4. Device Concept
RAP-B511 series
– User's Manual
31
Applied firmware package: v1.1.0b3b3 | LDC software: v2.5.1b5
4.7.
Basic IT Security
DIFFERENCE:
Below mentioned features are available from FW package v1.1.0b3.
#new
These entry-level network security improvements help to prevent unauthorized access to the Lightware
device:
#new
▪
Cleartext login
▪
IP Port Block
▪
MAC Filtering
The
Cleartext Login
tool allows setting a password for login, thus, the device will not accept any command
coming from an interface (RS-232, Ethernet, etc…), only the device type and the serial number can be queried
without login. You can set all affected TCP/IP ports individually to enable or disable.
The
IP Port Block
feature is an additional protection for the Cleartext login. There are TCP/IP ports in
Lightware devices which are not protected by the login, so you can disable them if necessary. Example: due
to the working method of the LW2 communication, the Cleartext login does not provide protection when LW2
command is sent to the device, that is why the TCP port no.10001 shall be blocked manually.
Another level of security is the
MAC Filtering
tool. You can create an ’allowlist’ of network devices based on
the MAC address which are allowed:
▪
Controlling the device (Send option), or
▪
Querying parameters (Receive option) to/from the Lightware device.
Below table shows the protection levels of these features.
ATTENTION!
Be careful when combining these functions; improper settings may cause malfunction.
Most of these feature are available in LDC, see the
IP Port
Function
MAC Filter
Cleartext Login
IP Port Block
80
HTTP Post&Get
-
81
LW3 control (miniweb)
-
6107
LW3 protocol
-
800x
Command injection (RS-232)
-
900x
Command injection (IR)
-
10001
LW2 protocol
-
4.8.
Batch Commands
DIFFERENCE:
Below mentioned features are available from FW package v1.1.0b3.
#new
These features can be used to process a group of pre-defined commands. The commands can be stored
in the device as macros or you can save the commands in a plain text file and send the device by an HTTP
message.
LW3 over HTTP (Command Salvo)
This feature allows the LW device to be controlled over HTTP. In this case, a batch of commands is sent
over HTTP to the Lightware device for processing. Save the LW3 commands into a file, post it to the
<IP_address>/protocol.lw3 file and the commands are processed immediately.
Running Macros
In this case, the command sequences (macros) are stored in the device. You can create your custom macros
in a file, upload into the device and run at any time. The number of the macros depends on the device type, at
most 50 macros can be saved in the device. See more information about the feature in the
