NetLinx Security with a Terminal Connection 117 | AMX NI-3101-SIG

Server - Creating a Request for an SSL Certificate	81
Common Steps for Requesting a Certificate from a CA	83
Communicating with the CA	83
Server - Exporting an SSL Certificate Request	84
Server - Importing a CA created SSL Certificate	85
Manage System - Device Menu Buttons	86
Device Menu - Configuring the Network Settings	86
Device Menu - Developing a URL List	88
Device Menu - Changing the Device Number	89
Device Menu - Controlling or Emulating a device	90
Device Menu - Viewing the Log	90
Device Menu - Running a Diagnostic Filter	90
System Settings - Manage License	91
Adding a new license	91
Removing a license	92
System Settings - Manage NetLinx Devices	93
Manage NetLinx Devices - Displaying NDP-capable devices	95
Manage NetLinx Devices - Binding/Unbinding - Explained	95
Manage NetLinx Devices - Obtaining NetLinx Device information	96
System Settings - Manage Other Devices - Dynamic Device Discovery Pages	97
What is Dynamic Device Discovery?	101
What is the difference between Program and Run-time defined binding?	102
Manage Other Devices - Manage Device Bindings	102
Configuring application-defined devices	103
What are Application Devices and their association status?	103
Manage Other Devices Menu - Viewing Discovered Devices	106
Manage Other Devices Menu - Creating a new User-Defined Device	108
How do I write a program that uses Dynamic Device Discovery	109
How do I configure a Run-time installation	110
Accessing an SSL-Enabled Master via an IP Address	111
Using your NetLinx Master to control the G4 panel	114
What to do when a Certificate Expires	116
NetLinx Security with a Terminal Connection	117
NetLinx Security Features	117
Initial Setup via a Terminal Connection	118
Establishing a Terminal connection via the RS-232/USB Configuration Port	118
Accessing the Security configuration options	118
Option 1 - Set system security options for NetLinx Master (Security Options Menu) . 119
Option 2 - Display system security options for NetLinx Master	121

NI-3101-SIG Signature Series NetLinx Integrated Controller	iii

Image 5

AMX NI-3101-SIG manual NetLinx Security with a Terminal Connection 117

Contents

NI-3101-SIG AMX Limited Warranty and Disclaimer Introduction NetLinx Security within the Web Server NetLinx Security with a Terminal Connection 117 Troubleshooting 167 NI-3101-SIG FG2105-08 NetLinx Integrated Master Controller Features NI-3101-SIG Specifications NI-3101-SIG SpecificationsBlue LED bar lights when powered up MB Flash RS-232/422/485 Ports 1 D notation is used to represent a device number IR ports support data mode at limited baud rates and wiringDistances NI-3101-SIG Specifications Page Where DevicePortSystem DPSStructure DEV Numberportsystem Installation into an Equipment Rack Working with the Configuration DIP switch Program Run Disable PRD modePRD Mode Settings PRD Mode Mode Description Blue White Configuration Port Connections and WiringModes and Front Panel LED Blink Patterns Modes and LED Blink Patterns Port Assignments and Functionality Off No power, or the controller is not functioning properlyAXlink Port and LED Rear Port Assignments are as follows Wiring length guidelines Wiring GuidelinesPreparing captive wires Wiring Guidelines NI-3101 @ 900 mA Using the 4-pin mini-Phoenix connector for data and power Wiring a power connection GND AXP/TX AXM/RX Relay Port Connections and Wiring DB9 Device Port Connections and WiringRS-232/422/485 Device Port Wiring Specifications Pin Port +12V 6 5 4 3 2 Input/Output I/O Port Connections and WiringRelay connections Port Wiring Specifications NI-3101-SIG IR/Serial Port Connections and WiringIR/Serial Connector Wiring Specifications per Port Signal Function Signals Connection Pairing Color Ethernet/RJ-45 Port Connections and WiringEthernet RJ-45 Pinouts and Signals Ethernet Ports Used by the NetLinx Integrated Controllers Ethernet ports used by the Integrated ControllersPort type Description Standard Port On-board Master has a built-in FTP server 21/20 TCP Replacing the Timekeeper Battery Configuration and Firmware Update Communicating with the Master via the Program Port Master Communication Settings dialog box COM1 Setting the System Value Using multiple NetLinx Masters Device Addressing dialog changing the device value Changing the Device Address of a NetLinx Device Recommended NetLinx Device numbers Using the ID Button to Change the Controller’s Device ValueAxcess Devices use Axcess standards 301 Resetting the Factory Default System and Device Values Network Addresses dialog for a Dhcp IP Address Obtaining the Master’s IP Address using Dhcp Configuration and Firmware Update Assigning a Static IP to the NetLinx Master Communicating with the NI Device via an IP Communications Settings dialog box TCP/IP Settings dialog box Master Controller User Name and Password dialog box Sample NetLinx Workspace window showing OnLine Tree tab Verifying the current version of NetLinx Master Firmware Firmware Kit File usage for NI Controllers Upgrading the On-board Master Firmware via an IP Select the NI Master’s Kit file from the Files section FIG After the last component fails to install, click Done Upgrading the NI Controller Firmware via IP Configuration and Firmware Update Configuration and Firmware Update Page Username and profile NetLinx Security within the Web Server Case sensitive NetLinx Security TermsNetLinx Security Terms Accessing an Unsecured Master via an Http Address Browser Application Frames Default Security Configuration Account Group Default Security Configuration case-sensitive Telnet Security Master Firmware Security Access Parameters Managing WebControl Connections Web Control Manage WebControl Connection Page Features Security FeaturesFeature Description Compatible Devices Field Internet Feature Description System Level Security FeaturesSecurity System Level Security Group Level System Level Security Communication settings, and security parameters Configuration/Reset, URL list settings, MasterMaster must provide a valid username and password And/or SSH Ports. SSH version 2 is only supported Section on page 49 for more detailed field descriptions Setting the system security options for a NetLinx Master Administrator group account cannot be deleted or modified You are logged in as a user with Configuration Access Icsp AuthenticationSecurity Group Level Security Manage Group Communication settings, and file transfers Configure Group PropertiesIP configuration/Reset, URL list settings, Master Modifying the properties of an existing Group Adding a new Group Deleting an existing Group Manage Users Feature Description Manage UsersSecurity User Level Security Feature Description Configure User Properties Configure User PropertiesTo this User Security Details Feature Description User Security Details Configure Users PropertiesAdding a new User Sensitive and must be unique Modifying the properties of an existing User Click the Back button to return to the Manage User Deleting an existing User System Settings Feature Description Online Tree menu System Settings Manage SystemManage System Page Components Online Tree System menu buttons Feature Description Management menu optionsThis button is available from within all Management Menus Port menu buttons Feature Description Device menu buttons System Menu Modifying the Date/Time Manage System System Menu Buttons System Menu Controlling/Emulating Devices on the Master System Menu Rebooting the MasterSystem Menu Changing the System Number Control/Emulate dialog Select either the Control or Emulate option Minimum Value Maximum Value Valid Level Data Types and Ranges Diagnostics dialog showing modify popup Manage System Diagnostics Feature Update Remove Description Setting up and removing a Diagnostic FilterDiagnostic Configuration Dialog System/Device/Port Feature Description PresetsNew Preset. Refer to of this section for more information NetLinx Security within the Web Server Default port for each service is listed to the right Setting the Master’s Port ConfigurationsManage System Server Server Submenu Options FTP SSH Is determined by the user Modifying the Server Port SettingsServer Port Settings Enabled but the value can not be changed FeatureDescriptionSSH Port Address field of the SSH Client application Certificate consists of two different Keys SSL Server Certificate Creation Procedures Contained in the certificate on the target Master Server Certificate EntriesFrom an external source Desired Server Creating a self-generated SSL Certificate Server Display SSL Server Certificate Information Server Creating a Request for an SSL Certificate Server Regenerating an SSL Server Certificate Request State/province name must be fully spelled out Communicating with the CA Common Steps for Requesting a Certificate from a CA Export SSL Certificate dialog Server Exporting an SSL Certificate Request Before importing a CA server certificate Server Importing a CA created SSL Certificate Manage System Device Menu Buttons Device Menu Configuring the Network Settings DNS Address Network Settings DialogFeature Description IP Address Click the Back button to return to the main URL List dialog Device Menu Developing a URL List URL List dialog with entries Device Menu Changing the Device Number Device Menu Controlling or Emulating a device Device Menu Running a Diagnostic FilterMaster section on page 67 for more information Device Menu Viewing the Log Adding a new license System Settings Manage License Removing a license Manage NetLinx Devices System Settings Manage NetLinx DevicesFeature Clear List Refresh List Description After a period of time, unable to establish communication Feature Description Device Listings Manage NetLinx Devices Binding/Unbinding Explained Manage NetLinx Devices Displaying NDP-capable devicesClick the icon to collapse the particular Master’s listing MAC Address of the Master in FIG Manage NetLinx Devices Obtaining NetLinx Device information System Settings Manage Other Devices Configure Binding Options Feature Description Dynamic Device Discovery linksManage Other Devices Must always be User-Defined devices This selection is a one-time occurrence. Upon the next Reboot, the selection is cleared Deleted via the Purge Bound Modules on Reset selection Dynamic Device Discovery Concepts What is Dynamic Device Discovery? Manage Other Devices Manage Device Bindings What are Application Devices and their association status? Configuring application-defined devicesPROGRAMNAME=DDD Defineconstant Definetype Definevariable Manage Device Bindings NetLinx Security within the Web Server View Discovered Devices Manage Other Devices Menu Viewing Discovered Devices Module Properties displayed via a mouse-over popup dialog Amplifier DocumentCamera SlideProjector AudioConferencer SwitcherSDK-Class Types How do I write a program that uses Dynamic Device Discovery To configure a Static application interface How do I configure a Run-time installation Accessing an SSL-Enabled Master via an IP Address Security Alert and Certificate popups Certificate Import Wizard Using your NetLinx Master to control the G4 panel WebControl VNC installation and Password entry screens Connection Details dialog What to do when a Certificate Expires User has access to the Icsp communication functionality NetLinx Security FeaturesNetLinx Security Features Accessing the Security configuration options Initial Setup via a Terminal ConnectionSetup security Access Logout Close NetLinx Security with a Terminal Connection Or Enter to return to previous menu Security Options EnabledSelect to change current security option Items in the Security Options Menu are described below CommandOption 2 Display system security options for NetLinx Master Option 3 Add user Edit User Menu Option 4 Edit User Password from that point forward Command DescriptionSelect to change current access right Edit User Menu Option 5 Delete user Access Rights Menu Press Enter to display the following Edit Group menu Option 6 Show the list of authorized usersOption 7 Add Group Path Press Enter to return to the Edit Group menuUser1 Results.txt Or Enter to return to previous menu Set Rights Select from the following list Administrator GroupOption 8 Edit Group Specify Telnet Timeout in seconds Option 11 Set Telnet Timeout in secondsOption 9 Delete Group Option 10 Show List of Authorized Groups Option 13 Make changes permanent by saving to flash Option 12 Display Telnet Timeout in secondsTelnet Timeout is 10 seconds Main Security menu is described below Main Security MenuMain Security Menu Set system security options for Administrator only function Reset DatabaseGroup Group administrator Rights All Security Options FTP Security Enabled Help Menu Options Help menu SET Icsp TCP Timeout NAME,COMMANDNAME,STRING SET Date SET DNS DPS Logging Into a Session Help Security Setup SecurityLogout Page Master SendCommands Master SendCommandsConverting Axcess Code to NetLinx Code Clock Sendcommand 010,~IGNOREEXTERNALCLOCKCOMMANDS ClockcommandsG4WC Used to determine each unique listing Using the ID Button Master IP Local Port SendCommandsMaster IP Local Port SendCommands Udpsendto PC COM Port Communication Settings Configuration Port CommandsDevicePortSystem DPS NI-2x00 Port Assignments Date Configuration Port CommandsEcho OFF Echo on MSG on or MSG OFF GET Ethernet ModePort Chan OFF DPS, or NameOn DPS, NAME, Chan Ping IP Address Pulse DPS, or Name Name,CommandPWD Name,String Prompts you to enter the new date for the Master Entering N no cancels the operationMaster-to-Master systems Rent Java memory heap size as measured in Megabytes. This Enter Y yes to approve/store the information into the Master Subnet Mask, and Gateway IP Address SET Queue Size Use caution when adjusting these valuesSet queue size Set Queue Size Menu SET UPD BC Rate Each queue Example Show BuffersDisplays a list of any combined devices Example Displays a list of all devices present on the bus Example Displays the log of messages stored in the Masters memory Show LOGMaster logs all internal messages and keeps the most recent If end is not entered, the last 20 messages will be shown Show MAX Buffers Systems listed are in numerical order Example Show SystemLists all active TCP/IP connections Example Displays the current time on the Master Example WindowsTM client programs ESC Pass CodesLinux Telnet client Escape Pass Codes LED SendCommands LED Disable/Enable SendCommandsRS232/422/485 Ports Channels RS232/422/485 ports are Ports These examples DEV = device RS-232/422/485 SendCommandsRS-232/422/485 SendCommands Hsoff GET BaudHson Rxclr Tset Baud SET BaudTxclr Xoff XON RS-232/422/485 SendString Escape SequencesRS-232/422/485 SendString Escape Sequences IR / Serial Ports Channels Command Description 27,20,1IR / Serial Ports Channels Sendstring DEV,27,20,1 IR/Serial SendCommands IR/Serial SendCommandsCaroff Caron Ctof GET ModeCton Iroff PON PODPOF Pton PtofMeters for the IR Ports SET IO Link Sendcommand IR1,SET Mode IR SET ModeSendcommand IR1, SP,25 Short cable length 10 feet Sendcommand IR1,XCHM Sendcommand DEV,XCHM extended channel modeSendcommand IR1,XCH Xchm SendCommands Input/Output SendCommandsGET Input SET Input Troubleshooting Information TCP/IP Page It’s Your World Take Control