background image

IPL ROUTER SET-UP 

Page 60 

Setup Guide 9023409-01 

Ethernet ADSL Cellular Routeur Firewall 

 

 

Advanced NAT 

15.1

 

Overview 

The advanced NAT function consists in modifying the source or destination IP addresses and port number 
of the frames received by the ETIC router on its LAN or WAN interface. 
 
It applies to all the frames received by the router on any of its two interfaces except to the IP packets 
contained in a remote user connections. 
 
One brings out 
 

the DNAT function which consists in replacing the destination port and IP address. 
 
the SNAT function which consists in replacing the source IP address. 

 
Because the DNAT and SNAT functions modify the IP addresses of the IP packets processed by the RAS-3G 
router, and because the firewall filters that frames, it is very important to understand in which order that 
different functions are carried out. 
 

Direction  

 

WAN to  LAN

 

 

 

 

LAN to WAN  

 

 
 

 

DNAT

FIREWALL

SNAT

WAN

LAN

Router

LAN

SNAT

DNAT

WAN

FIREWALL

Router

Summary of Contents for IPL-A

Page 1: ...IPL E IPL A IPL C Ethernet ADSL Cellular Routeur Firewall _________________ SETUP GUIDE _________________ Document reference 9023409 01 ...

Page 2: ...y of IP routers is manufactured by ETIC TELECOM 13 Chemin du vieux chêne 38240 MEYLAN FRANCE TEL 33 4 76 04 20 00 Hotline 33 4 76 04 20 05 FAX 33 4 76 04 20 01 E mail hotline etictelecom com web www etictelecom com ...

Page 3: ...FACE 12 RECOVERING THE FACTORY LAN IP ADDRESS 12 RESTORING THE FACTORY SET UP 12 SAVING OR RESTORING A SET OF PARAMETERS 13 IPL ROUTER SET UP 15 ETHERNET WAN INTERFACE SETUP 16 ADSL INTERFACE SETUP 18 CELLULAR INTERFACE SETUP 20 3 1 SIM 1 or SIM 2 set up 20 3 2 Using the SIM cards 1 and 2 21 3 3 Cellular connection control 22 WIFI INTERFACE SETUP 23 LAN INTERFACE SETUP 24 5 1 Overview 24 5 2 Ether...

Page 4: ...penVPN connection for smartphones 36 7 6 PPTP connection 37 7 7 L2TP IPSec connection 37 USER LIST 38 ASSIGNING RIGHTS TO REMOTE USERS 40 IPSEC VPNS SET UP 41 10 1 Overview 41 10 2 IPSec VPN connection set up 42 OPENVPN TYPE VPN CONNECTION 47 11 1 Overview 47 11 2 Set up principles 49 11 3 OpenVPN server set up 50 11 4 Setting up an outgoing connection 52 11 5 Setting up an ingoing VPN connection ...

Page 5: ... SERIAL TO IP GATEWAY CONFIGURATION 67 18 1 Overview 67 18 2 Modbus gateway 69 18 2 1 Glossary 69 18 2 2 Selecting a Modbus client or a Modbus server gateway 69 18 2 3 Modbus server gateway 70 18 2 4 Modbus client gateway 71 18 3 RAW TCP gateway 72 18 3 1 Raw client gateway 72 18 3 2 Raw server gateway 73 18 4 RAW UDP gateway 74 18 4 1 Overview 74 18 4 2 Set up 74 USB GATEWAY 76 19 1 Overview 76 1...

Page 6: ...CONTENT Page 6 Setup Guide 9023409 01 Ethernet ADSL Cellular Routeur Firewall MAINTENANCE 79 PING TOOL 79 WIFI SCANNER TOOL 79 FIRMWARE UPDATE 79 ...

