red lion RAM-66 series Software Manual Download Page 142

Page: 142 / 294

Services Tab

Revised 2017-08-31

SSL Connections

Drawing No. LP0997-C

- 134 -

Sixnet

Series SN/RAM

6000 & RAM 9000 Software Manual

SSL

Server

The SSL Server menu item is used to configure the Red Lion RTU or router to issue SSL certificates to requesting
SSL clients.

Click on the

SSL Server

menu item and the following dialog window appears:

Enable SSL:

Select Yes to configure SSL client/server. Select No and click the Apply button to disable SSL.

Select Activity Log Level:

This controls the logging level for SSL Connection activity. The recommended

setting for a production environment is

Summary

. The recommended setting for a test environment is

Full

Wait for Connection (sec.):

Time (in seconds) allowed after sending SYN packets, to wait for SYN-ACK. The

recommended setting for this field is 20 seconds.

Idle Timeout (min.):

Time (in minutes) allowed for no traffic over an SSL connection, before closing down the

link. The recommended setting is 720 minutes.

Select Certificate:

A server certificate must be provided. This will be used to encrypt communication with all

clients. The certificates must be in PEM format, with an unencrypted key (not password protected when
generated). Self signed certificates are highly recommended. Use Admin



Certificate Manager to install/

update certs.

Enable Advanced Setup:

Select Yes to modify advanced SSL options.

Bind Interface for accepting SSL Connections:

This will restrict the encrypted listening socket to allow

connections coming into the specified interface only. The recommended setting for this field is

Any

Bind Interface for outgoing TCP Connections:

This will restrict the unencrypted socket to initiate

connections out the specified interface only. Specifying an interface here may conflict with policy routing,

Summary of Contents for RAM-66 series

Page 1: ...Sixnet Series SN RAM 6000 RAM 9000 Software Manual August 2017 Software Manual Firmware Version 3 27 4 27 LP0997 C ...

Page 2: ...t are registered trademarks of Red Lion Controls Inc All other company and product names are trademarks of their respective owners Red Lion Controls Inc 20 Willow Springs Circle York PA 17406 USA CONTACT INFORMATION Inside US 1 877 432 9908 Outside US 1 717 767 6511 Website www redlion net Email support redlion net ...

Page 3: ...cessing the Web User Interface 1 Configure Using AutoNet Method 2 Setup PC IP Address 2 Open the Control Panel 2 Access Network and Settings 2 Access Network Connection Settings 3 Access Local Area Connection 4 Open Properties 4 Access Internet Protocol Properties 5 Installing RNDIS Driver for Ethernet Connectivity over USB 8 Access Red Lion Web Server 10 Red Lion RTU or Router Login Instructions ...

Page 4: ...rmware Update 48 Configuration Manager 49 Package Installation 51 Factory Defaults Reboot 52 Job Control 53 Network Tab 55 Cellular Connection 55 Interfaces 62 Firewall 75 Tunneling 91 DNS Settings 102 Static Routes 104 DMNR NEMO Settings 106 TCP Global Settings 111 Services Tab 113 DHCP Server 113 DHCP Relay 117 Dynamic DNS 119 SN Proxy Settings 121 SixView Manager 122 GPS Settings 124 SSH TELNET...

Page 5: ...85 DNP3 194 I O Settings RAM 6000 Models 216 I O Settings RAM 9000 Models 217 Test I O 228 Advanced Tab 231 IP Fallback 231 IP Transparency 233 Out of Band Management 237 VRRP Virtual Router Redundancy Protocol 239 Expert Mode 241 GWLNX 243 Classic View 253 Events 255 Service and Support Information 267 Service Information 267 Product Support 267 Licensing Warranty 269 Appendix A 271 Appendix B 27...

Page 6: ... been tested for all possible applications and it may not be complete or accurate for some situations Users of this document are urged to heed warnings and cautions used throughout the document Purpose This manual gives specific information on how to apply and use the software functions on the Red Lion Sixnet Series SN and RAM Cellular RTUs Routers The RAM models are RTUs and the SN models are rou...

Page 7: ...ted or operating in conjunction with any other antenna or transmitter except in accordance with FCC multi transmitter evaluation procedures User Compliance Information If this equipment causes interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures In...

Page 8: ...0 20 October 2014 Supporting Firmware Version 3 19 4 19 2015 02 19 February 2015 Supporting Firmware Version 3 20 4 20 2015 07 21 July 2015 Supporting Firmware Version 3 21 4 21 2015 09 30 September 2015 Supporting Firmware Version 3 22 4 22 2016 02 12 February 2016 Supporting Firmware Version 3 23 4 23 2016 08 12 August 2016 Supporting Firmware Version 3 24 4 24 2017 01 23 January 2017 Supporting...

Page 9: ...thernet Port s with Static IP s USB Device port Set Up Connect a CAT 5 or CAT 6 Ethernet cable between the local PC and the Red Lion RTU or router s Ethernet port s Note If the Ethernet port s green LED is lit this indicates that the connection is running at 100Mb speed If the Ethernet port s green LED is not lit this indicates that the connection is running at 10Mb speed The yellow LED indicates ...

Page 10: ...tters If your MAC address was 02 FF EE 1A 34 5B then the unit can be accessed by entering http RAM 1A345B local in your browser Once you configure your Ethernet port for use in production AutoNet will be automatically disabled If AutoNet does not seem to be working in your environment you can always fall back to the previously supported methods of access 1 2 and 1 3 1 2 Setup PC IP Address 1 2 1 O...

Page 11: ...ries SN RAM 6000 RAM 9000 Software Manual 3 The displays should be similar to the following 1 2 3 Access Network Connection Settings Click on the link to access network connection settings XP Network Connections Vista Windows 7 Network and Sharing Center The display should look similar to the following ...

Page 12: ...2 4 Access Local Area Connection Click on the link to access the local area connection XP Local Area Connection icon Vista Windows 7 View Status next to Local Area Connection The display should look similar to the following 1 2 5 Open Properties Click on Properties button Vista Windows 7 will display a popup window asking to confirm the operation ...

Page 13: ...re Manual 5 Click on the Continue button The display should look similar to the following 1 2 6 Access Internet Protocol Properties Click on the Internet Protocol to highlight XP Internet Protocol TCP IP Vista Windows7 Internet Protocol Version 4 TCP IPv4 Click on the Properties button The display should look similar to the following ...

Page 14: ...8 0 2 Subnet mask 255 255 255 0 Default gateway 192 168 0 1 Preferred DNS 192 168 0 1 Click OK The previous screen appears Click OK METHOD 2 PC to LAN ETH1 RAM 9000 Series only Select Use the following IP address and fill in the blank fields with the information below IP address 192 168 1 2 Subnet mask 255 255 255 0 Default gateway 192 168 1 1 Preferred DNS 192 168 1 1 Click OK The previous screen...

Page 15: ... in cmd wait for Vista Windows 7 to locate the program click on the cmd program if finds Verify connectivity to the RTU or router by running a ping to the IP Address of the Ethernet port you are connected to METHOD 1 PC to WAN ETH0 Ethernet on SN RAM 6000 RAM 9000 Type in ping 192 168 0 1 and then press the ENTER key The display should look similar to the following METHOD 2 PC to ETH1 LAN on RAM 9...

Page 16: ...IS driver for your Red Lion device This will enable the unit to connect via USB and behave as an Ethernet device Power on the Red Lion device and connect to your Windows PC via the USB mini cable Observe the Microsoft Windows behavior to see if the unit is properly detected An audible sound as the cable is connected should be heard and Microsoft Windows begins searching for the correct USB driver ...

Page 17: ...g the Web User Interface Drawing No LP0997 C Installing RNDIS Driver for Ethernet Connectivity over Sixnet Series SN RAM 6000 RAM 9000 Software Manual 9 Select Browse my computer for driver software Select Let me pick from a list ...

Page 18: ... Update Driver Warning dialog window shown below appears Click on Yes Once the install is complete click on Close The USB Ethergadget driver should now be loaded and you should be able to access the Red Lion device via USB Ethernet at 192 168 111 1 10000 1 4 Access Red Lion Web Server Open a web browser and enter the following in the address bar Browsers currently supported Internet Explorer 10 11...

Page 19: ...d Lion RTU or Router Login Instructions For the User Name enter admin all lowercase For Password enter the last six digits of the serial number located on the product label all lowercase Upon successfully logging in the following screen appears Note The following information can be used for all series of RTUs or routers even if screen shots indicate other models Some models may have reduced option...

Page 20: ...ng information in the Networking Cellular Provisioning screen Consult Section 2 1 for more information 1 4 2 SSH Telnet Serial RS 232 Connections to Red Lion RTUs or Routers For alternative connections to the Red Lion RTU or router please contact Red Lion Technical Support for additional documentation Note The SN RAM 6000 and RAM 9000 series have many modes of operation which can cause the power c...

Page 21: ... switching between multiple carriers Navigate to the Network Cellular Connection Provisioning screen to verify your carrier has been provisioned correctly for these models CDMA carriers 3G networks such as Verizon and Sprint do not rely on a SIM card and are activated over the air See the Cellular Provisioning Section 2 1 3 of the manual for more details on CDMA OTA activations Embedded modules fo...

Page 22: ... should see Interface Activation Connection IP Address and Signal Strength If you do not see an IP Address get populated for the PPP WWAN interface you may have an issue with your settings or your account has not been correctly activated Activation Status column See table below for a description of the different statuses found in the Activation Status column CDMA HSPA LTE Running Connection Activa...

Page 23: ...connection can be found in Section 3 4 1 2 1 2 Set the User Name Password and APN If you are using a GPRS Edge or HSPA based card enter the User Name Password and APN that was provided by your cellular carrier This information should have been packaged with your SIM chip If you do not have this information please contact your carrier s account representative or the carrier s support department bef...

Page 24: ...f CDMA based 3G carriers are Verizon Sprint Bell Telus and US Cellular For SN RAM 69xx and RAM 99xx devices that are able to switch between carriers this page is used to select the correct carrier profile and firmware images for the cellular module to authenticate on the LTE carrier networks Contact Technical Support for the latest update package for your carrier if you are using one of these mode...

Page 25: ...wser then you should be able to access the Internet Open a browser on the PC Laptop and attempt to browse the Internet Note Depending on the provisioning of your module SIM particularly in corporate applications in which the unit is providing cellular backup connectivity to wired circuits your module SIM may be restricted from Internet access If this is the case you may want to test to ensure that...

Page 26: ...l building and have absolutely no reception at all The important thing to understand is that in many many instances it is not the cellular network that causes reception problems but the environment in which we place our cellular devices Important Note about Cellular Antennas For this reason Red Lion strongly recommends the use of external antennas when deploying cellular devices It is often the ke...

Page 27: ...btaining an IP address Navigate to the Web UI Status screen shown below If the Signal Strength on your screen does not look similar to the one shown above you may be having signal reception difficulties You can further verify a low signal condition by examining the LED signal meter See table below for Signal Strength details Low Signal No service 109 dBm Low but valid signal 99 dBm Lower but valid...

Page 28: ...ut not enough reception to be able to sustain a viable connection If your cellular card is using dynamically assigned IP addresses you can determine if you are in a situation like this by watching the Cellular Interface field from the Home screen Summary Status as shown below Signal OFF No signal available or signal strength is below 100 dBm ON Excellent signal strength greater than 69 dBm FLASH F...

Page 29: ...s If you are using a GPRS EDGE HSDPA card and have at least three LEDs of signal on the front panel signal meter your radio connection to the network may be just fine The problem may lie in logging onto the cellular network Navigate to the Cellular Connection dialog window Network Cellular Connection Configuration Verify your user name password and APN information All three of these items can be c...

Page 30: ...Lion Technical Support at 1 877 432 9908 Live support is available from 8 00 a m 5 30 p m EST If you call after hours please leave your contact information and a detailed description of your problem and we will respond to you the following business day We will be happy to assist you in getting your RTU or router operational When submitting a support question it is most helpful to have a GatherStat...

Page 31: ...e Network tab is organized into eight 8 major categories Cellular Connections Interfaces Firewall Tunneling DNS Settings Static Routes DMNR NEMO and TCP Global Settings Services The Services tab is used to configure the various features of the Red Lion RTU or router These services include DHCP Server DHCP Relay Dynamic DNS SN Proxy Settings SixView Manager GPS Settings SSH TELNET Server SSL Connec...

Page 32: ...tions such as network connections interfaces system processes services running and system information It also allows review of the syslog update history and under diagnostic tools permits testing connectivity through the use of ping and traceroute 3 2 1 Summary This option will return the user to the System Summary home page On this page the system information and physical interface status are eas...

Page 33: ...s the Web UI You do not need to enter the password in order to change the access method Note The HTTP method can result in better performance and faster page load times however it is less secure than the HTTPS method which uses data encryption to provide a secure connection New Password Enter the new password in this field Note Password Limitation Single quote character is not a valid character fo...

Page 34: ...n address valid for the network described by the value contained in the Subnet Mask field and must not conflict with any other device on the target network Subnet Mask Required Enter the desired interface IP address into this field This field is only available when Obtain Network Addresses via DHCP has been set to No Recommended Setting Your network administrator should be able to provide an appro...

Page 35: ...5 0 and the IP address assigned to the device is 192 168 1 1 through 192 168 1 254 as 192 168 1 255 is the value reserved for the broadcast address Recommended Setting This address should have been provided by your Network Administrator It must be an address valid for the network described by the value contained in the Subnet Mask field and must not conflict with any other device on the target net...

Page 36: ...ender and recipient to share a secret key Note The following six characters are not supported Once the desired settings have been entered in the Wi Fi Access Point dialog window click on the Next button and the following Cellular Connection dialog window appears APN Optional Enter the APN used to access your cellular wireless data service in this field This information should have been given to yo...

Page 37: ...vised 2017 08 31 Web User Interface Drawing No LP0997 C Status Tab Sixnet Series SN RAM 6000 RAM 9000 Software Manual 29 Click on Back Save or Apply see explanation of each setting in dialog window above ...

Page 38: ... a table which stores mappings between Data Link Layer OSI Layer 2 addresses and Network Layer OSI Layer 3 addresses This important information shows what connections are established to the RTU or router When you click on the ARP Cache menu item the ARP Cache dialog window will open Firewall Rules The Firewall Rules menu item displays a complete listing of the rules used within the firewall for th...

Page 39: ...tus Tab Sixnet Series SN RAM 6000 RAM 9000 Software Manual 31 Scroll through the list of rules to review the entire IPTABLES listing This information is used to track traffic being allowed and traffic being denied access to and through the Red Lion RTU or router ...

Page 40: ...log window is divided into three sections Summary Details and Multicast The Summary table displays a brief description of the interfaces of the Red Lion RTU or router The Details table displays a system specific description of the interfaces on the Red Lion RTU or router The Multicast table displays the current multicast settings for various interfaces ...

Page 41: ... Standard System Routing Table and the Policy Routing Table The Standard System Routing Table displays the current routes for the Red Lion RTU or router and the static routes that have been configured for the RTU or router The Policy Routing Table displays information on the policy rules the route tables for each individual interface and the general routes for the Red Lion RTU or router ...

Page 42: ... All The TCP Only table displays the sockets that are connection oriented Also known as stream sockets Conn Track is a connection tracker that displays more thorough information about the current socket connections Connection tracking allows the kernel to keep track of all logical network connections or sessions and thereby relate all of the packets which may make up that connection NAT relies on ...

Page 43: ...Series SN RAM 6000 RAM 9000 Software Manual 35 Traffic The Traffic dialog window shows the unit s traffic history From the Display Flag drop down list select which information is desired and which Interface is to be viewed The information will then be shown on the dialog window ...

Page 44: ...nfo sub menus These are useful in troubleshooting connectivity of the Red Lion RTU or router to the Internet or the Network the RTU or router is connected to Cellular Status The Status menu item brings up a dialog window displaying the status of the cellular connection From here you can get information such as the type of modem carrier MDN IMEI ESN CCID SIMID IP RSSI RSRP RSRQ Activation Status Co...

Page 45: ...s a good test and this IP can be found in the your routing table Also a commonly available internet server available to test against is 4 2 2 2 Source Interface The Source Interface offers the option of using different interfaces to send the Ping through This is useful if you have a VPN Tunnel in place Testing the connection through the VPN Tunnel is required to verify connectivity through the tun...

Page 46: ...ing for this option is Truncated unless a deep packet inspection is required Truncated If this option is selected the packet headers and the first few bytes of the start of the data packet will be included Use this option to trace network and connection behavior Maximum If Maximum is selected the entire packet with its contents will be captured Use this option to investigate the contents of the da...

Page 47: ...e network traffic Socket Test The Socket Test menu item allows you to Telnet to desired destination IP and Port addresses to verify the socket availability Host IP Address field Enter the IP Address or URL you wish to connect to via Telnet Destination Port field Enter the Destination port of the server to which you would like to connect Click on the Test button at the bottom of the dialog window t...

Page 48: ...P can be found in your routing table A commonly available Internet server available to test against is 4 2 2 2 Source Interface field Select the interface to be used from which to originate the Traceroute test The recommended setting for this field is Unspecified as it will let the system choose the first interface found with a route to the destination Click on the Trace button at the bottom of th...

Page 49: ...d via a grep Global Regular Expression Parser style filter mechanism Match Case Check this box if you want the Filter String field to be case sensitive Number of lines to display Select the number of lines to be displayed from one of the choices in the drop down list provided Forward syslog to remote host Required Select YES to enable forwarding of syslog messages to another host The recommended s...

Page 50: ...e Be aware that this will considerably increase the size of the resulting zip file Only choose YES for this option if directed by Technical Support or if you have installed a custom GWLNX protocol engine Include All Network Files Select YES to include all networking related configuration files If using gatherconfigs to clone a unit note that this option will cause the network interfaces Including ...

Page 51: ...lowing window appears Unit s Name Enter a description to identify the unit This field is not required to support functionality It is only for unit identification This information appears on the Summary screen when logging into the device Note Maximum length of this field is 32 and supported characters are alphanumeric plus the following special characters _ Recommended Setting Optional Web Access ...

Page 52: ...ised of a mixture of upper and lower case characters and numbers as well as special characters The relative strength of the password you create is displayed on the visual password strength indicator Please note that the single quote character is not a valid character For security purposes it is recommended that the admin password be changed according to your internal policies Confirm New Password ...

Page 53: ... Date MM DD YYYY Required Set the Sync to NTP Server field to No and enter the Current Date using the shown format Current Time HH MM SS Required Set the Sync to NTP Server field to No and enter the Current Time using the shown format Note The Hour field in on the 24 hour time clock range 00 24 This page verifies that the month day year hour minute and seconds conform to expected inputs For exampl...

Page 54: ...ot spot and the second is by creating a new certificate To add a new certificate using the hot spot You can drag and drop a certificate on Click or Drop Certificate Here to add the certificate to the table or click on Click or Drop Certificate Here to navigate to and select the certificate file to be added To create a new certificate Click on the Add button and the following dialog window appears ...

Page 55: ...e Authority Please include a CA valid for each signed certificate SSL This certificate will be available for SSL Connections as a Server Certificate or a Client Certificate SSLVPN This certificate will be available for SSL VPN tunnels File Name This field will be populated with files previously selected in the Upload Certificate field for quick access Upload Certificate Click on the Select File bu...

Page 56: ...e file that will perform the system update or drag and drop into this area the file that will perform the system update Preserve current configuration Select YES to save the device s current configuration and restore it after the firmware image is installed Image File Upload Method Select the method that will perform the image file upload including a SD Card source option Note The Image File Uploa...

Page 57: ...ick on the Export button The pop up window below asking you to save or open the file appears Select the desired option Note Please note the directory where the file was saved in order to retrieve it when needed to put the file back onto the Red Lion RTU or router Import Web UI Master Configuration File Set your importing defaults for the configuration file Import File Handling Select Replace to co...

Page 58: ... you are importing a configuration from one unit to another and need to make additional settings before applying them Import Configuration File Click on Import Configuration File and the dialog window below appears Browse to the directory where the config xml txt file is located Select the config xml txt file and click on the Open button to populate the Browse window If needed you can change the f...

Page 59: ...on menu item and the following dialog window appears Package File Source Select the method Upload or SD Card by which you would like to upload the package zip file Click or drag package zip file Click on to select the package zip file that will be installed or drag and drop into this area the package file that will be installed Clicking on the field will display the a dialog window similar to the ...

Page 60: ... of the dialog window listing the results 3 3 7 Factory Defaults Reboot The Factory Defaults Reboot menu item allows you to restore the configuration back to factory default settings Click on the Factory Defaults Reboot menu item and the following window appears Restore Factory Default Click on the Restore button to restore the factory default settings A warning appears read through the informatio...

Page 61: ...nd the following dialog window appears Predefined Job Settings Predefined Job Interval Select the appropriate periodic job interval from the drop down list provided to run at the scheduled job interval If the option Disabled is selected all the jobs created for the selected job will be removed The available predefined options are Daily Will run at 4 02 am Weekly Will run at 4 22 am every Sunday Mo...

Page 62: ...n list to run at the scheduled job interval The available options are 5 minutes Will run every 5 minutes Hourly Will run every hour Daily Will run at 4 02 am Weekly Will run at 4 22 am every Sunday Monthly Will run at 4 42 am on the first day of every month Upload Script File Click on the Select File button to browse to the location where the job to be uploaded is stored Click on the Import button...

Page 63: ...ewall Tunneling DNS Settings Static Routes DMNR NEMO and TCP Global Settings 3 4 1 Cellular Connection The Cellular Connection menu item is sub sectioned into Configuration Status and Provisioning These options allow the user to configure view the cellular information on unit Configuration The Configuration menu item is used to make configuration changes to the cellular connection settings on the ...

Page 64: ...PN Persistence Select the APN Persistence option Write Always Will always overwrite the configuration used for connections Write Once Will update the APN once but not again in the future This allows other processes to update the APN such as automatic tower APN updates This is recommended for Verizon SIM Unlock PIN Code Enter the 4 digit SIM Unlock PIN code here Entering the wrong value multiple ti...

Page 65: ...E 4G LTE only 2G3G 3G 2G only no LTE 3G Only 3G only service 2G Only 2G only service Ignore Registration Attempt to make a cellular connection even when the modem is not registered on a network The recommended setting for this field is NO MTU Enter the MTU size you desire to use In computer networking the maximum transmission unit MTU of a communications protocol of a layer is the size in bytes of...

