MB Connect Line mbNET.rokey RKH 210 Manual Download Page 217 | Manualshive

Page: 217 / 324

background image

3 Authentication

(Authentication process = no authentication)

N O T I C E

Select this method only to test the connection, as all the data is transmitted in clear text!
Always enable encryption of your VPN connections, otherwise unauthorized access to networks, machines,
etc. is possible!

Designation

Description

Authentication
process

Selection field for the authentication procedure

•

no authentication
this type should only be selected to test the connection, as all the data is
transmitted in clear text!
Always enable encryption of your VPN connections, otherwise unauthorized
access to networks, machines, etc. is possible!

•

Static key

•

x.509

Click the "Next" button to continue the configuration.

VPN | Page 217

of 324

«
...
215
216
217
218
219
...
»

Summary of Contents for mbNET.rokey RKH 210

Page 1: ...Manual V 7 2 0 en Aug 25th 2022...

Page 2: ...r website at www mbconnectline com We always welcome and are grateful for comments suggestions for improvement and constructive criticism Trademarks and company logos The use of a trademark and compan...

Page 3: ...nal blocks X1 and X2 on the top of the device 33 14 2 Pin assignment of the RJ11 socket on the bottom of the device 33 14 3 Pin assignment serial interfaces COM1 COM2 front of device 33 14 4 Pin assig...

Page 4: ...5 System Settings Device API 68 23 3 6 System Settings System Service 70 23 4 System WEB 71 23 4 1 System Web HTTPS access for device configuration 73 23 4 2 System Web System Services 74 23 5 System...

Page 5: ...work Internet Internet connection and Internet settings 136 24 4 1 Configure Internet connectivity 136 24 4 2 Internet settings Connection settings 142 24 5 Network DHCP 145 24 5 1 LAN DHCP server set...

Page 6: ...n client mode 226 27 4 Static key key management 241 28 IO Manager 243 28 1 Configuring the PLC connection 245 28 2 Logging configuration 247 28 3 Create tags 249 28 4 Status 251 28 5 Diagnosis 252 29...

Page 7: ...11 2VPN PPTP clients 303 31 12 VPN OpenVPN 304 31 13 IoT 305 31 13 1IoT Docker 305 31 13 2IoT Docker Management 306 31 13 3IoT Flows and Dashboard 307 31 14 Runtime 308 31 15 Diagnostics Network Reso...

Page 8: ...35 Load factory settings 321 36 Device restart Reset 322 37 Annex 323 37 1 Set computer address IP address in Windows 10 323 Page 8 von 324 V 7 2 0 en Aug 25th 2022...

Page 9: ...onnect mbconnectline com Prerequisite additionally required components Standard Windows PC with network card USB stick recommended format FAT32 or ext3 recommended maximum size 4 GB FAT32 16 GB ext3 I...

Page 10: ...evice mbNET router connected via the Remote Client mbDIALUP to the portal server mbCONNECT24 Current manuals and other information The latest manuals and more information about products related to sec...

Page 11: ...firmware installed on the device V 6 1 1 Dec 5th 2019 As of FW 6 1 1 the mbNET can function both as an NTP client and as an NTP server See System Settings NTP Settings V 6 1 2 Mar 11th 2020 Correction...

Page 12: ...iagnosis The operating time of the device is displayed in the Quickstart and under Status System System information It is now possible to wake up peripherally connected computers PCs via Wake On LAN s...

Page 13: ...128 Bit Blowfish 128 Bit 3DES 168 Bit DES 56 Bit encryption and authentication via pre shared key PSK static key or certificate X 509 On board 2 level remote access key Pos REM trigger remote access...

Page 14: ...istribution BSD the Massachusetts Institute of Technology MIT or other open source software license which requires that the source code be made avail able and this software was not already supplied wi...

Page 15: ...ICS Security_kompendium_pdf html shortened URL http bit ly 1rP9znm Physical access Restrict physical access to security relevant components to qualified personnel Security of the software Keep softwar...

Page 16: ...personal damage must be intercept ed by additional external devices These devices must ensure a safe operating state in case of failure Such devices include electromechanical safety switches mechanica...

Page 17: ...tdoors Never open the router housing Unauthorized opening and improper repair can be dangerous for users of the router The manufacturer is not responsible for unauthorized modifications The warranty b...

Page 18: ...dapt es peuvent mettre en danger l utilisateur du routeur Le fabricant n assure aucune garantie concernant les modifi cations arbitraires La garantie devient caduque en cas d ouverture de l appareil C...

Page 19: ...devices separately from unsorted municipal waste at the end of their service life Old batteries and accumulators that are not enclosed by the old device as well as lamps that can be removed from the o...

Page 20: ...used as described in the manual Limitation of liability All technical information data and notes about installation operation and maintenance contained in the oper ating instructions are provided unde...

Page 21: ...0 RKH 216 RKH 235 RKH 259 EU RKH 259 AT T from Hardware version HW 03 You can find the hardware version on the device rating plate Housing dimensions and views Image 1 Devices and interfaces vary depe...

Page 22: ...rformance data Voltage V DC 10 30 V DC ext power supply or SELV power supply 10 30 V DC max 40 A Current consumption max 500 mA 24 V Dissipated power max 6 W Random Access Memory 512 MB Processor Devi...

Page 23: ...32 or for holding mbEDGE mbEDGE is a software kit that extends the mbNET and mbNET rokey industrial routers to an IOT gateway VPN VPN protocol IPsec PPTP OpenVPN 64 Tunnel Encryption method AES 256 19...

Page 24: ...modems AT T RKH 259 AT T from harware version HW 05 NOTICE The device type RKH 259 AT T bears no CE marking and may not be used or put into operation in the European economic area EEA Target region N...

Page 25: ...E2 0 4 W 26 dBm EDGE 1800 1900 Class 3 0 25 W 24 dBm UMTS Class 3 0 2 W 23 dBm LTE Antenna connections 2 pieces SMA socket FCC Contains FCC ID R17LE910NA Installation position minimum clearances The...

Page 26: ...CONFORMITY MB connect line GmbH hereby declares that the radio system type RKH 259 EU corresponds to the 2014 53 EU directive A copy of the EU declaration of conformity is available at the following...

Page 27: ...connect line GmbH Winnettener Str 6 D 91550 Dinkelsb hl Tel 49 0 9851 58 25 29 0 Fax 49 0 9851 58 25 29 99 Keep the original box as well as the original packaging material in case you need to send th...

Page 28: ...ONL The switch position RST has just a tactile function Function Status LEDs LED LED colour LED status Description Fc1 orange flashes Together with Fc2 if a portal configuration has been detected via...

Page 29: ...l off Waiting for kernel flashes System loading rootFs Rdy green on Boot process complete the device can be used off No VPN connection started on Internet connection is established VPN connection is s...

Page 30: ...essing the button the router is restarted cold start Coding switch hexadecimal NOTICE Function in preparation Key switch with two keys for switching different functions Switch position Key color LED s...