Page 7: ...l of routing functions among which Static routes Source and destination address translation Port forwarding RIP and OSPF DynDNS IPSec OpenVPN VPNs The IPL routers are able to establish IPSec or OpenVPN VPNs IPSec will be preferred when it is the solution selected for a system for security reasons for instance or if the IPL ETIC TELECOM router must establish a VPN towards another router providing o...

Page 8: ...tance Ethernet protocol between two routers for instance It allows to replace one router when it fails by another one Optional WiFi interface The IPL routers provide optionnaly a 2 4 5 GHz WiFi interface That WiFi interface can be used either as an access point or as a client SNMP The IPL routers incorporate a MIB which make possible to collect the status of each router DHCP server The IP can beha...

Page 9: ...ach te Internet or a company network WAN interface of the IPL routers IPL E IPL EW IPL A IPL AW IPL C IPL CW Ethernet ADSL Cellular WiFi WAN interface of the IPL D routers That models provide backup functions IPL DEC IPL DAC Ethernet ADSL Cellular LAN interface Depending on the model the IPL routers provide 1 to 4 switched Ethernet ports to connect the devices of the machine That interface dedicat...

Page 10: ...face of the router Firewall The deny of service filter protects against Internet attacks The main filter filters IP frames between the LAN interface on one hand and the WAN interface or transmitted inside a VPN or transmitted inside a remote user connection on the other hand The remote users filter identifies the remote users and assigns individual rights ...

Page 11: ... Assign to the PC an IP in accordance with the router RAS IP address For the first configuration assign for instance 192 168 0 127 to the PC Step 2 Connect the PC directly to the LAN interface of the router RAS Step 3 Launch the HTML browser http 192 168 0 128 Protecting the access to the administration web server Select Set up Security Administration rights Enter an administration identifier and ...

Page 12: ...erface Remark the port Nr used to access to the administration web server with HTTPS is 4433 Exemple https 192 168 38 191 4433 Recovering the factory LAN IP address Press the rear panel push button The OPERATION led indicator will flash The factory IP address 192 168 0 128 will be restored but the current configuration remains active Restoring the factory set up If firewall rules have been created...

Page 13: ...configurations table Assign a name for the current set of parameters configuration name field and click the Save button The updated Configurations table is displayed with an additional line To save a stored set of parameters as an editable file Select the set of parameters name in the Configurations table Click the Export to the PC button The set_of_parameters txt file is created To import an edit...

Page 14: ......

Page 15: ... setup of the router RAS LAN interface The IP adrresses of the devices of the machine LAN Interface Remote access set up The M2Me connection The remote users Their access rights Remote access IP routing VPNs Static routes RIP Address translation Port forwarding DynDNS or NoIP Network Filtering the data flow between the LAN interface on one hand and the WAN and VPN interfaces on the other hand Secu...

Page 16: ... value Ethernet WAN port configuration Speed Duplex parameter Select 10 or 100 Mb s full or half duplex IP set up of the Ethernet WAN port Connection type list The Ethernet value is the default value It has to be selected when another router connected to the Ethernet WAN interface of the ETIC router is in charge of routing the IP frames to the internet The PPPOE value must be selected only in a pa...

Page 17: ...r the IP addresses of the DNS servers Enable address translation NAT checkbox If that option is selected the source IP address of any IP frame coming from a device connected to the LAN interface and routed to the WAN interface is replaced by the router WAN IP address Remark Select that checkbox if a device of the LAN interface needs to set a connection with a device connected to the Internet FTP s...

Page 18: ...o the modulation of the FAI modem Otherwise ask your provider the modulation which as to be used VPI parameter Range is 0 255 Leave the default value 8 Virtual Channel Identifier parameters Range is 0 65535 Leave the default value 35 Multiplexing parameters Value LLC or VC Leave the default value LLC Encapsulation parameter PPPoE PPP over Ethernet PPPoA PPP over ATM EoA Ethernet over ATM RFC1483 R...

