background image

2

CONTENTS

1

Overview

Congratulations on selecting the DLI DIN relay, an industrial Ethernet controlled relay.

Check out the main product

features

. Some more technical

specifications

are available as well.

Be sure to check the

package contents

when unpacking the unit, then follow the instructions for

basic setup and

use

if you are a first-time user. The device is controllable using LCD and keypad, which have several

modes

. This

should allow you to access the basic device features. More advanced settings are located on the

Setup page

.

DLI DIN4 can be:

• extended with

user scripts

;

customized

to add branding;

• accessed via a growing number of

external APIs

;

upgraded

to newer firmware versions.

It can be configured to:

ping

other devices and take action if they don't respond;

• send

notifications

when certain events occur;

DLI DIN4 utility functions include:

• reading the

system log

setting date/time

;

backing up

settings;

locking down

security-sensitive functionality;

resetting

settings to defaults.

The firmware is based on

open-source code

which is provided to give you the option to build totally custom firmware.

Please contact

technical support

in case of any problems.

We offer a

limited one-year warranty

on these units.

DLI DIN4 User’s Guide: 20170809T111540Z

Summary of Contents for DIN4

Page 1: ...DLI DIN4 User s Guide 20170809T111540Z ...

Page 2: ...ification 26 9 Customization page 33 10 External APIs 34 11 Backing up settings 40 12 Firmware upgrade 41 13 Date time 43 14 AutoPing 44 15 System log 48 16 Locking down the controller 49 17 Resetting settings to defaults 51 18 Specifications 52 19 Open source code 53 20 Technical support 54 21 Limited one year warranty 55 DLI DIN4 User s Guide 20170809T111540Z ...

Page 3: ...up page DLI DIN4 can be extended with user scripts customized to add branding accessed via a growing number of external APIs upgraded to newer firmware versions It can be configured to ping other devices and take action if they don t respond send notifications when certain events occur DLI DIN4 utility functions include reading the system log setting date time backing up settings locking down secu...

Page 4: ...uously monitors an IP address If a server router or other peripheral goes down AutoPing can automatically reboot it without user intervention Several devices can be monitored simultaneously Programmable LCD Display A 2x16 LCD displays status for each relay Custom messages can be displayed via user scripts Multi User Password Security Multi user authentication limits access to the power controller ...

Page 5: ...elay 4 RP SMA WiFi Antenna Please contact the freight carrier immediately if your package appears opened or damaged in transit Call DLI at 408 330 5599 for tech support service and hardware upgrades DLI DIN4 User s Guide 20170809T111540Z ...

Page 6: ...er to establish a connection Ping the default address 192 168 0 100 to confirm that a network connection is established If you don t receive a response proceed to the IP setup section below Log in to the power controller using the default user name admin and the password 1234 Note admin must be entered in lower case Click the Settings link to reach the configuration page Select the safest power lo...

Page 7: ...tep 2 Windows 7 Open the Start orb click on Control Panel Click View Network Status and Tasks then Change Adapter Settings Proceed to step 2 Windows 8 Mouse or swipe to the bottom right corner and select Settings Select Control Panel Select Network and Sharing Center Change Adapter Settings Right click on your connected network and select Properties Proceed to step 2 4 3 1 2 Configuring static IP ...

Page 8: ...low these steps to reach the controller s IP 1 Close network programs and browsers 2 Go to Network Settings Local Area Network 3 Use the keyboard shortcut type ncpa cpl and click OK 4 Right click on your LAN connection and choose Properties 5 Highlight Internet Protocol and click the Properties button 6 Click the Advanced button 7 Under the IP Address settings click the Add button 8 Enter a new IP...

Page 9: ...oduct Information Digital Loggers Inc Source code Version 1 4 1 0 1 4 1 0 S N DIN42203123456 Controller DLI Controller Wed Feb 24 05 18 39 2016 Individual Control Name State Action 1 Relay 1 OFF Switch ON 2 Relay 2 OFF Switch ON 3 Relay 3 OFF Switch ON 4 Relay 4 OFF Switch ON 5 Relay 5 OFF Switch ON 6 Relay 6 OFF Switch ON 7 Relay 7 OFF Switch ON 8 Relay 8 OFF Switch ON Master Control All relays O...