Page 31: ...0 30 VDC I2 Digital input E2 10 30 VDC I1 Digital input E1 10 30 VDC P Secure Voltage 10 30 VDC M Connection 0 VDC O2 Digital output A2 max 1 5 A X2 O1 Digital output A1 max 1 5 A galvanically isolate...

Page 32: ...Devices with LTE 4G modem Type Equipment RKH 259 1 x SD card slot 2 x SIM card slot 2 x SMA socket for GSM antenna MIMO Standard devices Type Equipment RKH 210 RKH 216 RKH 235 1 x SD card slot Page 32...

Page 33: ...N Analogue 1 Not assigned Not assigned 2 TX Not assigned 3 RX Lb b 4 RX La a 5 TX Not assigned 6 Not assigned Not assigned 14 3 Pin assignment serial interfaces COM1 COM2 front of device Pin RS 232 RS...

Page 34: ...Below you can see example circuits for 4 wire and 2 wire operation Image 2 Connection example for the 4 wire operation Image 3 Connection example for the 2 wire operation 14 4 Pin assignment LAN WAN p...

Page 35: ...14 5 Pin assignment USB port on front of device Signal 1 VCC 5 V 2 Data 3 Data 4 GND Interface assignment Page 35 of 324...

Page 36: ...arried out according to VDE 0100 IEC 364 The router may be only mounted vertically as described NOTICE Non compliance with the minimum distances can destroy the device at high ambient temperatures Top...

Page 37: ...l of the power supply are electrically connected to terminal X1 2 Connect the power supply 10 30 V DC to terminals X1 of the router NOTICE Ensure polarity is correct 3 Now switch on the power supply A...

Page 38: ...92 168 in this case 0 X X variable and not be occupied by any other network user The netmask must be 255 255 255 0 NOTICE The step by step guide on how to perform the required settings on a PC can be...

Page 39: ...2 168 0 100 NOTICE Please note that access to the web interface is possible only via the HTTPS protocol https 192 168 0 100 Log in to the router Factory setting is User name admin Password You will ne...

Page 40: ...this operation simply unsubscribe from the web interface admin Logout Information about the benefits of using mbCONNECT24 can be found on our website www mbconnectline com or contact your MB connect l...

Page 41: ...ution partner Use the Cloudserver to configure the mbNET for a connection a to the Internet and b to the mbCONNECT24 portal With this connection data once mbNET is connected to the Internet and can es...

Page 42: ...xt Depending on the device type the selection is External Router Firewall Modem 20 1 1 External Router Firewall WAN settings Interface type selection Options are DHCP Static DHP If interface type DHP...

Page 43: ...thernet Internet connection Designation Description Interface type Selection field for the interface type DHCP Static WAN IP address Enter the WAN IP address Subnet mask Define the subnet mask Gateway...

Page 44: ...er APN Access Point Name Enter the APN of your provider here if necessary SIM Pin Enter the SIM PIN of the SIM card used User Password If necessary enter your user name and password Clicking on Next w...

Page 45: ...sued certificates must be previously integrated in the setup menu of the router System Certificates Click Next to complete the setup mbCONNECT24 server list Server name Host Address or DNS Name Note r...

Page 46: ...ere you can find information including connection errors and their cause for each connection to the Internet and the Portal Server NOTICE Do not switch off the mbNET until the mbNET has picked up its...

Page 47: ...configuration interface via the admin Menu Here you can detect connection errors and determine the cause To obtain more detailed information click on the respective icon If there is an error during c...

Page 48: ...u will receive a connection overview for the portal server Portal Server Account name sample company Device name MDH831WiFi CTM no config available Last update of the configuration last configuration...

Page 49: ...ute monitoring This command provides you with detailed information about the network connection between the mbNET and a remote host or other routers Route monitoring is carried out and made visible he...

Page 50: ...the status of a port open not open in connection with an Internet or IP address 21 2 1 Output of device diagnostic information to a USB stick To make it easier to analyze why a device is not connecti...

Page 51: ...tatus of activation for Flows and Dashboard Click on the Flows button to get to the NodeRed working environment Use the Dashboard button to call up a previously created dashboard NOTICE Information on...

Page 52: ...eadcrumb navigation Displays the user and branch within the user interface e Help button Link to online help for devices f User navigation Navigation for the administrative user interface Log out This...

Page 53: ...tbutton can be used to change input values in an element row Button for adding a new element e g a new rule in the security settings or new VPN con nection An element row is deleted by clicking the De...

Page 54: ...configuration in the mbNETweb interface User User management password and rights management Certificates Creating and managing certificates Storage media Configuring the USB port and SD card slots Log...

Page 55: ...23 1 System Info Image 7 Example display content can vary depending on the type of device System settings and basic router configuration Page 55 of 324...

Page 56: ...ere you can see the selected Internet connection External Router Firewall DSL Modem Wi Fi The connection status A currently active connection to the Internet is represented by the green LED icon Inter...

Page 57: ...bCONNECT24 portal as soon as it comes online In order to ensure the transfer CTM must be activated on the mbNET NOTICE The CTM function is only relevant if you are running the router in the mbCONNECT2...

Page 58: ...by means of a web proxy in order to also check its contents for pests Further encryption to the client browser then takes place with a certificate offered by the proxy The problem with this is that t...

Page 59: ...oxy password Server password input field Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE...

Page 60: ...23 3 System Settings Page 60 von 324 V 7 2 0 en Aug 25th 2022...

Page 61: ...ngs NTP configuration NTP Server on LAN the mbNET acts as an NTP server here Mail Settings Configuring the Automatic Mail Setting function Device API Enable MQTT access to status topcis No Yes System...

Page 62: ...can enter a meaningful description here Automatic reboot Checkbox to activate deactivate the reboot function Reboot at Enter a time here at which the device is to be restarted automatically 24 hour fo...

Page 63: ...Input format YYYY MM DD HH MM SS Timezone Displays the time zone in which the mbNET is operated To set the local time and date click on the edit symbol Clicking on Save temporarily saves the current e...

Page 64: ...locks in computer systems via pack age based communication networks When time synchronization the NTP client gets the current time from an NTP server The mbNET can act both as an NTP client and as an...

Page 65: ...Input natural numbers hr 0 NOTICE When 0 or blank is entered there is no time synchronization Run NTP Server for LAN Checkbox to activate deactivate the function If this function is activated the mbNE...

Page 66: ...specifications If No you have to enter the information for your mail server for fur ther information please contact your service provider SMTP Server Enter the IP address or the name of the SMTP serve...

Page 67: ...d settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied activated and stored permanently System settings and basic router configu...

Page 68: ...eb cannot be changed NOTICE Attention If this function is activated and the settings are saved port 1883 TCP is opened for the LAN interface Clicking on Save temporarily saves the current entries chan...

Page 69: ...After activating the MQTT access to status topics function you can query the values from the MQTT Debug List under Status System System settings and basic router configuration Page 69 of 324...

Page 70: ...only relevant if you operate the router in the mb CONNECT24 portal You can find information about SimplyConnect on our website at www mbconnectline com or at https simply connect me Enable manufactur...

Page 71: ...HTTPS Port Here you can change the default port 443 through which the HTTPS server is accessed Important If you change the default ports you must specify the new port in the browser s address bar e g...

