Echelon i.LON 1000, User Manual, Page: 103 / 126

i .LON 1000 Internet Server User’s Guide 12-3
the appended digest). The receiving i. LON 1000 compares the digest it computed to the one
that was sent in the packet. If the digests match, the packet is authentic. If the digests do
not match, the packet is considered to have been corrupted, tampered with, or otherwise
unacceptable, and is discarded. The digest includes the entire packet, which contains a time
stamp for preventing replay attacks when used in conjunction with a configured channel
timeout value. (For more information on the MD5 algorithm refer to RFC 1321.)
The authentication key, consisting of 16 HEX pairs, is set for each i. LON 1000 through the
Console Application. Authentication is enabled and the authentication key set for the
L
ON
W
ORKS
/IP channel through the Configuration Server. To reset a lost authentication key,
you must obtain physical access to the device and reset the key through the device’s serial
port.
To enable authentication and set the authentication key on a L
ON
W
ORKS
/IP channel, follow
these steps:
1.
Select Channel Properties from the Configuration Server’s Channel menu. Select the
i.LON Config tab.
Figure 12-1 – i.LON Config Tab
2.
Select the Authenticate checkbox to enable authentication and enter 16 HEX pairs that
represent the MD5 authentication key into the entry field.
For example: ABF145E02B5CFF0019BEEFF145E02B5C
All authentication keys within a single network must match. Be sure that you have
previously entered the same authentication key on the
i. LON 1000 devices defined on
this channel using the Console Application.
To disable authentication on a channel that has authentication enabled, deselect the
Authenticate check box and click Apply .