Page 10: ...elay on may be delayed if a different or possibly even the same relay was recently turned on The delay acts to protect the device from simultaneous inrush currents and limit cycling rate You may also cycle a device which is connected to the controller This feature is useful for rebooting Ethernet devices which may interrupt the web link to the controller Clicking Cycle switches power off waits a f...

Page 11: ...cle through the modes by pressing and keys simultaneously If the keypad is locked via web UI the keypad doesn t work and if you press a key a message about this is displayed and stays in place until the next update of the LCD data no action is taken 5 1 Network mode Network mode In Network mode the and keys allow to select the network parameter Network configuration submode Most values can be chan...

Page 12: ...is initially placed on the last byte and can be advanced to the preceding byte by presssing the keys increase or decrease the current byte s value for the WiFi pre shared key any of the or buttons generates a new key the WiFi SSID can t be changed from keypad Pressing saves the current value and starts network reconfiguration if needed The display isn t updated in stantly and you need to refresh i...

Page 13: ...se the controller name fields to assign a Controller Name to the power controller itself Examples are Server Rack Power Strip or Plutonium Refinery Control The Controller Name field appears on the top of the home page Assign a separate name to each relay such as Missile Launcher or Email Server to make identification of each circuit simple 6 2 Delays Delay Wrong password lockout 60 minutes 0 60 ON...

Page 14: ... settings which take effect after a power failure 1 You can turn all relays off all systems will be switched off until manually turned on later by checking the first box 2 You can automatically turn all relays on using the All ON sequence delay described above Check the second option to do this 3 You can return to the same relay settings that were used prior to the power loss The All ON sequence d...

Page 15: ...the restrictions e g setting protec tion The SSH port is customizable as well The SSH server also accepts public key authentication for a configurable set of keys the format is the same as in the authorized_keys file You can limit the severity of the locally recorded log messages by setting a minimal severity Note that the local log is circular with old messages being replaced by newer ones messag...

Page 16: ...nd network mask must be entered If a default gateway is specified it must be on the same subnet as the IP address specified A number of DNS server IP addresses can be supplied separated by commas e g 192 168 0 1 8 8 8 8 If DNS servers are available some other configuration variables can accept hostnames instead of IP addresses If you wish to configure the unit to use DHCP IP assignment you needn t...

Page 17: ...SSH access or the REST like API if you need to change that The WiFi module can operate either in Access Point server or Station client mode Either way the name of the wireless network to create connect to must be specified as the SSID If the unit is configured to be an Access Point and have a static IP assignment it starts a DHCP server on the wireless interface It is possible to use no encryption...

Page 18: ...Only the administrator can edit user names and passwords users can only inspect and switch relays Access control UsersName Password Controlledsmelays Apply 1 2 3 4 5 6 7 8 tom Change dick Change harrl Change Change User access control Checkboxes to the right of each user name relay control access privileges Users can only see and interact with the chosen relays For example user harry would see the...

Page 19: ...security issue if there are untrusted administrator users The Disable local keypad setting is designed for untrusted physical environments When enabled the LCD will briefly indicate that the keypad is disabled on each keypress and otherwise ignore it Note that this still leaves the reset button available to an attacker The Show device name on login page setting can be used to control if unauthenti...

Page 20: ...event reboot autoping failure etc will ask you for the name of the function to call you will be offered a list of the functions defined in the script Script listing Save This is a sample test set of scripts for DLI power controllers The scripting implementation has changed and is no longer compatible with the older BASIC implementation The most important changes are Now Lua based No more line numb...

Page 21: ...ads using thread run They can be explicitly stopped using the web UI or by calling thread kill or thread killall from the script or implicitly by calling thread limit Every thread has an origin which is usually a string identifying the function that started the thread For instance when you create a function like this function my_function statements go here end and then start it with the web UI its...

Page 22: ...s abbreviations like sec h d are also accepted LOG String write a message to the system log DISPLAY String display a string on the LCD when it s in relay mode The following strings are expanded literal o state of relays in the form 12456 ON relays are listed O state of relays in the form n serial number f firmware version d system time date M MAC address of the power controller i IP address of the...

Page 23: ...ep string reverse string sub string upper table library table insert table concat table maxn table remove table sort math library math abs math acos math asin math atan math atan2 math ceil math cos math cosh math deg math exp math floor math fmod math frexp math huge math ldexp math log math log10 math max math min math modf math pi math pow math rad math random math sin math sinh math sqrt math ...

Page 24: ...heir second argument should be the number of seconds after which the preceding behaviour is restored The ui line table has two elements ui line 1 and ui line 2 specifying the custom displayed strings for the LCD rows or nil for regular operation of said row This offers more fine grained control than the DISPLAY command above 7 4 2 6 AutoPing integration The global autoping table allows to query an...

Page 25: ...ing the programmable web links on the left side of the page a target of the form script cgi run func Via AutoPing The AutoPing system can be configured to automatically start execution when IP con nectivity is lost Enter the line number to execute in the Scripting box to the right of the corresponding IP on the AutoPing page By manually clicking the Run button Execution will start with the selecte...

Page 26: ...ere User message timeout the time in seconds after which user messages displayed e g with the DISPLAY command disappear even if no keys are pressed on the LCD and no changes have been made to the relay state leave empty to have the messages displayed indefinitely User message force display timeout the time in seconds during which user messages are displayed even despite keys being pressed on the L...

Page 27: ...riable like this message Server room power message All the following rules will include the Server room power prefix in the generated notifications Some properties e g message_short or message_long are supported by notification targets but aren t generated by any events it s up to the action code to set them if necessary It s important to note that rules are processed linearly adjustment of proper...

Page 28: ...m Server address Authentication passphrase Authentication protocol none Context engine ID Context name Privacy passphrase Privacy protocol none Security engine ID Security name Default trap OID Add Notification target configuration Other target properties depend on the kind of the target 8 2 1 Email notifications Email notification targets have the following parameters recipient email address RFC ...

Page 29: ...ed 8 2 3 1 Trap OIDs The type of a TRAP or INFORM is indicated by its OID SNMPv2c and SNMPv3 include the full OID in the message SNMPv1 is different SNMPv1 traps are identified by the generic trap type and correspond to the following trap OIDs 0 cold start 1 3 6 1 6 3 1 1 5 1 1 warm start 1 3 6 1 6 3 1 1 5 2 2 link down 1 3 6 1 6 3 1 1 5 3 3 link up 1 3 6 1 6 3 1 1 5 4 4 authentication failure 1 3...

Page 30: ...ter32 string hex string decimal string nullobj objid or oid timeticks ipaddress or ip bits Type names are case insensitive A type may be omitted in that case it will be inferred nil values will be encoded as null objects strings as octet strings numbers as integers true values as integer 1 and false values as integer 2 as per SMIv2 8 2 3 4 SNMPv1 settings SNMPv1 trap targets have the following par...

Page 31: ... encryption enable only authentication or enable both An encrypted but not authenticated configuration is invalid SNMP v3 TRAPs and INFORMs accept an snmp_trap_oid event property to override the trap OID it must be a string They also accept the snmp_values event property as described above 8 2 4 WebHook notifications Web hooks notifications send preconfigured POST HTTP requests to URLs recipient U...

Page 32: ...e check goes on Additionally an empty condition is equivalent to true and the corresponding action is unconditionally taken To disable an action without deleting it you can use an explicitly false condition false or a condition that s not a valid Lua expression e g To keep the condition text you can wrap it with false and Rules are applied from the first one to the last one so order is important T...

Page 33: ...li auth login_allowed auth_allowed true NOTICE login denied for auth_login auth_ip auth_method auth_reason id dli auth login_denied auth_allowed false NOTICE protection violation attempt auth_reason id dli auth protection_violation INFO auth_login auth_ip session closed id dli auth session_closed Notification event types Underlined items both in the message and in the extra properties column speci...

Page 34: ...ing settings The branding block that appears on every web page can be customized Product name the displayed name of the product Logo the company logo image URL Product URL the URL that the image points to Custom logo dimensions may be supplied if needed The logo URL may be absolute or relative e g my_ company png in which case the related file should be placed in the www static subdirectory of the...

Page 35: ...alled by a misguided browser without JavaScript bypassing browser security checks a custom header needs to be present in the requests Browsers can normally issue GET and POST requests with URL encoded or multipart content types you can tick the corresponding relax checks checkboxes to skip the checks in cases where the method or content type indicates that the request couldn t have been sent by a ...

Page 36: ... store must revalidate max age 0 Transfer Encoding chunked DLI Controller JSON RPC demo JSON RPC allows to access an object model similar to the one of the REST like API but in a different manner which may be more suitable for some integration environments All composite objects are visible using JSON RPC with their field values accessible using get with the field name in the argument and set metho...

Page 37: ... have different access rights to the OID tree The specified root OIDs and their children will be exposed over SNMP All OIDs must be absolute but not preceded by a dot The root OIDs are actually treated as masks indicating to set of roots to apply the permission to In addition to the standard OID syntax all but the first two arcs of an OID mask may contain an asterisk which means that any value in ...

Page 38: ...rAdmin user if they come from the 192 168 0 x subnet and denied otherwise Likewise requests with the public community string coming from the same subnet will be served as the powerReader user 10 6 SNMP energy object MIB support overview The Net SNMP agent included in DIN4 has built in support for several well known MIBs but none of them deal with power control The power control related ENERGY OBJE...

Page 39: ...ed as though they were made by the powerAdmin user You ll need Net SNMP to run these samples analogous commands should be available for other management software The matching of requests vs SNMP protocol version is really arbitrary and is only used to demonstrate different ways of performing requests Lines are broken using for readability We use On to force numeric OID output and omit the leading ...

Page 40: ...NTEGER 257 1 3 6 1 2 1 229 1 2 1 9 2 INTEGER 257 1 3 6 1 2 1 229 1 2 1 9 3 INTEGER 259 1 3 6 1 2 1 229 1 2 1 9 4 INTEGER 257 1 3 6 1 2 1 229 1 2 1 9 5 INTEGER 259 1 3 6 1 2 1 229 1 2 1 9 6 INTEGER 257 1 3 6 1 2 1 229 1 2 1 9 7 INTEGER 257 1 3 6 1 2 1 229 1 2 1 9 8 INTEGER 257 You see that relays 3 and 5 are on and all others are off you can change relay states as described above DLI DIN4 User s Gu...

Page 41: ... back up Authentication configuration can contain sensitive data AutoPing configuration HTTP server configuration Downooad Backup setting selection sample Modified files are highlighted in green Choose the setting files you want to save unknown files are shown as File filename and click Download You may protect the security sensitive parts of the configuration from being stored in a backup Pressin...

Page 42: ...ware from a server not in your local network By default the unit beeps and blinks during update You can disable this using the following form Configure update prouess Beep during upgrade Blink during upgrade Save Firmware update configuration page You may protect the current firmware from modification Pressing the hardware reset button will be required to unlock 12 2 Committing the firmware upgrad...

Page 43: ... upgrade a message about this briefly appears on the LCD Firmware upgrade start indication Further activity is indicated by a cycling pattern of signs Firmware upgrade progress indication After an upgrade has been completed the unit is rebooted The first boot may take longer than usual due to configuration updates Post firmware upgrade initialization indication DLI DIN4 User s Guide 20170809T11154...

Page 44: ...on is to use the NTP servers 0 1 2 3 openwrt pool ntp org See Scripting scripting to perform manual synchronization The preferred time zone can be customized as well Time Zone UTC 3 Submit Timezone The selected timezone is used for header date time display and formatting time in plots Internally the time zone is stored in a format different from the display it has a different meaning for and You s...

Page 45: ... 5 the target system must fail to respond 5 times in a row before it is rebooted Since occasional network overloads and missed packets can occur during normal network operation a number between 5 and 10 pings is recommended Ping responses to enable autoping To ensure a reliable connection autoping will only be enabled after this many successful pings We do not recommend changing this 10 is default...