Page 19: ...he remote router Primary DNS IP address secondary DNS IP address parameters Leave that option selected if the provider is supposed to provides that addresses automatically through the line default Otherwise unselect that option and enter the IP of the primary and secondary DNS server Enable address translation NAT checkbox If that option is selected the source IP address of any IP frame coming fro...

Page 20: ...ceived the highest priority the other interface will be used as a backup path SIM card parameter It is possible to select the SIM card Nr1 or the SIM card Nr2 or both SIM card parameter Value SIM1 The SIM 1 is selected default value SIM2 The SIM 2 is selected default value SIM 1 backup to SIM2 The SIM 1 is used first the SIM 2 is used as backup 3 1 SIM 1 or SIM 2 set up Setting up the SIM card 1 o...

Page 21: ...resses of the DNS servers NAT checkbox If that option is selected the source IP address of any IP frame coming from a device connected to the LAN interface and routed to the WAN interface is replaced by the router WAN IP address Remark Select that checkbox if a device of the LAN interface needs to set a connection with a device connected to the Internet FTP server 3 2 Using the SIM cards 1 and 2 E...

Page 22: ...cellular infrastructure router However with particular mobile service providers or in particular situations that PPP connection is declared active while the data transmission service is not provided by the mobile service provider It is why the router RAS is able to ping a particular server to check if the data service is really provided If it is not the PPP connection is reset That function must b...

Page 23: ...he access point set up WiFi WAN IP set up WiFi WAN priority parameter Enter a medium value Obtain an IP address automatically checkbox Leave that checkbox selected if the IP address on the WAN interface is assigned by a DHCP server Otherwise unselect that checkbox and enter the IP address the netwmask and the default gateway address Obtain the DNS server IP address automatically checkbox Leave tha...

Page 24: ...cated to other devices of the LAN network Example IP address Remark LAN network 192 168 12 0 24 From 192 168 12 1 to 192 168 12 254 Netmask 255 255 255 0 Router RAS IP addr 192 168 12 1 Remote users IP pool start 192 168 12 2 In this example two remote users can simultaneously connect to the LAN network one will receive the IP address 192 168 12 2 and the other 192 168 12 3 Remote users IP pool en...

Page 25: ...ted the LAN ports behaves like a hub LAN network IP address netsmask parameters Enter the IP address assigned to the router over the LAN interface That IP address is also the IP address of the administration server of the router Default gateway parameter If another router is connected to the LAN network giving access to other networks and acting as the default gateway for the router RAS enter the ...

Page 26: ...remote users checkbox If that checkbox is selected the router RAS allocates automatically an unused IP address of the LAN network to a remote user when he connects Unselect that checkbox to set up the pool of fixed IP addresses which can be allocated to the remote users That IP addresses must belong to the LAN domain Advanced parameters ...

Page 27: ...eshared key at least 8 characters Country code parameter The RF channels allocated to the WiFi service are not the same in all the countries It is why the country code has to be entered carefully Click the help menu to display the list of the country codes WiFi Mode parameter Select one of the possible WiFi modes Mode 802 11a 5 GHz OFDM Mode 802 11 b 2 4 GHz DSSS Mode 802 11 g 2 4 GHz OFDM Remark ...

Page 28: ...ice list set up To set up the device list Select the Set up LAN interface device list menu To add a device to the list Click the Add button Assign a name and an IP address to the device Remark it is possible to enter a subnet and only a device Example 192 168 38 8 29 192 168 38 8 to 192 168 38 15 ...

Page 29: ...cular devices Remark Many WiFi office devices like tablets or smartphones do not support a fixed IP address Select the Set up LAN interface DHCP server IP address pool start IP addresses pool end parameters Enter the first and the last IP address reserved to the DHCP server IP address netsmask parameters Enter the IP address assigned to the router over the LAN interface That IP address is also the...

Page 30: ... M2Me_Connect server The VPN can be transported in UDP or TCP Select the Set up Remote access M2Me_Connect menu TCP port UDP ports parameters Enter the selected UDP and TCP ports the router will have to test to set the M2Me VPN The router RAS will try to set the M2Me connection successively with the selected UDP and TCP ports beginning with UDP If a proxy server filters outgoing connections unsele...

Page 31: ...login and password are registered in the user list When he connects the login and password of the remote user and optionally the certificate of his PC are checked The certificate can be delivered by ETIC TELECOM or by another authority Selective access rights Individual access rights can be assigned to each remote user according to his identity Transparent connection Once the remote connection has...

Page 32: ...IPL ROUTER SET UP Page 32 Setup Guide 9023409 01 Ethernet ADSL Cellular Routeur Firewall Select Set up Remote access Remote access servers ...

Page 33: ...in PWD Optionally a certificate Yes PPTP Login PWD Yes L2TP IPSec Login PWD and Preshared Key or certificate Yes HTTPS Login PWD Yes That four types of connection can be implemented in PCs tablets or smartphones They can be active at the same time The HTTPS connection is mainly dedicated to secure remote access to HTML pages embedded in supervision PCs HMIs or PLCs for instance When a remote user ...

Page 34: ... HTTP gateway to give a secure remote access to HTML HHTP pages embedded in devices It means that a simple HTML HTTP unsecure server can be used remotely through the internet in a safe way When a remote user connects to the ETIC router using an HTTPS secure connection the portal displays the list of the html servers to which he has the right to access That list can include as well HTTPS native ser...

Page 35: ...ess to the administration server and to the HTTPS portal from the LAN or from the WAN are organised according to the table below From the Internet From the LAN HTTPS web portal https Internet IP address LAN IP address Administration web server https Internet IP address 4433 LAN IP address or https adr IP Internet 4433 7 3 3 Operation To access to the HTTPS internet portal from the Internet Launch ...

Page 36: ...be checked In that case the certificate of the remote PC must be stored in the ETIC router see the table at the top of the page Encryption Algorithm Message digest algorithm Leave the default values Blowfish MD5 7 5 OpenVPN connection for smartphones It is possible to differentiate a remote user connection intended for PCs and another remote user connection intended for smartphones The protocol TC...

Page 37: ... users authentication parameter Select the Login password value or the Login password certificate value if the certificate of the remote PC must be checked In that case the certificate of the remote PC must be stored in the ETIC router see the table at the top of the User list page Encryption Algorithm Message digest algorithm parameters Leave the default values 3DES MD5 Authentication method para...

Page 38: ...ser list The users list is able to register 25 authorised remote users forms Each user form stores the identity of the user Login and password his email address to send alarm emails and his mobile telephone number to send alarm SMS to him To display the user list select the Set up Remote access User list menu Remark Coming from factory the user list is empty ...

Page 39: ...llular Routeur Firewall Setup Guide 9023409 01 Page 39 To register a remote user in the user list Click the ADD button located under the user list Enter the identity of the user Login and password his email address to send alarm emails ...

Page 40: ... devices of the LAN network must have been registered previously LAN interface menu To grant access rights to a remote user Select the set up remote access access rights menu Click the Add button Select a remote user in the list Select a device in the list to authorise the remote user to access to that device Remark A device ca be a subnet or an IP address refer to the Set up LAN interface Device ...

Page 41: ...red in the ETIC router Other kinds of X509 certificates can be added see the Set up Security X509 certificate The certificate used by each participant to the VPN must be delivered by the same authority Setting up an IPSec tunnel in the case where the source IP address is modified along the way from the initiator to the responder router To provide a strong mutual authentication each router checks t...

Page 42: ...IPL ROUTER SET UP Page 42 Setup Guide 9023409 01 Ethernet ADSL Cellular Routeur Firewall 10 2 IPSec VPN connection set up Select the Set up Network IPSec VPN menu The IPSec VPN home page is displayed ...

