Nautel NX5 AM, Preinstallation Manual

Page: 71 / 89

NX5 PRE-INSTALLATION MANUAL PLANNING CONTROL/MONITOR CONNECTIONS
PAGE 1.8.12 VERSION 0.1 2015-08-01
Web Based Control
An Ethernet port is available on the ETHERNET/USB connector (J3A) on the control/interface PWB
(A4). This port allows a user with proper authentication to remotely control and interrogate the NX5’s
operational status. Functionality available on the front panel UI and more is available remotely,
provided the user has been granted proper authorization (refer to the NX5 Operations and Maintenance
Manual for details on setting user permissions). Nautel recommends you use shielded Cat5 cable or
better to make this connection.
Remote Access
The only access to the AUI is through the ETHERNET/USB connector (J3A) on the control/interface PWB
(A4).
For security purposes, Nautel recommends you place your transmitter behind a router acting as a
firewall. To allow remote AUI access to a transmitter behind a firewall, the firewall must allow TCP
traffic through the following ports:
 TCP port 80: required to allow the web browser operating on the remote computer to access the
web server operating on the transmitter.
 TCP port 3501: used for regular AUI-to-transmitter communication. Also used to perform a security
check to allow the remote web browser to access AUI content from the transmitter’s web server
.
 TCP ports 161 and 162: Used for SNMP Agents and Traps, respectively.
For security purposes, Nautel recommends you block the following port:
 TCP port 22: block during normal operation; when required, may be used to allow Secure Shell
(SSH) programs such as PuTTY, etc. to access the transmitter.
Once your transmitter is isolated behind a firewall, there are a variety of standard network
management techniques that can be used to establish a connection, including routing tables and a
virtual private network (VPN).
Detailed information about network management is beyond the scope of this manual. Selecting a
specific technique often depends on your existing network configuration. Nautel recommends that the
planning, implementation and ongoing support of a network that includes a transmitter be undertaken
by a team that includes at least one member with suitable knowledge of network management.
NOTE
: If you have more than one transmitter on the same LAN, you will need to use port forwarding to
allow access to individual transmitters on the network.