Page 72: ...account https 192 168 0 100 login username USERNAME password PASSWORD Disable Communi cation Webservice SMS Email Checkbox to deactivate activate the function If this function is activated neither an...

Page 73: ...to select your key for the selected certificate Import The selected files are uploaded by clicking the Import button NOTICE ATTENTION If you upload a wrong certificate or key it could be possible that...

Page 74: ...tivate the function If this function is activated neither an SMS nor an e mail can be sent from the device Disable Web configuration only re versible by loading factory default set tings By activating...

Page 75: ...he device password The user admin cannot be deleted The possible fields displayed depend on the device type and version used Possible fields are Username Full name Administration Quickstart Modem Dial...

Page 76: ...Admin Check boxes to enable disable the type of access by the user to the web interface of the mbNET Administration access via HTTPS Dial up modem access via dial up modem VPN dial up access by dialli...

Page 77: ...emporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE Temporary stored settings changes are saved until a reboot...

Page 78: ...dentity The certificate may be issued by a higher authority the Certificate Au thority CA or by the certificate holder itself The certificate owner will therefore be designated as Subject and the cert...

Page 79: ...th the file name extension p12 must be used A PKS12 file consists of a crt file and a key pem file 23 6 1 1 Import own certificate Designation Description File Click Select file and select the require...

Page 80: ...In the overview you can see certificates imported thus far Page 80 von 324 V 7 2 0 en Aug 25th 2022...

Page 81: ...ate of the remote terminal is valid or not The CA certificate is available as crt file and must be imported into the mbNET 23 6 2 1 Importing CA certificate root certificate Designation Description Fi...

Page 82: ...In the overview you can see certificates imported thus far Page 82 von 324 V 7 2 0 en Aug 25th 2022...

Page 83: ...cate of the in dialling device is valid The CA certificate contains information about whether the certificate of the remote terminal is valid or not The CA certificate is available as crt file and mus...

Page 84: ...In the overview you can see certificates imported thus far Page 84 von 324 V 7 2 0 en Aug 25th 2022...

Page 85: ...al into the mbNET or the underlying PLC it is only necessary to create a CRL 23 6 4 1 Import CRL revocation list Designation Description File Click Select file and select the required pem file in this...

Page 86: ...In the overview you can see certificates imported thus far Page 86 von 324 V 7 2 0 en Aug 25th 2022...

Page 87: ...f the device and an SD card slot on the bottom of the device 23 7 1 USB You can connect a USB device USB stick or USB hard drive to the USB port on the Industrial router The USB storage medium can be...

Page 88: ...USB mode USB Transparent USBOverIP is only relevant functional in conjunction with the mbCON NECT24 Remote Service Portal and the Remote Client mbDIALUP Related settings can only be made via mbCONNECT...

Page 89: ...t field for the SFTP user name SFTP password Input field for the SFTP password SFTP Password confirmation Input field for confirmation of the SFTP User Password NOTICE To access to the USB storage med...

Page 90: ...splay if a USB storage medium is connected to the mbNET or has been detected USB Device connected Green LED symbol USB storage medium available Gray LED symbol No USB storage device connected NOTICE P...

Page 91: ...er activate mbEDGE Other SD cards are not recognized by the mbNET An LED symbol indicates whether an SD card is inserted in the mbNET SD Card plugged in Green LED symbol An mbEDGE SD card is inserted...

Page 92: ...or the SFTP password SFTP Password confirmation Input field for confirmation of the SFTP User Password NOTICE To access to the USB storage medium via SFTP enter the IP address of the mbNET server prec...

Page 93: ...Click the Edit icon to edit the corresponding function System settings and basic router configuration Page 93 of 324...

Page 94: ...his function If this checkbox is enabled the logs are also stored on a USB device Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close d...

Page 95: ...of the extrnal logging server Here Port 514 NOTICE We recommend not changing this port unless you have an application that responds to a completely different port Clicking on Save temporarily saves th...

Page 96: ...on backup and restore Here you can download a backup copy of the system configuration Backup and if necessary restore Re store Click the Edit icon to edit the corresponding function Page 96 von 324 V...

Page 97: ...ate Here you can check the actuality of the installed firmware version and if necessary upgrade to a higher version Click the Edit icon to edit the corresponding function System settings and basic rou...

Page 98: ...be accessible on the LAN side Firmware Version Status Selection field for the firmware status Firmware Status Stable Firmware Status Beta Available firmware version After selecting Upgrade Method and...

Page 99: ...ersion status stable or beta depends on the previously made selection Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the...

Page 100: ...tes to indi vidual network nodes Wi Fi Here you specify the interface type DHCP or static and configure the interface if necessary You can also configure the Wi Fi connection to a Wi Fi router or acce...

Page 101: ...rk You can also specify add network routes in CIDR format x x x 0 24 24 1 1 Interface Here you can set the LAN IP address and the subnet mask of the router mbNET This IP address accesses the router in...

Page 102: ...sing the router Subnet mask Enter the subnet mask of the network that the router should be integrated into Clicking on Save temporarily saves the current entries changes But the changes are not yet en...

Page 103: ...Passive Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled NOTICE Temporary stored settings changes are saved until a reboot of the router Only after y...

Page 104: ...when needed Daily at The WoL wake up call runs automatically every day at the set time In ad dition the wake up call can be executed manually at any time using the Execute button Comment Optionally y...

Page 105: ...Here you can send a WoL wake up call manually edit an entry delete an entry add a new entry Network connection settings and options Page 105 of 324...

Page 106: ...n to add a route Add LAN route Designation Description IP address Enter an IP address with CIDR Seffix x x x 0 24 Gateway The gateway to be entered is usually the IP address of the router mbNET After...

Page 107: ...te the corresponding entry Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE Temporary stor...

Page 108: ...Select this type if a DHCP server is present in the network and thus automatically as signs an IP address to the router mbNET Contact your network administrator if necessary DSL Select this type if yo...

Page 109: ...the WAN IP address of the router mbNET NOTICE The WAN IP address and the LAN IP address must be in different address ranges Subnet mask Enter the subnet mask of the network that the router should be i...

Page 110: ...a route Click the Edit icon to edit the corresponding route Add WAN route Designation Description IP address Enter the IP address for the network routes in CIDR format x x x 0 24 or the IP address of...

Page 111: ...te the corresponding entry Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE Temporary stor...

Page 112: ...r dial up and or Internet connections if no corre sponding DSL or network connection is available NOTICE If the modem is used for an outgoing internet connection no incoming connection can be made 24...

Page 113: ...Network connection settings and options Page 113 of 324...

Page 114: ...on Modem init Input field for the country code the default is GCI FD FD for Europe NOTICE A list of country codes for devices with analogue modem can be found in the Appendix Modem init The command X3...

Page 115: ...Network connection settings and options Page 115 of 324...

Page 116: ...r outgoing connections Here you configure the access data and the authentication for outgoing connections Click the Edit icon to edit the corresponding function Access data selection of inputs Page 11...

Page 117: ...rial router mbNET or a computer that can process the request Under Network Internet set the Internet settings to On Request and then switch the option Connect if the input is active to input 1 To call...