Page 43: ...IPL ROUTER SET UP Ethernet ADSL Cellular Routeur Firewall Setup Guide 9023409 01 Page 43 To add an IPSec VPN connection click Add The set up page of the new VPN connection is displayed ...

Page 44: ...the SubjectAltName value of the active certificate of the current router If the active certificate is an ETIC TELECOM certificate that field is the email field Remote SubjectAlt name parameter Enter the SubjectAltName value of the active certificate of the remote router If the active certificate is an ETIC TELECOM certificate that field is the email field Authentication section Case 2 Use of a pre...

Page 45: ...keys Exchange Mode parameter Select Main or Aggressive The Aggressive mode is simpler and faster than the Main mode Encryption algorithm parameter Recommended value Auto Authentication algorithm parameter The Auto choice is advised SHA1 provides a better security than MD5 DH group parameter only if the advanced parameters option has been selected Recommended value group 2 The same value must be se...

Page 46: ...1 of the IKE negotiation In phase 2 of the IKE negotiation encryption and authentication session keys will be extracted from this initial keying material By using PFS Perfect Forwarding Secrecy completely new keying material will always be created upon re key Should one key be compromised no other key can be derived using that information DH group parameter only if the PFS option is enabled Recomm...

Page 47: ...participants to the VPN connection can also be carried out using certificates in addition to a Login and password Coming from factory a certificate produced by ETIC TELECOM is registered in the ETIC router Other kinds of X509 certificates can be added see the Set up Security X509 certificate The certificate used by each participant to the VPN must be delivered by the same authority NAT translation...

Page 48: ...IPL ROUTER SET UP Page 48 Setup Guide 9023409 01 Ethernet ADSL Cellular Routeur Firewall ...

Page 49: ...ue it can accept up to 16 ingoing connections from VPN clients VPN client set up If the ETIC router behaves only like a VPN client the set up consists only of configuring the outgoing connection one or several Set up rules Common parameters The following parameters are common for the server and for all the clients supposed to set a VPN to that server Transport protocol UDP or TCP and port number E...

Page 50: ...N server router assigns automatically an IP address to the VPN client router That VPN IP address must not be confused with the WAN interface IP address Leave the default values 172 16 0 0 and 255 255 0 0 Connection death time out parameter A control message also called Keep alive message is sent periodically by the VPN server router to make sure that the VPN must be left active This parameter defi...

Page 51: ...cted the server broadcasts to the clients the static routes which have been set up in the VPN server Leave that checkbox selected Push client routes checkbox Two solutions exist to enable a device connected to a VPN client router to exchange data with another device connected to another VPN client router The first one is to program a static route in both VPN client routers The second one is to sel...

Page 52: ...DNS or NoIP address Backup VPN server IP address parameter The client VPN ETIC router is able to set a backup VPN if the main VPN fails Port number protocol parameters Select the port Nr and the type of level 3 protocol used to transport OpenVPN Attention The port number value must be different from the one used by remote users Encryption algorithm Authentication algorithm parameter AES provides a...

Page 53: ...de 9023409 01 Page 53 Start on event checkbox The VPN is usually established at power up However it can be useful to establish the VPN when a particular event occurs Cellular WAN up Cellular WAN down Ethernet WAN up Ethernet WAN down Digital input ON Digital input OFF ...

Page 54: ...ng connection table Select the Enable option and assign a name to the connection Login Password parameter Enter the login and password of the remote router Remote LAN IP address Remote LAN netmask parameters Enter the IP address and netmask of the remote LAN Ex 192 168 2 0 255 255 255 0 Common name parameter Enter the value of the field SubjectAltName of the active certificate of the remote ETIC r...

Page 55: ...AN to LAN transfer Remark 2 A default gateway address must be entered in each device of the different networks 12 2 Static routes However the router R2 is not able to route frames between a device like L1 belonging to the LAN network and a device connected to network 6 see the drawing hereafter In that case it is necessary to enter the route to that hidden network 6 that route is called a static r...

Page 56: ...ork nor to the remote LAN network that routes have been automatically created by the router respectively when the WAN IP address has been entered and when the VPN has been configured The same type of static routes must be entered in the other routers To set a static route Select the Configuration menu the network menu the Routing menu and then Static routes click the Add a route button Destination...

Page 57: ...ows Routing table Each router holds a routing table Each entry of the table consists in the destination subnet address and the adjacent router address leading to that subnet Routing table broadcasting Each router broadcasts its table Routing table update Each router updates its own table using the tables received from the other ones To enable RIP select the Setup Network Routing RIP menu Select th...

Page 58: ...es intended for the IP router WAN interface to a particular device of the LAN interface using the destination port number The transfer criteria is the port number the port number is used as an additional destination address field Example Let us suppose the PC named W1 connected to the WAN network has to send frames to the device PLC1 connected to one Ethernet port of the ETIC router If routing tab...

Page 59: ...6 502 80 192 168 0 17 80 14 2 Set up To set up a portforwarding rule Select Network Routing Port forwarding menu Click the Add button Enter the characteristics of the frames which must be forwarded Source IP address Port number destination Enter the characteristics of the device to which that IP frames must be forwarded Destination IP address Port number destination ...

Page 60: ...xcept to the IP packets contained in a remote user connections One brings out the DNAT function which consists in replacing the destination port and IP address the SNAT function which consists in replacing the source IP address Because the DNAT and SNAT functions modify the IP addresses of the IP packets processed by the RAS 3G router and because the firewall filters that frames it is very importa...

Page 61: ...racteristics of the IP frames which must be modified by the DNAT rule Source IP address Destination IP address Protocol TCP UDP Source port Destination port Enter the new destination port number and IP address To create a new SNAT rule click Add a SNAT rule Select Yes to enable the rule Enter the characteristics of the IP frames which must be modified by the SNAT rule Source Destination IP address...

Page 62: ...me on the dyndns org web site For instance mymachine dyndns org Step 2 Router set up Select the Set up Network DynDNS menu Select the Enable option Dynamic DNS service provider parameter Select DynDNS or NoIP DNS account login parameter Enter the login assigned by dyndns DNS account password parameter Enter the password assigned by dyndns Hostname parameter Enter the DynDNS domain name for instanc...

Page 63: ...23409 01 Page 63 Select the Set up menu and then WAN interface and then dynamic IP address Enable checkbox Select that checkbox When you wish to set a connection toward the RAS 3G PPTP TLS VPN enter the DynDNS host name instead of the antenna IP address of the RAS 3G router ...

Page 64: ...P frames between the LAN interface on one hand and on the other hand the WAN interface or a VPN see the drawing above The main filter checks source and destination IP addresses and the source and destination ports The main filter does not check the IP packets included in a remote user connection That packets are checked by the remote users filter The main filter does not check the IP packets defin...

Page 65: ...y and a filter table each line of which is a filter rule Main filter default policy The default policy is the decision which will be applied if a packet does not match any of the rules of the filter The WAN to LAN and the LAN to WAN traffic are regarded separately because the decision can be opposite for a packet coming from the WAN or coming from the LAN WAN to LAN The default policy can be Accep...

Page 66: ...p the packet which matches the rule How does the main filters works When the firewall receives a packet it checks if it matches the first rule If it does the decision is applied to the packet according to the Action field If it does not the firewall checks if it matches the second rule and so on If the packet does not match any of the rules of the table the default policy is applied to the packet ...

Page 67: ...h port A serial gateway makes possible to use the IP network to transport serial data between two or several serial devices or directly with devices connected to the Ethernet network Communication between serial devices Communication between a serial deice and a COM port emulation software Communication between serial devices and a PC software application able to encapsulate the serial data into U...

Page 68: ... a serial modbus master to an IP modbus server RAW TCP server or client To connect 2 serial devices through an IP network Telnet To connect a Telnet terminal to the ETIC ROUTER RAW UDP To exchange serial data between several serial and IP devices through an IP network using a table of IP addresses Unitelway slave To connect a serial unitelway master to an IP network Remark If the same type of gate...

Page 69: ...s to the same Modbus TCP server A Modbus TCP server is a device connected to the Ethernet network and able to reply to Modbus requests to a coming from Modbus TCP client devices A TCP server can reply to several TCP clients A Modbus master device is a device connected to a serial asynchronous link and able to send requests to a Modbus slave device connected to the same serial network A Modbus slav...

Page 70: ...t up the timeout the gateway has to wait for the answer of the modbus slave answer Local retry parameter Set up the number of times the gateway will repeat a request before declaring a failure Inter character gap parameter Set up the maximum delay the gateway will have to wait between a received character of a modbus answer packet and the following character of the same packet Modbus slave address...

Page 71: ...elay the gateway will have to wait between a received character of a modbus answer packet and the following character of the same packet TCP inactivity Timeout parameter Set the time the gateway will wait before disconnecting the TCP link if no characters are detected TCP port number parameter Set the TCP port number the gateway has to use IP address parameter The modbus client gateway allows to t...

Page 72: ...onous string the gateway will store before transmitting it to the IP network Timeout of RS232 485 end of packet parameter Set up the delay the gateway will wait before declaring complete a string received from the asynchronous device Once declared complete the gateway will transmit the string to the IP network TCP inactivity Timeout parameter Set the time the gateway will wait before disconnecting...

Page 73: ...up the maximum length of an asynchronous string the gateway will store before transmitting it to the IP network Timeout of RS232 485 end of frame parameter Set up the delay the gateway will wait before declaring complete a string received from the asynchronous device Once declared complete the gateway will transmit the string to the IP network TCP inactivity Timeout parameter Set up the time the g...

Page 74: ...g to the group The serial data is encapsulated in the UDP protocol The UDP datagram is sent to each destination IP address stored in the table 18 4 2 Set up Select the gateway menu and then the Transparent menu and then click RAW UDP Select the Activate option Serial input buffer size parameter value 1 to 1024 Sets the maximum size of an UDP datagram End of frame time out parameter value 10 ms to ...

Page 75: ...p Guide 9023409 01 Page 75 IP addresses of the destination devices table This table stores the IP addresses of the gateways to which the serial data encapsulated inside UDP have to be sent A different UDP port number can be entered for each destination IP address ...

Page 76: ... frames must be the LAN IP address of the ETIC router 19 2 Set up Select the Setup menu and then the USB menu Activate checkbox Select the Activate checkbox Use a specific IP address checkbox If modbus TCP traffic only has to be forwarded to the USB device that checkbox must not be selected If other kinds of traffic have to be forwarded that checkbox has to be selected Specific IP address paramete...

Page 77: ...or SMS Phone number parameter SMS choice Enter the mobile telephone number Email sender parameter email choice Enter the sender email address Email Destination parameter email choice Enter the email destination address Subject parameter email choice Enter the subject of the alarm mail Text parameter Enter the alarm text SMTP client section Use the M2Mail service parameter email choice ETIC TELECOM...

Page 78: ...d by ETIC TELECOM acting as a certification authority That certificate can be used to set a VPN between two routers An ETIC router can set a VPN with another one only if the certificates of both routers have been provided by the same authority Additional X509 certificates provided by ETIC TEECOM or not can be registered into the ETIC router To import a new certificate the file extension can be PKC...

Page 79: ...needs to be registered as a WiFi client interface Firmware update The firmware update can be carried out locally or remotely If the firmware update operation do not succeed for instance if the connection fails the ETIC router restarts with the current firmware Once the firmware update has been carried out the ETIC router restores the previous current set of parameters To update the firmware Select...

Page 80: ...ETIC TELECOM 13 chemin du vieux Chêne 38240 Meylan France contact etictelecom com ...

Reviews: