Home
Perle Systems IOLAN SCS User's Manual
Contents
1. Screw GC R Q o o Power aPin1 2 Sih T a we d Reset ON 2 P RJ45 O O o O cc O O Screw 3 To change the power pin out locate J4 For the fixed 5V DC output jumper pins 1 and 2 For the output to equal the external adapter input jumper pins 2 and 3 4 To tum line termination on locate and jumper both J1 and J9 5 Close the IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings 1 Port IOLAN RJ45 P Power Over Ethernet To change the settings do the following 1 Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw Q oo Ex v Power m DIP F Switch A d Reset i SE RJ45 cog O Screw 3 To change the power pin out locate J4 For the fixed 5V DC output jumper pins 1 and 2 For the output to equal the external adapter input jumper pins 2 and 3 4 To tum line termination on locate and jumper both J7 and J8 5 Close the IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings 362 IOLAN SDS SCS STS User s Guide Version 3 6 Introduction 1 Port IOLAN DB9 To change the settings do the following 1
2. 81 urges T 81 dap 82 DDR LM N 82 OVERVIEW mE s 82 Field Red 82 Pvt SEMI CN 83 CV OW ER EE TE 83 SE RE le 83 Adding Editing a Custom IPv6 Address iese ees ee ee ee 0 85 Advanced MR N N aani oaeiai aina 86 Eelere 86 AGI Wee eh en 86 ob Ee PR EE RE RE AE ES 88 Host Table M send ER ENS EE Ee WA NA N ed N EKEN Rd Edge N ss ee N Re Wes GR Rd N 88 KEE 88 Functionality sissies SE Se Se As EO EE Ge EE ED nnna 88 le WR en 88 Adding Editing a Hot ass ses ss as ss ede enia kan Re EE ke Ke dava Ne do a N Sk Ad de 89 Route EE MD EDE ee OE ED Saee nRa 90 VENI PE 90 Functionality SAO N EE OR EE nnen 90 Field Ree 90 Table of Contents Adding Editing Route disse ses NEER se se Rd SE de GN cuu naria aita canard andas 91 DNS WINS Re EE N EE EE EE EE 92 OVEIVIEW EE EE EE 92 Functionality RN Rm 92 Field Descriptions zn nahen nnn nnnseenn nennen nee 92 Editing Adding DNS WINS Servers sesse ees ee ee ee ee ee ee ee ee ee 93 ia EE N EE EE T 93 N N E Ne 93 Functionality egenen 93 ae ede eh el RE EE EE Ee N 94 By LIE c N RE NEK Ra EG Re N NGKA N eg dd N NN Da ARE 95 pi OT 95 Functionality m 95 Field Descriptions E 95 ee dye d ces 96 Cipher Suite Field Descriptions en 97 Adding Editing a Cipher Gute A 98 Validation Criteria Field Descriptions
3. sssseseessessss 99 IP VO PUGS EE EE RE ER EI EE NE DUM E 100 OLTRE A EE ENE EO N 100 Field Descriptions ENERO 100 Adding Editing an IPv6 Tunnel 101 Chapter 7 Configuring Serial Ports 103 ige re De Un D 103 Seral POrtS EE 103 OVEN VIO ee ee 103 FURGHONSIEY c we Gee Ge GN GENE 103 Editing a 3ellal POL enis roc nee 104 Copying EE o Der Eo Ee ee 105 Resetting a Serial Port 106 Serial Part e TUTE 106 Common Eege 106 1 cT 106 Hardware Tab Field Descriptions see ee ee RR ee ee ee nee 107 Email Alert Tab Field Descriptions ees ee RA ee 109 Packet Forwarding Tab Field Descriptions 110 SSL TLS Settings Tab Field Descriptions 113 Cipher Suite Field Descriptions Ann 114 Adding Editing a Cipher Gute 115 Validation Criteria Field Descriptions cceeeeeeeeeeeeeeeeeeeeseeeeeees 116 8 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Console Management Profile esee 117 QU 117 PGT QE RE ehe 117 General Tab Field Descrotons see ee ee ee ee RA ee ee 117 Advanced Tab Field Descriptions ie ee RR ee 118 TruePort Profile sis si Ge ie ei ee ee oe ge N ee es 120 iq 120 FONEISN
4. 386 Sun Cisco RJ45M Connector Cable for Rack Mount Models 386 SCS48C SCS32C SCS16C SCS8C Starter Kit doo ee OE EE N 387 RJ45F to DB25M DTE Crossover Adapter 387 RJ45F to DB25M DCE Modem Adapter 388 RJ45F to DB25F DTE Crossover Adapter 389 RJ45F to DB9M DTE Crossover Adapter 390 RJ45F to DB9F DTE Crossover Adapter 391 Sun Cisco Roll Over Adapter for Rack Mount Models 391 22 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Appendix Troubleshooting 393 Idee Dies die EE 393 Hardware Troubleshooting eer eers EER EER EER RR ER RR Ee 393 Communication SEUES esse 394 DeviceManager Problems ees ee EER EER RR EER EER EE 394 Host Problems nee 395 RADIUS Authentication Problems 395 L gin U 2 nes EET HR Ge EER EE ESE DES EE de 396 Problems with Terminals u 2 396 Unknown IP FCS SS a un ee 397 DHCP BOOTP Probleme isi essen 397 Callback Problems uch 397 Language Problems nun 397 Modem Problems 398 PPP Problem ie es M 398 Printing Problems se 398 L ng Heboot e m 398 c Bi E
5. ER ERG RR RE EE ERG Gee ee RR EE 282 OVEIVIEW AE EE OE OE EE EE N 282 Field DS el den 282 Advanced Clustering Slave Options uuussrur0000000nnnnnnnnnnannnnnnnnnnnn 283 SETAE AE A E 283 Editing Clustering Slave Settings EE 283 Chapter 12 Configuring the Option Card 285 lo gelede HON en 285 Option Gard ET due 285 sls 285 Ugie de iere 285 Configuring the IOLAN Modem Card 285 Configuring a Wireless WAN Card 286 OVERVIEW nennen 286 Field Descriptions nsssanasannan Ed Ne KEN GE Rd nenn 286 Chapter 13 Configuring the System 289 PEN OGG BION ar 289 Lil m eege 289 Email En m 289 OVEN VIEW cd sco ME E 289 Functionality SR ee ee 289 Field Descriptions ae 290 DT 291 VII oo EE dd N EE de ee ld GE EE Re N ese 291 Field Descriptions E 291 16 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Ia DEE AR EE AR EE RE OE 292 TE 292 VET VIE er 292 Field DESC MMO NG EE een 292 pj EE N EE EN 294 N RR Ee 294 isis iy ss e Fa 294 Network Time Tab Field Descriptions nn 295 Time Zone Summer Time Tab Field Descriptions 296 Custom ee E WE 297 SVEEN EE EO 297 Field Description an a ennen
6. 317 Downloading Terminal Definitions 318 Creating Terminal Definition Files eese 318 18 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Resetting Configuration Parameters 319 Lost Admin Password an is ee see BE ERENS ER ER Ge S 320 Chapter 16 Applications 321 IntroduCtiON me 321 Configuring MOADUS ses ERK ee 321 OV e ER P 321 Configuring a Master Gateway ee ee ke ee 321 Configuring a Slave GateWaVY sesse sss 321 Modbus Gateway Settings uussensnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 322 Modbus EE 322 Modbus Slave Gateway AE 322 Modbus Serial Port SettingS uunnessnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 323 Modbus Master Settings sessie ia ee 323 Modbus Slave Settings AE 324 Configuring PPP Dial On Demand 325 Setting Ub PEInlers zu aut 326 Remote Printing Using LB esvtpssstguessgesegstergugssseteebustekgsgseErSkeeee 326 Remote Printing Using ROP E 327 Remote Printing Using Host Based Print Handling Software 327 Configuring a Virtual Private Network 328 IOLAN to Host Network sesse ee ee ER RE RR RR RR RR RR RE eene RR REK nnn 328 Networ
7. 267 Modbus TCP Application 268 Modbus UO Access u 268 Function Codes D sed es Ek N Ga NN 268 VO Coil Register Descriptions eese 269 Serial Port Coil Register Descriptions eessss 270 AATA RegiSterS 270 AAD2 AAR 2 Registers asses esse ekke eu ee ku ks ee RE N Bu sd Ke 271 DA D2R2 Register us esse Rd ie N KG ge N ene ee Ed n 272 Serial Pin Signals 0 0 0000 n ke N AN dd ed N 272 VTT E in ds EE ENS 273 TruePort Modbus Combination EK EA EE Ee EE 273 API Over TruePart Only iis seine NR We dinero del n eN KEN ee 274 Accessing VO Data Via TruePort 275 Definisi 275 SED T M 275 Format of API Commands nina 276 Get Gommands sisie sd N eua ke nn ai 276 Command Ke e E 276 Response Fomat an 276 Set Commands ss 1 0a Ke 277 Command Format 277 Successful Response Format 278 Unsuccessful Response Format 278 ipei pro N N N 279 VO SNMP Traps m 279 Table of Contents Chapter 11 Configuring Clustering 281 VEN OMG EE 281 Clustering Slave LIST cms 281 8E EE EE EE EE Oe 281 Adding Clustering Slaves
8. 270 MB REG IR CURR ENG 2080 2112 2144 2176 R MB REG IR MIN ENG 2082 2114 2146 2178 R MB REG IR MAX ENG 2084 2116 2148 2180 R MB REG IR CURR RAW 2086 2118 2150 2182 R MB REG IR MIN RAW 2087 2119 2151 2183 R MB REG IR MAX RAW 2088 2120 2152 2184 R MB REG IR ALARM LEVEL 2089 2121 2153 2185 R IOLAN SDS SCS STS User s Guide Version 3 6 Modbus VO Access A4D2 A4R2 Registers The following coils and registers are supported by the IOLAN A4D2 and A4R2 VO models Data Model Al A2 A3 A4 D1 R1 D2 R2 R W Coils MB REG DI SENSOR Je Je Je Je 6149 6150 R MB REG DI SENSOR ALARM STATE j een j 6213 16214 R W MB REG DO SENSOR qe e 6661 6662 R W Holding Registers MB REG HR DI SENSOR LATCH je je 4 6149 6150 R W MB REG HR DO SENSOR PULSE ISW ree len ee 6213 16214 R W MB REG HR DO SENSOR PULSE ASW j ee 6277 16278 R W MB_REG_HR_DO_SENSOR_PULSE_COUNT 6341 16342 R W MB REG HR AI CLEAR ALARM LATCH 2049 12050 2051 2052 W MB REG HR AI CLEAR MAX 2113 2114 2115 2116 W MB REG HR AI CLEAR MIN 2177 2178 2179 2180 EE W Input Registers MB REG IR CURR ENG 2080 2112 2144 2176 R MB REG IR MIN ENG 2082 2114 2146 2178 R MB REG IR MAX ENG 2084 2116 2148 2
9. 4 Click the Advanced Slave Settings button to verify that the default settings are acceptable IOLAN Device Server User s Guide Version 3 6 Configuring PPP Dial On Demand Configuring PPP Dial On Demand The IOLAN can be configured to access remote networks via modems connected to the serial interface of the IOLAN By configuring the IOLAN for the Remote Access PPP profile data that is destined for the remote network will initiate a modem connection to the remote network to route the data to its appropriate destination 172 16 0 0 a Local IP Addr 195 16 20 23 rom E PPP Remote IP Addr 195 16 20 24 ad IOLAN Local Host 204 16 0 0 Example shows N Remote Host 204 16 25 72 If you want to configure a serial port to use PPP dial on demand do the following 1 Create an entry for the modem and its initialization string Serial Advanced Modems tab 2 Set the serial port to Remote Access PPP 3 In Remote Access PPP select the Advanced tab Enable the Connect option and select Dial Out Set the Modem parameter to the modem you just added Enter the Phone number that the modem will be calling 4 Still on the Advanced tab set the Idle Timeout parameter to a value that is not zero setting this value to zero creates a permanent connection 5 On the General tab enter one of the following A Local and or Remote IPv4 Address A Local and or Remote IPv6 Interface Identifier Note that th
10. General Hardware Email Alert Packet Forwarding SSL TLS Serial Tunneling Settings A serial tunnel can consist of two units connected over TCP IP to virtually link serial ports RFC 2217 Act as Tunnel Server Listen for connections on TCP port 10001 Enable IP Aliasing C Enable TCP Keepalive Act as Tunnel Client Configure the following parameters Act As Tunnel Server TCP Port Enable TCP Keepalive Act as Tunnel Client Host Name TCP Port 152 The IOLAN will listen for an incoming connection request on the specified Internet Address on the specified TCP Port Default Enabled The TCP port that the IOLAN will listen for incoming connection on Default 10000 serial port number so serial port 5 is 10005 Enables a per connection TCP keepalive feature After the configured number of seconds the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized This parameter needs to be used in conjunction with Monitor Connection Status Interval parameter found in the Serial Advanced Advanced Settings tab The interval specifies the inactivity period before testing the connection Default Disabled The IOLAN will initiate the connection the Tunnel Server Default Disabled A preconfigured host name that is associated with the IP address of the Tunnel Server Th
11. 300 Message of the Day MOTD Tab Field Descriptions The message of the day is displayed when users log into the IOLAN through a telnet or SSH session or through WebManager or EasyPort Web There are two ways to retrieve the message of the day to be displayed to users when they log into the IOLAN e The message of the day file is retrieved from a TFPT server everytime a user logs into the IOLAN You must have a TFTP server running on any host that you are uploading or downloading files to from when using TFTP When you specify the file path the path must be relative to the default path set in your TFTP server software The message of the day file is downloaded to the IOLAN and retreived locally every time a user logs into the IOLAN You can download a MOTD file to the IOLAN in the DeviceManager by selecting Tools Advanced Custom Files and then selecting the Download Other File option and browse to the MOTD file In WebManager select Administration Custom Files and select the Other File option and browse to the MOTD file After the MOTD is downloaded to the IOLAN you must specify the MOTD file name in the Filename field to access it as the message of the day no TFTP Host parameter is required when the file is internal Login Bootup Files Message of the Day MOTD TFTP Console Port TFTP Host Filename Configure the following parameters TFTP Host The host that the IOLAN will be getting the Message of the Da
12. Internet Address Permissions V3 Read Write User V3 Read Write Security Level V3 Read Write Auth Algorithm V3 Read Write Auth Password V3 Read Write Confirm Password V3 Read Write Privacy Algorithm V3 Read Write Privacy Password V3 Read Write Confirm Password The IP address of the SNMP manager that will send requests to the IOLAN If the address is 0 0 0 0 any SNMP manager with the Community name can access the IOLAN If you specify a network address for example 172 16 0 0 any SNMP manager within the local network with the Community name can access the IOLAN Field Format IPv4 or IPv6 address Permits the IOLAN to respond to SNMP requests Data Options e None There is no response to requests from SNMP e Readonly Responds only to Read requests from SNMP e Readwrite Responds to both Read and Write requests from SNMP Default None Specified user can view and edit SNMP variables Select the security level for the Read Writer user This must match the configuration set up in the SNMP manager Data Options e None No security is used e Auth User authentication is used Auth Priv User authentication and privacy encryption settings are used Default None l Specify the authentication algorithm that will be used for the read write user Data Options MD5 SHA Default MD5 Type in the read write user s authentication password Retype the user s authentication pass
13. UDP Port Determines how the IOLAN s UDP port that will send receive UDP messages is defined Auto Learn The IOLAN will only listen to the first port that it receives a UDP packet from Applicable when Direction is set to LAN to Serial or Both e Any Port The IOLAN will receive messages from any port sending UDP packets Applicable when Direction is set to LAN to Serial Port The port that the IOLAN will use to relay messages to servers hosts This option works with any Direction except Disabled The IOLAN will listen for UDP packets on the port configured by the Listen for connections on UDP port parameter Default Auto Learn Port The port that the IOLAN will use to relay messages to servers hosts This option works with any Direction except Disabled The IOLAN will listen for UDP packets on the port configured by the Listen for connections on UDP port parameter Default 0 zero Terminal Profile Overview The Terminal profile allows network access from a terminal connected to the IOLAN s serial port This profile is used to access pre defined hosts on the network from the terminal Functionality This profile can be configured for users who must be authenticated by the IOLAN first and then a connection to a host can be established who are connecting through the serial port directly to a host Connect Terminal IOLAN R gt UNIX Linux System 134 IOLAN SDS SCS STS User s Guide Ve
14. 5 TACACS 6 SECURID 7 NIS SECURITY Restricts IOLAN access to devices listed in the IOLAN s host table Values are yes Or no TFTP RETRY The number of TFTP retries before aborting This is a numeric value for example 5 TFTP_TMOUT The time in seconds before retrying a TFTP download upload This is a numeric value for example 3 CUSTOM_LANG The full path pre fixed by a hostname IP address IPv4 or IPv6 and file name of a translated language file For example 192 101 34 211 accounting Iolan ds german txt EXTRA TERMI EXTRA TERM2 EXTRA TERM3 The full path pre fixed by a hostname IP address IPv4 or IPv6 and file name of a termcap file for a specific terminal type IOLAN SDS SCS STS User s Guide Version 3 6 SNMP SNMP Overview The IOLAN supports configuration and management through SNMP SNMP Management tools SNMP client MIB browser software can be used to set IOLAN configuration parameters and or view IOLAN statistics Before you can configure manage the IOLAN using SNMP you need to set the IOLAN IP address and configure a read write user for SNMP version 3 or a community for SNMP version or 2 You can use DeviceManager CLI or the Menu to set the IP address and user community don t forget to reboot the IOLAN before connecting with the SNMP manager to make your changes take effect Access Platforms You can access the IOLAN SNMP MIB from any system that runs your SNMP cl
15. AT amp Rn Sets the behavior of IOLAN s RTS signal CTS from a DCE perspective If line is configured for hardware flow control the RTS is used for this purpose and the setting of this command is ignored n 0 RTS always high default n 3 RTS signal acts as DCD n 4 RTS signal acts as RI AT amp Cn Sets the behaviour of the DCD signal n 0 DCD always on n 1 DCD follows state of connection off when no connection on when TCP connection exists default AT amp F Sets the modes back to the factory defaults This is a hard coded default configuration which does not look at any user configuration ATS2 ATS12 Sets the value of the S2 register The S2 register controls which character is used to enter command mode this is the potential replacement for the default in front of the ATH command This register will hold the hex value of the escape character Any value gt 27 will disable the ability to escape into command mode Sets the value of the S12 register The 12 register controls the minimum length of idle time which must elapse between the receipt of the escape character and the A first character of the ATH sequence Units are 1 50th of a second The default is 50 1 second ATO ATD with no phone number Establishes a connection using the IP and port specified in the telephone number field ATDS1 Establishes a connection using the IP and port
16. CO State Province CO Locality C Organization C Organization Unit C Common Name C Email Configure the following parameters Country State Province Locality Organization Organization Unit A country code for example US This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Two characters An entry for the state province for example IL This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 128 characters An entry for the location for example Chicago This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 128 characters An entry for the organization for example Accounting This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters An entry for the unit in the organization for example Payroll This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters 116 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Common Name An entry for common name for example the host name or fully gualified domain name This field is case sensitive in order to successfully match the information
17. v Obtain Automatically DHCPv 6 Settings C IPv6 addressfes C Network Prefix Configure the appropriate parameters Obtain IPv6 When enabled you can configure the IOLAN to obtain the IPv6 address es Address es using using IPv6 Autoconfiguration or a DHCPV6 server Default Enabled 83 IP Settings 84 IPv6 Autoconfiguration DHCPv6 Custom IPv6 Address List Add Button Edit Button Delete Button Default Gateway DSN Server DNS Server Obtain Automatically DHCPv6 Settings IPv6 Address es DHCPv6 Settings Network Prefix When enabled the IOLAN will send out a Router Solicitation message If a Router Advertisement message is received the IOLAN will configure the IPv6 address es and configuration parameters based on the information contained in the advertisement If no Router Advertisement message is received the IOLAN will attempt to connect to a DHCPv6 server to obtain IPv6 addresses and other configuration parameters Default Enabled When enabled requests IPv6 address es and configuration information from the DHCPV6 server Default Disabled Displays the list of custom configured IPv6 addresses Adds a custom IPv6 address Edits an existing IPv6 address Deletes an IPv6 address from the Custom IPv6 address list Specify the gateway IP address that will provide general access beyond the local network Field Format IPv6 address Specify the IPv6 address of aDNS host in your
18. Editing Power Management Plug Settings Field Descriptions Power Management Plug Settings Plug Name Power Up Interval 5 seconds Default State Un n Associated Port None M Configure the following parameters Plug Displays the plug number you are configuring Name Specify a name for the plug to make it easier to recognize and manage Power Up Interval Specify the amount of time in seconds that the RPS will wait before powering up a plug This can be useful if you have peripherals that need to be started in a specific order Data Options 5 1 2 5 15 30 60 120 180 300 Default 5 seconds 169 Serial Port Profiles Default State Sets the default state of the plug Data Options On Off Default Of Associated Port When a server or router has its console port connected to one of the serial ports on this IOLAN and that server router is also powered by this RPS the server router serial port number should be entered here This will give you direct access to some RPS commands when managing that server or router using Telnet or SSH Remote Access PPP Profile 170 Overview The Remote Access PPP profile configures a serial port to allow a remote user to establish a PPP connection to the IOLAN s serial port This is typically used with a modem for dial in or dial out access to the network or a wireless WAN card n j lt j N Modem Modem IOLAN Server Dial In Connection Verre
19. Primary Supply Positive wire to Circuit 1 terminal marked Negative wire to Circuit 1 terminal marked Secondary back up Supply Positive wire to Circuit 2 terminal marked Negative wire to Circuit 2 terminal marked Farthing Wire Ground wire to terminal marked with circular earthing symbol Screws Tighten terminal connector block screws to 7 Ibs inches torque 3 Switch On the power supplies 4 Switch On the IOLAN The power LEDS 1 and 2 will indicate the status of the power source at the respective input If both the primary and secondary power source are available both LED 1 and LED 2 will be luminated indicated power detected from each input 40 IOLAN SDS SCS STS User s Guide Version 3 6 Powering Up the IOLAN Disconnecting 48V Power Supplies from the IOLAN To disconnect the power supply s from the IOLAN do the following 1 Switch off the IOLAN 2 Switch off the power source s 3 Disconnect all DC power input cables from the IOLAN terminal connector block 4 Remove any attached devices to the serial or Ethernet port s Your IOLAN is ready to be moved Hardware and Connectivity 41 Powering Up the IOLAN 42 IOLAN SDS SCS STS User s Guide Version 3 6 Configuration Methods Introduction This chapter provides information about the different methods you can use to configure the IOLAN Before you can configure the IOLAN you must assign an IP address to the
20. routing x x true Send and Listen x false None addr x x x x ipv4 or ipv6 addr ppp vj slot compression x x true or false callback dialstring x x number to callback on service ssh addr x x x x ipv4 or ipv6 addr port x tcp_port service ssl_raw addr x x x x ipv4 or ipv6 addr port x tcp_port Accessing the IOLAN from the Network Users This section describes the attributes which will be accepted by the IOLAN from a TACACS server in response to an authentication request for Reverse Users The TACACS service needs to be set to EXEC raccess or just raccess on the well known port Name Value s Description priv lvl 12 15 Admin The IOLAN privilege level 8 11 Normal 4 7 Restricted 0 3 Menu Perle Line Access port number For the specified line provides the User s 0 Disabled Line Access rights ReadWrite 2 ReadInput 3 ReadInputWrite 4 ReadOuptut 5 ReadOutputWrite 6 ReadOutputInput 7 ReadOuputWrite timeout 0 4294967 Session timeout in seconds idletime 0 4294967 Idle timeout in seconds Perle Clustered Port Access 0 Disabled Control access to clustered ports Enabled RADIUS and TACACS 345 TACACS Accessing the IOLAN from the Network User Example Settings The following example shows the parameters that can be set for users who are accessing the IOLAN from the Ethernet side These settings shou
21. Serial Port Profiles Phone Number to Host Mapping If your modem application dials using a phone number you can add an entry in the Phone Number to Host Mapping window that can be accessed by all serial ports configured as Virtual Modem You need to enter the phone number sent by your modem application and the IOLAN IP address and TCP Port that will be receiving the call 1 port models support up to 4 entries all other desktop models support up to 8 entries and rack mount models support up to 48 entries Phone Number to Host Mapping Phone Number IP Address TCP Port The following buttons are available Add Button Click the Add button to display a window that allows you to configure the phone number or AT command your modem application sends and the IOLAN s IP address and TCP port number that is receiving the call Edit Button Click on a phone number entry and click the Edit button to change any values configured for the phone number Delete Button Click on a phone number entry and click the Delete button to remove it from the phone number list 157 Serial Port Profiles VModem Phone Number Entry Create an entry in the Phone Number to Host Mapping window Phone Entry Phone Number Host IP Address TCP Pott Configure the following parameters Phone Number Specify the phone number your modem application sends to the modem Note The IOLAN does not validate the phone number so it must be ent
22. Temperature input channels monitor RTD or thermocouple temperature sensors inputs for the most common ranges You can also configure severity alarms that can send an email a syslog message and or an SNMP trap when an alarm is triggered or cleared See Alarm Settings on page 261 for more information about the alarms RTD ranges are e Pt100 a 385 50 to 150C e Pt100 a 392 50 to 150C e Pt1000 a 385 40 to 160C e Pt100 a 385 0 to 100C e Pt100 a 392 0 to 100C NiFe604 a 518 80 to 100C e Pt100 a 385 0 to 200C e Pt100 a 392 0 to 200C NiFe604 a 518 0 to 100C e Pt100 a 385 0 to 400C e Pt100 a 392 0 to 400C e Pt100 a 385 200 to 200C e Pt100 a 392 200 to 200C Thermocouple ranges are e B 500 to 1800C e K Oto 1370C e T 100 to 400C e E0 to 1000C e R 500 to 1750C o In the following example a Temperature I O IOLAN is used to monitor industrial freezer temperature sensors with an alarm set to send a syslog message if the temperature rises above 31 C EET Monitoring Application Industrial Freezers 259 Channels Field Descriptions Analog 1 Description Analog Settings Type RTD v Range Pt100 a 385 50 to 150C v Alarm Settings Cancel Configure the following parameters Description Type Range Alarm Settings Button Provide a description of the channel making it easier to identify Data Options Maximum 20 characters i
23. e Disable CHAP re challenge parameter challenge interval in the IOLAN Some PPP client software does not work when receiving CHAP re challenges PPP is not running successfully over your 485 half duplex environment e PPP is incompatible with half duplex it must be run over a full duplex environment Printing Problems The print job fails to print on the device attached to the serial port e On the line where the printer is attached set Line Service to Printer Print jobs will not print when the line service is set incorrectly When using RCP the network host receives a rejection message from the IOLAN The result is that the print job does not take place e Print using LPD or Modify the printer interface scripts on the network host to overcome this weakness of RCP The modification will force the network host to continue trying to send the print job when the IOLAN s printer port is busy Long Reboot Cycle Rebooting the IOLAN takes a long time If you are not using DHCP BOOTP disable this within the Server Services otherwise the IOLAN waits to timeout for a request to DHCP BOOTP 398 IOLAN SDS SCS STS User s Guide Version 3 6 SSL TLS SSL TLS If you are experiencing problems obtaining a successful SSL TLS connection you can set your Syslog Level to Notice and view the syslog for the following messages Line not SSL enabled Abort connection when a user who is configured for Service SSL_RAW tries t
24. DHCP BOOTP Problems Messages host name too longor filename too long The IOLAN can only accept host names of 14 characters or file names of 64 characters so verify that you are not attempting to pass a string that is longer than those maximums DHCP or BOOTP have been set up to configure my IOLAN but does not seem to have done anything Check that the server DHCP BOOTP service is set to on if not set it to on and reboot Check that your BOOTP server is configured for your IOLAN or that your DHCP server has an active lease pool scope with at least 1 free IP address You observe TFTP errors when the IOLAN boots for example FTP File not found filename FTP Timed out This has a number of causes including The file names you specified to DHCP BOOTP do not exist or are in the wrong place The server for any of the downloadable files in your bootfile has no TFTP server running e Verify that lease data in your DHCP server manager is correct Reset or restart the DHCP server Callback Problems User Callback is On and a number is configured for the line but the IOLAN is not calling the user back e Verify that the phone number is entered under the user not the line e Verify that the callback Phone Number is valid e Verify that the modem at the user s end is set to auto answer Language Problems In a customized language the text strings appear in the wrong place in the Menu CLI
25. Delete Button Define a primary host and backup Primary Host When this option is enabled you can define up to 49 hosts that the serial device connected to this serial port will attempt communicate to With this mode of operation the IOLAN will connect to multiple hosts simultaneously Default Enabled Click the Add button to add a host to the list of hosts that will be receiving communication from the serial device connected to the IOLAN Highlight an existing host and click the Edit button to edit a host in the list of hosts that will be receiving communication from the serial device connected to the IOLAN Click the Delete button to delete a host to the list of hosts that will be receiving communication from the serial device connected to the IOLAN When this option is enabled you need to define a primary host that the serial device connected to this serial port will communicate to and a backup host in the event that the IOLAN loses communication to the primary host The IOLAN will first establish a connection to the primary host Should the connection to the primary host be lost or never established the IOLAN will establish a connection the backup host Once connected to the backup the IOLAN will attempt to re establish a connection to the Primary host once this is successfully done it gracefully shuts down the backup connection Default Disabled Specify a preconfigured host that the serial device will communicate
26. PPP SSL TLS Limit connection to user Initial Mode Command Line Menu Teminal Pages 5 v Configure the following parameters Limit Connection Makes the serial port dedicated to the specified user The user won t need to to User enter their login name just their password Initial Mode Specifies the initial interface a user navigates when logging into the serial port Data Options Menu Command Line Default Command Line Terminal Pages The number of video pages the terminal supports Range 1 7 Default 5 pages 139 Serial Port Profiles 140 Telnet Settings The Telnet settings apply when the User Service is set to Telnet or the Terminal profile specifies a Telnet connection to a host Login Telnet Rlogin SSH Terminal Type C Enable Local Echo C Enable Line Mode C Map CR To CRLF SLIP PPP SSL TLS Control Characters Interrupt d Quit 1c EOF 4 Erase 8 Echo 5 Escape 14 Configure the following parameters Terminal Type Enable Local Echo Enable Line Mode Map CR to CRLF Interrupt Quit EOF Erase Echo Type of terminal attached to this serial port for example ANSI or WYSE60 Toggles between local echo of entered characters and suppressing local echo Local echo is used for normal processing while suppressing the echo is convenient for entering text that should not be displayed on the screen such as passwords This parameter can be use
27. Serial Port Access Service DEC NMENNN v PPP SLIP Configure the following parameters Service Used in conjunction with the Terminal Profile After the user has successfully been authenticated the specified service is started Data Options DSPrompt Telnet SSH RLogin SLIP PPP TCP Raw SSL Raw Default DSPrompt Host IP When the User Service is set to Telnet RLogin SSH or TCP Clear the target host IP address If no IP address is specified the Host IP value in the Default User configuration will be used Default None 195 Adding Editing Users TCP Port IPv4 Address IPv4 Subnet Mask IPv6 Interface Indentifier MTU Routing When the User Service is Telnet TCP Clear or SSH this is the target port number The default value will change based on the type of Service selected the most common known port numbers are used as the default values Used for User Service PPP or SLIP sets the IP address of the remote user Enter the address in dot decimal notation as follows e n n n n where n is a number Enter the IP address of your choice This IP address will then be used in preference to the Remote IP Address set for a line The following IP addresses have a special meaning e 255 255 255 254 The IOLAN will use the Remote IP Address set in the PPP settings for the serial port that this user is connecting to e 255 255 255 255 When the User Service is PPP the IOLAN will allow the remote ma
28. Setting Up Printers The IOLAN can communicate with printers on its serial ports using LPD and RCP protocols as well as print handling software using TCP IP Remote Printing Using LPD When setting up a serial line that access a printer using LPD do the following 1 Set the serial port to Printer and configure the Speed Flow Control Stop Bits Parity and Bits parameters so that they match the printer s port settings 2 Save your settings and restart the serial port 3 Verify that LPD has been configured on the network host To configure LPD on the network host you need to know the name or IP address of the IOLAN and the print queue either raw_p lt port_number gt for a raw data connection or ascii_p lt portnumber gt for an ASCII character connection You can optionally append dor E to the queue name to add a lt control d gt or lt form feed gt to the end of the print job 326 IOLAN Device Server User s Guide Version 3 6 Setting Up Printers Remote Printing Using RCP When setting up a serial port that accesses a printer using RCP do the following 1 Set the serial port to Printer and configure the Speed Flow Control Stop Bits Parity and Bits parameters so that they match the printer s port settings 2 Save your settings and restart the serial port 3 To execute a print job use the following syntax rcp filename ip address lt IOLAN_Name gt p lt gt where lt gt is the IOLAN serial port nu
29. The channel output will pulse for the specified number of times each count consists of an active inactive sequence Default 1 How long the channel will remain inactive during pulse mode Range 1 9999 x 100 ms Default 1 100 ms IOLAN SDS SCS STS User s Guide Version 3 6 Channels Active Signal Width Delay Failsafe Action Digital VO Extension Overview How long the channel will be active during the pulse mode Range 1 9999 x 100 ms Default 1 100 ms How long to delay an active to inactive or inactive to active setting after it is manually started Range 1 9999 x 100 ms Default 1 100 ms When there has been no VO activity within the specified time set in the I O Interfaces Settings on the Failsafe Timer tab and the Failsafe Timer is triggered Data Options e None The state of the Digital Relay output remains the same no change e Activate Output Activates the channel e Deactivate Output Deactivates the channel Default None The Digital I O extension feature connects a digital input signal to digital output s relay s and or a TCP IP application over an IP network Therefore when the state of the digital input changes you can also change the state of the digital output or relay channel or output serial signal pin on a local VO channel s other IOLAN I O channels other IOLAN serial signal pins or the data can be sent to an application s For example when the door opens I O
30. Type of terminal attached to this serial port for example ANSI or WYSE60 When enabled displays debug messages on the terminal Default Disabled When enabled requests compression of all data Compression is desirable on modem lines and other slow connections but will only slow down things on fast networks Default Disabled When enabled creates an automatic SSH login using the Name and Password values Default Disabled The name of the user logging into the SSH session Field Format Up to 20 alphanumeric characters excluding spaces The user s password when Auto Login is enabled Field Format Up to 20 alphanumeric characters excluding spaces When enabled selects an SSH version connection Default Enabled Select the encryption method cipher that you want to use for your SSH version connection Data Options e 3DES e Blowfish Default 3DES When enabled selects an SSH version 2 connection If both SSH 1 and SSH 2 are selected the IOLAN will attempt to make an SSH 2 connection first If that connection fails it will attempt to connect to the specified host using SSH 1 Default Enabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles SSH2 Ciphers Select the order of negotiation for the encryption method ciphers that the Opt1 5 IOLAN will use for the SSH version 2 connection Data Options e 3DES e Blowfish e AES Arcfour e CAST RSA When enabled an authe
31. e Tx Flashes with transmit serial activity There is a Tx LED for each serial port e Rx Flashes with receive serial activity There is an Rx LED for each serial port Ethernet The Ethernet connector SCS models have dual Ethernet This section describes the components found on the IOLAN 1 port models Console Serial Switch Reset External Power Supply Ethernet Power Ready Link 10 100 Activity LAN Serial Activity TEE Serial Port The 1 port IOLAN has one serial connection that is one of the following connectors DB25 male DB25 female RJ45 or DB9 male IOLAN SDS SCS STS User s Guide Version 3 6 Getting to Know Your IOLAN 2 Port This section describes the components found on the IOLAN 2 port models Console Serial Switch Reset External Power Supply Ethernet Power Ready Link 10 100 Activity LAN Serial Activity Serial Ports The 2 port IOLAN has two RJ45 serial connections The 2 port IOLAN can support an 8 pin connector if there is no requirement for power in pin 1 or power out pin 10 pins The 2 Port P model Power over Ethernet does not come with an external power supply connector 4 Port This section describes the components found on the IOLAN 4 port models Console Serial Switch Reset External Power Supply Ethernet Power Ready Link 10 100 Activity LAN Serial Activity Serial Ports The 4 port IOLAN model has four RJ45 serial connections Hardware and Co
32. n 1 display as text default n 0 disable echo n 1 enable echo default ATH Hang up This command instructs the IOLAN to terminate the current session and go into command mode ATA Answer call Instructs the VModem to accept connection requests VModem will give the terminal up to 3 minutes to answer the call If the ATA is not received within 3 minutes all pending sync messages will be discarded ATIO Return the modem manufacturer name ATI3 Return the modem model name ATSO Sets the value of the SO register The SO register controls the auto answer behavior In manual mode the IOLAN will not accept incoming sessions until an ATA is issued by the serial device In auto answer mode the IOLAN will automatically accept an incoming connection request Register 0 sets manual answer mode Register 1 255 auto answer mode default IOLAN SDS SCS STS User s Guide Version 3 6 349 Virtual Modem Initialization Commands Command Description Options AT amp Z1 Set command allows the user to store an IP address and port number or phone number to use when making a connection The user will issue an ATDSI to cause the IOLAN to initiate the connection AT amp Sn Sets the behavior of IOLAN s DTR signal DSR from a DCE perspective n 0 DTR signal always high default n 2 DTR signal acts as DCD n 3 DTR signal acts as RI
33. v Blowfish AES Configure the following parameters Allow SSH 1 Protocol RSA DSA Keyboard Interactive Password 3DES CAST Blowfish Arcfour AES Allows the user s client to negotiate an SSH 1 connection in addition to SSH 2 Default Disabled When a client SSH session requests RSA authentication the IOLAN s SSH server will authenticate the user via RSA Default Enabled When a client SSH session requests DSA authentication the IOLAN s SSH server will authenticate the user via DSA Default Enabled The user types in a password for authentication Default Enabled The user types in a password for authentication Default Enabled The IOLAN SSH server s 3DES encryption is enabled disabled Default Enabled The IOLAN SSH server s CAST encryption is enabled disabled Default Enabled The IOLAN SSH server s Blowfish encryption is enabled disabled Default Enabled The IOLAN SSH server s Arcfour encryption is enabled disabled Default Enabled The IOLAN SSH server s AES encryption is enabled disabled Default Enabled 215 SSL TLS Break String The break string used for inband SSH break signal processing A break signal is generated on a specific serial port only when the server s break option is enabled and the user currently connected using reverse SSH has typed the break string exactly Field Format maximum 8 characters Default break where is tilde E
34. CA list file to the IOLAN Default Disabled 113 Serial Port Profiles 114 Validation Criteria Click this button to create peer certificate validation criteria that must be met Button for a valid SSL TLS connection See Validation Criteria Field Descriptions on page 116 for more information Cipher Suite Field Descriptions The SSL TLS cipher suite is used to encrypt data between the IOLAN and the client You can specify up to five cipher groups Cipher Suite Encryption Min Key Size Max Key Size Key Exchange HMAC Any 40 256 Any Any Delete OK Cancel The following buttons are available on this window Add Button Adds a cipher to the cipher list Edit Button Edits a cipher in the cipher list Delete Button Deletes a cipher to the cipher list Move Up Button Moves acipher up in preference in the cipher list Move Down Button Moves a cipher down in preference in the cipher list IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Adding Editing a Cipher Suite To see a list of valid cipher suite combinations see Appendix B SSL TLS Ciphers on page 347 Cipher Suite Edit Encryption Min Key Size Max Key Size Key Exchange HMAC Configure the following parameters Encryption Min Key Size Max Key Size Key Exchange Select the type of encryption that will be used for the SSL connection Data Options Any Will use the first encryption format
35. DB9 Male l O EE EG N N Ge N nun ann nnnnnnnn nenn 355 Power Over Ethernet PinoutS sesse ek ee RR GR ee Ke GR KKK 355 EIA 232 Cabling Diagrams ee ees eee esse sees ee EER RR ER RR RR RR RR RR RR RR RE ee 356 Terminal DB25 ConnectOF ese eek ee RR ee ee ee RR ee GR ee Re Ee RR ee nn 356 DB25 ERE 356 DB25 Female ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee ee 356 AE EE N 357 DB9 Male ee ee ee ee ee ee ee ee ee 357 Modem DB25 Connector 1 e NEEN RENE KEN REENEN KEREN KEN KEEN 358 DB25 Male ee ee ee ee ee ee ee 358 RADE oe RE EE EE SE EE Eege 358 DB9 Male ee ee ee ee ee ee ee ee ee 359 20 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Appendix E Setting JumpersS sesse EE EE EE EE EE EE EE 361 Juge Die die AE N NE E ee 361 1 Port IOLAN DB25 Male Female e eeeeeeeeeeee 361 Port IOLAN rr D 362 1 Port IOLAN RJ45 P Power Over Ethernet 362 Port IOLAN DBI EE 363 2 Port IOLAN SDS1M Moden EER AR ERGER ER EG 363 ZSPOFEIOLADN E 364 2 Port IOLAN RJ45 P Power Over Ethernet 364 4 Port Desktop IOLAN asses ss sed GRA GE N de ENE Nek ke Ee dk EK AN SERE Ed GAN EE GR Ns 365 Digital RT 366 Analog Input Module sussies as sd una 367 Appendix F VO Wiring Diagrams 369 Wiring VO DIagralllS
36. Emergency Alert Critical Error Warning Notice Info Debug Default Emergency To An email address or list of email addresses that will receive the email notification Subject A text string which can contain spaces that will display in the Subject field of the email notification From This field can contain an email address that might identify the IOLAN name or some other value Reply To The email address to whom all replies to the email notification should go Outgoing Mail The SMTP host email server that will process the email notification request Server SMTP This can be either a host name defined in the IOLAN host table or the SMTP host IP address 109 Serial Port Profiles 110 Packet Forwarding Tab Field Descriptions The Packet Forwarding tab can be used to control define how and when serial port data packets are sent from the IOLAN to the network General Advanced Hardware Email Alert Packet Forwarding Define the conditions under which data received on the serial port will be forwarded to the network Minimize Latency Optimize Network Throughput Prevent Message Fragmentation Custom Packet Forwarding Configure the following parameters Minimize Latency Optimize Network Throughput Prevent Message Fragmentation Delay Between Messages Custom Packet Forwarding This option ensures that all application data is immediately forwarded to the serial device
37. If the route Type is defined as Network the network portion of the IP address must be specified and the Host port of the address will be set to 0 Example to access network 10 10 20 the address 10 10 20 0 would be specified in this field Format IPv4 or IPv6 address IPv4 Subnet Mask When the route is a Network route you must specify the network s subnet mask IPv6 Prefix Bits If the IP address is IPv6 then you must specify the network s prefix bits Range 0 128 Host Select this option when a host is being used at the route gateway Default Enabled None 91 Advanced DNS WINS 92 Interface The Interface list is comprised of configured IPv6 tunnels and serial ports defined for Remote Access PPP and Remote Access SLIP profiles Select this option when you want to use the specified interface as the gateway to the destination Field Option s IPv6 tunnels Remote Access PPP and Remote Access SLIP serial ports Default Disabled Overview You can configure WINS servers for PPP client name resolution and DNS servers for PPP client name resolution and IOLAN host name resolution for example when specifying Bootup file Functionality You can configure up to four DNS and four WINS servers If you specified a DNS and or WINS server on the Network IP Settings tabs either IPv4 or IPv6 it will be automatically entered into the appropriate list If the DNS and or WINS server is provided by a DHCP server these
38. It provides a complete COM port interface between the attached serial device and the network TruePort Lite mode This mode provides a simple raw data interface between the device and the network Although the port will still operate as a COM port control signals are ignored In this mode the serial communications parameters must be configured on the IOLAN You use TruePort when you want to connect extra terminals to a server using the IOLAN rather than a multi port serial card TruePort is especially useful when you want to improve data security as you can enable an SSL TLS connection between the TruePort host port and the IOLAN When run on UNIX TruePort allows you to print directly from a terminal to an attached printer transparent printing You can also remap the slow baud rate of your UNIX server to a faster baud rate as shown below L Serial Connection Map UNIX baud rate 4 800 to 230 400 for faster throughput Ethernet UNIX running TruePort Daemon baud rate 4 800 Currently TruePort is supported on Linux Windows SCO Solaris and others For a complete list of of supported operating systems see the Perle website For more information see the TruePort User Guide or the TruePort Installation and Configuration Guide for Windows NT on the CD ROM IOLAN SDS SCS STS User s Guide Version 3 6 375 API VO Access Over TruePort API VO Access Over TruePort You can access IOLAN I O data throug
39. Phone Email Alert Packet Forwarding SSL TLS Enable Message of the Day MOTD 0 seconds 0 seconds 45 seconds Configure the following parameters Authenticate User Enable TCP Keepalive Enable Message of the Day MOTD Enable Data Logging Idle Timeout Session Timeout Enables disables login password authentication for users connecting from the network Default Disabled Enables a per connection TCP keepalive feature After the configured number of seconds the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized This parameter needs to be used in conjunction with Monitor Connection Status Interval parameter found in the Serial Advanced Advanced Settings tab The interval specifies the inactivity period before testing the connection Default Disabled Enables disables the display of the message of the day Default Disabled When enabled serial data will be buffered if the TCP connection is lost When the TCP connection is re established the buffered serial data will be sent to its destination this option is not available when Monitor DSR Monitor DCD or Multihost is enabled The data buffer is 4K for desktop models and 32K for rack mount models If the data buffer is filled incoming serial data will overwrite the oldest data Default Disabled Use this timer to close a c
40. Port and User parameters that are used for the duration of the connection Therefore any parameters configured by RADIUS or TACACS will override the same parameters configured in the IOLAN See Appendix A RADIUS and TACACS on page 335 for more information IOLAN SDS SCS STS User s Guide Version 3 6 203 Authentication Authentication In the Authentication window you can select up to two methods of authentication made up of external authentication options and or the local user database Authentication Primary Authentication Method Secondary Authentication Method C Only use as backup Settings A Kerberos LDAP TACACS SeculD D None a Local RADIUS Kerberos LDAP TACACS VI Only authenticate admin user in the local user database Configure the following parameters Primary Authentication Method Secondary Authentication Method Settings Button Only use as backup Only authenticate admin user in the local database 204 The first authentication method that the IOLAN attempts Data Options Local RADIUS Kerberos LDAP TACACS SecurID NIS Default Local If the Primary Authentication Method fails the next authentication method that the IOLAN attempts You can choose to use authentication methods in combination For example you can specify the Primary Authentication Method as Local and the Secondary Authentication Method as RADIUS Therefore some users can be defined in t
41. Register IOLAN QU System Device POS Wy TCP Sockets General Tab Field Descriptions a geen General Advanced Hardware Email Alet Packet Forwarding SSL TLS TCP Socket Settings Listen for connection TCP Pot 10001 Allow Multiple Hosts to Connect C Connect to C Permit Connections in Both Directions Configure the following parameters Listen for When enabled the IOLAN listens for a connection to be established by the Connection Workstation Server on the network Default Enabled 126 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles TCP Port Allow Multiple Hosts to Connect Connect To Host Name TCP Port Connect to Multiple Hosts Define Additional Hosts Button Initiate Connection Automatically Initiate Connection When any data is received Initiate Connection When lt hex value gt is received Permit Connections in Both Directions The TCP port that the IOLAN will use to listen for incoming connections Default 10000 plus the serial port number so serial port 5 would have a default of 10005 When this option is enabled multiple hosts can connect to the serial device that is connected to this serial port Default Disabled When enabled the IOLAN initiates communication to the Workstation Server Default Disabled The name resolvable via DNS or IP address of the configured host the IOLAN will connect to The TCP Port that the IOLAN w
42. The function keys on the keyboards of some terminals like WYSE60 send character sequences which begin with a unfortunately a is also the default Hotkey Prefix which you use to switch between sessions A valid alternative would be b hex 02 If you are the system administrator you can change any user s Hotkey Prefix character When using a downloaded terminal definition you are having problems using arrow keys Use Ctrl K Ctrl J Ctrl H and Ctrl L for up down left and right respectively When switching from a session back to the text menus both screen images are superimposed Press r to redraw the screen INIT Error in terminal file filename This error indicates that you have exceeded the 80 character limit for one or more of the terminal capabilities defined in the reported file INIT Error on line n in terminal file filename e You have omitted the sign from the reported line 396 IOLAN SDS SCS STS User s Guide Version 3 6 Unknown IP Address Unknown IP Address You have already configured the IOLAN and you do know your password and have lost misconfigured or don t know the IP address of the IOLAN so you cannot obtain a successful login e Ifthe IOLAN resides within the local network segment you can use DeviceManager to find the IOLAN You can connect directly to the serial port of the IOLAN as explained in Using a Direct Serial Connection to Specify an IP Address on page 67
43. TruePort Installation and Configuration Guide for Windows NT Online Help in the DeviceManager automatically installed with the DeviceManager application Link to knowledge base IOLAN SDS SCS STS User s Guide Version 3 6 25 Typeface Conventions Typeface Conventions Most text is presented in the typeface used in this paragraph Other typefaces are used to help you identify certain types of information The other typefaces are Typeface Example Usage At the C prompt type add host This typeface is used for code examples and system generated output It can represent a line you type in or a piece of your code or an example of output Set the value to TRUE The typeface used for TRUE is also used when referring to an actual value or identifier that you should use or that is used in a code example subscribe project subject run yourcode exec The italicized portion of these examples shows the typeface used for variables that are placeholders for values you specify This is found in regular text and in code examples as shown Instead of entering project you enter your own value such as stock trader and for yourcode enter the name of your program File Save This typeface and comma indicates a path you should follow through the menus In this example you select Save from the File menu IOLAN User s Guide This typeface indicates a book or document title See About the IOLAN on page 27
44. Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw a Power de e go Switch Reset Rd ioo BIS z RJ45 Oo Screw 3 To turn line termination on locate and jumper both J1 and J9 4 Close the IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings 2 Port IOLAN SDS1M Modem To change the settings do the following 1 Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw X B E o olg 5 ur Power ar 3 DIP D Switch AT d Reset O O ad S RJ45 Q OO Lot 3 oO Screw 3 To change the power pin out locate J4 For the fixed 5V DC output jumper pins 1 and 2 For the output to equal the external adapter input jumper pins 2 and 3 4 To turn line termination on locate and jumper both J7 and J8 5 Close the IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings Setting Jumpers 363 Introduction 2 Port IOLAN To change the settings do the following 1 Unplug th
45. Van Jacobson compression is used on this link When enabled C SLIP or compressed SLIP is used When disabled plain SLIP is used C SLIP greatly improves the performance of interactive traffic such as Telnet or Rlogin If your user is authenticated by the IOLAN this VJ compression value will be overridden if you have set a Framed Compression value for a user If your user is authenticated by RADIUS and the RADIUS parameter Framed Compression is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Default Enabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles PPP Settings The PPP settings apply when the User Service is set to PPP Login Telnet Rlogin SSH SLIP PPP SSL TLS IPv4 Local IP Address 0 0 0 0 Configure Req Timeout 3 IPv4 Remote IP Address 0 0 0 0 Configure Reg Retries 10 IPv4 Subnet Mask 0 0 on Teminate Reg Timeout 3 IPv6 Local Interface Teminate Reg Retries 2 Identifier EE e IPv6 Remote Interface Configure NAK Retries 10 Identifier ACCM 0 Authentication Timeout 1 MRU 1500 C Enable Roaming Callback Authentication CHAP v Challenge Interval ol User v Address Control Compression Password v Protocol Compression Remote User v VJ Compression Remote Password ars Magic Negotiation SSS IP Address Negotiation Routing None v Configure the follow
46. You should be aware that the following IOLAN configuration fields are no longer supported You no longer have the option of selecting access Authentication Logging Also kill reboot and stats are not available When you select port the following fields are not available on the Port Setup Menu Administrator PORT SETUP MENU REMOTE ADMIN Hardware Flow ctrl Keys Speed 9600 Flow ctrl None Hot A Intr C Parity None Input Flow Enabled Quit 1 Kill M Bit 8 Output Flow Enabled Del H Sess N A Stop 1 Echo E Break Disabled IP Addresses Monitor DSR No Src Mask Monitor DCD No Dst 1 Interface EIA 232 Access User Options Access Local Name abcd 1 Keepalive No UDP Retries N A Terminal type dumb Rlogin Telnet N A Retry Interval N A TERM Debug options N A Authentication N A Video pages 5 Map CR to CR LE No Mode Raw CLI Menu CLI Hex data N A Connection None Reset Term No Secure N A Host MOTD Yes Remote Port 0 Local Port 10001 User Name only when using LPD LPR Name no longer is used as the queue name Options Rlogin Telnet Options Debug options Options Hex data Options Secure Keys Sess Access UDP Retries Access Retry Interval Access Authentication 60 IOLAN SDS SCS STS User s Guide Version 3 6 IOLAN Interface e When you select line Access the following fields are not avail
47. or WebManager Check the original ASCII text file you used to translate to your customised language The sequence of the line much match exactly be aware that comments don t affect line sequence but can affect the actual line that the strings appear on So if you strip out all comments if the original file says line 1000 should be string none then line 1000 stripped of comments should be the translated version of none Troubleshooting 397 Modem Problems Modem Problems The IOLAN is not initializing the modem Check your Line Service is set to SLIP or PPP If your line service is set to any other type the IOLAN will not initialize a modem You will need to configure the modem manually PPP Problems The link fails on start up when there are remote IP addresses set for both a user Framed IP value and a line Remote IP address Check the IP address set for the user this is used in preference to the IP address set for a line If there is a problem with the user s IP address negotiation will fail the IOLAN will not use the line s IP address as an alternative The link fails on start up and security either PAP or CHAP is enabled on the line e Check the remote client device has the same setting that is PAP if the IOLAN is using PAP The IOLAN does not perform negotiation with the remote end over PAP or CHAP At the remote end the client software locks up when security CHAP is enabled on the line
48. or phone number specified in the Phone Number field stored by the AT amp Z1 command 350 IOLAN SDS SCS STS User s Guide Version 3 6 Pinouts and Cabling Diagrams Serial Pinouts DB25 Male This section defines the pinouts for the DB25 male connection used on the 1 port IOLAN The power out pin Pin 9 is available in the SDS model only Pin 1 Pin 13 Pin 14 Pin 25 The following table provides pinout information ElA 485 EIA 485 Pinout EIA 232 EIA 422 Full Duplex Half Duplex 1 Shield Shield Shield Shield 2 out TxD 3 in RxD 4 out RTS 5 in CTS 6 in DSR 7 GND GND GND GND 8 in DCD 9 Power out Power out Power out Power out 12 Power in Power in Power in Power in 13 CTS 14 TxD TxD DATA 15 TxD TxD DATA IOLAN SDS SCS STS User s Guide Version 3 6 351 Serial Pinouts EIA 485 EIA 485 Pinout EIA 232 EIA 422 Full Duplex Half Duplex 18 RTS 19 RTS 20 out DTR 21 RxD RxD 22 RxD RxD 25 CTS The power in pin pin 12 can be 9 30V DC DB25 Female This section defines the pinouts for the DB25 female connection used on the 1 port IOLAN The power out pin Pin 9 is available in the SDS model only 352 Pin 13 Pin 25 The following table provides pinout information Pinout EIA 232 1 Shield 2 in RxD 3 out TxD 4 in CTS 5 out RTS 6 out DTR 7 GND 8 in DCD 9 Power out 12 Power in 13 14 ElA 422 Shield GND Power out Power
49. plain SLIP is used C SLIP greatly improves the performance of interactive traffic such as Telnet or Rlogin If your user is authenticated by the IOLAN this VJ compression value will be overridden if you have set a Framed Compression value for a user If your user is authenticated by RADIUS and the RADIUS parameter Framed Compression is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Default Enabled If the device is remote and will be dialing in via modem or ISDN TA enable this parameter Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Dial In Dial Out Dial In Out Dial Timeout Dial Retry Modem Phone If the device is remote and will be dialing in via modem or ISDN TA enable this parameter Default Disabled If you want the modem to dial a number when the serial port is started enable this parameter Default Disabled Enable this option when you want the serial port to do either of the following accept a call from a modem or ISDN TA e dial a number when the serial port is started Default Disabled The number of seconds the IOLAN will wait to establish a connection to a remote modem Range 1 99 Default 45 seconds The number of times the IOLAN will attempt to re establish a connection with a remote modem Range 0 99 Default 2 The name of the predefined modem that is used on thi
50. s parameters Delete Button Select an existing IPsec VPN tunnel to remove the tunnel IOLAN SDS SCS STS User s Guide Version 3 6 VPN Adding Editing the IPsec Tunnel When you click the Add button or select an IPsec tunnel and click the Edit button the following window is displayed IPsec Tunnel IPsec Tunnel Name KA Authentication Method Shared Secret M Local Device IDLAN Local IP Address External IP Address Next Hop Host Network Address IPv4 Subnet 255 255 Mask IPv6 Prefix Bits Boot Action Start Secret Settings Left O Right Remote IP Address External IP Address Next Hop Host Network Address IPv4 Subnet 255 Mask IPv6 Prefix Bits 255 255 255 Cancel Configure the following parameters Name Provide a name for the IPsec VPN tunnel to make it easy to identify Text Characteristics Maximum of 16 characters spaces not allowed Authentication Specify the authentication method that will be used between VPN peers to Method authenticate the VPN tunnel Data Options e Shared Secret A text based secret that is used to authenticate the IPsec tunnel case sensitive This applies to all VPN tunnels IPsec and L2TP IPsec RSA Signature RSA signatures are used to authenticate the IPsec tunnel When using this authentication method you must download the IPsec RSA public key to the IOLAN and upload the IPsec RSA public key
51. the input becomes active again the alarm will automatically be cleared Default Enabled Manual Clear When enabled a triggered alarm must be manually cleared Mode Default Disabled Email When enabled sends an email alert to an email account s set up in the System settings when an alarm is triggered or cleared The email alert data includes the severity level and the value that caused the alarm to trigger or clear The Email Alert is associated with Level Critical Default Disabled Syslog When enabled sends a message to syslog when an alarm is triggered or cleared The syslog entry includes the severity level and the value that caused the alarm to trigger or clear The syslog message is associated with Level Critical Default Disabled SNMP When enabled sends an SNMP trap when an alarm is triggered or cleared The trap consists of the severity level and whether the alarm was triggered or cleared Default Disabled 160 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Output Signal Field Descriptions See Digital VO Extension on page 253 for information about the the VO Extension tab General VO Extension Digital Output DTR Description Digital Output Settings Failsafe Action None v Configure the following parameters Description Provide a description of the channel making it easier to identify Data Options Maximum 20 characters including spaces Failsafe Action When there ha
52. the user name and password should not be similar to a user name or password used regularly to login to the IOLAN This option does not work with external authentication Field Format You can enter a maximum of 16 alphanumeric characters 147 Serial Port Profiles Remote Password Routing Configure Req Timeout Configure Req Retries Terminate Req Timeout Terminate Req Retries Configure NAK Retries Complete this field only if you have specified PAP or CHAP security protocols in the Security field and you wish to dedicate this serial port to a single remote user and this user will be authenticated by the IOLAN or you are using the IOLAN as a router back to back with another IOLAN Remote password means the following e When PAP is specified this is the password the IOLAN will use to authenticate the remote device e When CHAP is specified this is the secret password known to both ends of the link upon which responses to challenges will be based Remote Password is the opposite of the parameter Password Your IOLAN will only authenticate the remote device when PAP or CHAP is operating Field Format You can enter a maximum of 16 alphanumeric characters Determines the routing mode RIP Routing Information Protocol used on the PPP interface This is the same function as the Framed Routing attribute for RADIUS authenticated users Data Options e None Disables RIP over the PPP interfac
53. 245 Field DesouDIONnE ss ER EE S 246 Digital QUU QU sers ds EN Au Be AG Rd VN Ka de N N 248 Rui c ID EE EE EE EE 248 Functionality N 248 Field DG lee 249 hir eee EE EN 251 97 17 ER EE EE EE 251 Field Descriptions esse Ele 252 Digital VO Extension ss insae ds kae NE NN kk kke WE GN ek aas sd NKR N Ka ed 253 s 7 177 EE EE EE EE 253 mugire EE EE EE ER EE N ieee 254 Field Descriptions esse ee 255 Adding Editing Additional Hosts iese esse esse ee ee ee ee ee ee ee ee ee ge ee 257 Adding Editing a Multihost Entre 258 Temperature aid dIE Rd QU ND RR CI RA eo MEL N ae Se da de 259 Field Description lm 260 Alarm oe EO B nee 261 Basic Analog Alarm Settings ccccccccecceeeeeeeeeeeneeeeeeeeeeeeeeeeeeeees 261 Advanced Analog Alarm Settings een 262 14 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents ei 264 UDP Unicast Era sedes ese ee N Me ie de oe ee Me ei Ge nnmnnn 264 UDP Broadcast Packet WEE 264 Analog See HOME od een 265 Digital Relay SCCUOM susse ass Rek ke AG eN GR KA GER Se EA NR RE Red 266 Serial Pin Signal Section eina EK Ke AE EEN AE RE RE Re NE EE RE na 266 UDP Unicast Example ies ee 267 leg Db Kl A 267 Modbus Serial Application Connected to the Serial Port 267 Modbus Serial Application Connected to the Network
54. 297 iji ER EE EE EL OE A KN Avaa RERE 298 OVITE een 298 Login Tab Field DeseflpliDliS uctus eee use token necs 298 Bootup Files Tab Field Descriptions sseseesssssssss 299 Message of the Day MOTD Tab Field Descriptions 300 TFTP Tab Field Descriptions ee 301 Console Port Tab Field Descriptions ccccccceseseeeeeeeeeeeeeeeeeees 301 Chapter 14 Controlling the RPS VO Channels and IPSEC Ku CC 303 lunes 9 OE 303 B SCHEN 303 Riel EE N OR EN N 303 Field Description esse 00000 0000000 EG tci rama sad RAN Ke ed Ke 303 Plug Control sessies ek Ed EN Ee na 304 eU Ope sei ees ee De ie ei Ee AG ee ei ee 304 Field Re eh e 304 Serial Port Power Control sesse KERE KERR EER RARR EER ARE ae 305 OVERVIEW 305 Field Descriptions si a ra d ana ir a o ada n RERO ERGO EE RR 305 Power Plug Slade es EE apex enr ends Puede aede sue Dn eeepc Fre ae 305 hele c 306 COT WAC T 306 IPsec Rf M 307 Table of Contents Chapter 15 System Administration 309 To COUN tie pec 309 Managing Configuration Files eiers EE RR EER RR ER RR RE Re 309 Saving Configuration Files sos 2 arnica RA dee Si ER AN eN Rd N KA 309 Downloading Configuration Files ee ees EER EER RR
55. Advanced Hardware Email Alert Packet Forwarding SLIP Settings Local IP Address RENG S NG EG Remote IP Address EE EA Subnet Mask GHESCIPE EN Configure the following parameters Local IP Address The IPv4 address of the IOLAN end of the SLIP link For routing to work you must enter an IP address in this field Choose an address that is part of the same network or subnetwork as the remote end for example if the remote end is address 192 101 34 146 your local IP address can be 192 101 34 145 Do not use the IOLAN s main IP address in this field if you do so routing will not take place correctly Remote IP Address The IPv4 address of the remote end of the SLIP link Choose an address that is part of the same network or subnetwork as the IOLAN If your user is authenticated by the IOLAN this remote IP address will be overridden if you have set a Framed IP Address for the user If your user is authenticated by RADIUS and the RADIUS parameter Framed Address is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Subnet Mask The network subnet mask For example 255 255 0 0 If your user is authenticated by RADIUS and the RADIUS parameter Framed Netmask is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here 179 Serial Port Profiles 180 Advanced Tab Field Descriptions General Advance
