Settings Editor > TLS Proxy Server tab
l
Set the TLS Proxy Server setting to enable.
l
Enter the TLS Proxy Service Port. This is the TCP port number on which the proxy server will
listen for incoming connections. The TLS client also needs to be set to communicate on this
port number. When TLS communications are received on this port number, the NL241 will
decrypt the data and attempt to open a TCP connection to the data logger and forward the
unencrypted data. In HTTPS communications, web browsers use port 443. The NL241 will
always listen on port 443 regardless of the value of this setting. Therefore, if HTTPS
communications are desired, it is unnecessary to configure this setting.
l
Set the TLS Proxy Forward Physical Port to CS I/O Port for Configuration A or to Wi-Fi for
Configuration B.
l
For Configuration A, leave the TLS Proxy Forward IP Address set to 0.0.0.0. For
Configuration B, enter the data logger IP address in the TLS Proxy Forward IP Address
setting. This address must be configured in the data logger. It must be a unique, static IP
address on the same subnet as the NL241 IP address. For example, if the NL241 IP address is
192.168.5.1 with subnet 255.255.255.0, a valid IP address for the data logger would be
192.168.5.2 provided there are no other devices on the subnet with that address.
l
Set the TLS Proxy Forward Port. This is the TCP port number that the proxy server will use
when it opens a TCP connection to the data logger to forward unencrypted data. The data
logger TCP server must be set to communicate on this port number. The default value for
the data logger PakBus/TCP service port is 6785, so this setting can likely be left at the
default. The data logger listens for HTTP traffic on port 80. The NL241 will always forward
TLS traffic received on port 443 (HTTPS) to port 80 (HTTP) regardless of this setting.
Therefore, if HTTPS communications are desired, it is unnecessary to configure this setting.
l
It is recommended to leave the TLS Proxy Timeout set to 90 seconds, although it can be
changed if desired. This will determine how fast the NL241 proxy server and client
connections will timeout if no activity is detected.
To configure the data logger for Configuration A, connect to the data logger using
Device
Configuration Utility
and select the CS I/O IP tab. Set the CS I/O Interface IP Address to a static IP
address. Use the data logger CS I/O Interface that corresponds to the NL241 CS I/O IP Interface
Identifier setting. To configure the data logger for Configuration B, connect to the data logger
using
Device Configuration Utility
and select the TCP/IP tab. Set the Ethernet Interface IP Address
to a static IP address.
For either configuration, the IP address must not be 0.0.0.0, and it must be unique on the same
subnet as the NL241 IP address. For example, if the NL241 IP address is 192.168.5.1 and subnet
mask is 255.255.255.0, the data logger address could be set as 192.168.5.2 provided there are no
NL241 Wireless Network Link Interface
36