Page 118: ...on protocol with which your login data are transmitted Password Authen tication Protocol However we recommend using the secure variant CHAP as in PAP your password is sent unencrypted Timeout when di...

Page 119: ...24 3 1 3 Incoming Here you approve the access to the router mbNET by a client computer Click the Edit icon to edit the corresponding function Network connection settings and options Page 119 of 324...

Page 120: ...be accepted and your data can be read by others Authentication using CHAP Check box for enabling disabling this function Accept the factory default setting CHAP is an authentication type Use the same...

Page 121: ...Network connection settings and options Page 121 of 324...

Page 122: ...nnects to the Internet if it is called from a phone So that the connection can be established the mbNET must be alerted by ringing with four times Subsequently the mbNET hangs up and starts the proces...

Page 123: ...24 3 2 GSM modem configuration Network connection settings and options Page 123 of 324...

Page 124: ...perform the basic modem settings Click the Edit icon to edit the corresponding function NOTICE For a GSM connection none of the two initializations is necessary to guarantee error free connection Page...

Page 125: ...n for outgoing connections Here you can configure the SIM settings the access data and the authentication for outgoing connections Click the Edit icon to edit the corresponding function Network connec...

Page 126: ...pective SIM card to provide access You need a mobile phone to switch the PIN on or off Provider Selection field with a list of the most common wireless service providers If your wireless service provi...

Page 127: ...different industrial router mbNET or a computer that can process the request Under Network Internet set the Internet settings to On Demand and then switch the option Connect if the input is active to...

Page 128: ...cation protocol with which your login data is transferred Password Authenti cation Protocol However we recommend using the secure variant CHAP as in PAP your password is sent unencrypted Timeout when...

Page 129: ...on Select Primary SIM Card Selection field for the SIM card slot that should be addressed used first Switch to the secondary SIM card if network roaming has been detected Check box for enabling disabl...

Page 130: ...et enabled Clicking on Close discards the current input changes NOTICE Temporary stored settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the change...

Page 131: ...Network connection settings and options Page 131 of 324...

Page 132: ...this function Enable this feature to ensure that the mbNET only executes commands that come from a specific number You will need this telephone number in the Sender s phone number field Sender phone...

Page 133: ...d the connection name must always be specified accordingly example OPENVPN START Wizard Furthermore you need to note that the connection name is case sen sitive REBOOT The industrial router will resta...

Page 134: ...e function is enabled the mbNET sends an SMS notification once the mbNET has established a connection to the Internet Recipient phone number Recipient s phone number to whom the notification should be...

Page 135: ...Network connection settings and options Page 135 of 324...

Page 136: ...24 4 Network Internet Internet connection and Internet settings 24 4 1 Configure Internet connectivity Click the Edit icon to edit the corresponding function Page 136 von 324 V 7 2 0 en Aug 25th 2022...

Page 137: ...ctivate this function The reliability function allows switching between different Internet connections If this function is enabled the Internet interfaces in the desired priority can be entered ac cor...

Page 138: ...depends on the device type and can vary Designation Description Internet connection Here you select the Internet interface with which the mbNET should connect to the Internet Depending on the device...

Page 139: ...on The number of attempts before switching to the next interface Enter the number of connection attempts here After the number of attempts has been reached the next interface action is selected from t...

Page 140: ...y list 3 Repeat this process as necessary until no interface action is available Internet Interface Priority List The selected interfaces actions are listed in order of priority here By clicking on th...

Page 141: ...are executed one after the other Designation Description Ping IP Yes No selection field to activate deactivate this function Ping IP Host Address 1 Input field for the IP Host Address Example 8 8 4 4...

Page 142: ...e under step 2 24 4 2 Internet settings Connection settings Here you specify when the mbNET should connect to the Internet Click the Edit icon to edit the corresponding function Connection settings In...

Page 143: ...as soon as an internet connection is established E mail address Enter the e mail address to which the IP address should be sent if you have acti vated the Send IP address via e mail function Clicking...

Page 144: ...Page 144 von 324 V 7 2 0 en Aug 25th 2022...

Page 145: ...r the LAN and or WAN interface For example you can supply several devices with it However please note that these devices are then connected to the WAN interface and configured under network WAN to DHC...

Page 146: ...broadcast address of the range managed by the DHCP server Gateway You can optionally enter here the LAN IP address of a router that connects the clients present on the network to the Internet or anot...

Page 147: ...address Enter the MAC address here The MAC address must be entered in the format 00 00 00 00 00 00 colon as separa tor IP address Enter the IP address that should be assigned to the device Confirm you...

Page 148: ...S For permanent connection of the industrial router a dedicated DNS server can be added here This is then used before the server assigned by the internet service provider Server Click on the green plu...

Page 149: ...Enter the IP address of your DNS server Confirm your entries by clicking on the Save button and repeat the process for further DNS server entries NOTICE A total of up to five DNS servers can be entere...

Page 150: ...Settings Here you specify the basic settings for the DNS server Click the Edit icon to edit the corresponding function Page 150 von 324 V 7 2 0 en Aug 25th 2022...

Page 151: ...is selected Network Internet Internet Settings Connection Type this setting is useful as an internet connection is not established for every request Domain Optional input field for entering a private...

Page 152: ...ctly one IP address DNS queries can therefore be answered directly Designation Description IP address Enter the IP address of the network node PC router etc which should be cancelled e g 172 16 20 1 N...

Page 153: ...red settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied activated and stored permanently Image 13 Example entries in the Host S...

Page 154: ...service By enabling the function Enable System Dynamic DNS you use the automatic DynDNS service of MB connect line Logging in or registration are not required In this case the name structure is fixed...

Page 155: ...a public DynDNS service you must register have registered for one of the services that are supported by the mbNET Registration is normally free Click the Edit icon to edit the corresponding function...

Page 156: ...you entered during registration with your DynDNS service Password Enter the password that you assigned during registration Host name Enter the name that you entered for the mbNET DynDNS service Updati...

Page 157: ...Page 157 of 324...

Page 158: ...ng control commands redirected e g to a connected controller or a connected device Depending on the device type the interface is executed as a MPI PROFIBUS interface Via the MPI PROFIBUS interface it...

Page 159: ...he options are RS232 RS485 2 wire RS485 4 wire RS422 Driver type When choosing a System Driver a range of product and company specific device drivers are available to control your serial devices Drive...

Page 160: ...want to make your own settings Driver Mode Selection field for the driver mode Standard Connection state controlled DTR Boudrate Enter the baud rate of the communication here Data format Select one of...

Page 161: ...ss If there is an existing VPN connection you communicate via the local network ad dress Lock service Check box for enabling disabling this function If this function is enabled the serial driver to co...

Page 162: ...You can choose between a connection via MPI Profibus network driver or VCOM LAN2 PC adapter Enable RFC1006 pro tocol Check box for enabling disabling this function own station address If RFC1006 is e...

Page 163: ...bus address 14 a participant address 5 is connected to the Profibus of the master address 4 The routing must be enabled in order to now access the Profibus using the router address 13 via MPI on the...

Page 164: ...ce Check box for enabling disabling this function If this function is enabled the serial driver to communicate between mb DIALUP VCOM LAN and serial port is not started Clicking on Save temporarily sa...

Page 165: ...d to regulate the incoming traffic LAN WAN This setting is used to regulate the outgoing traffic Forwarding Here you can forward requests from specific IP addresses and ports to redefined IP addresses...

Page 166: ...ackets data from the Internet will be rejected All outgoing packets from the LAN data will be accepted In this variant the incoming traffic data from the Internet is blocked while the outgoing data wi...

Page 167: ...on SNAT allows access from the outside e g via VPN to LAN participants without them having to set the mbNET as a default gate way The actual source IP in an incoming IP packet is thereby replaced by t...

Page 168: ...interface to the Internet The firewall controls the traffic from the WAN Ethernet to the LAN Ethernet Connect to the Internet via modem Here the modem is the interface to the Internet The firewall co...

Page 169: ...u select this action no data packets can pass and the pack ets will be deleted immediately The sender receives no information about the whereabouts of the data packets Reject The data packets are reje...

Page 170: ...l data traffic and on ly on the selected interface Acceptable input Integer or empty Protocol Selection field for the transfer protocol to use The options are All the set rule applies to ALL protocols...

Page 171: ...he current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE Temporary stored settings changes are saved until a reboot of the router Only...

Page 172: ...ck on the Edit icon in the header of the overview to change the sequence of the entered change rules Here you can move up and down drag and drop to change the sequence of the firewall rules Change del...

Page 173: ...Click on the Edit icon at the end of the line of the registered rule to edit it Click the Delete icon to delete the corresponding entry Security settings Page 173 of 324...

Page 174: ...ng controls the outgoing traffic i e the following settings only apply to outgoing traffic From the point of view of the mbNET Firewall is WAN always the currently active interface to the Internet Cli...

Page 175: ...cceptable input IP address or netmask or List of IP addresses or Range of IP ad dresses e g 192 168 0 100 192 168 0 200 or empty Sourde Port Enter the source ports of incoming data packets for which t...

Page 176: ...The input of IP and port is not mandatory If neither an IP nor a port is specified a rule applies only to the selected interfaces Clicking on Save temporarily saves the current entries changes But th...

Page 177: ...red rule order Click on the Edit icon in the header of the overview to change the sequence of the entered change rules Here you can move up and down drag and drop to change the sequence of the firewal...

Page 178: ...nge delete firewall rule Click on the Edit icon at the end of the line of the registered rule to edit it Click the Delete icon to delete the corresponding entry Page 178 von 324 V 7 2 0 en Aug 25th 20...

Page 179: ...r the IP addresses from which data packets are received If there is an entry here only packets from these addresses are forwarded Acceptable input IP address or netmask or List of IP addresses or Rang...

Page 180: ...Interface You can use this selection field to determine which interface the forwarding should nor mally be used The options are Internet WAN Ethernet OpenVPN IPSecVPN PPTPVPN LAN Ethernet All The sel...

Page 181: ...icking on Close discards the current input changes NOTICE Temporary stored settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied...

Page 182: ...ick on the Edit icon in the header of the overview to change the sequence of the entered change rules Here you can move up and down drag and drop to change the sequence of the firewall rules Change de...

Page 183: ...Click on the Edit icon at the end of the line of the registered rule to edit it Click the Delete icon to delete the corresponding entry Security settings Page 183 of 324...

Page 184: ...LAN IP address mapped 1 1 i e the LAN IP address can be accessed directly from the IP address of the WAN This has the advantage that no ports etc need to forward Click on the green plus to add a rule...

Page 185: ...ange the entered rule order Click on the Edit icon in the header of the overview to change the sequence of the entered change rules Here you can move up and down drag and drop to change the sequence o...

Page 186: ...ing on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE Temporary stored settings changes are saved un...

Page 187: ...networks So you don t have to adapt the entire own network addressing Click on the green plus to add a rule Designation Description Active Check box for enabling disabling this function LAN Netaddres...

Page 188: ...ple entry 26 5 2 1 Edit 1 1 NAT rule Change the entered rule order Click on the Edit icon in the header of the overview to change the sequence of the entered change rules Page 188 von 324 V 7 2 0 en A...

Page 189: ...te icon to delete the corresponding entry Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the current input changes NOTICE...

Page 190: ...etwork 27 1 1 Configure IPSec connections Click on the green plus to add a connection You can choose between two connection types Connection type Router Router connection Select this connection type t...

Page 191: ...27 1 2 IPSec settings Click the Edit icon to edit the corresponding function VPN Page 191 of 324...

Page 192: ...s from the IP range of the LAN interface You just need to make sure that this address is not already assigned to another computer in the LAN Remote IP Ad dress Begin Remote Address End Here you can fi...

Page 193: ...ation Header Protokoll ipcomp Compression of the IP packets before encryption verbose provides most of the information Caution This function also outputs authentication and encryption keys in the log...

Page 194: ...pan of the Security Associations SA parsing shows the structure of the incoming messages useful for troubleshooting private also logs the private keys in the log raw shows all transmitted bytes raw by...

Page 195: ...27 2 PPTP 27 2 1 PPTP configuration Click the Edit icon to edit the corresponding function VPN Page 195 of 324...

Page 196: ...P of the router Remote IP ad dress or range Enter either an IP address or an address pool from the LAN IP range of the router for example LAN IP 192 168 0 100 entry 192 168 0 101 110 DNS Server IP Ad...

Page 197: ...ryption Selection field for the type of encryption None MPPEV2 40 MPPEV2 128 MPPEV2 all NOTICE IMPORTANT You should always enable encryption of your VPN connections otherwise unauthorized access to ne...

Page 198: ...t via MD5 If the user data is sent with that of the host computer then the authentica tion is accepted If not it will be rejected If the authentication is accepted the user data is constantly checked...

Page 199: ...27 2 2 PPTP client configuration Click on the green plus to add a client VPN Page 199 of 324...

Page 200: ...router connection the real network address of the server must be entered here For client router connections the field remains empty Authentication Selection field for the authentication protocol PAP C...

Page 201: ...n have three different authentication methods none No certificate or key is necessary This method is mainly used to test the connection The tunnel data will NOT be encrypted static key A 1024 bit key...

Page 202: ...ect the connection type if you want to connect one single PC to the router mbNET NOTICE Only one client to network connection can be created Depending on the authentication method the client obtains a...

Page 203: ...ype Selection field for the connection type Router Router connection select this connection type to connect two complete networks together Client Router connection select this connection type if you w...

Page 204: ...0 6 Replace the sender IP address of the client by the LAN IP address SNAT Check box for enabling disabling this function All packages in the LAN network receive the sender IP of the mbNET You can th...

Page 205: ...machines etc is possible Designation Description Authentication process Selection field for the authentication procedure no authentication this type should only be selected to test the connection as...

Page 206: ...on Authentication process Selection field for the authentication procedure no authentication static key For a symmetrical encryption with a static key you must first generate a key VPN OpenVPN static...

Page 207: ...have not yet imported a certificate import your root cell certificates or create one of your own see Section System Certificates Own certificate Selection field with all certificates created to date...

Page 208: ...er login are used for authentication NOTICE Note that you still need to have your own certificate and it must be selected Click the Next button to continue the configuration 4 Protocol settings Networ...

Page 209: ...with CBC 192 bit AES with CBC 256 bit NOTICE Note that each of the communication partners must use the same method Protocol Selection field for the transfer protocol UDP TCP Local VPN port Peer VPN p...

Page 210: ...k box for enabling disabling this function This corresponds to the OpenVPN comp lzo setting Ping interval s Input field for a time period in seconds If the VPN tunnel is not used by the end of the per...

Page 211: ...ng is that the packages are not split Regenerate a new key after s Renew the security key after seconds reneg sec This corresponds to the OpenVPN setting reneg sec By default this time is set to 3600...

Page 212: ...name Input field for the DNS names or the IP address of your proxy server HTTP proxy port Input field for the port number on which your proxy server receives requests A common port number for example...

Page 213: ...hanges NOTICE Temporary stored settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied activated and stored permanently Clicking on...

Page 214: ...eceives an IP from a defined area or each participant specifies his required address Example LAN mbNET Client mbNET Server LAN 192 168 9 100 ROUTING 10 1 0 2 VPN TUNNEL 10 1 0 1 ROUTING 192 168 0 100...

Page 215: ...e started Choose here Wait for incoming connection NOTICE If Wait for incoming connection was selected to establish the connection this mbNET is in server mode and is referred to as server in the furt...

Page 216: ...endpoint Enter the IP address of the partner VPN tunnel endpoint e g 10 1 0 6 Local network Enter your own network address in CIDR notation as standard for the router 192 168 0 0 24 Peer network Ente...

Page 217: ...machines etc is possible Designation Description Authentication process Selection field for the authentication procedure no authentication this type should only be selected to test the connection as...

Page 218: ...on Authentication process Selection field for the authentication procedure no authentication static key For a symmetrical encryption with a static key you must first generate a key VPN OpenVPN static...

Page 219: ...have not yet imported a certificate import your root cell certificates or create one of your own see Section System Certificates Own certificate Selection field with all certificates created to date...

Page 220: ...er login are used for authentication NOTICE Note that you still need to have your own certificate and it must be selected Click the Next button to continue the configuration 4 Protocol settings Networ...

Page 221: ...with CBC 192 bit AES with CBC 256 bit NOTICE Note that each of the communication partners must use the same method Protocol Selection field for the transfer protocol UDP TCP Local VPN port Peer VPN p...

Page 222: ...k box for enabling disabling this function This corresponds to the OpenVPN comp lzo setting Ping interval s Input field for a time period in seconds If the VPN tunnel is not used by the end of the per...

Page 223: ...ng is that the packages are not split Regenerate a new key after s Renew the security key after seconds reneg sec This corresponds to the OpenVPN setting reneg sec By default this time is set to 3600...

Page 224: ...name Input field for the DNS names or the IP address of your proxy server HTTP proxy port Input field for the port number on which your proxy server receives requests A common port number for example...

Page 225: ...hanges NOTICE Temporary stored settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied activated and stored permanently Clicking on...

Page 226: ...a or each participant specifies his required address Example LAN mbNET Client mbNET Server LAN 192 168 9 100 ROUTING 10 1 0 2 VPN TUNNEL 10 1 0 1 ROUTING 192 168 0 100 Client mode To establish a conne...

Page 227: ...e other side is in waiting position NOTICE One of the routers must be in wait mode Designation Description Remote mainte nance active on You can only choose from Key switch REM NOTICE The Link connect...

Page 228: ...ion ONL the mbNET router connects to the Internet The remote maintainer now has access to the router s internal services web server data monitor ing etc The remote maintenance provider cannot route in...

Page 229: ...Enter your own network address in CIDR notation as standard for the router 192 168 0 0 24 Peer network Enter the network address of the subscriber client in CIDR notation 192 168 5 0 24 Do NAT for all...

Page 230: ...clear text Always enable encryption of your VPN connections otherwise unauthorized access to networks machines etc is possible Designation Description Authentication procedure Selection field for the...

Page 231: ...ously created one Note however that each participant needs to receive the key in a secure manner Designation Description Authentication procedure Selection field for the authentication procedure no au...

Page 232: ...Connect when input 4 has High signal Connect when input 1 has High signal disconnect at Low Signal Connect when input 2 has High signal disconnect at Low Signal Connect when input 3 has High signal di...

Page 233: ...VPN Page 233 of 324...

Page 234: ...r ification Yes No selection field to activate deactivate this function If you select Yes user data is requested from the client These credentials must match an entry from System users from the OpenVP...

Page 235: ...4 Protocol settings Network Interface Networkadapter Interface Designation Description Interface Type Selection field for the virtual kernel driver TUN TAP VPN Page 235 of 324...

Page 236: ...92 bit AES with CBC 256 bit NOTICE Note that each of the communication partners must use the same method Protocol Selection field for the transfer protocol UDP TCP Local VPN port Peer VPN port Select...

Page 237: ...active Check box for enabling disabling this function This corresponds to the OpenVPN comp lzo setting Ping interval s Input field for a time period in seconds If the VPN tunnel is not used by the end...

Page 238: ...the packages are not split Regenerate a new key after s Renew the security key after seconds reneg sec This corresponds to the OpenVPN setting reneg sec By default this time is set to 3600 seconds Sen...

Page 239: ...HTTP proxy name Input field for the DNS names or the IP address of your proxy server HTTP proxy port Input field for the port number on which your proxy server receives requests A common port number...

Page 240: ...CE Temporary stored settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied activated and stored permanently Clicking on Apply chan...

Page 241: ...ic key Name Enter a name for the key here Generate To generate the key click the Generate button Import static key File Click the Select file button and navigate to the save location of the key file I...

Page 242: ...To download a key click on the Download button To delete a key click on the Delete button Page 242 von 324 V 7 2 0 en Aug 25th 2022...

Page 243: ...nal FTP server The following variable types can currently be read from an S7 controller via RFC1006 flag timer counter input output data block peripheral Limits Max four connections to the controllers...

Page 244: ...TICE If communication is to take place via the MPI PROFIBUS interface the RFC1006 protocol must be activated in the settings for COM2 Serial COM2 COM2 Settings Page 244 von 324 V 7 2 0 en Aug 25th 202...

Page 245: ...is available here Name Enter a unique name for this connection This field can not contain any spaces or special characters Description Enter a description for this connection SPS IP address When usin...

Page 246: ...ress For Ethernet communication this is the slot space of the PLC on the rack usually 2 3 Click on Save to accept the input changes To add a PLC connection click the add button To edit a PLC connectio...

Page 247: ...figure the logging settings and the settings for the FTP upload NOTICE The logging settings apply to all PLC connections For logging it is necessary that a storage medium USB stick is connected to the...

Page 248: ...ch the log file is to be compressed and up loaded to the FTP server The log file remains compressed in addition to the storage medium USB stick FTP Server address Enter the address of the FTP server h...

Page 249: ...28 3 Create tags NOTICE Before you can create one or more tags a PLC connection must be created To create a tag click on the add button IO Manager Page 249 of 324...

Page 250: ...display Address syntax for the driver S7_ISOTCP DBx DBXy z data block x data bit y z BOOL IDy input double word y DWORD DBx DBBy data block x data byte y BYTE Oy z output bit y z BOOL DBx DBWy data b...

Page 251: ...e display format chosen when the tag was created BIN DEZ HEX FLOAT If the value is invalid or if the data point value can not be read an error message ap pears Error could not read datapoint Time stam...

Page 252: ...28 5 Diagnosis Here you can view and analyze the logging Page 252 von 324 V 7 2 0 en Aug 25th 2022...

Page 253: ...an be transmitted serially by the user via the inputs 2 4 A selected action is carried out with a falling edge at STROBE Send an Email Perform a device Restart Send an SMS Send an Internet SMS indepen...

Page 254: ...ings of the selected input Current status displays the current status 1 or 0 of the individual inputs as well as an LED symbol for the Dial out button grey LED symbol no signal 0 Low 0 3 2 V DC green...

Page 255: ...es with GSM modem here an SMS is sent Internet SMS here an SMS is sent E mail address Enter the email addresses to which the alarm text should be sent Phone number Enter the telephone number to which...

Page 256: ...LSE_x1 one digit and PULSE_1x tens digit can be counted with a rising edge at STROBE The action is executed in accordance with the entered action with a falling edge at STROBE Sample diagram in which...

Page 257: ...using the Enable checkbox Input 2 is used for the STROBE signal input 3 for the pulse of the unit position and input 4 for the decadic position Clicking the Edit button allows you to configure one of...

Page 258: ...t message observe the maximum number of characters 160 Receiver Enter one or more e mail addresses here Several e mail addresses must be separat ed by commas With the action selection SMS Internet SMS...

Page 259: ...hanges NOTICE Temporary stored settings changes are saved until a reboot of the router Only after you confirm via Apply Changes will the changes be applied activated and stored permanently Clicking on...

Page 260: ...on Switch output the status of the selected output mode is switched from 0 to 1 or from 1 to 0 Current status displays the current status 1 or 0 of the individual outputs by means of a LED symbol grey...

Page 261: ...n can thus be signalled by a lamp connected to the corresponding output On by any active User Cloudserver connection Select this setting if the selected output should be set to 1 as soon as at least o...

Page 262: ...n vary depending on the device type You will find the following submenus in the Extras menu Lua IoT RoKEY 30 1 LUA LUA programming language Via Extras LUA LUA scripts can be imported and run Page 262...

Page 263: ...ntrol to enable LUA import LUA scripts see whether LUA is currently running LUA running grey LED symbol LUA is not running green LED symbol LUA running Click the Edit icon to edit the corresponding fu...

Page 264: ...on by clicking on the Import button NOTICE There can only be uploaded and executed one LUA script at a time An imported script automatically overwrites an existing script without security confirmation...

Page 265: ...LUA output All readouts of the script are displayed here For example readouts with print LUA logging All error messages are shown here Extras Page 265 of 324...

Page 266: ...tion blocks the user can create individual IOT applications NOTICE Information on the configuration and setting options of mbEDGE can be found in the relevant manual on https www mbconnectline com de...

Page 267: ...lick on Save to save the change 3 Confirm the activation by clicking on Apply changes NOTICE The mbEDGE service is now started This may take a few minutes at the first activation In the now expanded m...

Page 268: ...Page 268 von 324 V 7 2 0 en Aug 25th 2022...

Page 269: ...30 2 2 IoT Control after activating mbEDGE After activating mbEDGE you will see the full scope of the IoT menu with all submenus Extras Page 269 of 324...

Page 270: ...lows and Dashboard Service Here you activate access to your flows and your dashboard Use HTTP instead of HTTPS only mbEDGE Here you can switch from HTTPS to an unencrypted connection HTTP The unencryp...

Page 271: ...Management Admin under System Users NOTICE Activate Docker Management only if you have purchased an mbEDGE advance license 1 Click on the edit icon to activate Docker Management 2 Activate the Docker...

Page 272: ...in the user management for accessing Node Red or b the current user data for the administrator device access data standard user name admin standard password the device password of the mbNET see label...

Page 273: ...icon to activate the Flows and Dashboard Service 2 Activate the flows and dashboard settings Click on Save to save the change 3 Confirm the activation by clicking on Apply changes After activation the...

Page 274: ...en The access data for this are a User name and password for the user you created in the user management for accessing Node Red or b the current user data for the administrator device access data stan...

Page 275: ...login will open The access data for this are a User name and password for the user you created in the user management for accessing Node Red or b the current user data for the administrator device acc...

Page 276: ...elete flows Here you can save and or delete the flows you have created Saved flows can be read in again via Node Red 1 Click the edit icon 2 Choose an option Download or Delete Page 276 von 324 V 7 2...

Page 277: ...face Adjust the IP address of the Docker Daemon runtimer for the IoT services and Nod Red if an address conflict with other network settings exists is to be expected The default setting is 172 16 0 1...

Page 278: ...OTICE Multiple entries of port numbers must be separated by commas Clicking on Save temporarily saves the current entries changes But the changes are not yet enabled Clicking on Close discards the cur...

Page 279: ...ime even if the mbNET is no longer available a Backup Key is required If the mbNET is no longer reachable before you have generated the Backup Key eg in the event of total failure due to damage there...

Page 280: ...in the input fields under Key Settings The Backup Key must consist of at least 8 characters You can find the License Code on the back of the mbEDGE packaging 3 Click on Save 4 Confirm the changes by...

Page 281: ...any time To do this click on the edit icon 30 5 Firmware Under Current Firmware Version you can see the current firmware versions of mbEDGE NodeRED mbEDGE Portainer io The available firmware version...

Page 282: ...Requirement The mbNET must be connected to the Internet 1 Click the Upgrade button to upgrade the firmware versions Page 282 von 324 V 7 2 0 en Aug 25th 2022...

Page 283: ...to the Internet ONL It can be established a VPN connection With modem devices an Internet connection can be established REM It can be established a VPN connection Including routing to the LAN side of...

Page 284: ...Page 284 von 324 V 7 2 0 en Aug 25th 2022...

Page 285: ...s flashing this indicates that a system error has occurred on the mbNET For this purpose e g via Status System based on the listing it may be possible to determine the cause of the problem NOTICE The...

Page 286: ...WAN connection external connection of the mbNET As soon as the mbNET has a physical connection to the network or the mbNET is assigned a static IP address the IP address is displayed Bytes Received Se...

Page 287: ...lay of the settings on the LAN connection local connection of the mbNET The IP address is then displayed if the mbNET has a physical connection Bytes Received Sent Bytes Display the volume of data in...

Page 288: ...used to connect the router to other computers Route table Displays all routes used Router monitored ports Displays all monitored ports Router connections Connections to the router Displays all IP addr...

Page 289: ...2 2 Firewall IN OUT FORWARD Displays incoming and outgoing data traffic as well as forwarding NAT Displays natted data traffic 31 2 3 Network participants Status information and analysis Page 289 of 3...

