DeviceManager, WebManager, SSH Server, IPsec | Perle Systems SCS

Services

DeviceManager	DeviceManager daemon process in the IOLAN. If you disable this service, you
	will not be able to connect to the IOLAN with the DeviceManager application.
	The DeviceManager listens on port 33812 and sends on port 33813.
	Default: Enabled
WebManager	WebManager daemon process in the IOLAN listening on port 80.
(HTTP)	Default: Enabled
WebManager	Secure WebManager daemon process in the IOLAN listening on port 443.
(HTTPS)	Default: Enabled
	If you are using the WebManager in secure mode (HTTPS), you need to
	download the SSL/TLS private key and certificate to the IOLAN. You also
	need to set the SSL Passphrase parameter with the same password that was
	used to generate the key. See Keys and Certificates on page 232 for more
	information.
SSH Server	SSH daemon process in the IOLAN listening on TCP port 22.
	Default: Enabled
SNTP Client	Simple Network Time Protocol client process in the IOLAN.
	Default: Enabled
Dynamic Routing	Dynamic Routing daemon process in the IOLAN listening on port 520.
(RIP)	Default: Enabled
IPsec	IPsec daemon process in the IOLAN listening and sending on UDP port 500.
	Default: Disabled

231

Image 231

Perle Systems SCS, STS manual DeviceManager, WebManager, SSH Server, Sntp Client, Dynamic Routing, IPsec

Contents

Iolan SDS/SCS/STS EN 55022 1998, Class A, Note Table of Contents Configuration Methods DHCP/BOOTP Getting Started Network Settings Configuring Serial Ports UDP Sockets Profile 132 Remote Access Slip Profile 179 Configuring Users Configuring Security Configuring I/O Interfaces Channels UDP Configuring Clustering Controlling the RPS, I/O Channels, System Administration Applications Appendix B SSL/TLS Ciphers Appendix E Setting Jumpers 361 Appendix G Utilities Appendix I Troubleshooting Index Glossary Documentation PrefaceAbout This Book Intended Audience Online Help Typeface Conventions Introduction About the IolanIolan Family Models Hardware Iolan Features Software Ldap Security What’s Included ConnectivityIntroduction Iolan Components Desktop Models Power Supply SpecificationsAvailable Accessories Power Over Ethernet PoE Models Rack Mount Models DC Power RequirementsAC Power Requirements Getting to Know Your Iolan Serial Activity Port Port End View Top View Rack Mount Console Port/LED ViewSerial/Ethernet View Dedicated Console Port Rack Mount Models Console/Serial SwitchConsole Mode Serial Mode Powering Up the Iolan Desktop/Rack Mount ModelsModels Secondary back-up Supply DC Power ModelsEarthing Wire Primary Supply Disconnecting 48V Power Supplies from the Iolan Powering Up the Iolan Configuration Methods Chapter Configuration Methods Overview Configures an IP AddressRequires a Configured IP Address Easy Config Wizard DeviceManager Access PlatformsUnique Features Connecting to the Iolan Using DeviceManager DeviceManager Using DeviceManager WebManager Iolan Connecting to the Iolan Using WebManager Using WebManager Command Line Interface Connecting to the Iolan Using the CLIThrough the Network Through the Serial Port Using the CLIConnecting to the Iolan Using the Menu Menu Using the Menu Using DHCP/BOOTP Connecting to the Iolan Using DHCP/BOOTP TACACS+ Securid DHCP/BOOTP Parameters Snmp Connecting to the Iolan Using Snmp Using the Snmp MIB Connecting to the Iolan to Use the IOLAN+ Interface Using the IOLAN+ InterfaceIOLAN+ Interface Changes to the IOLAN+ Interface REMOTE-ADMIN Opt HEX Rlogin/Telnet Remote Access Systems Screen Name Wchiewsds2 Debug mode IP address IOLAN+ Interface Getting Started Easy Configuration Wizard Setting Up the Network Using a Direct Serial Connection to Specify an IP Address Using a Direct Serial Connection to Enable BOOTP/DHCP For an IPv6 Network Using ARP-Ping Setting Up the Serial Ports Setting Up the Serial Ports Setting Up Users Using DeviceManager WebManager DeviceManager Navigating DeviceManager/WebManager EasyPort Web WebManager Starting a New Session Using DeviceManager to Connect to the Iolan Assigning a Temporary IP Address to a New Iolan Logging in to the Iolan Adding/Deleting Manual IOLANs Logging into the Iolan Using WebManager to Connect to the IolanConfiguration Files Creating a New Iolan Configuration in DeviceManager Opening an Existing Configuration File Importing an Existing Configuration FileManaging the Iolan Network Settings Field Descriptions IP SettingsIPv4 Settings Overview IPv6 Settings Custom IPv6 AutoconfigurationIPv6 DHCPv6 Adding/Editing a Custom IPv6 Address Prefix Bits Range Default Server Name.Domain Prefix.Domain Name Advanced Configuration Default 100 msDefault 200 ms Default Disabled Advertise DHCPv6 IP Filtering Data Options AdvancedHost Table Functionality Domain Name Adding/Editing a HostHost Name Fully Qualified Route List IPv4 Subnet Mask Default DefaultAdding/Editing Routes Type DNS/WINS Editing/Adding DNS/WINS Servers RIP Password Ethernet ModeDefault None Authentication Key Dynamic DNSOverview Functionality End Time System Type Account SettingsDefault Dynamic User Name Cipher Suite Field Descriptions Adding/Editing a Cipher Suite Validation Criteria Field Descriptions Common Name IPv6 Tunnels Mode Default ManualAdding/Editing an IPv6 Tunnel Name 102 Iolan SDS/SCS/STS User’s Guide, Version Functionality Serial Ports Editing a Serial Port Copying a Serial Port Resetting a Serial Port Serial Port ProfilesCommon Tabs Hardware Tab Field Descriptions Flow Control Default Enabled Enable Outbound Default FullDefault Auto Flow Control Enable Inbound Email Alert Tab Field Descriptions Packet Forwarding Tab Field Descriptions Packet Size Enable Trigger1Enable Trigger2 Packet Definition Trigger Default TriggerEOF1 Character EOF2 Character Default Client SSL/TLS Settings Tab Field Descriptions 114 Iolan SDS/SCS/STS User’s Guide, Version 115 116 Iolan SDS/SCS/STS User’s Guide, Version Protocol Default TelnetConsole Management Profile General Tab Field Descriptions Advanced Tab Field Descriptions Idle Timeout Enable MicrosoftAdministrator Support Default Disabled Multisessions TruePort Profile ModemPhone Multiple Hosts System Default Enabled Host NameConnect to remote Connect to Define a primary Host and backupAdding/Editing Additional TruePort Hosts Hosts to connect to Backup Host Adding/Editing a Multihost EntryPrimary Host Signals high Day Motd Default Disabled Enable TCPWhen Enable Data Session TimeoutLogging TCP Sockets Profile Connection Workstation/Server on the network Default Enabled Received on the serial port Initiate Connection Adding/Editing Additional Hosts 129 Day Motd Default Disabled Enable Data 131 UDP Sockets Profile UDP port Direction Start IP AddressEnd IP Address Default 0 zero Terminal ProfileUDP Port VT320 specifically supporting VT320-7 Default DumbVT100 TVI925 Is received Default Disabled Protocol Data Range 138 Iolan SDS/SCS/STS User’s Guide, Version Login Settings User Service Settings Erase Telnet SettingsInterrupt Quit Rlogin Settings User is only prompted for a passwordEscape SSH Settings Arcfour Slip SettingsRSA authentication for the SSH session Authentication for the SSH session VJ Compression Routing PPP Settings Default Chap IPv6 RemoteNone Remote User Default 3 seconds Remote PasswordConfigure Req Timeout Address/Control Default 1 minuteRoaming Callback Challenge Interval Printer Profile Client Iolan Tunnel Serial Tunneling ProfileSerial Server Tunnel Serial Act As Tunnel Client Default Disabled Host Name Virtual Modem Profile 154 Iolan SDS/SCS/STS User’s Guide, Version DCD DTR Signal Acts as RTS Signal Always On RTS Signal Acts as AT CommandResponse Delay Phone Number to Host Mapping Host IP Address Control Signal I/O ProfileVModem Phone Number Entry Phone Number Latch Input Signal Field DescriptionsInvert Signal Description Syslog Auto Clear ModeMode Default Disabled Manual Clear Failsafe Action Output Signal Field Descriptions Modbus Gateway Profile Advanced Slave Settings Button UID RangeDestination Slave IP Mappings Default 30 ms Default 1000 msAdvanced Field Descriptions Modbus Slave IP Settings Field Descriptions UID End Adding/Editing Modbus Slave IP SettingsDefault Host UID Start Data Options TCP or UDP Modbus Slave Advanced Settings Field DescriptionsDefault TCP Range Default 50 ms Power Management Profile RPS Model Editing Power Management Plug Settings Field DescriptionsDefault RSP820 RPS Name Data Options On, Off Remote Access PPP ProfileDefault State Default Off Negotiate IP IPv6 Global Authentication Tab Field Descriptions 174 Iolan SDS/SCS/STS User’s Guide, Version Dynamic DNS Field Descriptions Enable DynamicDNS for this Serial Default Disabled Port Host Account Settings 176 Iolan SDS/SCS/STS User’s Guide, Version Enable Magic Configure RequestCompression Default Enabled Enable Protocol Enable VJ Dial In/Out MS Direct HostMS Direct Guest Remote Access Slip Profile 180 Iolan SDS/SCS/STS User’s Guide, Version 181 General Tab Field Description Custom Application Profile Port Buffering Local Port BufferingKeyboard Buttons Hot Keys Direction Remote Port Buffers Field Definitions NFS Directory Enable PortData Default Disabled Enable Key Stroke NFS Host Deny Multiple Advanced Serial Settings TabSignals Process Break Session Escape Default ~menuSerial Port Menu String Modems Tab Adding/Editing a ModemName Name of the modem Field Definitions TruePort Baud Rate Tab 190 Iolan SDS/SCS/STS User’s Guide, Version Configuring Users User Settings General Tab Adding/Editing Users Default Normal Host IP Services TabService Default DSPrompt Indentifier IPv6 Interface Advanced Tab Default English Sessions Tab Connect Session 1, 2, 3 Clustered Ports Serial Port Access TabSerial Port Access Allow Access to 202 Iolan SDS/SCS/STS User’s Guide, Version Authentication Configuring Security Method AuthenticationMethod Default Local Secondary Primary Local General Field Descriptions Radius NAS-Identifier Authenticator response Default Enabled RetryNAS-IP-Address Default Enabled Attributes Field Descriptions KDC Port KerberosRealm KDC Domain Enable TLS BaseTLS Port Primary Host Default None Authentication Authorization Primary Host Secondary HostDefault None Authentication Authorization Port Default Authentication SecurID NIS Tracy Users Logging into the Iolan Using SSHDevice Server Lynn Users Passing Through the Iolan Using SSH Dir/Sil Lynn Sales ServerHR Server Keyboard Interactive Default Enabled PasswordField Descriptions Allow SSH-1 Enable Verbose Output Default DisabledBreak String Button For a valid SSL/TLS connection 218 Iolan SDS/SCS/STS User’s Guide, Version Adding/Editing a Cipher 220 Iolan SDS/SCS/STS User’s Guide, Version VPN IPsec IKE Phase 1 ProposalsESP Phase 2 Proposals Authentication Algorithms-MD5, SHA1, SHA2 Adding/Editing the IPsec Tunnel Local Device Default LeftSecret/Remote Validation Criteria Shared Secret Field Description Remote Validation Criteria Field Descriptions Allow L2TP/IPsec L2TP/IPsec Exceptions Field Description Adding/Editing a VPN Exception Syslog Client ServicesTelnet Server TruePort Full Sntp Client DeviceManagerWebManager SSH Server Keys and Certificates Key Type 234 Iolan SDS/SCS/STS User’s Guide, Version Configuring I/O InterfacesChapter Access Functionality Settings Advanced Slave Modbus Settings Request Queuing Failsafe Timer Functionality Default 30 secondsFailsafe Action is triggered Enable UDP Broadcast of I/O Default Disabled StatusUDP Functionality UDP Entry UDP Settings Default Celsius Temperature Functionality Analog I/O Analog ChannelsAnalog Monitoring Application A4D2 Alarm Settings Default Current Digital Input Monitoring ApplicationDigital I/O Input Mode 247 Digital Output Output Mode Default SinkOutput Pulse Count Pulse ModeInactive Signal Width Active Signal Width Delay Relay Monitoring Application A4D2RelayRelay I/O Width Inactive Signal Warehouse Perle Iolan Reception Active SignalDigital I/O Extension Front Door Current Alarm State 1 Byte z 0 = Not in alarm Message type 1 ByteInput number 1 Byte Enable I/O ExtensionInput TCP Port Local connection Hosts Simultaneously Communicate to the Primary Host Temperature I/O Industrial Freezers Temperature Default RTD Basic Analog Alarm Settings Alarm Settings Advanced Analog Alarm Settings Clear ModeTrigger Type Clear UDP Broadcast Packet UDP Unicast Format Length Enabled Analog SectionSection Channel Length Pin Serial Pin Signal SectionDigital/Relay Section Length Channel Modbus Serial Application Connected to the Network Modbus SlaveUDP Unicast Example Modbus Serial Application Connected to the Serial Port Function Codes Modbus I/O AccessModbus RTU Or Ascii Application Power Digital Output Modbus TCP Application Coil/Register Descriptions Input Registers Serial Port Coil/Register DescriptionsA4/T4 Registers Data Model A1/T1 A2/T2 A3/T3 A4/T4 Holding Registers Data Model D1/R1 D2/R2 Coils A4D2/A4R2 Registers Data Model Pin Coils Serial Pin SignalsD4/D2R2 Registers Data Model D3/R1 D4/R2 Coils Modbus Serial Application TruePort Power Digital Output TruePort I/OTruePort/Modbus Combination PC running Custom Application API TruePort API Over TruePort Only Accessing I/O Data Via TruePort SetupIntroduction Response Format Format of API CommandsGet Commands Command Format Set Commands Example 2 Turn on the first and second relay on a D2R2 unit Successful Response FormatUnsuccessful Response Format Example 1 Turn on the first relay on a D2R2 unit Snmp Traps Error Codes 280 Iolan SDS/SCS/STS User’s Guide, Version Configuring Clustering Chapter Clustering Slave ListAdvanced Button Adding Clustering Slaves Editing Clustering Slave Settings Advanced Clustering Slave OptionsPort Name Master TCP Port Slave TCP Port Configuring the Option Card Option Card SettingsConfiguring the Iolan Modem Card Configuring a Wireless WAN Card Overview Field DescriptionsCard APN 288 Iolan SDS/SCS/STS User’s Guide, Version Configuring the System Chapter AlertsEmail Alerts Alerts Syslog Community ManagementContact Location Privacy Password Auth Algorithm Data Options MD5, SHA Default MD5Auth Password Default DES Time Algorithm Data Options MD5, SHA Default MD5Privacy Algorithm Data Options DES, AES Default DES Confirm Password Trap Sntp Mode Network Time Tab Field DescriptionsSntp Version Time Zone/Summer Time Tab Field Descriptions Custom App/Plugin Login Tab Field Descriptions Bootup Files Tab Field Descriptions Display Motd WebManager/Easy Port Web Message of the Day Motd Tab Field DescriptionsTftp Host Filename Baud Rate Default Flow ControlTftp Tab Field Descriptions Console Port Tab Field Descriptions 302 Iolan SDS/SCS/STS User’s Guide, Version State Button Management profile settings Controlling the RPS, I/O Channels, and IPsec TunnelsRPS Control OK Button Closes the window Plug Control Serial Port Power Control Power Plug StatusButton Serial port Deactivate Output Manually deactivates the channel output IPsec Tunnel Control 308 Iolan SDS/SCS/STS User’s Guide, Version Downloading Configuration Files System Administration ChapterManaging Configuration Files Saving Configuration Files Reboot Server Downloading Configuration Files to Multiple IOLANs Uploading Configuration Files Specifying a Custom Factory Default ConfigurationLess than 3 seconds-Reboots the Iolan Calibrating Voltage Downloading Iolan FirmwareCalibrating I/O Calibrating Analog Input Calibrating RTD Calibrating Temperature InputCalibrating Analog Channels Calibrating Thermocouple Resetting Calibration Data Setting the IOLAN’s Date and Time Rebooting the IolanResetting the Iolan to Factory Defaults Resetting the SecurID Node Secret Language SupportLoading a Supplied Language Translation Guidance Software Upgrades and Language Files Creating Terminal Definition Files Downloading Terminal Definitions For example Resetting Configuration Parameters Lost Admin Password Applications Configuring ModbusConfiguring a Master Gateway Configuring a Slave Gateway Modbus Gateway Settings Modbus Master GatewayModbus Slave Gateway Master Gateway Serial EIA-232 Modbus Serial Port SettingsModbus Master Settings Modbus Slave UID Modbus Slave Settings Modbus Master Slave GatewaySerial Port EIA-422/485 Modbus Master Modbus Slave UID 172.16.0.0 Configuring PPP Dial On Demand Remote Printing Using LPD Setting Up Printers Remote Printing Using Host-Based Print Handling Software Remote Printing Using RCP IOLAN-to-Host/Network Configuring a Virtual Private Network Or just 172.16.45.84 192.168.45.87 192.168.45.12 Network-to-Network 172.16.45.99 Host-to-HostLeft External IP Address Right Gateway Router 332 Iolan Device Server User’s Guide, Version VPN Client Initiate Communication Router Broadband Right VPN Client-to-Network 334 Iolan Device Server User’s Guide, Version Supported Radius Parameters Radius and TACACS+ Appendix a PPP User level. See Perle Radius Dictionary Example Accounting Message Radius Parameter Iolan Parameter Mapped Radius Parameters to Iolan Parameters Perle Radius Dictionary Example Value TACACS+ Accessing the Iolan Through a Serial Port Users Name Values Description Slip Accessing the Iolan from the Network Users Accessing the Iolan from the Network User Example Settings Valid SSL/TLS Ciphers SSL/TLS Ciphers DES-CBC-MD5 Virtual Modem Initialization Commands Commands AT&Sn AT&RnAT&Cn Pinouts and Cabling Diagrams Serial PinoutsDB25 Male DB25 Female RJ45 DB9 Male Serial Only RJ45 SCS48C/SCS32C/SCS16C/SCS8C DB9 Male I/O Power Over Ethernet Pinouts DB25 Female EIA-232 Cabling DiagramsTerminal DB25 Connector DB25 Male RJ45 DB9 Male10-pin Pin Iolan RJ45 DCE Modem DB25 Connector RxD TxD DTR 20 DTR GND 360 Iolan SDS/SCS/STS User’s Guide, Version Port Iolan DB25 Male/Female Setting Jumpers Port Iolan RJ45 Port Iolan RJ45 P Power Over Ethernet Port Iolan SDS1M Modem Port Iolan DB9 Port Iolan Port/Line # Line Termination 5V Output Input Volt Output Port Desktop Iolan Digital I/O Module Analog Input Module 368 Iolan SDS/SCS/STS User’s Guide, Version Digital Input Dry Contact Wiring I/O DiagramsDigital I/O Digital Input Wet Contact Digital Output Source Digital Output Sink Analog Input CurrentVoltage Thermocouple Temperature InputRTD 2-Wire RTD 3-Wire Normally Closed Contact RTD 4-WireRelay Output Normally Open Contact 374 Iolan SDS/SCS/STS User’s Guide, Version TruePort Utilities API I/O Access Over TruePort API Request FormatAPI Response Format Decoder Error Codes 378 Iolan SDS/SCS/STS User’s Guide, Version Installing a Perle PCI Card Accessories Installing a Perle PCI Card Accessories RJ45F to DB25M DTE Crossover Adapter Starter Kit Adapters/Cable RJ45F to DB25M DCE Modem Adapter RJ45F DB25F RJ45F to DB25F DTE Crossover Adapter RJ45F to DB9M DTE Crossover Adapter RJ45F to DB9F DTE Crossover Adapter Sun/Cisco RJ45M Connector Cable for Rack Mount Models SCS48C/SCS32C/SCS16C/SCS8C Starter Kit Adapters/Cable GND DTR 20 DTR DSR RJ45F to DB25F DTE Crossover Adapter 390 Iolan SDS/SCS/STS User’s Guide, Version RJ45F Sun/Cisco Roll-Over Adapter for Rack Mount Models 392 Iolan SDS/SCS/STS User’s Guide, Version Power/Ready LED on a rack mount model flashes red TroubleshootingHardware Troubleshooting Power/Ready LED stays red after a boot Communication Issues DeviceManager ProblemsGeneral communication checks and practices are as follows Radius Authentication Problems Host Problems Problems with Terminals Login Problems You observe Tftp errors when the Iolan boots, for example DHCP/BOOTP ProblemsCallback Problems Language Problems Long Reboot Cycle Modem ProblemsPPP Problems Printing Problems An A4R2 model is starting/stopping Certificate did not match configurationModels Could not obtain peers certificate IPv6 Issues Making a Technical Support Query Contacting Technical Support Feedback on this Manual Repair Procedure Glossary RIP Routing PAP PasswordAuthentication Protocol Radius Remote Authentication Dial Users Services Reverse Connection API Index Ldap Radius Index W