Page 46: ... 6 The order of relays in the table is unspecified use table sort in the script function if you rely on a particular order The stats column shows some statistics TX the number of pings sent to the target IP address RX the number of pongs received back so far HIT the number of times the trigger action was executed On the sample image three targets are being monitored 74 125 87 103 67 122 199 250 an...

Page 47: ...riety of other ping target kinds can be used if you specify a URL instead of simply an IP address or hostname Supported URL schemes include icmp this is explicit specification of the regular ping protocol e g icmp 192 168 0 1 is equiva lent to 192 168 0 1 note that no trailing slash is used tcp this causes AutoPing to try to establish a TCP connection to the given port e g tcp 192 168 0 1 22 can b...

Page 48: ...ilure when a request isn t being sent ping not received time possibly due to local network outage not considered a failure when an outage occurred after a request has been sent The events associated with item trial before enabling are self explanatory item addresses enable approved item addresses enable cancelled item addresses trial restarted due to address list changes DLI DIN4 User s Guide 2017...

Page 49: ...size 150 Jan 1 00 00 57 power daemon info dnsmasq 1145 compile time options tPv6 GNU getopt no DBus no i18n no tDN DHCP no DHCPv6 no Lua TFTP no conntrack no ipset no auth Jan 1 00 00 57 power daemon info dnsmasq dhcp 1145 DHCP tP range 192 168 254 200 192 168 254 248 lease time 12h Jan 1 00 00 57 power daemon info dnsmasq 1145 using local addresses only for domain lan Jan 1 00 00 57 power daemon ...

Page 50: ...o protection bits active some protection bits active all protection bits active Clicking on the icon gives more detailed info Firmware protection is disabled Notification settings protection is disabled Private configuration protection is enabled but ineffective SSH is enabled which could be used to bypass protection Firmware upload is allowed specially crafted firmware could be used to bypass pro...

Page 51: ...6 4 Unlocking protection You should use the reset button and select the Clear lock bits reset mode to clear protection bits This of course requires physical access to the unit DLI DIN4 User s Guide 20170809T111540Z ...

Page 52: ...re preserved 3 Reset network and scripting enable Wifi Clear protection bits reset network settings and admin login disable autoping and scripts and enable open WiFi access Other settings are preserved 4 Complete wipe Reset all settings to factory defaults and remove any user files All settings will be lost 5 Complete wipe enable WiFi Reset all settings to factory defaults and remove any user file...

Page 53: ...perature 30 to 170 F 34 to 77 C designed for dry environments Options User Right Angle 19 rack mount bracket Power Supply Rating 90 240V AC DC Autosensing Password Transmission Encrypted base 64 or HTTPS Power Dissipation 5 8W Typ Max all on 2 W idle Power Fail Hold Over 150ms minimum 24V all relays on Power Up Modes Last used settings all power on or off sequential on or run user script 30s after...

Page 54: ...d on the read write firmware partition so certain operations like full factory reset may remove it Purchasing a TLA and signing an NDA from Atheros are highly recommended before attempting any custom devel opment however they aren t required to build the firmware only the bootloader DLI cannot provide warranty or technical support for modified units this includes units with custom firmware DLI DIN...

Page 55: ... or email support digital loggers com For phone support call 408 330 5599 with the following so we can better serve you The firmware version level installed in the power switch This information can be found on the lower left corner of the relay control page A description of the Ethernet devices connected to your unit for example a 10 100 PC and crossover cable A description of the WiFi devices con...

Page 56: ...RATION NO SUPPORT IS PROVIDED FOR MODIFIED FIRMWARE MODIFICATION OF FIRMWARE VOIDS ALL WA RRANTY Warranty service requires an original invoice from DLI and an RMA number provided by technical support RMA material must be shipped prepaid to DLI RMA numbers are valid for 15 days from date of issue This warranty does not cover products which are modified including firmware modifications subjected to ...

Page 57: ......

Reviews: