ETIC 1230 Bedienungsanleitung

IPL-E Industrial router & RAS server & firewall _________________ User manual Document reference : 9015909-03 _________________

OVERVIEW Page 10 User guide ref. 9015909-03 Industrial router IPL-E Remote control system : MachineVPNSupervisionMachineRouterFirewallVPN se

APPENDIX 1 : HTML administration server Page 100 User guide ref. 9015909-03 Industrial router IPL-E 2/ Diagnostic menu Log To display the events

APPENDIX 2 : VPN mechanism overview Industrial router IPL-E User guide ref. 9015909-03 Page 101 1 Overview VPN is the acronym for « virtual priv

APPENDIX 2 : VPN mechanism overview Page 102 User guide ref. 9015909-03 Industrial router IPL-E 2 Functions A VPN provides the functions describ

APPENDIX 2 : VPN mechanism overview Industrial router IPL-E User guide ref. 9015909-03 Page 103 VPN clearing Periodically, each router (or at lea

13, Chemin du Vieux Chêne 38240 Meylan France Tel : 33 4 76 04 20 00 Fax : 33 4 76 04 20 01 E-mail : contact@etictelecom.

OVERVIEW Industrial router IPL-E User guide ref. 9015909-03 Page 11 The IPL-E router provides the functions hereafter : IP router The IPL-E fire

OVERVIEW Page 12 User guide ref. 9015909-03 Industrial router IPL-E Emails – sms An email (or SMS) can be sent each time one on the two digital i

OVERVIEW Industrial router IPL-E User guide ref. 9015909-03 Page 13 3 Technical data Car General characteristics Dimensions 137 x 48 x 116 mm

OVERVIEW Page 14 User guide ref. 9015909-03 Industrial router IPL-E Remote access server (RAS) User list 25 users Connection VPN PPTP / L2TP-IP

INSTALLATION Industrial router IPL-E User guide ref. 9015909-03 Page 15 1 Product description IPL-E-1400 IPL-E-1220 Ethernet port

INSTALLATION Page 16 User guide ref. 9015909-03 Industrial router IPL-E IPL-E-1230 1.1 Leds Interface Led Function Safe link VPN One VPN

INSTALLATION Industrial router IPL-E User guide ref. 9015909-03 Page 17 8 pins screw block Supply voltage and input / output Pin Nr Signal Funct

INSTALLATION Page 18 User guide ref. 9015909-03 Industrial router IPL-E RS485 2 pins screw block Pin Nr Signal Function 1 A RS485 polarity A 2

INSTALLATION Industrial router IPL-E User guide ref. 9015909-03 Page 19 1.3 DIP-switches & push-button DIP switches SW 1 SW 2 Management OF

Page 2 User guide ref. 9015909-03 Industrial router IPL-E The IPL-E router is manufactured by ETIC TELECOM 13 Chemin du vieux chêne 38

INSTALLATION Page 20 User guide ref. 9015909-03 Industrial router IPL-E The other interface (2 or 4 RJ45 depending on versions) are made to connec

INSTALLATION Industrial router IPL-E User guide ref. 9015909-03 Page 21 7 Digital input & output connection Alarm output 1 relay output is

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 23 1 Set up steps To configure the router, we advise to proceed as follow

CONFIGURATION Page 24 User guide ref. 9015909-03 Industrial router IPL-E 2 Configuring the IPL-E router 2.1 Overview Administration server addre

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 25 2.2 First configuration Step 1 : Check the DIP switches Coming from facto

CONFIGURATION Page 26 User guide ref. 9015909-03 Industrial router IPL-E 2.3 Modifying the configuration from the LAN • If the IP @ of the IPL

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 27 2.4 Modifying the configuration from the WAN interface Coming from facto

CONFIGURATION Page 28 User guide ref. 9015909-03 Industrial router IPL-E 4 Recovering the factory LAN IP address When launching the html browser

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 29 7 Recovering a free access to the administration server If the Login &

CONTENT Industrial router IPL-E User guide ref. 9015909-03 Page 3 OVERVIEW 1 PRODUCTS IDENTIFICATION...

CONFIGURATION Page 30 User guide ref. 9015909-03 Industrial router IPL-E 9 Assigning IP addresses to the LAN and the WAN interfaces 9.1 Princip

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 31 The LAN IP address must be different form the remote LAN IP address

CONFIGURATION Page 32 User guide ref. 9015909-03 Industrial router IPL-E 9.2 LAN interface IP parameters 9.2.1 IP addresses To set up the LAN in

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 33 9.2.2 DHCP server configuration Over the LAN interface, the IPL-E router

CONFIGURATION Page 34 User guide ref. 9015909-03 Industrial router IPL-E 9.3 WAN interface parameters To set the WAN interface IP parameters,

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 35 10 Creating VPN connections between routers 10.1 Principles A VPN is a

CONFIGURATION Page 36 User guide ref. 9015909-03 Industrial router IPL-E To create VPN connections between routers, •••• select the « Setu

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 37 10.2 IPSec VPN connections 10.2.1 Configuring the IPSec protocol ••••

CONFIGURATION Page 38 User guide ref. 9015909-03 Industrial router IPL-E The same preshared key value will be used for remote users L2TP / IPSec c

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 39 10.2.2 Configuring an outgoing IPSec connection To set an outgoing V

CONTENT Page 4 User guide ref. 9015909-03 Industrial router IPL-E … SETUP 3 REBOOTING THE ROUTER AFTER PARAMETERS CHANGES...

CONFIGURATION Page 40 User guide ref. 9015909-03 Industrial router IPL-E ‘Remote WAN IP address’ parameter : Enter the IP network address and net

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 41 10.2.3 Configuring an ingoing IPSec connection To set an ingoing VPN co

CONFIGURATION Page 42 User guide ref. 9015909-03 Industrial router IPL-E Give a name to the connection and select the “ingoing” connection directi

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 43 10.3 TLS VPN connections 10.3.1 Configuring the TLS-SSL protocol ••••

CONFIGURATION Page 44 User guide ref. 9015909-03 Industrial router IPL-E “Connection death time-out” parameter : This parameter defines the maxi

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 45 10.3.2 Configuring an outgoing TLS connection •••• Select the “S

CONFIGURATION Page 46 User guide ref. 9015909-03 Industrial router IPL-E “Login & Password” parameter: Enter the login and password, the route

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 47 11 Routing functions 11.1 Basic routing function Once an iP address has

CONFIGURATION Page 48 User guide ref. 9015909-03 Industrial router IPL-E 11.2 Static routes However, the router R2 is not able to route frames be

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 49 Remark : It is not necessary to enter in the router R2 the static route t

CONTENT Industrial router IPL-E User guide ref. 9015909-03 Page 5 … SETUP 13 VRRP REDUNDANCY...

CONFIGURATION Page 50 User guide ref. 9015909-03 Industrial router IPL-E To enable RIP, •••• select the « Setup» menu, the “Routing” menu and

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 51 When a frame is addressed to the IPL-E router with a particular configured

CONFIGURATION Page 52 User guide ref. 9015909-03 Industrial router IPL-E 12.3 Advanced network address and port translation 12.3.1 Principle This

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 53 12.3.2 Configuration To set the advanced address translation functions •

CONFIGURATION Page 54 User guide ref. 9015909-03 Industrial router IPL-E To create a new DNAT rule •••• Click “Add a DNAT” rule. •••• S

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 55 To replace the source IP address & destination port •••• Click “

CONFIGURATION Page 56 User guide ref. 9015909-03 Industrial router IPL-E 13 VRRP redundancy That function is available only in IPL-E-1400B, IPL-

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 57 13.2 Configuring VRRP on the LAN interface To enable and configure VRRP,

CONFIGURATION Page 58 User guide ref. 9015909-03 Industrial router IPL-E 13.3 Configuring VRRP on the WAN interface To enable and configure VRR

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 59 14 Remote users connections service The IPL-E provides a full remote use

CONTENT Page 6 User guide ref. 9015909-03 Industrial router IPL-E …SETUP 20 ADVANCED FUNCTIONS...

CONFIGURATION Page 60 User guide ref. 9015909-03 Industrial router IPL-E 15 Remote users connections 15.1 Principles A remote user connection is

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 61 15.2 Configuring a TLS connection The M2Me_Secure software provided by E

CONFIGURATION Page 62 User guide ref. 9015909-03 Industrial router IPL-E • Select the VPN type “ TLS”. • Click the “Properties” button and s

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 63 “Remote Users authentication” parameters : Authentication an encryption ca

CONFIGURATION Page 64 User guide ref. 9015909-03 Industrial router IPL-E 15.3 Configuring a PPTP connection We describe hereafter how to configu

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 65 16 M2Me_Connect service This function is available in IPL-E-1400B, IPL-E

CONFIGURATION Page 66 User guide ref. 9015909-03 Industrial router IPL-E 16.2 Configuring a M2Me_Connect connection Step 1 : Router configur

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 67 Step 2 : Configuring the M2Me_Secure software • Click « Menu » and then

CONFIGURATION Page 68 User guide ref. 9015909-03 Industrial router IPL-E 17 Users list The user list registers 25 authorised remote users forms.

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 69 Attention : Coming from factory, a default user is registered; his logi

OVERVIEW Industrial router IPL-E User guide ref. 9015909-03 Page 7 1 Products identification IPL-E- 1400 1220 1230 IP router • • • Firewall

CONFIGURATION Page 70 User guide ref. 9015909-03 Industrial router IPL-E E-mail : The IPL-E will send an email to that address in two situations :

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 71 18 Firewall 18.1 Overview The firewall filters IP packets between the

CONFIGURATION Page 72 User guide ref. 9015909-03 Industrial router IPL-E The firewall of the IPL-E firewall can thus be represented by the drawing

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 73 18.2 Main filter The main filter applies to all the IP packets except to

CONFIGURATION Page 74 User guide ref. 9015909-03 Industrial router IPL-E •••• Main filter table The main filter is a table, each line being a

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 75 18.2.2 Configuring the main filter Select the “Security” menu and then “

CONFIGURATION Page 76 User guide ref. 9015909-03 Industrial router IPL-E Configure successively the WAN traffic rules using the same method. Step

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 77 ”Destination IP address” & “destination port” parameters : Enter the

CONFIGURATION Page 78 User guide ref. 9015909-03 Industrial router IPL-E Step 2 : Enter the list of devices of the LAN network • Select the «Syst

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 79 Step 3 : Build a remote user filter • Select the « security» menu, then

OVERVIEW Page 8 User guide ref. 9015909-03 Industrial router IPL-E 2 Product presentation 2.1 Overview The IPL-E is a security product designe

CONFIGURATION Page 80 User guide ref. 9015909-03 Industrial router IPL-E • Click « add a new filter ». • Assign a name to the new filter. •

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 81 Step 4 : Assign a filter to each user • Select the « Remote user» and th

CONFIGURATION Page 82 User guide ref. 9015909-03 Industrial router IPL-E 19 Serial to IP gateway The IPL-E features two serial ports. A seria

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 83 19.1 Modbus menu 19.1.1 Modbus server gateway This gateway allows to co

CONFIGURATION Page 84 User guide ref. 9015909-03 Industrial router IPL-E “Local retry” parameter : Set up the number of times the gateway will re

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 85 19.1.2 Modbus client gateway This gateway allows to connect a serial mo

CONFIGURATION Page 86 User guide ref. 9015909-03 Industrial router IPL-E “TCP port number” parameter : Set the TCP port number the gateway has

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 87 “RS232/485 input buffer size” parameter : Set up the maximum length of

CONFIGURATION Page 88 User guide ref. 9015909-03 Industrial router IPL-E • Select the “transparent” and then the “raw server COM1” or the “raw s

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 89 19.3.2 Configuration •••• Select the “gateway” menu and then t

OVERVIEW Industrial router IPL-E User guide ref. 9015909-03 Page 9 2.2 Applications That features in the same product make the IPL-E a top level so

CONFIGURATION Page 90 User guide ref. 9015909-03 Industrial router IPL-E 20 Advanced functions 20.1 Adding a certificate Coming from the factor

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 91 Product start-up : If that option is selected, the router will send an SNM

CONFIGURATION Page 92 User guide ref. 9015909-03 Industrial router IPL-E 20.3 Configuring the web portal The web portal in an html page; it disp

CONFIGURATION Industrial router IPL-E User guide ref. 9015909-03 Page 93 20.4 Configuring the DNS server For domain names resolution, the IPL-E c

MAINTENANCE Industrial router IPL-E User guide ref. 9015909-03 Page 95 1 Diagnostic The html server provides extended diagnostic functions. Selec

MAINTENANCE Page 96 User guide ref. 9015909-03 Industrial router IPL-E •••• Serial gateway : That page displays the current status of the se

MAINTENANCE Industrial router IPL-E User guide ref. 9015909-03 Page 97 3 Updating the firmware Step 1 : Before starting, you need, a PC with a

MAINTENANCE Page 98 User guide ref. 9015909-03 Industrial router IPL-E

APPENDIX 1 : HTML administration server Industrial router IPL-E User guide ref. 9015909-03 Page 99 1/ Setup menu Remote users To assign an ID an