ETIC 1400 Bedienungsanleitung

RAS-E Industrial router & RAS server & firewall _________________ User manual Document reference : 9016309-04 For the firmware ver

OVERVIEW Page 10 User guide ref. 9016309-04 Industrial router RAS-E Remote maintenance through the M2Me_Connect service : MachineRASRouterFirewa

APPENDIX 2 : Basic information about VPN Page 100 User guide ref. 9016309-04 Industrial router RAS-E Confidentiality A VPN protects the privacy of

APPENDIX 3 : Information which has to be collected to setup a connection to the M2Me_service Industrial router RAS-E User guide ref. 9016309-04 Pag

ETIC TELECOM 13, Chemin du Vieux Chêne 38240 Meylan France Tel : 33 4 76 04 20 00 Fax : 33 4 76 04 20 01 E-mail : contact@e

OVERVIEW Industrial router RAS-E User guide ref. 9016309-04 Page 11 2.3 Main features The RAS-E router provides the functions hereafter : Some fe

OVERVIEW Page 12 User guide ref. 9016309-04 Industrial router RAS-E Serial gateway * The product includes an asynchronous (RS232-RS485) to IP gat

OVERVIEW Industrial router RAS-E User guide ref. 9016309-04 Page 13 3 Technical data Car General characteristics Dimensions 137 x 48 x 116 mm

OVERVIEW Page 14 User guide ref. 9016309-04 Industrial router RAS-E Remote access server (RAS) User list 25 users Connection VPN PPTP / L2TP-IP

INSTALLATION Industrial router RAS-E User guide ref. 9016309-04 Page 15 1 Product description RAS-E-1400 RAS-E-1400 Interface Led Func

INSTALLATION Page 16 User guide ref. 9016309-04 Industrial router RAS-E RAS-E-1220 10 / 100 BT12RS232RS485RxTxRS485OPERATIONVPNLINKEthernetp

INSTALLATION Industrial router RAS-E User guide ref. 9016309-04 Page 17 RAS-E-1230 Ethernetport 1 & port 210 / 100 BT12RS232RX led (To IPL)

INSTALLATION Page 18 User guide ref. 9016309-04 Industrial router RAS-E RAS-E-1201 10 / 100 BT12USBRS485VPNLINK Ethernetport 1 & port 2O

INSTALLATION Industrial router RAS-E User guide ref. 9016309-04 Page 19 1.1 Connectors 8 pins screw block Supply voltage and input / output Pin

Page 2 User guide ref. 9016309-04 Industrial router RAS-E The RAS-E router is manufactured by ETIC TELECOM 13 Chemin du vieux chêne 38

INSTALLATION Page 20 User guide ref. 9016309-04 Industrial router RAS-E RS485 2 pins screw block (RAS-E-1220) Pin Nr Signal Function 1 A RS485

INSTALLATION Industrial router RAS-E User guide ref. 9016309-04 Page 21 1.2 DIP-switches & push-button DIP switches SW 1 SW 2 Management OF

INSTALLATION Page 22 User guide ref. 9016309-04 Industrial router RAS-E 5 RS232 interface The RS232 data rate can be tuned from 1200 to 115200 b/

INSTALLATION Industrial router RAS-E User guide ref. 9016309-04 Page 23 7 Digital input & output connection Alarm output 1 relay output is

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 25 1 Set up steps To configure the router, we advise to proceed as follow

CONFIGURATION Page 26 User guide ref. 9016309-04 Industrial router RAS-E 2 Configuring the RAS-E router 2.1 Overview Administration server addr

CONFIGURATION 2.2 First configuration Step 1 : Check the DIP switches Coming from factory, the DIP switches SW1 and SW2 are set OFF to select the s

CONFIGURATION Page 28 User guide ref. 9016309-04 Industrial router RAS-E 2.3 Modifying the configuration from the LAN • If the IP @ of the RAS-

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 29 2.4 Modifying the configuration from the WAN interface Coming from facto

CONTENT Industrial router RAS-E User guide ref. 9016309-04 Page 3 OVERVIEW 1 PRODUCTS IDENTIFICATION...

CONFIGURATION Page 30 User guide ref. 9016309-04 Industrial router RAS-E 4 Recovering the factory LAN IP address When launching the html browser

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 31 7 Recovering a free access to the administration server If the Login &

CONFIGURATION Page 32 User guide ref. 9016309-04 Industrial router RAS-E 9 LAN interface The LAN interface is made of 4 Ethernet switched port

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 33 9.1 IP protocol • Click the « Configuration» menu and then « LAN inter

CONFIGURATION Page 34 User guide ref. 9016309-04 Industrial router RAS-E Over the LAN interface, the RAS-E router can behave like a DHCP server.

CONFIGURATION 10 WAN interface The WAN interface is made to connect the RAS-E router to a wide area network (WAN) like a company network or a prov

CONFIGURATION Page 36 User guide ref. 9016309-04 Industrial router RAS-E If that option is selected, the source IP address of any frame coming f

CONFIGURATION 11 Creating VPN connections between routers 11.1 Principles A VPN tunnel is a safe link set between two end-points routers over an

CONFIGURATION Page 38 User guide ref. 9016309-04 Industrial router RAS-E To create VPN connections between routers, • select the « Setup» men

CONFIGURATION 11.2 IPSec VPN connections 11.2.1 Configuring the IPSec protocol • Select the “Setup” menu, the “network” menu and then ‘VPN conn

CONTENT Page 4 User guide ref. 9016309-04 Industrial router RAS-E … SETUP 3 REBOOTING THE ROUTER AFTER PARAMETERS CHANGES...

CONFIGURATION Page 40 User guide ref. 9016309-04 Industrial router RAS-E “Authentication & encryption key” parameters : Authentication an enc

CONFIGURATION 11.2.2 Configuring an outgoing IPSec connection Remote LANIP addr.IP networkVPNOutgoingconnectionRemote routerRouter Remote WANIP ad

CONFIGURATION Page 42 User guide ref. 9016309-04 Industrial router RAS-E ‘Remote WAN IP address’ parameter : Enter the IP network address and net

CONFIGURATION 11.2.3 Configuring an ingoing IPSec connection VPNLANIP addr.Remote routerRouter Remote LANIP addr.Remote WANIP addr.Ingoingconnectio

CONFIGURATION Page 44 User guide ref. 9016309-04 Industrial router RAS-E Give a name to the connection and select the “ingoing” connection directi

CONFIGURATION 11.3 TLS VPN connections 11.3.1 Configuring the TLS-SSL protocol • Select the “Setup” menu, the “network” menu and then the ‘VPN co

CONFIGURATION Page 46 User guide ref. 9016309-04 Industrial router RAS-E “VPN network address” & “VPN network netmask” parameters : The TLS

CONFIGURATION 11.3.2 Configuring an outgoing TLS connection Remote LANIP addr.IP networkVPNOutgoingconnectionRemote routerRouter Remote WANIP add

CONFIGURATION Page 48 User guide ref. 9016309-04 Industrial router RAS-E “Login & Password” parameter: Enter the login and password, the route

CONFIGURATION 11.3.3 Configuring an ingoing TLS connection VPNLANIP addr.Remote routerRouter Remote LANIP addr.Remote WANIP addr.Ingoingconnection

CONTENT Industrial router RAS-E User guide ref. 9016309-04 Page 5 … SETUP 15 REMOTE USERS CONNECTIONS...

CONFIGURATION Page 50 User guide ref. 9016309-04 Industrial router RAS-E “Remote LAN address” & “Remote LAN netmask” ” parameters : Enter the

CONFIGURATION 12 Routing functions 12.1 Basic routing function Once an iP address has been assigned to the R2 router on the LAN interface and anot

CONFIGURATION Page 52 User guide ref. 9016309-04 Industrial router RAS-E 12.2 Static routes However, the router R2 is not able to route frames b

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 53 Remark : It is not necessary to enter in the router R2 the static route t

CONFIGURATION Page 54 User guide ref. 9016309-04 Industrial router RAS-E To enable RIP, • select the « Setup» menu, the “Routing” menu and then

CONFIGURATION PLC1 192.168.0.15TCP : 102PLC2 192.168.0.16TCP : 502PC 192.168.0.17TCP : 8062.10.10.7TCP : 102WAN IP addr. :62.10.10.7WANnetwor

CONFIGURATION Page 56 User guide ref. 9016309-04 Industrial router RAS-E 14 Remote users connections service The RAS-E provides a full remote us

CONFIGURATION 15 Remote users connections 15.1 Principles A remote user connection is a tunnel set between a remote PC and a router providing the

CONFIGURATION Page 58 User guide ref. 9016309-04 Industrial router RAS-E 15.2 Configuring a TLS connection The M2Me_Secure software provided by

CONFIGURATION • Select the VPN type “ TLS”. • Click the “Properties” button and set the parameters. ”Port number” & “Protocol” : Select th

CONTENT Page 6 User guide ref. 9016309-04 Industrial router RAS-E DIAGNOSTIC & MAINTENANCE 1 DIAGNOSTIC...

CONFIGURATION Page 60 User guide ref. 9016309-04 Industrial router RAS-E “Remote Users authentication” parameters : Authentication an encryption c

CONFIGURATION 15.3 Configuring a PPTP connection We describe hereafter how to configure the router and the PC to set a PPTP remote user connection

CONFIGURATION Page 62 User guide ref. 9016309-04 Industrial router RAS-E 16 M2Me_Connect service 16.1 Overview The M2Me_Connect service simplif

CONFIGURATION 16.2 Configuring a M2Me_Connect connection Step 1 : Router configuration • Select the « Setup» menu, the « Remote users » menu,

CONFIGURATION Page 64 User guide ref. 9016309-04 Industrial router RAS-E Step 2 : Configuring the M2Me_Secure software • Click « Menu » and then

CONFIGURATION 17 Users list The user list registers 25 authorised remote users forms. Each user form stores the identity of the user (Login and pa

CONFIGURATION Page 66 User guide ref. 9016309-04 Industrial router RAS-E Attention : Coming from factory, a default user is registered; his log

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 67 E-mail : The RAS-E will send an email to that address in two situations :

CONFIGURATION Page 68 User guide ref. 9016309-04 Industrial router RAS-E 18 Firewall 18.1 Overview The firewall filters IP packets between th

CONFIGURATION The firewall of the RAS-E firewall can thus be represented by the drawing hereafter : VPN between routersWANLANUsers filtersMain filte

OVERVIEW Industrial router RAS-E User guide ref. 9016309-04 Page 7 1 Products identification RAS-E- 1400 1201 1220 1230 IP router • • • • Firew

CONFIGURATION Page 70 User guide ref. 9016309-04 Industrial router RAS-E 18.2 Main filter The main filter applies to all the IP packets except

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 71 • Main filter table The main filter is a table, each line being a rule.

CONFIGURATION Page 72 User guide ref. 9016309-04 Industrial router RAS-E 18.2.2 Configuring the main filter Select the “Security” menu and then

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 73 Configure successively the WAN traffic rules using the same method. Step

CONFIGURATION Page 74 User guide ref. 9016309-04 Industrial router RAS-E ”Destination IP address” & “destination port” parameters : Enter the

CONFIGURATION Step 2 : Enter the list of devices of the LAN network • Select the «System» menu, then «Devices list». The list of the devices of the

CONFIGURATION Page 76 User guide ref. 9016309-04 Industrial router RAS-E Step 3 : Build a remote user filter • Select the « security» menu, then

CONFIGURATION • Click « add a new filter ». • Assign a name to the new filter. • Choose the policy ; « All is forbidden except what we specify

CONFIGURATION Page 78 User guide ref. 9016309-04 Industrial router RAS-E Step 4 : Assign a filter to each user • Select the « Remote user» and

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 79 19 Serial to IP gateway That function is available in RAS-E-1220 or RAS

OVERVIEW Page 8 User guide ref. 9016309-04 Industrial router RAS-E 2 Product presentation 2.1 Overview The RAS-E is a security product design

CONFIGURATION Page 80 User guide ref. 9016309-04 Industrial router RAS-E 19.1 Modbus menu 19.1.1 Modbus server gateway This gateway allows to

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 81 “Local retry” parameter : Set up the number of times the gateway will rep

CONFIGURATION Page 82 User guide ref. 9016309-04 Industrial router RAS-E 19.1.2 Modbus client gateway This gateway allows to connect a serial m

CONFIGURATION “TCP port number” parameter : Set the TCP port number the gateway has to use. “IP address” parameter : The modbus client gatewa

CONFIGURATION Page 84 User guide ref. 9016309-04 Industrial router RAS-E “RS232/485 input buffer size” parameter : Set up the maximum length of

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 85 • Select the “transparent” and then the “raw server COM1” or the “raw se

CONFIGURATION Page 86 User guide ref. 9016309-04 Industrial router RAS-E 19.3.2 Configuration • Select the “gateway” menu and then the “

CONFIGURATION 20 USB to IP gateway That function is available in RAS-E-1201 only. 20.1 Principles The RAS-E-1201 provides a USB to IP gateway. It

CONFIGURATION Page 88 User guide ref. 9016309-04 Industrial router RAS-E 20.2 Configuration Select the “Setup” menu and then the “USB” menu. “A

CONFIGURATION Industrial router RAS-E User guide ref. 9016309-04 Page 89 21 Advanced functions 21.1 Adding a certificate Coming from the factory

OVERVIEW Industrial router RAS-E User guide ref. 9016309-04 Page 9 2.2 Applications That features in the same product make the RAS-E a top level s

CONFIGURATION Page 90 User guide ref. 9016309-04 Industrial router RAS-E Product start-up : If that option is selected, the router will send an SN

CONFIGURATION 21.3 Configuring the web portal The web portal in an html page; it displays a list of devices connected to the LAN. Each line of the

CONFIGURATION Page 92 User guide ref. 9016309-04 Industrial router RAS-E 21.4 Configuring the DNS server For domain names resolution, the RAS-E

MAINTENANCE Industrial router RAS-E User guide ref. 9016309-04 Page 93 1 Diagnostic The html server provides extended diagnostic functions. Sele

MAINTENANCE Page 94 User guide ref. 9016309-04 Industrial router RAS-E • Serial gateway : That page displays the current status of the serial g

MAINTENANCE Industrial router RAS-E User guide ref. 9016309-04 Page 95 3 Updating the firmware Step 1 : Before starting, you need, a PC with a

MAINTENANCE Page 96 User guide ref. 9016309-04 Industrial router RAS-E

APPENDIX 1 : HTML administration server Industrial router RAS-E User guide ref. 9016309-04 Page 97 1/ Setup menu Remote users To assign an ID an

APPENDIX 1 : HTML administration server Page 98 User guide ref. 9016309-04 Industrial router RAS-E 2/ Diagnostic menu Log To display the events

APPENDIX 2 : Basic information about VPN Industrial router RAS-E User guide ref. 9016309-04 Page 99 1 Overview VPN is the acronym for « virtual