Page 290: ...The LAN network participants that have been recognized via ARP reconnaissance are listed here Page 290 von 324 V 7 2 0 en Aug 25th 2022...

Page 291: ...3 Status Modem 31 3 1 GSM information Manual control of the GSM modem Reboot Here you can click on the Execute button to restart the GSM modem Information Status information and analysis Page 291 of 3...

Page 292: ...wireless service provider Mobile number Display of the mobile number for the SIM card in the active SIM card slot MCC Display of the mobile country code The MCC is used to uniquely identify a mo bile...

Page 293: ...ion about the last connection Connected An active connection is symbolized by a solid green circle Sent Bytes Received Bytes Displays the connection time and the number of bytes sent and received in t...

Page 294: ...Network Names Signal strength Signal strength display in Operating fre quency Operating frequency display IP address Subnet mask Gateway Displays the settings on the Wi FiL connection local connectio...

Page 295: ...Available WiFi networks Available networks are listed here Click on the magnifying glass symbol to see the details of the respective WiFi network Status information and analysis Page 295 of 324...

Page 296: ...his function only as instructed by the MB connect line support staff Internet access This displays outgoing connections to the Internet This can be both outgoing connections via the modem as well as c...

Page 297: ...the DHCP server assigns to connected clients Logging Displays the IP addresses that the DHCP assigns and which IP addresses are not allowed DHCP Client WAN Information about clients connected via the...

Page 298: ...if not assigned by the Internet Service Provider IP address Displays the IP address of the DNS server if not assigned by the Internet Service Provider Logging Designation Description System Logging Di...

Page 299: ...address Displays the current IP address that is assigned to the mbNET via the Internet Logging Designation Description System Logging Here all events and errors relating to the DynDNS service are disp...

Page 300: ...es UTC Local date time Time update Clicking on the Execute button synchronises the time with the NTP server stored and activated under System Settings Time Settings Logging Designation Description NTP...

Page 301: ...and the dialled in user are displayed After disconnection the time during which the corresponding connection was active is displayed By clicking on the Start or Stop button you can manually start or s...

Page 302: ...indicated by a green LED icon The connection time users dialled in local and remote IP address is displayed After disconnection you can see the time during which the corresponding connection was activ...

Page 303: ...ess is displayed After disconnection you can see the time during which the corresponding connection was active By clicking on the Start or Stop button you can manually start or stop a connection NOTIC...

Page 304: ...ted by a green LED icon Name local addresses and partner addresses are displayed here By clicking on the Start or Stop button you can manually start or stop a connection NOTICE Use this function only...

Page 305: ...n mbEDGE is active Click the stop button to deaktivate stop mbEDGE gray LED icon mbEDGE is not active Click on the start button to reactivate start mbEDGE orange LED icon mbEDGE is in the start up pha...

Page 306: ...Management is activated Click the stop button to deaktivate stop the Docker Management gray LED icon Docker Management is not active Click on the start button to reactivate start the Docker Management...

Page 307: ...s and Dashboard is enabled Click the stop button to deaktivate stop the access gray LED icon access to Flows and Dashboard is disabled Click on the start button to reactivate start the access orange L...

Page 308: ...is only relevant if you operate the mbNET in the mbCONNECT24 portal Here you can see theRuntime Status green LED icon Runtime is enabled gray LED icon Runtime is disabled The Runtime Logging Page 308...

Page 309: ...and provides you with detailed information about the network connection between the mbNET and a remote host or other routers Route monitoring is carried out and made visible here NS Lookup DNS names r...

Page 310: ...incoming or outgoing i eth1 port 23 Displays all TCP IP connections to the i WAN eth1 interface using Port 23 port 23 when incoming or outgoing vvv i eth1 Displays all traffic in verbose mode Level3 v...

Page 311: ...The live log of the system can be seen under Log Analyzer The display can be filtered by Priority and or Application Status information and analysis Page 311 of 324...

Page 312: ...Filters for Priority and or Application can be set independently for a clear detailed display Page 312 von 324 V 7 2 0 en Aug 25th 2022...

Page 313: ...splay showing whether a storage medium USB stick or and SC card is connected to the mbNET green LED symbol storage medium connected Grey LED symbol storage medium is not connected Status information a...

Page 314: ...utputs are displayed here The status query is performed and updated approximately every three seconds The status query is performed and updated approximately every three seconds green LED symbol statu...

Page 315: ...on Display of the current utilization of the CPU RAM in use Displays the currently required used RAM of the router Flash in use Displays the capacity of the configuration memory and temporary memory S...

Page 316: ...can also be found on the Quickstart page System Kernel Logging Possible reasons for errors in the router can be found in the system information System error log For example if the Stat LED on the fron...

Page 317: ...em information in tabular form The mbNET can be used as an MQTT broker After activating the MQTT access to status topics function under System Settings Device API you can query the values from the MQT...

Page 318: ...rmat Execution When the mbNET is ready for operation LED Pwr Rdy light up connect the USB stick to one of the USB ports of the device 1 As soon as the firmware file has been detected by the mb NET LED...

Page 319: ...CONNECT24online help Execution When the mbNET is ready for operation LED Pwr Rdy light up connect the USB stick to one of the USB ports of the device 1 As soon as the firmware file has been detected b...

Page 320: ...user data User name admin Password The default password can be found on the back of the device NOTICE Make sure you change the default access data immediately 34 2 IP address of the mbNET The mbNET i...

Page 321: ...default password can be found on the back of the unit No USB stick storage medium should be connected to the device Execution 1 a Switch on the mbNET or b if the mbNET is ready for operation press th...

Page 322: ...For example use a paper clip and press the Reset button on the mbNET The device will now restart The restart is complete once both the Rdy and Pwr LEDs light up Via the mbNET web interface 1 Open the...

Page 323: ...IP address of the PC is set in such a way that it is in the same IP range as the mbNET factory setting for the mbNET is 192 168 0 100 i e 192 168 0 X X variable where X should not already be occupied...

Page 324: ...sion 4 TCP IPv4 and click on Properties Here the IP address of the computer must be in the same network range as the mbNET the subnet mask 255 255 255 0 must be entered The entry for the default gatew...

Reviews:

No comments

Related manuals for mbNET.rokey RKH 210

Verizon DSL-2750B

Brand: D-Link Pages: 6

Brand: D-Link Pages: 10

Brand: D-Link Pages: 38

Brand: D-Link Pages: 5

Brand: D-Link Pages: 2

Brand: Parker Pages: 344

Brand: N-Tron Pages: 138

Brand: APM Pages: 3

Brand: Patton electronics Pages: 23

Brand: Phytec Pages: 53

Brand: ZyXEL Communications Pages: 2

Brand: Dahua Pages: 24

Brand: Teac Pages: 20

cMT-FHDX Series

Brand: Maple Systems Pages: 2

Brand: NETGEAR Pages: 2

Brand: Idis Pages: 31

Brand: insys icom Pages: 4

EK-Loop Modulus Series

Brand: ekwb Pages: 7

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands