related information LI Any work that may be required on the electrical installation may only be carried out by personnel trained for this purpose 1L Note LED or LASER components in compliance with IEC 60825 1 2001 CLASS 1 LASER PRODUCT CLASS 1 LED PRODUCT National and international safety regulations O Make sure that the electrical installation meets local or nationally ap plicable safety regulations Note on the CE marking The devices comply with the regulations contained in the following European directives 2004 108 EG Directive of the European Parliament and the Council for standardizing the regulations of member states on electromagnetic compatibility In accordance with the above named EU directives the EU conformity declaration will be at the disposal of the relevant authorities at the follow ing address Hirschmann Automation and Control GmbH Stuttgarter Str 45 51 72654 Neckartenzlingen Germany Tel 49 1805 141538 The product can be used in living areas living area place of business small business and in industrial areas Interference immunity EN 61000 6 2 2005 Emitted interference EN 55022 2006 Class A Tofino Argon 220 SA Release 04 04 10 Warning N This is a class A device This device can cause interference in living areas a
17. erence and interfer ence immunity for signal and telecommunication systems FCC 47 CFR Part 15 2009 Code of Federal Regulations German Lloyd Classification and Construction Guidelines VI 7 3 Part 1 Ed 2003 cUL 508 1998 Safety for Industrial Control Equipment EN 60079 15 Electrical equipment for explosive gas atmospheres part 15 Construction testing and marking of protection type n electrical apparatus EN 50155 Declaration Railways IEC EN 61850 3 Communications networks and systems in stations IEEE 1613 Standard Environment and Testing Requirements for Communi cation Networking Devices in Electric Power Substations Table 11 List of norms and standards Certified devices are marked with a certifica tion indicator Tofino Argon 220 SA 28 Release 04 04 10 Certifications The following table shows the status of the certification of the devices Standard cUL 508 CSA C22 2 No 142 Yes Germanischer Lloyd Yes Table 12 Certifications for the current status visit www hirschmann ac com Tofino Argon 220 SA Release 04 04 10 29 30 Tofino Argon 220 SA Release 04 04 10 A Technical Support Please contact the local representative in your region Or E Mail support tofinosecurity com Web www tofinosecurity com Tofino Argon 220 SA Release 04 04 10 31
18. gnment of the 6 pin terminal block DC connection FAULT 4 2avipt OV ov__1 24V P2 24V AC 24V AC Figure 2 Pin assignment of the 6 pin terminal block AC connection Signal contacts A break in contact is used to report the following via the potential free sig nal contact relay contact closed circuit a continuous malfunction in the device internal supply voltage 2 1 3 Connecting the terminal block start up procedure L Pull theterminal block off the device and connect the voltage supply lines and the signal lines Startup procedure Mount the terminal block for the voltage supply and signal contact on the front of the device using the snap lock Make sure that the snap lock snaps into place Connecting the voltage supply via the terminal block starts the operation of the device Tofino Argon 220 SA 14 Release 04 04 10 2 1 4 Installing the device on the DIN rail grounding O Mount the device on a 35 mm DIN rail in accordance with DIN EN 60175 Attach the upper snap in guide of the device into the DIN rail and press it down against the DIN rail until it snaps into place Note The shielding ground of the industrial connectable twisted pair lines is connected to the lower panel as a conductor Figure 3 Mounting on the DIN rail Grounding The lower panel of the device housing is grounded by means of the DIN rail and optionally by means of the separate ground screw see table 1 2 1 5 Connecting the
19. gree specified in the technical data Qualification requirements for personnel Qualified personnel as understood in this manual and the warning signs are persons who are familiar with the setup assembly startup and oper ation of this product and are appropriately qualified for their job This in cludes for example those persons who have been trained or directed or authorized to switch on and off to ground and to label power circuits and devices or systems in accordance with current safety engineering standards trained or directed in the care and use of appropriate safety equipment in accordance with the current standards of safety engineering trained in providing first aid General safety instructions Electricity is used to operate this equipment Comply with every detail of the safety requirements specified in the operating instructions regarding the voltages to apply see page 4 Non observance of these safety instructions can therefore cause material damage and or serious injuries L Only appropriately qualified personnel should work on this device or in its vicinity These personnel must be thoroughly familiar with all the warnings and maintenance procedures in accordance with this oper ating manual Tofino Argon 220 SA Release 04 04 10 5 L The proper and safe operation of this device depends on proper han dling during transport proper storage and assembly and conscien tious operation and maintenance proce
20. have the following interfaces 1 untrusted port 1 trusted port 1V 24 input 1 USB interface You can choose from several device variants Tofino Argon 220 SA TX TX gt Tofino Argon 220 SA TX MM Tofino Argon 220 SA MM TX Tofino Argon 220 SA MM MM Tofino Argon 220 SA TX MM TOFINO 220 1 Tofino Argon 220 SA Tofino Argon 220 SA Tofino Argon 220 SA zm TX TX MM TX MM MM TOFINO 220 TOFINO 220 TOFINO 220 ree z OS one T SS pe EC ae Sa SS Se Ean Eel beee m ee ee MODE ee ge MODE sys V 24m occ ndo e SAVE LOAD EEG M 5 3 im v 5 mm m 7 E E is s 8 D o 1 Terminal block Pluggable connection 6 pin Connection Power supply Signal contact 2 LED display elements Table 1 Overview interfaces display elements and operating elements Tofino Argon 220 SA 8 Release 04 04 10 3 Button Save Load Reset 4 Port 1 Either TXorMM Twisted pair Standard ISO IEC 8802 03 Untrusted depending ports 10BASE T device variant 100BASE TX I Connection RJ45 type Supports Autonegotiation Autopolarity Autocrossing Full or half duplex mode Fiber optic of fiber Multimode MM ports Standard ISO IEC 8802 03 100BASE FX Connection DSC type Supports Full or half duplex mode 5 USB interface USB storage device 6 Device ID 7 Port 2 Eithe
21. lor Activity None This is the mode of the device on delivery MODE sioned Passive Mode All security functionality is turned off and the device is listening for initialization com mands The device has been preconfigured so that all IP traffic in both directions is possible This is so that the installation of the device will not interrupt or impact process opera tions None A device in Passive mode has been in MODE Test Mode stalled and communicated to at least once by a CMP but has not been requested to process traffic It listens for commands so Loadable Secu rity Modules LSMs can be installed and configured but does not impact the network traffic in any way In Test mode the device does not impact MODE network traffic in any way but generates alarm messages for any traffic that would have been blocked if the device was in Op erational This is used to test if the device is correctly configured before it is used to filter control system traffic Green Flashing In Operational mode the device is fully oper MODE Operational Mode ational processes all traffic and will block any messages not specifically permitted by Green Glowing firewall rules or VPN settings Table 7 Network modes 22 Tofino Argon 220 SA Release 04 04 10 2 7 Disassembly Disassembling the device In order to remove the device from the DIN rail move the screwdriver horizontally under the chassis in the
22. nd in this case the operator may be required to take appropriate measures The assembly guidelines provided in these instructions must be strictly adhered to in order to observe the EMC threshold values FCC note Appropriate testing has established that this device fulfills the require ments of a class A digital device in line with part 15 of the FCC regula tions These requirements are designed to provide sufficient protection against interference when the device is being used in a business environment The device creates and uses high frequencies and can radiate same and if itis not installed and used in accordance with this operating manual it can cause radio transmission interference The use of this device in a liv ing area can also cause interference and in this case the user is obliged to cover the costs of removing the interference Recycling note After usage this product must be disposed of properly as electronic waste in accordance with the current disposal regulations of your county state and country Legend The symbols used in this manual have the following meanings Listing Work step Subheading Tofino Argon 220 SA Release 04 04 10 1 Device description 1 1 General device description The Industrial ETHERNET Security Appliance Tofino Argon 220 ensures the authentication security and confidentiality of communication within produc tion networks but also beyond company boundaries The devices
23. ote device or the remote network 2 2 Display elements After the operating voltage is applied the software starts and initializes itself Afterwards the device performs a self test During these actions the MODE and FAULT LEDs are on soild The process takes around 40 seconds i P1 Q raur pod MODE 000 m s V 24 R Device state These LEDs provide information about conditions which affect the opera tion of the whole device Tofino Argon 220 SA 16 Release 04 04 10 LED P1 P2 LED FAULT LED MODE LED V 24 R LED V 24 R LED V 24 R All except P2 Display Supply volt age 1 Supply volt age 2 Display Signal con tact Errors Display Network mode Display Preparation Saving process Execution Saving process Display Preparation Loading pro cess Execution Loading pro cess Display Preparation Reset pro cess Execution Reset pro cess Tofino Argon 220 SA Release 04 04 10 Color Green Green Color Red Color Green Color Yellow Yellow Color Yellow Yellow Color Yellow Yellow Activity Lights up None Lights up None Activity None Lights up Long flashing Short flashing Very short flashing in cy cles of 0 5 s Activity None Lights up Long flashing Activity Lights up Flashing alter nately in right to left sequence Activity Lights up Flashing alter nately in left to right sequence
24. ptions You will find further information in the Tofino CMP User s Guide on the CD ROM 2 4 1 Default settings IP address Note You do not need an IP address for initial set up and for most config uration or security options Network mode Passive Mode Signal contact The device evaluates the link status Ports Twisted pair Autonegotiation TX ports Fiber optic cable Full duplex mode MM ports 2 4 2 USB interface The USB socket has an interface for the local connection of a USB saving device It is used for saving loading the configuration and for updating the software Contact number Signal name 1 VCC 2 Data 3 Data 4 Ground Tofino Argon 220 SA Release 04 04 10 19 No of During the USB Load During the USB Save Flashes of Sequence Sequence the FAULT LED 1 The USB ports are disabled At the Tofi no CMP console check the General Communications settings for the partic ular device Confirm the USB Load Config setting is Enabled and apply the configuration 2 No USB storage device in the USB port No USB storage device in the USB port or the USB storage device is not format or the USB storage device is not format ted with the standard FAT16 or FAT32 ted with the standard FAT16 or FAT32 format format 3 The files on the USB storage device are The device was unable to create the di not valid agnostics files Contact technical sup port 4 The device was unable to decrypt the The device was una
25. r TXorMM Twisted pair Standard ISO IEC 8802 03 Trusted depending TX ports 10BASE T device variant 100BASE TX e Connection RJ45 type Supports Autonegotiation Autopolarity Autocrossing Full or half duplex mode Fiber optic of fiber Multimode MM ports Standard ISO IEC 8802 03 100BASE FX Connection DSC type Supports Full or half duplex 8 V 24 interface 9 Grounding screw Table 1 mode The V 24 interface is not active in this version of firmware Overview interfaces display elements and operating elements You can use the devices everywhere that security sensitive network equip ment or zones require a connection out in a harsh environment The Tofino Argon 220 devices are the link between the secure network and the unse cured outside world In their function as a link the devices protect the secu rity sensitive systems from undesired data traffic from the outside world Tofino Argon 220 SA Release 04 04 10 9 Typical uses are Protecting individual production cells in a flat company network Protecting individual production cells in a routed company network Connecting a production cell with the office network via a public network Providing protected remote service access Segmenting control networks into security zones Creating encrypted tunnels between remote sites and central facilities Securing connections to partner networks Protecting wireless networks Separating Safety Integrated
26. supply Relevant for North America NEC Class 2 power source max 5A Operating voltage Rated voltage range DC 12 to 48 V DC Rated voltage range AC 24 V AC Operating tempera Surrounding air 0 C to 60 C ture Housing Mounting 35 mm DIN rail DIN EN 60175 Protection class IP 20 USB storage Saving diagnostic files and log files to USB storage device device Loading configuration files from USB storage device Certifications decla German Lloyd rations cUL 508 CSA C22 2 No 142 Table 2 Important features 1 2 Description of the device variants You can choose from several device variants Tofino Argon 220 SA TX TX Tofino Argon 220 SA TX MM Tofino Argon 220 SA MM TX Tofino Argon 220 SA MM MM The abbreviations in the device names denote the ports of the device The first abbreviation stands for interface 1 untrusted port the second stands for interface 2 trusted port For VPN deployment the untrusted interface of the Tofino Argon 220 Se curity Appliance must be used as the encrypted i e external facing con nection to the network For all other applications using the untrusted port as the external facing connection is optional but highly recommended to simplify the rule con figuration The following table shows the meaning of the abbreviations in the device names Tofino Argon 220 SA Release 04 04 10 11 Abbreviation Meaning TX Media type Twisted pair Standard ISO IEC 8802 03 10BASE T 100BASE TX Connection type RJ4
27. valid connection Port 2 Link status Green Lights up Valid connection Port 2 data Yellow Flashing Data traffic Port 2 V 24 R Link status None No valid connection V 24 Link status Green Lights up Valid connection V 24 Data Yellow Flashing Data traffic V 24 2 3 Controls The Tofino Argon 220 has a Save Load Reset SLR button see table 1 Save Load Reset button SLR The SLR button has the following functions Saving diagnostic files and log files to USB storage device Loading configuration files from USB storage device Factory resetting the device To perform the functions press the SLR button The number of button presses controls which function is carried out Check your selection by looking at the LEDs Button presses Chosen function Glowing LED 1 Saving diagnostic files and log files to USB Ce storage device 2 Loading configuration files from USB storage device 3 Factory resetting the device V 24 R 4 Canceling prior button presses Tofino Argon 220 SA 18 Release 04 04 10 Note There is a short delay after the button is pressed and before the function is carried out This is to allow the function to be cancelled 2 4 Basic set up You may configure the device remotely via the Tofino Central Management Platform CMP Alternatively you may use a USB storage device containing specially encrypted configuration files You do not need an IP address for initial set up and for most configuration or security o
Download Pdf Manuals
Related Search