56. C Use Custom Login Prompt C Bypass Login Password Password Retry Limit Configure the following parameters Use System Name Displays the System Name field value instead of default product name When in Prompts enabled the Server Name is displayed in the IOLAN login prompt CLI prompt WebManager login screen and the heading of the Menu Default Disabled Display Login This parameter concerns the banner information product name software Banner version This banner information is presented to a user with a login prompt For security reasons you can turn off the display of this information Default Disabled Use Custom Login When set and a custom language file is in use the login prompt will use the Prompt string defined in the language file as the login prompt instead of the default prompt login Default Disabled Bypass Login When set authorized users who do not have a password set with the exception Password of the Admin user WILL NOT be prompted for a password at login with Local Authentication Default Disabled Password Retry The number of attempts a user is allowed to enter a password for a serial port Limit connection from the network before the connection is terminated and the user has to attempt to login again For users logging into the serial port if this limit is exceeded the serial port is disabled for 5 minutes A user with Admin level rights can restart the serial port bypassing the timeout by
57. CTS 4 RTS 6 DSR 20 DTR 5 GND 7 GND 4 DTR 6 DSR Pinouts and Cabling Diagrams 357 EIA 232 Cabling Diagrams Modem DB25 Connector The following diagrams show how a standard straight through cable should be configured when connecting to a DB25 modem DB25 Male IOLAN DS1 Modem DB25 DB25 DTE DCE RD 2 RxD 3 RxD 3 TxD 4 RTS 4 CTS 5 CTS 5 RTS 6 DSR 6 DSR 7 GND 7 GND 8 DCD 8 DCD 20 DTR 20 DTR RJ45 Modem DB25 IOLAN RJ45 DCE 10 pin 8 pin 2 DCD 1 8 DCD 3 RTS 2 A CTS 4 DSR 3 6 DSR 5 TxD 4 2 RxD 6 RxD 5 3 TxD 7 GND 6 7 GND 8 CTS 7 5 RTS 9 DTR 8 20 DTR 358 IOLAN SDS SCS STS User s Guide Version 3 6 EIA 232 Cabling Diagrams DB9 Male IOLAN DS1 DB9 Male 1 DCD 2 RxD 3 TxD 4 DTR 5 GND 6 DSR 7 RTS 8 CTS Modem DB25 DCE 8 DCD 3 TxD 2 RxD 20 DTR 7 GND 6 DSR 4 CTS 5 RTS Pinouts and Cabling Diagrams 359 EIA 232 Cabling Diagrams 360 IOLAN SDS SCS STS User s Guide Version 3 6 Setting Jumpers Introduction The IOLAN contains jumpers that you might need to set before you configure it and put it into production You can set the power out pin pin 9 to a fixed 5V DC output or to the external adapter output this can range from 9 30V DC if an external adapter
58. Deactivate Output Deactivates the channel Default None IOLAN SDS SCS STS User s Guide Version 3 6 Channels Relay Overview Relay channels can open or close a contact for a higher voltage circuit using a lower level control voltage The Relay output channels work as a physical on off switch and are used to drive higher voltage devices with a lower controlling voltage You can configure the following Relay output channel options You can choose to manually activate deactivate the Relay output You can choose to manually activate deactivate the Relay output and then specify that the Relay output will either pulse you get to specify the active and inactive pulse times continuously or for a specified number of pulse counts You can choose to manually activate deactivate the Relay output and then specify a delay before the output goes from inactive to active or active to inactive e You can also specify a failsafe action that can either active or inactivate the Relay output when the failsafe timer is triggered see Failsafe Timer Functionality on page 239 for more information In an industrial freezer warehouse the IOLAN A4R2 is used to monitor humidity transducers which are used to help prevent freezer burn If the humidity reaches a certain percentage monitored by an Analog channel a syslog message is sent to the Monitoring Application causing the Relay channel to activate an internal freezer dehumidifier T
59. ER ER EER ee 309 Downloading Configuration Files to Multiple IOLANS 310 Uploading Configuration Files eese 311 Specifying a Custom Factory Default Configuration 311 Resetting the IOLAN to the Original Factory Default GOMMQ UPA m 311 Downloading IOLAN Firmware eeeeeeeeeeee 312 Ms ed EE AE EE EE N 312 Calibrating Analog Input esse ee EER RR KERE ERGER EER EE ERGE EER RR EE 312 Calibrating Voltage EE 312 Calibrating Current essen 312 Calibrating Temperature Input uuuressssnnnnennnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 313 Calibrating Thermocouple sees ee Re ee ee ee ee ee ee 313 Calibrating R TD EE EE OE 313 Calibrating Analog Channels eere 313 Resetting Calibration Data ees esse RR RE EER RR EER RR KERR AGE RE RE EE RE ee 314 Setting the IOLAN s Date and Time 315 Hebooung tbe IOLAM zen 315 Resetting the IOLAN to Factory Defaults 315 Resetting the SecurlD Node Secret 316 Bit ET Ecl eem 316 Loading a Supplied Language eeeeeeereeeeeeee 316 Translation Guidance cn se NE tenni ia ia sudare du Ea ada N aru di 317 Software Upgrades and Language Files
60. Easy Config Wizard has been designed to walk you through the configuration process for any of the available configuration options shown on the Welcome window Configuration Methods 45 DeviceManager DeviceManager Overview The DeviceManager is a Windows based application that can be used to connect to the IOLAN to actively manage and configure it or can create new IOLAN configurations offline See Chapter 5 Using DeviceManager and WebManager on page 73 for information on configuring managing the IOLAN with DeviceManager Access Platforms The DeviceManager can be run from Windows 98 NT 2000 ME Server 2003 XP Server 2008 Vista DeviceManager can be installed from the product CD ROM or downloaded from the Perle website Unless the IOLAN has already been configured with a Gateway DeviceManager can only access IOLANs in the local subnet The DeviceManager can be accessed by only the admin user Unique Features DeviceManager supports the following unique features The ability to download the same configuration file to several IOLANs in one operation The ability to save a configuration file locally in text format in addition to the binary format The ability to create a configuration file without being connected to the IOLAN The ability to open a session to the IOLAN and download a saved configuration file to it The ability to download upload keys certificates to from the IOLAN The ability to download custom files such as new t
61. IOLAN 2 Loosen the screws and then insert your positive wire into the left terminal and screw it down Insert the negative wire into the right terminal and screw it down as shown below 9 30 VDC 3 Plug the power terminal block back into the IOLAN Plug the power supply into the electrical outlet 5 You will see the LEDs cycle for several seconds and then remain a solid green indicating that it is ready to configure use Before you start to configure the IOLAN you should set the IOLAN jumpers for Digital I O see Digital I O Module on page 366 or Analog Input Analog Input Module on page 367 channels Hardware and Connectivity 39 Powering Up the IOLAN DC Power Models To power up the IOLAN with DC power requirements perform the following steps 1 Verify that the power switch on the IOLAN unit and the power source is in the Off position 2 Connect the primary and secondary DC input using the following specifications a Use wire gauge 20 to 22 AWG b Strip insulation 7mm from wire ends If using stranded wire twist all strands together to ensure all wire strands are used for the connection c Connect supply with reference to the terminal block diagram and electrical specifications Earthing wire Secondary Supply Negative wire Secondary Supply Positive wire Primary Supply Negative wire Primary Supply Positive wire DC Power Supply amp 1 2
62. IOLAN See the Chapter 4 Getting Started on page 65 to find out how to assign an IP address to the IOLAN Once an IP address is assigned to the IOLAN you can use any of the configuration methods to Configure users Configure IOLAN server parameters Configure serial port parameters Configure network parameters Configure time parameters Reboot the IOLAN Manage the Perle Remote Power Switch when applicable Manage I O channels when applicable View statistics while connected to the IOLAN IOLAN SDS SCS STS User s Guide Version 3 6 43 Configuration Methods Overview Configuration Methods Overview Some of the IOLAN configuration methods have the capability of configuring an IP address which is the first required configuration step for a new IOLAN Once the IOLAN has been assigned an IP address any of the configuration methods can be used to configure the IOLAN Configures an IP Address Following is a list of methods for setting the IOLAN IP address and a short explanation of when you would want to use that method Easy Config Wizard The Easy Config Wizard is available from the CD ROM included with your IOLAN You can use the Easy Config Wizard to set the IOLAN s IP address and configure serial ports This configuration method would typically be used when e All ports are to have the same configuration Only the most commonly used profiles are required e Straightforward application with no advanced fun
63. IP Address to be assigned to this user for PPP or SLIP The subnet to be assigned to this user for PPP or SLIP Attribute indicates the Maximum Transmission Unit MTU to be configured for the user when it is not negotiated by some other means such as PPP Indicates a compression protocol to be used for the PPP or SLIP link Supported value is e 1 Van Jacobson TCP IP compression Indicates the host with which the user can connect to when the Service Type is set to 1 Login or 3 Callback Login Indicates the IOLAN User Service to use to connect the user a host Supported values are e 0 Telnet e 1 Rlogin e 2 TCP Clear e 5 SSH e 6 SSL Raw 336 IOLAN SDS SCS STS User s Guide Version 3 6 RADIUS Type Name Description 16 19 20 26 27 28 96 Login TCP Port Callback Number Callback ID Vendor Specific Session Timeout Idle Timeout Framed Interface Id Indicates the TCP port with which the user is to be connected when the Service Type is set to 1 Login or 3 Callback Login Specifies the callback phone number This is the same implementation as 20 Callback ID but takes precedence if 20 is set Specifies the callback phone number This is the same implementation as 19 Callback Number but 19 takes precedence if both are set Perle s defined attributes for line access rights and user level See Perle RADIUS Dictionary Example on page 340 for an exa
64. IPv6 address TCP port number Settings when Perle_User_Service is set to 2 Settings when Perle_User_Service is set to 3 Settings when Perle_User_Service is set to 4 Settings when Perle_User_Service is set to 5 Settings when Perle_User_Service is set to 6 RADIUS and TACACS 343 TACACS Accessing the IOLAN Through a Serial Port User Example Settings The following example shows the parameters that can be set for users who are accessing the IOLAN from the serial side These settings should be included in the TACACS user configuration file Service EXEC priv lvl x 12 15 8 11 4 7 0 3 Admin Normal Restricted Menu Se MH SE och EE timeout x session timeout in seconds x ll idletimesx x Idle timeout in seconds Telnet Rlogin TCP_Clear SLIP PPP SSH 6 SSL_RAW If not specified command prompt Perle User Service x x x NW X X Xx uo dw og Di Gs 0 b i HO Depending on what Perle User Service is set to service telnet addr x x x x ipv4 or ipv6 addr port tcp_port ll x service rlogin addr x x x x ipv4 or ipv6 addr service tcp_clear addr x x x x ipv4 or ipv6 addr port tcp_port ll x service slip routing x x true Send and Listen x false None addr x x x x ipv4 addr 344 IOLAN SDS SCS STS User s Guide Version 3 6 TACACS service ppp
65. Language File option and browse to the language file 5 To set an individual user to the new language go to the Users menu and in the Language field select Customlang In the CLI only you can set individual users or all users to the new language see the set user command 6 The user will see the change of language when he she logs out Main Menu Sessions Menu Logout and logs back into the IOLAN If as Admin user you change your language setting to Customlang you will see the text menus display in the new language when you save and exit the Change User form Users with Level Normal can also change their display language IOLAN SDS SCS STS User s Guide Version 3 6 Language Support Translation Guidance To help you with your translation of supplied ASCII text language files we offer the following guidance The IOLAN will support languages other than English and the supplied German and French languages The English language file english txt displays the character length of each line at the beginning of the line If a translated line goes over that character length it will be displayed truncated in the Menu or CLI Translate line for line do not omit lines if you do not know the translation leave the original untranslated text in place Also you must maintain the same sequential order of lines It is a good practice to translate the file using a text editor that displays line numbers so you can periodically verify t
66. Mask Type Add Add Button Edit Button The following buttons are available Click the Add button to add a VPN exception to the Exception List Highlight an Exception List entry and click the Edit button to change the entry IOLAN SDS SCS STS User s Guide Version 3 6 VPN Advanced Delete Button Highlight an Exception List entry and click the Delete button to remove the entry from the list Adding Editing a VPN Exception VPN Exception VPN Exception Allow non YPN network traffic to from the following IP Address O Network The following parameters are available IP Address The IP address of the host that will communicate with the IOLAN outside of the VPN tunnel Field Format IPv4 or IPv6 address Network The network address that will communicate with the IOLAN outside of the VPN tunnel Field Format IPv4 or IPv6 address IPv4 Subnet Mask The IPv4 subnet mask for the IPv4 network Default 0 0 0 0 IPv6 Prefix Bits The IPv6 prefix bits for the IPv6 network Range 0 128 Default 0 Field Description IPsec Settings These settings are global and apply to all VPN connections Use NAT Traversal NAT T Configure the following parameter Use NAT Traversal NAT Traversal should be enabled when the IOLAN is communicating through NAT T a router gateway to a remote VPN that also has NAT Traversal enabled Default Enabled 229 Services Services Overview Se
67. Modem m Modem nm String pci modem AT amp FSO 1 Add Edit If any modems have been configured they will be displayed Adding Editing a Modem You can add new modems or edit existing modems through the following window Name Initialization String Configure the following parameters Name The name of the modem Restrictions Do not use spaces Initialization String The initialization string of the modem see your modem s documentation IOLAN SDS SCS STS User s Guide Version 3 6 Advanced TruePort Baud Rate Tab Overview The TruePort utility acts as a COM port redirector that allows applications to talk to serial devices across a network as though the serial devices were directly attached to the server For IOLAN I O models you can also monitor and control I O through the TruePort client Functionality Since some older applications may not support the higher baud rates that the IOLAN is capable of achieving the baud rate can be mapped to a different value on the IOLAN Through TruePort you can map the baud rate of the host COM port to a higher baud rate for the serial line that connects the serial device and the IOLAN See TruePort on page 375 for more information about the TruePort utility Field Definitions Advanced Settings Modems TruePort Baud Rate Map TruePort Baud Rate Map your TruePort baud rate running on the application software to the Actual baud rate baud rate on the serial port
68. Next Request Delay 50 milliseconds C Enable Serial Modbus Broadcasts v Request Queuing UID Address Mode S Embedded Remapped J Enable SSL TLS using global settings Security SSL TLS Configure the following parameters TCP UDP Port The network port number that the Slave Gateway will listen on for both TCP and UDP messages Default 502 Next Request Delay A delay in milliseconds to allow serial slave s to re enable receivers before issuing next Modbus Master request Range 0 1000 Default 50 ms Enable Serial When enabled a UID of 0 zero indicates that the message will be broadcast to Modbus Broadcasts all Modbus Slaves Default Disabled Request Queuing When enabled allows multiple simultaneous messages to be queued and processed in order of reception Default Enabled 167 Serial Port Profiles Embedded Remapped Remap UID Enable SSL TLS using global settings When this option is selected the address of the slave Modbus device is embedded in the message header Default Enabled Used for single device port operation Older Modbus devices may not include a UID in their transmission header When this option is selected you can specify the UID that will be inserted into the message header for the Modbus slave device This feature supersedes the Broadcast feature Default Disabled Specify the UID that will be inserted into the message header for the Slave Modbus serial de
69. Port 26 126 integer Perle ATTRIBUTE Perle Line Access Port 27 127 integer Perle ATTRIBUTE Perle Line Access Port 28 128 integer Perle ATTRIBUTE Perle Line Access Port 29 129 integer Perle 340 IOLAN SDS SCS STS User s Guide Version 3 6 RADIUS ATTRIBUTE Perle Line Access Port 30 130 integer Perle ATTRIBUTE Perle Line Access Port 31 131 integer Perle ATTRIBUTE Perle Line Access Port 32 132 integer Perle ATTRIBUTE Perle Line Access Port 33 133 integer Perle ATTRIBUTE Perle Line Access Port 34 134 integer Perle ATTRIBUTE Perle Line Access Port 35 135 integer Perle ATTRIBUTE Perle Line Access Port 36 136 integer Perle ATTRIBUTE Perle Line Access Port 37 137 integer Perle ATTRIBUTE Perle Line Access Port 38 138 integer Perle ATTRIBUTE Perle Line Access Port 39 139 integer Perle ATTRIBUTE Perle Line Access Port 40 140 integer Perle ATTRIBUTE Perle Line Access Port 41 141 integer Perle ATTRIBUTE Perle Line Access Port 42 142 integer Perle ATTRIBUTE Perle Line Access Port 43 143 integer Perle ATTRIBUTE Perle Line Access Port 44 144 integer Perle ATTRIBUTE Perle Line Access
70. Port 45 145 integer Perle ATTRIBUTE Perle Line Access Port 46 146 integer Perle ATTRIBUTE Perle Line Access Port 47 147 integer Perle ATTRIBUTE Perle Line Access Port 48 148 integer Perle ATTRIBUTE Perle Line Access Port 49 149 integer Perle Perle Clustered Port Access Values VALUE Perle Clustered Port Access Disabled 0 VALUE Perle Clustered Port Access Enabled 1 Perle User Level Values VALUE Perle User Level Admin 1 VALUE Perle User Level Normal 2 VALUE Perle User Level Restricted 3 VALUE Perle User Level Menu 4 Perle Line Access Right Values VALUE Perle Line Access Port Disabled VALUE Perle Line Access Port Read Writ VALUE Perle Line Access Port Read Input VALUE Perle Line Access Port Read Input Writ VALUE Perle Line Access Port Read Output VALUE Perle Line Access Port Read Output Writ VALUE Perle Line Access Port Read Output Input VALUE Perle Line Access Port Read Output Input Writ VALUE Perle Line Access Port 2 Disabled VALUE Perle Line Access Port 2 Read Writ VALUE Perle Line Access Port 2 Read Input VALUE Perle Line Access Port 2 Read Input Writ VALUE Perle Line Access Port 2 Read Output VALUE Perle Line Access Port 2 Read Output Writ VALUE Perle Line Access Port 2 Read Output Input VALUE Perle Line Access Port 2 Read Output Input Writ VALUE Perle Line Access Port 3 Disabled VALUE Perle Line Access Port 3 Read Writ VALUE Perle Line Access Port 3 Read Input VALUE Perle Line Access Port 3 Read Input Writ VAL
71. RADIUS accounting response Default Enabled The number of times the IOLAN tries to connect to the RADIUS server before erroring out Range 0 255 Default 5 The time in seconds that the IOLAN waits to receive a reply after sending out a request to a RADIUS accounting or authentication host If no reply is received before the timeout period expires the IOLAN will retry the same host up to and including the number of retry attempts Range 1 255 Default 3 seconds Attributes Field Descriptions Radius Settings General Attributes NAS Identifier Automatically determine NAS IP Address Automatically determine NAS IPv6 Address Q Use the following NAS IP Address Q Use the following NAS IPv6 Address Configure the following parameters NAS Identifier Automatically determine NAS IP Address This is the string that identifies the Network Address Server NAS that is originating the Access Request to authenticate a user Field Format Maximum 31 characters including spaces When enabled the IOLAN will send the IOLAN s Ethernet 1 IPv4 address to the RADIUS server Default Enabled 207 Authentication Kerberos 208 Use the following NAS IP Address IP Address Automatically determine NAS IPv6 Address Use the following NAS IPv6 Address IPv6 Address When enabled the IOLAN will send the specified IPv4 address to the RADIUS server Default Disabled The IPv4 ad
72. RJ45 gt DB9M crossover adapter pinouts This is model number DBA0021 BAR o X b j RJ4SF DB9M RJ45F DB9M TxD 4 2 RxD RxD 5 3 TxD GND 6 5 GND DTR 8 1 DCD 6 DSR DSR 3 4 DTR RTS 2 8 CTS CTS 7 _ 7 RTS Accessories 385 Starter Kit Adapters Cable RJ45F to DB9F DTE Crossover Adapter The following diagram shows the IOLAN RJ45F gt DBOF crossover adapter pinouts This is model number DBA0020 l O Gg L Hi B oe 5 dd 6 E 1 I A O RJ amp 5F DB9F RJ45F DB9F TxD 4 2 RxD RxD 5 3 TxD GND 6 5 GND DTR 8 1 DCD 6 DSR DSR 3 4 DTR RTS 2 8 CTS CTS 7 _ 7 RTS Sun Cisco RJ45M Connector Cable for Rack Mount Models This is a 3 meter RJ45M gt RJ45M 8 wire Sun Cisco modular cable The following diagram shows how the IOLAN RJ45M cable is configured when connecting to the supplied Sun Cisco RJ45 cable This model number is CABOO30 IOLAN Sun Cisco RJ45M RJ45M RTS 2 8 CTS DSR 3 2 DTR TxD 4 6 RxD RxD 5 3 TxD GND 6 4 GND CTS 7 1 RTS DTR 8 7 DSR 386 IOLAN SDS SCS STS User s Guide Version 3 6 SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable The IOLAN Starter Kit include
73. Rlogin settings apply when the User Service is set to Rlogin or the Terminal profile has Require Login selected and specifies an Rlogin connection to a host Login Telnet Rlogin SSH SLIP PPP SSL TLS Terminal Type Configure the following parameter Terminal Type Type of terminal attached to this serial port for example ANSI or WYSE60 When Connect to remote system is selected the Rlogin window requires the name of the user who is connecting to the host Rlogin Configure the following parameters Terminal Type Type of terminal attached to this serial port for example ANSI or WYSE60 User This name is passed on to the specified host for the Rlogin session so that the user is only prompted for a password 141 Serial Port Profiles 142 SSH Settings The SSH settings apply when the User Service is set to SSH or the Terminal profile specifies an SSH connection to a host Login Telnet Rlogin SSH suip PPP SSL TLS Terminal Type Verbose Mode C Enable Compression Auto Login Name Protocol v SSH 1 E Cipher 3DES v SSH 2 ENDE Cipher Opt 3DES Cipher Opt2 Blowfish CSC EI Cipher Opt3 as E mI Cipher Opt4 cast M Cipher Opt5 Nds 8n Mj Authentication MRSA DSA Keyboard Interactive Configure the following parameters Terminal Type Verbose Mode Enable Compression Auto Login Name Password SSH1 SSHI Cipher SSH2
74. Server Application UDP Socket Server Application UDP Socket When you configure UDP for LAN to Serial the following options are available To send to a single IP address leave the End IP Address field at its default value 0 0 0 0 The IP address can be auto learned if both start end IP address are left blank default e If the Start IP Address field is set to 255 255 255 255 and the End IP Address is left at its default value 0 0 0 0 the IOLAN will accept UDP packets from any source address An example UDP configuration is described based on the following window Bee Hardware Email Alet Packet Forwarding UDP Socket Settings Listen for connections on UDP port 10001 Host Range Direction Start IP Address End IP Address UDP Port 1 Both v 1721611 172 16 1 25 Port sl 33001 2 LANto Serial zl 17216120 17216150 Port sl 33010 3 Serialto LAN sel 17216175 17216180 Port sl 33009 4 Dsabled zi 0000 EET The UDP configuration window taken from the DeviceManager is configured to e UDP Entry 1 All hosts that have an IP address that falls within the range of 172 16 1 1 to 172 16 1 25 and listen to Port 33001 will be sent the data from the serial device in UDP format The serial device will only receive UDP data from the hosts in that range with a source Port of 33001 The IOLAN will listen for data on the port value configured in the Listen for connections on UDP port parameter e UD
75. Service 4 Idle Timeout 5 Session Timeout 14 Port Suspended 16 Callback 338 IOLAN SDS SCS STS User s Guide Version 3 6 RADIUS Mapped RADIUS Parameters to IOLAN Parameters When authentication is being done by RADIUS there are several Serial Port and User parameters that can be set by the RADIUS server Any parameters sent by that RADIUS server that are not supported by the IOLAN are discarded Below is a list of the RADIUS parameters and their IOLAN parameters RADIUS Parameter Service Type Framed Protocol Framed Address Framed Netmask Framed Compression Framed MTU Idle Timeout Login Service Session Timeout Callback Number Callback ID IOLAN Parameter This has no IOLAN field although it needs to be set to Framed User in the RADIUS server Set to SLIP or PPP service Remote IP Address field under either SLIP or PPP Caution the exception to the above rule is aFramed Address value of 255 255 255 254 When this value is specified in the RADIUS file the unit will use the Remote IP address configured for a PPP line in the IOLAN IPv4 Subnet Mask field under either SLIP or PPP VJ Compression field under either SLIP or PPP MTU field under SLIP MRU field under PPP Idle Timeout under the serial port Advanced settings Corresponds to one of the following User Service parameters Telnet Rlogin TCP Clear SSH or SSL Raw Session Timeout under the serial port Advanced
76. Settings Primary Master Host v Replica Slave Host UDP Port Encryption Type Legacy Configure the following parameters Primary Master Host Replica Slave Host UDP Port Encryption Type Legacy The first SecurID server that is tried for user authentication Default None If the first SecurID server does not respond to an authentication request this is the next SecurID server that is tried for user authentication Default None The port number that SecurlD listens to for authentication requests Default 5500 The type of encryption that will be used for SecurID server communication Data Options DES SDI Default SDI If you are running SecurID 3 x or 4 x you need to run in Legacy Mode If you are running SecurID 5 x or above do not select Legacy Mode Default Disabled 211 Authentication NIS Field Descriptions NIS Settings NIS Domain Primary NIS Host None Configure the following parameters NIS Domain The NIS domain name Primary NIS Host The primary NIS host that is used for authentication Default None Secondary NIS Host The secondary NIS host that is used for authentication should the primary NIS host fail to respond Default None 212 IOLAN SDS SCS STS User s Guide Version 3 6 SSH SSH Overview The IOLAN contains SSH Server software that you need to configure if the IOLAN is going to be accessed via SSH If you specify more than one Authen
77. Slave IP Mappings Button Advanced Slave Settings Button UID Range Modbus RTU Modbus ASCII Append CR LF Specify how the Modbus Gateway is defined on the serial port Data Options e Modbus Master Typically the Modbus Master is connected to the Serial Port and is communicating to Modbus Slaves on the network e Modbus Slave Typically the Modbus Master is accessing the IOLAN through the network to communicated to Modbus Slaves connected to the IOLAN s Serial Ports Default Modbus Master Gateway Click this button to launch the Destination Slave IP Settings window where you can configure the TCP Ethernet Modbus Slaves that the Modbus Master on the Serial Port will communicate with Click this button to configure global Modbus Slave settings You can specify a range of UIDs 1 247 in addition to individual UIDs Field Format Comma delimited for example 2 35 50 100 103 Select this option when the Modbus RTU protocol is being used for communication between the Modbus Master and Slave Default Enabled Select this option when Modbus ASCII protocol is being used for communication between the Modbus Master and Slave Default Disabled When Modbus ASCII is selected adds a CR LF to the end of the transmission most Modbus devices require this option Default Enabled 163 Serial Port Profiles 164 Advanced Field Descriptions General Advanced Hardware Email Alert Packet Forwardin
78. Teminal on disconnect C Allow Port Locking Hotkey Prefix 1 Idle Timeout 0 seconds Session Timeout 0 seconds Dial Options C Dial In C Dial Out Dial Timeout 45 seconds Dial Retry 2 Modem Wen modem Phone ESEESU Configure the following parameters Enable Message of Enables disables the display of the message of the day the Day MOTD Default Disabled Reset Terminal on When enabled resets the terminal definition connected to the serial port when disconnect a user logs out Default Disabled Allow Port Locking When enabled the user can lock his terminal with a password using the Hotkey Prefix default Ctrl a a I lowercase L The IOLAN prompts the user for a password and a confirmation Default Disabled Hotkey Prefix The prefix that a user types to lock a serial port or redraw the Menu Data Range e Aal Lowercase L Locks the serial port until the user unlocks it The user is prompted for a password any password excluding spaces and locks the serial port Next the user must retype the password to unlock the serial port Ar When you switch from a session back to the Menu the screen may not be redrawn correctly If this happens use this command to redraw it properly This is always Ctrl R regardless of the Hotkey Prefix You can use the Hotkey Prefix key to lock a serial port only when the Allow Port Locking parameter is enabled Default Hex 01 Ctrl a a 137 Seri
79. Trigger Trap for Analog input Alarm Level 1 IO AI ALARM LEVEL2 Trap for Analog input Alarm Level 2 IO AI ALARM LEVEL3 Trap for Analog input Alarm Level 3 IO AI ALARM LEVELA Trap for Analog input Alarm Level 4 IO AI ALARM LEVELS Trap for Analog input Alarm Level 5 voIlo a Mm BR wI N ma c IO DI ALARM SENSOR CLEAR IO DI ALARM SERIAL DSR CLEAR Trap for Digital input trigger Clear Mode Trap for Digital input DSR serial pin trigger Clear Mode IO DI ALARM SERIAL DCD CLEAR Trap for Digital input DCD serial pin trigger Clear Mode 12 IO DI_ALARM_SERIAL_CTS_CLEAR Trap for Digital input CTS serial pin trigger Clear Mode 13 IO AI ALARM LEVELI1 CLEAR Trap for the Analog input Alarm Level 1 Clear 14 IO AI ALARM LEVEL2 CLEAR Trap for the Analog input Alarm Level 2 Clear 15 IO AI ALARM LEVEL3 CLEAR Trap for the Analog input Alarm Level 3 Clear 16 IO AI ALARM LEVELA CLEAR Trap for the Analog input Alarm Level 4 Clear 17 IO AI ALARM LEVELS CLEAR Trap for the Analog input Alarm Level 5 Clear 279 VO SNMP Traps 280 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring Clustering Introduction zi 48 Configuration Clustering is a way to provide access to the serial ports of many IOLANs gg Network through a single IP address Hy Serial 2
80. TruePort Enable 1 0 Access via TruePort C Enable SSL Encryption Listen TCP Pot 33816 Available Network Access Allow 1 0 Access via API through TruePort Configure the following parameters Enable I O Access Enables disables Modbus as the communication protocol for all the I O to Modbus protocol channels Default Disabled UID This is the UID you are assigning to the IOLAN which is acting as a Modbus slave Default 255 Advanced Modbus Click this button to configure global Modbus Slave settings Settings Batten See Advanced Slave Modbus Settings on page 237 for field descriptions Allow Modbus TCP Allows a host running a Modbus TCP application to communicate to the I O Application API channels using the standard Modbus API Default Permanently enabled when Enable I O Access via Modbus protocol is enabled See Modbus I O Access on page 268 for function codes and I O coil registration descriptions Allow Modbus Enables disables serial Modbus application access to the I O over the network RTU ASCII via using the TruePort COM redirector feature TruePort Default Disabled See Modbus I O Access on page 268 for function codes and I O coil registration descriptions and Accessing I O Data Via TruePort on page 2775 for the Perle API 236 IOLAN SDS SCS STS User s Guide Version 3 6 Settings Enable VO Access Enables disables serial application access to the I O over the network using the via TruePort TruePort CO
81. TruePort Actual Baud Rate 50 57600 E 75 75 v 110 115200 ei 134 230400 v 150 150 v 200 200 v 300 300 vi 600 600 v 1200 1200 v 1800 1800 sl 2400 2400 EI 4800 4800 E 9600 9500 vj 18200 18200 vi 38400 38400 m Configure the following parameter Actual Baud Rate The actual baud rate that runs between the IOLAN and the connected serial device Range 50 230400 you can also specify a custom baud rate 189 Advanced 190 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring Users Introduction You can configure up to four users in the IOLAN s local user database for all DS SDS and STS 1 port to 4 port desktop models in addition Configuration to the Admin user You can configure up to 48 users in the IOLAN s Gam Network local user database for all STS SCS and SDS rack mount models in fases addition to the Admin user A user can even represent a device like a di Serial barcode reader or a card swipe device that you want to be a Serial Ports authenticated D Port Buffering When users are connecting to the IOLAN via serial ports the user 2 Advanced database can be used to 3 s e Have the user authenticated prior to establishing a connection to a network host e Establish a different connection type to the host specific to each user Create a profile different from the Default user profile When users are connecting to the IOLAN from a network connection the user datab
82. When you download any file configuration keys certificates firmware etc to the IOLAN you must reboot the IOLAN for it to take effect by selecting Tools Reset Reboot Server in DeviceManager and Administration Reboot Unit in WebManager Resetting the IOLAN to Factory Defaults You can reset the IOLAN to its factory default configuration by selecting Tools Reset Reset to Factory Default in DeviceManager and Administration Reset Factory Defaults in WebManager The IOLAN will automatically reboot itself with the factory default or custom factory default configuration 315 Resetting the SecurlD Node Secret Resetting the SecurlD Node Secret If you are using SecurID external authentication you can select Tools Reset Reset SecurlD Node Secret in DeviceManager and Administration Reset SecurlD Secret in WebManager to reset the node secret You do not need to reboot the IOLAN for this to take effect it works instantly Language Support Two language files in addition to English are supplied on the supplemental CD French and German You can use any of these language files to create a translation into a language of your choice You can download the language file whether the language is supplied or translated into the IOLAN and select the Language option of Custom Language or Customlang custom language making the Menu and CLI field labels display in the desired language You can view Menu or CLI in one other language only
83. an IPv6 network its local link address is determined using stateless auto configuration Once an IP address has been assigned to the IOLAN in most cases you can continue to use the same method if it is a configurator or you can switch to any other configuration method Requires a Configured IP Address The following configuration methods require that an IP address already be assigned to the IOLAN 44 WebManager WebManager is a fully functional browser based configuration method IOLAN Interface The IOLAN interface is available on IOLAN models that are 1 16 ports this is not supported on DS1 and TS2 models and uses the interface that is available on the IOLAN product line IOLAN SDS SCS STS User s Guide Version 3 6 Easy Config Wizard Easy Config Wizard The Easy Config Wizard is a configuration wizard that will configure all the serial ports on your IOLAN to one of the following Console Management TruePort Virtual COM Port TCP Sockets Raw TCP Terminal Printer not supported on DS1 TS2 models Serial Tunneling You can launch the Easy Config Wizard from the Perle website or from the installation CD ROM FasyConfig Welcome to EasyConfig perle EasyConfig Wizard discovers and configures IOLAN on a local network to one of the following profiles Discover ua Configure Raw TCP Download Configuration For more advanced configurations use WebManager or DeviceManager The
84. and a Packet Size of 100 bytes whichever criteria is met first is what will cause the packet to be transmitted Default Enabled The number of bytes that must be received from the serial port before the packet is transmitted to the network A value of zero 0 ignores this parameter Range 0 1024 bytes Default 0 The amount of time in milliseconds that must elapse between characters before the packet is transmitted to the network A value of zero 0 ignores this parameter Range 0 65535 ms Default 0 When enabled specifies the character that when received will define when the packet is ready for transmission The actual transmission of the packet is based on the Trigger Forwarding Rule Range Hex 0 FF Default 0 When enabled creates a sequence of characters that must be received to specify when the packet is ready for transmission if the End Triggerl character is not immediately followed by the End Trigger2 character the IOLAN waits for another End Trigger character to start the End Triggerl End Trigger2 character sequence The actual transmission of the packet is based on the Trigger Forwarding Rule Range Hex 0 FF Default 0 When enabled this group of parameters allows you to control the frame that is transmitted by defining the start and end of frame character s If the internal buffer 1024 bytes is full before the EOF character s are received the packet will be transmitted and the EOF character s se
85. case by replacing the case lid and the five screws You can now power it on with the new settings 366 IOLAN SDS SCS STS User s Guide Version 3 6 Introduction Analog Input Module IOLANs that have Analog Input have a voltage current jumper that must be set for each channel and must match the software configuration for each channel To change the settings do the following 1 2 Detach the IOLAN from the electrical power source and disconnect everything from the box Open the case by unscrewing the five side screws two on each side plus the grounding screw and lifting off the top of the case You should see the following configuration for the analog input board Channel 1 Channel2 Channel 3 Channel 4 oo oo LS JP1 VO JP2 JP3 VO JP4 To configure Channel for Voltage no jumper should be set as shown this is the default setting To configure Channel 2 for Current jumper both J2 pins as shown Close the IOLAN case by replacing the case lid and the five screws You can now power it on with the new settings Setting Jumpers 367 Introduction 368 IOLAN SDS SCS STS User s Guide Version 3 6 VO Wiring Diagrams Wiring VO Diagrams This section describes how to wire the various IOLAN I O models Digital VO Make sure the Digital I O jumpers support the software setting see Digital I O Module on page 366 for jumper settings Digital Input Wet Contact If you ar
86. dependent on the number and type of registers requested If the request returns 2 or 4 byte values it will be in big endian network order format If the request returns boolean values the least significant bit bit 0 represents the first value requested and bits 1 to 7 represents subsequent boolean values If more than 8 boolean registers are requested they are returned in successive bytes 376 IOLAN SDS SCS STS User s Guide Version 3 6 Decoder Error Codes Code Name Description 01 Illegal Function The function code received in the query is not an allowable action for the server or slave 02 Illegal Data The data address received in the query is not an allowable address for Address the server or slave 03 Illegal Data Value A value contained in the query data field is not an allowable value for server or slave 04 Slave Device An unrecoverable error occurred while the server or slave was Failure attempting to perform the requested action Decoder If you are using Port Buffering NFS Encryption you need to run the Decoder utility to view the port buffering logs See the Readme file to install the Decoder utility on any of the following operating systems e Windows 98 NT ME 2000 Server 2003 XP DOS Solaris x86 Solaris Sparc 32 bit 64 bit Linux x86 v2 4 x Utilities 377 Decoder 378 IOLAN SDS SCS STS User s Guide Version 3 6 Accessories Introduction This chapter provides info
87. different IOLAN configuration methods 68 IOLAN SDS SCS STS User s Guide Version 3 6 Setting Up the Network Using ARP Ping You can use the ARP Ping Address Resolution Protocol method to temporarily assign an IP address and connect to your IOLAN to assign a permanent IP address To use ARP Ping to temporarily assign an IP address 1 From a local UNIX Linux host type the following at the system command shell prompt arp s a b c d aa bb cc dd ee ff On a Windows 98 or newer system type the following at the command prompt arp s a b c d aa bb cc dd ee ff where a b c dis the IPv4 address you want to temporarily assign to the IOLAN and aa bb cc dd ee is the Ethernet MAC address of IOLAN found on the back of the unit 2 Whether you use UNIX or Windows you are now ready to ping to the IOLAN Here is a UNIX example of the sequence to use arp s 192 168 209 8 00 80 d4 00 33 4e ping 192 168 209 8 From the ping command issued in step 2 the IOLAN will pickup and use the IP address entered into the ARP table in step 1 You are now ready to configure the IOLAN See Chapter 3 Configuration Methods on page 43 for information on the different IOLAN configuration methods For an IPv6 Network The IOLAN has a factory default link local IPv6 address based upon its MAC Address For example the link local address is IOLAN MAC Address 00 80 D4 AB CD EF Link Local Address fe80 0280 D4ff feAB CDEF By defaul
88. ee eN ne ee RR dk ee aun 189 au AEN 189 Functionality se EE 189 Field Detnmtons sees esse ER RR AR RA RA ee ee ee ee nnne 189 Chapter 8 Configuring Users 191 Tute 1 6 itel p Pes 191 User Seming s 192 OV CIVIC EE E EEE 192 atb 192 Adding Editing Users ee eek ee ee EER RR RR RR RR RR KERR ee EER RE 193 el ME EE N RE 193 VET VIEW NA EE 193 PCC ten 2220222 een 193 Field Re dn 193 services Tab 195 RU PNE EE MP 195 F nctionality D SaN ES NN 195 Field DESC MDT ONG si ESE EE a t ie ge EE 195 Advanced Tab Mec P 197 ETI oe E ee ae n Re Re ee DA M 197 Field WR e den 197 Table of Contents SCDCDIDICEF 199 Auc e OO 199 Functionality e EE EE OE N N 199 Field elenep me tT Ed EE Ee ee Re Pe Ee ee ee 200 Serial Port Access Tab iss see Se KANNE SN EN ed as EEN AN sasie eN KANA ie 201 e EE 201 Es ede el del 201 Chapter 9 Configuring Security 203 lige Mee 203 A thenticati M I 203 Authenlcalloh uiis issie Ke a OU ca t d eds 204 IE cr DAE PERPE 205 8 EN EE EO ee EE ON 205 Field Descriptions c 205 EE 206 87 1 ee 206 General Field Descriptions EE 206 At
89. for more information This indicates a cross reference to another chapter or section that you can click on to jump to that section Online Help Online help is provided in the DeviceManager You can click on the What s This button KR or 3b and then click on a field to get field level help Or you can press the F1 key to get window level help You can also get the User s Guide online by selecting Help Help Topics 26 IOLAN SDS SCS STS User s Guide Version 3 6 Introduction About the IOLAN The IOLAN is an Ethernet communications terminal server that allows serial devices to be connected directly to LANs The IOLAN can connect to a wide range of devices including Terminals for multi user UNIX systems Data acquisition equipment manufacturing laboratory scanners etc Retail point of sale equipment bar coding registers etc PCs using terminal emulation or SLIP PPP Modems for remote access and Internet access ISDN adapters for branch remote access and Internet access All types of serial printers The performance and flexibility of the IOLAN allows you to use a wide range of high speed devices in complex application environments The IOLAN products will work in any server environment running TCP UDP IP IOLAN Family Models The IOLAN comes in several different models to meet your network needs DS Offered as a 1 port unit DB25M DB25F RJ45 and DB9M interfaces available this model provides general IOLAN f
90. for that channel Overview Analog channels monitor current voltage input Note that the internal jumpers must match the software setting by default they are set to Current see Analog Input Module on page 367 to find out how to set the internal jumpers For example in an industrial freezer warehouse the IOLAN A4R2 is used to monitor humidity transducers which are in place to help prevent freezer burn If the humidity reaches a certain percentage monitored by an Analog channel a syslog message is sent to the Monitoring Application The Monitoring Application then sends a command to the IOLAN via the Perle API that causes the Relay channel to activate an internal freezer dehumidifier The relay is turned off when the Analog channel sends a clear syslog message to the Monitoring Application and the Relay channel is deactivated A4D2 Relay E Li H Analog VO Analog IOLAN Relay Monitoring Application Industrial Freezers 243 Channels 244 Field Descriptions Analog A1 Description Analog Settings Type Voltage Range MN Alarm Settings Cancel Configure the following parameters Description Type Range Alarm Settings Button Provide a description of the channel making it easier to identify Data Options Maximum 20 characters including spaces Select the type of input being measured Data Options Current or Voltage Default Current Select the range for the
91. from the IOLAN to the VPN gateway X 509 Certificate X 509 certificates are used to authenticate the IPsec tunnel When using this authentication method you must include the signing authority s certificate information in the SSL TLS CA list and download it to the IOLAN Default Shared Secret 223 VPN Secret Remote Depending on the Authentication Method Validation Criteria Shared Secret Specify the text based secret that is used to authenticate the Button IPsec tunnel case sensitive This applies to all VPN tunnels IPsec and L2TP IPsec X 509 Certificate Specify the remote X 509 certificate validation criteria that must match for successful authentication case sensitive Note that all validation criteria must be configured to match the X 509 certificate An asterisk is valid as a wildcard See Shared Secret Field Description on page 225 for more information See Remote Validation Criteria Field Descriptions on page 226 for more information on the X 509 certificate validation criteria Local Device When the VPN tunnel is established one side of the tunnel is designated as Right and the other as Left You are configuring the IOLAN side of the VPN tunnel Data Options Left Right Default Left Local IP Address The IP address of the IOLAN You can specify defaultroute when the IP address of the IOLAN is not always known for example when it gets its IP address from DHCP When defaultroute is used a d
92. how the TruePort connection is initiated and then sets up the appropriate connection parameters General Advanced Hardware Email Alet Packet Forwarding SSL TLS Advanced TruePort Settings v Signals high when not under TruePort client control C Enable Message of the Day MOTD C Enable TCP Keepalive C Enable Data Logging Idle Timeout 0 seconds Session Timeout 0 seconds Dial Options C Dial in C Dial Out Dial Timeout 45 seconds Dial Retry 2 Modem iolan modem Phone Configure the following parameters Signals high This option has the following impact based on the state of the TruePort when connection e TruePort Lite Mode When enabled the EIA 232 signals remain active before during and after the TruePort connection is established When disabled the EIA 232 signals remain inactive when there is no TruePort connection and active when there is a TruePort connection e TruePort Full Mode When enabled the EIA 232 signals remain active before and after the TruePort connection and the TruePort client will control the state of the signals during the established TruePort connection When disabled the EIA 232 signals remain inactive before and after the TruePort connection and the TruePort client will control the state of the signals during the established TruePort connection Default Enabled Enable Message of Enables disables the display of the message of the day the Day MOTD De
93. in the peer SSL TLS certificate Data Options Maximum 64 characters Email An entry for an email address for example acct anycompany com This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters Console Management Profile Overview The Console Management profile provides access through the network to a console or administrative port of a server or router attached to the IOLAN s serial port This profile configures the IOLAN s serial port to set up a TCP socket that will listen for a Telnet or SSH connection from the network Functionality Use the Console Management profile when you are configuring users who need to access a serial console port from the network Serial Connect Console Port Server IOLAN P Router Administrator General Tab Field Descriptions The Console Management General tab configures how the serial port will be accessed by the user through the network General Advanced Hardware Email Alert Packet Forwarding Console Management Settings Protocol Telnet v Listen for connections on TCP Port 10001 DJ Enable IP Aliasing Configure the following parameters Protocol Specify the connection method that users will use to communicate with a serial device connected to the IOLAN through the network Data Options Telnet SSH Default Telnet 117 Serial Port Profiles 118 Listen f
94. issuing a kill on the disabled serial port Default 3 IOLAN SDS SCS STS User s Guide Version 3 6 Management Bootup Files Tab Field Descriptions You must have a TFTP server running on any host that you are uploading or downloading files to from When you specify the file path the path must be relative to the default path set in your TFTP server software Firmware Host File Configuration Host Login Bootup Files Message of the Day MOTD TFTP Console Port File Configure the following parameters Firmware Host Firmware File The host name or IP address of the server that contains the firmware file If you use a host name it must exist in the IOLAN s host table or be resolved by DNS Field Format Resolvable host name IPv4 address IPv6 address The path and file name relative to the default path of your TFTP server software of the update software for the IOLAN that will be loaded when the IOLAN is rebooted Configuration Host The host name or IP address of the server that contains the configuration file If Configuration File you use a host name it must exist in the IOLAN s host table or be resolved by DNS Field Format Resolvable host name IPv4 address IPv6 address The path and file name relative to the default path of your TFTP server software of the configuration file for the IOLAN that will be loaded when the IOLAN is rebooted 299 Management
95. jumper J220 for Line 1 as shown in the diagram and or jumper J221 for Line 2 4 To tum line termination on for Line 1 locate and jumper both J7 and J8 as shown in the diagram To turn line termination on for Line 2 locate and jumper both J209 and J210 5 Closethe IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings 364 IOLAN SDS SCS STS User s Guide Version 3 6 Introduction 4 Port Desktop IOL AN To change the settings do the following 1 Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw Q E Power ge DIP OE Sgolo Switch O N 3b O Reset Solos D e e dono The pin with the NI c oos square represents Ro Pin 1 gt Oo solo Oo RJ45 lo Oo Slo s Go CH Screw 3 The following table describes how to jumper the pins for line termination fixed 5V output and for output equal to the external adapter input Port Line Line Termination 5V Output input Volt Output 1 Jumper J7 and J8 J4 jumper pins 1 amp 2 J4 jumper pins 2 amp 3 2 Jumper J9 and J11 J5 jumper pins 1 amp 2 J5 jumper pins 2 amp 3 3 Jumper J22 and J2
96. master IOLAN Field Descriptions New Clustering Slave Server Name IP Address Number of Potts 1 Starting Slave TCP Port Starting Master TCP Port 1024 Protocol Telnet 10001 xj Cancel Configure the following parameters Server Name IP Address Number of Ports Starting Slave TCP Port Starting Master TCP Port Protocol Specify a name for the slave IOLAN in the clustering group This name does not have to correspond to the proper host name as it is just used within the IOLAN Field Format Maximum 15 alphanumeric characters including spaces Specify the IP address of the slave IOLAN in the clustering group Field Format IPv4 Specify the number of ports in the Slave IOLAN that you are adding to the clustering group Data Options 1 2 4 8 18 24 36 48 Default 1 Specify the first TCP Port number as specified in the slave IOLAN s serial port configuration on the slave host Default 10001 and increments by one for each serial port Specify the TCP port number you want to map the first slave IOLAN DS Port number to This number should not be a port number that is already in use by the master IOLAN Default 1024 and then increments by one for each new slave entry Specify the protocol that will be used to access the slave IOLAN port Data Options SSH Telnet Field Format Telnet IOLAN SDS SCS STS User s Guide Version 3 6 Clustering Slave List Advanced Clu
97. measurement type Data Options Current 0 20 mA 4 20 mA e Voltage 10V 5V H 1V 500mV 150mV Default Current is 0 20 mA Voltage is 10V Click the Alarm Settings button to specify the trigger and clear levels for the alarms Notice that the Analog Alarm Settings window has two alarm configuration views a basic alarm view and an advanced alarm view See Alarm Settings on page 261 for field descriptions IOLAN SDS SCS STS User s Guide Version 3 6 Channels Digital Input Overview When the channel is set for digital input it monitors voltage or current Note that the internal jumpers must match the software setting and must be set to Input which is the default see Digital I O Module on page 366 to find out how to set the internal jumpers Functionality The Digital input channels allow you to configure the following options You can choose to remember the last state change or latch that occurred Your options are to latch remember when the state changes from inactive to active or active to inactive You can choose to invert the signal which is useful if your sensor is wired in such a way that closed is actually inactive whereas closed is normally considered active You can also configure an alarm trigger and clear mode based on whether the Digital input is active or inactive sending an email syslog message and or SNMP trap when the alarm is triggered or cleared In an industrial fr
98. network for host name resolution Field Format IPv6 address When DHCPv6 is enabled you can enable this option to have the IOLAN receive the DNS IP address from the DHCPv6 server Default Enabled When enabled the IOLAN will accept IPv6 address es from the DHCPv6 server Default Disabled When enabled the IOLAN will accept the network prefix from the DHCPv6 server Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 IP Settings Adding Editing a Custom IPv6 Address You can manually add one of the following The IPv6 network prefix and the IOLAN will determine an IPv6 address based on the network prefix and the IOLAN MAC address The complete IPv6 address IPv6 Address Create a unique IPvB address on the network Network Prefix H 8 NM IPv6 Prefix Bis 4 O Use the following IPv6 address Configure the following parameters Create a unique When enabled the IOLAN will derive an IPv6 address from the entered IPv6 address on the network prefix and the IOLAN s MAC address network Default Enabled Network Prefix Specify the IPv6 network prefix The IOLAN will derive the complete IPv6 address from the entered network prefix and the IOLAN s MAC address Default Enabled Network Prefix Specify the network prefix bits for the IPv6 address IPv6 Prefix Bits Range 0 64 Default 64 Use the following Enable this option when you want to enter a specific IPv6
99. s access to the network although this can be done through the concept of creating sessions for a user see Sessions Tab on page 199 for more information Authentication ensures that the user is defined within the authentication database with the exception of using the Guest authentication option under Local Authentication which can accept any user ID as long as the user knows the configured password For external authentication the IOLAN supports RADIUS Kerberos LDAP TACACS SecurID and NIS You can specify a primary authentication method and a secondary authentication method If the primary authentication method fails cannot connect to the server or authentication fails the secondary authentication method is tried unless you enable the Only Use as backup option in which case the secondary authentication method will be tried only when the IOLAN cannot communicate with the primary authentication host This allows you to specify two different authentication methods If you do specify two different authentication methods the user will be prompted for his her username once but will be prompted for a password for each authentication method tried For example user Alfred s user ID is maintained in the secondary authentication database therefore he will be prompted for his password twice because he is not in the primary authentication database Unlike the other external authentication methods RADIUS and TACACS can also send back Serial
100. settings Combination of the Enable Callback and Phone Number fields under User Advanced settings Combination of the Enable Callback and Phone Number fields under User Advanced settings RADIUS and TACACS 339 RADIUS Perle RADIUS Dictionary Example The IOLAN has defined Vendor Specific RADIUS attributes in order for the RADIUS server to be configured to support the IOLAN features of Line Access Rights and User Level These attributes have been defined in Supported RADIUS Parameters on page 335 to allow the RADIUS server to be configured for RADIUS users to have this level of configuration See below for an example of the Perle defined attributes for the RADIUS server for a 4 port IOLAN although the dictionary can contain 48 ports even if they are not all defined Perle dictionary Perle Systems Ltd http www perle com Enable by putting the line SINCLUDE dictionary perle into the main dictionary file Version 1 30 21 May 2008 Add attribute for clustered port access Version 1 20 30 Nov 2005 Add new line access right values for ports up to 49 Version 1 10 11 Nov 2003 Add new line access right values Version 1 00 17 Jul 2003 original release for vendor specific field support VENDOR Perle 1966 Perle Extensi
101. sisse tees pube tek RE Ee ER nU oa ESE EES E GEEN 369 Digital NO 369 Digital Input Wet Contact es 369 Digital Input Dry Eonladl ten ea 369 Digital Output Sink ana 370 Digital Output Source ee 370 Analog Input 371 UII se en EG EE ee 371 VOIAJ eiennenn OE o 371 Io regt mmc an 372 lune ee 372 BTD2 OE EE EE Lee 372 RID SING se EE ER EE EG EE EE ed 372 RID4 Wie 373 Relay Out e ET 373 Normally Open Contact 373 Normally Closed Contact ee RR Re ee ee ee 373 21 Table of Contents Appendix G Utilities Ro ei GE 375 Vigs elke ie o rc aR 375 NEL Poren en 375 API VO Access Over TruePort RR RR RR RR Rea 376 API Hequest Formal eis snoek eed NN dee ei 376 API Response Formal 376 gee oo EE M 377 Bees EER DEE 377 Appendix H Accessories see ee ae RE EER RR RR RR ER Rea 379 iis olie de EES o reer er rr 379 installing a Perle PCI Card EER AE RE DR dde 379 Starter Kit Adapters Cable 382 RJ45F to DB25M DTE Crossover Adapter 382 RJ45F to DB25M DCE Modem Adapter 383 RJ45F to DB25F DTE Crossover Adapter 384 RJ45F to DB9M DTE Crossover Adapter 385 RJ45F to DB9F DTE Crossover Adapter
102. terminal type For a Wyse60 for example you would enter the command cd usr lib terminfo w 2 The termcap files are compiled so use the command infoemp termfile to read the required file for example infocmp wy60 3 Check the file for the attribute xmc n where n is greater than or equal to 1 This attribute will corrupt menu and form displays making the terminal type unsuitable for using Menu mode 4 If the terminal definition is suitable change to a directory of your choice 5 Rename and copy the file to the directory specified at step 4 using the command infocmp termfile gt termn where nis greater than or equal to 1 for example infocmp wy50 gt term1 Make sure the file has global read and execute permission for its entire path 6 Edit the file to include the following capabilities in this format term acsc bold civis clear cnorm cup rev rmacs rmso smacs smso page circ IOLAN SDS SCS STS User s Guide Version 3 6 Resetting Configuration Parameters For example term AT386 at386 386AT 386at at 386 console acsc jYk 1Zm qDtCu4x3 bold E 1m civis clear E 2J E H cnorm cup E i p1 02d p2 02dH rev E4A rmacs E 10m rmso E m smacs E 12m smso E 7m page circ n Resetting Configuration Parameters You can reset the IOLAN to its factory default settings this will reset it to the original factory default or custom factory default settin
103. to Auto Learn or Port The IOLAN will listen on port value configured in the Listen for connections on UDP port parameter for messages coming from the learned or configured port e Serial to LAN UDP Port can be set to Port only The IOLAN will listen on the port value configured in the Listen for connections on UDP port parameter and will send to the configured port e Both Messages are relayed in both directions UDP Port can be set to Auto Learn or Port For messages coming from the LAN to the serial device IOLAN will listen on port value configured in the Listen for connections on UDP port parameter for messages coming from the learned or configured port For messages going from the serial device to the LAN the IOLAN will listen on the port value configured in the Listen for connections on UDP port parameter and will send to the configured or learned if Auto Learn is enabled the IOLAN must receive a UDP message before it can send one since the port must first be learned port Default Both for UDP 1 and Disabled for all other UDP ranges The first host IP address in the range of IP addresses for IPv4 or IPv6 that the IOLAN will listen for messages from and or send messages to Field Format IPv4 or IPv6 address The last host IP address in the range of IP addresses for IPv4 not supported for IPv6 that the IOLAN will listen for messages from and or send messages to Field Format IPv4 address 133 Serial Port Profiles
104. to the IOLAN serial port e Terminal Allows a terminal device to connect to a specified host on the network through a serial port on the IOLAN Printer Allows hosts on the network to talk to a printer using LPD connected to the IOLAN Serial Tunneling Allows IOLANs on the network to establish a virtual link between their serial ports Typically one IOLAN s serial port is configured as a Tunnel Server and the other IOLAN s serial port is configured as a Tunnel Client Setting Up the Network The most important part of setting up the network is assigning an IP address to the IOLAN whether this is a static IP address or enabling a DHCP BOOTP assigned IP address You should also assign a name to the IOLAN to make it easier to recognize This section deals primarily with setting the IP address Using DeviceManager 66 To use the DeviceManager you must first install it on a Windows operating system The DeviceManager is able to automatically discover all IOLANs on your local network even if they have not yet been assigned an IP address If routers on the network have been setup to propagate multicasts DeviceManager will also be able to discover IOLANS in other networks The DeviceManager installation wizard can be found on the CD ROM included in the IOLAN package 1 Connectthe IOLAN to the network 2 Power on the IOLAN 3 From the CD ROM that was included in the IOLAN packaging select the DeviceManager link 4 Click on
105. to through the IOLAN Default None IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles TCP Port Specify the TCP port that the IOLAN will use to communicate to the Primary Host Default 0 Backup Host Specify a preconfigured host that the serial device will communicate to through the IOLAN if the IOLAN cannot communicate with the Primary Host Default None TCP Port Specify the TCP port that the IOLAN will use to communicate to the Backup Host Default 10000 Adding Editing a Multihost Entry When you click the Add or Edit button the Host Entry window appears The hosts in the multihost list must already be defined see Host Table on page 88 to learn how to create a host If you add a host that was defined with its fully qualified domain name FQDN it must be resolvable by your configured DNS server Host Entry Host Y TCP Port 0 Configure the following parameters Host Name Specify the preconfigured host that will be in the multihost list Default None TCP Port Specify the TCP port that the IOLAN will use to communicate to the Host Default 0 129 Serial Port Profiles 130 Advanced Tab Field Descriptions General Advanced Hardware Advanced TCP Socket Settings C Authenticate User C Enable TCP Keepalive Enable Data Logging Idle Timeout Session Timeout Dial Options Dial In Dial Out Dial Timeout Dial Retry Modem
106. will NOT be viewable in the list however you can add DNS and or WINS servers to supplement the DHCP supplied server Field Descriptions Host Table Route List DNS WINS RIP Dynamic DNS IPv6 Tunnels DNS Add DNS WINS Add WINS The following buttons are available on this window Add DNS Button Adds a DNS server Edit DNS Button Edits an existing DNS server Delete DNS Button Deletes a DNS server Add WINS Button Adds a WINS server Edit WINS Button Edits an existing WINS server Delete WINS Deletes a WINS server Button IOLAN SDS SCS STS User s Guide Version 3 6 Advanced RIP Editing Adding DNS WINS Servers IP Address IP Address 9 0 0 0 Configure the parameter DNS IP Address You can configure up to four DNS servers Field Format IPv4 or IPv6 address WINS IP Address You can configure up to four WINS servers Field Format IPv4 address Overview The Routing Information Protocol RIP is a routing protocol used with almost every TCP IP implementation Its function is to pass routing information from a router or gateway to a neighboring router s or gateway s RIP messages contain information about destinations which can be reached and the number of hops which are required The hop count is the basic metric of RIP and so RIP is referred to as a distance vector protocol RIP messages are carried in UDP datagrams Functionality You can configure RIP to selectively advertise
107. 0 Authentication O CHAP O PAP Both Configure the following parameters Allow L2TP IPsec When enabled the IOLAN listens for L2TP IPsec VPN tunnel connections connections Note to allow non VPN tunnel connections to the IOLAN you must create entries in the VPN Exceptions list Default Disabled Local IP Address The IPv4 address that the IOLAN will listen on for L2TP IPsec connections If the default value 0 0 0 0 is kept the IOLAN will use the Default Gateway value if no Default Gateway is specified L2TP IPsec VPN connections will not be established Default 0 0 0 0 Authentication Specify the authentication method that will be used between VPN peers to Method authenticate the VPN tunnel Data Options e Shared Secret A text based secret that is used to authenticate the IPsec tunnel case sensitive e X 509 Certificate X 509 certificates are used to authenticate the IPsec tunnel When using this authentication method you must include the signing authority s certificate information in the SSL TLS CA list and download it to the IOLAN Default Shared Secret 227 VPN Exceptions 228 Remote Validation Criteria IPv4 Local IP Address IPv4 Remote IP Start Address IPv4 Remote IP End Address Authentication VPN Exceptions Depending on the Authentication Method Shared Secret Specify the text based secret that is used to authenticate the IPsec tunnel case sensitive This appl
108. 08 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Email Alert Tab Field Descriptions Email notification can be set at the Server and or serial port levels You can set unique email notifications for each serial port because the person who administers the IOLAN might not be the same person who administers the serial device s attached to the IOLAN port Therefore email notification can be sent to the proper person s responsible for the hardware The following event triggers an email notification on the Serial Port for the specified Level e DSR signal loss Warning Level e I O alerts Critical Level General Advanced Hardware Email Alert Packet Forwarding v Enable Port Email Alert C Use System Email Alert Settings Level Addressing Send More Debug To Info Notice Subject Waming ES Eror Critical From Alert L gt Emergency Fepy io Send Less Outgoing Mail Server SMTP Configure the following parameters Enable Port Email Enable disable email alert settings for this serial port Alert Default Disabled Use System Email Determines whether you want the Serial Port to inherit the Email Alert settings Alert Settings from the System Email Alert configuration If this is enabled System and Serial Port notification events will have the same Email Alert setting Default Enabled Level Choose the event level that triggers an email notification Data Options
109. 0mA If you have not disabled confirmation messages Tools Options in DeviceManager only you will get prompted to verify channel calibration DeviceManager d Are you sure you want to calibrate the channel Yes Click Yes to proceed with calibration You are now prompted to apply 0 mA to the positive and negative terminals Once that is done click Yes to proceed 313 Calibrating VO DeviceManager A Apply 0 mA to A1 terminals Proceed Yes No You are now prompted to apply 20 mA to the positive and negative terminals Once that is done click Yes to proceed DeviceManager A Apply 20 mA to A1 terminals Proceed Once calibration is successfully completed click OK to finish the process Resetting Calibration Data You can reset the I O channels calibrations to the factory calibrations in DeviceManager by selecting Tools VO Channels Reset Calibrate Data or in WebManager by selecting Administration Reset VO Calibration 314 IOLAN SDS SCS STS User s Guide Version 3 6 Setting the IOLAN s Date and Time Setting the IOLAN s Date and Time When you set the IOLAN s time the connection method and time zone settings can affect the actual internal clock time that is being set For example if you are connecting to the IOLAN through the DeviceManager and your PC s time zone is set to Pacific Standard Time GMT 8 00 and the IOLAN s time zone is set to Eastern Standa
110. 16C SCS8C models only The Admin port and the serial ports have different pinouts as shown in the table The following table provides pinout information Pinout EIA 232 EIA 232 8 pin Admin Port Serial Ports 1 DCD in RTS out 2 RTS out DTR out 3 DSR in TxD out 4 TxD out GND 5 RxD in GND 6 GND RxD in 7 CTS in DSR in 8 DTR out CTS in DB9 Male Serial Only This section defines the pinouts for the DB9 male connection used on the 1 port IOLAN that is serial only not I O 354 The following table provides pinout information Pinout EIA 422 485 EIA 485 9 pin EIA 232 Full Duplex Half Duplex 1 in DCD 2 in RxD RxD 3 out TxD TxD TxD RxD 4 out DTR 5 GND GND GND 6 in DSR RxD 7 RTS 8 in CTS 9 TxD TxD RxD IOLAN SDS SCS STS User s Guide Version 3 6 Power Over Ethernet Pinouts DB9 Male VO This section defines the pinouts for the DB9 male connection used on the 1 port IOLAN VO models The following table provides pinout information Pinout EIA 422 485 EIA 485 9 pin ElA 232 Full Duplex Half Duplex 1 in DCD 2 in RxD RxD 3 out TxD TxD TxD RxD 4 out DTR 5 GND GND GND 6 in DSR RxD 7 RTS TxD TxD RxD 8 in CTS 9 Power Over Ethernet Pinouts This section defines the pinouts for the RJ45 Ethernet connection used on the IOLAN SDS P or IOLAN SCS P models B N B The following table provides p
111. 180 Leen R MB REG IR CURR RAW 2086 2118 2150 2182 R MB REG IR MIN RAW 2087 2119 2151 2183 R MB REG IR MAX RAW 2088 2120 2152 2184 R MB REG IR ALARM LEVEL 2089 2121 2153 2185 R For DI alarm state read will get state write will clear alarm 271 Modbus VO Access D4 D2R2 Registers The following coils and registers are supported by the IOLAN D4 and D2R2 I O models Data Model D1 D2 D3 R1 D4 R2 Coils MB REG DI SENSOR 6145 6146 6147 6148 MB REG DI SENSOR ALARM STATE 6209 6210 6211 6212 MB REG DO SENSOR 6657 6658 6659 6660 Holding Registers MB REG HR DI SENSOR LATCH 6145 6146 6147 6148 MB REG HR DO SENSOR PULSE ISW 6209 6210 6211 6212 MB REG HR DO SENSOR PULSE ASW 6273 6274 6275 6276 MB REG HR DO SENSOR PULSE COUNT 6337 6338 6339 6340 For DI alarm state read will get state write will clear alarm Serial Pin Signals The following coils and registers are supported by the IOLAN I O models Data Model Pin R W Coils MB REG DI DSR 4225 R MB_REG_DI_DSR_ALARM_STATE 4289 R W MB REG DI DCD 4353 R MB REG DI DCD ALARM STATE 4417 R W MB REG DI CTS 4481 R MB REG DI CTS ALARM STATE 4545 R W MB REG DO DTR 4673 R W MB REG DO RTS 4737 R W Holding Registers MB REG HR DI DSR LATCH 4097 R W MB REG HR DI DCD LATCH 4609 R
112. 2 Next Request Delay A delay in milliseconds to allow serial slave s to re enable receivers before issuing next Modbus Master request Range 0 1000 Default 50 ms Enable Serial When enabled a UID of 0 zero indicates that the message will be broadcast to Modbus Broadcasts all Modbus Slaves Default Disabled 237 Settings 238 Reguest Oueuing Embedded Remapped Remap UID Enable SSL TLS When enabled allows multiple simultaneous messages to be queued and processed in order of reception Default Enabled When this option is selected the address of the slave Modbus device is embedded in the message header Default Enabled Used for single device port operation Older Modbus devices may not include a UID in their transmission header When this option is selected you can specify the UID that will be inserted into the message header for the Modbus slave device This feature supersedes the Broadcast feature Default Disabled Specify the UID that will be inserted into the message header for the Slave Modbus serial device Range 1 247 Default 1 When enabled Modbus Slave Gateway messages to remote TCP Modbus using global settings Masters are encrypted via SSL TLS Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Settings Failsafe Timer Functionality Overview The Failsafe Timer tab configures the I O failsafe timer The Failsafe Timer is enabled on a global basis
113. 222 Adding Editing Ka CM TR TT WE 223 Shared Secret Field Description RA ee 225 Remote Validation Criteria Field Descriptions 226 RA TE 227 Field GSC INS ee ER Re eek 227 Excepti nS ssiri O 228 Field GSC e de 228 Adding Editing a VPN Exception esse ee ee ee ee ee ee ee Re ee ee 229 Advanced ENE 229 Field Desenplian EE EE ee 229 cjuo nee lu 230 je 230 F nctionality eco EE OE 230 Field Deseripli ns anna 230 Keys and en e 232 Chapter 10 Configuring VO Interfaces 235 Jude E EE EE nei 235 cap EE EE EE EE 236 ONEVIEW RE EE OD NN 236 VO Access Functionality asses id seekos kke NW dd AN RGN Rin Se SA 236 Field TSS ge e 236 Advanced Slave Modbus Settings ee ee ee ee ee Re ee 237 Table of Contents Failsafe Timer Functionality uuunsesssnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 239 si 2 ER N EE N 239 Field ele de 239 UDP Functionality susanne ed N ke 240 OUENIEW ER ccv 240 Field Descriptions EE 240 VO UDP SOUS AE ER OR OE N 241 Temperature Functionality sesse ee ee EER REAGEER RE EE ER REGEER RR RE 242 RG M EE EE N RE EHEN 242 Field DSS lee 242 ee iS EE EE N OO ED 243 irri OR EE 243 OV CI MR RE N EE i 243 Field Re el e 244 Digital 1 0 E 245 Psi m 245 EURO al y asco cte ER nx Eu eer cer aie Rr n reed
114. 4 J10 jumper pins 1 amp 2 J10 jumper pins 2 amp 3 4 Jumper J23 and J25 J6 jumper pins 1 amp 2 J6 jumper pins 2 amp 3 4 Close the IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings Setting Jumpers 365 Introduction Digital VO Module IOLANs that have Digital I O have an input output jumper that must be set for each channel and must match the software configuration for each channel Depending on the model the placement of the digital I O board can change so the diagram below shows how to set jumper for any digital board To change the settings do the following 1 Detach the IOLAN from the electrical power source and disconnect everything from the box 2 Open the case by unscrewing the five side screws two on each side plus the grounding screw and lifting off the top of the case You should see the following configuration for the digital I O board Channel 2 4 J5 9 Pini J3 Channel 1 3 Pini VO 3 To configure either Channel 1 or Channel 3 depending on how many Digital channels your VO supports and following the mylar channel definitions for Input jumper J3 pin 1 and 2 as shown this is the default setting To configure either Channel 2 or Channel 4 depending on how many Digital channels your I O supports and following the mylar channel definitions for Output jumper J5 pin 2 and 3 as shown 4 Close the IOLAN
115. 447mjriMFjJfheMUtHqOZhvWSE18ZfGEXNOO7yagZqLzjxu9 XJIA2SAGV LL3epPqW2fV5ORxVrf7uWn715FQ Note that the pound sign indicates a comment line and all characters in that line are ignored The key value itself should not have an carriage returns In the DeviceManager select Tools Advanced Keys and Certificates In the WebManager select Tools Administration Keys Certificates Download the RSA signature file to the DeviceManager specifying the IPsec tunnel it s for Keys and Certificates Key Certificate Download IPsec RSA Public Key x File Name C serial_devices_rsa_sig txt IPsec Tunnel Name Serial Devices v OK Cancel In the same Keys and Certificates window upload the IOLAN s RSA signature public key Keys and Certificates Key Certificate Upload IPsec RSA Public Key File Name serial devices rsa pub keu bd Install the IOLAN s public key in the remote VPN gateway for the Serial Devices IPsec tunnel Enable the IPsec service found in Security Services 329 Configuring a Virtual Private Network Network to Network The following examples shows how to configure a network to network IPsec tunnel This example uses the X 509 Certificate authentication method so it includes the configuration requirements for the X 509 certificate NAT Traversal NAT_T is enabled in this example on both sides because the VPN tunnel is going private network to public network to private n
116. A enable this parameter Default Disabled Dial Out If you want the modem to dial a number when the serial port is started enable this parameter Default Disabled Dial In Out Enable this option when you want the serial port to do either of the following accept a call from a modem or ISDN TA e dial a number when the serial port is started Default Disabled MS Direct Host Specify this option when the serial port is connected to a Microsoft Guest device Default Enabled MS Direct Guest Enable this option when the serial port is connected to a Microsoft Host device Default Disabled Dial Timeout The number of seconds the IOLAN will wait to establish a connection to a remote modem Range 1 99 Default 45 seconds Dial Retry The number of times the IOLAN will attempt to re establish a connection with a remote modem Range 0 99 Default 2 Modem The name of the predefined modem that is used on this line Phone The phone number to use when Dial Out is enabled 178 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Remote Access SLIP Profile Overview The Remote Access SLIP profile configures a serial port to allow a remote user to establish a SLIP connection to the IOLAN s serial port This is typically used with a modem for dial in or dial out access to the network 32632 OE Modem Modem IOLAN Dial In Connection Server Application General Tab Field Descriptions General
117. ACS host that is used for authentication should the primary TACACS host fail to respond Default None The port number that TACACSH listens to for authentication requests Default 49 The TACACS shared secret is used to encrypt decrypt TACACS packets in communications between two devices The shared secret may be any alphanumeric string Each shared secret must be configured on both client and server sides Enables authorization on the TACACS host meaning that IOLAN specific parameters set in the TACACS configuration file can be passed to the IOLAN after authentication Default Disabled Enables disables TACACS accounting Default Disabled The primary TACACS host that is used for accounting Default None IOLAN SDS SCS STS User s Guide Version 3 6 Authentication SecurlD Accounting Secondary Host Accounting Port Accounting Secret Overview The secondary TACACS host that is used for accounting should the primary accounting TACACS host fail to respond Default None The port number that TACACS listens to for accounting requests Default 49 The TACACS shared secret is used to encrypt decrypt TACACS packets in Communications between two devices The shared secret may be any alphanumeric string Each shared secret must be configured on both client and server sides If you need to reset the SecurID secret select Tools Reset Reset SecurlD Node Secret Field Descriptions SecurlD
118. AN EIA 422 485 in d Modbus Ma Master Slave Modbus Slave Modbus Sla Slave 322 IOLAN Device Server User s Guide Version 3 6 Configuring Modbus Modbus Serial Port Settings Modbus Master Settings When the Modbus Masters is attached to the IOLAN s serial port configure that serial port to the Modbus Gateway profile acting as a Modbus Master You must configure the Modbus TCP Slaves on the TCP Ethernet side so the IOLAN can properly route messages using the Modbus Slave s UIDs to the appropriate TCP attached devices Modbus Slave IP 10 10 10 12 UID 23 T Master Gateway EE TCP Serial EIA 232 d u _ IOLAN LEEN IP 10 10 10 10 EIA 422 485 Modbus Master e gd Modbus Slave d IP 10 10 10 11 E Serial Port 1 UID 22 Modbus Master To configure the Modbus Master on serial port 1 do the following 1 Select the Modbus Gateway profile for serial port 1 2 On the General tab enable the Modbus Master parameter 3 Click the Destination Slave IP Mappings button and click the Add button in the Destination Slave IP Mappings window 4 Configure the Destination Slave IP Mappings window as follows Destination Modbus Slave IP Settings UID Start 22 Destination Type 9 Host O Gateway IP Address Stat 10 10 10 11 End 1010 10 12 Protocol UDP TCPPor 502 The IOLAN will send a request and expect a response from the Modbus Slave with an IP Address of 10 10 10 11 on Por
119. AN RJA45 2 DB25F DTE crossover adapter pinouts This is model number DBAOO10C RJ4SF RJ45F DB25F TxD 3 3 RxD RxD 6 2 TxD GND 4 7 GND GND 5 DTR 2 6 DSR 8 DCD DSR 7 20 DTR RTS 1 5 CTS CTS 8 4 RTS Accessories 389 SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable RJ45F to DB9M DTE Crossover Adapter The following diagram shows the IOLAN RJ45 gt DB9M crossover adapter pinouts This is model number DBA0021C l Ee 3 j RJ4SF DB9M RJ45F DB9M TxD 3 2 RxD RxD 6 3 TxD GND 4 5 GND GND 5 DTR 2 1 DCD 6 DSR DSR 7 4 DTR RTS 1 8 CTS CTS 8 7 RTS 390 IOLAN SDS SCS STS User s Guide Version 3 6 SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable RJ45F to DB9F DTE Crossover Adapter The following diagram shows the IOLAN RJ45F gt DBOF crossover adapter pinouts This is model number DBA0020C eL RJ4 amp 5F DROE RJ45F DB9F TxD 3 2 RxD RxD 6 3 TxD GND 4 5 GND GND 5 DTR 2 1 DCD 6 DSR DSR 7 4 DTR RTS 1 8 CTS CTS 8 7 RTS Sun Cisco Roll Over Adapter for Rack Mount Models This is a RJASM RJASF Sun Cisco adapter This model number is DBA0031C IOLAN Sun Cisco RJ45F RJ45M 1 8 2 7 3 6 4 5 5 4 6 3 7 2 8 1 The Sun Cisco RJ45M connector attaches to the Sun Cisco Console
120. Al gf nenn 120 General Tab Field Descrotons nn nnnnnnnnnnnnn 121 Adding Editing Additional TruePort Hosts ssssss 122 Adding Editing a Multihost Entry u 123 Advanced Tab Field Descriptions eeeessssssssssss 124 TOP Sockets Profile aeu mb asian 126 OYEINIEW MO EN EE EE ON 126 F nctionalty EE EE HA ED 126 General Tab Field Descrotons see ee ee ee Re ee ee 126 Adding Editing Additional Hosts A 128 Adding Editing a Multihost Ent 129 Advanced Tab Field Descriptions AEN 130 UDP Sockets Profile iis ncs isa gab AG pus NA ke Ge n ds ARN Lu ENE AE NN Ad R 132 9 1 eege eebe 132 Functionality ER EE aa 132 General Tab Field Descrottons un 133 Terminal Profile susse ed AE N N Ke EE AN ac mann N da Ed 134 97 7 134 F ncti nalty acer e a E EEE 134 General Tab Field Desenpli ns u a 135 Advanced Tab Field Descriptions ee ee Re ee 137 User Service Settings uses se dk AR Rd ede o rata andan N Ke eN adn 139 Login Settings AE EE EE EE EE DE QUE Ra tuE 139 Telnet Settings ae EE 140 Rlogin Settings iss ee ee De N ee ee 141 ie SUMING N ER N ER EE 142 SLIP Settings RE ER N 143 PPP uie MEE AR AE PEN 145 Printer te 150 8 TA NEER MA 150 General Tab Field Descrotons see ee ee ee ee ee RR ee ee 150 Serial Tunneling Profile ss ks sed esse ae es N AN NG Ek Ki n Ke Rd de 151 9g ee
121. Console port rack mount models When connecting a terminal or PC directly without modems the E1A 232 signals need to be crossed over null modem cable See Appendix D E1A 232 Cabling Diagrams on page 356 for cabling diagrams Using a PC emulation application such as HyperTerminal or from a dumb terminal set the Port settings to 9600 Baud 8 Data bits No Parity 1 Stop Bits and No Hardware Flow control to connect to the IOLAN You can change these settings for future connections on the rack mount models the IOLAN must be rebooted for these changes to take place When prompted type admin for the User and superuser for the Password You should now see the a prompt that displays the model type and port number for example SCS16 You are now logged into the IOLAN and can set the IP address by typing from the command line using the Command Line Interface CLI For single Ethernet connection models type set server internet ipv4address For dual Ethernet connection SCS models type set server internet ethl lt ipv4address gt Where ipv4address is the IP Address being assigned to the IOLAN Type the following command Save If you are going to use another configuration method such as WebManager or DeviceManager unplug a desktop IOLAN or turn Off a rack mount IOLAN On a desktop IOLAN change the DIP switch to Off Serial DIP switch in the up position and connect it to your serial device Plug the IOLAN ba
122. D 1255 Advanced Modbus Settings Available Network Access Allow Modbus TCP Application API Allows Modbus RTU ASCII via TruePort Enable 1 0 Access via TruePort Enable SSL Encryption Listen TCP Port 33816 Available Network Access Allow 1 0 Access via API through TruePort There are three ways your Modbus Application can connect to the IOLAN to access I O Modbus Serial Application Connected to the Serial Port Your Modbus serial application can be connected right to the IOLAN serial port to access I O E m PC running a IOLAN g Modbus Serial VO Digital Application Output Modbus Serial Application Connected to the Network If you want to access the I O from a LAN connection you can install TruePort on the PC running the Modbus serial application as described in TruePort I O on page 273 and connect to the IOLAN over the network Um 7 Power IOLAN E y 2 VO Digital Output PC running a Modbus Serial Application 267 Modbus VO Access Modbus TCP Application If you have a Modbus RTU or Modbus ASCII program you can access the I O by connecting to the IOLAN over the network I e BE ower IOLAN See H EK PC running a Modbus RTU or ASCII Application Modbus VO Access The section defines the function codes and registers you will need to access the I O through Modbus TCP Modbus serial or Modbus serial TruePort VO Digital
123. D signal enable when host this option to make the DCD signal active only during active communication connection Default Disabled established Additional modem You can specify additional virtual modem commands that will affect how initialization virtual modem starts The following commands are supported ATQn ATVn ATEn ATH ATA ATIO ATI3 ATSO AT amp Z1 AT amp Sn AT amp Rn AT amp Cn AT amp F ATS2 ATS12 ATO ATD with no phone number and ATDSI See Appendix C Virtual Modem AT Commands on page 349 for a more detailed explanation of the support initialization commands Enable Message of When enabled displays the Message of the Day MOTD when a successful theDay MOTD virtual modem connection is made Default Disabled Enable TCP Enables a per connection TCP keepalive feature After the configured number Keepalive of seconds the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized This parameter needs to be used in conjunction with Monitor Connection Status Interval parameter found in the Serial Advanced Advanced Settings tab The interval specifies the inactivity period before testing the connection Default Disabled AT Command The amount of time in milliseconds before an AT response is sent to the Response Delay requesting device Default 250 ms IOLAN SDS SCS STS User s Guide Version 3 6
124. Default Disabled When your modem application provides a phone number in an AT command string you can map that phone number to the destination host See Phone Number to Host Mapping on page 157 for information about the window that appears when you click this button When enabled the connection success failure indication strings are sent to the connected device otherwise these indications are suppressed This option also determines the format of the connection status results that are generated by the virtual modem Default Enabled When enabled the connection status is sent by text strings to the connected device Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Success String String that is sent to the serial device when a connection succeeds Default CONNECT lt speed gt for example CONNECT 9600 Failure String String that is sent to the serial device when a connection fails Default NO CARRIER Numeric Codes When enabled the connection status is sent to the connected device using the following numeric codes 0 OK 1 CONNECTED 2 RING 3 NO CARRIER 4 ERROR 6 ITERFACE DOWN 7 CONNECTION REFUSED 8 NO LISTNER Default Enabled Advanced Tab Field Descriptions p General Advanced Hardware Email Alert Packet Forwarding SSL TLS Advanced Virtual Modem Settings Modem Setup Echo characters in command mode Hardware Signal Assignment DTR Signal RTS Si
125. Defines the hosts by IP address that will receive trap messages generated by the IOLAN Up to four trap hosts can be defined Field Format IPv4 or IPv6 address Overview You can set standard and summer time daylight savings time in the IOLAN You can specify the summer time settings as absolute on a fixed date and time or relative on something like the third day of the third week at this time in June Functionality The IOLAN has a real time internal clock allowing the date and time to be set and viewed It will maintain the time over a short power outage and after reboots of the IOLAN If you do not set the time it will start the clock at the factory set time When you set the IOLAN s time the connection method and time zone settings can affect the actual internal clock time that is being set For example if you are connecting to the IOLAN through the DeviceManager and your PC s time zone is set to Pacific Standard Time GMT 8 00 and the IOLAN s time zone is set to Eastern Standard Time GMT 5 00 the IOLAN s time is actually three hours ahead of your PC s time Therefore if you set the IOLAN s time to 2 30 pm in the DeviceManager the IOLAN s actual internal clock time is 5 30 pm This is the only configuration method that interprets the time and converts it between time zones as necessary IOLAN SDS SCS STS User s Guide Version 3 6 Management Network Time Tab Field Descriptions You can configure your SNTP client
126. E ON EE OE EE 399 ed ee EE 399 ao I 400 Contacting Technical Support 401 Making a Technical Support Query eee 401 WhO TO OPM ae 401 Have Your Product Information Ready iss ee ee ee ee ee 401 Making a support query via the Perle web page 401 Repair E D 402 Feedback on this Manual iscccsiissssicsccntecendesssasenscascidscsstiisandsssssicdeansandcnn 402 23 Table of Contents 24 IOLAN SDS SCS STS User s Guide Version 3 6 Preface About This Book This guide provides the information you need to e configure the IOLAN incorporate the IOLAN into your production environment Intended Audience This guide is for administrators who will be configuring the IOLAN Some prerequisite knowledge is needed to understand the concepts and examples in this guide e Ifyou are using an external authentication application s working knowledge of the authentication application s e Knowledge of TFTP the transfer protocol the IOLAN uses Documentation The following documentation is included on the IOLAN installation CD IOLAN 1 Port Quick Start Guide IOLAN 2 4 Port Quick Start Guide IOLAN Rack Mount Quick Start Guide IOLAN VO Quick Start Guide IOLAN SDS SCS STS User s Guide IOLAN SDS SCS STS Command Line Reference Guide TruePort User s Guide
127. EE 43 Configuration Methods Overview 44 Configures an IP Address es dup ARR IEEE DERE ee ee 44 Requires a Configured IP Address sesse ee EE EER KEER RE RR RE EER na 44 Easy Contig Pie EE EE 45 A IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents AE EE OE N EE eee eee 46 o 0 46 Access Platforms ene iiie ioc N EN ee destin ePi xen 46 Unique Features sissies 46 Connecting to the IOLAN Using DeviceManager 46 Using DeviceManader ss ses ese dun RA EN we es N eo Rd ek An de N 48 bald En OE 00 S EI 49 OVOP VIC 49 Access Platforms sissies se es N EG sx NA ira dd end iue dd did die 49 Unique E 49 Connecting to the IOLAN Using WebManager 50 USING WebManager nungen 51 Command Line Interlace a ne 52 OMT WAG nee 52 Access Platforms osse sk N N va EE AE anna v d C dd 52 Unique Features a ee eN We ee ie RM QUON GUARD 52 Connecting to the IOLAN Using the CLI 52 Through the NOBNOIR ior toe Bene RENE Re Ke Se ee ee ge EE BEE 52 Throudh the Serial POU RE Ene ee une 53 Using ode N ER EE na aaa an man 53 JI REEDE EE EE AANA aaaai 53 1 7 ARE EE N N EE EEN 53 Access Platforms EE EE EE N Ee 53 Unique Features osse eds Kos EEN EN AA RR Ed
128. Error Warning Notice Info Debug Default Emergency 291 Management Management SNMP Overview If you are using SNMP to manage configure the IOLAN or to view statistics or traps you must set up a User in SNMP version 3 or a Community in SNMP version 1 2 to allow your SNMP manager to connect to the IOLAN this can be done in the DeviceManager WebManager CLI or Menu You must then load the perle sds MIB found on the CD ROM packaged with the IOLAN file into your SNMP manager before you connect to the IOLAN Field Descriptions SNMP Contact Information Contact Location 1 Communities Version 1 and Version 2 Community Intemet Address Permissions None v None v i None w None v Users Version 3 Read Write Read Only User User Security Level None Security Level None v Auth Algorithm Auth Algorithm Auth Password Auth Password Confirm Password Confirm Password Privacy Algorithm Privacy Algorithm Privacy Password Privacy Password a Confim Password 7 Confirm Password Traps Trap Internet Address L f Configure the following parameters Contact The name and contract information of the person who manages this SMNP node Location The physical location of the SNMP node Community The name of the group that devices and management stations running SNMP belong to 292 IOLAN SDS SCS STS User s Guide Version 3 6 Management
129. G IR MIN ENG The minimum converted value ever reached on this input since the IOLAN was re started or a manual clear was issued MB REG IR MAX ENG The maximum converted value ever reached on this input since the IOLAN was re started or a manual clear was issued MB REG IR CURR RAW The current raw value received from the Analog to Digital converter This is a hexadecimal value in the range of 0 OxFFFF MB REG IR MIN RAW The minimum raw value ever reached on this input since the IOLAN was re started or a manual clear was issued MB REG IR MAX RAW The maximum converted value ever reached on this input since the IOLAN was re started or a manual clear was issued MB REG IR ALARM LEVEL This gives the current alarm severity level for the corresponding Analog input Severity levels range from 0 not in alarm to 5 highest alarm severity 269 Modbus VO Access Serial Port Coil Register Descriptions This section contains descriptions of serial port coils This MB REG DI DSR The status of the DSR input signal 1 is Active 0 is Inactive If Invert Signal is configured on 0 is Active 1 is Inactive If input is Latched returns latched status MB_REG_DI_DSR_ALARM_STATE The alarm state of DSR input signal 1 is In Alarm state 0 is Not in Alarm state A write of any value clears the alarm state MB_REG_DI_DCD The status of DCD line is Active 0 is Inactive If Invert Signal is configured on 0 is Ac
130. GN Functionality There are two options for PPP user authentication 1 You can configure a specific user password and a specific remote user password per a serial port 2 You can create a secrets file with multiple users and their passwords that will globally authenticate users on all serial ports You can use configure PPP authentication in the configuration or in the secrets file but not both If you want to use a secrets file you must download the secrets file to the IOLAN for CHAP or PAP authentication the files must be downloaded to the IOLAN using the names chap secrets and pap secrets respectively The file can be downloaded to the IOLAN under the Custom Files option by selecting the Download Other File parameter In the Remote Access PPP profile you must also specify the Authentication option as PAP or CHAP on the Authentication tab but must leave the User Password Remote User and Remote Password fields blank An example of the CHAP secrets file follows Secrets for authentication using CHAP client server secret acceptable local IP addresses barney fred flintstone1234567890 192 168 43 1 fred barney wilma 192 168 43 2 An example of the PAP secret file follows Secrets for authentication using PAP client server secret acceptable local IP addresses barney i flintstonel234567890 fred Si wilma IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles General Tab Field Descriptions Gener
131. HCP BOOTP server during the IOLAN bootup This is particularly useful for configuring multiple IOLANs Not all configuration parameters are supported in the DHCP BOOTP configuration see DHCP BOOTP Parameters on page 56 for supported configuration parameters so you will need to use another configuration method such as DeviceManager WebManager or CLI to complete the configuration Unique Features DHCP BOOTP supports the following unique features e DHCP BOOTP can supply the IOLAN s IP address e The DHCP BOOTP server can configure certain server and user configuration parameters when the IOLAN is booted e The DHCP BOOTP server can auto configure the IOLAN with basic setup information IP address subnet prefix bits etc e The DHCP BOOTP server can download a new version of firmware when the IOLAN is rebooted e The DHCP BOOTP server can download a full configuration file when the IOLAN is rebooted Connecting to the IOLAN Using DHCP BOOTP The IOLAN will automatically request an IP address from the DCHP BOOTP server when the Obtain IP address automatically using DHCP BOOTP parameter is enabled To enable the Obtain IP address automatically using DHCP BOOTP parameter follow the directions in Using a Direct Serial Connection to Enable BOOTP DHCP on page 68 Using DHCP BOOTP To use DHCP BOOTP edit the bootp file with IOLAN configuration parameters You can use DHCP BOOTP to perform the following actions on a single or multipl
132. Host Name TCP Port Automatically When any data is received When lt hex value gt is received specified host using the specified protocol With this option user authentication will not be performed by the IOLAN Default Disabled Specify the protocol that will be used to connect to the specified host Data Options Telnet SSH Rlogin Default Telnet Click this button to define the settings for the protocol that will be used to connect the user to the specified host The name resolvable via DNS or IP address of the configured host the IOLAN will connect to The TCP Port that the IOLAN will use to connect to the host Default Telnet 23 SSH 22 Rlogin 513 If the serial port hardware parameters have been setup to monitor DSR or DCD the host session will be started once the signals are detected If no hardware signals are being monitored the IOLAN will initiate the session immediately after being powered up Default Enabled Initiates a connection to the specified host when any data is received on the serial port Default Disabled Initiates a connection to the specified host only when the specified character is received on the serial port Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Advanced Tab Field Descriptions General Advanced Hardware Email Alert Packet Forwarding Advanced Terminal Settings C Enable Message of the Day MOTD C Reset
133. IOLAN SDS SCS STS Users Guide Version 3 6 Part 5500161 36 September 2008 ce AN Copyright Statement This document must not be reproduced in any way whatsoever either printed or electronically without the consent of Perle Systems Limited 60 Renfrew Drive Markham ON Canada L3R OEI Perle reserves the right to make changes without further notice to any products to improve reliability function or design Perle the Perle logo and IOLAN are trademarks of Perle Systems Limited Microsoft Windows 98 Windows NT Windows 2000 Windows Server 2003 Windows XP and Internet Explorer are trademarks of Microsoft Corporation Netscape is a trademark of Netscape Communications Corporation Mozilla Firefox is a trademark of the Mozilla Foundation Solaris is a registered trademark of Sun Microsystems Inc in the USA and other countries Perle Systems Limited 2005 2008 FCC Note The IOLAN Device Server has been found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions in this Guide may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cau
134. IOLAN at another time by selecting Tools Reset Reboot IOLAN e In WebManager under the Administration option select Update Firmware Either browse to the firmware file and then click the Upload button or configure the TFTP server and click the Upload button Note If you use the TFTP option the specified TFTP server must be on the same subnet as the IOLAN Upgrading the firmware does not affect the IOLAN s configuration file or downloaded custom files Calibrating I O All I O channels are factory calibrated and should not need recalibration during initial use However should calibration be required you can recalibrate in DeviceManager or WebManager In DeviceManager you calibrate the I O channel s by selecting Tools I O Channels Calibrate In WebManager you calibrate the I O channel s by selecting VO Channels Calibrate Calibrating Analog Input To calibrate an Analog input channel read the section that applies to the type of input you are calibrating Note that calibration will be done for the active channel configuration for example if Channel Al is set to voltage you cannot calibrate it for current The voltage range configured for this channel will also dictate what is being calibrated For example if this channel is configured for a range of 10V calibrating this channel will calibrate all channels which are configured for 10V During the calibration process you will be asked to apply the minimum and maximum configu
135. L TLS Version Any SSL TLS Type Client C Validate Peer Certificate SSL Certificate Passphrase he v Configure the following parameters SSL TLS Version SSL TLS Type Specify whether you want to use e Any The IOLAN will try a TLSv1 connection first If that fails it will try an SSLv3 connection If that fails it will try an SSLv2 connection e TLSvi tThe connection will use only TLSv1 e SSLv3 The connection will use only SSLv3 Default Any Specify whether the IOLAN serial port will act as an SSL TLS client or server Default Client Cipher Suite Button Click this button to specify SSL TLS connection ciphers Validate Peer Certificate Validation Criteria Button SSL Certificate Passphrase Enable this option when you want the Validation Criteria to match the Peer Certificate for authentication to pass If you enable this option you need to download an SSL TLS certificate authority CA list file to the IOLAN Default Disabled Click this button to create peer certificate validation criteria that must be met for a valid SSL TLS connection This is the SSL TLS passphrase used to generate an encrypted RSA DSA private key This private key and passphrase are required for both HTTPS and SSL TLS connections unless an unencrpyted private key was generated then the SSL passphrase is not required Make sure that you download the SSL private key and certificate if you are using the secure HTTP opt
136. LAN and the Default User s parameters for any parameters that have not been set by either RADIUS or the user s local configuration Supported RADIUS Parameters This section describes the attributes which will be accepted by the IOLAN from a RADIUS server in response to an authentication request Type Name Description 1 User Name The name of the user to be authenticated 2 User Password The password of the user to be authenticated IOLAN SDS SCS STS User s Guide Version 3 6 335 RADIUS Type Name Description 6 Service Type 7 Framed Protocol 8 Framed IP Address 9 Framed IP Netmask 12 Framed MTU 13 Framed Compression 14 Login Host 15 Login Service Indicates the service to use to connect the user to the IOLAN A value of 6 indicates administrative access to the IOLAN Supported values are e 1 Login e 3 Callback Login Equivalent to the IOLAN User Service set by Type 15 Login Service 2 Framed 4 Callback Framed Equivalent to the IOLAN User Service set by Type 7 Framed Protocol 7 NAS prompt 9 Callback NAS prompt Equivalent to IOLAN User Service DSLogin 6 Administrative User 11 Callback Administrative User Equivalent to IOLAN User Service DSLogin and the User gets Admin privileges The link layer protocol to be used by this user Determines the User Service when Service Type is set to Framed or Callback Framed Supported values are e 1 PPP e 2 SLIP The
137. LAN closes a connection due to inactivity The default value is 0 zero meaning that the Idle Timer will not expire the connection is open permanently The User Idle Timeout will override all other Serial Port Idle Timeout parameters Range 0 4294967 Default 0 197 Adding Editing Users Session Timeout Enable Callback Phone Number Language Hotkey Prefix The amount of time in seconds before the IOLAN forcibly closes a user s session connection The default value is 0 zero meaning that the session timer will not expire the session is open permanently or until the user logs out The User Session Timeout will override all other Serial Port Session Timeout parameters Range 0 4294967 Default 0 When enabled enter a phone number for the IOLAN to call the user back the Enable Callback parameter is unrelated to the Serial Port Remote Access PPP profile Dial parameter Note the IOLAN will allow callback only when a user is authenticated If the protocol over the link does not provide authentication there will be no callback Therefore when the Serial Port profile is set to Remote Access PPP you must use either PAP or CHAP because these protocols provide authentication The IOLAN supports another type of callback Roaming Callback which is configurable when the Serial Port profile is set to Remote Access PPP Default Disabled The phone number the IOLAN will dial to callback the user you must h
138. LAN via the internet can now access it via its fully qualified host name For example telnet yourcompanySCS DynDNS org Field Descriptions Host Table Route List DNS WINS RIP Dynamic DNS IPv6 Tunnels C Enable Dynamic DNS for the system Account Settings Configure the appropriate parameters Enable Dynamic Enables disables the dynamic DNS feature When Dynamic DNS is enabled DNS for the system the IOLAN will automatically update its IP address with DynDNS org if it changes Default Disabled Host Specify the registered hostname with DynDNS org that will be updated with the IOLAN s IP address should it change Put in the full name for example mydeviceserver dyndns org 95 Advanced 96 User Name Specify the user name used to access the account set up on the DynDNS org server Password Specify the password used to access the account set up on the DynDNS org server Account Settings Click this button to configure the Dynamic DNS DynDNS org account Button information Account Settings Enter the information about your DynDNS com account so the IOLAN can communicate IP address updates These settings are global and apply to all Dynamic DNS settings Dynamic DNS Account Settings These Dynamic DNS Account settings are global and ay apply to all interfaces System Type xj Wildcard Enable E Connection Method HTTP v HTTPS Configuration Configure the appropriate parameters System
139. LDAP host If you use a host name that host must either have been defined in the IOLAN s Host Table before the last reboot or be resolved by DNS If you are using TLS you must enter the same string you used to create the LDAP certificate that resides on your LDAP server Port The port that the LDAP host listens to for authentication requests Default 389 Base The domain component dc that is the starting point for the search for user authentication Enable TLS Enables disables the Transport Layer Security TLS with the LDAP host Default Disabled TLS Port Specify the port number that LDAP will use for TLS Default 636 209 Authentication TACACS 210 Overview TACACS is an authentication method that the IOLAN supports that can send back User information see Appendix TACACS on page 342 for more information on the User parameters that can be sent back by TACACS 4 Field Descriptions TACACS Settings Authentication Authorization Primary Host Port Secret C Enable Authorization Accounting C Enable Accounting Configure the following parameters Authentication Authorization Primary Host Authentication Authorization Secondary Host Authentication Authorization Port Authentication Authorization Secret Enable Authorization Enable Accounting Accounting Primary Host The primary TACACS host that is used for authentication Default None The secondary TAC
140. M redirector feature Default Disabled Enable SSL Enables disables SSL encryption for the I O data between the IOLAN and the Encryption TruePort host Default Disabled Listen TCP Port The TCP port that the IOLAN will listen to for I O channel data requests from TruePort Default 33816 Allow I O Access Allows serial application access to the I O over the network using the TruePort via API through COM redirector feature via a custom application using the Perle API TruePort Default Permanently enabled when Enable I O Access via TruePort is enabled See Modbus I O Access on page 268 for function codes and I O coil registration descriptions and Accessing I O Data Via TruePort on page 275 for the Perle API Advanced Slave Modbus Settings The parameters in this window configure global Modbus gateway settings that apply to all serial ports configured first as the Modbus Gateway profile and then as a Modbus Slave Wil Advanced Slave Settings A These settings are global and apply to all serial ports configured as a Modbus Slave Gateway Slave Gateway Settings TCP UDP Port aa Next Request Delay 50 milliseconds C Enable Serial Modbus Broadcasts Request Queuing UID Address Mode Embedded Remapped C Enable SSL TLS using global settings Security SSL TLS Configure the following parameters TCP UDP Port The network port number that the Slave Gateway will listen on for both TCP and UDP messages Default 50
141. MRU parameter specifies the maximum size of PPP packets that the IOLAN s port will accept If your user is authenticated by the IOLAN the MRU value will be overridden if you have set a MTU value for the user If your user is authenticated by RADIUS and the RADIUS parameter Framed MTU is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Range 64 1500 bytes Default 1500 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Configure Reguest Timeout Configure Request Retries Terminate Request Timeout Terminate Request Retries Configure NAK Retries Enable Address Control Compression Enable Protocol Compression Enable VJ Compression Enable Magic Negotiation Idle Timeout Direct Connect The maximum time in seconds that LCP Link Control Protocol will wait before it considers a configure request packet to have been lost Range 1 255 Default 3 seconds The maximum number of times a configure request packet will be re sent before the link is terminated Range 0 255 Default 10 seconds The maximum time in seconds that LCP Link Control Protocol will wait before it considers a terminate request packet to have been lost Range 1 255 Default 3 seconds The maximum number of times a terminate request packet will be re sent before the link is terminated Range 0 255 Default 2 seconds The ma
142. Management Plug Settings Field Descriptions 169 Remote Access PPP Profile cccccccceeeeeeeeeeeeeeeeneeeeeeeeeeeeeeeeeeeeees 170 pti 170 EWERT ER oneri N EO EE OE 170 General Tab Field Descriptions iese RE EE nee 171 Authentication Tab Field Descriptions ee nn gt 173 Dynamic DNS Field Descriptions ese ee ee RR ee nn 175 Advanced Tab Field Descrptons iese ee RA Re 176 Remote Access SLIP Profile ass 179 1 EE N EE EE EE EN EE 179 General Tab Field Descriptions iese ee ee Re ee 179 Advanced Tab Field Descriptions ee RA Re 180 Custom Application Profile see ee RR RR RR RR RR RR RR RR RE RE RR RR Re Gee ee Gee ee 182 BL EE EE RE N EE N EE 182 F netionality an EN OE einen 182 General Tab Field DescriptiON ee ee ee ee ee ee ee ee 182 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Port BUIGING an 183 OVER eet 183 Punctionality OE ER N egkgeb 183 Local Port BUIG NG T 183 Remote Port Butters aaa an ed se N AN ee ed ee Ee Ee 184 Field Deli ONS iss RES EK ie Ee ee be ee ee EER GEKEER EE 184 Advaneed 186 Advanced Serial Settings Tab eese 186 OPTI t 186 Se Bee ee 186 Modems Tab ask Re Re ES EER RE aaa 188 ua tdi nt e EE 188 Functionally EO N EE EE EE daet 188 Adding Editing a Modem esse ee Re ee 188 TruePort Baud Rate Tab osse eise
143. Method Shared Secret Secret PARAR Local Device IDLAN Left O Right Local Remote IPAddress defaultroute IP Address 199 24 23 88 External IP 196 15 23 56 External IP Address Address NextHop 172 16 45 99 Next Hop 0 0 0 0 Host Network 172 16 45 23 Host Network 192 168 45 87 Address Address IPv4 Subnet 255 255 i IPv4 Subnet 255 255 255 255 Mask Mask IPv6 Subnet IPv6 Subnet Bits Bits Boot Action Start Cancel defaultroute is entered for the Local IP Address because the IP address is DHCP assigned and is therefore subject to change 331 Configuring a Virtual Private Network 2 The following window configures the Right IOLAN VPN Gateway IPsec Tunnel IPsec Tunnel Name Right Authentication Method Shared Secret Secret Local Device IDLAN O Lett Right Local IP Address defaultroute ExtemallP 193242388 Address NextHop 192 168 45 99 Host Network 192 18 45 87 Address IPv4 Subnet 255 255 255 255 Mask IPv6 Subnet Bits Remote IP Address any External IP Address Next Hop 0 0 0 0 Host Network 172 16 45 23 Address IPv4 Subnet 255 255 255 255 Mask 8 7 NA T IPv6 Subnet Bits Boot Action defaultroute is entered for the Local IP Address because the IP address is DHCP assigned and is therefore subject to change sany is entered for the Remote IP Address to indicate t
144. On Button Turns all the RPS plugs on Off Button Turns all the RPS plugs off Cycle Button Turns all the RPS plugs off and then on Reset to Default Resets all the RPS plugs to the default state as configured in the Power State Button Management profile settings Plug Control Button Displays a window that allows you to manage the individual plugs on the RPS IOLAN SDS SCS STS User s Guide Version 3 6 303 304 RPS Control Plug Control Overview When you click the Plug Control button you can power on off individual plugs Field Descriptions Power Plug Control Serial Port 1 Model My Power Bar Name RPS820 Version v1 43s RPS Plug Plug Name Status on of oe The following buttons are available On Button Turns the selected plug on Off Button Turns the selected plug off Cycle Button Turns the selected plug off and then on OK Button Closes the window IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Power Control Serial Port Power Control Overview The Serial Port Power Control window allows you to manage the power plugs that have been associated with the serial devices connected to the IOLAN Field Descriptions Serial Port Device Power Control Manage the serial port device that is being powered by a Remote Power Switch Serial Port Serial Port Name RPS ES E Plugs n Off Cycle The following buttons are available On Button Turns the selected plu
145. Output Function Codes The following function codes are supported by the IOLAN 01 read coils 03 read multiple holding registers 04 read input registers 05 write coil 06 write single register 08 diagnostics echo the request 15 force multiple coils 16 write multiple registers There are four Modbus data models Discrete Input Not used Coils Digital Input DD Alarm state for DI Digital Output DO All coils are Boolean values and are 1 byte Input Registers IR Analog Input AD Alarm state for AI All Input Registers are 2 bytes long Holding Registers Status R Control value R W or W Holding Registers with ENG registers are 4 bytes long all other Holding Registers are 2 bytes long All coil register values are in decimal 268 IOLAN SDS SCS STS User s Guide Version 3 6 Modbus VO Access VO Coil Register Descriptions This section contains descriptions of UO coils MB REG DI SENSOR Status of Digital input 1 is Active 0 is Inactive If Invert Signal is configured on 0 is Active is Inactive If input is Latched returns latched status MB REG DI SENSOR ALARM STATE Indication if input is in alarm state 1 is In Alarm state 0 is Not in Alarm state A write of any value clears the alarm state MB REG DO SENSOR Status of Digital output 1 is Active 0 is Inactive If Invert Signal is configured on 0 is Active is Inactive This section contains descriptions of I O hol
146. P Settings and Advanced Remember that in the WebManager it is necessary to press the Apply button to save your changes Configuration Methods 51 Command Line Interface Command Line Interface Overview The Command Line Interface CLI is a command line option for IOLAN configuration management See the Command Line Interface Reference Guide for a full breakdown of all the CLI commands and their functionality Access Platforms The CLI is accessed by any application that supports a Telnet or SSH session to the IOLAN s IP address such as Putty SecureCRT or from a command prompt You can also access the CLI from a dumb terminal or PC connected to a serial port Unique Features The CLI supports the following unique features You can access the IOLAN from any application that supports Telnet or SSH Ability to clear the ARP table cache For existing IOLAN customers the native IOLAN CLI to be used by entering the iolan command See your IO AN User s Guide for information on using the IOLAN CLI Connecting to the IOLAN Using the CLI There are two ways you can access the IOLAN through the network Ethernet connection or through the serial connection If you are accessing the IOLAN through the network the IOLAN must already have a known IP address configured see Using a Direct Serial Connection to Specify an IP Address on page 67 getting started for information on configuring an IP address 52 Through the Netw
147. P Entry 2 All UDP data received from hosts that have an IP address that falls within the range of 172 16 1 20 to 172 16 1 50 and Port 33010 will be sent to the serial device The IOLAN will not send any data received on its serial port IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles e UDP Entry 3 All hosts that have an IP Address that falls within the range of 172 16 1 75 to 172 16 1 80 and who listen to Port 33009 will receive UDP data from the serial device The IOLAN will listen for messages on the port value configured in the Listen for connections on UDP port parameter No UDP data will be sent to the serial device e UDP Entry 4 This entry is disabled since Direction is set to Disabled General Tab Field Descriptions General Hardware Email Alert Packet Forwarding UDP Socket Settings Listen for connections on UDP port 10001 Host Range EE 1 Both x 2 Dsabed vw 3 Disabled m 4 Disabled v Start IP Address End IP Address UDP Port 0 0 0 0 Auto Leam 0 0 0 0 0 0 0 0 0 0 0 0 Configure the following parameters Listen for connections on UDP port Direction Start IP Address End IP Address The IOLAN will listen for UDP packets on the specified port Default 1000 lt port number gt for example 10001 for serial port 1 The direction in which information is received or relayed e Disabled UDP service not enabled LAN to Serial UDP Port can be set
148. P address in the range of 169 254 0 1 169 254 255 255 this IP address is only assigned for the duration of the DeviceManager IOLAN connection Click the Assign IP button Double click the IOLAN in the IOLAN List If this is the first time you are accessing the IOLAN type in the factory default Admin password superuser and click OK The DeviceManager will display a window indicating that it is trying to authenticate and connect you on the IOLAN If the authentication and connection are successful the Server Info window is displayed You are now ready to configure the IOLAN If authentication was unsuccessful try to connect to the IOLAN again you probably mistyped the password for the Admin user For more information about managing the IOLAN see Configuration Files on page 79 Using DeviceManager and WebManager 77 Using DeviceManager to Connect to the IOLAN Adding Deleting Manual IOLANs To permanently add delete the IOLAN to from the IOLAN List click the Add button The following window is displayed Add IOLAN Manually add IOLAN to the list of available devices IP Address Close To permanently add the IOLAN to the IOLAN list click the Add button and type in the IPv4 or IPv6 address of the IOLAN To permanently delete the IOLAN from the IOLAN list select the IOLAN s IP address and click the Delete button Logging in to the IOLAN 78 To log in to the IOLAN double click on the IOLAN in the Device Server Lis
149. Province CO Locality C Organization C Organization Unit C Common Name O Emai Configure the following parameters Country State Province Locality Organization Organization Unit Common Name Email A country code for example US This field is case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Two characters asterisk works as a wildcard An entry for the state province for example IL This field is case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Maximum 128 characters asterisk works as a wildcard An entry for the location for example Chicago This field is case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Maximum 128 characters asterisk works as a wildcard An entry for the organization for example Accounting This field is case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Maximum 64 characters asterisk works as a wildcard An entry for the unit in the organization for example Payroll This field is case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Maximum 64 characters asterisk works as a wildcard An entry for common name for example the host name or fully qualified
150. S CBC SHA SSLv3 Kx DH 512 Au DSS Enc DES 40 Mac SHA1 EXP DES CBC SHA SSLv3 Kx RSA 512 Au RSA Enc DES 40 Mac SHA1 EXP RC2 CBC MD5 SSLv3 Kx RSA 512 Au RSA Enc RC2 40 Mac MD5 ADH DES CBC3 SHA SSLv3 Kx DH Au None Enc 3DES 168 Mac SHA1 ADH DES CBC SHA SSLv3 Kx DH Au None Enc DES 56 Mac SHA1 EXP ADH DES CBC SHA SSLv3 Kx DH 512 Au None Enc DES 40 Mac SHA1 ADH RC4 MD5 SSLv3 Kx DH Au None Enc RC4 128 MaczMD5 EXP ADH RC4 MD5 SSLv3 Kx DH 512 Au None Enc RC4 40 Mac MD5 EXP RC2 CBC MD5 SSLv2 Kx RSA 512 Au RSA Enc RC2 40 Mac MD5 EXP RC4 MD5 SSLv3 Kx RSA 512 Au RSA Enc RC4 40 Mac MD5 EXP RC4 MD5 SSLv2 Kx RSA 512 Au RSA Enc RC4 40 Mac MD5 348 IOLAN SDS SCS STS User s Guide Version 3 6 Virtual Modem AT Commands Virtual Modem Initialization Commands You can initialize the modem connection using any of the following commands Command ATQn Description Quiet mode Determines if result codes will be sent to the connected terminal Basic results codes are OK CONNECT RING NO CARRIER and ERROR Setting quiet mode also suppresses the RING message for incoming calls Options n 0 no result codes will be sent n 1 result codes will be sent default ATVn ATEn Verbose mode Determines if result codes are displayed as text or numeric values Echo mode Determines whether characters sent from the serial device will be echoed back by the IOLAN when VModem is in command mode n 0 display as numeric values
151. S STS User s Guide Version 3 6 IOLAN Interface When you select server the following fields are not available on the Server Configuration menu Administrator Name IP address Subnet mask Ethernet address Language Identification Lock Password limit CR to initiate SNAP encoding Boot host Boot file Init file MOTD file Domain name Name server WINS server SERVER CONFIGURATION wchiewsds2 1 172 16 22 7 1 255 255 0 0 00 80 d4 88 88 88 English Disabled 3 N A N A REMOTE ADMIN Debug mode N A Ethernet speed AUTO 1 Boot diagnostics N A N A e Debug mode e CR to initiate e SNAP encoding e Boot diagnostics e NS Port A new parameter was added Interface to the to Port Setup Menu to specify whether you are setting up the serial line as a EIA 232 or EIA 422 line Configuration Methods 63 IOLAN Interface 64 IOLAN SDS SCS STS User s Guide Version 3 6 Getting Started Introduction There are several different configuration methods available to configure the IOLAN see Chapter 3 Configuration Methods on page 43 for more information This chapter describes the three main minimal configuration requirements for the IOLAN through either Easy Config Wizard cannot configure users using this method DeviceManager or WebManager 1 Setting up the network This minimally consists of configuring an IP address or e
152. SCS STS User s Guide Version 3 6 IP Settings Default Gateway Specify the gateway IP address that will provide general access beyond the local network Field Format IPv4 address Default Gateway When DHCP BOOTP is enabled you can enable this option to have the Obtain IOLAN receive the Default Gateway IP address from the DHCP BOOTP Automatically server Default Enabled DNS Server Specify the IP address of a DNS host in your network for host name resolution Field Format IPv4 or IPv6 address DNS Server Obtain When DHCP BOOTP is enabled you can enable this option to have the Automatically IOLAN receive the DNS IP address from the DHCP BOOTP server Default Enabled WINS Server Specify the IP address of a WINS Windows Internet Naming Service host in your network for host resolution Field Format IPv4 address WINS Server When DHCP BOOTP is enabled you can enable this option to have the Obtain IOLAN receive the WINS IP address from the DHCP BOOTP server Automatically Default Enabled IPv6 Settings Overview Configure IPv6 settings when the IOLAN resides in an IPv6 network Field Descriptions IPv4 Settings IPv6 Settings Advanced IPv6 Configuration Ethernet Interface Settings Interface 1 Interface 2 Obtain IPv6 Address es using v Obtain IPv6 Address es using 9 IPvB Autoconfiguration IPvE Autoconfiguration DHCPVE DHCPv6 Custom IPv6 Address List Custom IPv6 Address List Add Add
153. Type Specify how your account IP address schema was set up with DynDNS org Refer to www DynDNS org for information about this parameter Data Options Dynamic Static Custom Default Dynamic Wildcard Adds an alias to yourcompanySCS dyndns org pointing to the same IP address as entered for yourcompanySCS dyndns org Connection Method Specify how the IOLAN is going to connect to the DynDNS org server Data Options e HTTP e HTTP through Port 8245 e HTTPS for a secure connection to the DynDNS server Default Disabled Cipher Suite Button Launches the cipher information window so you can specify the type of encryption that will be used for data that is transferred between the DynDNS org server and the IOLAN See Cipher Suite Field Descriptions on page 97 for more information IOLAN SDS SCS STS User s Guide Version 3 6 Advanced Validate Peer Enables disables peer validation between the DynDNS org server and the Certificate IOLAN This may be desirable since the DynDNS user name and password are sent from the IOLAN to the DynDNS server when the IP address needs to be updated and when an account refresh is performed Account refreshes are done periodically to ensure that DynDNS accounts do not auto delete should the IP address change infrequently This parameter will only take effect if HTTPS is selected as the connection method Default Disabled Validation Criteria Launches the peer validation criteria window so yo
154. UE Perle Line Access Port 3 Read Output VALUE Perle Line Access Port 3 Read Output Writ VALUE Perle Line Access Port 3 Read Output Input VALUE Perle Line Access Port 3 Read Output Input Writ OU PBUND HO OU PBUND HO 0 1 2 3 4 5 6 7 RADIUS and TACACS 341 TACACS VALUE Perle Line Access Port 4 Disabled 0 VALUE Perle Line Access Port 4 Read Writ d VALUE Perle Line Access Port 4 Read Input 2 VALUE Perle Line Access Port 4 Read Input Writ 3 VALUE Perle Line Access Port 4 Read Output 4 VALUE Perle Line Access Port 4 Read Output Writ 5 VALUE Perle Line Access Port 4 Read Output Input 6 VALUE Perle Line Access Port 4 Read Output Input Write 7 TACACS Although TACACS can be used strictly for external authentication it can also be used to configure Serial Port and User parameters Therefore when a user is being authenticated using TACACS H it is possible that the user s configuration is a compilation of the parameters passed back from the TACACS authentication server the User s IOLAN parameters if the user has also been set up as a local user in the IOLAN and the Default User s parameters for any parameters that have not been set by either TACACS or the User s local configuration User and Serial Port parameters can be passed to the IOLAN after authentication for users accessing the IOLAN from the serial side and users access
155. Users Clustering Slave List Searity Overview l Clustering The IP address that will be used to access all clustered serial ports will be that of the Master IOLAN in the cluster All other IOLANSs in the cluster will be referred to as Slave IOLANs Users can also access slave serial ports using EasyPort Web EasyPort Web is automatically launched when a user types in the IP address of the Master IOLAN in a web browser If the user has admin privileges the WebManager will first be displayed with an option to proceed to EasyPort Web The Clustering Slave List window displays the slave IOLAN entries and the number of ports on those slave IOLANs Clustering Slave List Name IP Address of Ports The following buttons are available Add Button Click this button to display a window to configure and add a new Slave IOLAN s configuration to the clustering group See Adding Clustering Slaves on page 282 for more information Delete Button Select a Slave IOLAN and click this button to delete it from the clustering group Advanced Button Select a Slave IOLAN and click this button to configure the individual Slave IOLAN s serial ports See Advanced Clustering Slave Options on page 283 for more information IOLAN SDS SCS STS User s Guide Version 3 6 281 Clustering Slave List Overview Adding Clustering Slaves When you add a clustering slave IOLAN entry you are adding the IOLAN that users will access through this
156. W MB REG HR DI CTS LATCH 5121 R W 272 IOLAN SDS SCS STS User s Guide Version 3 6 TruePort VO TruePort VO You can see a sample API I O over TruePort program called ioapiotp c on the CD ROM TruePort Modbus Combination If you have a Modbus serial application running on a PC that is connected to a network you can use TruePort as a virtual serial connection to communicate with the IOLAN over the network to access VO data You also have the option of enabling SSL as a security option to encrypt the data that is communicated between the IOLAN and the host machine SSL TLS must be configured in the Server settings and on the TruePort host VO Access Failsafe Timer UDP Choose the method in which the 1 0 interfaces are accessed via network by an external application Enable 1 0 Access via Modbus protocol Advanced Modbus Settings Available Network Access Allow Modbus TCP Application API v Allows Modbus RTU ASCII via TruePort Enable 1 0 Access via TruePort C Enable SSL Encryption Listen TCP Port 33816 Available Network Access Allow 1 0 Access via API through TruePort IE PC running a Modbus Serial Application VO Digital TruePort Output The host running TruePort must be in Modbus ASCH or Modbus RTU mode 273 TruePort VO API Over TruePort Only If you have a custom application that talks to a serial port you can use TruePort as a virtual serial po
157. WebManager supports the following unique features The ability to open a session to the IOLAN and download a saved configuration file to it The ability to download upload keys certificates to from the IOLAN The ability to download custom files such as new terminal definitions and a custom language files to the IOLAN From WebManager you can launch EasyPort Web which can be used to access clustered IOLANs access ports configured with the Console Server profile and launch an SSH or Telnet session to those console ports exercise power management capability when using the Perle Remote Power Switch Configuration Methods 49 WebManager Connecting to the IOLAN Using WebManager Before you can connect to the IOLAN using WebManager the IOLAN must already be configured with a known IP address see Setting Up the Network on page 66 to configure an IP address on your IOLAN To connect to the IOLAN through the WebManager 1 Open your web browser and type in the IP address of the IOLAN that you want to manage configure and press Enter for example http 123 123 123 123 2 If you successfully connect to the IOLAN a login screen will appear localhost IOLAN SDS2 Version 3 3 A1 Username admin Password Login Secure Login 3 If you are accessing the IOLAN in non secure HTTP just type in the Admin password the factory default password is superuser If the IOLAN has already been configure
158. a Wireless AirCard 881 You are using a Sierra Wireless AirCard 881 WAN card e Sony Ericsson PC300 You are using a Sony Ericsson PC300 wireless WAN card Sierra Wireless You are using a Sierra wireless WAN card Sony Ericsson You are using a Sony Ericsson wireless WAN card Use Standard Driver If the wireless WAN card you are using is not listed try the standard driver Use Custom Driver A custom driver downloaded from the Perle website Default Sierra Wireless AirCard 881 286 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring a Wireless WAN Card APN Specify the APN required by your internet provider to access their network See the internet provider documentation for more information User Name Specify the name required by your internet provider to access their network Password Specify the password required by your internet provider to access their network Phone Number Specify the phone number provided by your service provider to access their wireless network Field Format Probably similar to 99 1 Initialization String Specify the initialization string required by your internet service provider for your wireless WAN card When you click the Advanced button the Remote Access PPP profile is displayed The wireless WAN card uses PPP to communicate with its wireless provider See Remote Access PPP Profile on page 170 for information on how to configure PPP 287 Configuring a Wi
159. a connection to multiple clients Multiple Hosts Hosts When using the multiple hosts feature all TruePort clients must be running in Lite mode Default Disabled Define Additional Click this button to define the hosts that this serial port will connect to This Hosts Button button is also used to define the Primary Backup host functionality See Adding Editing Additional TruePort Hosts on page 122 for more information Listen for When enabled the IOLAN will wait for connections to be initiated by the Connection TruePort Client Default Disabled TCP Port The TCP Port that the IOLAN will use to communicate through to the TruePort client Default 10001 for serial port 1 then increments by one for each serial port Allow Multiple When this option is enabled multiple hosts can connect to a serial device that Hosts to Connect is connected to this serial port Note These multiple clients Hosts need to be running TruePort in Lite mode Default Disabled 121 Serial Port Profiles Adding Editing Additional TruePort Hosts You can define a list of hosts that the serial device will communicate to through TruePort Lite or a primary backup host Connect to Additional Hosts AN TruePort client must be configured to run Lite mode in order to support multiple connections Establish connections to all hosts on the list Host Add TCP Port Define a primary host and a backup host to connect to Configur
160. ab Field Descriptions on page 110 SSL TLS Configure SSL TLS encryption options for the serial port See SSL TLS Settings Tab Field Descriptions on page 113 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Hardware Tab Field Descriptions The Hardware tab configures all the serial port hardware connection information The window below shows an SDS1 model your Hardware tab might display a subset of the parameters described depending on the IOLAN model and supported hardware General Advanced Hardware Email Alert Packet Forwarding Serial Interface EA2322 v Speed 9600 D Data Bits v Parity None v Stop Bits v Flow Control v Enable Inbound Flow Control v Enable Outbound Flow Control C Monitor DSR C Monitor DCD Configure the following parameters Serial Interface Speed Data Bits Parity Stop Bits Specifies the type of serial line that is being used with the IOLAN Data Options EIA 232 EIA 422 or EIA 485 SCS STS models support only EIA 232 Default EIA 232 Specifies the baud rate of the serial line keep in mind that speed is affected by the length of the cable You can also specify a custom baud rate When you enter a custom baud rate the IOLAN will calculate the closest baud rate available to the hardware The exact baud rate calculated can be viewed in the Serial Ports statistics Range 50 230400 custom supports 50 1843200 Default 9600 Specifies the numb
161. able on the Access Menu Administrator ACCESS MENU REMOTE ADMIN TTY Name Access Authentication Mode UDP Retries Interval 1 abcd Local N A Raw N A N A 2 abcdef Local N A Raw N A N A e Authentication e UDP Retries Interval e When you select line Options the following fields are not available on the Options Menu Administrator OPTIONS MENU REMOTE ADMIN TTY Opt CR HEX Rlogin Telnet Keepalive 1 N A No N A N A No 2 N A No N A N A No e Opt HEX e Rlogin Telnet Configuration Methods 61 IOLAN Interface 62 When you select access Remote access sites the following fields are not available on the Remote Access Systems Screen Administrator REMOTE ACCESS SYSTEMS SCREEN REMOTE ADMIN Sitename 1 User name Password 1 Device type Service type N A Inactivity N A Phone number Login script N A Service type e Inactivity Login script When you select access Remote site devices the following fields are not available on the Remote Site Device Screen Administrator REMOTE SITE DEVICES SCREEN REMOTE ADMIN Type IP Addresses Src Addr N A Dst Addr N A Modem Config 1 Dial Comm N A Hang Up N A PPP Configuration Dialer Configuration Restart timer 3 Dial Timeout 45 Max Retries 10 Dial Retries 2 Inactivity 0 IP Address Src Address IP Address Det Address Modem Dial Comm Modem Hang Up IOLAN SDS SC
162. ackup host functionality When this option is enabled the input or output depending on how the channel or serial signal pin is configured will be associated with another local IOLAN I O channel or serial signal pin e When the channel is configured as digital input or when configuring an input serial signal pin the Output Channels parameter displays all the local digital output signals or relays that it is associated with e When the channel is configured as digital output you must select a local digital input channel or input serial signal pin on the IOLAN Note that the Failsafe Action is not compatible this option Default Disabled Enables a per connection TCP keepalive feature After the configured number of seconds the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized This parameter needs to be used in conjunction with Monitor Connection Status Interval parameter found in the Serial Advanced Advanced Settings tab The interval specifies the inactivity period before testing the connection Default Disabled 256 IOLAN SDS SCS STS User s Guide Version 3 6 Channels Adding Editing Additional Hosts You can define a list of hosts that the I O channel will communicate to or a primary backup host Connect to Additional Hosts Define additional hosts to connect to Establish connections to all h
163. address IPv6 address Default Disabled IPv6 Address Specify the complete IPv6 address Field Format IPv6 address IPv6 Address IPv6 Specify the network prefix bits for the IPv6 address Prefix Bits Range 0 128 Default 64 85 IP Settings Advanced 86 Overview The Advanced tab configures Active Standby SCS models only DNS update IPv6 Advertising Router settings and the Ethernet interface s hardware speed and duplex Configure the parameters in the Advanced tab only if you have already set up Dynamic DNS with DynDNS com you want to enable Active Standby SCS models only you want to specify the line speed and duplex e you want the IOLAN to act as an IPv6 Advertising Router Field Descriptions Advanced IP Settings Interface 1 Advanced IPv6 Settings C Register Address in DNS IPv4 Settings IPv6 Settings Advanced Interface 2 C Register Address in DNS EL C Enable Active Standby Interface 1 Interface 2 C Enable IPv6 Router Advertisement C Enable IPv6 Router Advertisement O aaaa 1 Hardware Speed and Duplex Settings EE Interface 1 Auto v Interface 2 uo M Configure the appropriate parameters Register Address in When this parameter is set the IOLAN will provide the DHCP DHCPv6 server DNS Domain Prefix Enable Active Standby with a fully qualified domain name FQDN so that the DHCP DHCPv6 server can update the network s DNS server with the newl
164. age current for Analog or Celsius Fahrenheit for Temperature until it is cleared 265 VO UDP 266 Digital Relay Section The Digital Relay Section of the UDP packet provides the status of Digital and Relay channels The data for the status of each channel is represented by 1 byte with each bit representing a channel least significant bit format Length Channel Digital Relay Channel Data 1 Byte one bit for each channel Enabled 2 Bytes 1 Byte Channel 4 Channel 3 Channel 2 Channel 1 Length The length of Digital Relay Section within the UDP packet this value will always be 2 Bytes Channel Enabled This is based on the configuration of the Digital Relay channels The Channel Enabled field is 1 byte in least significant bit order for each channel If the channel is enabled the bit is set to 1 If the channel is disabled the bit is set to 0 zero Channel Enabled 1 Byte one bit for each channel Channel 4 Channel 3 Channel 2 Channel 1 e Digital Relay Channel Data Each bit represents a channel status 1 for on or 0 for off unless the channel has been configured to be inverted in which case 0 is on and 1 if off Serial Pin Signal Section The Serial Pin Signal Section of the UDP packet provides the status of the serial pin signals from the IOLAN s serial port Each serial pin signal DSR DTR CTS etc is mapped to a b
165. al Authentication Advanced Hardware Email Alert Packet Forwarding PPP Settings IPv4 Local IP Address IPv4 Remote IP Address IPv4 Subnet Mask Negotiate IP Address Autom IPv6 Local Interface Identifier IPv6 Remote Interface Identifier e e e e atically IPv6 Global Network Prefix 0 IPv6 Prefix Bits 64 Configure the following parameters IPv4 Local IP Address IPv4 Remote IP Address IPv4 Subnet Mask Negotiate IP Address Automatically Dynamic DNS Button The IPV4 IP address of the IOLAN end of the PPP link For routing to work you must enter a local IP address Choose an address that is part of the same network or subnetwork as the remote end for example if the remote end is address 192 101 34 146 your local IP address can be 192 101 34 145 Do not use the IOLAN s main IP address in this field if you do so routing will not take place correctly The IPV4 IP address of the remote end of the PPP link Choose an address that is part of the same network or subnetwork as the IOLAN If you set the PPP parameter IP Address Negotiation to On the IOLAN will ignore the remote IP address value you enter here and will allow the remote end to specify its IP address If your user is authenticated by RADIUS and the RADIUS parameter Framed Address is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here The exception to this ru
166. al Port Profiles Idle Timeout Use this timer to close a connection because of inactivity When the Idle Timeout expires the IOLAN will end the connection Range 0 4294967 seconds about 49 days Default 0 seconds so the port will never timeout Session Timeout Use this timer to forcibly close the session connection when the Session Timeout expires Default 0 seconds so the port will never timeout Range 0 4294967 seconds about 49 days Dial Timeout The number of seconds the IOLAN will wait to establish a connection to a remote modem Range 1 99 Default 45 seconds Dial Retry The number of times the IOLAN will attempt to re establish a connection with a remote modem Range 0 99 Default 2 Dial In If the device is remote and will be dialing in via modem or ISDN TA enable this parameter Default Disabled Dial Out If you want the modem to dial a number when the serial port is started enable this parameter Default Disabled 138 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles User Service Settings Login Settings These settings apply to users who are accessing the network from a terminal connected to the IOLAN s serial port The Telnet Rlogin SSH SLIP PPP settings take effect when the connection method is defined in the user s profile or are passed to the IOLAN by a RADIUS or TACACS server when those authentication methods are being used Login Telnet Rlogn SSH SLIP
167. al Timeout 45 seconds Enable Address Control Compression Dial Retry 2 Enable Protocol Compression Enable VJ Compression Modem x C Enable Magic Negotiation ium Idle Timeout 0 seconds Configure the following parameters Routing Determines the routing mode RIP Routing Information Protocol used on the PPP interface This is the same function as the Framed Routing attribute for RADIUS authenticated users Data Options e None Disables RIP over the PPP interface e Send Sends RIP over the PPP interface e Listen Listens for RIP over the PPP interface e Send and Listen Sends RIP and listens for RIP over the PPP interface Default None ACCM Specifies the ACCM Asynchronous Control Character Map characters that should be escaped from the data stream Field Format This is entered as a 32 bit hexadecimal number with each bit specifying whether or not the corresponding character should be escaped The bits are specified as the most significant bit first and are numbered 31 0 Thus if bit 17 is set the 17th character should be escaped that is Ox11 XON The value 000a0000 will cause the control characters 0x11 XON and 0x13 XOFF to be escaped on the link thus allowing the use of XON XOFF software flow control If you have selected Soft Flow Control on the Serial Port you must enter a value of at least 000a0000 for the ACCM Default 00000000 which means no characters will be escaped MRU The Maximum Receive Unit
168. an authentication method that the IOLAN supports that can send back User information see RADIUS on page 335 for more information on the User parameters that can be sent back by RADIUS General Field Descriptions Radius Settings Authentication Hosts First Authentication Host v Authentication Port 1812 Accounting Enable Accounting RADIUS Configuration Retry Configure the following parameters First Authentication Name of the primary RADIUS authentication host Host Default None Second Name of the secondary RADIUS authentication host should the first RADIUS Authentication Host host fail to respond Default None Secret The secret password shared between the IOLAN and the RADIUS authentication host Authentication Port The port that the RADIUS host listens to for authentication requests Default 1812 Enable Accounting Enables disables RADIUS accounting Default Disabled First Accounting Name of the primary RADIUS accounting host Host Default None Second Accounting Name of the secondary RADIUS accounting host Host Default None Secret The secret password shared between the IOLAN and the RADIUS accounting host IOLAN SDS SCS STS User s Guide Version 3 6 Authentication Account Port Enable Accounting Authenticator Retry Timeout The port that the RADIUS host listens to for accounting requests Default 1813 Enables disables whether or not the IOLAN validates the
169. and provides a trigger mechanism that can be configured for each channel when no I O traffic management has occurred for the specified amount of time A Failsafe Action can be configured for each Digital Output channel each Serial Signal Output pin DTR and RTS and each Relay channel to either Activate or Deactivate the output The Failsafe Timer has a different function when I O Extension is enabled for Digital Output channels Relay channels or the Serial Signal Output pins DTR and RTS For I O Extension the Failsafe Timer provides a per channel or per serial signal output pin trigger mechanism that is activated when there are no TCP sessions for the specified amount of time Field Descriptions VO Access Failsafe Timer UDP C Enable 1 0 Failsafe Timer Configure the following parameters Enable I O Failsafe Enables disables the Failsafe Timer This is the global setting that must be Timer enabled to set the Failsafe Action on the channel for digital output and relay channels or output signal pins When this timer expires because of no I O activity within the specified time interval the Failsafe Action set for the channel determines the action on the output When the channel or serial signal pin is configured for I O extension the timer expires there are no TCP sessions for the specified time interval Default Disabled Timeout The number of seconds that must elapse before the channel serial signal pin Failsafe Action is tri
170. and that every character received from the device is immediately sent on the network Select this option for timing sensitive applications Default Enabled This option provides optimal network usage while ensuring that the application performance is not compromised Select this option when you want to minimize overall packet count such as when the connection is over a WAN Default Disabled This option detects the message packet or data blocking characteristics of the serial data and preserves it throughout the communication Select this option for message based applications or serial devices that are sensitive to inter character delays within these messages Default Disabled The minimum time in milliseconds between messages that must pass before the data is forwarded by the IOLAN Range 0 65535 Default 250 ms This option allows you to define the packet forwarding rules based on the packet definition or the frame definition Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Packet Definition Packet Size Idle Time Enable Trigger1 Character Enable Trigger2 Character Frame Definition SOF1 Character SOF2 Character Transmit SOF Character s When enabled this group of parameters allows you to set a variety of packet definition options The first criteria that is met causes the packet to be transmitted For example if you set a Force Transmit Timer of 1000 ms
171. and the remote serial port Although the port will still operate as a COM port control signals are ignored In this mode the serial communications parameters must be configured on the IOLAN See the TruePort User s Guide for more details about the TruePort client software Client Initiated Connection o e N Serial IOLAN SS Device es e Server Initiated Connection inati gt Serial Application with TruePort Client IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles General Tab Field Descriptions The TruePort General tab determines how the TruePort connection is initiated and then sets up the appropriate connection parameters General Advanced Hardware Email Alert Packet Forwarding SSL TLS TruePort Settings Connect to remote system Server Initisted Connection Host name None M TCP Port 10000 C Connect to Multiple Hosts Listen for connection Client Initisted Connection Configure the following parameters Connect to remote When enabled the IOLAN initiates communication to the TruePort client system Default Enabled Host Name The configured host that the IOLAN will connect to must be running TruePort Default None TCP Port The TCP Port that the IOLAN will use to communicate through to the TruePort client Default 10001 for serial port 1 then increments by one for each serial port Connect to When enabled the IOLAN will establish
172. anually create the IPv6 tunnel to the specified Remote Host through the specified Interface e G6tod When enabled the IOLAN will broadcast to the multicast address 192 88 99 1 through the specified Interface When the closest 6to4 router responds it will create the IPv6 tunnel encapsulating and decapsulating IPv6 traffic sent to and from the IOLAN Teredo When enabled the Teredo protocol encapsulates the IPv6 packet as an IPv4 UDP message allowing it to pass through most network address translator NAT boxes and create an IPv6 tunnel to the specified Remote Host a Teredo server through the specified Interface Default Manual The IPv4 host that can access the IPv6 network when the Mode is Manual The Teredo server when the Mode is Teredo Default None The interface that the IOLAN is going to use to access the Remote Host The list is comprised of the Ethernet interface s and serial ports configured for the Remote Access PPP or Remote Access SLIP profiles Default Ethernet 1 101 Advanced 102 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring Serial Ports Introduction The Serial section is used to configure the serial ports on your IOLAN The E AR Configuration following configuration windows are available SEN Network Sa Serial Serial Ports Configures the type of connection that the serial port is AE Serial Ports being used for This is accomplished by selecting a connec
173. arch will continue Default Disabled When enabled the Start of Frame character defines the first character of the frame any character s received before the Start of Frame character is ignored Range Hex 0 FF Default 0 When enabled creates a sequence of characters that must be received to create the start of the frame if the SOFI character is not immediately followed by the SOF2 character the IOLAN wats for another SOF1 character to start the SOFI SOF2 character sequence Range Hex 0 FF Default 0 When enabled the SOF1 or SOFI SOF2 characters will be transmitted with the frame If not enabled the SOF1 or SOF1 SOF2 characters will be stripped from the transmission Default Disabled 111 Serial Port Profiles 112 EOF1 Character EOF2 Character Trigger Forwarding Rule Specifies the End of Frame character which defines when the frame is ready to be transmitted The actual transmission of the frame is based on the Trigger Forwarding Rule Range Hex 0 FF Default 0 When enabled creates a sequence of characters that must be received to define the end of the frame if the EOF1 character is not immediately followed by the EOF character the IOLAN waits for another EOF character to start the EOFI EOF2 character sequence which defines when the frame is ready to be transmitted The actual transmission of the frame is based on the Trigger Forwarding Rule Range Hex 0 FF Default 0 Determines wha
174. as well as English If you download another language file this new language will replace the first language you downloaded You can revert to English at any time the English language is stored permanently in the IOLAN and is not overwritten by your new language Each user logged into the IOLAN can operate in either English or the downloaded language Loading a Supplied Language 316 This section describes how to download a language file using the CLI since it is the least intuitive method French and German language files are provided on the supplemental CD To load one of the supplied languages into the IOLAN so the Menu or CLI fields appear in another language do the following 1 Open the supplemental CD and identify the language file either Tolan ds French txt or Iolan ds German txt or supply one of your own translated files 2 Copy the language file to a host machine on the network place it in the main file system or on the main hard drive 3 Either use the TFTP defaults in the IOLAN or configure as necessary TFTP in the IOLAN 4 Inthe CLI of the IOLAN enter the host IP address and file name for example netload customlang 172 16 4 1 temp Iolan ds French txt The IOLAN will download the language file via TFTP In DeviceManager select Tools Advanced Custom Files and then select Download Custom Language File and browse to the language file In WebManager select Administration Custom Files and then specify the Custom
175. ase can be used to Provide authentication on the IOLAN prior to establishing a serial connection via PPP or SLIP e Authenticate users prior to providing access to a serially attached console port such as a Unix server or router IOLAN SDS SCS STS User s Guide Version 3 6 191 User Settings User Settings Overview The Users window allows you to add edit and delete users from the IOLAN Functionality The Users window displays the users who have been configured You can add users edit existing users or delete users from this window See Adding Editing Users on page 193 for information on the parameters available when adding or editing a user Users Name Level admin Admin Default Normal Add 192 IOLAN SDS SCS STS User s Guide Version 3 6 Adding Editing Users Adding Editing Users General Tab Overview The General tab configures the basic user information Functionality You must minimally provide a User Name and Level for a user Field Descriptions User Settings Em General Services Advanced Sessions Serial Port Access User Name Password Confirm Password Level Configure the following parameters User Name The name of the user Restrictions Do not use spaces Password The password the user will need to enter to login to the IOLAN Confirm Password Enter the user s password again to verify it is entered correctly 193 A
176. ation Info Download Button You navigate through the different configuration windows by selecting an option in the left hand navigation tree If double click on option that is next to a folder more navigation are displayed when you click on it J System Info HEY Network IP Settings Advanced 3 IP Settings Advanced System Name localhost The Network folder contains two configuration options IP Address and Advanced Notice that when the IP Address option is selected there are more navigation options in the form of the tabs IP Settings and Advanced When you have completed all your configuration changes click the Download Changes button to download the configuration to the IOLAN You must reboot the IOLAN to make those configuration changes take effect IOLAN SDS SCS STS User s Guide Version 3 6 WebManager WebManager Overview The WebManager is a web browser based method of configuring managing the IOLAN It follows the same design as the DeviceManager so it is easy to switch between the WebManager and DeviceManager when configuring your IOLAN See Chapter 5 Using DeviceManager and WebManager on page 73 for information on configuring managing the IOLAN with DeviceManager Access Platforms You can access the IOLAN through WebManager from any system that can run a web browser WebManager can be accessed by the admin user or any user who has Admin Level privileges Unique Features
177. ave set Enable Callback enabled Restrictions Enter the number without spaces You can specify whether a user will use English or Custom Language as the language that appears in the Menu CLI or WebManager The IOLAN supports one custom language that must be downloaded to the IOLAN Default English See Language Support on page 316 for more information about Custom Languages The prefix that a user types to control the current session Data Options e a number To switch from one session to another press a Ctrl a and then the required session number For example a 2 would switch you to session 2 Pressing a 0 will return you to the IOLAN Menu e Aan Display the next session The current session will remain active The lowest numbered active session will be displayed e a p Display the previous session The current session will remain active The highest numbered active session will be displayed e Aam To exit a session and return to the IOLAN You will be returned to the menu The session will be left running e Aal Lowercase L Locks the serial port until the user unlocks it The user is prompted for a password any password excluding spaces and the serial port is locked The user must retype the password to unlock the serial port Ar When you switch from a session back to the Menu the screen may not be redrawn correctly If this happens use this command to redraw it properly This is always Ctr
178. bled the remote VPN s public external IP Address address or FQDN Field Format IPv4 address IPv6 address FODN 224 IOLAN SDS SCS STS User s Guide Version 3 6 VPN Remote Next Hop The IP address of the router gateway that will forward data packets to the IOLAN if required The router gateway must reside on the same subnet at the remote VPN Field Format IPv4 or IPv6 address Remote The IP address of a specific host or the network address that the IOLAN will Host Network provide a VPN connection to If the IPsec tunnel is listening for connections Address Boot Action set to Add and the field value is left at 0 0 0 0 any VPN peer with a private remote network host that conforms to RFC 1918 10 0 0 0 8 172 16 0 0 12 192 168 0 0 16 will be allowed to use this tunnel if it successfully authenticates Field Format IPv4 or IPv6 address Remote IPv4 The subnet mask of the remote IPv4 network Keep the default value when you Subnet Mask are configuring a host to host VPN connection Default 255 255 255 255 Remote IPv6 Prefix The prefix bits of the remote IPv6 network Keep the default value when you Bits are configuring a host to host VPN connection Default 0 Boot Action Determines the state of the VPN network when the IOLAN is booted Data Options e Start Starts the VPN network initiating communication to the remote VPN e Add Adds the VPN network but doesn t initiate a connection to the remote VPN
179. bled field is 1 byte in least significant bit order for each channel If the channel is enabled the bit is set to 1 If the channel is disabled the bit is set to 0 zero Channel Enabled 1 Byte one bit for each channel AE a Channel 4 Channel 3 Channel 2 Channel 1 e Analog Channel Data Consists of Analog Channel Data for each enabled Analog channel on the IOLAN If an Analog channel is disabled there is no data for that channel Therefore the Analog Section will contain the Section Length value the Channel Enabled value and 18 bytes of VO data for each enabled Analog channel For example an IOLAN I O model with four Analog channels that has only three of those Analog channels enabled will contain 54 bytes of Analog Channel Data 18 bytes 3 Analog channels The following values make up the Analog Channel Data for each enabled Analog channel e curRawValue The current raw value received by the channel e minRawValue The minimum raw value received by the channel until it is cleared e maxRawValue The maximum raw value received from the channel until it is cleared e curEngValue The current raw value that has been converted to voltage current for Analog or Celsius Fahrenheit for Temperature e minEngValue The minimum raw value that has been converted to voltage current for Analog or Celsius Fahrenheit for Temperature until it is cleared e maxEngValue The maximum raw value that has been converted to volt
180. c 222 VPN 221 exceptions 228 L2TP IPsec 227 W WebManager overview 49 IOLAN SDS SCS STS User s Guide Version 3 6 407 Index W 408 IOLAN SDS SCS STS User s Guide Version 3 6
181. cate the remote device when PAP or CHAP is operating Field Format You can enter a maximum of 16 alphanumeric characters The timeout in minutes during which successful PAP or CHAP authentication must take place when PAP or CHAP are specified If the timer expires before the remote end has been authenticated successfully the link will be terminated Range 1 255 Default 1 minute IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles CHAP Challenge Interval Enable Roaming Callback The interval in minutes for which the IOLAN will issue a CHAP re challenge to the remote end During CHAP authentication an initial CHAP challenge takes place and is unrelated to CHAP re challenges The initial challenge takes place even if re challenges are disabled Some PPP client software does not work with CHAP re challenges so you might want to leave the parameter disabled in the IOLAN Range 0 255 Default 0 zero meaning CHAP re challenge is disabled A user can enter a telephone number that the IOLAN will use to callback him her This feature is particularly useful for a mobile user Roaming callback can only work when the User Enable Callback parameter is enabled Enable Roaming Callback therefore overrides fixed User Enable Callback To use Enable Roaming Callback the remote end must be a Microsoft Windows OS that supports Microsoft s Callback Control Protocol CBCP The user is allowed 30 seconds to enter a tel
182. ceManager In DeviceManager when you select File New the New Configuration window is displayed New Configuration Choose the IOLAN Model e on D5 T5 Osps OstTs Oscs Select the IOLAN model for which you want to create a new configuration file Any configuration file created in this manner can only be save locally To download a created configuration file you must first connect to the IOLAN import the created configuration file into DeviceManager this is not available in WebManager and then download the configuration file to the IOLAN and reboot it Using DeviceManager and WebManager 79 Managing the IOLAN Opening an Existing Configuration File If you select the File Open a browse window is opened so you can select the configuration file you want to edit IOLAN configuration files saved in the DeviceManager can be in the IOLAN native binary format dme or as a text file txt which can be edited with a text editor Either configuration version can be imported into the DeviceManager IOLAN configuration files saved from WebManager can also be opened into DeviceManager Importing an Existing Configuration File If you have a local saved configuration file that you want to download to the IOLAN you must first connect to the IOLAN that you want to download the configuration file to Once you have successfully logged into the IOLAN in DeviceManager select Tools Import Configuration from a File and in WebManage
183. ced in all of the commands Please refer to the documentation specific you the applicable mode for the list and addresses of all the registers Model Go to A4 A4 T4 Registers on page 270 T4 A4 T4 Registers on page 270 A4D2 A4D2 A4R2 Registers on page 271 A4R2 A4D2 A4R2 Registers on page 271 D4 D4 D2R2 Registers on page 272 D2 R2 D4 D2R2 Registers on page 272 Get Commands The following tables show the general structure to be used for Get commands Command Format Bytes of Bytes Value 1 1 Command Code e 0x01 Get coils Boolean register e 0x03 Get holding registers R W registers 0x04 Get input registers R only register 2 3 2 Starting register number see A4 T4 Registers on page 270 A4D2 A4R2 Registers on page 271 or D4 D2R2 Registers on page 272 for this value 4 5 2 Number of registers to read If this value is greater than 1 the response will contain the values of multiple consecutive registers Response Format Bytes of Bytes Value 1 1 Command that this is a response to If an error has been detected the command value will have the high bit set OR with 0x80 For example The command is 0x04 so the command field in the response would be 0x84 2 1 Length of data in bytes starting in next byte 3 n n Requested register values 276 IOLAN SDS SCS STS User s Guide Version 3 6 Accessing I O Data Via TruePort Example 1 Read the stat
184. chine to specify its IP address overriding the IP address negotiation value configured in the PPP settings e 255 255 255 255 When the User Service is SLIP the IOLAN will use the Remote IP Address set for the line no negotiation Default 255 255 255 254 If the remote user is on a subnet enter the network s subnet mask For example a subnet mask of 255 255 0 0 Used for User Service PPP sets the IPv6 address of the remote user Enter the address in IPv6 format Field Format The first 64 bits of the Interface Identifier must be zero therefore abcd abcd abcd abcd is the expected format Used for User Service PPP or SLIP specifies the maximum size of packets in bytes being transferred across the link On noisy links it might be preferable to fragment large packets being transferred over the link since there will a be quicker recovery from errors Data Options e PPP MTU will be the maximum size of packets that the IOLAN will negotiate for this port This value is negotiated between the two ends of the link e SLIP MTU will be the maximum size of packets being sent by the IOLAN The User MTU value will override the MTU MRU values set for a Serial Port Range PPP 64 1500 bytes SLIP 256 1006 bytes Default PPP is 1500 bytes SLIP is 256 bytes Determines the routing mode used for RIP packets on the PPP and SLIP interfaces Values are e None RIP packets are neither received nor sent by the IOLAN e Se
185. ck in automatically rebooting the IOLAN in the process If you want to complete the configuration using a direct connection see Command Line Interface on page 52 and or Menu on page 53 After you complete configuring the IOLAN unplug the IOLAN If this is a desktop model change the IOLAN DIP switch to Off Serial DIP switch in the up position and connect it to your serial device Plug the IOLAN back in automatically rebooting the IOLAN in the process Getting Started 67 Setting Up the Network Using a Direct Serial Connection to Enable BOOTP DHCP If you are using BOOTP you need to add an entry in the BOOTP server for the IOLAN that associates the MAC address found on the back of the IOLAN and the IP address that you want to assign to the IOLAN After you have made the MAC address IP address association for BOOTP use the following directions for BOOTP or DHCP You can connect to the IOLAN using a PC with a terminal emulation package such as HyperTerminal or a dumb terminal 1 Connect the IOLAN to your PC or dumb terminal Make sure the DIP switch is in Console mode desktop models this sets the IOLAN serial port to EIA 232 or that you are connected to the dedicated Console port rack mount models When connecting a terminal or PC directly without modems the EIA 232 signals need to be crossed over null modem cable See Appendix D E1A 232 Cabling Diagrams on page 356 for cabling diagrams 2 Using a PC emulation appl
186. cket Total Packet Length The total length of the UDP packet Analog Section The Analog Section of the UDP packet which contains data status of the Analog I O channels The Analog Channel Data subsection within the Analog Section will only exist if the channel s is enabled e Digital Relay Section The Digital Relay Section of the UDP packet which contains status of Digital and Relay I O channels The Channel Data subsection within the Digital Relay Section will always be present e Serial Pin Signal Section The Serial Pin Signal Section of the UDP packet which contains the status of the IOLAN s serial port s control signal pins The Serial Pin Signal Data subsection within the Serial Signal Pins Section will always be present IOLAN SDS SCS STS User s Guide Version 3 6 VO UDP Analog Section The Analog Section of the UDP packet is comprised of VO data for each enabled Analog channel Section Channel Analog Channel Data for each enabled channel Length Enabled 2 Bytes 1 Byte curRawValue minRawValue maxRaw Value curEng Value minEngValue maxEng Value 2 Bytes 2 Bytes 2 Bytes 4 Bytes 4 Bytes 4 Bytes e Section Length The total length of the Analog section this value will vary the field length is 2 Bytes This value will vary because it will contain one Analog Channel Data subsection 18 bytes for each Analog channel that is enabled e Channel Enabled The Channel Ena
187. closed Closing Serial Port Default Disabled Deny Multiple Allows only one network connection at a time per a serial port Application Network accessing a serial port device across a network with get a connection socket Connections refused until e All data from previous connections on that serial port has drained e There are no other connections e Uptoa 1 second interconnection poll timer has expired This also enables a per connection TCP keepalive feature After approximately 3 minutes of network connection idle time the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized by all peer network connections Applications using this feature need to be aware that there can be some considerable delay between a network disconnection and the port being available for the next connection attempt allowing any data sent on prior connections to be transmitted out of the serial port Application network retry logic needs to accommodate this feature Default Disabled 186 IOLAN SDS SCS STS User s Guide Version 3 6 Advanced Serial Port Menu String Session Escape String When a user connects to the IOLAN through the network the string used to access the Easy Port Access menu without disconnecting the network connection Data Options You can specify control unprintable codes by putting the decimal value in angle brack
188. ctionality required Easy Config is installed on a Windows based PC with local network access to the IOLAN DeviceManager Use this method when you can connect the IOLAN to the network and access the IOLAN from a Windows PC The DeviceManager is a Windows based application that can be used for IOLAN configuration and management The DeviceManager can be used to assign an IP address and perform the complete configuration and management of the IOLAN Direct Connection Use this method when you can connect to the IOLAN from a serial terminal or from a computer running terminal emulation software over a serial port Using this method you will need to configure and or manage the IOLAN using either the Menu or CLI DHCP BOOTP Use this method when you have a BOOTP or DHCP server running and you can connect the IOLAN to your network The IOLAN will automatically obtain an IP address from a local network DHCP BOOTP server when this service is enabled it is disabled by default You can also configure certain IOLAN parameters that will be passed from the DHCP BOOTP server to the IOLAN when it boots up Other configurators such as DeviceManager CLI or Menu can be used to set this option and obtain the initial IP address ARP Ping Use this method when you can connect the IOLAN to the network and want to assign a temporary IP address to the IOLAN by specifying an ARP entry from your PC and then pinging it IPv6 Network When the IOLAN is connected to
189. ctions for more specific information about the Modbus settings This section describes the high level steps required to configure the IOLAN as a Modbus Master or Slave Gateway Configuring a Master Gateway To configure a Master Gateway Modbus Master connected to the serial side of the IOLAN do the following 1 Set the serial port that is connected to the serial Modbus Master to the Modbus Gateway profile 2 In the Modbus Gateway profile on the General tab set the Mode to Modbus Master 3 Still on the General tab click the Destination Slave IP Mappings button to map the Modbus Slave s IP addresses and their UIDs that the serial Modbus Master will attempt to communicate with 4 For specialized configuration options select the Advanced tab and configure as required Configuring a Slave Gateway To configure a Slave Gateway Modbus Master resides on the TCP Ethernet network do the following 1 Set the serial port that is connected to the serial Modbus Slave s to the Modbus Gateway profile 2 In the Modbus Gateway profile on the General tab set the Mode to Modbus Slave 3 Still on the General tab specify the Modbus Slave UIDs that the TCP Modbus Master will attempt to communicate with 4 Still on the General tab click the Advanced Slave Settings button to configure global Slave Gateway settings 5 For specialized configuration options select the Advanced tab and configure as required IOLAN Device Server Use
190. d Hardware Email Alert Packet Forwarding Advanced SLIP Settings MTU 256 Routing None VJ Compression Dial Options Direct Connect Dial In Dial Out Dial In Out Dial Timeout Dial Retry Modem Phone 45 seconds Configure the following parameters MTU Routing VJ Compression Direct Connect The Maximum Transmission Unit MTU parameter restricts the size of individual SLIP packets being sent by the IOLAN Enter a value between 256 and 1006 bytes for example 512 The default value is 256 If your user is authenticated by the IOLAN this MTU value will be overridden when you have set a Framed MTU value for the user If your user is authenticated by RADIUS and the RADIUS parameter Framed MTU is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Default 256 Determines the routing mode RIP Routing Information Protocol used on the SLIP interface as one of the following options e None Disables RIP over the SLIP interface e Send Sends RIP over the SLIP interface e Listen Listens for RIP over the SLIP interface e Send and Listen Sends RIP and listens for RIP over the SLIP interface This is the same function as the Framed Routing attribute for RADIUS authenticated users Default None When enabled Van Jacobson compression is used on this link When enabled C SLIP or compressed SLIP is used When disabled
191. d the Decoder utility software is required to be installed on the NFS host for decrypting the data to a readable format The Decoder utility software can be found on the installation CD ROM and on the www perle com website Default Disabled When enabled buffered data is sent to the syslog host to be viewed on the host s monitor Default Disabled Enable disable time stamping of the serial port buffer data Default Disabled When enabled key strokes that are sent from the network host to the serial device on the IOLAN s serial port are buffered Default Disabled 185 Advanced Advanced Advanced Serial Settings Tab Overview Advanced serial port settings apply to all serial ports Field Descriptions Advanced Settings Modems TruePort Baud Rate Advanced Serial Settings 9 Settings apply to all serial ports Process Break Signals Flush Data Before Closing Serial Port Deny Multiple Network Connections Serial Port Menu String menu Session Escape String lt 026 gt s Power Management Menu String lt 016 gt Monitor Connection Status Interval 180 seconds Configure the following parameters Process Break Enables disables proprietary inband SSH break signal processing the Telnet Signals break signal and the out of band break signals for TruePort Default Disabled Flush Data Before When enabled deletes any pending outbound data when a port is
192. d for secure access mode HTTPS select the For a Secure Login Click Here link and then type in the Admin password 50 IOLAN SDS SCS STS User s Guide Version 3 6 WebManager Using WebManager After you have successfully logged into WebManager you will see the following Configuration Services C Network a Serial B Users gt C Security B Clustering C System Network Security Clustering System WebManager IP Settings Ethernet Settings Routing tables etc Serial Port Profile Serial Port Hardware setup Local user database Authentication SSH SSL TLS and IOLAN services Single view of multiple IOLANs System settings IOLAN management and Alerts Users Guide www perle com Logged in as admin Logout EasyPort Web System Name Tracys SDS2 Model IOLAN SDS2 Firmware Version 33 MAC Address 00 80 d4 06 00 02 IP Address 10 10 200 40 System Information You navigate through the different configuration windows by selecting an option in the left hand navigation tree When you click on an option that is under a folder more navigation options are displayed IP Settings n Advanced IP Settings System Name localhost Navigation Tabs The Network folder contains two configuration options IP Address and Advanced Notice that when the IP Address option is selected there are more navigation options in the form of the tabs I
193. d only when Enable Line Mode is enabled Default Disabled When enabled keyboard input is not sent to the remote host until Enter is pressed otherwise input is sent every time a key is pressed Default Disabled When enabled maps carriage returns CR to carriage return line feed CRLF Default Disabled Defines the interrupt character Typing the interrupt character interrupts the current process This value is in hexadecimal Default 3 ASCII value C Defines the quit character Typing the quit character closes and exits the current telnet session This value is in hexadecimal Default 1c ASCII value FS Defines the end of file character When Enable Line Mode is enabled entering the EOF character as the first character on a line sends the character to the remote host This value is in hexadecimal Default 4 ASCII value D Defines the erase character When Line Mode is Off typing the erase character erases one character This value is in hexadecimal Default 8 ASCII value H Defines the echo character When Line Mode is On typing the echo character echoes the text locally and sends only completed lines to the host This value is in hexadecimal Default 5 ASCII value E IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Escape Defines the escape character Returns you to the command line mode This value is in hexadecimal Default 1d ASCII value GS Rlogin Settings The
194. dding Editing Users Level The access that a user is allowed Data Options Admin The admin level user has total access to the IOLAN You can create more than one admin user account but we recommend that you only have one They can monitor and configure the IOLAN Users configured with this level can access the unit either via serial Terminal Profile connection or via a network originated Telnet or SSH connection to the IOLAN e Normal The Normal level user has limited access to the IOLAN Limited CLI commands and Menu access are available with the ability to configure the user s own configuration settings Users configured with this level can access the unit either via serial Terminal Profile connection or via a network originated Telnet or SSH connection to the IOLAN e Restricted The Restricted level user can only access predefined sessions or access the Easy Port Access menu Users configured with this level will be restricted to pre defined sessions or limited CLI commands when connecting through the serial port via the Terminal Profile The CLI commands are limited to those used for initiating a session If connection to the IOLAN is done with Telnet or SSH from the network the user will be presented with the Easy Port Access menu e Menu The menu level user will only be able to access predefined session when connecting through a serial port with the Terminal profile or will be limited to the Easy Port Access menu when connec
195. de Console Mode Console mode is used when you have a direct connection between a serial device like a terminal or a PC and the IOLAN accessed by the Admin user to configure manage the IOLAN Console mode automatically sets serial port settings as Serial Interface to EIA 232 Speed to 9600 Flow Control to No Bits to 8 Stop Bits to 1 Parity to None Console mode also displays extra system messages Serial port 1 will ignore any Serial Port settings when in Console mode so you need to turn Console mode off to use serial port 1 in your network Serial Mode Serial mode is used when the IOLAN acts as a communications server or anytime you are not connecting directly to the IOLAN to configure it You can connect directly to the IOLAN in Serial mode but the IOLAN will not display all the messages information you will get in Console mode Dedicated Console Port Rack Mount Models 38 The rack mount IOLAN models have a dedicated Console port located on the LED side of the IOLAN You can use the supplied Administration cable with the supplied RJ45 gt DBOF adapter if needed to connect a terminal to the Console Admin port to view diagnostic information and or configure the IOLAN using the Menu or Command Line Interface CLI You can configure the baud rate and flow control of the dedicated Console port IOLAN SDS SCS STS User s Guide Version 3 6 Powering Up the IOLAN Powering Up the IOLAN Desktop Rack Mount Mo
196. dels VO Models To power up the IOLAN perform the following steps 1 Rack Mount Models only Using the rack mount brackets included with your IOLAN you can rack mount the IOLAN from the front or the back of the chassis depending on your environment Make sure you don t block the IOLAN s side air vents Each IOLAN is 1U in height and does not require any extra space between units therefore you can rack mount up to five IOLANSs in a 5U rack 2 Plug the external power supply into the IOLAN and then into the electrical outlet Connect it to the PSE if you have a P series Power over Ethernet model 3 You will see the LEDs cycle for several seconds and then remain a solid green indicating that it is ready to configure use Before you start to configure the IOLAN you should set the desktop IOLAN jumpers if you want to terminate the line or use the power in pin feature instead of an external power supply if your desktop IOLAN model supports it In some circumstances the setting of jumpers may be required e IOLAN DS and SDS models where EIA 422 485 line termination is required IOLAN VO models with Digital I O for setting the channels as input or output IOLAN VO models with Analog VO for setting Voltage Current See Appendix E Setting Jumpers on page 361 to see how to set the jumpers for your IOLAN desktop model To power up the IOLAN perform the following steps 1 Unplug the power plugable terminal block from the
197. digital input sensor in a factory a light goes on in the reception office remote IOLAN relay channel and the door open close is logged by an application on aremote host Warehouse 100g 10014 E c EE Remote Host ESI amp H IOLAN Reception Network 253 Channels 254 Functionality The Digital VO extension feature reguires the digital input to be connected to one or more digital outputs relays local or on another IOLAN model output serial signal pins and or TCP IP applications In order to create a successful connection between the input and output or application one side must be must be set to Listen for connection and the other side must be set to Connect to When the state of an input channel changes a message is sent to all sessions currently associated with that channel When the IOLAN is communicating to an application there is no need for the output channel or application to respond to messages from the input channel Each input channel is reported individually so the receiving application gets the status only at the point at which the channel state has changed The message format from input channel to output channel application consists of 20 bytes per status 10 bytes are currently used and 10 are being reserved for future use Message Type Input Number IOLAN MAC Current Alarm Current Status Reserved 1 Byte 1 Byte Address 6 Bytes State 1 Byte of Input 1 B
198. ding Terminal Definitions Downloading Terminal Definitions All terminal types can be used on the IOLAN Some terminal types which are not already defined in the IOLAN however are unable to use Full Screen mode menus and may not be able to page through sessions properly When installed the IOLAN has several defined terminal types Dumb WYSE60 VT100 ANSI TVI925 IBM3151 VT320 and HP700 If you are not using or cannot emulate any of these terminal types you can add up to three additional terminal definitions to the IOLAN The terminal definitions can be downloaded from a TCP IP host To download terminal definitions follow these steps 1 Decide which TCP IP host you are going to use It must be a machine with enabled 2 Configure TFTP in the IOLAN as necessary 3 Select Tools Advanced Custom Files from the menu bar in DeviceManager and Administration Custom Files in WebManager 4 From the File Type drop down select Download Terminal Definition Select the terminal definition option 1 2 or 3 and then browse to the terminal definition file that is being downloaded to the IOLAN 5 In the Terminal profile select the Terminal Type Term x that you custom defined Creating Terminal Definition Files 318 To create new terminal definition files you need to copy and edit the information from the terminfo database 1 Ona UNIX host change directory to usr lib terminfo x where x is the first letter of the required
199. ding registers MB_REG_HR_DI_SENSOR_LATCH The latch status of the Digital input 1 is Latched 0 is Not latched A write of any value will clear the latch MB REG HR DO SENSOR PULSE ISW Inactive Signal Width This is how long the channel will remain inactive during pulse mode in increments of 100ms Valid values are 1 9999 The default is 1 100 ms MB REG HR DO SENSOR PULSE ASW Active Signal Width This is how long the channel will be active during the pulse mode in increments of 100ms Valid values are 1 9999 The default is 1 100 ms MB REG HR DO SENSOR PULSE COUNT The number of times the channel output will pulse Each count consists of an active inactive sequence The default is 1 cycle MB REG HR AI CLEAR ALARM LATCH Used to reset a latched alarm state A write of any value will clear the alarm latch for the specific Analog input MB REG HR AI CLEAR MAX Used to reset the Analog input maximum value reached A write of any value will reset the maximum MB REG HR AI CLEAR MIN Used to reset the Analog input minimum value reached A write of any value will reset the minimum This section contains descriptions of I O input registers MB REG IR CURR ENG The current value of an Analog or Temperature input converted to appropriate units For Analog this will be in voltage or current depending on the configuration For the Temperature this value will be in Celsius or Fahrenheit depending on configuration MB RE
200. dministrative functions As a general rule administrative functions are accessed from the menu bar in the DeviceManager and under the Administration option in the WebManager s navigation tree Managing Configuration Files Saving Configuration Files When you connect to the IOLAN using either DeviceManager or WebManager the IOLAN s active configuration file is loaded into the configurator To save a backup of the configuration file locally do the following e In DeviceManager select File Save As from the menu bar Notice that you can save the file as either a dme ora txt file Either file format can be imported into the DeviceManager and downloaded to the IOLAN in the future The dme is a binary file and the txt file is a text file that can be viewed in any text editor e In WebManager select under the Administration option select Backup Restore Click the Backup button Downloading Configuration Files You can download a configuration file to the IOLAN by doing the following e In DeviceManager 1 Connect to the IOLAN to retrieve the current configuration file 2 Open the configuration file you want to download to the IOLAN by selecting File Import Configuration from a File and then browsing to the configuration file This will replace the retrieved configuration file 3 Select Tools Download Configuration to IOLAN or click the Download All Changes button 4 Reboot the IOLAN In WebManager 1 Under the Administrat
201. domain name This field is case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Maximum 64 characters asterisk works as a wildcard An entry for an email address for example acct anycompany com This field is Case sensitive in order to successfully match the information in the remote X 509 certificate Data Options Maximum 64 characters asterisk works as a wildcard 226 IOLAN SDS SCS STS User s Guide Version 3 6 VPN L2TP IPsec Many operating systems support L2TP IPsec VPN tunnels however Windows XP requires this VPN tunnel protocol When L2TP IPsec is enabled the IOLAN will listen for L2TP IPsec VPN tunnel requests When you enable L2TP IPsec you are requiring that all access to the IOLAN go through the L2TP IPsec tunnel so you must configure any exceptions first see Exceptions on page 228 for more information on exceptions or you will not be able to access the IOLAN through the network unless you are configured to go through the L2TP IPsec tunnel you can still access the IOLAN through the Console port Field Descriptions L2TP IPsec Allow L2TP IPsec connections Block all non VPN network traffic IPsec Settings Local IP Address 0 D D 0 Authentication Method Shared Secret v Secret Settings L2TP Settings PPP IPv4 Local IP Address Di 0 Ig IPv4 Remote IP Start Address IER NEE 0 IPv4 Remote IP End Address 0 0 0
202. dress that the IOLAN will send to the RADIUS server Default 0 0 0 0 When enabled the IOLAN will send the IOLAN s IPv6 address to the RADIUS server Default Enabled When enabled the IOLAN will send the specified IPv6 address to the RADIUS server Default Disabled The IPv6 address that the IOLAN will send to the RADIUS server Field Format IPv6 address Field Descriptions Kerberos Settings Realm KDC Domain KDC Port Configure the following parameters Realm KDC Domain KDC Port The Kerberos realm is the Kerberos host domain name in upper case letters The name of a host running the KDC Key Distribution Center for the specified realm The host name that you specify must either be defined in the IOLAN s Host Table before the last reboot or be resolved by DNS The port that the Kerberos server listens to for authentication requests Default 88 IOLAN SDS SCS STS User s Guide Version 3 6 Authentication LDAP Overview If you are using LDAP with TLS you need to download a CA list to the IOLAN that includes the certificate authority CA that signed the LDAP certificate on the LDAP host by selecting Tools Advanced Keys and Certificates See Keys and Certificates on page 232 for more information on the LDAP certificate Field Descriptions LDAP Settings Host Name Port Base C Enable TLS Configure the following parameters Host Name The name or IP address of the
203. e Data Options 40 56 64 128 168 256 Default 40 The maximum key size value that will be used for the specified encryption type Data Options 40 56 64 128 168 256 Default 256 The type of key to exchange for the encryption format Data Options Any Any key exchange that is valid is used this does not however include ADH keys RSA This is an RSA key exchange using an RSA key and certificate EDH RSA This is an EDH key exchange using an RSA key and certificate e EDH DSS This is an EDH key exchange using a DSA key and certificate e ADH This is an anonymous key exchange which does not require a private key or certificate Choose this key if you do not want to authenticate the peer device but you want the data encrypted on the SSL TLS connection Default Any 219 SSL TLS HMAC Select the key hashing for message authentication method for your encryption type Data Options Any e MDS e SHAI Default Any Validation Criteria Field Descriptions If you choose to configure validation criteria then the information in the peer SSL TLS certificate must match exactly the information configured in this window in order to pass peer authentication and create a valid SSL TLS connection SSL Validation Criteria C Country CO State Province CO Locality C Organization C Organization Unit C Common Name C Email Configure the following parameters Count
204. e The name of the user to be authenticated IP Address of IOLAN LAN interface Port Line number of IOLAN Indicates the service to use to connect the user to the IOLAN A value of 6 indicates administrative access to the IOLAN Supported values are e 1 Login e 3 Callback Login Equivalent to the IOLAN User Service set by Type 15 Login Service 2 Framed 4 Callback Framed Equivalent to the IOLAN User Service set by Type 7 Framed Protocol e 7 NAS prompt e 9 Callback NAS prompt Equivalent to IOLAN User Service DSPrompt e 6 Administrative User e 11 Callback Administrative User Equivalent to IOLAN User Service DSPrompt and the User gets Admin privileges Indicates if this is the beginning or end of a session Supported values are 1 Start 2 Stop Number of bytes which were received from the user during this session Number of bytes where were transmitted to the user during this session A string which identifies the session The same string must be used in the start and stop messages Indicates how the user was authenticated Supported values are 1 Local 2 RADIUS Number of seconds for which the user has been connected to a specific session Number of packets which were received from the user during this session Number of packets which were transmitted to the user during this session Indicates how the session was terminated Supported values include 1 User Request 2 Lost Carrier 3 Lost
205. e e If using DNS or if DNS is required ensure a nameserver is configured on your IOLAN and is accessible ping it e If not using DNS verify that the host is configured in the Host Table Check access to the host by pinging it using the host s IP address Cannot access a host on a local network verify e The network address is correct The subnet mask is set correctly and reflects the network configuration e The broadcast address is set correctly and reflects the network configuration Cannot access a host on a remote network e Use the show route command to verify that there is a route to the remote host If no gateway is specified verify that a default gateway is specified Ping the default gateway to check if it is working e Consider the situation beyond the gateway for example are intermediate gateways and the remote host available Also check the messages returned by the ping command for example that a particular host or gateway is unreachable Gateways added into the gateway table are ignored by the IOLAN e Have you used BOOTP and entered a single static gateway in the bootptab file entry If yes the other gateways will be ignored Access to host lost after a few minutes e Ifthe route to this host goes through routers make sure those routers are all sending RIP packets across the networks RADIUS Authentication Problems User is waiting up to 60 seconds before login is accepted or denied and Authentication i
206. e e Send Sends RIP over the PPP interface e Listen Listens for RIP over the PPP interface Send and Listen Sends RIP and listens for RIP over the PPP interface Default None The maximum time in seconds that LCP Link Control Protocol will wait before it considers a configure request packet to have been lost Range 1 255 Default 3 seconds The maximum number of times a configure request packet will be re sent before the link is terminated Range 0 255 Default 10 seconds The maximum time in seconds that LCP Link Control Protocol will wait before it considers a terminate request packet to have been lost Range 1 255 Default 3 seconds The maximum number of times terminate request packet will be re sent before the link is terminated Range 0 255 Default 2 seconds The maximum number of times configure NAK packet will be re sent before the link is terminated Range 0 255 Default 10 seconds 148 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Authentication Timeout Roaming Callback Challenge Interval Address Control Compression Protocol Compression VJ Compression Magic Negotiation IP Address Negotiation Dynamic DNS Button The timeout in minutes during which successful PAP or CHAP authentication must take place when PAP or CHAP are specified If the timer expires before the remote end has been authenticated successfully the link will be t
207. e IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw e q c soo Pin1 Power DIP 1 Ste Switch Reset OO 04 5 SCH os RJ45 C wv R Oo Screw 3 To change the power pin out locate the set of three pins associated with the line you want to set Line 1 is J4 Line 2 is the set the three pins just to the left of port 2 For the fixed 5V DC output jumper pins 1 and 2 For the output to equal the external adapter input jumper pins 2 and 3 4 To tum line termination on for Line 1 locate and jumper both J7 and J8 as shown in the diagram To turn line termination on for Line 2 locate and jumper both J11 and J9 5 Closethe IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings 2 Port IOLAN RJ45 P Power Over Ethernet To change the settings do the following 1 Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw PEER Pint eo m N m DIP se S Switch Reset o ots 3 o E RJ45 C rn A o Screw 3 For the fixed 5V DC output locate and
208. e IOLANs on bootup e auto configure with minimal information for example only an IP address e auto configure with basic setup information IP address subnet prefix bits etc e download a new version of firmware e download a full configuration file DHCP BOOTP is particularly useful for multiple installations you can do all the IOLANs configuration in one DHCP BOOTP file rather than configure each IOLAN manually Another advantage of DHCP BOOTP is that you can connect the IOLAN to the network turn on its power and let autoconfiguration take place All the configuration is carried out for you during the DHCP BOOTP process Configuration Methods 55 DHCP BOOTP DHCP BOOTP Parameters The following parameters can be set in the DHCP BOOTP bootp file 56 SW_FILE The full path pre fixed by hostname IP address IPv4 or IPv6 and file name of the firmware update CONFIG_FILE The full path pre fixed by hostname IP address IPv4 or IPv6 and file name of the configuration file GUI_ACCESS Access to the IOLAN from the HTTP or HTTPS WebManager Values are on or off AUTH_TYPE The authentication method s employed by the IOLAN for all users You can specify the primary and secondary authentication servers separated by a comma This uses the following numeric values for the authentication methods None only valid for secondary authentication 1 Local 2 RADIUS 3 Kerberos 4 LDAP
209. e Ignore Maintains the VPN network configuration but the VPN network is not started and cannot be started through the IPsec command option When defining peer VPN gateways one side should be defined as Start initiate and the other as Add listen It is invalid to define both gateways as Add VPN connection time can take longer when both gateways are set to Start as both sides will attempt to initiate the same VPN connection Default Start Shared Secret Field Description When the Authentication Method is set to Shared Secret you can enter a secret that applies to all VPN tunnels both the IPsec and L2TP IPsec protocols to successfully authenticate and create a valid connection VPN Shared Secret This secret is global and applies to all VPN connections Secret Configure the following parameter Secret When the Authentication Method is set to Shared Secret enter the case sensitive secret word This applies to all VPN tunnels IPsec and L2TP IPsec Field Format Maximum of 16 characters spaces not allowed 225 VPN Remote Validation Criteria Field Descriptions When the Authentication Method is set to X 509 Certificate you can configure the remote validation criteria The information in the remote X 509 certificate must match exactly the information configured in this window in order to successfully authenticate and create a valid connection IPsec Remote Validation Criteria PR C Country CO State
210. e Servicesinfo folder B E PERLE IOLAN SDS MIB iso org dod int H adminInfo EE serverInfo H hostsInfo ER userInfo pe portInfo EE modemInfo gt servicesInfo serviceStatus serviceDHCP serviceRouteD serviceTelnetD serviceSSHD serviceHTTPD serviceSnmpD serviceSPCD serviceSNTP serviceHTTPSD serviceSyslog serviceDeviceManagerD ur The first variable in each folder is the Status variable for example serviceStatus When you perform a GET on this variable one of the following values will be returned e 1 Indicates that the container folder is active with no changes e 2 Indicates that the container folder is active with change s Once you have completed setting the variables in a folder you will want to submit your changes to the IOLAN To do this set the Status variable to 4 If you want to discard the changes set the Status variable to 6 e 4 Indicates that the changes in the container folder are to be submitted to the IOLAN e 6 Indicates that the changes in the container folder are to be discarded If you want to save all the changes that have been submitted to the IOLAN you need to expand the adminInfo container folder and SET the adminFunction to 1 to write to FLASH To make the configuration changes take effect SET the adminFunction to 3 to reboot the IOLAN IOLAN SDS SCS STS User s Guide Version 3 6 IOLAN Interface IOLAN Interface Overview For envir
211. e TCP port that the IOLAN will use to connect to the Tunnel Server Default 10000 serial port number so serial port 5 is 10005 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Virtual Modem Profile Overview Virtual Modem Vmodem is a feature of the IOLAN that provides a modem interface to a serial device It will respond to AT commands and provide signals in the same way that a serially attached modem would This feature is typically used when you are replacing dial up modems with the IOLAN in order to provide Ethernet network connectivity Functionality The serial port will behave in exactly the same fashion as it would if it were connected to a modem Using AT commands it can configure the modem and the issue a dial out request ATTD The IOLAN will then translate the dial request into a TCP connection and data will be begin to flow in both directions The connection can be terminated by hanging up the phone line You can also manually start a connection by typing ATD lt ip_address gt lt port_number gt and end the connection by typing ATH The ip address can be in IPv4 or IPv6 formats and is the IP address of the receiver For example ATD123 34 23 43 10001 or you can use ATD12303402304310001 without any punctuation although you do need to add zeros where there are not three digits presents so that the IP address is 12 digits long Dial a a Serial Device IOLAN IOLAN Serial Device Modem Ap
212. e the following parameters Define additional hosts to connect to Add Button Edit Button Delete Button Define a primary host and backup When this option is enabled you can define up to 49 hosts that the serial device connected to this serial port will attempt communicate to With this mode of operation the IOLAN will connect to multiple hosts simultaneously Default Enabled Click the Add button to add a host to the list of hosts that will be receiving communication from the serial device connected to the IOLAN See Adding Editing a Multihost Entry on page 123 for more information Highlight an existing host and click the Edit button to edit a host in the list of hosts that will be receiving communication from the serial device connected to the IOLAN Highlight an existing host and click the Edit button to edit a host in the list of hosts that will be receiving communication from the serial device connected to the IOLAN When this option is enabled you need to define a primary host that the serial device connected to this serial port will communicate to and a backup host in the event that the IOLAN loses communication to the primary host The IOLAN will first establish a connection to the primary host Should the connection to the primary host be lost or never established the IOLAN will establish a connection the backup host Once connected to the backup the IOLAN will attempt to re establish a connection to the Pr
213. e this TCP port number to access the Slave IOLAN s port Default 1024 and then increments by one for each new slave entry Protocol Specify the protocol that will be used to access the port Data Options SSH Telnet Default Telnet 284 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring the Option Card Introduction SCS models have a built in option card slot that supports either a Perle E Configuration IOLAN modem card purchased separately or Perle PCI Adapter card E gg Network purchased separately for use with a user supplied wireless WAN card SC Serial Users H H CO Security Option Card Settings Clustering Option Card Overview The Option Card settings allow you to configure the option card slot for either a Perle IOLAN modem card or a Perle PCI Adapter wireless WAN card Functionality The Perle IOLAN modem card or Perle PCI Adapter wireless WAN card slide into the PCI slot as described in Installing a Perle PCI Card on page 379 Configuring the IOLAN Modem Card The IOLAN Modem card Configure button automatically takes you to the PPP serial port profile although you can set and configure any serial port profile appropriate for modem use See the Chapter 7 Configuring Serial Ports on page 103 for information on the configuration options for the serial port profile that fits your modem usage IOLAN SDS SCS STS User s Guide Version 3 6 285 Configuring a Wireless WAN Card Config
214. e using a wet contact for your Digital input for channel D1 connect one wire to D1 and the other wire to GND The power source is supplied by external sources A omo a Z OU A 0 Ur Power Source Digital Input Dry Contact If you are using a dry contact for your Digital input for channel D1 connect one wire to D1 and the other wire to COM The power source is supplied by the COM common connector A ZS OU a Z OD BA 9 O0 Power Source IOLAN SDS SCS STS User s Guide Version 3 6 369 Wiring VO Diagrams Digital Output Sink For a Digital output sink ground configuration for channel D1 follow the diagram below Battery 1 Device Digital Output Source For a Digital output source voltage configuration for channel D1 follow the diagram below Battery Device 370 IOLAN SDS SCS STS User s Guide Version 3 6 Wiring VO Diagrams Analog Input Make sure the Analog jumpers support the software setting see Analog Input Module on page 367 for jumper settings Current To connect channel Al with a 2 wire shielded cable connect the positive wire to Al the negative wire to Al and optionally the shield to GND toi ae a 4 E Q AN TT E 29 323 I VW gt shield If you have the positive negative wires reve
215. eN Wa ee dk Ke ke ie He NA Een 53 Connecting to the IOLAN Using the Menu 53 Using the p 54 DHCP BOOTP Mise D M a 55 Sip ON 55 Unique Feat reS TU c 55 Connecting to the IOLAN Using DHCP BOOTP 55 Using DA CP BOO NU 55 DHCP BOOTP Parameters aei een 56 Table of Contents a ae nee 57 OVERVIEW nee en 57 Access Platform sesse see N nn 57 ta ie SR ok re De ie Re ee sk rr 57 Connecting to the IOLAN Using SNMP sse 57 Using the SNMP MIB naa rroitna n ssad das an asa Ee SG RR ERK AE KERS NE RAN a GN eN 58 IOLAN Interface 59 OVEIVIEW nennen 59 Access EN e TE 59 Connecting to the IOLAN to Use the IOLAN Interface 59 Using the IOLAN Interface uununnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 59 Changes to the IOLAN Interface eese 60 Chapter 4 Getting Started 65 ige oie ifo n SEN ERE 65 Easy Configuration Wizard sasies sei ESE REEKSE o GESKEER RE ed 65 Setting Up the Network u ee 66 Using DeviceManager sees sesse ER nn nennen 66 Using WebMaliatjel NE Ge dion eN ee N nnmnnn 67 Using a Direct Serial Connection to Specify an IP Address 67 Us
216. ed the IOLAN will periodically send IPV6 Router Advertisement messages and respond to Router Solicitation messages The Router Advertisement message can be configured to contain any of the following information e DHCPv6 Use the DHCPV6 server to obtain additional IPV6 address es and configuration parameters e DHCPv6 Configuration Options Use DHCPv6 server to obtain additional configuration parameters Network Prefixes Advertise the selected custom configured network prefixes Default Disabled When enabled the Router Advertisement message indicates to use the DHCPv6 server for obtaining additional IPv6 addresses and configuration parameters Default Disabled When enabled the Router Advertisement message indicates to use the DHCPv6 server to obtain additional configuration parameters Default Disabled The network prefix of the IPV6 addresses created in the IPv6 Settings tab in the Custom IPv6 Address List are included in the Router Advertisement message You can choose to enabled or disable specific network prefixes from being advertised to hosts Default Enabled Define the Ethernet connection speed desktop models can support up to 100 Mbps and rack models can support up to 1000 Mbps Data Options Auto automatically detects the Ethernet interface speed and duplex 10 Mbps Half Duplex 10 Mbps Full Duplex 100 Mbps Half Duplex 100 Mbps Full Duplex 1000 Mbps Full Duplex Default Auto Define the Eth
217. ed to enter a terminal type and then you will see the following Menu User admin IOLAN SDS2 v3 1 G8 Telnet 5 Server Configuration Line Configuration Network Configuration Authentication Configuration Time Configuration Modem Configuration Statistics Command Line Mode Move Enter Select To navigate through the Menu options do the following 1 Highlight a Menu option by using the keyboard up and down arrows to navigate the list 2 When the Menu item you want to access is highlighted press the Enter key to either get to the next list of options or to get the configuration screen depending on what you select 3 When you are done configuring parameters in a screen press the Enter key and then the Enter key again to Accept and exit the form 4 If you want to discard your changes press the Esc key to exit a screen at which point you will be prompted with Changes will be lost proceed y n type y to discard your changes or n to return to the screen so you can press Enter to submit your changes 5 If there are a number of predefined options available for a field you can scroll through those items by pressing the Space Bar or you can type 1 lowercase L to get a list of options use the up down arrows to highlight the option you want and then press Enter to select it 54 IOLAN SDS SCS STS User s Guide Version 3 6 DHCP BOOTP DHCP BOOTP Overview Several IOLAN parameters can be configured through a D
218. ed IP address Therefore you can specify a UID range of 1 100 and the IOLAN will route Master Modbus messages to all Modbus Slaves with IP addresses of 10 10 10 1 10 10 10 100 Range 1 247 Default 0 zero Specify the configuration of the Modbus Slaves on the network Data Options e Host tThe IP address is used for the first UID specified in the range The last octet in the IPv4 address is then incremented for subsequent UID s in that range e Gateway The Modbus Master Gateway will use the same IP address when connecting to all the remote Modbus slaves in the specified UID range Default Host The IP address of the TCP Ethernet Modbus Slave Field Format IPv4 or IPv6 address 166 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles End IP Address Displays the ending IP address of the TCP Ethernet Modbus Slaves based on the Start IP address and the UID range not supported for IPv6 addresses Field Format IPv4 address Protocol Specify the protocol that is used between the Modbus Master and Modbus Slave s Data Options TCP or UDP Default TCP UDP TCP Port The destination port of the remote Modbus TCP Slave that the IOLAN will connect to Range 0 65535 Default 502 Modbus Slave Advanced Settings Field Descriptions lll Advanced Slave Settings A These settings are global and apply to all serial ports configured as a Modbus Slave Gateway Slave Gateway Settings TCP UDP Pott
219. eer certificate validation for which you must supply the validation criteria that was used when creating the peer certificate this is case sensitive so keep that in mind when enabling and configuring this option General Advanced Hardware Email Alert Packet Forwarding SSL TLS Enable SSL TLS C Use global settings Security gt SSL TLS SSL TLS Version Any M SSL TLS Type Client v C Validate Peer Certificate Configure the following parameters Enable SSL TLS Activates the SSL TLS settings for the serial port Default Disabled Use global settings Uses the SSL TLS settings configured in the Security section for the serial port Default Enabled SSL TLS Version Specify whether you want to use e Any The IOLAN will try a TLSv1 connection first If that fails it will try an SSLv3 connection If that fails it will try an SSLv2 connection e TLSv1 The connection will use only TLSv1 e SSLv3 The connection will use only SSLv3 Default Any SSL TLS Type Specify whether the IOLAN serial port will act as an SSL TLS client or server Default Client Cipher Suite Button Click this button to specify SSL TLS connection ciphers See Cipher Suite Field Descriptions on page 114 for more information Validate Peer Enable this option when you want the Validation Criteria to match the Peer Certificate Certificate for authentication to pass If you enable this option you need to download an SSL TLS certificate authority
220. eezer warehouse example a D4 is used to monitor the open door sensor so that every time a freezer door is opened an alarm is triggered and a syslog message is sent to a syslog server where the monitoring application notes the time Monitoring Application Industrial Freezers 245 Channels Field Descriptions General VO Extension Digital D1 Description 9 Input Mode Output Mode Digital Input Settings Latch None C Invert Signal Alarm Settings Trigger Disabled R Configure the following parameters Description Provide a description of the channel making it easier to identify Data Options Maximum 20 characters including spaces Input Mode When selected the channel will be reading the status of the line input The internal jumpers must match the software configuration the internal jumpers are factory configured for Input Mode Default Input Mode Latch Latches remembers the activity transition active to inactive or inactive to active Data Options None Inactive to Active Active to Inactive Default None Invert Signal When enabled inverts the actual condition of the I O signal in the status therefore an inactive status will be displayed as active Default Disabled Trigger When the trigger condition is met triggers the specified alarm action Data Options e Disabled No alarm settings This is the default e Inactive When the expected Digital
221. efault gateway must be configured in the route table Network Advanced Route List tab Field Format IPv4 address IPv6 address FODN defaultroute Local External IP When NAT Traversal NAT T is enabled this is IOLAN s external IP address Address or FQDN When the IOLAN is behind a NAT router this will be its public IP address Field Format IPv4 address IPv6 address FODN Local Next Hop The IP address of the router gateway that will forward data packets to the remote VPN if required The router gateway must reside on the same subnet at the IOLAN Leave this parameter blank if you want to use the Default Gateway configured in the IOLAN Field Format IPv4 or IPv6 address Local Host Network The IP address of a specific host or the network address that the IOLAN will Address provide a VPN connection to Field Format IPv4 or IPv6 address Local IPv4 Subnet The subnet mask of the local IPv4 network Keep the default value when you Mask are configuring a host to host VPN connection Default 255 255 255 255 Local IPv6 Prefix The prefix bits of the local IPv6 network Keep the default value when you are Bits configuring a host to host VPN connection Default 0 Remote IP Address The IP address or FQDN of the remote VPN peer If you want to accept a VPN connection from any VPN peer you can enter any in this field Field Format IPv4 address IPv6 address FODN any Remote External IP When NAT Traversal NAT_T is ena
222. emallP External IP Address Address Ned Hop 19824 101 NextHop 0000 Host Network 199 24 0 0 Host Network 0 0 0 0 Address Address IPv4 Subnet 255 ee 0 0 IPv4 Subnet 255 255 255 255 Mask Mask IPv6 Subnet IPv6 Subnet Bits Bits Boot Action Cancel The Remote IP Address field is sany to allow any VPN client to communicate in the IPsec tunnel that can validate the Secret Also the Remote Host Network field is configured for 0 0 0 0 to allow any remote peer private IP address RFC 1918 10 0 0 0 8 172 16 0 0 12 192 168 0 0 16 access to the IPsec tunnel Lastly the Boot Action is set to Add to listen for an IPsec tunnel connection Enable the IPsec service found in Security Services 333 Configuring a Virtual Private Network 334 IOLAN Device Server User s Guide Version 3 6 RADIUS and TACACS Introduction This chapter describes the parameters that can be passed to the IOLAN when a user logs into the IOLAN serial port set to profile Terminal from external authentication RADIUS and TACACS servers RADIUS Although RADIUS can be used strictly for external authentication it can also be used to configure line and user parameters Therefore when a user is being authenticated using RADIUS it is possible that the user s configuration is a compilation of the parameters passed back from RADIUS the IOLAN parameters if the user has also been set up as a local user in the IO
223. enabled sends an SNMP trap when an alarm is triggered or cleared The trap consists of the severity level and whether the alarm was triggered or cleared Default Disabled Advanced Analog Alarm Settings The advanced Analog Alarm Settings window expands the basic alarm settings options to up to five severity levels Analog Alarm Settings Advanced Settings Trigger Type Low Clear Mode Auto Severity Levels Trigger C Level 1 C Level 2 C Level 3 C Level 4 w Alam level s will activate when input is lower than trigger value Trigger values must decrease with each level Once activated alarm level s will remain latched until input is higher than the clear value C Level 5 lt lt Basic Configure the following parameters Trigger Type Clear Mode Level 1 5 If the Trigger Type is Low an alarm is triggered when the input drops below the specified Trigger value other severity level trigger values must decrease in value with each subsequent level If the Trigger Type is High an alarm is triggered when the input is higher than the specified Trigger value other severity level trigger values must increase in value with each subsequent level To clear an alarm the input must drop below the specified value when Trigger Type is High or go above the specified value when Trigger Type is Low Defines the Level severity settings for up to five levels If the Trigger Type is Low an alarm is tri
224. ent to the modem by a communications program at start up These commands tell a modem how to set itself up in order to communicate easily with another modem Message of the day This is defined by a file whose contents display when users log into the Device Server The broadcasting of messages to a specified group of workstations on a LAN WAN or internet A communication control character sent by the receiving destination indicating that the last message was not received correctly IOLAN SDS SCS STS User s Guide Version 3 6 403 PAP Password Authentication Protocol RADIUS Remote Authentication Dial In Users Services Reverse Connection RIP Routing Information Protocol Roaming Callback RPC Silent Connection SNMP Simple Network Management Protocol Subnet Prefix Bits 404 Standard authentication protocol for PPP connections see CHAP An open standard network security server that communicates with the PAP protocol Connections that originate from a host that go directly to a serial device through the Device Server A protocol that allows gateways and hosts to exchange information about various routes to different networks A method where the client supplies the number for callback when they dial in Remote Procedure Call A type of protocol that allows a program on one computer to execute a program on a server computer Silent connections are the same as direct connections except that they are p
225. ephone number after which the IOLAN ends the call Default Disabled Dynamic DNS Field Descriptions Dynamic DNS can be enabled and configured on a serial port level If you enable Dynamic DNS and leave the parameters blank the Dynamic DNS system parameters will be used Network Advanced Dynamic DNS tab Dynamic DNS C Enable Dynamic DNS for this Serial Port Host User Name Password Account Settings Cancel Configure the following parameters Enable Dynamic DNS for this Serial Port Host User Name Password Account Settings Button Enables disables the ability to register a new IP address with the DNS server Default Disabled Specify the host name that will be updated with the PPP session s IP address on the DNS server Specify the user name used to access the DNS server Specify the password used to access the DNS server Click this button to configure the Dynamic DNS DynDNS org account information See Account Settings on page 96 for information on how to configure the Account Settings window 175 Serial Port Profiles Advanced Tab Field Descriptions General Authentication Advanced Hardware Email Alet Packet Forwarding 176 Advanced PPP Settings Routing Nam 3 Dial Options EE Connect ACCM 0 Direct C MRU 1500 Dial In Dial Out Timeout seconds Retries Dial In Out Configure Request 3 10 Ons Di Terminate Request 3 2 Configure NAK 10 Di
226. er method 100Mb VO Models The power supply for a desktop IOLAN I O model must meet the following requirement Output between 9 30V DC and a minimum of 600mA current IOLAN SDS SCS STS User s Guide Version 3 6 Getting to Know Your IOLAN Rack Mount Models DC Power Requirements The IOLAN DC is supplied with an integral Terminal Connections block to facilitate connection to a DC source s The DC supply s should have adequate over current protection within the closed rack system and comply with local or national standards applicable to the installation territory You need wire gauge 20 to 22 AWG to connect the IOLAN rack mount unit to the power source AC Power Requirements AC power rack mount units come with standard power cords specific to your country that should be used to power the IOLAN unit Getting to Know Your IOLAN Overview This section describes the hardware components found on your IOLAN unit All IOLANs have the same basic hardware components to allow you to connect to serial devices connect to the network monitor LAN and serial activity and manage the unit Below is a list of these components e Serial Port s Connector s that will be used to connect to a serial device Activity This LED flashes to indicate LAN activity e Link10 100 This LED indicates the Ethernet connection speed for desktop models Green 10 Mbits Yellow 100 Mbits Off no LAN connection e Lin
227. er of bits in a transmitted character Default 8 Specifies the type of parity being used for the data communication on the serial port If you want to force a parity type you can specify Mark for lor Space for 0 Data Options Even Odd Mark Space None Default None Specifies the number of stop bits that follow a byte Data Options 1 1 5 2 1 5 is only available on the 1 port and 2 port models but not on the modem line Serial Port 2 of the SDS1M model Default 1 107 Serial Port Profiles Duplex TX Driver Control Flow Control Enable Inbound Flow Control Enable Outbound Flow Control Monitor DSR Monitor DCD Enable Line Termination Enable Echo Suppression Used with a EIA 485 serial interface specify whether the serial port is Full Duplex communication both ways at the same time or Half Duplex communication in one direction at a time Default Full Used with a EIA 485 serial interface if your application supports RTS Request To Send select this option Otherwise select Auto Default Auto Defines whether the data flow is handled by the software Soft hardware Hard Both or None If you are using SLIP set to Hard only If you are using PPP set to either Soft or Hard Hard is recommended If you select Soft with PPP you must set the ACCM parameter when you configure PPP for the Serial Port Data Options Soft Hard Both None Default None Determines if input flow c
228. er or clear The syslog message is associated with Level Critical Default Disabled When enabled sends an SNMP trap when an alarm is triggered or cleared The trap consists of the severity level and whether the alarm was triggered or cleared Default Disabled 263 VO UDP VO UDP Industrial applications often monitor the status of VO devices such as sensors alarms relays etc by polling for I O data The IOLAN s I O UDP feature can help to minimize network traffic by broadcasting I O status to industrial applications on specified intervals providing I O status in a timely manner The IOLAN s I O UDP broadcast feature sends the status of attached I O devices to defined hosts on the network Depending upon the IOLAN model and the configuration of the I O channels the UDP packet contains the current status and or data of each enabled I O channel or serial pin signal UDP Unicast Format 264 PC applications must be able to interpret the UDP packet to obtain I O channel status and data This section provides the detailed structure of the UDP datagram and its data format UDP Broadcast Packet Version Total Packet Length Analog Section Digital Relay Section Serial Pin Signal Section 1 Byte 2 Bytes Each section with the exceptions of the Version and Total Packet Length sections is comprised of its own subset of bytes Version The current version of the format of I O UDP broadcast pa
229. ered in the exact way the application will send it For example if you enter 555 1212 in this table and the application sends 5551212 the IOLAN will not match the two numbers Host IP Address Specify the IP address of the IOLAN that is receiving the virtual modem connection Field Format IPv4 or IPv6 address TCP Port Specify the TCP Port on the IOLAN that is set to receive the virtual modem connection Default 0 Control Signal I O Profile 158 Overview The Control Signal VO profile is only available on IOLAN I O models When you configure a serial port for Control Signal I O you are using the DSR DCD CTS DTR and RTS serial pins for I O channel Digital Input DSR DCD and CTS or Digital Output DTR and RTS Functionality The Control Signal VO profile enables the use of the EIA 232 serial port pins to be used as assigned Digital Inputs or Digital Outputs IOLAN VO LE DB9 Male Connector DSR e 3 Digital Input Monitoring Application CTS PP Digital Input DCD RTS Digital Input Digital Output Ground DTR Digital Output IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles General Tab Field Descriptions The General tab displays the signal pins This window is also used to enable disable the signal pins TN General Control Signal 1 0 Enable Signal Description lv DSR DSR Input Iv DCD DCD Input Iv CTS CTS Input Iv DTR DTR Output Iv RTS RTS Output Ed
230. ermanently established The host login prompt is displayed on the screen Logging out redisplays this prompt Silent connections unlike direct connections however make permanent use of pseudo tty resources and therefore consume host resources even when not in use A protocol for managing network devices Identifies the device s IP address which portion constitutes the network address and which portion constitutes the host address IOLAN SDS SCS STS User s Guide Version 3 6 Index A D admin default password 66 lost password 320 analog calibrating 312 API VO commands 275 376 TruePort 274 ARP Ping setting an IP address 69 authentication general 203 binary configuration file 80 BOOTP parameters 56 setting an IP address 68 C cabling EIA 232 356 calibrating analog 312 temperature 313 certificates LDAP CA list 232 SSH OpenSSH 232 SSL 232 CLI IOLAN interface 52 configuration files formats 80 connecting to the Device Server console mode 38 serialmode 38 setting IP address 44 console mode 38 custom factory default configuration 311 DB25 pinouts female 352 male 351 power in pin female 353 male 352 DB9 male pinouts 354 355 DC power requirements 33 Decoder utility 377 default admin password 66 definitions 403 Device Server models 27 DeviceManager overview 46 setting an IP address 66 DHCP parameters 56 setting an IP address 68 direct connect setting an IP address 67 E EasyP
231. erminal definitions and a custom language files to the IOLAN Connecting to the IOLAN Using DeviceManager 46 Before you can use DeviceManager you need to install it on your Windows operating system from the IOLAN CD ROM or you can download it from the Perle website After the DeviceManager application is installed click Start All Programs Perle DeviceManager DeviceManager to start the application When you launch the DeviceManager it will scan the network for IOLANs Establish Connection to Model MAC Address IP Address Server Name Firmware Discovered IOLAN SDS2 00 80 D4 06 00 02 Not Configured localhost 3 3 Auto Refresh IOLAN SDS SCS STS User s Guide Version 3 6 DeviceManager All discovered IOLANs will be displayed on the list along with their name and IP address When a new IOLAN is discovered on the network that has not yet been assigned an IP address it will be displayed with an IP Address of Not Configured To configure the IP address click on the IOLAN and then click the Assign IP button Assign IP Assign IP The Device Server s current IP Address Not Configured Enter the IP Address of the device D Have the Device Server automatically get a temporary IP Address Choose the method you want to use to assign an IP address to the IOLAN e Type in the IP address that you want to assign to this IOLAN e Enable the Have the IOLAN automatically get a temporary IP Address optio
232. erminated Range 1 255 Default 1 minute A user can enter a telephone number that the IOLAN will use to callback him her This feature is particularly useful for a mobile user Roaming callback can only work when the User Enable Callback parameter is enabled Enable Roaming Callback therefore overrides fixed User Enable Callback To use Enable Roaming Callback the remote end must be a Microsoft Windows OS that supports Microsoft s Callback Control Protocol CBCP The user is allowed 30 seconds to enter a telephone number after which the IOLAN ends the call Default Disabled The interval in minutes for which the IOLAN will issue a CHAP re challenge to the remote end During CHAP authentication an initial CHAP challenge takes place and is unrelated to CHAP re challenges The initial challenge takes place even if re challenges are disabled Some PPP client software does not work with CHAP re challenges so you might want to leave the parameter disabled in the IOLAN Range 0 255 Default 0 zero meaning CHAP re challenge is disabled This determines whether compression of the PPP Address and Control fields take place on the link For most applications this should be enabled Default Enabled This determines whether compression of the PPP Protocol field takes place on this link Default Enabled When enabled Van Jacobson Compression is used on this link If your user is authenticated by the IOLAN this VJ compression val
233. ernet connection speed available on SCS models only Data Options Auto automatically detects the Ethernet interface speed and duplex 10 Mbps Half Duplex 10 Mbps Full Duplex 100 Mbps Half Duplex 100 Mbps Full Duplex 1000 Mbps Full Duplex Default Auto 87 Advanced Advanced Host Table 88 Overview The Host table contains the list of hosts that will be accessed by an IP address or Fully Oualified Domain Name FQDN from the IOLAN This table will contain a symbolic name for the host as well as its IP address or FQDN When a host entry is required elsewhere in the configuration the symbolic name will be used Functionality You can configure up to 20 hosts using IPv4 or IPv6 internet addresses on desktop IOLAN models you can configure up to 49 hosts on rack mount IOLAN models Field Descriptions Host Table Route List DNS WINS RIP Dynamic DNS IPv6 Tunnels Host Name Host Address Add IP Filtering Allow all traffic Allow traffic only to from hosts defined with IP addresses Configure the appropriate parameters IP Filtering Data Options e Allow all traffic Allows any host to connect to the IOLAN e Allow traffic only to from hosts defined with IP addresses A security feature that when enabled the IOLAN will only accept data from or send data to hosts configured in the IOLAN s Host Table Default Allow all traffic Add Button Adds a host to the host table Edit Butt
234. ers Country State Province Locality Organization Organization Unit A country code for example US This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Two characters An entry for the state province for example IL This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 128 characters An entry for the location for example Chicago This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 128 characters An entry for the organization for example Accounting This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters An entry for the unit in the organization for example Payroll This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters 99 Advanced Common Name An entry for common name for example the host name or fully gualified domain name This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters Email An entry for an email address for example acct anycompany com This field is case sensitive in order to successfully match
235. ersion 3 6 Using DeviceManager and WebManager Introduction The DeviceManager and WebManager IOLAN managers have been designed to be very similar to use DeviceManager is a Windows based application and WebManager is a browser based application Both options use the IOLAN s IP address to access the IOLAN the DeviceManager can be used to assign an IP address to anew IOLAN and the WebManager requires that the IOLAN already have an IP address before it can be used to configure the IOLAN When using WebManager you are required to click the Apply button each time you make a change to a configuration window tab In DeviceManager you must download your configuration changes to the IOLAN either periodically or after you are done with the configuration changes From both managers you must reboot the IOLAN in order for you configuration changes to take effect IOLAN SDS SCS STS User s Guide Version 3 6 73 Navigating DeviceManager WebManager Navigating DeviceManager WebManager The DeviceManager and WebManager have very similar navigation methods The left hand side of the manager is the navigation tree and the center is the configuration area The DeviceManager has menu and guick access buttons whereas the WebManager has system information and some navigation options on the far right hand side DeviceManager 74 The DeviceManager uses a folder page navigation tree You can expand the folders to see the available configuration pag
236. es When you access a configuration page you can often navigate the tabs in the configuration area to access all of the configuration options DeviceManager Tracy SDS2 10 10 200 25 Connected 0 gg Menu Quick Access Buttons D 1 System Info E Configuration Ip CO Network Ip CO Serial e Users Ip CO Security 3 Clustering Hy System Control il Statistics ji Navigation Tree System Info Name Tracy SDS2 Model IOLAN SDS2 Firmware 3 3 Build 1 Uptime 02 41 41 MAC Address 00 80 D 4 06 00 02 IPv4 Address 10 10 200 25 IPv6 Address es fe80 280 d4ff fe06 2 I Configuration Area Download All Changes IOLAN SDS SCS STS User s Guide Version 3 6 Navigating DeviceManager WebManager WebManager The WebManager uses a expandable collapsible buttons with folders and pages for the navigation tree You can expand the buttons to view the folders and pages to see the available configuration options When you access a configuration page you can often navigate the tabs in the configuration area to access all of the configuration options WebManager Logged in as admin Server Info Summary Model IOLAN SDS2 ox Version 33A1 MAC Address 00 80 d4 06 00 02 System Name System Name Tracy SDS2 Tracy SDS2 Uptime 0 Days 2 Hours 41 Minutes 11 Seconds IPv4 Address 10 10 200 25 Model IOLAN SDS2 Version 33 T T IP Address Co
237. ess is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Subnet Mask The network subnet mask For example 255 255 0 0 If your user is authenticated by RADIUS and the RADIUS parameter Framed Netmask is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here 143 Serial Port Profiles 144 MTU Routing VJ Compression The Maximum Transmission Unit MTU parameter restricts the size of individual SLIP packets being sent by the IOLAN Enter a value between 256 and 1006 bytes for example 512 The default value is 256 If your user is authenticated by the IOLAN this MTU value will be overridden when you have set a Framed MTU value for the user If your user is authenticated by RADIUS and the RADIUS parameter Framed MTU is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Default 256 Determines the routing mode RIP Routing Information Protocol used on the SLIP interface as one of the following options e None Disables RIP over the SLIP interface e Send Sends RIP over the SLIP interface e Listen Listens for RIP over the SLIP interface e Send and Listen Sends RIP and listens for RIP over the SLIP interface This is the same function as the Framed Routing attribute for RADIUS authenticated users Default None When enabled
238. et daemon process in the IOLAN listening on TCP port 23 Default Enabled TruePort Full The TruePort daemon process in the IOLAN that supports TruePort Full Mode Mode on UDP port 668 You can still communicate with the IOLAN in Lite Mode when this service is disabled Default Enabled Syslog Client Syslog client process in the IOLAN Default Enabled Modbus Modbus daemon process in the IOLAN listening on port 502 Default Enabled SNMP SNMP daemon process in the IOLAN listening on port 161 Default Enabled 230 IOLAN SDS SCS STS User s Guide Version 3 6 Services DeviceManager WebManager HTTP WebManager HTTPS SSH Server SNTP Client Dynamic Routing RIP IPsec DeviceManager daemon process in the IOLAN If you disable this service you will not be able to connect to the IOLAN with the DeviceManager application The DeviceManager listens on port 33812 and sends on port 33813 Default Enabled WebManager daemon process in the IOLAN listening on port 80 Default Enabled Secure WebManager daemon process in the IOLAN listening on port 443 Default Enabled If you are using the WebManager in secure mode HTTPS you need to download the SSL TLS private key and certificate to the IOLAN You also need to set the SSL Passphrase parameter with the same password that was used to generate the key See Keys and Certificates on page 232 for more information SSH daemon process in the IOLAN listening on TCP p
239. eter or RADIUS Framed Routing parameter if set override the serial port Routing parameter for a connection 93 Advanced 94 Field Descriptions Host Table Route List DNS WINS RIP Dynamic DNS IPv6 Tunnels Ethemet Mode None v Authentication Method None O Password Configure the appropriate parameters Ethernet Mode Authentication Method Password Confirm Password ID Start Date Start Time End Date Enable disable RIP Routing Information Protocol mode for the Ethernet interface Data Options e None Disables RIP over the Ethernet interface e Send Sends RIP over the Ethernet interface e Listen Listens for RIP over the Ethernet interface e Send and Listen Sends RIP and listens for RIP over the Ethernet interface Default None Specify the type of RIP authentication Data Options e None No authentication for RIP e Password Simple RIP password authentication e MD5 Use MDS RIP authentication Default None Specify the password that allows the router tables to be updated Retype in the password to verify that you typed in it correctly The MD5 identification key The start date that the MD5 key becomes valid The date format is dependent on your system s settings The time that the MD5 key becomes valid The time format is dependent on your system s settings The last day that the MD5 key is valid The da
240. ets lt gt for example ESC b is lt 027 gt b Default menu When a user connects to the IOLAN through the network the string is used to access the Reverse Session Menu Data Options You can specify control unprintable codes by putting the decimal value in angle brackets lt gt for example ESC b is lt 027 gt b Default 026 s Ctrl z s Power Management Users accessing the IOLAN through the network can enter the string to bring Menu String Monitor Connection Interval Status up the Power Bar Management menu Data Options You can specify control unprintable codes by putting the decimal value in angle brackets lt gt for example ESC b is lt 027 gt b Default 016 Ctrl p Specify how often in seconds the IOLAN will send a TCP Keepalive to services that support TCP Keepalive Default 30 seconds 187 Advanced Modems Tab 188 Overview You need to configure a modem if there is a modem connected to the IOLAN If your IOLAN model contains an internal modem or a PCI slot SCS models for a modem card a permanent modem string called internal_modem or IOLAN modem respectively exists permanently in your configuration Functionality Modems are usually configured for PPP SLIP dial in out connections although some modems do support raw data communication When you click on the Modems tab you will see the following Advanced Settings Modems TruePort Baud Rate
241. etting Started 71 Setting Up Users Setting Up Users When you have a user who is accessing a device connected to a serial port from the network or who is accessing the network from a device connected to a serial port through the IOLAN you can create a user account and configure the user s access privileges Notice that there is a Default user the Default user s parameters are inherited by users logging into the IOLAN who are being authenticated by an external authentication method see Authentication on page 203 for more information or are accessing the IOLAN as a Guest see Local on page 205 for more information To add a user account click on the Users page in the navigation pane amp 4 Configuration Gy Network Users 3 IP Settings EE Ee E EE as D Advanced Name Level Access to Clustered Ports B Serial admin Admin Yes DN Serial Ports Default Normal Yes 3 Port Buffering ecurity 3 Clustering A Option Card HG System Add Ed Delete Click the Add button to create a user account User Settings General Services Advanced Sessions Serial Port Access User Name Password Confirm Password Level To quickly add a user fill out the field in the General tab and click OK See Chapter 8 Configuring Users on page 191 for more information about the other user parameters you can configure 72 IOLAN SDS SCS STS User s Guide V
242. etwork TruePort The TruePort profile configures a serial port to connect network servers or workstations running the TruePort software to a serial device as a virtual COM port This profile is ideal for connecting multiple serial ports to a network system or server TCP Sockets The TCP Sockets profile configures a serial port to allow a serial device to communicate over a TCP network The TCP connection can be configured to be initiated from the network a serial device connected to the serial port or both This is sometimes referred to as araw connection or a TCP raw connection UDP Sockets The UDP Sockets profile configures a serial port to allow communication between the network and serial devices connected to the IOLAN using the UDP protocol Terminal tThe Terminal profile configures a serial port to allow network access from a terminal connected to the IOLAN s serial port This profile is used to access predefined hosts on the network from the terminal Printer The Printer profile configures a serial port to support a serial printer that can be accessed by the network Serial Tunneling The Serial Tunneling profile configures a serial port to establish a virtual link over the network to a serial port on another IOLAN Both IOLAN serial ports must be configured for Serial Tunneling typically one serial port is configured as a Tunnel Server and the other serial port as a Tunnel Client IOLAN SDS SCS STS User s Guide Ver
243. etwork Notice also that the serial devices connected to the IOLAN can be accessed by the VPN tunnel since they are included in the network configuration as part of the 172 16 45 0 subnetwork n External IP Address External IP Address n 196 15 23 56 199 15 23 56 Right E Remote VPN A N Router Gateway Left d Pe gt x EH H 172 16 45 1 172 16 45 99 192 168 45 99 5h M 192 168 45 45 Unencrypted IPsec Tunnel Encrypted Data Data Unencrypted Data e m r 7 amm 172 16 45 23 172 16 45 84 192 168 45 87 192 168 45 12 1 Configure the IPsec tunnel in the IOLAN IPsec Tunnel IPsec Tunnel Name Net to Net Authentication Method X508 Certificate w Remote Validation Criteria Secret Local Device IOLAN Left Right Local Remote IP Address 172165451 IP Address 198152356 ExtemalIP 196152356 External IP Address Address NextHop 172184538 Next Hop 0 0 0 0 Host Network 172 16 45 0 Host Network 192 168 45 0 ress Add Address IPv4 Subnet 255 255 IPv4Subnet 255 255 Mask E a Mask IPv6 Subnet IPv5 Subnet Bits J Bits Boot Action Cancel 2 Click the Remote Validation Criteria button and enable and populate the fields that are required for the remote X 509 certificate validation If you just want to validate the X 509 certificate signer you do not need to enable any of the remote validation criteria fields 330 IOLAN Device Server User s Gu
244. evice requiring that it respond with a valid username and password A timer operates during which successful authentication must take place If the timer expires before the remote end has been authenticated successfully the link will be terminated e CHAP challenges a client device at regular intervals to validate itself with a username and a response based on a hash of the secret password A timer operates during which successful authentication must take place If the timer expires before the remote end has been authenticated successfully the link will be terminated Default CHAP IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles User Password Remote User Complete this field only if you have specified PAP or CHAP security protocols in the Authentication field and you wish to dedicate this line to a single remote user who will be authenticated by the IOLAN or you are using the IOLAN as a router back to back with another IOLAN When Connect is set to Dial Out or both Dial In Dial Out are enabled the User is the name the remote device will use to authenticate a port on this IOLAN The remote device will only authenticate your IOLAN s port when PAP or CHAP are operating You can enter a maximum of sixteen alphanumeric characters for example tracy201 When connecting together two networks enter a dummy user name for example DS_HQ Note If you want a reasonable level of security the user
245. f the IOLAN end of the PPP link For Interface Identifier routing to work you must enter a local IP address Choose an address that is part of the same network or subnetwork as the remote end Do not use the IOLAN s main IP address in this field if you do so routing will not take place correctly Field Format The first 64 bits of the Interface Identifier must be zero therefore abcd abcd abcd abcd is the expected format 145 Serial Port Profiles 146 IPv6 Remote Interface Identifier ACCM MRU Authentication The remote IPv6 interface identifier of the remote end of the PPP link Choose an address that is part of the same network or subnetwork as the IOLAN If you enable Negotiate IP Address Automatically the IOLAN will ignore the remote IP address value you enter here and will allow the remote end to specify its IP address If your user is authenticated by RADIUS and the RADIUS parameter Framed Interface ID is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Field Format The first 64 bits of the Interface Identifier must be zero therefore abcd abcd abcd abcd is the expected format Specifies the ACCM Asynchronous Control Character Map characters that should be escaped from the data stream Field Format This is entered as a 32 bit hexadecimal number with each bit specifying whether or not the corresponding character should be escaped The bi
246. fault Disabled Enable TCP Enables a per connection TCP keepalive feature After the configured number Keepalive of seconds the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized This parameter needs to be used in conjunction with Monitor Connection Status Interval parameter found in the Serial Advanced Advanced Settings tab The interval specifies the inactivity period before testing the connection Default Disabled 124 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Enable Data Logging Idle Timeout Session Timeout Dial In Dial Out Dial Timeout Dial Retry Modem Phone When enabled serial data will be buffered if the TCP connection is lost When the TCP connection is re established the buffered serial data will be sent to its destination this option is not available when Monitor DSR Monitor DCD or Multihost is enabled The data buffer is 4K for desktop models and 32K for rack mount models If the data buffer is filled incoming serial data will overwrite the oldest data Default Disabled Use this timer to close a connection because of inactivity When the Idle Timeout expires the IOLAN will end the connection Range 0 4294967 seconds about 49 days Default 0 seconds so the port will never timeout Use this timer to forcibly close the session connection
247. fresh Button Resets the highlighted channel click on a channel to highlight it Clears the alarm Note that if the condition that tripped the alarm still exists the alarm will not look like it s cleared but will reflect the appropriate alarm level severity Alarm Level 0 means that the alarm has not been triggered Clears the latched value Clears the minimum value Clears the maximum value Manually activates the channel output Manually deactivates the channel output Resets all the channels Resets the highlighted channel click on a channel to highlight it IOLAN SDS SCS STS User s Guide Version 3 6 IPsec Tunnel Control IPsec Tunnel Control You can start stop and restart all the IPsec tunnels When you start the IPsec tunnels the Boot Action configured for each IPsec tunnel is what determines its state Start Stop All IPsec Tunnels Start all IPsec tunnels Stop all IPsec tunnels Stop start all IPsec tunnels The following buttons are available Start Button Starts all IPsec VPN tunnels Stop Button Stops all IPsec VPN tunnels Restart Button Stops and then starts all IPsec VPN tunnels 307 IPsec Tunnel Control 308 IOLAN SDS SCS STS User s Guide Version 3 6 System Administration Introduction This chapter addresses the functions that the Admin user or a user with Admin Level privileges might do This chapter uses the DeviceManager as the configuration method described in most a
248. g SSL TLS A These settings are global and apply to all serial ports configured as a Modbus Gateway Advanced Modbus Settings Idle Timerout 10 seconds Character Timeout 30 milliseconds v Enable Modbus Exceptions Message Timeout 1000 milliseconds Configure the following parameters Idle Timeout Enable Modbus Exceptions Use this timer to close a connection because of inactivity When the Idle Timeout expires the IOLAN will end the connection Range 0 4294967 seconds about 49 days Default 0 zero which does not timeout so the connection is permanently open Click this button to launch the Destination Slave IP Settings window where you can configure the TCP Ethernet Modbus Slaves that the Modbus Master on the Serial Port will communicate with Character Timeout Used in conjunction with the Modbus RTU protocol specifies how long to Message Timeout wait in milliseconds after a character to determine the end of frame Range 10 10000 Default 30 ms Time to wait in milliseconds for a response message from a Modbus TCP or serial slave depending if the Modbus Gateway is a Master Gateway or Slave Gateway respectively before sending a Modbus exception Range 10 10000 Default 1000 ms IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Modbus Slave IP Settings Field Descriptions This window is used to configure the Modbus Slaves Destination Slave IP Sett
249. g managing the IOLAN Menu a window oriented menu interface for configuration and user access CLI a Command Line Interface option for configuration management and user access SNMP allowing remote configuration via SNMP as well as statistics gathering DHCP BOOTP a method of automatically updating the IOLAN IOLAN interface for IOLAN users IOLAN models with 16 ports or fewer can be configured using the IOLAN menu General Features Basic IOLAN software features are available on all IOLAN models IPv6 support Support for TCP IP and UDP protocols including telnet and raw connections Printer support via LPD and RCP Virtual modem emulation Fixed tty support for several operating systems using Perle s TruePort utility DHCP BOOTP for automated network based setup Dynamic statistics and line status information for fast problem diagnosis Multisession support when accessing the IOLAN from either the serial port or the network Modbus master slave gateway support An SDK for custom programs and plugin support I O interface on the IOLAN I O models Analog Temperature Digital and Relay Ability to disable services for example Telnet TruePort Syslog SNMP Modbus HTTP for additional security Introduction 29 IOLAN Features Advanced Features Advanced IOLAN software features can be found on all IOLAN models except DS and TS models External authentication using any of the following systems RADIUS Ke
250. g on Off Button Turns the selected plug off Cycle Button Turns the selected plug off and then on Power Plug Status Displays a window that provides the plug status for every plug associated with Button the serial port Power Plug Status This Power Plug Status window displays the status of all the plugs associated with a serial port Power Plug Status Serial Port 1 Serial Name My Power Bar Model RPS820 RPS Plug Plug Name Status Click OK to close this window 305 VO Channels VO Channels Overview When the DeviceManager is connected to an I O model IOLAN the I O Status Control option is available You can view the I O status and manually control such options as clearing alarms clearing minimum maximum values resetting the channel s and activating deactivating output 1 0 Channel Status Channel Type Description Value Minimum Maximum Latched Value Alarm A1 Input thermocouple 93 73 83 38 242 43 Level 1 A2 Input pen 59 38 305 25 Level 0 A3 Input pen 59 38 305 25 Level 0 Ad Input Open 59 38 305 25 Level 0 1 0 Channel Control Reset Channel Clear Alarm Clear Minimum Value Reset All Channels Clear Maximum Value The following buttons are available Reset Channel Button Clear Alarm Button Clear Latched Input Button Clear Minimum Value Button Clear Maximum Value Button Activate Output Button Deactivate Output Button Reset All Channels Button Re
251. ggered Range 1 9999 Default 30 seconds 239 Settings UDP Functionality 240 Overview The UDP tab configures the I O UDP broadcast settings The I O UDP broadcast feature periodically broadcasts the I O channel status in a UDP message You can configure up to four sets of IP address entries each entry consisting of a start and end IP address range to broadcast I O status data The broadcast frequency of the UDP packets to the configured UDP IP addresses can be defined to accommodate network traffic and monitoring PC application requirements For details of the UDP I O datagram see I O UDP on page 264 Field Descriptions VO Access Failsafe Timer UDP UDP Broadcast Enable UDP Broadcast of 1 0 Status Broadcast Interval 30 seconds Settings Configure the following parameters Enable UDP Enables disables UDP broadcast of I O channel status data Broadcast of HO Default Disabled Status Broadcast Interval Enter the interval in seconds for UDP broadcasts of I O channel status data Range 1 9999 Default 30 seconds Settings Button Click this button to configure the UDP IP addresses that will receive the I O status information See I O UDP Settings on page 241 for field descriptions for the I O UDP Settings window IOLAN SDS SCS STS User s Guide Version 3 6 Settings VO UDP Settings VO UDP Settings UDP Entry 1 UDP Entry 2 UDP Entry 3 UDP Entry 4 Co
252. ggered when the input drops below the specified Trigger value other severity level trigger values must decrease in value with each subsequent level If the Trigger Type is High an alarm is triggered when the input is higher than the specified Trigger value other severity level trigger values must increase in value with each subsequent level 262 IOLAN SDS SCS STS User s Guide Version 3 6 Channels Trigger Clear Email Syslog SNMP If the Trigger Type is Low an alarm is triggered when the input drops below the specified Trigger value other severity level trigger values must decrease in value with each subsequent level If the Trigger Type is High an alarm is triggered when the input is higher than the specified Trigger value other severity level trigger values must increase in value with each subsequent level To clear an alarm the input must drop below the specified value when Trigger Type is High or go above the specified value when Trigger Type is Low When enabled sends an email alert to an email account s set up in the System settings when an alarm is triggered or cleared The email alert data includes the severity level and the value that caused the alarm to trigger or clear The Email Alert is associated with Level Critical Default Disabled When enabled sends a message to syslog when an alarm is triggered or cleared The syslog entry includes the severity level and the value that caused the alarm to trigg
253. gnal Always On Always On O Acts as DCD O Acts as DCD O Acts as RI O Acts as RI DCD Signal Always On On when host connection established Additional modem initialization Virtual Modem Features C Enable Message of the Day MOTD C Enable TCP Keepalive AT Command 250 miliseconds Response Delay pue Configure the following parameters Echo characters in When enabled echoes back characters that are typed in equivalent to command mode ATEO ATEI commands Default Disabled DTR Signal Always Specify this option to make the DTR signal always act as a DTR signal On Default Enabled DTR Signal Acts as Specify this option to make the DTR signal always act as a DCD signal DCD Default Disabled 155 Serial Port Profiles 156 DTR Signal Acts as Specify this option to make the DTR signal always act as a RI signal RI Default Disabled RTS Signal Always Specify this option to make the RTS signal always act as a RTS signal On Default Enabled RTS Signal Acts as Specify this option to make the RTS signal always act as a DCD signal DCD Default Disabled RTS Signal Acts as Specify this option to make the RTS signal always act as a RI signal RI Default Disabled DCD Signal Always When you configure the DTR or RTS signal pin to act as a DCD signal enable On this option to make the DCD signal always stay on Default Enabled DCD Signal On When you configure the DTR or RTS signal pin to act as a DC
254. gs depending on what has been configured through any of the following methods You can push in the recessed button at the back of the IOLAN hardware for three to ten seconds pushing it in and then quickly releasing will just reboot the IOLAN DeviceManager select Tools Reset Reset to Factory Defaults CLI at the command line type reset factory WebManager select Administration Reset Factory Default and then click the Reset to Factory Defaults button Menu select Network Configuration Reset to Factory Defaults SNMP in the adminInfo folder Set the adminFunction variable to 2 319 Lost Admin Password Lost Admin Password If the Admin user password is lost there are only two possible ways to recover it e reset the IOLAN to the factory defaults e have another user that has admin level rights if one is already configured reset the Admin password 320 IOLAN SDS SCS STS User s Guide Version 3 6 Applications Introduction This chapter provides examples of how to integrate the IOLAN within different network environments or applications Each scenario provides an example of a typical setup and describes the configuration steps to achieve the IOLAN functionality feature Configuring Modbus Overview This sections provides a brief overview of the steps required to configure the IOLAN for your Modbus environment You can read the Modbus Gateway Settings on page 322 and Modbus Serial Port Settings on page 323 se
255. h TruePort using the Perle API The API uses the command response format See the ioapiotp c sample program found on the product CD ROM for an example implementation API Request Format All data in the Request must be sent as a single write to the COM port The API command takes the following format Number of Bytes Value 1 Function Code in hex e 01 Get read write boolean register e 03 Get read write register e 04 Get read only register e 15 Set read write boolean register OxOF e 16 Set read write register 0x10 2 Starting register number see A4 T4 Registers on page 270 A4D2 A4R2 Registers on page 271 or D4 D2R2 Registers on page 272 for this value 2 Number of registers to act on starting from the register defined in byte 2 above n Data for write Some values must be read written as a unit consisting of 2 consecutive registers If the request is to write the data to write follows the number of registers If accessing registers consisting of 2 bytes or 4 bytes the data is in big endian network order format API Response Format The API command takes the following response format Number of Bytes Value 1 Function code of request if no error Most significant bit will be set if an error occurred 1 Length of data in response if no error occurred If an error occurred the byte will contain the error code see the Error Codes table below n Data response for request the number of bytes is
256. hat it will accept a VPN connection from any host network this is necessary because the Left IOLAN VPN gateway is DHCP assigned and cannot be known Also note that Boot Action on the Left IOLAN VPN gateway is set to Start meaning that it will try to initiate the VPN connection while the Boot Action on the Right IOLAN VPN gateway is set to Add which will listen for a VPN connection request 3 Enable the IPsec service found in Security Services 332 IOLAN Device Server User s Guide Version 3 6 Configuring a Virtual Private Network VPN Client to Network The following example shows how to configure a VPN client to network IPsec tunnel In this example the IOLAN will accept VPN connections from multiple VPN clients on private networks that want to access the public 199 24 0 0 subnetwork through the VPN gateway NAT Traversal NAT_T is disabled in this example on both sides because the VPN tunnel is going private network to public network n Initiate Communication n n gt Broadband H Router 199 24 10 10 VPN Client Router Right 172464545 172 16 45 99 199 24 10 1 IPsec Tunnel Encrypted Data Unencrypted Data D z 7 199 24 45 87 199 24 45 12 Configure the IPsec tunnel in the IOLAN IPsec Tunnel IPsec Tunnel Name VPNClient4o Net Authentication Method Shared Secret Secret je Local Device IDLAN O Left Right Local Remote IP Address 199 24 10 10 IP Address any Ext
257. hat the line sequence has not changed from the original file by comparing it to the original file Keep all translations in quotes otherwise the line will not display properly Each line must end with a carriage return If a line contains only numbers for example 38400 leave that line in place unchanged unless you are using a different alphabet Software Upgrades and Language Files If you receive a software upgrade for the IOLAN the language files supplied on the supplemental diskette CD might also have been updated We will endeavour to provide a list of those changes in another text file on the same supplemental CD If you are already using one of the supplied languages French or German you probably want to update the language file in the IOLAN Until you update the IOLAN with the new language file new text strings will appear in English If you are already using a language translated from an earlier version you probably want to amend your translation When a language file is updated we will try to maintain the following convention 1 New text strings will be added to the bottom of the file not inserted into the body of the existing file Existing text strings if altered will be altered in sequence that is in their current position in the file The existing sequence of lines will be unchanged Until you have the changes translated new text strings will appear in the Menu or CLI in English 317 Downloa
258. he channel in either mV or Ohms for example to calibrate for thermocouple J 0 to 760C you will be prompted to first apply 80mV and then 80mV to the channel Also you cannot actively calibrate disabled channels although if you enable the channel and then set it for the type of thermocouple or RTD that has already been calibrated on another channel it will also be calibrated Calibrating Thermocouple When calibrating the IOLAN Analog input for thermocouple you will need a calibration meter that is better than 15 accuracy When you calibrate one channel all thermocouple channels are automatically calibrated for that range if another channel is set for a different range you will need to calibrate that channel separately but all channels that use that range are automatically calibrated Calibrating RTD When calibrating the IOLAN Analog input for RTD you will need a resistor that is better than 05 Ohms accuracy When you calibrate one channel all RTD channels are automatically calibrated for that range if another channel is set for a different range you will need to calibrate that channel separately but all channels that use that range are automatically calibrated Calibrating Analog Channels Analog Input can be calibrated for Analog and Temperature IOLAN models Calibrate VO Channel Cancel Select the channel you want to calibrate This example uses an A4 model that has channel A1 set to Current with a Range of 0 to 2
259. he IOLAN Local others in RADIUS Data Options None Local RADIUS Kerberos LDAP TACACS SecurID NIS Default None Click this button to configure the authentication method The secondary authentication method will be tried only when the IOLAN cannot communicate with the primary authentication host Default Disabled When enabled the IOLAN will only authenticate the admin user in the local user database regardless of any external authentication methods configured When disabled a user called admin must exist when only external authentication methods are configured or you will not be able to access the IOLAN as the admin user except through the console port Default Enabled IOLAN SDS SCS STS User s Guide Version 3 6 Authentication Local Overview When Local authentication is selected the user must either be configured in the IOLAN s User List or you must enable Guest users Field Descriptions I OK Cancel Configure the following parameters Enable Guest Mode Allow users who are not defined in the Users database to log into the IOLAN with any user ID and the specified password Guest users inherit their settings from the Default User s configuration Default Disabled Guest Password The password that Guest users must use to log into the IOLAN Confirm Password Type the Guest Password in again to verify that it is correct 205 Authentication RADIUS 206 Overview RADIUS is
260. he IOLAN entry and edit any information and then click Update to make the edits permanent 310 IOLAN SDS SCS STS User s Guide Version 3 6 Managing Configuration Files 4 Click the Download button to start the download process A status window will display with the configuration download status Download Configuration to Multiple Units IP Address Server Name Status 11 1 1 1 22222 ACCOUNTING SDS Uploading Configuration Files When you upload a configuration to the DeviceManager you are uploading the IOLAN s working configuration file In most other configurators the exception being SNMP you are always seeing the working configuration file In DeviceManager select Tools Upload Configuration from IOLAN The working configuration file will automatically be loaded into the DeviceManager Specifying a Custom Factory Default Configuration When you receive the IOLAN it comes with a factory default configuration that it can be reset to at any time Administrators might find it useful to customize the factory default configuration file so that if the IOLAN gets reset to its factory defaults it will be reset to defaults that the Administrator specified There are two ways you can set the custom factory default configuration Download a file to the IOLAN You can download a custom factory default file to the IOLAN using any of the configuration methods In DeviceManager you must connect to the IOLAN and then selec
261. he Relay channel is deactivated when the Analog channel sends a clear syslog message to the Monitoring Application and the Relay channel is deactivated A4D2 Relay amp Relay VO Analog Monitoring TORAN Rony Application Industrial Freezers 251 Channels 252 Field Descriptions m General VO Extension Relay R1 Description Relay Settings Output Failsafe Action Manual v None v Configure the following parameters Description Output Pulse Mode Pulse Count Inactive Signal Width Provide a description of the channel making it easier to identify Data Options Maximum 20 characters including spaces Specify how the channel output will be handled Data Options e Manual You must manually manipulate the channel output e Pulse Activates and deactivates the channel output activity in intervals after it is manually activated e Inactive to Active Delay The channel output will remain inactive for the specified time interval after it is manually started Active to Inactive Delay tThe channel output will go inactive after the specified time interval after it is manually started Default Manual When Output is set to Pulse you can specify the manner of the pulse Data Options e Continuous Continuously pulses active and inactive Count Pulses an active inactive sequence for the specified number of times Default Continuous
262. he clustering group Default Enabled 201 Adding Editing Users 202 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring Security Introduction The Security group includes the following configuration options Authentication When a serial port is configured for the 3 3 Security Console Management or TCP Sockets profile the user can be Authentication authenticated either locally in the IOLAN user profile or 2 SSH externally This option configures the external authentication B SSL TLS server See Authentication on page 203 for more information c e WN e SSH This configuration window configures the SSH server in E the IOLAN See SSH on page 213 for more information er j Exceptions e SSL TLS This configuration window configures global 2 Advanced SSL TLS settings which can be overridden on the serial port Services level See SSL TLS on page 216 for more information e VPN This configuration window configures the Virtual Personal Network VPN IPsec and L2TP IPsec tunnel parameters See VPN on page 221 for more information e Services This configuration window is used to enable disabled client and daemon services that run in the IOLAN See Services on page 230 for more information Authentication Authentication can be handled by the IOLAN or through an external authentication server Authentication is different from authorization which can restrict a user
263. he name of the user for whom you are downloading the SSH User Public or Private Key to the IOLAN Host Name The name of the host for which you are downloading the SSH Host Public or Private Key to the IOLAN IPsec Tunnel Name Select the IPsec tunnel that the RSA public key is being used to authenticate 233 Keys and Certificates 234 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring VO Interfaces Introduction 48 Configuration There is a line of IOLANS that can control monitor the following types H Network of I O 2 Serial e Analog Input Users W 0 Security e Digital Input Output Gy 1 0 Interfaces e Relay Output Settings e Temperature Input ij Channels Some of the models are I O combinations and some of the models support one I O type although all of the SDS I O models are extensions of the feature rich extended temperature SDS IOLAN IOLAN SDS SCS STS User s Guide Version 3 6 235 Settings Settings Overview The VO Interfaces Settings window configures the parameters that are global to all VO channels VO Access Functionality Field Descriptions VO Access Failsafe Timer UDP Temperature Choose the method in which the 1 0 interfaces are accessed via network by an external application v Enable 1 0 Access via Modbus protocol UID 1255 Advanced Slave Settings Available Network Access Allow Modbus TCP Application API v Allow Modbus RTU ASCII via
264. he network to a serial over a Console Management type session This can be useful when you have multiple users connecting to the same serial device and you wish to control the viewing and or the write to and from the device See the Multisessions and User Authentication parameters in the Console Management Profile on page 117 for the serial port settings Field Descriptions User Settings General Services Advanced Sessions Serial Port Access Read Write Read In ReadOu I I XI XI XI I I XI XI XI I I I I IIIIIIIIIIIIII CALICACIC ja u u u nn nn Allow Access to Clustered Ports Configure the following parameters Serial Port Access Specifies the user access rights to each IOLAN serial port device There can be multiple users connected to a particular serial device and these settings determine the rights of this user for any of the listed serial ports Data Options e Read Write The user has read and write access to the serial port e Read In The User will see data going to the serial port from all network connected users that have write privileges to this serial port e Read Out The user will have access to all data originating from the serial device Users can read data going in both directions by selecting both the Read In and Read Out options Default Read Write Allow Access to When enabled allows the user access to IOLANS that have been configured in Clustered Ports t
265. ication such as HyperTerminal or from a dumb terminal set the Port settings to 9600 Baud 8 Data bits No Parity 1 Stop Bits and No Hardware Flow control to connect to the IOLAN You can change these settings for future connections on the rack mount models the IOLAN must be rebooted for these changes to take place 3 When prompted type admin for the User and superuser for the Password You should now see the a prompt that displays the model type and port number for example SCS16 4 You are now logged into the IOLAN and can set the IP address by typing from the command line using the Command Line Interface CLI Type the following command set server internet dhcp bootp on 5 Type the following command save 6 Type the following command reboot 7 When the IOLAN reboots it will automatically poll for an IP address from the DHCP BOOTP server If the IOLAN has dual Ethernet each Ethernet connection will automatically be assigned an IP address you can access the IOLAN through either IP address 8 To view the DHCP BOOTP assigned IP address type the following command show interface ethernet If for some reason it cannot obtain an IP address from your DHCP BOOTP server you will have to either reconnect to the IOLAN on the console port and reboot it or push the Reset to Factory button to access the IOLAN You are now ready to configure the IOLAN See Chapter 3 Configuration Methods on page 43 for information on the
266. icteric EE 151 Functionality ERO 151 General Tab Field Descrotons see ee ee ee ee ee RA ee ee 152 Table of Contents Virtual Modem Profile sessies we de Ne Ek eN NW N N ed ed N ax EN nu ke ne 153 CV CI 153 Functionality NER N RE OE N 153 General Tab Field Descriptions iss EK EE EE GEKEER EERS ER enn 154 Advanced Tab Field Descrptons iese ee RA Re 155 Phone Number to Host Mapping sees ees ee ee ee Re ee ee ee ee 157 VModem Phone Number Ent 158 Control Signal I O Profile 158 EE 158 PUIG ie aie SE EE een 158 General Tab Field Descriptions ee ee ee ee ee 159 Input Signal Ee AR e E 159 Output Signal Field Descriptions i ee ee ee ee ee 161 Modbus Gateway Profile esses 162 1 AE OR 162 PUG ROT 162 General Tab Field Descripllotis iue cott tenete tnn 163 Advanced Field Descriptions EEN 164 Modbus Slave IP Settings Field Descriptions 165 Adding Editing Modbus Slave IP Settings 166 Modbus Slave Advanced Settings Field Descriptions 167 Power Management Profile eene 168 9 1 168 Ree jm 168 General Tab Field Descriptions ee ee ee ee ee ee 169 Editing Power
267. ide Version 3 6 Configuring a Virtual Private Network 3 Ifthe signer of the remote X 509 certificate has not already been included in the CA list file that has already been downloaded to the IOLAN you need to add append the signer of the X 509 certificate to the CA list file and then download the file to the IOLAN by selecting Tools Advanced Keys and Certificates In the Keys and Certificates window select Download SSL TLS CA and the file name and click OK Note that this file must be a concatenation of all certificate signers required for any SSL TLS LDAP SSH and or IPsec connections 4 Enable the IPsec service found in Security Services Host to Host The following example shows how to configure two IOLANs to work as VPN gateways for a host to host IPsec tunnel NAT Traversal NAT T is enabled in this example on both sides because the VPN tunnel is going private network to public network to private network In this example both of the IOLAN VPN gateways have a DHCP assigned IP address Left External IP Address External IP Address Right IOLAN VPN 196 15 23 56 199 24 23 88 IOLAN VPN Gateway DHCP assigned IP Router 172 16 45 99 192 168 45 99 K Unencrypted KE IPsec Tunnel Encrypted Data uia D i sA lt Gateway Router DHCP assigned IP 172 16 45 23 192 168 45 87 1 The following window configures the Left IOLAN VPN Gateway IPsec Tunnel IPsec Tunnel Name Left Authentication
268. ient MIB browser software Unique Features SNMP supports the following unique features You can configure SNMP traps e Since not all versions of SNMP support secure communication password parameters must be set using another configuration method Connecting to the IOLAN Using SNMP Before you can connect to the IOLAN through an SNMP Management tool or MIB browser you need to set the following components through another configuration method 1 Configure a known IP address on the IOLAN 2 Configure a read write user for SNMP version 3 or a community for SNMP version 1 or 2 on the IOLAN 3 Reboot the IOLAN to make sure the changes take effect To connect to the IOLAN through an SNMP Management tool or MIB browser do the following 1 Load the perle sds MIB file from the IOLAN CD ROM or Perle website into your SNMP manager this MIB works for all SDS SCS and STS models 2 Verify that the read write user for SNMP version 3 or a community for SNMP version 1 or 2 match the configuration on the IOLAN 3 Type in the IOLAN s IP address and connect to the IOLAN You are now ready to start configuring the IOLAN using SNMP Configuration Methods 57 SNMP Using the SNMP MIB 58 After you have successfully connected to the IOLAN through your SNMP Management tool or MIB browser expand the PERLE IOLAN SDS MIB folder to see the IOLAN s parameter folders Below is an example of the configurable parameters under th
269. ies to all VPN tunnels IPsec and L2TP IPsec X 509 Certificate Specify the remote X 509 certificate validation criteria that must match for successful authentication case sensitive Note that all validation criteria must be configured to match the X 509 certificate An asterisk is valid as a wildcard See Shared Secret Field Description on page 225 for more information See Remote Validation Criteria Field Descriptions on page 226 for more information on the X 509 certificate validation criteria Specify the unique IPv4 address that hosts accessing the IOLAN through the L2TP tunnel will use Field Format IPv4 address Specify the first IPv4 address that can be assigned to incoming hosts through the L2TP tunnel Field Format IPv4 address Specify the end range of the IPv4 addresses that can be assigned to incoming hosts through the L2TP tunnel Field Format IPv4 address Specify the authentication method that will be used for the L2TP tunnel Data Options CHAP PAP Both Default Both Exceptions allow specific hosts or any host in a network to access the IOLAN outside of a VPN tunnel This is especially useful when allowing local network hosts access to the IOLAN when VPN tunnels have been configured for remote user security Field Descriptions Define unsecure access to specific IP address or a networks These exceptions will apply to all VPN tunnels IPSec and L2TP IPSec Exception List IP Address Network
270. ill use to communicate to the client Default 0 When enabled allows a serial device connected to this serial port to communicate to multiple hosts Default Disabled Click this button to define the hosts that this serial port will connect to This button is also used to define the Primary Backup host functionality If the serial port hardware parameters have been setup to monitor DSR or DCD the host session will be started once the signals are detected If no hardware signals are being monitored the IOLAN will initiate the session immediately after being powered up Default Enabled Initiates a connection to the specified host when any data is received on the serial port Default Disabled Initiates a connection to the specified host only when the specified character is received on the serial port Default Disabled When this option is enabled the connection can be initiated by either the IOLAN or a host Default Disabled 127 Serial Port Profiles 128 Adding Editing Additional Hosts You can define a list of hosts that the serial device will communicate to or a primary backup host Connect to Additional Hosts Define additional hosts to connect to Establish connections to all hosts on the list Host TCP Port Add Define a primary host and a backup host to connect to Configure the following parameters Define additional hosts to connect to Add Button Edit Button
271. imary host once this is successfully done it gracefully shuts down the backup connection Default Disabled 122 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Primary Host Specify a preconfigured host that the serial device will communicate to through the IOLAN Default None TCP Port Specify the TCP port that the IOLAN will use to communicate to the Primary Host Default 0 Backup Host Specify a preconfigured host that the serial device will communicate to through the IOLAN if the IOLAN cannot communicate with the Primary Host Default None TCP Port Specify the TCP port that the IOLAN will use to communicate to the Backup Host Default 10000 Adding Editing a Multihost Entry When you click the Add or Edit button the Host Entry window appears The hosts in the multihost list must already be defined If you add a host that was defined with its fully qualified domain name FQDN it must be resolvable by your configured DNS server Host Entry Host None TCP Pott 10000 l DK Close Configure the following parameters Host Name Specify the preconfigured host that will be in the multihost list Default None TCP Port Specify the TCP port that the IOLAN will use to communicate to the Primary Host Default 10000 serial port number 1 so serial port 47 defaults to 10046 123 Serial Port Profiles Advanced Tab Field Descriptions The TruePort Advanced tab determines
272. in RTS RxD EIA 485 Full Duplex Shield GND Power out Power in RxD IOLAN SDS SCS STS User s Guide Version 3 6 EIA 485 Half Duplex Shield GND Power out Power in Serial Pinouts RJ45 EIA 485 EIA 485 Pinout EIA 232 EIA 422 Full Duplex Half Duplex 15 RxD RxD 18 CTS 19 CTS 20 in DSR 21 TxD TxD DATA 22 TxD TxD DATA 25 RTS The power in pin pin 12 can be 9 30V DC This section defines the pinouts for the RJ45 connection see RJ45 SCS48C SCS32C SCS 16C SCS8C on page 354 for the SCS48C model 1 port 2 port and 4 port desktop IOLAN models have a 10 pin RJ45 connector and all rack mount IOLAN models have an 8 pin RJ45 connector These pinouts do not apply to I O models B ep B The following table provides pinout information Pinout Pinout EIA 485 EIA 485 10 pin 8 pin EIA 232 EIA 422 Full Duplex Half Duplex 1 Power In Power In Power In Power In 2 in 1 DCD 3 out 2 RTS TxD TxD DATA 4 in 3 DSR 5 out 4 TxD TxD TxD DATA 6 in 3 RxD RxD RxD 7 6 GND GND GND GND 8 in 7 CTS RxD RxD 9 out 8 DTR 10 Power out Power out Power out Power out The power in pin Pin 1 can be 9 30V DC The 2 port IOLAN has power in on Port 2 only The 4 port IOLAN has power in on Port 4 only Pinouts and Cabling Diagrams 353 Serial Pinouts RJ45 SCS48C SCS32C SCS16C SCS8C This section defines the pinouts for the RJ45 connection for the SCS48C SCS32C SCS
273. in the IOLAN to automatically synchronize the IOLAN s time Network Time Time Zone Summer Time SNTP Settings SNTP Mode None v Configure the following parameters SNTP Mode SNTP Version Primary Host Secondary Host The SNTP mode Data Options None SNTP is turned off e Unicast Sends a request packet periodically to the Primary host If communication with the Primary host fails the request will be sent to the Secondary host e Multicast Listen for any broadcasts from an SNTP server and then synchronizes its internal clock to the message Anycast Sends a request packet as a broadcast on the LAN to get a response from any SNTP server The first response that is received is used to synchronize its internal clock and then operates in Unicast mode with that SNTP server Default None Version of SNTP Range 1 4 Default 4 The name of the primary SNTP server from the IOLAN host table Valid with Unicast and Multicast modes although in Multicast mode the IOLAN will only accept broadcasts from the specified host SNTP server The name of the secondary SNTP server from the IOLAN host table Valid with Unicast and Multicast modes although in Multicast mode the IOLAN will only accept broadcasts from the specified host SNTP server 295 Management Time Zone Summer Time Tab Field Descriptions You can configure an automatic summer time daylight savings time time change EE ED Netwo
274. in the Subject field of the email notification This field can contain an email address that might identify the IOLAN name or some other value The email address to whom all replies to the email notification should go The SMTP host email server that will process the email notification request This can be either a host name defined in the IOLAN host table or the SMTP host IP address IOLAN SDS SCS STS User s Guide Version 3 6 Alerts Syslog Overview The IOLAN can be configured to send system log messages to a syslog daemon running on a remote host if the Syslog service is activated You can configure a primary and secondary host for the syslog information and specify the level for which you want syslog information sent Field Descriptions Syslog Level Send More Debug Info Notice Warning Error Critical Alert L gt Emergency Send Less Primary Host None L Configure the following parameters Primary Host Secondary Host Level The first preconfigured host that the IOLAN will attempt to send system log messages to messages will be displayed on the host s monitor Default None If the IOLAN cannot communicate with the primary host then the IOLAN will attempt to send system log messages to this preconfigured host messages will be displayed on the host s monitor Default None Choose the event level that triggers a syslog entry Data Options Emergency Alert Critical
275. in the values of multiple consecutive registers 6 1 The length of the data in bytes to be written to the registers 7 n n Data to be written to the registers If accessing registers which are 2 or 4 bytes the data is in Network order Big endian format that is MSB LSB For Boolean registers the value field will be a bit field with the LSBit corresponding to the IO channel referenced by the starting register 277 Accessing VO Data Via TruePort 278 Successful Response Format Bytes ofBytes Value 1 1 Command code from request 2 2 Starting register number see A4 T4 Registers on page 270 A4D2 A4R2 Registers on page 271 or D4 D2R2 Registers on page 272 for this value from reguest 4 2 Number of registers written Unsuccessful Response Format Bytes ofBytes Value 1 1 Command that this is a response to If an error has been detected the command value will have the high bit set OR with 0x80 For example The Command is Ox10 so the command field in the response would be 0x90 1 1 Error code see Error Codes on page 279 Example 1 Turn on the first relay on a D2R2 unit The first relay R1 is a digital out coil register with a decimal value of 6659 hex 0x1A03 Request OXOF Ox1A 0x03 0x00 0x01 0x01 0x01 Response OxOF 0x1A 0x03 0x00 0x01 Example 2 Turn on the first and second relay on a D2R2 unit The first relay R1 is a digital out coil register with a decimal value
276. individual I O channel register A sample program ioapiotp e demonstrating typical usage can be found on the IOLAN product CD ROM After TruePort has been properly installed and configured on the workstation or server and initiated from the application it will setup a connection to the appropriate IOLAN It will then be available to relay commands to the IOLAN and communicate responses back the application TruePort will create a COM port to which the application can write commands to and read responses from Since all communications are done via this COM port the application need only use standard serial communication interface calls The following steps should be taken 1 Install the Trueport software on the server or workstation on which the application will be running 2 Configure the virtual communication port COM see Trueport User Guide for details 3 Run the application Typically the application will a Open the COM port b Send Commands to the COM port using standard write commands c Read Responses from the COM port using standard read commands d Once the desired operations are completed the COM port can be closed 275 Accessing VO Data Via TruePort Format of API Commands There are two groups of commands e Get Commands Retrieve values of the I O channel registers e Set Commands Set values on the I O channel registers I O Channel registers are all assigned unique addresses which need to be referen
277. ing a Direct Serial Connection to Enable BOOTP DHCP 68 Using ARP PING EEN 69 For an IPV6 NetWork SE EE due aan anna anna nun 69 Setting Up the Serial Port s 70 Setting UP 1 72 72 Chapter 5 Using DeviceManager and WebManager 73 MIN Ged ON soos erc RN 73 Navigating DeviceManager WebManager 74 NEE EE 74 VUE ENT TE 75 EasyPor WED nennen nee 75 6 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Using DeviceManager to Connect to the IOLAN 76 Starting New Session kind ie N ro d A Ken au ca UN EAE 76 Assigning a Temporary IP Address to a New IOLAN 77 Adding Deleting Manual IOLANS uuusssssanssunnnnnnnnannnnnnnnnnnnnnnnnnnnnnnnnnn 78 Logging in to the IOLAN eere ie ds BG Ed N EE Ed EK EK EE GE N 78 Using WebManager to Connect to the IOLAN 79 Logging into the IOLAN nee ees RR RE RE RARR ERA EE KERE RE EER REG ee RR RE 79 GONNGUFAUON Fiese 79 Creating a New IOLAN Configuration in DeviceManager 79 Opening an Existing Configuration File 80 Importing an Existing Configuration File 80 Managing the JIOLAN series inner ES ee 80 Chapter 6 Network Settings
278. ing parameters IPv4 Local IP The IPV4 IP address of the IOLAN end of the PPP link For routing to work Address you must enter a local IP address Choose an address that is part of the same network or subnetwork as the remote end for example if the remote end is address 192 101 34 146 your local IP address can be 192 101 34 145 Do not use the IOLAN s main IP address in this field if you do so routing will not take place correctly IPv4 Remote IP The IPV4 IP address of the remote end of the PPP link Choose an address that Address is part of the same network or subnetwork as the IOLAN If you set the PPP parameter IP Address Negotiation to On the IOLAN will ignore the remote IP address value you enter here and will allow the remote end to specify its IP address If your user is authenticated by RADIUS and the RADIUS parameter Framed Address is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here The exception to this rule is a Framed Address value in the RADIUS file of 255 255 255 254 this value allows the IOLAN to use the remote IP address value configured here IPv4 Subnet Mask The network subnet mask For example 255 255 0 0 If your user is authenticated by RADIUS and the RADIUS parameter Framed Netmask is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here IPv6 Local The local IPv6 interface identifier o
279. ing the IOLAN from the Ethernet side connections Accessing the IOLAN Through a Serial Port Users This section describes the attributes which will be accepted by the IOLAN from a TACACS server in response to an authentication request for Direct Users Name Value s Description priv lvl 12 15 Admin The IOLAN privilege level 8 11 Normal 4 7 Restricted 0 3 Menu Perle_User_Service 0 Telnet Corresponds to the User Service setting in 1 Rlogin the IOLAN 2 TCP_Clear If no value is specified DSPrompt is the 3 SLIP default User Service 4 PPP 5 SSH 6 SSL_Raw service telnet Settings when Perle_User_Service is set to 0 addr IPv4 or IPv6 address port TCP port number service rlogin Settings when Perle_User_Service is set to 1 addr IPv4 or IPv6 address 342 IOLAN SDS SCS STS User s Guide Version 3 6 TACACS Name Value s Description service tcp_clear addr port service slip routing addr service ppp routing addr port ppp vj slot compression callback dialstring service ssh addr port service ss raw addr port IPv4 or IPv6 address TCP port number true Send and Listen false None IPv4 or IPv6 address true Send and Listen false None IPv4 or IPv6 address TCP port number true or false phone number no punctuation IPv4 or IPv6 address TCP port number IPv4 or
280. ings UID Start UID End Destination IP Address Protocol Port Dest Type Cancel The following buttons are available Add Button Adds an entry into the Modbus Destination Slave IP Settings table Edit Button Edits an entry in the Modbus Destination Slave IP Settings table Delete Button Deletes an entry from the Modbus Destination Slave IP Settings table 165 Serial Port Profiles Adding Editing Modbus Slave IP Settings Destination Modbus Slave IP Settings UID Start 0 Destination O Gateway IP Address Start 0 0 0 0 Protocol TCP OUDP UDP TCP Port 502 Configure the following parameters UID Start UID End Type Start IP Address When Destination is set to Host and you have sequential Modbus Slave IP addresses for example 10 10 10 1 10 10 10 2 10 10 10 3 etc you can specify a UID range not supported with IPv6 addresses and the IOLAN will automatically increment the last digit of the configured IP address Therefore you can specify a UID range of 1 100 and the IOLAN will route Master Modbus messages to all Modbus Slaves with IP addresses of 10 10 10 1 10 10 10 100 Range 1 247 Default 0 zero When Destination is set to Host and you have sequential Modbus Slave IP addresses for example 10 10 10 1 10 10 10 2 10 10 10 3 etc you can specify a UID range not supported with IPv6 addresses and the IOLAN will automatically increment the last digit of the configur
281. inks provided on the Perle web site in the Support Services area Click here to access our website at the following URL http www perle com Troubleshooting 401 Contacting Technical Support Repair Procedure Before sending the IOLAN for repair you must contact your Perle supplier If however you bought your product directly from Perle you can contact directly Customers who are in Europe Africa or Middle East can submit repair details via a website form This form is on the Perle website www perle com in the Support Services area Click here to access our web site at the following URL http www perle com support_services rma_form asp Feedback on this Manual 402 If you have any comments or suggestions for improving this manual please email Perle using the following address Email ptac perle com Please include the title part number and date of the manual you can find these on the title page at the front of this manual IOLAN SDS SCS STS User s Guide Version 3 6 Glossary This chapter provides definitions for Device Server terms BOOTP BOOTstrap Protocol Callback CHAP Challenge Handshake Authentication Protocol Community SNMP DHCP Dynamic Host Configuration Protocol Direct Connection Ethernet Fixed Callback Local Authentication LPD Modem Initialization String MOTD Multicast NAK Negative Acknowledgment An Internet protocol that enables a diskless workstat
282. inout information Pinout Standard 802 3AF Unit 4 Wire 802 3AF Unit 8 Wire 1 Tx Tx Voltage Tx 2 Tx Tx Voltage Tx 3 Rx Rx Voltage Rx 4 N C Voltage 5 N C Voltage 6 Rx Rx Voltage Rx 7 N C Voltage 8 N C Voltage Pinouts and Cabling Diagrams 355 EIA 232 Cabling Diagrams EIA 232 Cabling Diagrams This section shows how to create EIA 232 cables that are compatible with the Device Server Terminal DB25 Connector The following diagrams show how the null modem cable should be configured when connecting to a terminal DB25 DB25 Male IOLAN DS1 Terminal DB25 DB25 DTE DTE MO 3 RxD 3 RxD 2 TxD 4 RTS 5 CTS 5 CTS 4 RTS 6 DSR 20 DTR 7 GND 7 GND 20 DTR 6 DSR DB25 Female IOLAN DS1 Terminal DB25 DB25 DCE DTE 3 TxD 3 RxD 2 RxD 2 TxD 5 RTS 5 CTS 4 CTS 4 RTS 20 DSR 20 DTR 7 GND 7 GND 6 DTR 6 DSR 356 IOLAN SDS SCS STS User s Guide Version 3 6 EIA 232 Cabling Diagrams RJ45 This cabling table does not apply to the SCS48C model Terminal DB25 IOLAN RJ45 DTE 10 pin 8 pin 4 DSR 3 20 DTR 3 RTS 2 5 CTS 5 TxD 4 3 RxD 6 RxD 5 2 TxD 7 GND 6 7 GND 8 CTS 7 4 RTS 9 DTR 8 6 DSR DB9 Male IOLAN DS1 Terminal DB25 DB9 Male DTE 3 TxD 3 RxD 2 RxD 2 TxD 7 RTS 5 CTS 8
283. input is active going inactive will trigger an alarm Active When the expected Digital input is inactive going active will trigger an alarm Default Disabled 246 IOLAN SDS SCS STS User s Guide Version 3 6 Channels Auto Clear Mode Manual Clear Mode Email Syslog SNMP When enabled automatically clears the alarm when the trigger condition changes for example if the Trigger is Inactive and the alarm is triggered once the input becomes active again the alarm will automatically be cleared Default Enabled When enabled a triggered alarm must be manually cleared Default Disabled When enabled sends an email alert to an email account s set up in the System settings when an alarm is triggered or cleared The email alert data includes the severity level and the value that caused the alarm to trigger or clear The Email Alert is associated with Level Critical Default Disabled When enabled sends a message to syslog when an alarm is triggered or cleared The syslog entry includes the severity level and the value that caused the alarm to trigger or clear The syslog message is associated with Level Critical Default Disabled When enabled sends an SNMP trap when an alarm is triggered or cleared The trap consists of the severity level and whether the alarm was triggered or cleared Default Disabled 247 Channels Digital Output 248 Overview When the channel is set for digital ou
284. ion HTTPS or SSL TLS If both RSA and DSA private keys are downloaded to the IOLAN they need to be generated using the same SSL passphrase for both to work 217 SSL TLS 218 Cipher Suite Field Descriptions The SSL TLS cipher suite is used to encrypt data between the IOLAN and the client You can specify up to five cipher groups Cipher Suite an Tita Key Size Max Key Size Key pum HMAC Any 40 256 Any Any Delete OK Cancel The following buttons are available on the Cipher Suite window Add Button Adds a cipher to the cipher list Edit Button Edits a cipher in the cipher list Delete Button Deletes a cipher to the cipher list Move Up Button Moves acipher up in preference in the cipher list Move Down Button Moves a cipher down in preference in the cipher list IOLAN SDS SCS STS User s Guide Version 3 6 SSL TLS Adding Editing a Cipher See Appendix B SSL TLS Ciphers on page 347 for a list of valid SSL TLS ciphers Cipher Suite Edit Encryption Min Key Size Max Key Size Key Exchange HMAC Configure the following parameters Encryption Min Key Size Max Key Size Key Exchange Select the type of encryption that will be used for the SSL connection Data Options Any Will use the first encryption format that can be negotiated AES 3DES DES ARCFOUR ARCTWO Default Any The minimum key size value that will be used for the specified encryption typ
285. ion option select Backup Restore 2 Browse to the configuration file that you want to download to the IOLAN 3 Click the Restore button 4 Reboot the IOLAN IOLAN SDS SCS STS User s Guide Version 3 6 309 Managing Configuration Files Downloading Configuration Files to Multiple IOLANs You can download a configuration file to multiple IOLANs at the same time by doing the following in DeviceManager DeviceManager is the only configurator that does this function 1 Select Tools Download Configuration to Multiple IOLANs 2 Specify the IOLANs that you want to download the configuration to Download Configuration to Multiple IOLANs Ip Address Server Name Password Reboot Server No v Cancel Enter the following information for each IOLAN that you want to configure with the same configuration file IP Address Enter the IP address of the IOLAN that you want to download the configuration to Field Format IPv4 or IPv6 address Server Name The name of the IOLAN The IOLAN name that you put in this field is passed into the configuration before it is downloaded to the IOLAN and cannot be left blank Password Enter the Admin user password for the IOLAN Reboot Server Determines whether or not the IOLAN is rebooted after it has received the new configuration The new configuration definitions will not go into effect until the IOLAN is rebooted 3 Click Add to add the IOLAN to the download list You can also click on t
286. ion to discover its own IP address the IP address of a BOOTP server on the network and a file to be loaded into memory to boot the machine This enables the workstation to boot without requiring a hard or floppy disk drive A security feature where the Device Server calls back the User at a predetermined number defined in the User s account Standard authentication protocol for PPP connections It provides a higher level of security than PAP and should be used whenever possible see PAP An SNMP community is the group that devices and management stations running SNMP belong to It helps define where information is sent A TCP IP protocol that provides static and dynamic address allocation and management Connections that bypass the Device Server enabling the user to log straight into a specific host A direct connection is recommended where a user logging in to the Device Server is not required A high speed 10Mbps 100Mbps cable technology that connects devices to a LAN using one or more sets of communication protocols A method where there is a specific number defined to callback a user Uses the user ID and password stored within the Device Server User database Line Printer Daemon A printer protocol that uses TCP IP to establish connections between printers and workstations on a network The technology was developed originally for BSD UNIX and has since become the de facto cross platform printing protocol A series of commands s
287. ions 40 56 64 128 168 256 Default 40 The maximum key size value that will be used for the specified encryption type Data Options 40 56 64 128 168 256 Default 256 The type of key to exchange for the encryption format Data Options e Any Any key exchange that is valid is used this does not however include ADH keys RSA This is an RSA key exchange using an RSA key and certificate EDH RSA This is an EDH key exchange using an RSA key and certificate e EDH DSS This is an EDH key exchange using a DSA key and certificate e ADH This is an anonymous key exchange which does not require a private key or certificate Choose this key if you do not want to authenticate the peer device but you want the data encrypted on the SSL TLS connection Default Any IOLAN SDS SCS STS User s Guide Version 3 6 Advanced HMAC Select the key hashing for message authentication method for your encryption type Data Options e Any e MD5 e SHAI Default Any Validation Criteria Field Descriptions If you choose to configure validation criteria the information in the peer SSL TLS certificate must match exactly the information configured in this window in order to pass peer authentication and create a valid SSL TLS connection SSL Validation Criteria CO Country CO State Province O Locality CO Organization C Organization Unit C Common Name C Email Configure the following paramet
288. ire to Al and the sense wire to Als PN E m sod EL TT ox X4 d LLI Eh ol 2 ZEILE ER N 372 IOLAN SDS SCS STS User s Guide Version 3 6 Wiring VO Diagrams RTD 4 Wire In a 4 wire RTD configuration connect the return wire to Al the excite wire to Al the sense wire to Als and leave the fourth wire disconnected 1 ma ia a a AA sa NAN e ec c0 et 4 oc TT od X lt lt TT TT lt lt Sof o bel EH E EI Kail E 8 215 Relay Output Normally Open Contact To connect Relay channel R1 for a circuit that is normally inactive connect one wire to the COM common connector and one wire to the NO normally open connector v ovo 22022 li x z Normally Closed Contact To connect relay channel R1 for a circuit that is normally active connect one wire to the COM common connector and one wire to the NC normally closed connector 2 O O vo 0220822 RI R2 VO Wiring Diagrams 373 Wiring VO Diagrams 374 IOLAN SDS SCS STS User s Guide Version 3 6 Introduction This chapter provides information on the TruePort and Decoder utilities TruePort TruePort is a com port redirector utility for the IOLAN It can be run in two modes e TruePort Full mode This mode allows complete device control and operates exactly like a directly connected serial port
289. is IP address or interface identifier should be on its own unique network that is not part of the local or remote networks In this example the local network has an IPv4 address of 172 16 0 0 16 and the remote network has an IPv4 address of 204 16 0 0 16 so we arbitrarily assigned the PPP IPv4 Local IP Address as 195 16 20 23 and the PPP IPv4 Remote IP Address as 195 16 20 24 PPP Settings IPv4 Local IP Address 195 16 20 23 IPv4 Remote IP Address 195 16 20 24 IPv4 Subnet Mask 25 25 25 0 325 Setting Up Printers 6 Next you need to create a gateway and destination route entry Select Network Advanced and the Route List tab For the destination if you want the connection to be able to reach any host in the remote network set the Type to Network and specify the network IP address and subnet prefix bits if you want the connection to go directly to a specific remote host set the Type to Host and specify the host s IP address We want a specific host to the be destination so we configured the Type as Host Destination Type Host O Network Default IP Address 204 16 25 72 We also need to create a Gateway entry using the same PPP IPv4 local IP address Any traffic that goes through the gateway will automatically cause PPP to dial out Gateway Host ppp gw v Host Entry Host Name ppp gw IP Address 195 16 20 23 Fully Qualified Domain Name resolved by DNS server Close
290. is shipped with the IOLAN it has a 12V DC output maximum output power is 1 one watt per a serial port By default the power out pin is set to no power You can set the IOLAN line termination to on or off this is o by default if you are using E1A 422 485 not applicable for VO models 1 Port IOLAN DB25 Male Female To change the settings do the following 1 Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following Screw a a gt Power g z2 ogo DIP 000 witch SIS S Smig d Reset 2 c 5 E 0 9 So RJ45 ki Screw 3 To change the power pin out locate J4 For the fixed 5V DC output jumper pins 1 and 2 For the output to equal the external adapter input jumper pins 2 and 3 4 To turn line termination on locate and jumper both J1 and J9 5 Close the IOLAN case by replacing the case lid and the two screws You can now power it on with the new settings IOLAN SDS SCS STS User s Guide Version 3 6 361 Introduction 1 Port IOLAN RJ45 To change the settings do the following 1 Unplug the IOLAN from the electrical outlet and disconnect everything from the box 2 Open the case by unscrewing the two side screws one on each side and lifting off the top of the case You should see the following
291. it Highlight a signal and then click the Edit button to configure the signal pin s parameters Input Signal Field Descriptions See Digital VO Extension on page 253 for information about the the VO Extension tab General VO Extension Digital Input DSR Description Digital Input Settings Latch None si C Invert Signal Alarm Settings Trigger Disabled v Configure the following parameters Description Provide a description of the channel making it easier to identify Data Options Maximum 20 characters including spaces Latch Latches remembers the activity transition active to inactive or inactive to active Data Options None Inactive to Active Active to Inactive Default None Invert Signal When enabled inverts the actual condition of the VO signal in the status therefore an inactive status will be displayed as active Default Disabled 159 Serial Port Profiles Trigger When the trigger condition is met triggers the specified alarm action Data Options e Disabled No alarm settings This is the default e Inactive When the expected Digital input is active going inactive will trigger an alarm Active When the expected Digital input is inactive going active will trigger an alarm Default Disabled Auto Clear Mode When enabled automatically clears the alarm when the trigger condition changes for example if the Trigger is Inactive and the alarm is triggered once
292. it in the 1 byte data section Length Pin Serial Pin Signal Data 1 Byte one bit for each signal Enabled 2 Bytes 1 Byte RTS DTR CTS DCD DSR e Length The total length of the Serial Pin Signal Data this value will always be 2 Bytes e Pin Enabled This based upon the configuration of the signal pins on the serial port When the serial port profile is set to Control I O and a serial pin signal s is enabled the bit is set to 1 For any serial pin signals that are disabled the bit is set to 0 zero and any data associated with those serial pin signals should be ignored Pin Enabled 1 Byte one bit for each serial pin signal RTS DTR CTS DCD DSR Serial Pin Signal Data 1 byte with each bit being set to high 1 or low 0 for the appropriate serial pin signals IOLAN SDS SCS STS User s Guide Version 3 6 VO Modbus Slave UDP Unicast Example For an example of the VO UDP unicast see the sample program ioudpbcast c found on your CD ROM VO Modbus Slave If you have a Modbus serial or TCP application it can access I O connected to the IOLAN when the VO Global Modbus Slave is enabled You must supply a unique UID for the IOLAN as it will act as a Modbus Slave VO Access Failsafe Timer UDP Choose the method in which the 1 0 interfaces are accessed via network by an external application Enable I O Access via Modbus protocol UI
293. k to Network E 330 ele ie sel EN 331 VPN Client to Network idee se ad ek en 333 Appendix A RADIUS and TACACSH 335 init gels U ie E 335 RADIUS ER 335 Supported RADIUS Parameters iese ees EE AR EE REGEER EE EE EE 335 ACCOUNTING MOSSAG TE 338 Mapped RADIUS Parameters to IOLAN Parameters 339 Perle RADIUS Dictionary Example EE EE Re ee ee ee 340 Table of Contents Ee oo AR EE EEN ee oe N E 342 Accessing the IOLAN Through a Serial Port Users 342 Accessing the IOLAN Through a Serial Port User Example SONGS cC Y 344 Accessing the IOLAN from the Network Users 345 Accessing the IOLAN from the Network User Example Settings 346 Appendix B SSL TLS Ciphers 347 Toile e 1 1 EEE NT 347 valid SSL TLS TE 347 Appendix C Virtual Modem AT Commands 349 Virtual Modem Initialization Commands 349 Appendix D Pinouts and Cabling Diagrams 351 Serial PINGUIS i conico SE Oe ee Esa Vw ERGE ORE REM RARE IMP Ad 351 DB25 Male ee EER EE Ge Gee ee 351 DB25 STEIER 352 nunc OE EN EE N OE EE EO 353 RJ45 SCS48C SCS32C SCS16C SCS8C eee eene 354 DBS Male Serial On iese EER RR RR ER Re uis EE PEE ER UE ee nnna 354
294. k10 100 1000 This LED indicates the Ethernet connection speed for rack mount models Green 10 100 Mbits Yellow 1000 Mbits Off no LAN connection e Power Ready This LED can cycle through several colors yellow green red during a boot process but should complete with a green light When the IOLAN has completed the power up cycle the LED will be steady green on rack mount modes On desktop models if the LED is green after power up but continues to cycle on and off flashes green this indicates that the console switch is in the on position You can learn more about the Power Ready LED in Hardware Troubleshooting on page 393 e External Power Supply This can be an external AC power supply DC terminal or power cord depending on your IOLAN model Hardware and Connectivity 33 Getting to Know Your IOLAN 1 Port 34 Console Serial Switch Found on desktop models only rack mount models have a dedicated console port this switch determines whether port 1 functions as a serial port or a console port If you have an extended temperature or I O model you will see two console switches Console Serial Switch 1 is used to determine the console serial setting for Port 1 and the Console Serial Switch 2 is not used Reset The inset RESET button will reboot the IOLAN if pushed in and released quickly It will reset the IOLAN to factory defaults if pushed in and held for more than three seconds Serial Activity
295. l Out or both Dial In Dial Out are enabled the User is the name the remote device will use to authenticate a port on this IOLAN The remote device will only authenticate your IOLAN s port when PAP or CHAP are operating You can enter a maximum of sixteen alphanumeric characters for example tracy201 When connecting together two networks enter a dummy user name for example DS HQ Note If you want a reasonable level of security the user name and password should not be similar to a user name or password used regularly to login to the IOLAN External authentication can not be used for this user 173 Serial Port Profiles 174 Password Remote User Remote Password Authentication Timeout Complete this field only if you have specified PAP or CHAP security protocols in the Security field and you wish to dedicate this serial port to a single remote user who will be authenticated by the IOLAN or you are using the IOLAN as a router back to back with another IOLAN Password means the following e When PAP is specified this is the password the remote device will use to authenticate the port on this IOLAN e When CHAP is specified this is the secret password known to both ends of the link upon which responses to challenges shall be based Field Format You can enter a maximum of 16 alphanumeric characters Complete this field only if you have specified PAP or CHAP security protocols in the Security field a
296. l R regardless of the Hotkey Prefix The User Hotkey Prefix value overrides the Serial Port Hotkey Prefix value You can use the Hotkey Prefix keys to lock a serial port only when the serial port s Allow Port Locking parameter is enabled Default Hex 01 Ctrl a or a 198 IOLAN SDS SCS STS User s Guide Version 3 6 Adding Editing Users Sessions Tab Overview The Sessions tab is used to configure specific connections for users who are accessing the network through the IOLAN s serial port Functionality Users who have successfully logged into the IOLAN User Service set to DSprompt can start up to four login sessions on network hosts These users start sessions through the Easy Port Menu option Sessions Multiple sessions can be run simultaneously to the same host or to different hosts Users can switch between different sessions and also between sessions and the IOLAN using Hotkey commands see Hotkey Prefix on page 198 for a list of commands Users with Admin or Normal privileges can define new sessions and use them to connect to Network hosts they can even configure them to start automatically on login to the IOLAN Restricted and Menu users can only start sessions predefined for them in their user configuration 199 Adding Editing Users Field Descriptions User Settings General Services Advanced Sessions Serial Port Access Predefined Outbound Sessions Sexson 1 Y C Connect Automatical
297. l port s must be set to the Console Management profile to support this type of connection 2 Once you have established a connection to a device you can enter the View Buffer String at any time to switch the display to the content of the port buffer for that particular serial port 3 To return to communicating to the device press the ESC key and the communication session will continue from where you left off To navigate through the port buffer data the following chart illustrates the keyboard keys or hot keys that can be used to view the port buffer data Press the ESC key and to continue to communicate with the device on that particular serial port Keyboard Buttons Hot Keys Direction Page Up lt CTRL gt B Up Page Down lt CTRL gt F Down Home lt CTRL gt T Top of the buffer data oldest data End lt CTRL gt E Bottom of the buffer latest data ESC Exit viewing port buffer data 183 Port Buffering Remote Port Buffers The Remote Port Buffering feature allows data received from serial ports on the IOLAN to be sent to a remote server on the LAN The remote server supporting Network File System NFS allows administrators to capture and analyze data and messages from the serial device connected to the IOLAN serial port Remote Port Buffering data can be encrypted or raw and or time stamped The data is transmitted to an NFS server where a unique remote file is created for each serial port using the co
298. ld be included in the TACACS user configuration file 346 12 15 Admin 8 11 Normal 4 7 Restricted 0 3 Menu port number Disabled Read Write Read Input Read Input Write Read Output Read Output Write Read Output Input Read Output Write session timeout in seconds OU DUN HO Settings for telnet SSH access service raccess priv lvl x x x x x Perle_Line_Access_i x i x x x x x x x x timeout x x idletime x x Perle Clustered Port Access x Idle timeout in seconds 0 Disabled I dx dx Enabled Settings for WebManager and service EXEC priv lvl 12 x Perle Line Access i x x x NW NS X X E ll DeviceManager access 12 15 Admin port number Disabled Read Write Read Input Read Input Write Read Output Read Output Write Read Output Input Read Output Write OU DUN HO Perle Clustered Port Access 1 enable clustered port access IOLAN SDS SCS STS User s Guide Version 3 6 SSL TLS Ciphers Introduction This appendix contains a table that shows valid SSL TLS cipher combinations Valid SSL TLS Ciphers This chart displays all of the valid SSL TLS combinations SSL Key Key Full Name Ver Exchange Authentication Encryption Size HMAC ADH AES256 SHA SSLv3 K
299. le is a Framed Address value in the RADIUS file of 255 255 255 254 this value allows the IOLAN to use the remote IP address value configured here The network subnet mask For example 255 255 0 0 If your user is authenticated by RADIUS and the RADIUS parameter Framed Netmask is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Specifies whether or not IP address negotiation will take place IP address negotiation is where the IOLAN allows the remote end to specify its IP address When On the IP address specified by the remote end will be used in preference to the Remote IP Address set for a Serial Port When Off the Remote IP Address set for the Serial Port will be used Default Disabled Launches the Dynamic DNS window when IP Address Negotiation is enabled which can then update the DNS server with the IP address that is negotiated and accepted for the PPP session See Dynamic DNS Field Descriptions on page 175 for more information 171 Serial Port Profiles 172 IPv6 Local Interface Identifier IPv6 Remote Interface Identifier IPv6 Global Network Prefix IPv6 Prefix Bits The local IPv6 interface identifier of the IOLAN end of the PPP link For routing to work you must enter a local IP address Choose an address that is part of the same network or subnetwork as the remote end Do not use the IOLAN s main IP address in this field if you do so r
300. lish a connection with a remote modem Range 0 99 Default 2 119 Serial Port Profiles Modem The name of the predefined modem that is used on this line Phone The phone number to use when Dial Out is enabled TruePort Profile 120 Overview TruePort is especially useful when you want to improve data security as you can enable an SSL TLS connection between the TruePort host port and the IOLAN TruePort is COM Port redirector that is supplied with the IOLAN TruePort can be installed as a client on a Workstation or Server and supports a variety of operating systems It in conjunction with the IOLAN emulates a local serial port COM port to the application to provide connectivity to a remote serial device over the network The TruePort profile operates in conjunction with the TruePort software Functionality TruePort is a COM port redirector utility for the IOLAN It can be run in two modes these modes will be set on the client software when it is configured TruePort Full mode This mode allows complete device control and operates as if the device was directly connected to the Workstation Server s local serial port It provides a complete COM port interface between the attached serial device and the network All serial controls baud rate control etc are sent to the IOLAN and replicated on its associated serial port e TruePort Lite mode This mode provides a simple raw data interface between the application
301. llows LAN devices to access devices or equipment attached to IOLAN serial ports This section highlights the hardware and software components you can expect to find in your IOLAN model Hardware Hardware Features IOLAN Models Desktop Rack Mount S x A 2 lg le 5 la la IE 12 18 1 DB25F e e DB25M e e Serial Connectors RJA5 e e e o e e e e DB9M e e e e EIA 232 e e e e e e o e e Serial Interface EIA 422 e i s EIA 485 e e o o e e DB25F e e Serial Power In Pin DB25M e RJ45 e e e e DB25F e Serial Power Out Pin DB25M s RJ45 e e Auto Sensing 10 100 e e e e e e e Ethernet Interface 10 100 1000 e e e PCI Interface e T O Interface e e Power over Ethernet e e Power Supply External AC e e e e e Internal AC o e e DC o e e e Dedicated Console Port e e 28 IOLAN SDS SCS STS User s Guide Version 3 6 IOLAN Features Software This section describes the supported software features available Accessing the IOLAN All IOLAN models can be accessed through any of the following methods Easy Config Wizard an easy configuration wizard that allows you to quickly setup the IOLAN in a Windows environment DeviceManager a fully functional Windows 98 NT 2000 ME Server 2003 XP Server 2008 Vista configuration management tool WebManager a web browser HTTP HTTPS option for configurin
302. luded is id Res aa de Re dE AN N da Ed Ge N AN de des N EE SN 31 What You Need to Supply ss 55 atia sanno da GER REK Ne Es GEANKER ESE 31 EUR is nee 32 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents Power Supply Specifications 32 Desktop Models see iain liia We dl EDO NG Ru HN EU aa Qu pa NE 32 Power Over Ethernet PoE MOIS omiiia Mas co at pan UO ev d 32 e Models EE se a ee ETE 32 Hack Mount Model 33 DE Power Reguiieinenis anna 33 AC Power Requirements Aan 33 Getting to Know Your IOLAN 22222220000000n000n ann ERGE EER nun 33 je TT 33 NG Tu AE EE OE OE EE EE OO N EE 34 PAS POM Use RE EE ED EE 35 a E olo g EE 35 is EE EE OE AT 36 TOD VIEW Se GE EE EE ee AE E E 36 End View 36 Rack Ve EG N GN Ge nun ann aunnnnnnee 37 Console Port LED View 37 Serial Ethernet View 37 Console Serial Switch EK KEREN REENEN REENEN Gee KEER REENEN KEREN Ge nnn ee 38 Console Mode 38 Serial Mode 38 Dedicated Console Port Rack Mount Models 38 Powering Up the IOLAN a 39 Desktop Rack Mount Models eese 39 VO Models ER 39 DC Power el OE GE EG nnn nnn nmn n nnn nara naar anna 40 Disconnecting 48V Power Supplies from the IOLAN 41 Chapter 3 Configuration Methods 43 eut U es de EN
303. ly Host Session 2 Session 3 Session 4 None v TCP Pot 23 Configure the following parameters Session 1 2 3 4 Settings Button Connect Automatically Host TCP Port You can configure up to four 4 sessions that the user can select from to connect to a specific host after that user has successfully logged into the IOLAN used only on serial ports configured for the Terminal profile Data Options e None No connection is configured for this session e Telnet For information on the Telnet connection window see Telnet Settings on page 140 e SSH For information on the SSH connection window see SSH Settings on page 142 e RLogin For information on the RLogin connection window see Rlogin Settings on page 141 Default None Click this button to configure the connection parameters for this session Specify whether or not the session s will start automatically when the user logs into the IOLAN Default Disabled The host that the user will connect to in this predefined session Default None The TCP port that the IOLAN will use to connect to the host in this predefined session Default Telnet 23 SSH 22 Rlogin 513 200 IOLAN SDS SCS STS User s Guide Version 3 6 Adding Editing Users Serial Port Access Tab Overview The Serial Port Access tab controls the user s read write access on any given IOLAN serial port This pertains to users that are connecting from t
304. mber 10000 serial port number Remote Printing Using Host Based Print Handling Software Printers connected to the IOLAN can be accessed by TCP IP hosts using print handling software 1 Setthe serial port to TCP Sockets Enable the Listen for connection option On the Hardware tab configure the Speed Flow Control Stop Bits Parity and Bits parameters so that they match the printer s port settings Save your settings and restart the serial port 3 The print handling software needs to know the Name of the IOLAN and the TCP Port number assigned to the printer serial port 327 Configuring a Virtual Private Network Configuring a Virtual Private Network You can configure the IOLAN to act as a Virtual Private Network VPN gateway using the IPsec protocol Any of the following scenarios can be configured using one IOLAN and a host server running IPsec software or two IOLANSs each acting as the VPN gateway All the examples have NAT Traversal NAT_T enabled since both VPN gateways are running through routers IOLAN to Host Network The following example shows how to configure an IPsec tunnel between serial devices connected to the IOLAN and a host network NAT Traversal NAT_T is enabled in this example on both sides because the VPN tunnel is going private network to public network to private network This example uses an RSA signature for the authentication method so the steps required to configure the authentication are i
305. mer time daylight saving time hours Fixed End Date Sets the exact date and time in which the IOLAN s clock will end summer time hours and change to standard time 296 IOLAN SDS SCS STS User s Guide Version 3 6 Management Recurring Start Sets the relative date and time in which the IOLAN s clock will change to Date summer time daylight saving time hours Sunday is considered the first day of the week Recurring End Date Sets the relative date and time in which the IOLAN s clock will end summer time hours and change to standard time Sunday is considered the first day of the week Custom App Plugin Overview You can create custom applications for the IOLAN by using the Perle SDK See the SDK Programmer s Guide the SDK and guide are found on the Perle website at www perle com downloads index shtm1 for information about the functions that are supported You must download the program and any ancillary files to the IOLAN and set the Serial Port Profile to Custom App Plugin to run a custom application You must also specify the program executable in the Command Line parameter A custom application or plugin can be run on the serial port In this situation the application will start once the serial port is activated and operate solely on the context of that serial port and any network communications related to that serial port You could run a different custom application on each serial port The serial port custom applicatio
306. message e A message to syslog Basic Analog Alarm Settings The basic Analog Alarm Settings window allows you to configure one severity alarm whereas the advanced window allows you to configure up to five severity alarm levels Analog Alarm Settings Basic Settings C Trigger alarm when input value is Alarm Actions Configure the following parameters Trigger alarm Specify the value that will trigger an alarm the measurement is based on the when input value is Type and Range that you specify This value must not fall within the scope of the value used to clear an alarm Clear alarm when Specify that value that will clear an alarm the measurement is based on the input value is Type and Range that you specify This value must not fall within the scope of the value used to trigger an alarm Send Email Alert When enabled sends an email alert to an email account s set up in the System settings when an alarm is triggered or cleared The email alert data includes the severity level and the value that caused the alarm to trigger or clear The Email Alert is associated with Level Critical Default Disabled 261 Channels Send Syslog Alert Send SNMP Alert When enabled sends a message to syslog when an alarm is triggered or cleared The syslog entry includes the severity level and the value that caused the alarm to trigger or clear The syslog message is associated with Level Critical Default Disabled When
307. mple of this file Line Access Rights for port n where n is the line number Name Perle Line Access Port n Type 100 n Data Type Integer Value Disabled 0 ReadWrite 1 ReadInput 2 ReadInputWrite 3 ReadOutput 4 ReadOutputWrite 5 ReadOutputInput 6 ReadOutputInputWrite 7 Name Perle User Level Type 100 Data Type Integer Value Admin 1 Normal 2 Restricted 3 Menu 4 Name Perle Clustered Port Access Type 99 Data Type Integer Value Disabled 0 Enabled 1 Maximum number of seconds the user will be allowed to stay logged on Use this timer to close a connection because of inactivity When the Idle Timeout expires the IOLAN will end the connection The maximum value is 4294967 seconds about 49 days A value of 0 zero means the Idle Timeout will not expire so the connection is permanently open The remote IPv6 interface identifier for the remote end of the PPP link RADIUS and TACACS 337 RADIUS Accounting Message This section describes the attributes which will be included by the IOLAN when sending an accounting message to the RADIUS server Type Name Description 1 a Nn A 40 42 43 45 46 47 48 49 User Name NAS IP Address NAS Port Service Type Acct Status Type Acct Input Octets Acct Output Octets Acct Session ID Acct Authentic Acct Session Time Acct Input Packets Acct Output Packets Acct Terminate Caus
308. n IPv4 Configurations Ethernet Interface Settings Interface 1 Interface 2 Obtain IP address automatically using DHCP BOOTP Obtain IP address automatically using DHCP BOOTP Use the following IP address O Use the following IP address IP Address 0 0 0 0 Subnet Mask 07 00 5070 Obtain Automatically Default Gateway L1 lt Configure the following parameters System Name The System Name is used for informational purposes by such tools as the DeviceManager and is also used in conjunction with the Domain field to construct a fully qualified domain name FQDN Default localhost Domain This field is combined with the System Name to construct the fully qualified domain name FQDN For example if the domain is mycompany com and the Server Name is set to accounting the FQDN would be accounting mycompany com Obtain IP Address When enabled the IOLAN will request an IP address from the DHCP BOOTP automatically using server By default when this option is enabled the IOLAN will also attempt to DHCP BOOTP retrieve the DNS server WINS server and default gateway from the DHCP BOOTP server Default Disabled Use the following Assign a specific IP address to the IOLAN IP Address Field Format IPv4 address IP Address The IOLAN s unique IPv4 network IP address Field Format IPv4 address Subnet Mask The network subnet mask For example 255 255 0 0 82 IOLAN SDS
309. n This will turn on DHCP BOOTP so the IOLAN will attempt to get its IP address from your DHCP BOOTP server If you don t have a DHCP BOOTP server DeviceManager will temporarily assign an IP address in the range of 169 254 0 1 169 254 255 255 that will be used only for the duration of the DeviceManager IOLAN communication After you configure the IP address click the Assign IP button The refreshed list will now display the assigned IP address for the new IOLAN To connect to the IOLAN click the IOLAN entry and click OK You will be asked to supply the Admin password the factory default password is superuser 8 Authentication required Please enter the password for the admin user Password If you have a successful connection the DeviceManager will retrieve the configuration and then display the IOLAN s System Information and you can begin configuring the IOLAN Configuration Methods 47 DeviceManager Using DeviceManager 48 After you have successfully connected to the IOLAN you will see the following window DeviceManager localhost 10 10 200 25 Connected File Edit Tools View Window Help DOER Menu Options lcons System Info Name localhost Modet IOLAN SDS2 Firmware 3 3 Build 1 Uptime 00 23 45 MAC Address 00 80 D4 06 00 02 amp ul Statistics IPv4 Address 10 10 200 25 Maj Net IPv amp Address es il User S il Serial Ports S il System Navigation f Tree Configur
310. n or plugin is configured by specifying the Custom App Plugin profile for the serial port The system level custom application or plugin will begin execution immediately following the system startup It runs on the context of the whole system and can access network communications as well as any or all serial ports Field Description Custom Application Plugin Settings To install a custom application 1 Download the application files to the IDLAN using Tools gt Advaced gt Custom Files gt Download Custom App to IDLAN 2 Set the command line below Command Line Configure the following parameter Command Line The name of the application that has been already been downloaded to the IOLAN plus any parameters you want to pass to the program For example using sample outraw program this is sample program supplied with the SDK you would type outraw s 0 192 168 2 1 10001 Acct 10001 if you were starting the application on the Server notice the s 0 parameter specifies serial port 1 to this particular application Field Format Maximum of 80 characters 297 Management Advanced 298 Overview Review the configuration options in the Advanced page to determine if any of them apply to your implementation Login Tab Field Descriptions Login Bootup Files Message of the Day MOTD TFTP Console Port Advanced Login Settings C Use Server Name in Prompts Display Login Banner
311. n this example Unencrypted Data n External IP Address External IP Address Right n 196 15 23 56 199 24 23 88 Remote VPN N Router an EY Router p n 172 16 45 1 172 16 45 99 192 168 45 99 EE Left IPsec Tunnel Encrypted Data 192 168 45 45 Unencrypted Data ee 192 168 45 87 192 168 45 12 1 Configure the IPsec tunnel in the IOLAN IPsec Tunnel IPsec Tunnel Name Serial Devices Authentication Method RSA Signature Secret Local Device IOLAN Left Right Local Remote IP Address 172 16 45 1 IP Address 199 24 23 88 ExtemallP 196 15 23 56 External IP Address Address Hedi Hop 172184538 Next Hop 0 0 0 0 Host Network 172 16 45 1 Host Network 492 168 45 0 ESS Add IPv4 Subnet 255 255 g IPv4 Subnet 255 255 Mask Mask IPv6 Subnet IPv6 Subnet Bits L J Bits Address Boot Action Start Cancel 328 IOLAN Device Server User s Guide Version 3 6 Configuring a Virtual Private Network 4 5 Use a utility for example Openswan s newhostkey showhostkey utilities to generate the RSA signature public key Copy the public key portion to a file using the following format description keydata or just lt keydata gt For example RSA 1024 bits scs48_vpn Tue Jan 3 15 29 33 2006 leftrsasigkey 0sAQ0EmzSTdNv1ZUIW9UmPtUY8 4gM5AGEAOq 9gUwE qnOUSES fnuX1xPet Mctuf XYvglvxYZOXhdIhlFwFeeIOLyRvD
312. nable Verbose Displays debug messages on the terminal Output Default Disabled Allow Compression Requests compression of all data Compression is desirable on modem lines and other slow connections but will only slow down things on fast networks Default Disabled SSL TLS Overview When SSL TLS is configured data is encrypted between the IOLAN and the host device which must also support SSL TLS When you configure the SSL TLS settings in the System section you are configuring the default global SSL TLS settings you are not configuring an SSL TLS server Functionality 216 You can create an encrypted connection using SSL TLS for the following profiles TruePort TCP Sockets Terminal the user s Service must be set to SSL_Raw Serial Tunneling Virtual Modem and Modbus When configuring SSL TLS the following configuration options are available You can set up the IOLAN to act as an SSL TLS client or server There is an extensive selection of SSL TLS ciphers that you can configure for your SSL TLS connection Appendix B SSL TLS Ciphers on page 347 for a list of SSL TLS ciphers You can enable peer certificate validation for which you must supply the validation criteria that was used when creating the peer certificate this is case sensitive IOLAN SDS SCS STS User s Guide Version 3 6 SSL TLS Field Descriptions SSL TLS SSL TLS settings that apply to all SSL TLS connections default SS
313. nabling DHCP BOOTP Once the IOLAN has an IP address you can use any configuration method 2 Setting up the serial ports You will want to select the serial port profile that matches the serial port requirement scenario for your serial device 3 Setting up users This is an optional step which is only required when your implementation requires users to access the IOLAN and you are not using external authentication Easy Configuration Wizard The Easy Config Wizard quickly sets up the IOLAN s network configuration and all serial ports to one of the following FasyConfig Welcome to EasyConfig perle EasyConfig Wizard discovers and configures IOLAN on a local network to one of the following profiles gt Discover i r i TruePort Configure S Ter Raw TCP Temini Download ZG Configuration Serial Tunneling For more advanced configurations use WebManager or DeviceManager e Console Management Allows users on the network to connect to a serial device that is connected to a serial port on the IOLAN IOLAN SDS SCS STS User s Guide Version 3 6 65 Setting Up the Network e TruePort Virtual COM Port Allows a networked system to communicate with your serial device through a virtual COM or TTY port using the Perle TruePort software e TCP Sockets Raw TCP Allows hosts on the network to communicate with a serial device that requires raw data throughput such as a printer or card reader connected
314. name and password should not be similar to a user name or password used regularly to login to the IOLAN External authentication can not be used for this user Complete this field only if you have specified PAP or CHAP security protocols in the Security field and you wish to dedicate this serial port to a single remote user who will be authenticated by the IOLAN or you are using the IOLAN as a router back to back with another IOLAN Password means the following e When PAP is specified this is the password the remote device will use to authenticate the port on this IOLAN e When CHAP is specified this is the secret password known to both ends of the link upon which responses to challenges shall be based Field Format You can enter a maximum of 16 alphanumeric characters Complete this field only if you have specified PAP or CHAP security protocols in the Security field and you wish to dedicate this line to a single remote user who will be authenticated by the IOLAN or you are using the IOLAN as a router back to back with another IOLAN When Dial In or Dial In Dial Out is enabled the Remote User is the name the IOLAN will use to authenticate the port on the remote device Your IOLAN will only authenticate the port on the remote device when PAP or CHAP are operating When connecting together two networks enter a dummy user name for example DS SALES Note If you want a reasonable level of security
315. ncluding spaces Specify the type of sensor you are using to measure temperature Data Options RTD Thermocouple Default RTD Specify the temperature range that you want to measure Data Options e RTD Pt100 a 385 50 to 150C Pt100 a 385 0 to 100C Pt100 a 385 0 to 200C Pt100 a 385 0 to 400C Pt100 a 385 200 to 200C Pt100 a 392 50 to 150C Pt100 a 392 0 to 100C Pt100 a 392 0 to 200C Pt100 a 392 0 to 400C Pt100 a 392 200 to 200C Pt1000 a 385 40 to 160C NiFe604 a 518 80 to 100C NiFe604 a 518 0 to 100C e Thermocouple B 500 to 1800C E 0 to 1000C J 0 to 760C K 0 to 1370C R 500 to 1750C S 500 to 1750C T 100 to 400C Default RTD is Pt100 a 385 50 to 150C Thermocouple is J 0 to 760C Click the Alarm Settings button to specify the trigger and clear levels for the alarms Notice that the Analog Alarm Settings window has two alarm configuration views a basic alarm view and an advanced alarm view See Alarm Settings on page 261 for field descriptions 260 IOLAN SDS SCS STS User s Guide Version 3 6 Channels Alarm Settings Analog and Temperature input models support an Alarm mechanism in which you can specify up to five severity levels of alarm triggers and clear levels the alarm triggers clear levels can activate in either increasing or decreasing severity levels Each time an alarm is triggered or cleared you can specify any combination of the following to be initiated An SNMP trap An email
316. nd you wish to dedicate this line to a single remote user who will be authenticated by the IOLAN or e you are using the IOLAN as a router back to back with another IOLAN When Dial In or Dial In Dial Out is enabled the Remote User is the name the IOLAN will use to authenticate the port on the remote device Your IOLAN will only authenticate the port on the remote device when PAP or CHAP are operating When connecting together two networks enter a dummy user name for example DS_SALES Note If you want a reasonable level of security the user name and password should not be similar to a user name or password used regularly to login to the IOLAN This option does not work with external authentication Field Format You can enter a maximum of 16 alphanumeric characters Complete this field only if you have specified PAP or CHAP security protocols in the Security field and you wish to dedicate this serial port to a single remote user and this user will be authenticated by the IOLAN or e you are using the IOLAN as a router back to back with another IOLAN Remote password means the following e When PAP is specified this is the password the IOLAN will use to authenticate the remote device e When CHAP is specified this is the secret password known to both ends of the link upon which responses to challenges will be based Remote Password is the opposite of the parameter Password Your IOLAN will only authenti
317. nd RIP packets can only be sent by the IOLAN e Listen RIP packets can only be received by the IOLAN e Send and Listen RIP packets are sent and received by the IOLAN Default None 196 IOLAN SDS SCS STS User s Guide Version 3 6 Adding Editing Users Enable VJ Used for User Service PPP or SLIP determines whether Van Jacobsen Compression Compression is used on the link VJ compression is a means of reducing the standard TCP IP header from 40 octets to approximately 5 octets This gives a significant performance improvement particularly when interactive applications are being used For example when the user is typing a single character can be transmitted and thus have the overhead of the full TCP IP header VJ Compression has minimal effect on other types of links such as ftp where the packets are much larger The User VJ Compression option will override the VJ Compression value set for a Serial Port Default Disabled Advanced Tab Overview The Advanced tab is used to configure those parameters that control the user session this includes session length language the hotkey used for switching between sessions access to clustered ports etc Field Descriptions User Settings General Services Advanced Sessions Serial Port Access Idle Timeout H seconds Session Timeout 0 seconds U Enable Callback Configure the following parameters Idle Timeout The amount of time in seconds before the IO
318. networks remotely connected via a SLIP PPP link on the Ethernet connection and pass RIP routing information to remotely connected clients As this can be undesirable in some environments this behavior can be configured and is defaulted to the non routing behavior Transmission and reception of Routing Information Protocol RIP packets over PPP and SLIP connections can be configured on a per user basis or on a per Serial port basis The Routing parameter can be configured e On the Advanced tab for Remote Access PPP and Remote Access SLIP profiles configured for a serial port to determine the exchange of RIP packets between the IOLAN and remotely connected users connected from the serial side e On the Services tab for each local user to determine the exchange of RIP packets between the IOLAN and remotely connected users connected from the serial side e By the RADIUS server for users authenticated by RADIUS the RADIUS defined Framed Routing parameter determines the exchange of RIP packets There are four options for setting the Routing parameters e None Routing information is not exchanged across the link This is the default setting for a line and a locally defined user e Send Routing information is only transmitted to the remote user e Listen Routing information is only received from the remote user e Send and Listen Routing information is transmitted to and received from the remote user The local User Routing param
319. nfiguration Area 101090055 MAC Address 00 80 d4 06 00 02 k System Info Navigation EasyPort Web WebManager also launches EasyPort Web which is a browser based management tool that can be used to manage clustered IOLANs Remote Power Switches RPSs power plugs and I O channels available only when an I O model is accessed EasyPort Web can also be launched by any user who can connect to the IOLAN through a web browser EasyPort Web Logged in as admin Wel to EasyPort Web elcome to LasyFo el EasyPort Web allows users to perform tasks of communicating to serial devices and provides a real time Web Manager view of all equipment connected to the IOLAN System Name Manage Serial Ports Tracy SDS2 Establish a connection to devices attached to the IOLAN or serial devices on additional IOLAN Model slaves IOLAN SDS2 Control attached Remote Power Switches RPS Version Manage VO Channels 33 Monitor and control individual VO interfaces IP Address 10 10 200 25 MAC Address 00 80 d4 06 00 02 Using DeviceManager and WebManager 75 Using DeviceManager to Connect to the IOLAN Using DeviceManager to Connect to the IOLAN DeviceManager can connect to existing IOLANS or assign an IP address to a new IOLAN Whenever you connect to the IOLAN through the DeviceManager you connect as the Admin user and must supply the password for the Admin user Starting a New Session To start a new sessi
320. nfigure the following parameters UDP Entry When enabled broadcasts I O status data to the specified range of IP addresses Default Disabled Start IP Address The first host IP address in the range of IP addresses for IPV4 or IPV6 that the IOLAN will listen for messages from and or send messages to Field Format IPv4 or IPv6 address End IP Address The last host IP address in the range of IP addresses for IPV4 not required for IPV6 that the IOLAN will listen for messages from and or send messages to Field Format IPv4 address Port The UDP port that the IOLAN will use to relay messages to servers hosts Default 0 zero 241 Settings Temperature Functionality Overview The Temperature tab configures the temperature scale settings for T4 models Field Descriptions VO Access Failsafe Timer UDP Temperature Temperature Scale Celsius Nj Configure the following parameter Temperature Scale Select the temperature scale that will be used to display temperature data Data Options Fahrenheit or Celsius Default Celsius 242 IOLAN SDS SCS STS User s Guide Version 3 6 Channels Channels Analog The Channels section displays the I O Channels window through which you can enable disable the I O channels 1 0 Channels I ES T Channel KE Name iv Di Digital Input iv D2 Digital Input iv R1 Relay iv R2 Relay Highlight a channel and then click the Edit button to configure the parameters
321. nfigured serial port Name for the file name If the serial port Name parameter is left blank the IOLAN will create unique files using the IOLAN s Ethernet MAC address and serial port number It is recommended that a unique NFS directory and serial port Name be configured if multiple IOLANs use the same NFS host for Remote Port Buffering The filenames will be created on the NFS host with a ENC extension to indicate data encrypted files or DAT for unencrypted files If the data is encrypted the Decoder utility application must be run on the NFS server to convert the encrypted data to a readable file for administrators to analyze The Decoder Utility can be found on your installation CDROM or on the Perle website www perle com The data that is sent to the remote buffer file is appended to the end of the file even through IOLAN reboots so you will want to create a size limit on the file on your remote NFS host to keep the buffer file size from becoming too large for your system Field Definitions 184 Port buffering displays or logs data received on the IOLAN serial port Serial Port Data Buffering Enable Local Buffering Enable Remote NFS Buffering C Enable Port Buffering to Syslog Advanced Port Buffering Configure the following parameters Enable Local Enables disables local port buffering on the IOLAN Buffering Default Disabled View Port The string used by aa session connected to a serial port t
322. ng Up the Network 10 11 12 Expand the Server Configuration folder and select Server Verify the IP address configuration You should also enter a name in the Server Name field to make the IOLAN easily identifiable To make your edits take effect you need to download the new configuration file and then reboot the IOLAN Download the configuration file to the IOLAN by selecting Tools Download Configuration to Unit or click the Download All Changes button Reboot the IOLAN by selecting Tools Reboot Server or click the Reboot IOLAN button For more information on configuring the IOLAN using DeviceManager see Chapter 5 Using DeviceManager and WebManager on page 73 Using WebManager To use the WebManager as your configurator you must first assign an IP address to the IOLAN You can use the Easy Config Wizard to assign an IP address to the IOLAN or any of the other methods described in this section Once the IP address is assigned to the IOLAN simply type the IP address into the Address field of your web browser and press the Enter key Using a Direct Serial Connection to Specify an IP Address You can connect to the IOLAN s serial console port using a PC with a terminal emulation package such as HyperTerminal or a terminal 1 Connect the IOLAN to your PC or dumb terminal Make sure the DIP switch is in Console mode desktop models this sets the IOLAN serial port 1 to E A 232 or that you are connected to the dedicated
323. nnectivity 35 Getting to Know Your IOLAN VO This sections describes the basic components found on the IOLAN I O models Top View The following image shows a typical IOLAN I O model Your I O model may have I O connectors in slightly different positions External Power Supply Power Ready Link 10 100 Activity LAN Serial Activity End View The IOLAN I O model shown is an A4D2 Different IOLAN I O models have different I O connector configurations I O connectors VO connectors External Power Supply Reset Console Serial Ethernet Switch Serial Port All IOLAN VO models have a DB9M serial connector 36 IOLAN SDS SCS STS User s Guide Version 3 6 Getting to Know Your IOLAN Rack Mount This section describes the basic components of all rack mount IOLAN models This example uses the IOLAN SCS with dual Ethernet and dual AC power Console Port LED View Server LEDs Serial Activity Console Port Power ON OFF Serial Ethernet View Serial Ports Dual Ethernet Dual AC Power PCI Card IL SCS models only Reset Hardware and Connectivity 37 Getting to Know Your IOLAN Console Serial Switch Located at the back of the desktop IOLAN models is a switch that controls whether serial port 1 is in Console or Serial mode Look at your model to verify the direction of the ON switch position ON indicates that serial port 1 is in Console mode otherwise serial port 1 is in Serial mo
324. nning on a host on the network Default Disabled Listen for When enabled the channel serial signal pin will wait for connections to be connection initiated by another I O channel or a TCP IP application Default Enabled Input TCP Port The TCP port that the channel serial signal pin will use to listen for incoming connections Default 2000 for channel 1 then increments by one for each channel 255 Channels Allow Multiple Hosts to Connect Connect to Host Name TCP Port When this option is enabled multiple I O channels and or TCP IP applications can connect to this channel serial signal pin Default Disabled When enabled the channel serial signal pin initiates communication to another I O channel or a TCP IP application Default Enabled The configured host or another IOLAN that the I O channel will connect to Default None The TCP Port that the channel serial signal pin will use to communicate to another IOLAN or a TCP IP application Default 2000 for channel 1 then increments by one for each channel Connect to Multiple When enabled input channel or serial signal pin can communicate to multiple Hosts Define Additional Hosts Button Local connection Enable TCP Keepalive hosts running a TCP IP application or I O channels Default Disabled Click this button to define the hosts IOLANS that this channel or serial signal pin will connect to This button is also used to define the Primary B
325. nsitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters A Virtual Private Network VPN creates a secure dedicated communications network tunnelled through another network You can configure the IOLAN for e ahost to host Virtual Private Network VPN connection a host to network VPN connection a network to network VPN connection or host network to IOLAN VPN connection allowing serial devices connected to the IOLAN to communicate data to a host network In addition to being able to configure up to 64 IPsec tunnels you can configure an L2TP IPsec tunnel that will allow hosts to create a VPN tunnel to the IOLAN The L2TP IPsec VPN protocol is required by the Windows XP operating system Windows Vista and Server 2008 support both VPN protocols Functionality The information in this section applies only to setting up IPsec VPN tunnels not L2TP IPsec VPN tunnels The IOLAN can be configured as a VPN gateway using the IPsec protocol You can configure the VPN connection using two IOLANSs as the local and remote VPN gateways or the IOLAN as the local VPN gateway and a host server running the VPN software as the remote VPN gateway If the VPN tunnel is being configured for an IPv6 network that is going through a router s the router s must have manual IPv6 address entry capability similar to what Windows Vista provides VPN servers clients can support various VPN pa
326. nsole Management serial ports set to SSH connections e Download SSH User Private Key used for IOLAN Users on serial ports set to the Terminal profile using SSH connections e Download SSH Host Public Key used for IOLAN Users on serial ports set to the Terminal profile using SSH connections e Download SSL TLS Private Key required if using HTTPS and or SSL TLS e Download SSL TLS Certificate required if using HTTPS and or SSL TLS e Download SSL TLS CA required if using LDAP with TLS SSL TLS and or X 509 certificate authentication for an IPsec tunnel e Upload IPsec RSA Public Key must be installed on the remote VPN gateway when the RSA Signature is the IPsec tunnel authentication method e Download IPsec RSA Public Key from the remote VPN gateway when RSA Signature is the IPsec tunnel authentication method File Name The file that you are going to download upload to from the IOLAN via TFTP 232 IOLAN SDS SCS STS User s Guide Version 3 6 Keys and Certificates Key Type Specify the type of authentication that will be used for the SSH session The following list details the keys that support each key type Data Options RSA Server SSH Public Key SSH User Public Key SSH User Private Key SSH Host Public Key e DSA Server SSH Public Key SSH User Public Key SSH User Private Key SSH Host Public Key e RSAI SSH User Private Key SSH Host Public Key RSA is used with SSH 2 RSA1 is used with SSH 1 User Name T
327. nter Profile Settings C Map CR to CR LF Configure the following parameter Map CR to CR LF Defines the default end of line terminator as CR LF ASCII carriage return line feed when enabled Default Disabled 150 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Serial Tunneling Profile Overview The Serial Tunneling profile allows two IOLANS to be connected back to back over the network to establish a virtual link between two serial ports based on RFC 2217 Functionality The serial device that initiates the connection is the Tunnel Client and the destination is the Tunnel Server although once the serial communication tunnel has been successfully established communication can go both ways gt 4 x Serial Device IOLAN IOLAN Serial Device A more detailed implementation of the Serial Tunneling profile is as follows d Serial Serial Ss H Server Client Tunnel IOLAN IOLAN Tunnel E The Server Tunnel will also support Telnet Com Port Control protocol as detailed in RFC 2217 n Serial m d E Server Fm Tunnel IOLAN Running 2217 Application The IOLAN serial port signals will also follow the signals on the other serial port If one serial port receives DSR then it will raise DTR on the other serial port If one serial port receives CTS then it will raise RTS on the other serial port The CD signal is ignored 151 Serial Port Profiles General Tab Field Descriptions
328. ntication method used by SSH version 1 and 2 Use RSA authentication for the SSH session Default Enabled DSA When enabled an authentication method used by SSH version 2 Use DSA authentication for the SSH session Default Enabled Keyboard When enabled the user types in a password for authentication Authentication Default Enabled SLIP Settings The SLIP settings apply when the User Service is set to SLIP Login Telnet Rlogin SSH SLIP PPP SSL TLS Local IP Address 0 p cU ccm Remote IP Address 205 0 D n Subnet Mask No vua v MTU 256 Routing l None v VJ Compression Configure the following parameters Local IP Address The IPv4 address of the IOLAN end of the SLIP link For routing to work you must enter an IP address in this field Choose an address that is part of the same network or subnetwork as the remote end for example if the remote end is address 192 101 34 146 your local IP address can be 192 101 34 145 Do not use the IOLAN s main IP address in this field if you do so routing will not take place correctly Remote IP Address The IPv4 address of the remote end of the SLIP link Choose an address that is part of the same network or subnetwork as the IOLAN If your user is authenticated by the IOLAN this remote IP address will be overridden if you have set a Framed IP Address for the user If your user is authenticated by RADIUS and the RADIUS parameter Framed Addr
329. o connect to it 76 IOLAN SDS SCS STS User s Guide Version 3 6 Using DeviceManager to Connect to the IOLAN Assigning a Temporary IP Address to a New IOLAN You can temporarily assign an IP address to the IOLAN that is connected to your local network segment for the purpose of connecting to it and downloading a configuration file containing a permanent IP address To temporarily assign an IP address to the IOLAN do the following 1 Click the Refresh button The IOLAN will be displayed in the IP Address column as Not Configured 2 Select the new IOLAN and click the Assign IP button The following window is displayed Assign IP Kal Assign IP The Device Server s current IP Address The Device Server s current IP Address Not Configured Not Configured Set anew Device Server IP Address Set a new Device Server IP Address es j KS Have the Device Server automatically get a temporary IP Address Version 3 1 or lower Version 3 2 or higher Type a valid temporary IP address into the address field or in version 3 2 or higher enable the Have the IOLAN automatically get a temporary IP address If you enable the temporary IP address the IOLAN will enable DHCP BOOTP on your IOLAN and attempt to get an IP address from the DHCP BOOTP server this will permanently enable DHCP BOOTP in your IOLAN s configuration until you change it If your network does not have a DHCP BOOTP server the IOLAN will temporarily assign an I
330. o display the port Buffering String buffer for that particular serial port Data Options Up to an 8 character string You can specify control unprintable codes by putting the decimal value in angle brackets lt gt for example Escape b is lt 027 gt b Default view Enable Remote Enables disables port buffering on a remote system When you enable this NFS Buffering option you have the ability to save the buffered data to a file s one file is created for each serial port and or send it to the Syslog host for viewing on the Syslog host s monitor Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Port Buffering NFS Host NFS Directory Encrypt Data Enable Port Buffering to Syslog Add Time Stamp to Data Enable Key Stroke Buffering The NFS host that the IOLAN will send data to for its Remote Port Buffering feature The IOLAN will open a file on the NFS host for each serial port configured for Console Management and will send serial port data to be written to that file s Default None The directory and or subdirectories where the Remote Port Buffering files will be created For multiple IOLANs using the same NFS host it is recommended that each IOLAN have its own unique directory to house the remote port log files Default device_server portlogs Determines if the data sent to the NFS host is sent encrypted or in the clear across the LAN NOTE When NFS encryption is enable
331. o login on the serial port The user has been configured for an SSL_RAW connection but the line has not been configured to enable SSL To resolve this either enable the line for SSL or change the user s Service to TCP_CLEAR if SSL is not wanted Could not obtain peer s certificate User has selected a cipher key exchange of ADH anonymous Diffie Hellman and enabled Peer verification ADH does not use certificates so they will not be sent in an SSL TLS handshake Disable Peer Verification or change to a cipher suite that uses certificates User has selected Peer Verification on the configured SSL TLS server and has not configured a certificate for the client Either disable peer verification on the SSL TLS server or configure a certificate for the SSL TLS client SSL accept failed on the SSL TLS server device e The device has failed to accept an SSL TLS connection on top of a TCP connection that has just been established This could indicate that the peer from which TruePort is trying to accept a connection from is not configured for SSL TLS Verify that the peer has been configured for an SSL TLS client connection Certificate did not match configuration e The message is displayed when Validate Peer Certificate has been enabled but the configured Validation Criteria does not match the corresponding data in the certificate received from the peer The data configured must match exactly to the data in the certificate The data is al
332. o the host e If the WebManager or DeviceManager cannot communicate with the IOLAN verify that the Server Services HTTP and or HTTPS are enabled for WebManager and DeviceManagerD is enabled for DeviceManager If you are using only HTTPS the connection URL must start with https DeviceManager Problems Error Message 16 bit Windows Subsystem C WINDOWS SYSTEM32 AUTOEXEC NT The system file is not suitable for running MS DOS and Microsoft Windows applications Choose Close to terminate the application The error message can be misleading because it is displayed even if the AUTOEXEC NT file is actually missing To verify whether you have the file type windir system32 in the address bar of an Explorer window If there is no AUTOEXEC NT file proceed as follows 1 Browse to windir repair usually C WNINDOWSN repair 2 Right click and Copy the AUTOEXEC NT file 3 Browse to windir system32 usually C WINDOWS System32 4 Right click inside the window and Paste the file The error condition described here may also be the result of corruption of the AUTOEXEC NT file in which case the above procedure may be helpful to restore a valid file If the above procedure does not fix the DeviceManager installation problem see http support microsoft com kbid 324767 for the official Microsoft explanation 394 IOLAN SDS SCS STS User s Guide Version 3 6 Host Problems Host Problems Cannot access a host by nam
333. of 6659 hex 0x1A03 Request OXOF Ox1A 0x03 0x00 0x02 0x01 0x03 03 00000011 which sets R1 and R2 to 1 Response OxOF 0x1A 0x03 0x00 0x02 Bits Value for second d Value for first register IOLAN SDS SCS STS User s Guide Version 3 6 VO SNMP Traps Error Codes Code Name Description 01 Illegal Function 02 Illegal Data Address 03 Illegal Data Value 04 Slave Device Failure The function code received in the query is not an allowable action for the server or slave The data address received in the query is not an allowable address for the server or slave A value contained in the query data field is not an allowable value for server or slave An unrecoverable error occurred while the server or slave was attempting to perform the requested action VO SNMP Traps When you enable SNMP traps for Digital and Analog inputs a value is returned when an alarm triggers or clears This section decodes the SNMP specific trap numbers The value returned from the trap will be the I O channel number that is generating the trap Specific Trap Alarm Description 0 IO DI ALARM SENSOR Trap for the Digital input Trigger IO DI ALARM SERIAL DSR Trap for the Digital input DSR serial pin Trigger IO DI ALARM SERIAL DCD IO DI ALARM SERIAL CTS IO AI ALARM LEVELI Trap for the Digital input DCD serial pin Trigger Trap for the Digital input CTS serial pin
334. on Changes a host that already exists in the host table Delete Button Deletes a host from the host table IOLAN SDS SCS STS User s Guide Version 3 6 Advanced Adding Editing a Host Host Entry Host Name IP Address Fully Qualified Domain Name resolved by DNS server 1 Close Configure the appropriate parameters Host Name The name of the host This is used only for the IOLAN configuration Field Format Up to 14 characters no spaces IP Address The host s IP address Field Format IPv4 or IPv6 address Fully Qualified When you have DNS defined in the IOLAN you can enter a DNS resolvable Domain Name fully qualified domain name note FQDN s are excluded as accessible hosts when IP Filtering is enabled 89 Advanced Route List 90 Overview Entering routes in the routing list enables the identification of gateways to be used for accessing specific hosts or external networks from the IOLAN s local network Functionality There are three types of routes e Default A route that provides general access beyond your local network Host A route defined for accessing a specific host external to your local network e Network A route defined for accessing a specific network external to your local network You can specify up to 20 routes on desktop IOLAN models you can specify up to 49 routes on rack mount IOLAN models Two types or gateways method of accessing specific hosts or e
335. on and connect to the IOLAN using the DeviceManager 1 Start the DeviceManager by selecting Start All Programs Perle DeviceManager DeviceManager 2 When the DeviceManager starts it searches the network for IOLANs Establish Connection to MAC Address IP Address Model Server Name Firmware Discovered 00 80 D4 06 02 B4 zj 00 80 D4 06 11 23 00 80 D4 06 11 23 00 80 D4 06 11 82 00 80 D4 06 1A 9D 00 80 D4 06 28 F6 00 80 D4 06 28 F6 00 80 D4 06 2F 51 10 10 200 91 10 10 200 69 fe80 280 d4ff fe06 1123 10 10 200 152 10 10 200 143 10 10 200 116 fe80 280 d4ff fe06 28f6 10 10 200 33 TOLAN DS1 TOLAN SDS1M TOLAN SDS1M TOLAN SDS1 TOLAN DS1 IOLAN SDS1T4 IOLAN SDS1T4 IOLAN STS4 D Keith 3 4 vito sds 4 5 vito sds 4 5 Den_485_t2 3 4 ui_team 3 4 My SDST4 3 5 My SDST4 3 5 Keith 3 4 Auto Auto Auto Auto Auto Auto Auto Auto Cancel Pete If your IOLAN is not in the local network and you do not have a multicast enabled router in your network and therefore is not displayed in the selectable list but can be pinged from your PC you can add it to the selectable list by clicking the Add button Add IOLAN Manually add IOLAN to the list of available devices IP Address Click the Add button and type in the IOLAN s IP address this field supports IPv4 and IPv6 addresses Click the Close button when you have completed adding all the manual entries Select the manually added server t
336. onments that have both IOLAN and IOLAN models or for users who prefer to configure using the IOLAN Menu or CLI the IOLAN user interface is available The IOLAN interface is supported on all IOLAN SDS SCS and STS models up to and including 16 serial ports Access Platforms The Menu is accessed by any application that supports a Telnet or SSH session to the IOLAN s IP address such as Putty SecureCRT or from a command prompt You can also access the Menu from a dumb terminal or PC connected to a serial port Connecting to the IOLAN to Use the IOLAN Interface To connect the IOLAN to using the IOLAN interface follow the directions for Connecting to the IOLAN Using the CLI on page 52 Using the IOLAN Interface After you have successfully logged in to the IOLAN you can type iolan at the CLI command prompt to access the IOLAN configuration menu you must have User Level Normal or Admin If you choose to use the IOLAN configuration interface you should always configure the IOLAN using the IOLAN interface The IOLAN IOLAN fields do not map directly between the two interfaces If you configure a field in the IOLAN configuration interface to a value that is invalid in the IOLAN interface and then attempt to use the IOLAN interface the invalid field value will show up as all asterisks although the IOLAN will interpret the value as valid Configuration Methods 59 IOLAN Interface Changes to the IOLAN Interface
337. onnection because of inactivity When the Idle Timeout expires the IOLAN will end the connection Range 0 4294967 seconds about 49 days Default 0 seconds so the port will never timeout Use this timer to forcibly close the session connection when the Session Timeout expires Default 0 seconds so the port will never timeout Range 0 4294967 seconds about 49 days IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Dial In Dial Out Dial Timeout Dial Retry Modem Phone If the device is remote and will be dialing in via modem or ISDN TA enable this parameter Default Disabled If you want the modem to dial a number when the serial port is started enable this parameter Default Disabled The number of seconds the IOLAN will wait to establish a connection to a remote modem Range 1 99 Default 45 seconds The number of times the IOLAN will attempt to re establish a connection with a remote modem Range 0 99 Default 2 The name of the predefined modem that is used on this line The phone number to use when Dial Out is enabled 131 Serial Port Profiles UDP Sockets Profile 132 Overview The UDP profile configures a serial port to broadcast UDP data to systems and or receive UDP data from systems Functionality When you configure UDP you are setting up a range of IP addresses and the port numbers that you will use to send UDP data to or receive UDP data from
338. ons ATTRIBUTE Perle Clustered Port Access 99 integer Perle ATTRIBUTE Perle User Level 100 integer Perle ATTRIBUTE Perle Line Access Port 1 101 integer Perle ATTRIBUTE Perle Line Access Port 2 102 integer Perle ATTRIBUTE Perle Line Access Port 3 103 integer Perle ATTRIBUTE Perle Line Access Port 4 104 integer Perle ATTRIBUTE Perle Line Access Port 5 105 integer Perle ATTRIBUTE Perle Line Access Port 6 106 integer Perle ATTRIBUTE Perle Line Access Port 7 107 integer Perle ATTRIBUTE Perle Line Access Port 8 108 integer Perle ATTRIBUTE Perle Line Access Port 9 109 integer Perle ATTRIBUTE Perle Line Access Port 10 110 integer Perle ATTRIBUTE Perle Line Access Port 11 111 integer Perle ATTRIBUTE Perle Line Access Port 12 112 integer Perle ATTRIBUTE Perle Line Access Port 13 113 integer Perle ATTRIBUTE Perle Line Access Port 14 114 integer Perle ATTRIBUTE Perle Line Access Port 15 115 integer Perle ATTRIBUTE Perle Line Access Port 16 116 integer Perle ATTRIBUTE Perle Line Access Port 17 117 integer Perle ATTRIBUTE Perle Line Access Port 18 118 integer Perle ATTRIBUTE Perle Line Access Port 19 119 integer Perle ATTRIBUTE Perle Line Access Port 20 120 integer Perle ATTRIBUTE Perle Line Access Port 21 121 integer Perle ATTRIBUTE Perle Line Access Port 22 122 integer Perle ATTRIBUTE Perle Line Access Port 23 123 integer Perle ATTRIBUTE Perle Line Access Port 24 124 integer Perle ATTRIBUTE Perle Line Access Port 25 125 integer Perle ATTRIBUTE Perle Line Access
339. ontrol is to be used Default Enabled Determines if output flow control is to be used Default Enabled Specifies whether the EIA 232 signal DSR Data Set Ready should be monitored This is used with modems or any device that sends a DSR signal When it is monitored and the IOLAN detects a DSR signal the line profile is started If both Monitor DCD and Monitor DSR are enabled both signals must be detected before the line profile is started Default Disabled Specifies whether the EIA 232 signal DCD Data Carrier Detect should be monitored This is used with modems or any other device that sends a DCD signal When it is monitored and the IOLAN detects a DCD signal the line profile is started If both Monitor DCD and Monitor DSR are enabled both signals must be detected before the line profile is started Default Disabled Used with EIA 422 and EIA 485 on SDS rack mount IOLAN models specifies whether or not the line is terminated use this option when the serial port is connected to a device at the end of the serial network Default Disabled This parameter applies only to EIA 485 Half Duplex mode All characters will be echoed to the user and transmitted across the serial ports Some EIA 485 applications require local echo to be enabled in order to monitor the loopback data to determine that line contention has occurred If your application cannot handle loopback data echo suppression should be enabled Default Disabled 1
340. or Connections on TCP Port Enable IP Aliasing IP Address The port number that the IOLAN will listen on for incoming TCP connections Default 10001 depending on the serial port number Enables disables the ability to access a serial device connected to the serial port by an IP address or host name that can be resolved to the Internet Address in a DNS network instead of the IOLAN s IP address and port number Default Disabled Users can access serial devices connected to the IOLAN through the network by the specified Internet Address or host name that can be resolved to the Internet Address in a DNS network Field Format IPv4 or IPv6 Address Advanced Tab Field Descriptions The Console Management Advanced tab configures serial port options that may be required by certain applications General Advanced Hardware Email Alet Packet Forwarding Advanced Console Management Settings C Authenticate User C Enable TCP Keepalive C Enable Message of the Day MOTD C Enable Microsoft Special Administration Console SAC support Multisessions Idle Timeout Session Timeout Break Handling None O Local O Remote Break Interrupt Dial Options C Dial In 0 0 seconds 0 seconds Dial Timeout 45 seconds Configure the following parameters Authenticate User Enable TCP Keepalive Enable Message of the Day MOTD Enables disables login password authentication f
341. or example using sample outraw program you would type outraw 192 168 2 1 10001 Acct 10001 if you were starting the application on a serial port Field Format Maximum of 80 characters IOLAN SDS SCS STS User s Guide Version 3 6 Port Buffering Port Buffering Overview The Port Buffering feature allows data activity on the IOLAN s serial ports to be held in memory for viewing at a later stage without affecting the normal operation of the serial ports Functionality Port Buffering is required by system administrators to capture important information from devices attached to the IOLAN If a device such as a Router has a problem and sends a warning message out of its console port while no one is connected the warning can be lost With Port Buffering enabled the messages will be captured in memory or in a file and can be viewed later to aid administrators in diagnosing and fixing problems Local Port Buffering Port buffer information for the serial port can be viewed after successful connection to a device on a serial port The user can toggle between communicating to the device on the serial port and viewing the port buffer data for that device by entering a the View Buffer String default view Local port buffering is limited to 256Kb and will be flushed after the IOLAN reboots To view the local port buffer for a particular serial port you must 1 Connect to the device on that serial port by Telnet or SSH the seria
342. or users connecting from the network Default Disabled Enables a per connection TCP keepalive feature After the configured number of seconds the connection will send a gratuitous ACK to the network peer thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized This parameter needs to be used in conjunction with Monitor Connection Status Interval parameter found in the Serial Advanced Advanced Settings tab The interval specifies the inactivity period before testing the connection Default Disabled Enables disables the display of the message of the day Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Enable Microsoft Special Administrator Console SAC support Multisessions Idle Timeout Break Handling Dial In Dial Out Dial Timeout Dial Retry When enabled a user can access SAC the interface of the Microsoft Emergency Management Systems utility through EasyPort Web when the IOLAN s serial port is connected to a Microsoft Server 2003 or Microsoft Server 2008 host Default Disabled The number of extra network connections available on a serial port in addition to the single session that is always available Enabling multisessions will permit multiple users to monitor the same console port Each user monitoring the port can be assigned different privileges to this port Range Dependent on model e 1 por
343. ork To connect to the IOLAN through the network to configure manage it using the CLI do the following 1 Start a Telnet or SSH session to the IOLAN s IP address for example telnet 10 10 201 100 You will get a Login prompt You can login as the admin user or as a user with Admin Level rights If the login is successful you will get a prompt that displays the IOLAN model and number of ports Login admin Password SDS2 You will see a prompt that displays the model and number of the IOLAN You are now ready to start configuring managing your IOLAN using the CLI IOLAN SDS SCS STS User s Guide Version 3 6 Menu Through the Serial Port To connect to the IOLAN through the serial port to configure manage it using the CLI or Menu see Using a Direct Serial Connection to Specify an IP Address on page 67 After you have established a connection to the IOLAN you will get a Login prompt You can login as the admin user or as a user with Admin Level rights If the login is successful you will get a prompt that displays the IOLAN model and number of ports Login admin Password SDS2 You will see a prompt that displays the model and number of the IOLAN You are now ready to start configuring managing your IOLAN using the CLI Using the CLI Menu Overview After you have successfully logged in you can start configuring managing the IOLAN by typing in commands at the prompt If you are not sure what command
344. ort 22 Default Enabled Simple Network Time Protocol client process in the IOLAN Default Enabled Dynamic Routing daemon process in the IOLAN listening on port 520 Default Enabled IPsec daemon process in the IOLAN listening and sending on UDP port 500 Default Disabled 231 Keys and Certificates Keys and Certificates When you are using SSH SSL TLS LDAP or HTTPS you will need to install keys and or certificates or get server keys in order to make those options work properly All certificates need to be created and all keys need to be generated outside of the IOLAN with the exception of the IOLAN SSH Public keys which already exist in the IOLAN SSH keys must be generated using the OpenSSH format Certificate Authorities CAs such as Verisign COST GTE CyberTrust etc can issue certificates Or you can create a self signed certificate using a utility such as OpenSSL To download or keys a certificate or a CA list or to upload the IOLAN public SSH key select Tools Advanced Keys and Certificates Keys and Certificates Key Certificate Upload Server SSH Public Key File Name Key Type The following fields are available Key Certificate Select the key or certificate that you want to download to the IOLAN or upload the IOLAN SSH Public Key Data Options e Upload Server SSH Public Key used for Console Management serial ports set to SSH connections e Download SSH User Public Key used for Co
345. ort Web 75 email notification events 109 289 F factory default configuration custom 311 original 311 factory defaults resetting to 319 H host based printing 327 IOLAN SDS SCS STS User s Guide Version 3 6 405 Index modem card 379 installing IOLAN modem card 379 rack mount 39 interface IOLAN 59 VO Modbus 268 UDP 264 VO SNMP traps 279 IOLAN interface 59 CLI 52 Menu 53 IOLAN supported models 59 IPsec 222 IPv6 setting an IP address 69 modem parameters 188 N NFS Decoder utility 377 port buffering 183 NIS parameters 212 O online help using 26 OpenSSH 232 P J parameters jumpers BOOTP DHCP 56 line termination 361 LDAP 209 power out 361 modems 188 setting 361 NIS 212 port buffering 184 RADIUS 206 K SecurID 211 keys SSH server 213 HTTPS 232 oe 210 passwor SEE em admin default 66 IOLAN admin 59 L lost 320 PCIslot 379 L2TP IPsec 227 pin power in language DB25 female 353 translating 317 upgrading firmware 317 LDAP parameters 209 line termination setting jumper 361 LPD printing 326 DB25 male 352 serial RJ45 353 pinouts DB25 female 352 DB25 male 351 DB9 male 354 355 RJ45 ethernet 355 RJ45 SCS48C serial 354 M RJ45 serial 353 Menu port buffering 183 conventions 54 Decoder utility IOLAN 59 Decoder utility 184 Menu IOLAN interface 53 local 183 MIB 57 Modbus configuration overview 321 gateway settings 322 VO access 268 line set
346. ossover adapter pinouts This is 382 model number DBA0011 RJ4SF RJ45F TxD 4 RxD 5 GND 6 DTR 8 DSR 3 RTS 2 CTS 7 o o o o o o o o o o o o 0000082080090 25 DB25M DB25M DTE 3 RxD 2 TxD 7 GND 6 DSR 8 DCD 20 DTR 5 CTS 4 RTS IOLAN SDS SCS STS User s Guide Version 3 6 Starter Kit Adapters Cable RJ45F to DB25M DCE Modem Adapter The following diagram shows the IOLAN RJ45F gt DB25M DCE modem adapter pinouts This is model number DBA0013 000008000000 o e o o o o o o o o o o o 25 RJA5F DB25M RJ45F DB25M TxD 4 3 RxD RxD 5 2 TxD GND 6 7 GND DTR 8 20 DTR DSR 3 6 DSR DCD 1 8 DCD RTS 2 4 RTS CTS 7 5 CTS Accessories 383 Starter Kit Adapters Cable RJ45F to DB25F DTE Crossover Adapter The following diagram shows the IOLAN RJ45 gt DB25F DTE crossover adapter pinouts This is model number DBAOO10 l e 3 j RJ amp SF RJ45F TxD 4 RxD 5 GND 6 DTR 8 DSR 3 RTS 2 CTS 7 DB25F 3 RxD 2 TxD 7 GND 6 DSR 8 DCD 20 DTR 5 CTS 4 RTS 384 IOLAN SDS SCS STS User s Guide Version 3 6 Starter Kit Adapters Cable RJ45F to DB9M DTE Crossover Adapter The following diagram shows the IOLAN
347. osts on the list Host TCP Port Add Define a primary host and a backup host to connect to Configure the following parameters Define additional When this option is enabled you can define up to 49 hosts IOLANS that the hosts to connect to I O channel or serial signal pin will attempt communicate to With this mode of operation the I O channel will connect to multiple hosts IOLANs simultaneously Default Enabled Add Button Click the Add button to add a host to the list of hosts that will be receiving communication from the I O channel or serial signal pin Edit Button Highlight an existing host and click the Edit button to edit a host in the list of hosts that will be receiving communication from the I O channel Delete Button Click the Delete button to delete a host to the list of hosts that will be receiving communication from the I O channel or serial signal pin Define a primary When this option is enabled you need to define a primary host that the I O host and backup channel will communicate to and a backup host in the event that the I O channel loses communication to the primary host The I O channel will first establish a connection to the primary host Should the connection to the primary host be lost or never established the I O channel will establish a connection the backup host Once connected to the backup the I O channel will attempt to re establish a connection to the Primary host once thi
348. outing will not take place correctly Field Format The first 64 bits of the Interface Identifier must be zero therefore abcd abcd abcd abcd is the expected format The remote IPv6 interface identifier of the remote end of the PPP link Choose an address that is part of the same network or subnetwork as the IOLAN If you enable Negotiate IP Address Automatically the IOLAN will ignore the remote IP address value you enter here and will allow the remote end to specify its IP address If your user is authenticated by RADIUS and the RADIUS parameter Framed Interface ID is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Field Format The first 64 bits of the Interface Identifier must be zero therefore abcd abcd abcd abcd is the expected format You can optionally specify an IPv6 global network prefix that the IOLAN will advertise to the device at the other end of the PPP link Default 0 0 0 0 Specify the prefix bits for the IPv6 global network prefix Default 64 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles Authentication Tab Field Descriptions General Authentication Advanced Hardware Email Alert Packet Forwarding PPP Authentication Settings Authentication CHAP v Password Remote User Remote Password Authentication Timeout 1 seconds CHAP Challenge Interval 0 minutes C Enable Roaming Callback Configure
349. ows XP To install IPv6 support in Windows XP do the following In Control Panel double click the Network Connections icon Double click the Local Area Connection entry In the Local Area Connection Status window click the Properties button on the General tab In the Local Area Connections window click the Install button on the General tab In the Select Network Component Type window select Protocol and click the Add button N N B DE In the Select Network Protocol window select Microsoft TCP IP version 6 and click the OK button 400 IOLAN SDS SCS STS User s Guide Version 3 6 Contacting Technical Support Contacting Technical Support Making a Technical Support Query Who To Contact Note Perle offers free technical support to Perle Authorized Distributors and Registered Perle Resellers If you bought your product from a registered Perle supplier you must contact their Technical Support department they are qualified to deal with your problem Have Your Product Information Ready When you make a technical support enquiry please have the following information ready ltem Write Details Here Product Name Problem Description Your Name Company Name and Address Country Phone Number Fax Number Email Address Making a support query via the Perle web page If you have an internet connection please send details of your problem to Technical Support using the email l
350. plication x Modem Application Raw TCP Data 153 Serial Port Profiles 154 General Tab Field Descriptions General Advanced Hardware Email Alert Packet Forwarding SSL TLS Virtual Modem Settings Session Connection Listen on TCP Port 10001 Connect Automatically At Startup Host Name TCP Port None v 0 Connect Manually Via AT Command Connection Status Send Connection Status as Verbose String Numerical Code Configure the following parameters Listen on TCP Port The IOLAN TCP port that the IOLAN will listen on Connect Automatically At Startup Host Name TCP Port Connect Manually Via AT Command Phone Number to Host Mapping Button Send Connection Status As Verbose String Default 10000 serial port number for example serial port 12 defaults to 10012 When enabled automatically establishes the virtual modem connection when the serial port becomes active Default Enabled The preconfigured target host name The port number the target host is listening on for messages Default 0 zero When enabled the virtual modem requires an AT command before it establishes a connection Specify this option when your modem application sends a phone number or other AT command to a modem The serial device can supply an IP address directly or it can provide a phone number that will be translated into an IP address by the IOLAN using the mapping table
351. port Accessories 391 SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable 392 IOLAN SDS SCS STS User s Guide Version 3 6 Troubleshooting Introduction This chapter provides information that can help resolve problems with the IOLAN Hardware Troubleshooting The Power Ready LED stays red after a boot If the IOLAN Power Ready LED is red and stays red for over 10 seconds you have a hardware problem that might to require factory service First try the following In Console mode for desktop models or viewing the Console port in rack mount models see if you need to reload the firmware which can be found either on the CD ROM that came with the IOLAN or on the Perle website www perle com downloads serial shtml If the bootloader option does not appear when you reboot the IOLAN to load new firmware you need to make arrangements to return the IOLAN If you purchased the IOLAN less than 30 days before this problem appears contact your distributor otherwise see the Perle web site www Perle com for factory service information Note no factory service can be performed on IOLANs that have not been registered The Power Ready LED on a rack mount model flashes red Good Boot When the IOLAN cycles through a good boot the Power Ready LED cycles for several seconds and then stays a solid green Noncritical Error Boot When the IOLAN cycles through a boot and a noncritical error occurs such as a bad port the Power Read
352. r s Guide Version 3 6 321 Configuring Modbus Modbus Gateway Settings The scenarios in this section are used to illustrate how the IOLAN s Modbus Gateway settings are incorporated into a Modbus device environment Depending on how your Modbus Master or Slave devices are distributed the IOLAN can act as both a Slave and Master Gateway s on a multiport IOLAN or as either a Slave or Master Gateway on a single port IOLAN Modbus Master Gateway The IOLAN acts as a Master Gateway when the Modbus Master is connected to a serial port on the IOLAN Each Modbus Master can communicate to UIDs 1 247 Modbus Slave Serial Master Gateway EP EIA 232 J maas OS EIA 422 485 Fm be IOLAN Modbus Master Master Modbus Slave 2 TE A 3 Modbus Slave Modbus Master Modbus Slave Gateway The IOLAN acts as a Slave Gateway when the Modbus Master resides on the TCP Ethernet network and the Modbus Slaves are connected to the serial ports on the IOLAN Note The IOLAN provides a single gateway to the network attached Modbus Masters This means that all Modbus Slaves attached to the IOLAN s serial ports must have a unique UID Multiple Masters on the network can communicate with these Modbus Slaves Note If a transaction is in progress to a Modbus Slave other requests to that same device will be queued until that transaction is complete Modbus Master mm Serial Slave Gateway isaw eS Slave do TCP TOL
353. r select Administration Restore Backup You need to download the file in DeviceManager and in both managers you need to reboot the IOLAN Managing the IOL AN Most of the management tasks such as setting the time date downloading keys certificates downloading firmware downloading custom files resetting serial ports etc are found under the Tools menu option in the DeviceManager and under Administration in WebManager 80 IOLAN SDS SCS STS User s Guide Version 3 6 Network Settings Introduction The Network section is used to configure the parameters that identify the IOLAN within the network and how the IOLAN accesses hosts on the E H Configuration network The following configuration windows are available aa apnd e IP Settings This window configures the IOLAN s name IP ur address and Ethernet information See IP Settings on page 82 for more information Advanced This window configures hosts that the IOLAN will be communicating with routes DNS WINS servers RIP Dynamic DNS and IPv6 Tunnels See Advanced on page 88 for more information on these options IOLAN SDS SCS STS User s Guide Version 3 6 81 IP Settings IP Settings IPv4 Settings Overview The parameters in IPv4 settings are used to access the IOLAN and are how the IOLAN accesses the network Field Descriptions IPv4 Settings Pv6 Settings Advanced System Settings System Name localhost Domai
354. rameters However the following parameters are REQUIRED to be set to the following values to support a VPN tunnel between the IOLAN and a VPN server client perfect forward secrecy no protocol ESP mode tunnel not transport opportunistic encryption no aggressive mode no 221 VPN IPsec 222 IKE Phase 1 Proposals The following IKE Phase 1 proposals are supported by the IOLAN VPN gateway Ciphers 3DES AES e Hashes MD5 SHAI e Diffie Hellman Groups 2 MODP1024 5 MODP1536 14 MODP2048 15 MODP3072 16 MODP4096 17 MODP6144 18 MODP8192 ESP Phase 2 Proposals The following ESP Phase 2 proposals are supported by the IOLAN VPN gateway Ciphers 3DES AES e Authentication Algorithms MD5 SHA1 SHA2 When an IPsec tunnel becomes active you are requiring that all access to the IOLAN go through the configured IPsec tunnel s so you must configure any exceptions first see Exceptions on page 228 for more information on exceptions or you will not be able to access the IOLAN through the network unless you are configured to go through the IPsec tunnel you can still access the IOLAN through the Console port Field Descriptions Name Local IP Address Local Host Network Remote IP Address Remote Host Network Boot The following buttons are available Add Button Click this button to add a new IPsec VPN tunnel Edit Button Select an existing IPsec VPN tunnel to edit the tunnel
355. rberos TACACS NIS SecurID LDAP Support for TCP IP and UDP protocols Dynamic DNS with DYNDNS org Domain Name Server DNS support WINS support for Windows environments Remote access support including PPP SLIP and SLIP with VJ Compression Ability to remotely manage the Perle Remote Power Switch RPS Ability to cluster several IOLANs Email alert notification PPP authentication via PAP or CHAP SSH connections supported ciphers are Blowfish 3DES AES CAST128 and Arcfour SSL TLS connections Logging via Syslog RIP authentication via password or MD5 SNTP versions 1 2 3 and 4 are supported Security The IOLAN security features can include depending on your IOLAN model Supervisory and serial port password protection Ability to set serial port access rights Ability to assign users access level rights to control their access e Trusted host filtering IP filtering allowing only those hosts that have been configured in the IOLAN access to the IOLAN e Idle port timers which close a connection that has not been active for a specified period of time e Ability to individually disable network services that won t be used by the IOLAN e SSH client server connections SSH 1 and SSH 2 e SSL TLS client server data encryption TLSv1 and SSLv2 30 IOLAN SDS SCS STS User s Guide Version 3 6 Hardware and Connectivity Introduction This chapter describes how to phy
356. rd Time GMT 5 00 the IOLAN s time is actually three hours ahead of your PC s time Therefore if you set the IOLAN s time to 2 30 pm in the DeviceManager the IOLAN s actual internal clock time is 5 30 pm This is the only configuration method that interprets the time and converts it between time zones as necessary All other configuration methods set the IOLAN s internal clock time to the time specified with no interpretation To set the IOLAN s system clock in DeviceManager select Tools Advanced Set Unit Time Date and in WebManager select Administration Date Time The Set Date Time window is displayed Set Date Time Eastern Standard Time Date E 20 2007 Time 11 08 33 AM Use the PC s Date Time Set Date Time Configure the following parameters Date The IOLAN s date The format of the IOLAN s date is dependent on the Windows operating system and regional settings Time The IOLAN s internal clock time based on your PC s time zone For example if your PC s time zone is set to Pacific Standard Time GMT 8 00 and the IOLAN s time zone is set to Eastern Standard Time GMT 5 00 the IOLAN s time is three hours ahead of your PC s time If you set the IOLAN s time to 2 30 pm the IOLAN s actual internal clock time is 5 30 pm Use the PCs When enabled sets the IOLAN s time to the PCs time Date Time Default Enabled This option is unique to the DeviceManager Rebooting the IOLAN
357. red range value to the channel for example to calibrate for voltage 10V you will be prompted to first apply 10V and then 10V to the channel Also you cannot actively calibrate disabled channels although for Voltage if you enable the channel and then set it for a range that has already been calibrated for another channel it will also be calibrated Calibrating Voltage When calibrating the IOLAN Analog input for voltage you will need a calibration meter that is better than 1 volts precision When you calibrate one channel all voltage channels are automatically calibrated for that range if another channel is set for a different range you will need to calibrate that channel separately but all channels that use that range are also automatically calibrated Calibrating Current When calibrating the IOLAN Analog input for current you will need a calibration meter that is better than 1 current precision Each channel needs to be calibrated individually 312 IOLAN SDS SCS STS User s Guide Version 3 6 Calibrating VO Calibrating Temperature Input To calibrate an Analog Temperature input channel read the section that applies to the type of input you are calibrating Note that calibration will be done for the active channel configuration for example if Channel Al is set to thermocouple you cannot calibrate it for RTD During the calibration process you will be asked to apply the minimum and maximum range value to t
358. reless WAN Card 288 IOLAN SDS SCS STS User s Guide Version 3 6 Configuring the System Introduction Alerts Email Alerts Ss This chapter describes the alerts email and syslog that can be configured TM mer for the IOLAN and the advanced options SNMP time custom G Serial applications plugins and other miscellaneous configuration options that Ge sel you will want to look at to see if they are reguired for your implementation 2a un stering A Email Alert D Syslog E Custom App Plugin 3 Advanced Overview Email notification can be set at the Server and or Line levels You can set email notification at these levels because it is possible that the person who administers the IOLAN might not be the same person who administers the serial device s attached to the IOLAN port Therefore email notification can be sent to the proper person s responsible for the hardware Functionality Email notification requires an SMTP host that is accessible by the IOLAN to process the email messages sent by the IOLAN When you enable email notification at the Server level you can also use those settings at the serial port level or you can configure email notification specifically for each serial port When you choose an event Level you are selecting the lowest notification level for example if you select Level Error you will get notifications for all events that trigger Error Critical Alert and Emergenc
359. rew the screw in the bracket The 8 port 16 port 32 port bracket is shown below 6 Slide the PCI adapter card into the bracket 32 port model 48 port model 380 IOLAN SDS SCS STS User s Guide Version 3 6 Installing a Perle PCI Card 7 The black bracket should then fit on the inside of the PCI adapter card bracket Align the adapter card bracket and then insert the screw and tighten it to keep it firmly in place 32 port model 48 port model 8 Ifyou are installing the PCI Adapter card slide the wireless WAN card into the adapter card 10 You can now replace the top of the IOLAN chassis by aligning it and sliding it into the base You can throw away the face plate as you will not be needing it 32 port model 48 port model 11 Replace all the screws on the top and the serial side of the IOLAN If you installed a wireless WAN card you can now attach the external antenna to the card Accessories 381 Starter Kit Adapters Cable Starter Kit Adapters Cable The IOLAN Starter Kit includes the following RJ45F to DB25M DTE Crossover Adapter RJ45F to DB25M DCE Modem Adapter RJ45F to DB25F DTE Crossover Adapter RJ45F to DB9M DTE Crossover Adapter RJ45F to DB9F DTE Crossover Adapter Sun Cisco RJ45M Connector Cable for Rack Mount Models The adapters cable can be purchased as a kit or individually RJ45F to DB25M DTE Crossover Adapter The following diagram shows the IOLAN RJ45F gt DB25M DTE cr
360. rial Port Once you configure a serial port you can copy the serial port settings to other serial ports by selecting a serial port and then clicking the Copy button on the Serial Ports Settings window Copy Port 1 Configuration Choose the port s to which you wish to copy port 1 settings e Cancel ori Port 4 Port 5 Port 6 Port 7 Port 8 Port 9 Partin v 105 Serial Port Profiles Resetting a Serial Port When you change a serial port s configuration you can download the configuration file to the IOLAN and then reset a specific serial port s to see how you change affects the serial port s behavior To reset a serial port select Tools Reset Serial Port s Reset Ports Choose the port s to reset r1 Pot T Port 2 Port 3 Port 4 Port 5 Port 6 Port 7 Port 8 Part 9 G Select All Clear All Serial Port Profiles Common Tabs 106 Overview There are several functions that are common to more than one profile These functions are Hardware Configure the physical serial line parameters See Hardware Tab Field Descriptions on page 107 Email Alert Configure email alerts for the serial line these can also be configured globally for all lines under the System settings See Email Alert Tab Field Descriptions on page 109 Packet Forwarding Configure data packet parameters See Packet Forwarding T
361. rk Time Time Zone Summer Time Time Zone Time Zone Name Time Zone Offset 00 00 Summer Time Summer Time Name Summer Time Offset 60 Summer Time Mode None O Fixed O Recurring H Configure the following parameters Time Zone Name The name of the time zone to be displayed during standard time Field Format Maximum 4 characters and minimum 3 characters do not use angled brackets lt gt Time Zone Offset The offset from UTC for your local time zone Field Format Hours hh valid 12 to 14 and minutes mm valid 0 to 59 minutes Summer Time The name of the configured summer time zone this will be displayed during Name the summer time setting If this parameter is not set then the summertime feature will not work Field Format Maximum 4 characters and minimum 3 characters do not use angled brackets lt gt Summer Time The offset from standard time in minutes Valid values are 0 to 180 Offset Range 0 180 Default 60 Summer Time You can configure the summer time to take effect Mode e None No summer time change e Fixed The summer time change goes into effect at the specified time every year For example April 15 at 1 00 pm e Recurring The summer time changes goes into effect every year at same relative time For example on the third week in April on a Tuesday at 1 00 pm Default None Fixed Start Date Sets the exact date and time in which the IOLAN s clock will change to sum
362. rmation about peripheral IOLAN options that can be ordered separately from the product Contact your sales representative to find out how to order the products listed in this appendix Installing a Perle PCI Card This sections describes how to install the Perle IOLAN modem card and the Perle PCI adapter card used with a wireless WAN card in your SCS rack mount model IOLAN Modem Card PCI Adapter Card The location and brackets are slightly different for the 32 port and 48 port SCS rack mount models but the basic installation concept is the same The PCI adapter card bracket is found on the serial side of the 8 port 16 port 32 port models and the LED side of the 48 port model 1 Unscrew the six screws on the top of the SCS IOLAN IOLAN SDS SCS STS User s Guide Version 3 6 379 Installing a Perle PCI Card 2 Unscrew the four screws along the bottom of the serial side of the SCS IOLAN On the SCS 8 port 16 port 32 port models this includes the screw that is at the bottom of the PCI face plate 3 Slide the top of the IOLAN off of the chassis 4 Carefully holding the bracket just behind the face plate unscrew the two screws at the top of the 8 port 16 port 32 port removable face plate or the two side screws of the 48 port removable face plate of the piece you just took off 32 port model 48 port model The 8 port 16 port 32 port models are displayed below with the face plate and bracket taken apart 5 Unsc
363. rsed the output will always read 0 zero Voltage To connect to Channel Al with a 2 wire shielded cable connect the positive wire to Al the negative wire to Al and optionally the shield to GND tou u Q8 NA CI TT ED 293295 I TE shield If you have the positive negative wires reversed the polarity of the voltage will be reversed VO Wiring Diagrams 371 Wiring VO Diagrams Temperature Input If you are using RTD sensors a short detected status will be displayed if the wires are connected improperly RTD or thermocouple sensors will display an open detection status when the circuit is broken Thermocouple To connect to Channel Al with a 2 wire cable connect the positive wire to Al and the negative wire to Al you will not be using the Als connection A2 A2s A3 A3 A3s A4 A4 Ads 1 n 1 N dx lt lt RTD 2 Wire In a 2 wire RTD configuration connect the excite wire to Al the return wire to Al and jumper the sense wire from Als with a insulated wire going to Al fo dE e uum ay d 2 A Z lt lt lt lt lt lt lt lt lt 4 d t sense o al fs D x Ki RTD 3 Wire In a 3 wire RTD configuration connect the return wire to Al the excite w
364. rsion 3 6 Serial Port Profiles General Tab Field Descriptions General Advanced Hardware Email Alert Packet Forwarding Terminal Settings Terminal Type Dumb E Require Login User Service Settings Connect to remote system Configure the following parameters Terminal Type Require Login User Service Settings Button Specifies the type of terminal connected to the line Data Options Dumb WYSE60 VT100 ANSI TVI925 IBM3151TE VT320 specifically supporting VT320 7 HP700 specifically supporting HP700 44 Terml Term2 Term3 user defined terminals Default Dumb When users access the IOLAN through the serial port they must be authenticated using either the local user database or an external authentication server Default Enabled After a user has been successfully authenticated the IOLAN will connect to the specified host using the specified protocol according to e the User Service parameter for locally configured users e the Default User Service parameter for users who are externally authenticated TACACS RADIUS for externally authenticated users where the target host is passed to the IOLAN See User Service Settings on page 139 for field descriptions of the various User Service Settings 135 Serial Port Profiles 136 Connect to Remote When the serial port is started the IOLAN will initiate a connection to the System Protocol Settings Button
365. rt Login Bootup Files Message of the Day MOTD TFTP Console Port Baud Rate v Flow Control v Configure the following parameters Baud Rate Specifies the baud rate of the line connected to the dedicated console port Data Options 9600 19200 38400 57600 115200 Default 9600 Flow Control For IOLAN models that have a dedicated console port defines how the data flow is handled Data Options e Soft Data flow control is handled by the software e Hard Daa flow control is handled by the hardware e None There is no data flow control Default None 301 Management 302 IOLAN SDS SCS STS User s Guide Version 3 6 Controlling the RPS VO Channels and IPsec Tunnels Introduction The Control section appears when the IOLAN is connected to a Remote Power Switch and or an I O model or you want to control the IPsec tunnel RPS Control Overview When a Remote Power Switch s RPS console port is attached to the IOLAN s serial port and the serial port is configured for the Power Management profile you will be able to control the RPS s power plugs either universally or individually power on off the whole RPS or individual plugs Field Descriptions RPS Control Control the RPS product and it s associated power plugs Serial Port RPS Model RPS Name Plug Control All Plugs On D Cycle Reset to Default State Plug Control The following buttons are available
366. rt Settings window click on a serial port and then click the Edit button the following window is displayed Serial Port 1 Settings General Advanced Hardware Email Alert Packet Forwarding Terminal Settings Terminal Type PE Si 9 Require Login Connect to remote system Protocol Host name TCP Port 0 Initiate Connection 104 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Ports Click the Change Profile button to select a different serial port profile if you don t want the displayed profile Choose Serial Port Profile Profile Selection The Terminal profile configures a serial port to allow network access from a terminal connected to the IOLAN s Console Management serial port This profile is used to access predefined hosts on the network from the terminal TruePort O TEF Sockets O UDP Sockets Terminal Connect gt e 3 e h Printer gt Begleet Serial Tunneling 4 Ss ed Virtual Modem Terminal IOLAN M UNIX Linux Modbus Gateway System Power Management Remote Access PPP Remote Access SLIP Custom App Plugin As you select the different serial port profiles a short description and a picture representing a typical application of the profile is displayed When you have selected the appropriate profile for the serial port click OK and those serial port profile configuration options will be displayed Copying a Se
367. rt to communicate with the IOLAN over the network to access I O data using the Perle API You also have the option of enabling SSL as a security option to encrypt the data that is communicated between the IOLAN and the host machine SSL TLS must be configured in the Server settings and on the TruePort host See Accessing I O Data Via TruePort on page 275 for more information on the API VO Access Failsafe Timer UDP Choose the method in which the 1 0 interfaces are accessed via network by an external application Enable 1 0 Access via Modbus protocol UID 255 Advanced Modbus Settings Available Network Access Allow Modbus TCP Application API v Allows Modbus RTU ASCII via TruePort Enable 1 0 Access via TruePort C Enable SSL Encryption Listen TCP Port 33816 Available Network Access Allow 1 0 Access via API through TruePort PC running wan U Custom Application APD VO Digital TruePort Output The host running TruePort must be in I O API mode 274 IOLAN SDS SCS STS User s Guide Version 3 6 Accessing VO Data Via TruePort Accessing VO Data Via TruePort Introduction Setup Analog and Digital VO data as well as output control can be accessed in several ways To have access from an application running on a workstation or server the I O Applications Program Interface API provided within Trueport can be used This API uses a command response format to get or set data on each
368. rvices are either daemon or client processes that run on the IOLAN You can disable any of the services for security reasons Functionality If you disable any of the daemons it can affect how the IOLAN can be used or accessed For example if you disable WebManager HTTPS and HTTP services you will not be able to access the IOLAN with the WebManager If you disable the DeviceManager service the DeviceManager will not be able to connect to the IOLAN If you do not want to allow users to Telnet to the IOLAN you can disable the Telnet Server service therefore disabling daemons can also be used as an added security method for accessing the IOLAN By default all daemon and client applications are enabled except IPsec and running on the IOLAN Field Descriptions Network Services Telnet Server listening on TCP port 23 TruePort Full Mode listening on UDP port 668 Syslog Client sends on UDP port 514 Modbus default listening on UDP TCP port 502 SNMP listening on UDP Port DeviceManager listening on UDP port 33812 and sending on UDP port 33813 WebManager HTTP listening on TCP port 80 WebManager HTTPS listening on TCP port 443 SSH Server listening on TCP port 22 SNTP Client listening on UDP port 123 S S S S S S S S RR FSI Dynamic Routing RIP listening on UDP port 520 C IPsec listening and sending on UDP port 500 Enable disable the following options Telnet Server Teln
369. ry State Province Locality Organization Organization Unit A country code for example US This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Two characters An entry for the state province for example IL This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 128 characters An entry for the location for example Chicago This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 128 characters An entry for the organization for example Accounting This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters An entry for the unit in the organization for example Payroll This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters 220 IOLAN SDS SCS STS User s Guide Version 3 6 VPN Overview Common Name An entry for common name for example the host name or fully qualified domain name This field is case sensitive in order to successfully match the information in the peer SSL TLS certificate Data Options Maximum 64 characters Email An entry for an email address for example acct anycompany com This field is case se
370. s Admin user You must reset the IOLAN to its factory default settings using the Reset switch on the rear panel There is no procedure to access the IOLAN without a password Problems with Terminals The following section concerns problems with the appearance of data on your terminal screen The IOLAN logs me out after a few minutes e Check the Idle Timer value set for the user The default setting for the Idle Timer for all users is 0 seconds does not timeout Corrupt data Check your line settings baud rate stop bits etc Missing data e Verify that the same type of flow control is set in both your terminal and on the IOLAN s port Error message not permitted on a dumb terminal after typing the CLI command screen e Set your Line to Termtype VT100 ANSI or WYSE60 or other form of terminal emulation if you have downloaded one The default line type in the IOLAN is Dumb which does not support the graphics characters necessary to view the text based menus Screen corruption when using the text based menu system e Verify that the terminal setup in the IOLAN matches your terminal Verify that entries in the term file match your terminal setup e If using a PC computer verify that the type of terminal emulation selected in your application matches those supported by the IOLAN When using the function keys on your keyboard nothing happens or your sessions keep swapping e Change your Hotkey Prefix character
371. s are available you can type a question mark at any time during a command to see your options See the Command Line Interface Reference Guide for more information about the CLI The Menu is a graphical representation of the CLI You can look up Menu parameter explanations in the Command Line Interface Reference Guide The only operations that the Menu does not support are the downloading and uploading of files to from the IOLAN Access Platforms The Menu is accessed by any application that supports a Telnet or SSH session to the IOLAN s IP address such as Putty SecureCRT or from a command prompt You can also access the Menu from a dumb terminal or PC connected to a serial port Unique Features The Menu supports the following unique features e You can access the IOLAN from any application that supports Telnet or SSH e For existing IOLAN customers the native IOLAN menu interface can be used by entering the iolan command to display and use the native IOLAN menu interface See your IOLAN User s Guide for information on using the IOLAN interface See JOLAN Interface on page 59 for more information about IOLAN interface Connecting to the IOLAN Using the Menu To connect the IOLAN using the Menu follow the directions for Connecting to the IOLAN Using the CLI on page 52 Configuration Methods 53 Menu Using the Menu After you have successfully logged in type screen at the prompt and press Enter You will be ask
372. s been no VO activity within the specified time set in the I O Interfaces Settings on the Failsafe Timer tab and the Failsafe Timer is triggered Data Options e None The state of the Digital Relay output remains the same no change Activate Output Activates the channel e Deactivate Output Deactivates the channel Default None 161 Serial Port Profiles Modbus Gateway Profile Overview Each serial port can be configured as either a Modbus Master gateway or a Modbus Slave gateway depending on your configuration and requirements If your model supports I O see Modbus I O Access on page 268 for more information on using the Modbus protocol to access I O data Functionality The Modbus Gateway profile configures a serial port to act as a Modbus Master Gateway or a Modbus Slave Gateway Modbus RTU ASCII Data Modbus IOLAN Slave Modbus Modbus Modbus Master Gateway Slave Master Modbus RTU ASCII Data Modbus IOLAN 4 E Slave 4 lt lt Modbus Modbus TCP TCP Slave Slave Gateway 162 IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles General Tab Field Descriptions General Advanced Settings Hardware Email Alert Packet Forwarding SSL TLS Modbus Settings Mode Modbus Master Destination Slave IP Mappings Modbus Slave Protocol Modbus RTU Modbus ASCII Configure the following parameters Mode Destination
373. s is successfully done it gracefully shuts down the backup connection Default Disabled Primary Host Specify a preconfigured host that the I O channel or serial signal pin will communicate to Default None 257 Channels 258 TCP Port Specify the TCP port that the I O channel or serial signal pin will use to communicate to the Primary Host Default 2000 for channel 1 then increments by one for each channel Backup Host Specify a preconfigured host that the I O channel or serial signal pin will communicate to if the I O channel cannot communicate with the Primary Host Default None TCP Port Specify the TCP port that the channel or serial signal pin will use to communicate to the Backup Host Default 0 Adding Editing a Multihost Entry When you click the Add or Edit button the Host Entry window appears The hosts in the multihost list must already be defined see Host Table on page 88 to learn how to create a host If you add a host that was defined with its fully qualified domain name FQDN it must be resolvable by your configured DNS server Host Entry Host FEE gt TCP Port Configure the following parameters Host Name Specify the preconfigured host that will be in the multihost list Default None TCP Port Specify the TCP port that the I O channel or serial signal pin will use to communicate to the Host Default 0 IOLAN SDS SCS STS User s Guide Version 3 6 Channels Temperature
374. s line The phone number to use when Dial Out is enabled 181 Serial Port Profiles Custom Application Profile 182 Overview The Custom App Plugin profile is used in conjunction with custom applications created for the IOLAN by using the Perle SDK See the SDK Programmer e Guide the SDK and guide are found on the Perle website at www perle com downloads index shtm1 for information about the functions that are supported Functionality You must download the program and any ancillary files to the IOLAN and set the serial port to the Custom App Plugin profile to actually run a custom application You must also specify the program executable and any parameters you want to pass to the program in the Command Line field The Custom application is automatically run when the serial port is started General Tab Field Description General Hardware Packet Forwarding Custom Application Plugin Settings To install a custom application 1 Download the application files to the IOLAN using Tools gt Advaced gt Custom Files gt Download Custom App to IOLAN 2 Set the command line below Command Line Configure the following parameter Command Line The name of the SDK program executable that has been already been downloaded to the IOLAN plus any parameters you want to pass to the program Use the shell CLI command as described in the SDK Programmer s Guide to manage the files that you have downloaded to the IOLAN F
375. s set to RADIUS User has entered User Name and Password and has pressed Enter Check RADIUS configuration of primary and secondary authentication accounting hosts specified if you have retry and timeout values greater than the default the IOLAN will be spending time trying each of these hosts and keeping the user waiting e Adjust RADIUS configuration specify just one host reduce Timeout and Retry values to the default or less than default You cannot progress beyond the login and password prompts when authentication is set to RADIUS e Onthe RADIUS host check the secret password you should see it displayed in clear text in the RADIUS clients file If you are unsure whether it is the same secret which you entered in the IOLAN go to the IOLAN and re enter a new secret e On the RADIUS host verify that there is only one entry for a particular user do not have multiple entries of the same user name even if the passwords are different Troubleshooting 395 Login Problems Login Problems You cannot obtain a login on any of the serial ports e Connect via the Admin port and check the settings of the front mounted ports they have probably been set to a profile that does support serial connections such as the Console Management profile in CLI or Menu direct or silent telnet rlogin Try setting the serial port s to the Terminal profile DSlogin in CLI or Menu You have lost or don t know your password a
376. s the following for the SCS48C SCS32C SCS16C SCS8C Cisco models RJ45F to DB25M DTE Crossover Adapter RJ45F to DB25M DCE Modem Adapter RJ45F to DB25F DTE Crossover Adapter RJ45F to DB9M DTE Crossover Adapter RJ45F to DB9F DTE Crossover Adapter Sun Cisco Roll Over Adapter for Rack Mount Models The adapters cable can be purchased as a kit or individually RJ45F to DB25M DIE Crossover Adapter The following diagram shows the IOLAN RJ45F gt DB25M DTE crossover adapter pinouts This is model number DBAO0011C E 14 x I 1 e SUR V 3 2j RJ45F DB25M RJ45F DB25M DTE TxD 3 3 RxD RxD 6 2 TxD GND 4 7 GND GND 5 DTR 2 6 DSR 8 DCD DSR 7 20 DTR RTS 1 5 CTS CTS 8 4 RTS Accessories 387 SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable RJ45F to DB25M DCE Modem Adapter The following diagram shows the IOLAN RJ45F gt DB25M DCE modem adapter pinouts This is model number DBA0013C l em e o o o o o o o o o o o o o 0000000000000 25 RJA5F DB25M RJ45F DB25M TxD 3 2 TxD RxD 6 3 RxD GND 4 7 GND GND 5 DTR 2 20 DTR DSR 7 8 DCD RTS 4 RTS CTS 8 5 CTS 388 IOLAN SDS SCS STS User s Guide Version 3 6 SCS48C SCS32C SCS16C SCS8C Starter Kit Adapters Cable RJ45F to DB25F DTE Crossover Adapter The following diagram shows the IOL
377. se harmful interference in which case the user will be required to correct the interference at his her own expense EN 55022 1998 Class A Note WARNING This is a Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Caution the IOLAN Device Server is approved for commercial use only WARNINGThe IOLAN Device Server SDS T models operate in an ambient air temperature above 70 C However at 70 C and above a burn hazard exists if the metal case is touched without proper hand protection Table of Contents Preface ETT 25 About his BOOK ese skies N ESEG ENG SEG SG UP ERR UNO MU pA 25 Intended Audience sessie ee ee GE EG Ge ee 25 Documentation eine 25 Typeface le ET 26 Online Help a 26 Chapter 1 Introduction 27 ADOBE the IOLAN sede ee een ee ES EES GER RR N E EORR RR ERR OK UA 27 IOLAN Family Modelg esse nannten 27 IOLAN FeatureS GER EE GER N scissa GR GR ERG NM ae oer 28 ET de TE TOOR GE nun nnnnn nun nun mann nun En nnmnnn 28 SOIT EE EEN 29 Accessing the IOLAN ee ee ee AA ee ee ee 29 General Features ee ee ee ee ee ee e 29 Advanced Features 30 SeGUTID EE EO N EeebEdesge 30 Chapter 2 Hardware and Connectivity 31 Judde E TT GR AR Ke RP 31 IOLAN Gomponenis RE R KERR RES KERE Ge Se EE EER 31 What s Inc
378. sically set up your IOLAN unit It includes an overview of the IOLAN hardware components and how to power up the IOLAN to make sure it works correctly IOLAN Components What s Included The following components are included with your product IOLAN unit External power supply 1 2 and 4 port models only Quick Start Guide for VO models a soft copy exists on the CDROM Warranty Card A CD ROM containing documentation firmware configuration software TruePort etc IOLAN models that have an RJ45 serial connector s come with an RJ45 2 DBOF adapter Added components for rack mount models 3 CATS RJ45 Administration cable Rack mounting kit SCS models only IOLAN Cable Starter Kit see Appendix H Accessories on page 379 for pinout diagrams What You Need to Supply Before you can begin you need to have the following A serial cable s to connect serial devices to your IOLAN unit An Ethernet CAT5 10 100 1000BASE T cable to connect the IOLAN unit to the network IOLAN SDS SCS STS User s Guide Version 3 6 31 Power Supply Specifications Available Accessories The following accessories are available for purchase for the various IOLAN models DIN Rail Mounting Kit 35mm for the desktop models IOLAN modem card for SCS rack mount models PCI adapter card for SCS rack mount models for wireless WAN cards 3 meter RJ45M RJ45M 8 wire Sun Cisco modular cable RJ45 to DB25 DTE Male adapter RJ45 to DB25 DCE Male adap
379. sion 3 6 Setting Up the Serial Port s e Virtual Modem The Virtual Modem Vmodem profile configures a serial port to simulate a modem When the serial device connected to the IOLAN initiates a modem connection the IOLAN starts up a TCP connection to another IOLAN configured with a Virtual Modem serial port or to a host running a TCP application Control Signal UO The Control Signal VO profile enables the use of the EIA 232 serial port signal pins to be used as assigned Digital Inputs or Digital Outputs e Modbus Gateway The Modbus Gateway profile configures a serial port to act as a Modbus Master Gateway or a Modbus Slave Gateway e Power Management The Power Management profile configures a serial port to communicate with a Remote Power Switch s RPS administration port This allows network access to the RPS and permits access to statistics and control of the RPS s power plugs e Remote Access PPP The Remote Access PPP profile configures a serial port to allow a remote user to establish a PPP connection to the IOLAN s serial port This is typically used with a modem for dial in or dial out access to the network e Remote Access SLIP The Remote Access SLIP profile configures a serial port to allow a remote user to establish a SLIP connection to the IOLAN s serial port This is typically used with a modem for dial in or dial out access to the network e Custom Application Plugin The Custom Application Pl
380. so case sensitive unknown protocol message when trying to make an SSL TLS connection This will be displayed when both sides of the TCP connection are configured as SSL TLS clients Change one of the end points to act as an SSL TLS server e One of the endpoints is not configured for SSL TLS Make sure both endpoints are configured for SSL TLS verify that one is a client and the other is a server tlsv1 alert handshake failure or sslv3 alert handshake failure e The remote site has an SSL TLS error and is sending this message with an alert message Look at the error messages on the remote end and fix the problem indicated VO Models An I O Digital or Relay controlled motor is starting stopping e Digital and Relay channels have automatically resetting fuses meaning that if the circuit gets overloaded and the fuse blows it will automatically reset when the circuit cools down An A4R2 model is starting stopping The A4R2 model can run at 55 degrees Celsius ambient temperature when the input voltage is 22VDC or below If the input voltage exceeds 22VDC the maximum ambient temperature will drop into the range of 45 50 degrees Celsius to run successfully Troubleshooting 399 IPv6 Issues IPv6 Issues You are not seeing the IPv6 address value when you attempt to connect to the IOLAN Windows Vista and Server 2008 operating systems have IPv6 support already enabled however you will have to install IPv6 support for Wind
381. specific local Digital Input channel or input serial signal pin on the same IOLAN that it is to be connected to For a description of the SSL TLS parameters not available when Local connection is configured see SSL TLS Settings Tab Field Descriptions on page 113 Digital Input DSR DCD CTS Digital Output Relay DTR RTS General VO Extension SSL TLS General VO Extension SSL TLS Digital VO Extension Digital VO Extension The Digital 1 0 extension feature connects the digital input signal to The Digital 1 0 extension feature connects the digital input signal to digital output s and or a TCP IP application over an IP network digital output s and or a TCP IP application over an IP network Enable VO extension Enable VO extension Connection Settings Connection Settings Listen for connection Listen for connection Input TCP Port 20000 SW Output TCP Port 20000 C Alow Multiple Hosts to Connect O Connect to Q Connect to Local connection Local connection Advanced TCP Settings Advanced TCP Settings C Enable TCP Keepalive C Enable TCP Keepalive Configure the following parameters Enable VO When enabled the digital channel can be connected to extension e A Digital output or relay if the I O model supports relay channel on the same IOLAN Output Serial Signal Pins DTR RTS A Digital output channel on another IOLAN s or output serial signal pins DTR RTS on another IOLAN s e A TCP IP application s ru
382. stering Slave Options Overview The Advanced button provides a means of configuring each individual serial port s name connection protocol and port association in the clustered IOLAN slave The Clustering Slave Settings window displays each clustered serial port slave entry you need to click the Edit button to configure the individual serial port settings Clustering Slave Settings Server Name accounting IP Address 1 1 1 1 Port Name Slave Port Master Port Protocol port 1 1 1 1 10001 Telnet If you click the Retrieve Port Names button the DeviceManager will connect to the clustering slave IOLAN and download all the serial port names you can change the names and other settings when you click the Edit button Editing Clustering Slave Settings Change the individual serial port settings Slave Port Settings window Slave Port Settings Port 1 Port Name Slave TCP Port 10001 Master TCP Por 1024 Protocol Telnet OK Cancel Configure the following parameters Port Name Specify a name for the port Default A combination of the port number the symbol and the IP address for example port1 172 22 23 101 283 Clustering Slave List Slave TCP Port Specify the TCP Port number configured on the Slave IOLAN that is associated to the port number you are configuring Range 1 99999 Master TCP Port Specify the TCP port number you want to map to the Slave IOLAN TCP Port User s will us
383. t 0 3 e 2 port 4 x of ports 1 e STS SDS 4 ports 2 x of ports 1 e SCS 4 ports 2 x of ports 1 1 Default 0 Use this timer to close a connection because of inactivity When the Idle Timeout expires the IOLAN will end the connection Range 0 4294967 seconds about 49 days Default 0 seconds so the port will never timeout Specifies how a break is interpreted Data Range e None The IOLAN ignores the break key completely and it is not passed through to the host e Local The IOLAN deals with the break locally If the user is in a session the break key has the same effect as a hot key e Remote When the break key is pressed the IOLAN translates this into a telnet break signal which it sends to the host machine e Break Interrupt On some systems such as SunOS XENIX and AIX a break received from the peripheral is not passed to the client properly If the client wishes to make the break act like an interrupt key for example when the stty options ignbrk and brkintr are set Default None If the console port is remote and will be dialing in via modem or ISDN TA enable this parameter Default Disabled If you want the modem to dial a number when the serial port is started enable this parameter Default Disabled The number of seconds the IOLAN will wait to establish a connection to a remote modem Range 1 99 Default 45 seconds The number of times the IOLAN will attempt to re estab
384. t You will be prompted for the Admin Password the default is superuser 6 Authentication required Please enter the password for the admin user Password Ges If the authentication and connection are successful the IOLAN s Server Info window is displayed If you cannot connect to the IOLAN you can highlight the IOLAN and click the Ping button to verify that the DeviceManager can communicate with the IOLAN s IP Address If the ping times out then you might need to set up a Gateway in your IOLAN or verify that your network is communicating correctly IOLAN SDS SCS STS User s Guide Version 3 6 Using WebManager to Connect to the IOLAN Using WebManager to Connect to the IOLAN WebManager can only connect to IOLANs that already have an assigned IP address To connect to the IOLAN type the IP address of the IOLAN into the Address field as such http 10 10 234 34 You will see the login screen IOLAN SDS2 Version 3 3 Tracys SDS2 Username admin Password Login Secure Login Logging into the IOLAN Type in the Admin password in the Password field and click the Login button A user who does not have admin privileges can access EasyPort Web to access clustered serial ports Perle Remote Power Switches RPS and or RPS plugs must already be configured on this IOLAN by typing their user name and password on the login screen Configuration Files Creating a New IOLAN Configuration in Devi
385. t the IOLAN will listen for IPV6 router advertisements to obtain additional IPV6 addresses No configuration is required however you can manually configure IPV6 addresses and network settings see Chapter 6 Network Settings on page 81 for more information on IPv6 configuration options You are now ready to configure the IOLAN See Chapter 3 Configuration Methods on page 43 for information on the different IOLAN configuration methods Getting Started 69 Setting Up the Serial Port s Setting Up the Serial Port s 70 The DeviceManager and WebManager have the following serial port profiles that will simplify serial port setup Choose Serial Port Profile Profile Selection C The Terminal profile allows network access from a terminal connected to the IOLAN s serial port This profile is J Console Management used to access pre defined hosts on the network from the terminal TruePort OTCP Sockets O UDP Sockets Connect O Printer by E ia CA D AGER etwor SC een O Serial Tunneling Virtual Modem Terminal Control Signal 1 0 Modbus Gateway UNIX Linux System Power Management Remote Access PPP Remote Access SLIP Custom Application Console Management The Console Management profile configures a serial port to provide network access to a console or administrative port This profile sets up a serial port to support a TCP socket that listens for a Telnet or SSH connection from the n
386. t 502 with UID 22 and from the Modbus Slave with and IP Address of 10 10 10 12 on Port 502 with UID 23 remember when Type is set to Host the IOLAN increments the last octet of the IP address for each UID specified in the range 323 Configuring Modbus 324 Modbus Slave Settings When you have Modbus Slaves on the serial side of the IOLAN configure the serial port to the Modbus Gateway profile acting as a Modbus Slave There is only one Slave Gateway in the IOLAN so all Modbus serial Slaves must be configured uniquely for that one Slave Gateway all serial Modbus Slaves must have unique UIDs even if they reside on different serial ports because they all must be configured to communicate through the one Slave Gateway Modbus Master EE Slave Gateway TCP Serial Port 1 mg EIA 422 485 IOLAN ro IP 10 10 10 10 e EEN eS Modbus Slave odbus Master Modbus Slave UID 7 UID 6 Modbus Slave UID 8 To configure the Modbus Gateway on serial port 1 do the following 1 Select the Modbus Gateway profile for serial port 1 2 On the General tab enable the Modbus Slave parameter 3 Still on the General tab specify the UID Range as 6 8 as shown below Serial Port 1 Settings Profile Modbus Gateway General Advanced Hardware Email Alert Packet Forwarding Modbus Gateway Settings Mode Modbus Master Modbus Slave UID Range ee Protocol Modbus RTU Modbus ASCII
387. t Tools Advanced Custom Files Custom Factory Default Configuration and then specify the file In WebManager you must connect to the IOLAN and then select Administration Reset Factory Defaults Set Current Configuration as Factory Default Download the current configuration to the IOLAN You can specify the configuration that you are working with on as the custom factory default configuration using any of the configuration methods you must be connected to the IOLAN In DeviceManager select Tools Advanced Set Factory Default to IOLAN In WebManager select Administration Reset Factory Defaults Get and Set Factory Default Configuration File Resetting the IOLAN to the Original Factory Default Configuration When you press the Reset button on the IOLAN the following take place Less than 3 seconds Reboots the IOLAN Between 3 and 10 seconds Reboots the IOLAN and resets the configuration to the factory default either the original default configuration or the custom default configuration Over 10 seconds Reboots the IOLAN and resets the configuration to the original factory default configuration 311 Downloading IOLAN Firmware Downloading IOLAN Firmware To upgrade the IOLAN firmware software e In DeviceManager select Tools Advanced Download Firmware to IOLAN You can browse to the firmware location Once the firmware download is complete you will be prompted to reboot the IOLAN You can choose to reboot the
388. t is included in the Frame based on the EOF1 or EOF1 EOF2 or Packet based on Triggerl or Triggerl Trigger2 Choose one of the following options e Strip Trigger Strips out the EOF1 EOFI EOF2 Triggerl or Triggerl Trigger2 depending on your settings e Trigger Includes the EOF1 EOFI EOF2 Triggerl or Triggerl Trigger2 depending on your settings e Trigger 1 Includes the EOF1 EOF1 EOF2 Triggerl or Triggerl Trigger2 depending on your settings plus the first byte that follows the trigger e Trigger 2 Includes the EOF1 EOFI EOF2 Triggerl or Triggerl Trigger2 depending on your settings plus the next two bytes received after the trigger Default Trigger IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles SSL TLS Settings Tab Field Descriptions You can create an encrypted connection using SSL TLS for any serial port profile that accesses the IOLAN from the network When you enable this feature it will automatically use the global SSL TLS settings configured on Security SSL TLS although you can configure unique SSL TLS settings for the serial port When configuring SSL TLS the following configuration options are available You can set up the IOLAN to act as an SSL TLS client or server e There is an extensive selection of SSL TLS ciphers that you can configure for your SSL TLS connection see Appendix B SSL TLS Ciphers on page 347 for a list of SSL TLS ciphers You can enable p
389. te format is dependent on your system s settings IOLAN SDS SCS STS User s Guide Version 3 6 Advanced End Time The time that the MD5 key becomes invalid The time format is dependent on your system s settings Key The MDS key that is being used by your routers Confirm Key Retype the MDS key that is being used by your routers to verify that it was typed correctly Dynamic DNS Overview Dynamic DNS Service providers enable users to access a server connected to the internet that has been assigned a dynamic IP address The IOLAN product line has built in support for the DynDNS com service provider Refer to www DynDNS com for information on setting up an account Functionality When the IOLAN is assigned a dynamic IP address it will inform the DynDNS com service provider of its new IP address Users can then use DynDNS com as a DNS service to get the IP address of the IOLAN In order to take advantage of this service the following steps need to be taken 1 Create an account with DynDNS com and configure the name your IOLAN will be known by on the internet the Host name For example create a host name such as yourcompanySCs DynDNS org 2 Enable the Network Dynamic DNS feature and configure the IOLAN s dynamic DNS parameters to match the Host s configuration on the DynDNS com server Every time the IOLAN gets assigned a new IP address it will update DynDNS com with the new IP address 3 Users accessing the IO
390. ter RJ45 to DB25 DTE Female adapter RJ45 to DB9 Male DTE adapter RJ45 to DB9 Female DTE adapter Contact your distributor for details Power Supply Specifications Desktop Models 32 If you are providing a power supply for a desktop IOLAN model your power supply must meet the following requirements Output between 9 30V DC DC barrel connector The cable attached to the power supply should be about 20AWG length 6 feet approx The barrel dimensions of the cable plug are OD 5 5 ID 2 1 and length 9 5mm with a straight barrel and positive polarity on the inside and negative polarity on the outside Power can also be provided by Serial Port 1 pin 1 on the DS SDS1 models Serial Port 2 pin 1 on the SDS2 model Serial Port 4 pin 1 on the SDS4 SCS4 models e Ethernet on the P series models Power over Ethernet Power Over Ethernet PoE Models The 1 port 4 port SDS P models can be powered by either the external DC power supply included or PoE or both The 2 port SDS P does not accommodate an external power supply and can be powered only through PoE The IOLAN SDS P model is considered a Powered Device PD and can only accept power from an IEEE 802 3AF compliant Power Source Equipment PSE device The IOLAN PoE can receive up to 13W of power using one of the following methods to connect to a PSE e Using the two unused twisted pair wires 10 100Mb only e Using the two data pairs or phantom pow
391. that can be negotiated AES 3DES DES ARCFOUR ARCTWO Default Any The minimum key size value that will be used for the specified encryption type Data Options 40 56 64 128 168 256 Default 40 The maximum key size value that will be used for the specified encryption type Data Options 40 56 64 128 168 256 Default 256 The type of key to exchange for the encryption format Data Options Any Any key exchange that is valid is used this does not however include ADH keys RSA This is an RSA key exchange using an RSA key and certificate EDH RSA This is an EDH key exchange using an RSA key and certificate e EDH DSS This is an EDH key exchange using a DSA key and certificate e ADH This is an anonymous key exchange which does not require a private key or certificate Choose this key if you do not want to authenticate the peer device but you want the data encrypted on the SSL TLS connection Default Any 115 Serial Port Profiles HMAC Select the key hashing for message authentication method for your encryption type Data Options Any e MDS e SHAI Default Any Validation Criteria Field Descriptions If you choose to configure validation criteria the information in the peer SSL TLS certificate must match exactly the information configured in this window in order to pass peer authentication and create a valid SSL TLS connection SSL Validation Criteria C Country
392. the following parameters Authentication The type of authentication that will be done on the link You can use PAP or CHAP to authenticate a serial port or user on the IOLAN from a remote location or authenticate a remote client device from the IOLAN When setting either PAP and CHAP make sure the IOLAN and the remote client device have the same setting For example if the IOLAN is set to PAP but the remote end is set to CHAP the connection will be refused Data Options e None e PAP is a one time challenge of a client device requiring that it respond with a valid username and password A timer operates during which successful authentication must take place If the timer expires before the remote end has been authenticated successfully the link will be terminated e CHAP challenges a client device at regular intervals to validate itself with a username and a response based on a hash of the secret password A timer operates during which successful authentication must take place If the timer expires before the remote end has been authenticated successfully the link will be terminated Default CHAP User Complete this field only if you have specified PAP or CHAP security protocols in the Authentication field and you wish to dedicate this line to a single remote user who will be authenticated by the IOLAN or e you are using the IOLAN as a router back to back with another IOLAN When Connect is set to Dia
393. the information in the peer SSL TLS certificate Data Options Maximum 64 characters IPv6 Tunnels Overview IPv6 tunnels transport IPv6 data packets from one IPv6 network to another IPv6 network over an IPv4 network In addition to creating the IPv6 tunnel you must also create the route that will transport the data packets through the IPv4 network in the Route List see Route List on page 90 for more information Field Descriptions Host Table Route List DNS WINS RIP Dynamic DNS IPv6 Tunnels Name Mode Remote Host Gateway Add The following buttons are available Add Button Adds an IPv6 tunnel Edit Button Edits an existing IPv6 tunnel Delete Button Deletes an IPv6 tunnel If a tunnel is associated with a route it cannot be deleted until the route is either changed or deleted 100 IOLAN SDS SCS STS User s Guide Version 3 6 Advanced Adding Editing an IPv6 Tunnel When you add edit an IPv6 tunnel you are determining how an IPv6 message will reach an IPv6 device through an IPv4 network IPv6 Tunnel Name ipv6_tunnell Mode Manual Remote Host None Gateway Interface Ethernet_1 Name Mode Remote Host Interface j Cancel Configure the following parameters The name of the IPv6 tunnel Field Format Maximum 16 alphanumeric characters Default ipv6_tunnell The method or protocol that is used to create the IPv6 tunnel e Manual When enabled the IOLAN will m
394. the link under Location and click Open to automatically start the DeviceManager installation 5 Install the DeviceManager by following the installation wizard On the last window check the Yes want to launch DeviceManager now box and click the Finish button 6 When you launch the DeviceManager it will automatically scan the local network and display any IOLANs that it can find 7 Any IOLAN that does not have an IP address will be displayed as Not Configured with the Model and MAC Address to identify the IOLAN Highlight the IOLAN that you want to assign an IP address to and click the Assign IP button 8 Choose the method you want to use to assign an IP address to the IOLAN e Type in the IP address that you want to assign to this IOLAN e Enable the Have the IOLAN automatically get a temporary IP address option This will turn on DHCP BOOTP so the IOLAN will attempt to get its IP address from your DHCP BOOTP server If you don t have a DHCP BOOTP server DeviceManager will temporarily assign an IP address in the range of 169 254 0 1 169 254 255 255 that will be used only for the duration of the DeviceManager IOLAN communication Click the Assign IP button 9 You are now ready to configure the IOLAN Double click the IOLAN you just configured IP address for to open a configuration session Type superuser the factory default Admin user password in the Login window and click OK IOLAN SDS SCS STS User s Guide Version 3 6 Setti
395. tication method and or Cipher the IOLAN will negotiate with the client and use the first authentication method and cipher that is compatible with both systems Functionality When you are using the SSH connection protocol keys need to be distributed to all users and the IOLAN Below are a couple of example scenarios for key certificate distribution Users Logging into the IOLAN Using SSH This scenario applies to serial ports configured for Console Management using the SSH protocol In the following example users are connecting to the IOLAN via SSH from the LAN Therefore the following keys need to be exchanged Upload the IOLAN SSH Public Key to each user s host machine who is connecting and logging into the IOLAN using SSH e Download the SSH Public Key from each user s host machine who is connecting and logging into the IOLAN using SSH a Ka Device Server Mm Wun Device Server Private Key Lynn Public Key Tracy Public Key Dennis Public Key N e 4 e Ei SSH 4 Lynn H Le Device Server Public Key Sone Lynn Private Key d Tracy Device Server Public Key Ee Tracy Private Key Dennis ES Device Server Public Key 2 Dennis Private Key 2183 SSH 214 Users Passing Through the IOLAN Using SSH Dir Sil This scenario applies to serial ports configured for the Terminal profile and are required to login to the IOLAN The user s service is set to the SSH pro
396. ting from the network The Easy Port Access allows the user to connect to the accessible line without disconnecting their initial connection to the IOLAN Does not have any access to CLI commands When the Admin user logs into the IOLAN the prompt ends with a whereas all other users prompts ends with a or depending on the character set Default Normal 194 IOLAN SDS SCS STS User s Guide Version 3 6 Adding Editing Users Services Tab Overview The Services tab configures the connection parameters for a user Any connection parameters configured in this window will override the serial port connection parameters Functionality When a Terminal profile is set for the serial port and Require Login has been selected user s accessing the IOLAN through the serial port will be authenticated Once authentication is successful the Service specified here is started For example if the Service Telnet is specified the IOLAN will start a Telnet connection to the specified Host IP TCP Port after the user is successfully authenticated logs in successfully Within the Terminal profile there are a number of settings that apply to possible Services Once it is known which user is connected and which service is to be used then the settings from both the Terminal profile and the user are used User parameters take precedence over serial port parameters Field Descriptions User Settings General Services Advanced Sessions
397. tings 323 TruePort 273 mode console 38 serial 38 models Device Server 27 406 parameters 184 remote 184 power in pin DB25 female 353 DB25 male 352 serial RJ45 353 power out setting jumper 361 printers 326 IOLAN SDS SCS STS User s Guide Version 3 6 R Index printing host based 327 LPD 326 RCP 327 product repair 402 R rack mount description 37 installing 39 RADIUS parameters 206 supported RADIUS parameters 339 RCP printing 327 resetting to factory defaults 319 RIP overview 93 RJ45 ethernet pinouts 355 SCS48C serial pinouts 354 serial pinouts 353 RJ45 serial power in pin 353 S SecurID parameters 211 serial mode 38 services line printer 326 signal O 158 UDP 132 vmodem 153 sessions 199 setting an IP address ARP Ping 69 BOOTP DHCP 68 DeviceManager 66 direct connect 67 IPv6 69 signal VO general 158 SNMP VO traps 279 support MIBs 57 using 57 SSH server parameters 213 SSL certificate 232 supported models IOLAN 59 T TACACS parameters 210 technical support contacting 401 online 401 product information 401 product repair 402 via the internet 401 temperature calibrating 313 terminal definitions creating 318 downloading 318 text configuration file 80 TruePort API 274 Modbus 273 TruePort utility 120 375 U UDP configuring 132 UDP VO 264 user sessions 199 utility Decoder 377 TruePort 120 375 V virtual modem 153 vmodem overview 153 VNP IPse
398. tion profile and S Port Buffering then configuring the applicable parameters for that profile See Serial Advanced D Users Ports on page 103 for more information ra SEA Security 8 Clustering B Option Card HE System Port Buffering Configures serial port data buffering preferences See Port Buffering on page 183 for more information Advanced Configures those parameters that are applicable to specific environments You will find modem and TruePort configuration options in addition to others here See Advanced on page 186 for more information Serial Ports Overview Each IOLAN serial port can be connected to serial device Each serial port can then be configured according to a serial port profile that coincides with the serial device attached to that serial port and how the serial device is accessed used Functionality When you select the Serial Ports navigation option you will see a list with the number of serial ports on your IOLAN As you configure the serial ports the information for each serial port is displayed Serial Ports Enable Name Profile Details lv 1 SUN Console Port Console Management Telnet Listen TCP 10001 Iv 2 Linux Console Port Console Management SSH Listen TCP 10002 r 3 Terminal Login Required O 4 PPP To configure change a serial port click the Edit button IOLAN SDS SCS STS User s Guide Version 3 6 103 Serial Ports Editing a Serial Port In the Serial Po
399. tivated e Inactive to Active Delay The channel output will remain inactive for the specified time interval after it is manually started Active to Inactive Delay The channel output will go inactive after the specified time interval after it is manually started Default Manual 249 Channels 250 Pulse Mode Pulse Count Inactive Signal Width Active Signal Width Delay Failsafe Action When Output is set to Pulse you can specify the manner of the pulse Data Options e Continuous Continuously pulses active and inactive Count Pulses an active inactive sequence for the specified number of times Default Continuous The channel output will pulse for the specified number of times each count consists of an active inactive sequence Default 1 How long the channel will remain inactive during pulse mode Range 1 9999 x 100 ms Default 1 100 ms How long the channel will be active during the pulse mode Range 1 9999 x 100 ms Default 1 100 ms How long to delay an active to inactive or inactive to active setting after it is manually started Range 1 9999 x 100 ms Default 1 100 ms When there has been no VO activity within the specified time set in the I O Interfaces Settings on the Failsafe Timer tab and the Failsafe Timer is triggered Data Options e None The state of the Digital Relay output remains the same no change e Activate Output Activates the channel e
400. tive is Inactive MB_REG_DI_DCD_ALARM_STATE The alarm state of DCD input signal 1 is in Alarm state 0 is Not in Alarm state A write of any value clears the alarm state MB_REG_DI_CTS The status of CTS input signal 1 is Active 0 is Inactive If Invert Signal is configured on 0 is Active is Inactive MB_REG_DI_CTS_ALARM_STATE The alarm state of CTS input signal 1 is Alarm 0 is Not in Alarm A write of any value clears the alarm state MB REG DO DTR The status of DTR output signal 1 is Active 0 is Inactive MB_REG_DO_RTS The status of RTS output signal 1 is Active 0 is Inactive section contains descriptions of serial port holding registers MB_REG_HR_DI_DSR_LATCH The latched status for the DSR signal 1 is Latched 0 is Not Latched A write any value will clear the latch MB_REG_HR_DI_DCD_LATCH The latched status for the DCD signal 1 is Latched 0 is Not Latched A write any value will clear the latch MB REG HR DI CTS LATCH The latched status for the CTS signal 1 is Latched 0 is Not Latched A write any value will clear the latch A4 T4 Registers The following registers are supported by the IOLAN A4 and T4 Input models Hol Data Model A1 T1 AZ T2 A3 T3 A4 T4 R W ding Registers MB REG HR AI CLEAR ALARM LATCH 2049 2050 2051 2052 W MB REG HR AI CLEAR MAX 2113 2114 2115 2116 W MB REG HR AI CLEAR MIN 2177 2178 2179 2180 W Input Registers
401. tocol therefore users first log into the IOLAN and then are connected to a specified host configured for the user when User Service SSH is selected through an SSH connection Lynn and Tracy automatically connect to the HR Server and Dennis automatically connects to the Development Server via SSH through the IOLAN All the SSH negotiation is being done between the IOLAN and the target servers therefore the following keys need to be exchanged e Download the SSH Host Public Key to the IOLAN for each of the hosts that the IOLAN is connecting to Download the SSH User Private Key for each user whose User Service is set to SSH Copy the SSH User Public Key to the host that the user is connecting to this is done outside the scope of the IOLAN Lynn Sales Server n Eg Pi a Tracy Sales Server Private Key aon Dennis Public Key Device Server Sales Server Public Key ser HR Server Public Key Dennis EES Lynn Private Key NEER Tracy Private Key m zE Dennis Private Key HR Server HR Server Private Key Lynn Public Key Tracy Public Key IOLAN SDS SCS STS User s Guide Version 3 6 SSH Field Descriptions SSH Server SSH settings that apply to all incoming SSH connections default Allow SSH 1 Protocol Authentication RSA Password Ciphers 3DES CAST Break String break C Enable Verbose Output J Allow Compression Keyboard r2 Interactive
402. top of the offending freezer to activate Output D4 Input Digital VO Jesse Jeer Output Monitoring IOLAN Application Input Industrial Freezers IOLAN SDS SCS STS User s Guide Version 3 6 Channels Field Descriptions General LO Extension Digital D1 Description Input Mode Output Mode Digital Output Settings Type Output Failsafe Action Sink v Manual v None v Configure the following parameters Description Output Mode Type Output Provide a description of the channel making it easier to identify Data Options Maximum 20 characters including spaces When selected the channel will drive the line output The internal jumpers must match the software configuration so if you change this setting to Output Mode you will have to also change the internal hardware jumpers Default Disabled Specify the type of digital output Data Options e Sink Specifies that the channel will be grounded when active e Source Specifies that the channel will provide voltage when active e Sink and Source Specifies that channel will be grounded when it is inactive and will provide voltage when it is active Default Sink Specify how the channel output will be handled Data Options e Manual You must manually manipulate the channel output e Pulse Activates and deactivates the channel output activity in intervals after itis manually ac
403. tput either voltage is applied to the channel or the channel is grounded Note that the internal jumpers must match the software setting and must be set to Output by default they are set to Input see Digital I O Module on page 366 to find out how to set the internal jumpers Functionality The Digital output channels support three types of Digital output sink voltage source ground and sink and source apply voltage or ground For the output type you can configure the following options You can choose to manually activate deactivate the Digital output You can choose to manually activate deactivate the Digital output and then specify that the Digital output will either pulse you get to specify the active and inactive pulse times continuously or for a specified number of pulse counts You can choose to manually activate deactivate the Digital output and then specify a delay before the output goes from inactive to active or active to inactive Youcan also specify a failsafe action that can either activate or inactivate the Digital output when the failsafe timer is triggered see Failsafe Timer Functionality on page 239 for more information In an industrial freezer warehouse the IOLAN D4 is used to monitor the freezer doors When one of the industrial freezer doors are left open for more than five minutes the Monitoring Application using the Perle API starts the Digital output sink causing the strobe light on
404. tributes Field Descriptions sees ee Re ee ee ee ee Re ee 207 Kerberos sissies aid iN ee eN wie ede ke Ge ed GN ew dd ek RS ae 208 Field UR eh dan 208 IR 3 7 1 2 ORN ES EE AE EE OE C EA 209 KEEN Eed 209 Field Description S ME ae 209 ye cl TE EE ON EN E EE RD E 210 EO eege N AE EE EE NE Pe 210 Field Desenpli ns essen ee 210 Sec UrD EN 211 KEEN aie Ee N Ge Ge Ik Ge EEEE Aaa 211 Field Descriptions mer DTE 211 INS 212 Field Descriptions E 212 35 ME EE EE EE EE OR AE HA EE 213 17 213 htein im V n E5 213 Users Logging into the IOLAN Using GH 213 Users Passing Through the IOLAN Using SSH Dir Sil 214 Field DOS CHP UGS sees N bnc EDGE ee ee RUE 215 12 IOLAN SDS SCS STS User s Guide Version 3 6 Table of Contents SSL TLS AE EE 216 DUBE VIO Ed EE SE RE OE EE ED EE N 216 Functionality Pet EE E ana Nanaia 216 Field Deep ses kasies eed een 217 Cipher Suite Field Descrptons un 218 Adding Editing a Cipher EE 219 Validation Criteria Field Descriptions ees ee ee 4 220 VEN e N 221 Mere is ds ss eke de Nie oe de AR AE N N N KNAK N Ad nk Ke ee ee ke en ds GE Ri be N SR de 221 ae EN EE EE EE RE I d adi 221 IKE Phase 1 Proposals anne ee 222 ESP Plase 2 Propoeala ur 2 222 Urata R nenne 222 elle MRT eh d
405. ts are specified as the most significant bit first and are numbered 31 0 Thus if bit 17 is set the 17th character should be escaped that is Ox11 XON The value 000a0000 will cause the control characters 0x11 XON and 0x13 XOFF to be escaped on the link thus allowing the use of XON XOFF software flow control If you have selected Soft Flow Control on the Serial Port you must enter a value of at least 000a0000 for the ACCM Default 00000000 which means no characters will be escaped The Maximum Receive Unit MRU parameter specifies the maximum size of PPP packets that the IOLAN s port will accept If your user is authenticated by the IOLAN the MRU value will be overridden if you have set a MTU value for the user If your user is authenticated by RADIUS and the RADIUS parameter Framed MTU is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Range 64 1500 bytes Default 1500 The type of authentication that will be done on the link You can use PAP or CHAP to authenticate a serial port or user on the IOLAN from a remote location or authenticate a remote client device from the IOLAN When setting either PAP and CHAP make sure the IOLAN and the remote client device have the same setting For example if the IOLAN is set to PAP but the remote end is set to CHAP the connection will be refused Data Options e None e PAP is a one time challenge of a client d
406. u can specify the Button information used to validate the connection between the DynDNS org server and the IOLAN See Validation Criteria Field Descriptions on page 99 for more information Cipher Suite Field Descriptions The SSL TLS cipher suite is used to encrypt data between the IOLAN and the client You can specify up to five cipher groups Cipher Suite Encryption Min Key Size Max Key Size Key Exchange HMAC Any 40 256 Any Any Delete DK Cancel The following buttons are available Add Button Adds a cipher to the cipher list Edit Button Edits a cipher in the cipher list Delete Button Deletes a cipher to the cipher list Move Up Button Moves a cipher up in preference in the cipher list Move Down Button Moves a cipher down in preference in the cipher list 97 Advanced Adding Editing a Cipher Suite To see a list of valid cipher suite combinations see Appendix B SSL TLS Ciphers on page 347 Cipher Suite Edit Encryption Min Key Size Max Key Size Key Exchange HMAC Cancel Configure the following parameters Encryption Min Key Size Max Key Size Key Exchange 98 Select the type of encryption that will be used for the SSL connection Data Options Any Will use the first encryption format that can be negotiated AES 3DES DES ARCFOUR ARCTWO Default Any The minimum key size value that will be used for the specified encryption type Data Opt
407. ue will be overridden if you have enabled the User Enable VJ Compression parameter If the user is authenticated by RADIUS and the RADIUS parameter Framed Compression is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Default Enabled Determines if a line is looping back If enabled On random numbers are sent on the link The random numbers should be different unless the link loops back Default Disabled Specifies whether or not IP address negotiation will take place IP address negotiation is where the IOLAN allows the remote end to specify its IP address When On the IP address specified by the remote end will be used in preference to the Remote IP Address set for a Serial Port When Off the Remote IP Address set for the Serial Port will be used Default Disabled Launches the Dynamic DNS window when IP Address Negotiation is enabled which can then update the DNS server with the IP address that is negotiated and accepted for the PPP session See Dynamic DNS Field Descriptions on page 175 for more information 149 Serial Port Profiles Printer Profile Overview The Printer profile allows for the serial port to be configured to support a serial printer device that can be access by the network 4 LE Serial IOLAN S Primer UNIX Linux System General Tab Field Descriptions Generel Hardware Email Alert Packet Forwarding Pri
408. ugin profile configures a serial port to run a custom application or IOLAN plugin After you download the custom application files and specify the application name and any parameters you want to pass to it the IOLAN will execute the application when the serial port is started Each serial port profile contains all the parameters that are required to completely configure the serial port scenario represented by the profile To select a serial port profile in the DeviceManager connect through the DeviceManager to the IOLAN you are configuring and select Serial Serial Ports in the navigation pane Highlight the serial port you want to configure and then click Edit E 4B Configuration 3 9 Network 3 IP Settings dvanced Eg Serial 2 Serial Ports 3 Port Buffering H Advanced J Users H Security d Clustering d Option Card D System Serial Potts En I XI XI XI XI XI XI E bi lt I XI XI XI XI I Name Profile Termina Termina Termina Termina Termina Termina Termina Termina Termina Termina Termina Termina Termina Termina Termina Details Termina v When the default serial port profile Terminal displays click the Change Profile button and select the appropriate profile for the serial port See Chapter 7 Configuring Serial Ports on page 103 for more information on the serial port profiles and their configuration parameters G
409. unctionality and supports software configurable serial interface protocols EIA 232 422 485 TS This model is available with two serial ports RJ45 only and supports EIA 232 only The TS model is similar to the DS model supporting only general IOLAN functionality SDS tThis model is available in both desktop and rack mount configurations Both models support software configurable serial interface protocols EIA 232 422 485 The SDS model has the advanced secure IOLAN feature set in addition to the general IOLAN functionality STS This model comes in one desktop model and several rack mount configurations All models support EIA 232 only The STS model has the advanced secure IOLAN feature set in addition to the general IOLAN functionality SCS tThis model comes in several rack mount configurations All models support EIA 232 only and have an internal PCI card interface The SCS model has the advanced secure IOLAN feature set in addition to the general IOLAN functionality See Hardware on page 28 for information about the hardware specifications for your IOLAN model See Software on page 29 for a list of the basic and advanced software features IOLAN SDS SCS STS User s Guide Version 3 6 27 IOLAN Features IOLAN Features The IOLAN is a communications server used for making serial network connections It attaches to your TCP IP network and allows serial devices such as modems terminals or printers to access the LAN It also a
410. uring a Wireless WAN Card Overview SCS IOLAN models support a wireless WAN card that can be installed to permit access to the IOLAN via the internet or other WAN network When the PCI card type has been configured to be a Wireless WAN card the serial port associated with the wireless WAN card is automatically set to PPP No other PPP configuration is typically required The wireless WAN card will establish a GPRS data connection over the service provider s GSM network The service provider will assign an IP address to your wireless connection This address may be public or private and it may be dynamically or statically assigned depending on the type of account established with the service provider If a static public IP address has been assigned the IOLAN will be directly accessible via that IP address If a dynamic public IP address has been assigned you may access your IOLAN with the assistance of a dynamic DNS service provider These service providers provide a method of accessing your device server using a standard URL for example yourcompany dyndns org when the IP address assigned by the Wireless provider is dynamic The IOLAN SCS supports dynamic DNS updates to DynDNS com see www DynDNS com for more information Field Descriptions Wireless WAN APN User Name Password Phone Number Initialization String Configure the following parameters Card Specify the wireless WAN card you are using Data Options e Sierr
411. us of the first digital input DI1 on a D2R2 unit DII sensor is a coil register with the decimal value of 6145 hex 0x1801 Request 0x01 0x18 0x01 0x00 0x01 Response 0x01 0x01 0x01 Digital input 1 is active Example 2 Read the values for the Inactive Signal Width Active Signal Width and Pulse count for the second digital output DO2 on a D4 unit DO2 Inactive Signal Width is a holding register with the decimal value of 6210 hex 0x1842 Request 0x03 0x18 0x42 0x00 0x03 Response 0x03 0x06 0x00 0x0A 0x00 0x11 0x00 OxOF Inactive 210 100ms Active 17 100ms and Pulse count 15 Example 3 Read the raw current minimum and maximum values of the third Analog input A3 on an A4D2 unit A3 current raw value is an input register with the decimal value of 2150 hex 0x0866 Request 0x04 0x08 0x86 0x00 0x03 Response 0x04 0x06 0x10 0x03 OxOF 0x30 0x10 0x20 Current 0x1003 Minimum 0x0F30 and Maximum 0x1020 Set Commands The following tables show the general structure to be used for set commands Command Format Bytes ofBytes Value 1 1 Command Code in hex OXOF Set Boolean registers R W coils 0x10 Set holding registers read write registers 2 3 2 Starting register number see A4 T4 Registers on page 270 A4D2 A4R2 Registers on page 271 or D4 D2R2 Registers on page 272 for this value 4 5 2 Number of registers to set If this value is greater than 1 the response will conta
412. vice Range 1 247 Default 1 When enabled Modbus Slave Gateway messages to remote TCP Modbus Masters are encrypted via SSL TLS Default Disabled Power Management Profile 168 Overview The Power Management profile applies when there is a Perle Remote Power Switch RPS connected to the serial port This profile is used to configure the RPS See RPS Control on page 303 for information on how to actively management the RPS Functionality The Power Management profile configures a serial port to communicate with a Remote Power Switch s RPS administration port This allows network access to the RPS and permits access to statistics and control of the RPS s power plugs a Remote Power Switch RPS Remote System IOLAN SDS SCS STS User s Guide Version 3 6 Serial Port Profiles General Tab Field Descriptions General Email Alert Power Management Settings These settings determine the operation of the Remote Power Switch RPS connected to this serial port RPS Name RPS Model RPS820 v Plug Name Power Up Interval Default State Mapped Port 1 OF None 2 5 OF None 3 5 OF None 4 5 OF None 5 5 OF None 6 5 OF None 7 5 OF None 8 5 of None Configure the following parameters RPS Name Specify a name for the RPS RPS Model Specify the RPS model Data Options RSP820 RPS830 RPS1620 RPS1630 Default RSP820 Edit Button Highlight a plug and then click the Edit button to configure the plug
413. when the Session Timeout expires Default 0 seconds so the port will never timeout Range 0 4294967 seconds about 49 days If the device is remote and will be dialing in via modem or ISDN TA enable this parameter Default Disabled If you want the modem to dial a number when the serial port is started enable this parameter Default Disabled The number of seconds the IOLAN will wait to establish a connection to a remote modem Range 1 99 Default 45 seconds The number of times the IOLAN will attempt to re establish a connection with a remote modem Range 0 99 Default 2 The name of the predefined modem that is used on this line The phone number to use when Dial Out is enabled 125 Serial Port Profiles TCP Sockets Profile Overview The TCP Socket profile allows for a serial device to communicate over a TCP network The TCP connection can be initiated from a host on the network and or a serial device This is typically used with an application on a Workstation or Server that communicates to a device using a specific TCP socket This is often referred to as a RAW connection Functionality The TCP Sockets profile permits a raw connection to be established in either direction meaning that the connection can be initiated by either the Workstation Server or the IOLAN Card Reader Raw TCP Incoming Serial 4 amp Data Connection N Scanner Bar Cod Bale N x N Cash
414. word Specify the read write user s privacy algorithm encryption Data Options DES AES Default DES Type in the read write user s privacy password Retype the privacy password V3 Read Only User Specified user can only view SNMP variables V3 Read Only Security Level Select the security level for the Read Only user This must match the configuration set up in the SNMP manager Data Options e None No security is used e Auth User authentication is used Auth Priv User authentication and privacy encryption settings are used Default None 293 Management Time 294 V3 Read Only Auth Specify the authentication algorithm that will be used for the read only user Algorithm Data Options MD5 SHA Default MD5 V3 Read Only Auth Type in the read only user s authentication password Password V3 Read Only Retype the user s authentication password Confirm Password V3 Read Only Specify the read only user s privacy algorithm encryption Privacy Algorithm pata Options DES AES Default DES V3 Read Only Type in the read only user s privacy password Privacy Password V3 Read Only Retype the privacy password Confirm Password Trap The trap receiver is the network management system NMS that should receive the SNMP traps This NMS must have the same SNMP community string as the trap sender The IOLAN supports SNMP traps for restart and SNMP community authentication error Internet Address
415. x DH Au None Enc AES 256 Mac SHA1 DHE RSA AES256 SHA SSLv3 Kx DH Au RSA Enc AES 256 Mac SHA1 DHE DSS AES256 SHA SSLv3 Kx DH Au DSS Enc AES 256 Mac SHA1 AES256 SHA SSLv3 Kx RSA Au RSA Enc AES 256 Mac SHA1 EDH RSA DES CBC3 SHA SSLv3 Kx DH Au RSA Enc 3DES 168 Mac SHAl EDH DSS DES CBC3 SHA SSLv3 Kx DH Au DSS Enc 3DES 168 Mac SHAl DES CBC3 SHA SSLv3 Kx RSA Au RSA Enc 3DES 168 Mac SHAl DES CBC3 MD5 SSLv2 Kx RSA Au RSA Enc 3DES 168 MaczMD5 ADH AES128 SHA SSLv3 Kx DH Au None Enc AES 128 Mac SHA1 DHE RSA AES128 SHA SSLv3 Kx DH Au RSA Enc AES 128 Mac SHA1 DHE DSS AES128 SHA SSLv3 Kx DH Au DSS Enc AES 128 Mac SHA1 AES 128 SHA SSLv3 Kx RSA Au RSA Enc AES 128 Mac SHA1 RC2 CBC MD5 SSLv2 Kx RSA Au RSA Enc RC2 128 Mac MD5 DHE DSS RC4 SHA SSLv3 Kx DH Au DSS Enc RC4 128 Mac SHA1 RC4 SHA SSLv3 Kx RSA Au RSA Enc RC4 128 Mac SHA1 RC4 MD5 SSLv3 Kx RSA Au RSA Enc RC4 128 Mac MD5 RC4 MD5 SSLv2 Kx RSA Au RSA Enc RC4 128 MaczMD5 RC4 64 MD5 SSLv2 Kx RSA Au RSA Enc RC4 64 Mac MD5 EDH RSA DES CBC SHA SSLv3 Kx DH Au RSA Enc DES 56 Mac SHA1 EDH DSS DES CBC SHA SSLv3 Kx DH Au DSS Enc DES 56 Mac SHA1 DES CBC SHA SSLv3 Kx RSA Au RSA Enc DES 56 Mac SHA1 IOLAN SDS SCS STS User s Guide Version 3 6 347 Valid SSL TLS Ciphers SSL Key Key Full Name Ver Exchange Authentication Encryption Size HMAC DES CBC MD5 SSLv2 Kx RSA Au RSA Enc DES 56 Mac MD5 EXP EDH RSA DES CBC SHA SSLv3 Kx DH 512 Au RSA Enc DES 40 Mac SHA1 EXP EDH DSS DE
416. ximum number of times a configure NAK packet will be re sent before the link is terminated Range 0 255 Default 10 seconds This determines whether compression of the PPP Address and Control fields take place on the link For most applications this should be enabled Default Enabled This determines whether compression of the PPP Protocol field takes place on this link Default Enabled When enabled Van Jacobson Compression is used on this link If your user is authenticated by the IOLAN this VJ compression value will be overridden if you have enabled the User Enable VJ Compression parameter If the user is authenticated by RADIUS and the RADIUS parameter Framed Compression is set in the RADIUS file the IOLAN will use the value in the RADIUS file in preference to the value configured here Default Enabled Determines if a line is looping back If enabled On random numbers are sent on the link The random numbers should be different unless the link loops back Default Disabled Use this timer to close a connection because of inactivity When the Idle Timeout expires the IOLAN will end the connection Range 0 4294967 seconds about 49 days Default 0 zero which does not timeout so the connection is permanently open Specify this option when a modem is not connected to this serial port Default Enabled 177 Serial Port Profiles Dial In If the device is remote and will be dialing in via modem or ISDN T
417. xternal networks can be configured e Host Specify a specify host that will provide access to the route destination e Interface Specify the IPv6 tunnel Remote Access PPP defined serial port or Remote Access SLIP defined serial port that will provide access to the route destination Field Descriptions Host Table Route List DNS WINS RIP Dynamic DNS IPv6 Tunnels Destination Network Mask Type Gateway Gateway Type Add The following buttons are available on this window Add Button Adds a route to the Route List Edit Button Changes an existing route in the Route List Delete Button Deletes a route from the Route List IOLAN SDS SCS STS User s Guide Version 3 6 Advanced Adding Editing Routes From the Route List tab if you click the Add or Edit button you will be able to add a new or edit an existing route Destination Type Host O Network O Default IP Address Gateway Host Cancel Configure the appropriate parameters Type Specify the type of route you want to configure Data Options e Host A route defined for accessing a specific host external to your local network e Network A route defined for accessing a specific network external to your local network Default A route which provides general access beyond your local network Default Default IP Address When the route Type is defined as Host this field will contain the IP address of the host
418. y LED will flash red briefly before displaying a solid green You should reboot the IOLAN while monitoring the Console port to view the error information Critical Error Boot When the IOLAN cycles through a boot and a critical error occurs such as corrupted firmware the Power Ready LED continues to flash red View the IOLAN reboot through the Console port for information on how to correct the problem Fatal Error Boot When the IOLAN cycles through a boot and a fatal error occurs the Power Ready LED stays a solid red IOLAN SDS SCS STS User s Guide Version 3 6 393 Communication Issues Communication Issues General communication checks and practices are as follows Are your cables connected and correctly configured If you are using EIA 232 see EIA 232 Cabling Diagrams on page 356 to verify that your cables are correctly configured Ping your host If you can ping but packet loss is reported ping another host device on the same network This will tell you whether the problem is specific to the host device or general to the network e After entering or changing IP information for your IOLAN reboot the IOLAN does not apply when using BOOTP or DHCP Once the IOLAN has rebooted other network devices should be able to communicate with it ping telnet etc Also protocols such as ARP and proxy ARP will work properly Use the show routes command command line only or view the Routes statistics Is there a route t
419. y assigned IP address Default Disabled SCS models only A domain prefix to uniquely identify the Ethernet interface to the DNS when the IOLAN has two Ethernet interfaces The FQDN that is sent to the DNS will be one of the following formats depending on what is configured in the System Settings section on the IPv4 Settings tab e lt Server Name gt lt Domain Prefix gt lt Domain Name e lt Server Name gt lt Domain Prefix gt Field Format Maximum 8 alphanumeric characters SCS models only Active Standby permits the grouping of Ethernet LAN connections to provide for link failover Both Ethernet connections will have the same Ethernet MAC address Active standby refers to the process by which a failure of one interface can be automatically overcome by having its traffic routed to the other interface Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 IP Settings Monitoring Interval SCS only The interval in which the active interface is checked to see if it is Recovery Delay Enable IPv6 Router Advertisement Advertise DHCP v6 Advertise DHCPv6 Configuration Options Advertise the following Network Prefix es Interface 1 Hardware Speed and Duplex Interface 2 Hardware Speed and Duplex still communicating Default 100 ms SCS only The time that the IOLAN will wait to make the secondary interface Ethernet 2 active after it has been detected as up Default 200 ms When enabl
420. y file from Field Format Resolvable host name IPv4 address IPv6 address Filename The path and file name relative to the default path of your TFTP server software of the file that contains a string that is displayed when a user connects to the IOLAN The IOLAN will look for the file internally it must already be downloaded if only the file is specified no TFPT host or the file cannot be found on the specified TFPT host Display MOTD in When enabled displays the Message of the Day to users who are logging into WebManager Easy WebManager or EasyPort Web Port Web Default Disabled IOLAN SDS SCS STS User s Guide Version 3 6 Management TFTP Tab Field Descriptions You must have a TFTP server running on any host that you are uploading or downloading files to from Login Bootup Files Message of the Day MOTD TFTP Console Port Retry Timeout seconds Configure the following parameters Retry The number of times the IOLAN will retry to transmit a TPFT packet to from a host when no response is received A value of 0 zero means that the IOLAN will not attempt a retry should TFTP fail Range 0 5 Default 5 Timeout The time in seconds that the IOLAN will wait for a successful transmit or receipt of TFTP packets before retrying a TFTP transfer Range 3 10 Default 3 seconds Console Port Tab Field Descriptions This tab is found on rack mount models and is used to configure the Admin Console po
421. y messages The level order from most inclusive to least inclusive is as follows Debug Info Notice Warning Error Critical Alert Emergency The following events trigger an email notification on the System for the specified Level e Reboot Alert Level e IOLAN System Failure Error Level e Authentication Failure Notice Level e Successful Login Downloads all Configuration Save Commands Info Level IOLAN SDS SCS STS User s Guide Version 3 6 289 Alerts 290 Field Descriptions Enable Email Alert Level Send More Debug Info Notice Warning Error Critical Alert L gt Emergency Send Less Addressing To Subject From Reply To Outgoing Mail Server SMTP Configure the following parameters Enable Email Alert Enables disables a global email alerts setting Even if this option is disabled Level To Subject From Reply To Outgoing Mail Server you can still configure individual serial port email alerts When this option is enabled individual serial ports can inherit these email alerts settings Default Disabled Choose the event level that triggers an email notification Data Options Emergency Alert Critical Error Warning Notice Info Debug Default Emergency An email address or list of email addresses that will receive the email notification A text string which can contain spaces that will display
422. yte 10 Bytes e Message type 1 Byte e 0 Digital input status e Serial I O status e Input number 1 Byte e Digital input will be 1 2 3 or 4 to represent the channel number e Serial I O will be 5 DSR 6 DCD or 7 CTS MAC Address of the IOLAN sending the input information 6 Bytes Current Alarm State 1 Byte e 0 Notinalarm e 1 InAlarm e Current Status of Input 1 Byte e 0 Inactive for digital input Active for digital input e Reserved for future use Reserved bytes will have the value 0x00 10 Bytes Applications should be written in such a way so that they look at the Message type byte to determine the format of the message If the application encounters a Message type it does not recognize it should discard the message and read the next 20 byte block IOLAN SDS SCS STS User s Guide Version 3 6 Channels Field Descriptions The Local connection option is different depending on whether you are configuring a Digital Input or a Digital Output Relay channel The Local connection option for Digital Input lists all the local Digital Output channels or output serial signal pins that it is associated with Digital Input can be connected to multiple local Digital Output or Relay channels or output serial signal pins However a Digital Output can only be associated with one Digital Input channel or input serial signal pin The Local connection option for Digital Output configures the
Download Pdf Manuals
Related Search
Related Contents
Suncast BMS6310 Instructions / Assembly r。b。‡ 俊 c。upe@ Television - Sony Asia Pacific riempi big bag ARM to Arduino Manual John`s AMS Instrument Developoment Easy Call - Manuale utente Navigation - Subaru Technical Information System Craftsman 5 pc. Screwdriver Set, Precision Manufacturer's Warranty 真励磁作動形ブレーキ Copyright © All rights reserved.
Failed to retrieve file