Page 66: ...you to choose to have the default route for the Red Lion RTU or router to be the cellular connection when it is connected or to designate an Ethernet port as the default route Select Yes to have the cellular connection use the default route once it is connected Use Peer DNS Select Yes to have the cell connection accept DNS information from the peer device to which it is connected Click on the Save...

Page 67: ...oftware Manual 59 Status The Status menu item brings up a dialog window displaying the status of the cellular connection From here you can get information such as the type of modem carrier MDN IMEI MEID ESN CCID IP RSSI RSRP RSRQ Activation Status Connection Status Cellular Uptime CSQ History and Card Stats ...

Page 68: ...e If the cellular SIM is not recognized go to the Configuration dialog window and enter the required data see Section 3 3 5 Select Carrier Select a carrier to view details on the cell module firmware and profile contained in the carrier package With a carrier selected you can click Update Module to flash the cell module with the displayed firmware and profile To remove the carrier package from the...

Page 69: ... following the Update Module process to re initialize the modem with the newly uploaded carrier Click on the Delete button to remove the selected carrier from Select Carrier field This will remove the stored carrier image from the device and it will no longer be selectable This does not effect the active firmware currently loaded in the module Show Diagnostic Information The information generated ...

Page 70: ...N Network Interfaces The configuration procedure of the Ethernet ports is the same for eth0 and eth1 therefore this section will only reference the configuration of WAN eth0 Please refer to this section when configuring LAN eth1 Click on the eth0 WAN menu item select Yes and the following window appears Enable eth0 Interface This field determines if the specified Ethernet port is enabled allowing ...

Page 71: ...IP network Every device on a network must have a unique address The range of valid addresses for a given network is determined by the value of the Netmask Some addresses are reserved for special uses such as network and broadcast For example if a netmask is 255 255 255 0 and the IP address assigned to the device is 192 168 1 3 then the range of valid addresses is 192 168 1 1 through 192 168 1 254 ...

Page 72: ...data unit that the layer can pass onwards MTU parameters usually appear in association with a communications interface NIC serial port etc Standards Ethernet for example can fix the size of an MTU or systems such as point to point serial links may decide MTU at connect time A larger MTU brings greater efficiency because each packet carries more user data while protocol overheads such as headers or...

Page 73: ...you can create a sub interface and then set it up as you would a standard Ethernet interface To configure a sub interface Click on the Add button and the following pop up window appears Enter Sub interface number Required This field is where you enter the sub interface number The valid range is 0 99 and each aliased interface must be uniquely numbered The final sub interface name will then be in t...

Page 74: ...b Interface name will then be in the form ethx y where x is the root interface number and y is the sub interface number Your Network Administrator should be able to provide guidance as to an appropriate value Enter IP Address Required Enter the desired interface IP Address into this field This address should have been provided by your Network Administrator Enter Netmask Enter the desired Netmask f...

Page 75: ...correct network settings could render the device incommunicable and may require being able to connect either to the device directly or via the network to which it is attached Note To configure the eth1 Interface follow the steps documented for eth0 Wi Fi WLAN RAM 9631 RAM 9731 or RAM 9931 with factory option The Wi Fi interface option is used to configure the parameters for Wi Fi LAN Interface Fro...

Page 76: ...ome addresses are reserved for special uses such as network and broadcast Your Network Administrator should be able to provide an appropriate value The default setting for this field is 192 168 1 1 For example if a netmask is 255 255 255 0 and the IP address assigned to the device is 192 168 1 3 then the range of valid addresses will be 192 168 1 1 through 192 168 1 254 as 192 168 1 0 is the value...

Page 77: ...elected and click the Apply button to set it Broadcast SSID Allows the SSID to be broadcast on the network Enabling this option makes it easier for clients to find the access point but also allow attackers to know the name of your network Select Enable to broadcast Select Disable to increase network security and prevent the SSID from being seen on network PCs Encryption Mode This option allows you...

Page 78: ...r special uses such as network and broadcast For example if a netmask is 255 255 255 0 and the IP address assigned to the device is 192 168 1 3 then the range of valid addresses is 192 168 1 1 through 192 168 1 254 as 192 168 1 0 is the value reserved for the network and 192 168 1 255 is the value reserved for the broadcast address The IP address should have been provided by your Network Administr...

Page 79: ...hese local link addresses are always available WAN Interface Specify the IPv6 Upstream RTU or Router path If a unit has access to a real IPv6 RTU or router on multiple interfaces you may specify it here Cellular devices expect that the wwan0 interface will lead to the IPv6 RTUs or routers Wired RTUs or Routers will expect that eth0 default untrusted external interface may also lead to an upstream ...

Page 80: ... NO to turn off PPP Dial Backup Select ttyS Port Select the ttyS port on which the modem is attached For an external modem connected to a serial port use the port name as labeled on the unit For an internal modem a common setting is ttyS3 Enter Dial String Required Enter the phone number of the peer ISP to dial Enter User Name Required Enter the name used for authenticating the local system to the...

Page 81: ...are leaving the interface but no return packet is received for the specified time then the connection is reset This can be useful for detecting an unresponsive situation where the network is down the modem is in an unknown state or other low level error may have occurred Note If the normal usage of the device regularly has packets leaving the unit with no expected response then premature disconnec...

Page 82: ...ed It is typically in the form name domain com Enter Password Required Enter the password to be used with the PPPoE interface in the space provided Confirm Password Required Re input the password entered in the Enter Password field This entry must match exactly the previously entered password Select DNS Method Select the method by which DNS Server information should be obtained The recommended set...

Page 83: ...ons General Settings ACL Rules Masquerade NAT DMZ Rules Port Allow Forwarding Rules General Settings Firewall The General Settings menu is used to configure common access services to the Red Lion RTU or router and configure how the interfaces are interpreted Click on the General Settings menu item Enable Firewall Required Specify whether to enable the firewall service on this device The recommende...

Page 84: ...s otherwise select No The recommended setting for this field is No To restrict access via a configured whitelist click the check box marked Use Whitelist and then select a whitelist name from the list of names available in the drop down list box provided Whitelists may be viewed defined via the Network Firewall ACL Rules Subnet Whitelist Rules screen Note Setting this option to Yes does not enable...

Page 85: ...fined on other pages such as service access or redirect rules Web UI Whitelist Name Select the desired whitelist for the drop down menu Whitelists are created in the Network Firewall ACL Rules Subnet Whitelist Rules screen Allow SNMP Agent Access To allow external devices to connect to the SNMP Agent via port 161 through untrusted interfaces on this unit select Yes otherwise select No The recommen...

Page 86: ...the DF bit is set then the packet will be dropped when smaller MTUs are encountered This is useful if a mis configured router is preventing PMTU discovery from operating properly The recommended setting for this field is No Packet Drop Logging This option controls the logging level of common packet drops These messages normally appear in syslog The three rate options are Normal 2 messages per seco...

Page 87: ...rop down list provided You may add any number of interfaces up to as many exist on the device Each selection must be unique Untrusted interfaces will block all incoming traffic from devices networks connected to this interface Exceptions must be defined in firewall rules to allow traffic General Settings Allow Redirect etc Click on the Finish button to populate the Untrusted Interface screen Click...

Page 88: ...work behind the Red Lion RTU or router Blacklist Rules are used to define a single IP Address or an entire network that are NOT allowed to access the network behind the RTU or router Current Whitelist Groups This field is populated by the information entered in the Subnet Whitelist Rules Section Subnet Whitelist Rules The Subnet Whitelist Rules are used to define a single IP Address or an entire n...

Page 89: ...ions This setting controls whether or not the whitelist rules apply to packets originating from this device There are two 2 choices Only to Whitelist IPs Packets destined for subnets outside those allowed by the selected whitelist will be suppressed by the firewall No Restrictions The device may send a packet to any subnet and the whitelist rules apply only to packets received Subnet Blacklist Rul...

Page 90: ...rk Firewall ALC Rules Subnet Whitelist Rules screen Outbound Interface Select the interface associated with the Destination Address Subnet Destination Address Subnet Required Enter the network to which the firewall allows access from the Outbound Interface Click on the Finish button You will be returned to the Firewall Access Control List ACL Rules dialog window and the Filter Rules table will now...

Page 91: ...ASQ rules enable access to the Internet through a single unit interface that translates the IP addresses The unit itself has one or more IP addresses but all the IP s behind the MASQ have private Internet addresses Click on the Add button and the following dialog window appears Original Source Subnet Required Enter the subnet using IP CIDR notation that will be masqueraded out of a specific interf...

Page 92: ...ber of entries in each pool must match NAT One to One rule Click on the Add button and the Nat Rules Settings following pop up window appears Label Enter a description to describe this NAT Rule This field is not required for NAT Rules functionality and it is just for NAT Rule identification Supported characters are alphanumeric plus the following special characters _ Original Destination Address R...

Page 93: ... appears Label Enter a description to describe this NAT Range Rule This field is not required for NAT Range Rules functionality and it is just for NAT Range Rule identification Supported characters are alphanumeric plus the following special characters _ Original Destination Address Start Required This field holds the starting address range being transformed by NAT the IP s seen by a remote host T...

Page 94: ...d owned on a local interface of this device Ports 1 19 are excluded Note Host Redirect and Service Access rules will apply first and may prevent certain ports from reaching the New Destination New Destination Address End Required This field is used to hold the ending range of real LAN IP of the destination device behind this RTU or router One to One NAT Range will perform the same operation as a s...

Page 95: ... be forwarded to a DMZ Host All incoming packets TCP UDP ICMP etc will be forwarded to the DMZ Host specified Note Host Redirect and Service Access rules will apply first and may prevent certain ports from reaching the DMZ Host DMZ Host Address Required Enter the IP address of the DMZ Host This IP address will receive all packets destined for the interface specified Note Host Redirect and Service ...

Page 96: ...utton for changes to be saved without activating the interface until you reboot the unit the Apply button will save your settings and apply them immediately To revert to the previous defaults click on the Revert button Port Allow Forwarding Rules The Firewall Port Forwarding is used to configure routes from a small range of IP Addresses or all IP Addresses through one or more interfaces to a desig...

Page 97: ...T or DMZ rules instead Select Protocol Choose the protocol for the type of data you want to allow Source Network via Whitelist Select a whitelist name from the list of names available in the drop down list Whitelists may be viewed defined in the via the Network Firewall ACL Rules screen Click on the Finish button You will be returned to the Firewall Port Forwarding dialog window and the Service Ac...

Page 98: ... device New Destination Port Required Enter the port that the incoming connection will be redirected to This may be the same number as the Original Destination Port Select Protocol Choose the protocol type for this port s data Options are TCP and UDP Source Subnets via Whitelist Select a whitelist name from the list of names available in the drop down list box provided Whitelists may be viewed def...

Page 99: ...P in IP Tunnels and IPSec GRE Tunnels Generic Routing Encapsulation The GRE Tunnels menu item is used to configure a GRE Tunnel GRE is a tunneling protocol that was originally developed by Cisco It can do a few more things than IP in IP tunnelling For example you can also transport multicast traffic and IPv6 through a GRE tunnel Click on the GRE Tunnels menu item and the GRE dialog window appears ...

Page 100: ...s _ Tunnel Name Select the name of the GRE name by choosing one of the options available in the provided drop down list Enabled Select Yes to enable the tunnel Local bind to IP Set the local bind IP address for tunneled packets This field is optional Note If supplied the Local IP Address must be an address on another interface of this host If not supplied tunneled packets can be received from any ...

Page 101: ... Network DNS Settings If the resolved IP changes the tunnel will be restarted with the new Remote IP Use this option to allow units with dynamic IPs to maintain a GRE tunnel This requires the use of DynDNS or other dynamic DNS updating protocols to populate the dynamic IP changes Click on the Finish button You will be returned to the GRE Tunnels dialog window and the Configuration Table will now b...

Page 102: ... IPP network mask Remote IP Address Required Set the IP Address of the remote endpoint for this tunnel Remote Subnet Required Set the remote private IP network mask Time To Live Required Set a fixed Time To Live for tunneled packets Note Values over 64 cause connection failures Start Tunnel at boot Select Yes to allow the interface to become active at system start Click on the Finish button You wi...

Page 103: ... is where IPSec tunnels are created and edited IPSec Configuration Enable IPSec Specify whether you want to enable the IPSec service If you select No all tunnels will be disabled Enable NAT Traversal Specify whether all tunnels use NAT Traversal Coordination Table You may select specific actions to be performed either upon PPP connect PPP disconnect or both Coordinate with The available actions in...

Page 104: ...rted IPSec Stop IPSec is stopped With these combinations the connection management may be fine tuned so that the tunnel s may be able to restart faster rather than having to rely on Dead Peer detection or other time out mechanisms alone IPSec Tunnels Click on the Add button and the following General Settings dialog window appears Tunnel Name Required Enter a descriptive name for the tunnel in this...

Page 105: ... detect when a remote end point is no longer communicating properly Disable Select disable if you are not using this option Hold Once an error is detected the hold state will only renegotiate the tunnel after new traffic destined for the tunnel is detected Restart The restart state will attempt to immediately re establish the connection to the concentrator For this reason restart may use more band...

Page 106: ...vided This option selects the encryption level of the Diffie Hellman keys and these are None A value of none means that no DH Group will be selected for this end of the tunnel and it will adopt the settings of its peer during connection initiation Group 1 768 bits Group 2 1024 bits Group 5 1536 bits Group 14 2048 bits Longer keys imply better security but at a cost of longer negotiation set up tim...

Page 107: ... icon to browse to the certificate for use Select the desired certificate file and click Open to upload the file Certificates may also be added under the Admin Certificate Manager section of web UI Local Client Key Required Select the key file name you want to associate with this tunnel Drag and drop the Local Client Key into the box adjacent to the Local Client Key field Or Click on the file icon...

Page 108: ...ticular instance of a connection a set of encryption authentication keys for user packets should last from successful negotiation to expiration Click on the Next button and the Termination Settings dialog window appears Local Public IP Address This parameter typically only needs to be specified when the Red Lion RTU or router is configured to use more than one external untrusted interface Specify ...

Page 109: ...Tunnel Type If Server or Dynamic is selected as Tunnel Type and this field is blank then the value of any will be used in the configuration file Remote Gateway IP Address Specify the next hop gateway IP Address for the right participant s connection to the public network Note If no value is provided the tunnel uses the left participant as it s next hop Remote Private Subnet s Specify the private s...

Page 110: ...e Primary DNS Server you want to use Note This setting may be overridden if a network interface is set to obtain its configuration information from its peer either via PPP or DHCP Enter Alternate DNS Server 1 This field is already filled in it is showing the current server in use by the Red Lion server Enter the IP Address of a Backup DNS Server you want to use if the Primary DNS Server is unable ...

Page 111: ...red Domain Name Enter IP Address Required Enter the host IP Address Click on the Finish button You will return to the DNS Settings dialog window and the Static Hosts table will now be populated with the recently entered data To delete an existing host select it in the table and click on the Delete button To edit an existing host select it in the table and click on the Edit button Click on the Save...

Page 112: ...rom the provided drop down list When set to Yes the route will take effect when a network change event up down occurs on any interface For example if the configured interface is set to eth0 and the ppp0 interface becomes active then the route will be reapplied to eth0 When set to No the route will take effect only when a network change occurs on the configured interface For example if the configur...

Page 113: ...at RTU or router would be the gateway to the network on which the remote target device resides In order to communicate with it it would mean sending and receiving via the gateway device The address must be one within the valid range for the network on which the designated interface resides Enter Metric Enter a value for the route metric in this field Recommended value is 0 Click on the Finish butt...

Page 114: ... 6000 RAM 9000 Software Manual 3 4 7 DMNR NEMO Settings Click on the DMNR NEMO menu item the following dialog window appears Enable DMNR NEMO Client Yes No options to enable a DMNR NEMO client Dynamic Mobile Network Routing Network Mobility Selecting Yes will invoke the DMNR NEMO Settings screen ...

Page 115: ...lient to connect provided by Verizon Required field Secret Key N MHAE KEY paired with the SPI for authentication This field minimum length is 6 and the maximum length is 64 and any character is supported This must match remote server end for authentication Required field provided by Verizon SPI N MHAE SPI paired with the Secret Key for authentication This value must match remote server end The val...

Page 116: ...ies Enter the number of retries the client will attempt to register between failures when the HA is not responding After maximum retries are exhausted device will enter a 5 minutes hold off period before the connection will start over The valid values are 0 255 A value of 0 is forever Recommended Setting 3 Required field Retry RRQ Delay Enter delay in seconds between retransmitting RRQ packets If ...

Page 117: ...ute Subnet pop up window on the screen Enter a name label into the Label field for the Subnet you are adding This is not required but can be helpful in identifying the purpose of the subnet within the network Enter the IP address and subnet mask using IP CIDR notation into the IP Address Subnet Mask field The allowed CIDR values are 8 32 This subnet will be an advertised route The maximum number o...

Page 118: ...of the routed subnet in the primary display area and click on the Edit button to the right of the Additional Routed Subnets area to modify the configuration data as required Up Down Use these buttons to move an existing routed subnet up or down in the Additional Routed Subnets display Verify the subnet information appears in the primary display area as intended Revert Refresh Click the Revert Refr...

Page 119: ...d probes that will be sent to the remote end of a TCP socket before determining the connection to be failed and disconnecting The recommended values are 3 6 Disable Path MTU Discovery Enable Disable Path MTU Discovery This might be useful if a private cellular network is restricting MTU sizes along the network path and causing packet drops The recommended value for this field is No off Enable Reve...

Page 120: ...l By default failed packets are discarded Loose Mode As defined in RFC3704 Loose Reverse Path each incoming packet s source is also tested against the FIB and if the source address is not reachable via any interface then the packet check will fail Current recommended practice in RFC3704 is to enable strict mode to prevent IP spoofing from DDos attacks If using asymmetric routing or other complicat...

Page 121: ...erver menu item and the following dialog window appears Global Settings Enter Domain Name Enter the domain name that will be passed to DHCP Clients Use Standard DNS Settings Choosing Yes will automatically use the DNS Servers obtained by this unit s internet connection and or entries specified in Networking DNS Settings This is the preferred method of operation Choosing No allows you to issue cust...

Page 122: ...nd that chosen for the starting value of the range Care should be used to ensure that there is no conflict with any pre existing devices on that subnet which may have been already configured to use statically assigned IP addresses Wi Fi eth1 Enable DHCP Specify whether you want to enable a DHCP Server for the interface Note If the interface is not enabled or has been set to obtain its addressing p...

Page 123: ...g An address valid for the subnet for which the interface is configured Care should be used to ensure that there is no conflict with any pre existing devices on that subnet which may have been already configured to use statically assigned IP addresses Ending Address Required Field Enter the Ending IP Address of a range you want the DHCP Server to provide for clients Recommended Setting An address ...

Page 124: ...olons Enter Client IP Address Required Enter the IP address for which you wish to assign to a client s computer or device MAC address An address valid for the subnet for which the interface is configured Care should be used to ensure that there is no conflict with any pre existing devices on that subnet which may have been already configured to sue statically assigned IP addresses This address sho...

Page 125: ...ars Enable DHCP Relay Select YES to enable the DHCP Relay or NO to disable it The service will start once the Apply button is clicked If the Save button is clicked the service will not be started until the device is rebooted and then only if the Start at boot time option has also been set to YES Start at boot time Select YES to enable the DHCP Relay at boot time or NO for manual control If the DHC...

Page 126: ... with the entered data To delete an existing interface select it in the table and click on the Delete button To edit an existing interface select it in the table and click on the Edit button Remote Servers Click on the Add button and the following dialog window appears Remote Server Enter the IP Address or fully qualified domain name of all remote DHCP Servers available It is the responsibility of...

Page 127: ...ll save your settings and apply them immediately To revert to the previous defaults click on the Revert button 3 5 3 Dynamic DNS The Dynamic DNS menu item is used to configure a dynamic DNS name for the Red Lion RTU or router that does not have a static public IP Address A subscription to a service providing Dynamic DNS such as DYNDNS ORG is required Click on the Dynamic DNS menu item and the foll...

Page 128: ...umber if needed for user to access the Dynamic DNS Server Example members dyndns com 80 The recommended setting for this field is automatically displayed when you select a Service Provider If you require a value other than the recommended value your Network Administrator or Dynamic DNS Service Provider should be able to provide the appropriate value which can be entered manually Server Request Pat...

Page 129: ...Proxy Settings dialog window will open Enable SN Proxy Settings Enables or disables the SN Proxy feature If NO is selected all other fields in the dialog window will be hidden Use HTTPS SSL Encryption Specify whether you want to enable the SSL engine for a more secure connection Use HTTP login Specify whether you want to enable HTTP login Note If you enable the HTTP login you will be required to e...

Page 130: ...menu All fields in the dialog window will disappear The recommended setting for this field is Yes Note A device managed by the SixView Manager Server may have its configuration altered at any time without warning so it is important to be aware of the actions the selected SixView Manager Server is configured to perform upon receiving a check in from a new device before enabling this option The reco...

Page 131: ...se of increased data traffic which may be an issue when the connection utilizes a cellular modem with a service plan where cost is based on bandwidth usage A value of 220 is suggested for Cellular carriers that use an inactivity timeout of four hours Enter Error Interval minutes Required Enter the number of minutes the SixView Manager client should wait before re attempting a previously failed che...

Page 132: ...on the GPS Settings menu item and the following dialog window appears GeoFence Engine State Options and descriptions are listed in this field Eventable register state is listed in parenthesis next to the label Monitor Only 0 Reporting GPS location only No GeoFence Lockdown Lockdown Waiting for Data 1 Waiting on GPS data to compute lockdown fence ...

Page 133: ...ce Select GPS data source Select where the data source data is gathered from The available choices are Internal If this option is selected and GPSd is available on the system the data will be gathered from the GPSd process This process will automatically poll GPS data from supported devices as they are attached This includes onboard GPS chipset and cellular GPS from some series RAM 6900 External I...

Page 134: ...the configured Minimum Accuracy or Calculated Minimum Radius values as needed Note that since the calculated minimum radius may change over time depending on acquired GPS location data the value will never be allowed to become less than the Minimum Accuracy nor the Calculated Minimum Accuracy GeoFence Violation Control Number of Violations to ignore Required Enter the number of violations to ignor...

Page 135: ...s typically only useful in a mobile application The allowable range is 200 1000000 feet Require User Cleared Violations Select whether the user is required to clear perimeter violations using the drop down list provided The recommended setting for this field is 0 Available values are No Yes Whenever a full violation state has been reached Violation Outside or Violation No Data the next good GPS da...

Page 136: ...val seconds This parameter determines how often in seconds the current GPS data point will be saved in NMEA format in a Raw GPS logfile The allowable range is 5 10000 Click Save to store the settings for the next reboot or click Apply for the settings to take effect immediately Selecting Revert will reset all fields to factory defaults ...

Page 137: ...S to configure advanced options for the SSH Server Optional The recommended setting for this field is NO Listening IP Address Specifies the local IP Address on which the SSH server will accept connections Note Specifying a value of 0 0 0 0 allows the SSH server to accept connections on any interface Firewall rules must be present to allow SSH connection on untrusted interfaces The recommended sett...

Page 138: ...is field is 10 Allow Root Login Specifies whether root can log in directly to the SSH server The recommended setting for this field is No Telnet Server Enable Telnet Server Select YES to enable the Telnet Server Note Enabling the Telnet Server does not by default allow Telnet data through the firewall If you have connection problems please check your firewall settings The recommended setting for t...

Page 139: ...g dialog window appears Enable SSL Select Yes to configure SSL client server Select No and then the Apply button to disable SSL Select Activity Log Level This option controls the logging level for SSL Connection activity The recommended setting for a production environment is Summary For a test environment Full Wait for Connection sec Time in seconds allowed after sending SYN packets to wait for S...

Page 140: ...d key not password protected when generated Use Admin Certificate Manager to install update certs Select Keep Alive behavior This option enables TCP Keep alives on the underlying sockets The following options are supported None Keep alives not used All Keep alives enabled for all sockets Accept Keep alives enabled for listening server socket side connections only This applies to the clear text ser...

Page 141: ...ntrusted interface It may be useful to review the results of Status Network Socket Statuses TCP Only to confirm that your choice of listening port is not already in use Ports under Local Address with a state of Listen are in use SSL Destination IP Required Enter the IP or Domain Name of the SSL server to which you would like to connect SSL Destination Port Required Enter the Port number of the SSL...

Page 142: ...r this field is 20 seconds Idle Timeout min Time in minutes allowed for no traffic over an SSL connection before closing down the link The recommended setting is 720 minutes Select Certificate A server certificate must be provided This will be used to encrypt communication with all clients The certificates must be in PEM format with an unencrypted key not password protected when generated Self sig...

Page 143: ...ockets or the SSL Encrypted server for Server mode sockets Remote Keep alives enabled for client initiated sockets Local Keep alives enabled for Client connections bound to a local IP address You may need to adjust the master Keep alive timer via Network TCP Global Settings TCP Keep Alives Note Enabling TCP keep alives may dramatically increase the total amount of traffic for the affected socket s...

Page 144: ... OOB Encryption Setup TCP Destination Port Required Enter the Port number of the standard TCP server to which you would like to connect TCP Source Bind IP Enter the IP to bind for outgoing TCP connections If not using static IP addresses it is recommended to use the Advanced option Bind Interface for outgoing TCP Connections The recommended setting for this field is to leave it blank for normal op...

Page 145: ...e to allow access to port 161 so that the device may return its results This is the industry standard port number for SNMP traffic A complete listing of the OIDs found in the RED LION RAM MIB can be found in the Appendix at the end of this manual The community string is public do not enter the quotes Click on the SNMP Agent menu item and the SNMP Agent dialog window appears Enable SNMP Agent Selec...

Page 146: ...ck Save to store the settings for the next reboot or click Apply for the settings to take effect immediately Selecting Revert will reset all fields to previously saved defaults 3 5 10 Ping Alive Ping is a diagnostic tool used for verifying connectivity between two hosts on a network It sends ICMP Internet Control Message Protocol echo request packets to a remote IP address and watches for ICMP res...

Page 147: ...ed Options Displays the following fields when selected Source Interface Select the name of the interface to which the service will bind for communications tests When set to None the system will choose automatically The recommended setting for this option is None Source IP Address Enter the IP address to use as a source for communications tests Note This will be the source IP address of the PING pa...

Page 148: ...es HTTPS encapsulation SMS support Email encryption and Crimson Link access for remote reconfiguration Settings for this feature work in conjunction with settings from the Crimson software Please consult your Crimson manual for setup information as indicated in sections below Crimson Device IP Address Enter the IP address of your local Crimson device Use Status Diagnostics Ping to test connectivit...

Page 149: ...ation to connect to these SMS services Click on the Next button Email Setup When paired with Crimson s email alerting capability this SSL gateway allows Crimson to connect to SSL SMTP Servers such as gmail com yahoo com and others Simply point Crimson s configured email server to this unit s Ethernet address 192 168 208 136 and Server Port 25 Please view the Crimson Manual for instructions on how ...

Page 150: ...Specify whether access to the Crimson Web server will be encapsulated in HTTPS encryption Use Login Use HTTP login Specify whether you want to enable additional user login requirements This HTTP login will occur prior to accessing the Crimson Web interface which may require additional login steps Note If you enable this login you are also required to enter the username and password This is separat...

Page 151: ...ed setting for this field is 8080 Allow alternate Crimson Web Server Port Internal Crimson Web Server Port The common listening web server port on Crimson devices is port 80 If you are using a non standard port on your Crimson device enter it here Click on the Finish button Quick Config This option has the same fields as the Walkthrough setup but can be configured in one dialog window Services Sta...

Page 152: ...s device s cellular connection Any Crimson database access supported from the Crimson Link menu can be supported remotely through this feature Please consult your Crimson manual s section Download Settings for more information Make sure to configure your Crimson database to enable IP Download Once your Crimson device is setup on the same local Ethernet network as this router we can access it and f...

Page 153: ...o LP0997 C Crimson Connect Sixnet Series SN RAM 6000 RAM 9000 Software Manual 145 Confirm that this is in the same subnet as this unit s Ethernet settings Network Interfaces Eth0 or Eth1 depending on your cabling setup Click on the Next button ...

Page 154: ...pts after this timeout will be rejected but current connections will not be prematurely terminated Note Minimum time to allow access to Crimson Link is 5 minutes and the maximum is 240 minutes 4 hours Security Filtering Connections from the IP or IP range listed here will be allowed to connect to the Crimson Link enabled device None Allow World This allows connections from any remote IP Address Ch...

Page 155: ...ed when connecting to this remote unit Filter From Enter specific IP address here This field is enabled when Allow Specific option is selected Click on the Next button Now that the remote Crimson Link has been setup click the status on the Crimson Connect main dialog window and click START to open the connection for the time available Once the Remote Link is running enter this unit s cellular IP i...

Page 156: ...n Downloading to a Device for more information Click on the Finish button Quick Config This option has the same fields as the Walkthrough setup but can be configured in one dialog window Remote Link Status Once the remote link is running enter the unit s cellular IP in the Remote Address field of the download tab Click Save to store the settings for the next reboot or click Apply for the settings ...

Page 157: ... Gmail accounts require allowing less secure apps to access your account You can sign in to your account and follow the instruction below Access your account Go to Allow less secure apps and choose Allow to let less secure apps access your Google account Common SMTP Server Settings Server Port Required Enter your SMTP server port Username Required Enter the username used to connect to your SMTP se...

Page 158: ...il addresses can be entered by separating them with a comma Note The email will come from the address configured in Sender field or Username field if the Sender field is blank Examples username email com or username email com usergroup email com Test Email Click on this button to execute the Email Settings Test An email will be sent to the recipient using the Email Client server settings and an Em...

Page 159: ...e If this option is disabled your SMS action routines will be unable to send Consult your SMS service provider or system administrator for your account settings SMS System Configuration Limit outgoing messages Select the desired Limit Period for operational permission This is the time period for which you want to restrict the amount of messages that are sent by the device There are three available...

Page 160: ...the password to be used by the Admin users for unlimited Read Write access Tech user Set the password to be used by Tech users for Basic level Read Only access for IODB values and Write permissions for Event alarm clearance only Basic user Set the password to be used by the Basic users for Read Only access SMS Whitelist Configuration To control access via a whitelist by incoming number select the ...

Page 161: ...ng number The available options are Admin user Tech user and Basic user as defined earlier in this section Click Save to store the settings for the next reboot or click Apply for the settings to take effect immediately Selecting Revert Refresh will reset all fields to previously saved defaults Select Show Details to view current status send a test message or to Rotate the SMS log ...

Page 162: ... Service Provider from the drop down list that will be receiving messages from this device Amazon AWS IoT Broker Enter the Broker IP address or Domain Name provided by the Cloud Service Provider Messages See Messages on page 161 Device Certificates Device Cert Device Certificate is required for connecting to AWS This can be user generated or generated by AWS Device Cert Key Device Certificate Key ...

Page 163: ...at the Broker might report Note Since each message sent to the Broker will trigger a received message from the Broker this will create additional overhead and increase overall data usage Allow Incoming Messages If set to Yes RAMQTT will subscribe to topics needed to receive messages from the Broker Use this option if RAMQTT should handle incoming messages If set to No RAMQTT will not subscribe to ...

Page 164: ...utes 285 seconds Retain Messages When the device publishes a message with the retain option selected as Yes all new subscribers to the topic will receive this message immediately This allows new subscribers to get information about the device without having to wait until the next publish interval Track Server Responses If this option is enabled RAMQTT will receive a response message from the Broke...

Page 165: ...inutes 285 seconds Retain Messages When the device publishes a message with the retain option selected as Yes all new subscribers to the topic will receive this message immediately This allows new subscribers to get information about the device without having to wait until the next publish interval Allow Incoming Messages If set to Yes RAMQTT will subscribe to topics needed to receive messages fro...

Page 166: ...lues 3 5 14 5 Microsoft Azure IoT Hub General IoT Cloud Select the name of the Cloud Service Provider from the drop down list that will be receiving messages from this device Microsoft Azure IoT Authentication Type Select whether SAS Token or Certificates are used for authentication SAS Token Required This field is present when SAS Token authentication is selected Enter the Azure Shared Access Sig...

Page 167: ...es RAMQTT will subscribe to topics needed to receive messages from the Broker Use this option if RAMQTT should handle incoming messages If set to No RAMQTT will not subscribe to any topics and will not receive any messages from the Broker Use this option if RAMQTT should only publish data 3 5 14 6 Nokia IMPACT General IoT Cloud Select the name of the Cloud Service Provider from the drop down list ...

Page 168: ...andle incoming messages If set to No RAMQTT will not subscribe to any topics and will not receive any messages from the Broker Use this option if RAMQTT should only publish data 3 5 14 7 Telenor Cloud Connect General IoT Cloud Select the name of the Cloud Service Provider from the drop down list that will be receiving messages from this device Telenor Cloud Connect Broker Enter the Broker IP addre...

Page 169: ... adding multiple points Points can also be removed after identifying them and clicking on the Remove button Refresh Apply Test Connection Show Status Use these buttons to refresh the screen apply the changes test the connection or display status of the RAMQTT Client Base 1 0 This toggles the system wide register display format which can be represented in two schemes Zero based or One based Zero Ba...

Page 170: ...redefined list of device information values to the cloud Version long ex 4 24 99 0 Host Name Unit Temp Cell modem firmware version PWR1 Volt Cell Module Temp All active interface IPs Cell Service Type MDN Cell Carrier PLMN Cell Current Channel ECIO RSRP RSRQ Cell PRL Version Sim ID Sim IMSI Wireless UpTime IMEI Wireless Signal RSSI Current APN GPS Altitude GPS Time GPS Number of Satellites GPS Fee...

Page 171: ...then click View README File Delete File s Remove the selected file s from the SD card You can select multiple files to be deleted from SD card at once Erase All There are two functions for this button depending on the current contents of the SD Card This button is visible when there are files and directories on the SD card Clicking this button will remove ALL files and directories from the SD card...

Page 172: ...s This is where the user should store any package installation files that will be installed from the SD Card stats This is where any exported gatherstats files will be copied when Save Stats to SD Card is set to Yes It is best practice to insert the SD Card into the Red Lion device Apply Directory Structure then move the SD Card to your other environments to copy the applicable files Download Down...

Page 173: ... Serial IP interface Configuration Description Enter a description to describe the intent of this communication Character limit is 128 Select Interface Select the interface to be used by clicking on the drop down menu The available options are ttyS1 RS 232 ttyS5 RS 485 and ttyAUX0 Line Speed Select the desired interface speed to be used via the provided drop down Consult the configuration of the r...

Page 174: ...device serial port and the DTE terminal via straight RS232 cable Via Modem This option is only used if the device provides TELCO BPX or RJ11 To Terminal port for communication Use Timer Only This option needs to be set to Yes in order to use the Inter Character Timeout value configured on this device The recommended value for this field is Yes Inter Character Timeout ms When the timer expires on t...

Page 175: ...f the two sides in the configuration must be set for Independent Activation If neither side is set then the device will not accept data This function provided integrity for the device by preventing data from being accepted until it can be delivered successfully A TCP Server set to Yes will listen even if the serial side is not considered connected If set to No it will not listen for a connection u...

Page 176: ...attach while connected Select whether or not to allow TCP peer to re attach to our server while the socket is connected If enabled a new connection attempt from the same peer will be accepted and the previous TCP connection will be closed This can be useful to re establish a connection if the link is not closed gracefully Listening IP Address Required Enter the listening IP Address into this field...

Page 177: ...adcast addresses Peer IP Address Required Enter the peer IP Address into this field This is required for UDP communication This specifies the Peer IP address and if set to 0 0 0 0 any remote IP can send UDP packets to our peer port and return packets will be sent back to the IP of the last host that sent a message Packets cannot be sent until one is received first to learn the remote peer s IP If ...

Page 178: ...lient broadcast socket using Configure IP Destinations for connectivity and would connect only if the serial data is available to broadcast See Configure IP Destinations explanation below for a description of available options Configure IP Destinations Used when TCP Client BroadCaster or TCP Client BroadCaster Traffic Activator Socket Type options are selected Click on Add button to define the req...

Page 179: ...pe This field indicates a Header Length used in TCP IP packet that contains the message length being Send or Receive Available options in this field are Default None and JBM Standard The recommended setting is Default Click on the Finish button when the required information has been entered You will be returned to the IP Destinations dialog window and the IP Destinations Table Properties table wil...

Page 180: ...Services Tab Revised 2017 08 31 Serial IP Drawing No LP0997 C 172 Sixnet Series SN RAM 6000 RAM 9000 Software Manual ...

Page 181: ... transfers the MODBUS forwarding table and serial interfaces MODBUS configuration data will be stored in an XML based file named modbus xml This file will contain the following sections serials xml section to define the parameters used for serial ports for both MODBUS and DNP3 localStation xml section to define the local station number and name for both MODBUS and DNP3 remoteStations defines remot...

Page 182: ...duplicated for other station as long as the station as long as the station can be uniquely addressed by an IP address or is connected on a serial port Note 0 is a broadcast address 248 255 are reserved addresses Modbus Local Port Required Enter a valid port number The port must be within the range of 1 65535 and the recommended default port is set to 502 Take care to choose a port number not alrea...

Page 183: ...32 port that is facing the front of the Red Lion device as well as the RS 485 terminal only available on the RAM 9000 Series to integrate into your Modbus DNP3 schema Click on the Serial Port menu item and the following window appears Click on the Add button and the following pop up window appears Serial Port Device Name Name of the serial device Valid values ttys1 RS232 ttys5 RS485 ...

Page 184: ...wd Float Word Order Controls the swapping of words within floats Ignored if using Daniel mode This is needed for configuring the serial slave application Supported orders are LSW and MSW Long Word Order Controls the swapping of words within longs Ignored if using Daniel mode This is needed for configuring the serial slave application Supported orders are LSW and MSW Enable Daniel Mode Use Daniel m...

Page 185: ...ers when designing and monitoring the data in a Modbus environment Tags are used for local reference only and do not get transferred between master and slave devices when performing IO transfers Base 1 0 This toggles the system wide register display format which can be represented in two schemes Zero based or One based Zero Based is also called Native format and all register ranges would begin cou...

Page 186: ... numerical characters The only special characters allowed are the period and the underscore _ Type Select the desired output type from the drop down list Available choices are AI AO DI DO LI LO FI FO Address Enter the desired tag address There are 65536 registers of each data type available Data Type Click to select options for interpretation of this tag s value Clicking this button brings up anot...

Page 187: ...utton next to the tag to be deleted To export the list of tags click on the Export button and a tags csv file will be created and can be found in the PC s downloads folder To import a list of tags click on the Import button and the Upload CSV Tags file dialog window appears Click on the dashed button and browse to the location where the csv file is located select the Import Mode then press the Imp...

Page 188: ...a from defined points and save them as a log file to an internal destination or to an SD card only available on RAM 9xxx Note The Data Logger feature is available on all models using release 3 23 4 23 or newer Navigation Click on the green named log file button to display the data log configuration associated with the displayed log file name GPS_DataLog in this example Then click on Show Logs to d...

Page 189: ...hlighted file but does not display the entire file Click on the Remove button to remove the currently selected datalog config Click on the Show Config button to return to the Data Logger configuration screen Configure a Data Log File Click the blue Add button to display a new data log file associated with the displayed log file name No Name Configure the data log file by populating the screen fiel...

Page 190: ...a log record every 60 seconds consistently Write when data changes and periodically The IODB list is sampled every second and if changes are detected a record is created In addition a record will also be created every Write Period of time 60 seconds in this example Recommended Relative to the rate of change you expect from the logged points Log File Size KB Log file size per file in Kilobytes Max ...

Page 191: ...andom unprivileged ports locally N 1023 and N 1 The first port contacts the server on port 21 but instead of then issuing a PORT command and allowing the server to connect back to its data port the client will issue the PASV command The result of this is that the server then opens a random unprivileged port P 1023 and sends P back to the client in response to the PASV command The client then initi...

Page 192: ...hen step up to a mutually agreed encryption method If a client does not request security the FTPS server can either allow the client to continue in insecure mode or refuse the connection specified data port from its local data port which is port 20 FTP Server IP or Domain Enter the FTP server IP address or domain name FTP Server Port Enter the port number associated with the IP address or domain n...

Page 193: ...1 0 Display toggle buttons located in the footer bar and will toggle the display of registers visible on the page from 0 based to 1 based Click the Apply button to save and apply the new data log configuration 3 6 5 Modbus Remote Station Click on the Remote Station menu item and the following dialog window appears Click on the Add button to configure the remote station parameters and the following...

Page 194: ...rk Socket Statuses TCP Only for a list of ports currently in use Please note that a Firewall Allow rule will need to be added for remote access Network Firewall Port Allow Forwarding Rules Service Access Rules Message Timeout ms Required Enter the Timeout period in milliseconds to wait for an I O transfer to complete The valid range is 10ms 60000ms Message Retries Required Enter the number of time...

Page 195: ...put registers but the range is 1 10000 Long In By default we support 2000 Long Input registers but the range is 1 10000 Long Out By default we support 2000 Long Output registers but the range is 1 10000 Float In By default we support 2000 Float Input registers but the range is 1 10000 Float Out By default we support 2000 Float Output registers but the range is 1 10000 The range of Modbus slave add...

Page 196: ...and the IO Transfer Settings pop up window will open Station Name Name of the remote station for this I O transfer This option lists the name of all the remote stations that you have already defined and configured in remote station table entry Select the remote station name that you want for this I O transfer Protocol Protocol used for the I O transfer Modbus is currently the only supported protoc...

Page 197: ...ed on configured local register allocation for specified I O type Remote Type I O type on the remote station See Table2 3 4 I O Types and Limits Note If modbus WRITE operation is selected this field should be limited to output register types Remote Address First register address for the remote I O used for the I O transfer Valid values are 1 65536 Number of Registers Required Number of registers r...

Page 198: ... Number of regs supported in I O transfer Discrete Input DI 2000 Discrete Output DO 2000 Analog Input AI 125 Analog Output AO 125 Float Input FI 62 Float Output FO 62 Long Input LI 62 Long Output LO 62 Table 2 I O Types and Limits for Write Commands I O Type Number of regs supported in I O transfer Discrete Input DI 1968 Discrete Output DO 1968 Analog Input AI 123 Analog Output AO 123 Float Input ...

Page 199: ...n the Add button to configure the Forwarding and the following pop up window appears Station Number Required Station number to be forwarded Valid values are 1 247 Forward Station Number If supplied replaces the station number in the request with this value Valid values are 1 247 Table 4 Valid Type Combinations for WRITE I O Xfers Local Type Valid Remote Type DI DO DO DO AI AO AO AO FI FO FI FO LI ...

Page 200: ...ded for remote access Network Firewall Port Allow Forwarding Rules Service Access Rules Click on the Finish button to populate the Forwarding Table screen If more than one forward is needed click and repeat the Add button Click on the Save button to save the Forwarding configuration in the modbus xml file The Apply button will save your settings and apply them immediately To revert to the previous...

Page 201: ...box for editing The available controls buttons are as follows Save Save the contents of the text box in to the Modbus configuration file Stop Stop the Modbus service if it is currently running Start Stop the Modbus service if it is currently running and start them back up Refresh Reload the Modbus configuration file into the text box Download Download the current Modbus configuration file to your ...

Page 202: ...nd water companies Usage in other industries is not common It was developed for communications between various types of data acquisition and control equipment General Click on the DNP3 General menu option and the following screen appears Define General Properties Enable DNP3 Select Yes to enable DNP3 Compatibility Mode The DNP3 Slave driver can work under two 2 modes Level 2 or Level 2 On new even...

Page 203: ...e must be at least one DNP3 object configured to generate events on any of the three DNP3 event classes or else no events will be generated and thus no unsolicited responses at all will be generated by the station Event Detection Real Time Data Trace Synchronization Enable Auto Detection Rate Check this box to automatically set the detection rate Enable Max time events in queue after disconnect TC...

Page 204: ...nsmitted Data with a random pre transmission back off time as recommended by the DNP3 Technical Bulletin 9804 007 TCP This section is enabled when the Mode of Operation selected is TCP The parameters to be configured are Select TCP Mode of Operation DNP3 slave driver can operate as Server or Client Mode In Client Mode the user has to set TCP Host field it is used to enter the name of the Host IP A...

Page 205: ...r can be configured to send its own DNP3 Address when a DNP3 Master asks for it When this box is checked if a message is sent with the Self Address 65532 in the destination address field the will respond with its unique individual address This feature simplifies the commissioning troubleshooting and maintenance of devices with an unknown address If this feature is not enabled the station will igno...

Page 206: ...retry timeout are configurable This service is disabled unless Application Link Confirmations check box is selected Application Layer Retries The number of Retries is configurable between 0 Application Link Retries disabled and 255 Application Layer Timeout ms The Retry Timeout is configurable between 0 Application Link Retries disabled and 5 000ms Use different SEQ numbers for CONFIRM and RESPONS...

Page 207: ...ess Required This field is used to show or set the highest register address to map DNP3 points If Configure DNP3 Points option is set to Yes the Highest Register Address field is displayed to enter a Highest Register Address value Default Object 2 Binary Change Event This field is activated on both Levels 2 and 2 It s used to determine if a DNP3 point will generate events In case a DNP3 point gene...

Page 208: ...ister for exception class assignments The valid ranges are 0 to your configured highest register and must be less than or equal to Ending Register Ending Register Required Enter the Ending Register for exception class assignments The valid ranges are 0 to your configured highest register and must be greater than or equal to Starting Register Object 2 Binary Change Event This field is activated on ...

Page 209: ...igure DNP3 Points option is set to Yes the Highest Register Address field is shown to enter a Highest Register Address value Click on Store I O Mapping to save your configuration before moving to the next project Click on the Object Mapping button to return to the DNP3 Object Mapping Configuration dialog window Analog Inputs Map I O This section provides configuration of Mapping Analog Input I O s...

Page 210: ... device For example the Analog Input deadband being set to a value of 1000 will report all of the points as being class 3 data as set by the Analog Input Class parameter being set to 3 and it will generate an event every time an analog input changes by a value of 1000 or more This Analog Input deadband can be set to any value between 0 to 32767 generate an event when the value changes by 32767 Def...

Page 211: ...nding Reg Index of Exception table entries for a single Reg Index such as Reg Index 2 and 4 in above example has to be the same address Click the Add button and the following dialog window appears Starting Reg Index Required Enter the Starting Register for exception class assignments The valid ranges are 0 to your configured highest register and must be less than or equal to Ending Register Ending...

Page 212: ...able and click on the Edit button To delete an existing entry select the station in the table and click on the Delete button Click on Store I O Mapping to save your configuration before moving to the next project Click on the Object Mapping button to return to the DNP3 Object Mapping Configuration dialog window Analog Outputs Map I O Configure DNP3 Points If No is selected then no Analog Outputs a...

Page 213: ...ut class parameter being set to 3 and it will generate an event every time an analog input changes by a value of 1000 or more This Analog Input deadband can be set to any value between 0 to 32767 generate an event when the value changes by 32767 Default Class Assignment Default Object 31 Frozen Analog Input This field is activated on both Levels 2 and 2 It s used to determine if a DNP3 point will ...

Page 214: ...ting Reg Index and Ending Reg Index of Exception table entries for a single Reg Index such as Reg Index 2 and 4 in above example has to be the same address Click the Add button and the following dialog window appears Starting Reg Index Required Enter the Starting Register for exception class assignments The valid ranges are 0 to your configured highest register and must be less than or equal to En...

Page 215: ...delete an existing entry select the station in the table and click on the Delete button Click on Store I O Mapping to save your configuration before moving to the next project Click on the Object Mapping button to return to the DNP3 Object Mapping Configuration dialog window Floating Outputs Map I O Configure DNP3 Points If No is selected then no Analog Outputs are mapped as DNP3 points If set to ...

Page 216: ...s parameter being set to 3 and it will generate an event every time an analog input changes by a value of 1000 or more This Analog Input deadband can be set to any value between 0 to 32767 generate an event when the value changes by 32767 Default Class assignment Default Object 31 Frozen Analog Input This field is activated on both Levels 2 and 2 It s used to determine if a DNP3 point will generat...

Page 217: ...ill be set to Exception DeadBand and Class Assignments Note The Starting Reg Index and Ending Reg Index of Exception table entries for a single Reg Index such as Reg Index 514 and 516 in above example has to be the same address Click the Add button and the following dialog window appears Starting Reg Index Required Enter the Starting Register for exception class assignments The valid ranges are 0 ...

Page 218: ...o enter your exception into the table To edit an entry select the station in the table and click on the Edit button To delete an existing entry select the station in the table and click on the Delete button Click on Store I O Mapping to save your configuration before moving to the next project Click on the Object Mapping button to return to the DNP3 Object Mapping Configuration dialog window Long ...

Page 219: ...an event every time an analog input changes by a value of 1000 or more This Analog Input deadband can be set to any value between 0 to 32767 generate an event when the value changes to 32767 Default Class Assignment Default Object 21 Frozen Counter This field is activated on both Levels 2 and 2 It s used to determine if a DNP3 point will generate events In case a DNP3 point generates events Object...

Page 220: ...Reg Index Required Enter the Starting Register for exception class assignments The valid ranges are 0 to your configured highest register and must be less than or equal to Ending Register Ending Reg Index Required Enter the Ending Register for exception class assignments The valid ranges are 0 to your configured highest register and must be greater than or equal to Starting Register Enter DeadBand...

Page 221: ...generates events Object 2 Binary Change Events then it should be associated to a Class Class 1 Class 2 or Class 3 otherwise it should be associated to None By default all DNP3 Points don t generate events this feature should be modified by the user Click Finish to enter your exception into the table To edit an entry select the station in the table and click on the Edit button To delete an existing...

Page 222: ...nts that the user can select as a default variation 33 Frozen Analog Event Combo Box that shows the different choices for Object 33 Frozen Analog Input Change Event that the user can select as a default variation only on Level 2 40 Analog Output Status Combo Box that shows the different choices for Object 40 Analog Output that the user can select as a default variation Binary Counter Objects 20 Bi...

Page 223: ...le onto the upload box Click on the Import button to replace your existing DNP3 configuration file Download You may use this feature to download the DNP3 configuration file sxdnpdrv ini or DNP3 debug file dnp3debug log to your local drive for review analysis Edit Configuration This option will display the DNP3 configuration file in the text box for manual editing The following controls buttons are...

Page 224: ...eld are 1 through a value of defined register allocation configured for Analog Input I O type The address ranges are displayed on I O Transfer screen under Display of Modbus Default Slave Addresses based on configured local register allocation for specified I O type Note This address cannot be the same address as Analog Input Address Take care to select a unique address to be used in Analog Input ...

Page 225: ...onfiguration in the modbus xml file The Apply button will save your settings and apply them immediately To revert to the previous defaults click on the Revert button Test I O Test I O is used to verify the functionality of I O states in gateways RTUs and I O modules refer to Test I O on page 228 for detailed information 3 6 8 I O Settings RAM 9000 Models I O Control Click on the I O Control menu i...

Page 226: ...t will have software filtering applied to the input Software filtering is suitable when the input is connected to a mechanical switch or relay because it will eliminate contact bounce In this mode counting is limited to a maximum of 10 Hz Fast Response no filtering When this option is selected the discrete input will have no filtering applied to the input This option is suitable for solid state sw...

Page 227: ... time the associated input is in the ON state The output for this option is in seconds Run time min This is the on time timer feature that counts the time the associated input is in the ON state The output of this option is minutes Freq Rate Depending on the frequency rate selected the pulses are accumulated for 100ms 200ms 500ms 1 second 2 seconds 5 seconds 10 seconds 30 seconds 60 seconds or 60 ...

Page 228: ...ON or OFF The default value for this field is 100ms Channel A channel is a physical I O point that can be either analog or digital Modbus Address Configuration must be sequential Addresses are fixed sequentially from the base address Mode This option will enable disable the discrete output channel TPO Select the Enable Time Proportioned Outputs TPO Disabled Enabled in the drop down list if it is d...

Page 229: ...1 F and 0 1 F When set for 1 C or F the temperature is reported as whole degrees and if set for 0 1 C or F the reported value is the temperature multiplied by 10 and reported as an integer Channel A channel is a physical I O point that can be either analog or digital Modbus Address This field indicate the register addresses for each channel Configuration must be sequential Addresses are fixed sequ...

Page 230: ...ted range 0 20mA and 4 20mA to 0 32767 decimal No negative results will be displayed If no signal is connected the analog input value reported will be 0 decimal 4 20 mA Negative below 4mA When this option is selected the 4 20 mA range will be scaled from 0 32767 decimal A negative value will be displayed when nothing is connected to the input or the instrument is no longer supplying a current This...

Page 231: ...ll be configured to supply a DC voltage from 0 5 VDC The output voltage will be scaled to 0 32767 decimal value in the IODB Modbus Address field 0 20 mA When selected the analog output will be configured to supply a current from 4 20 mA The output voltage will be scaled to 0 32767 decimal value in the IODB Modbus Address field I O Channels Click on the I O Channels button and the dialog window bel...

Page 232: ... adjustments use the buttons on either side of the slide bar The corresponding adjustment will be displayed in the calibration configuration The calibration will not take effect until the apply button is clicked A negative adjustment negative calibration value will cause the reported channel value to go down A positive adjustment positive calibration value will cause the reported channel value to ...

Page 233: ...ve adjustment negative calibration value will cause the reported channel value to go down A positive adjustment positive calibration value will cause the reported channel value to go up The larger the calibration value the greater the difference will be between the reported channel value and the actual measured value Instructions on adding user calibration Use this method to calibrate a channel us...

Page 234: ...ibration method and calibration units to use in the calibration 3 Calibrate the offset for the selected channel by entering known signal s measured value 4 Apply the new calibration factors for the channel by clicking Apply button on the Apply Calibration screen 5 Or cancel the calibration wizard by clicking Cancel button on the Apply Calibration screen ...

Page 235: ...Software Manual 227 Status Click on the Status button and the dialog window below will provide you with your system s I O Control Status and I O Control Config Status View in Test I O Click on the Test I O button to be directed to the Test I O Access dialog window See section 3 6 5 for more information on this feature ...

Page 236: ...he test I O process easier and keep the screen less cluttered easier to look at and quickly locate your test values Scan Rate This is the time in which the screen will automatically refresh values from the internal IODB Idle Timeout When this option is enabled ON button selected the browser will stop scanning after two minutes of inactivity Add a Tag Start typing the tag name you would like to add...

Page 237: ...he system wide register display format which can be represented in two schemes Zero based or One based Zero Based is also called Native format and all register ranges would begin counting at 0 One Based addressing starts all ranges with 1 and is the system commonly used with Modbus Each register label consists of the Tag name followed by the address in two parts type and address Type and address w...

Page 238: ...Automation Tab Revised 2017 08 31 Test I O Drawing No LP0997 C 230 Sixnet Series SN RAM 6000 RAM 9000 Software Manual ...

Page 239: ... following dialog window appears Enable IP Fallback Select YES to enable the IP Fallback Enable this option if you have two paths interfaces configured with WAN Internet support An example would be primary Ethernet eth0 and secondary cellular ppp0 Note When using an Ethernet port setup as DHCP Client choose Use Remote Gateway as Default Route NO in the Ethernet port setup screen Default route cont...

Page 240: ...ield is 5 10 Allowable Test Packet Loss Required Specify the number of lost packets that are acceptable before the IP Fallback service will consider the link unavailable and switch to its secondary Note the value must be less than the number of test packets set via Test Packets to Send Ping Round Count This is the number of ping rounds that must be successful in a row to switch back from the secon...

Page 241: ...Lion RTU or router IP Transparency is a special use capability IP Transparency will take all inbound traffic to the Red Lion RTU or router and pass it transparently through to the interface specified This is useful when it is desired to pass traffic to a legacy firewall or VPN concentrator located behind the Red Lion RTU or router and not to use the firewall or VPN capabilities of the Red Lion RTU...

Page 242: ... Transparency interface will host a dummy gateway IP simulator to the IP Transparency IP or if it uses a calculated 169 254 x x IP Address Some Cisco routers might not ARP properly when this option is turned on Pros Option turned Off may allow some Cisco routers to ARP better Cons With the option turned Off the unit will black hole some IPs and they will not be reachable from the device behind Exa...

Page 243: ...low redirecting of ports to a device beyond this device the one being configured Example A device beyond the IPT device is running a WEB server on port 80 but an upstream RTU or router is blocking Port 80 Redirecting traffic to another port say 8080 allows communication with the server This would be setup as our External port 8080 redirected to an Internal Port 80 Protocol TCP When this feature is...

Page 244: ...Network Bits format Click on the Finish button to populate the Table Restrictions screen To delete an existing item select it in the table and click on the Delete button To edit an existing rule select it in the table and click on the Edit button Click on the Save button for changes to be saved without activating the interface until you reboot the unit the Apply button will save your settings and ...

Page 245: ... to connect with the Red Lion RTU or router from the RS 232 serial port Click on the Out of Band Mgt menu item and the following dialog window appears Click on the Add button to add an instance for OOB Management and the following window appears Interface Select the interface to used Note For Speed Bits Parity and Stop Bits consult the configuration of the remote device being attached this setting...

Page 246: ...options are available Disabled No TELNET options negotiation is performed Basic Common TELNET options negotiation is performed Basic drop LF Line feed characters x 0A are dropped Basic drop LF NUL Cisco Preferred LF and NUL x 00 characters are dropped Basic drop LF NUL HIGH LF NUL and any characters x 7F are dropped Basic drop CR Carriage return characters x 0D are dropped Basic drop CR NUL CR and...

Page 247: ...indow appears Enable VRRP Specify whether you want to enable the VRRP service on this device The service will be started after clicking the Apply and on each subsequent boot VRRP is designed to work with multiple systems Enable only if you intend to setup other VRRP partners Interface Specify the interface the VRRP service should use for communication Use Virtual MAC Address Specify whether you wa...

Page 248: ... redundancy to operate correctly Multiple VRRP Virtual interfaces can operate on the same subnet as long as each set of redundant partners uses a different ID Priority Specify the priority to use in VRRP negotiations Valid values are 1 255 Note If this is the Master device the priority should be sent higher than the Backup device Peer Notification Interval seconds Specify the amount of time in sec...

Page 249: ...configuration activities using this facility unless instructed to do so by Red Lion Technical Support Click on the Configure Sub System menu item and the following window appears Select Sub System To Configure Select a component sub system from the list as directed by Technical Support Your choice will load the given sub system s configuration file into the text box for editing The following contr...

Page 250: ...es menu item and the following dialog window appears Click on the Add button to add a named interface and the following pop up window appears Enter logical Interface Name Required Enter the name of the interface to be used for the logical interface For example tun0 gre4 ppp100 etc Click on the Finish button to populate the Predefined Interface Names screen Click Save to store the settings for the ...

Page 251: ...he communication ports behavior via Serial or Modem using Dialed Number Identification Service DNIS method Click on the Connect Table Configuration menu item and the following dialog window appears Generic Please use the recommended setting unless directed to change by Red Lion Technical Support The recommended setting for this field is No File Mode Please use the recommended setting unless direct...

Page 252: ... determined by previous testing with a particular model brand of connecting device The first three Direct options are the most commonly used The recommended setting for this field is Direct 1200 Bell212 At Q6 MS B212 If choosing a User Defined option enter the full AT command Below is a list of AT Commands Direct 1200 Bell212 AT Q6 MS B212 Direct 1200 V22 AT Q6 MS V22 Direct 2400 V22bis AT Q6 MS V...

Page 253: ...arious serial devices and TCP hosts The recommended setting for Visa mode Leave this setting at 8N1 Automatic 7E1 detection is used Spoof ENQ The recommended setting for this field is No Transparent Mode This will enable an ENQ packet to be sent to the serial device to initiate a transaction Up to 5 ENQ s will be sent while waiting Visa Mode Unused The Visa engine will automatically issue ENQ s as...

Page 254: ...ats in supported Message Mode The recommended setting for this field is Default Transparent Mode Unused Visa Mode This describes the format expected by the TCP host processor of Visa transactions Visa Messages from the AMT POS device will conform to STX PAYLOAD ETX LRC Default Use the current settings in the GWLNX configuration Payload Only Strip Visa header trailers Send only the Payload Payload ...

Page 255: ...sed to install or delete GWLNX configuration files that already reside on Red Lion RTU or router devices Click on the Install Configuration menu item and the following dialog window appears Install GWLNX Configuration File Select GWLNX Configuration File Click the Drag or Drop GWLNX box to select a GWLNX configuration file to upload from your local system You can also drag and drop a file into thi...

Page 256: ...ow appears Click on the upload box or drag and drop your GWLNX installation file on the file upload box to select a GWLNX zip file to upload from your local system It is recommended that you do not upload files unless directed to do so by Red Lion Technical Support IP Destinations The IP Destinations menu item is used to configure the host processor Server IP Port Addresses that GWLNX application ...

Page 257: ...WLNX uses to connect to the Host Server Port Connect Timeout 2 Specify the time in seconds to attempt a connection to this TCP Destination before declaring it unreachable After the specified time the next destination will be attempted Valid range is 2 250 seconds The recommended setting for this field is 10 seconds A value less than 10 seconds is not recommended for a wireless environment Enter Ad...

Page 258: ...ion is running Click on the CLI Status menu item and the following dialog window appears Auto Update Select Yes to enable automatic updating of the log file display the update interval can be selected using the Select Update Interval provided immediately below this control Manual updating is disabled while auto update is in effect The current filter and maximum lines to be displayed will be used B...

Page 259: ...y to restart the application by selecting the process ID from the provided drop down list The Refresh button will refresh the process ID if the Gwnlx application has been restarted Click on the GWLNX Status menu item and the following dialog window appears Select GWLNX Process ID to Restart Select the GWLNX Process ID PID that you would like to restart Click on the Restart Button This will restart...

Page 260: ...lar interface the log file data collected will count towards your total data plan usage Auto Update Select Yes to enable automatic updating of the log file display the update interval can be selected using the Select Update Interval provided immediately below this control Manual updating is disabled while auto update is in effect The current filter and maximum lines to be displayed will be used No...

Page 261: ...Classic View Sixnet Series SN RAM 6000 RAM 9000 Software Manual 253 3 7 7 Classic View Classic View is no longer actively supported or maintained as of Version 4 16 Not all features are available in Classic View that are present in the standard interface ...

Page 262: ...Advanced Tab Revised 2017 08 31 Classic View Drawing No LP0997 C 254 Sixnet Series SN RAM 6000 RAM 9000 Software Manual ...

Page 263: ...ogic or to create multiple stages of severity for alarms See Appendix B for a list of system status variables that are already established in the IODB For example events can be configured to watch these values and trigger actions based on when a reboot occurs system uptime 2 minutes when a cellular link is down wwan0 connected 0 or when data traffic measured over a month exceeds a user s threshold...

Page 264: ...ains Standard Send only the standard informational message Custom Send only the custom message as specified Tag values may be inserted as a variable by declaring the Tag Name framed in ie TAGNAME Standard Custom Append up to a 60 character custom message to the standard message The Standard message will be constructed as follows EVT Num Name Cond Custom Duration Time DS DSValue Clear Condition Whe...

Page 265: ...000000000 First Bit the first event name in the expression and so on Custom Active Message Required Enter a custom message when event goes active to be sent to the recipient If appended to a standard message the length is limited to 60 characters Click on the Finish button You will return to the Events dialog window Add Data Usage Alert Click on the Add Data Usage Alert button to define parameters...

Page 266: ...only the standard informational message Custom Send only the custom message as specified Tag values may be inserted as a variable by declaring the Tag Name framed in ie TAGNAME Standard Custom Append up to a 60 character custom message to the standard message The Standard message will be constructed as follows EVT Num Name Cond Custom Duration Time DS DSValue Clear Condition Where Num is the event...

Page 267: ...on like Evt1 Evt2 Evt3 Evt4 You could get a message that would trigger with 1000000000000 0100000000000 0011000000000 First Bit the first event name in the expression and so on Custom Active Message Required SMS Message Enter a custom message when an event goes active to be sent to the recipient s If appended to a standard message the length is limited to 60 characters Email Message Enter a custom...

Page 268: ... false this information can be combined into a equation form By combining multiple events you can create complex actions based on multiple independent conditions Tag Name This field will auto populate when the user starts to type a tag name Tag names are managed in Automation Tags Local Type The Local Type will auto populate based on the Tag Name entered These settings are pulled from the Tags dia...

Page 269: ...presented by the pipe symbol EQU Represented by the equals symbol Examples EVT1 EVT2 EVT3 EVT4 EVT1 EVT2 EVT3 EVT4 EVT5 TAG1 TAG2 TAG3 TAG4 TAG1 TAG2 TAG3 TAG4 TAG5 EVT1 MyEvent TAGNAME TAG1 TAG2 TAG3 TAG4 where EVT1 EVT2 EVT3 EVT4 EVT5 and MyEvent represents the event name and TAG1 TAG2 TAG3 TAG4 TAG5 and TAGNAME represents the I O type register address Rules only takes effect for the operand or ...

Page 270: ...AO register Calculations Perform basic math functions between registers Alarm Value Required Value at which the alarm will trigger If the Event Type is a Data Match or Data Mismatch type the alarm will trigger on this exact value In all other cases the data source must exceed this value above or below depending This must be within the limits of the data source For IODB these limits are Activation ...

Page 271: ... IODB Value Write to a known IODB register Run Command Run a Command Script that performs an Action SVM Alert Message Send an alert message to the SVM server that appears in unit history Send SMS Email Action Type Recipient Required SMS Message Enter a single phone number for the text message destination Leading access numbers and area codes may be required based on your carrier location account t...

Page 272: ... of bits will indicated the True False status of terms in the Event Expression For example if you had an expression like Evt1 Evt2 Evt3 Evt4 You could get a message that would trigger with 1000000000000 0100000000000 0011000000000 First Bit the first event name in the expression and so on Custom Active Message Required SMS Message Enter a custom message to be sent to the recipient s when the event...

Page 273: ...the event Event Condition Writes a 1 TRUE or 0 FALSE for this event condition Fixed Value Writes a constant fixed number to that entry when true Counter Increments the value in the IODB location by one Run Command Script Choose the name of the command script to be executed when the Event is True None Standard operation with no special behaviors Rotate Data Logs Rotate running data logs Create Data...

Page 274: ... View Events Log button to view the status of each event configured on your device Each line consists of 7 fields that are comma separated Each line of events include Date Time Event Number Event Name N A if no name Event Condition Status 1 0 Event Condition Status Active Inactive Event Data Source Value 0 at initial time Description optional Click Save to store the settings for the next reboot or...

Page 275: ...anty Please supply us with as many details about the problem as you can The information you supply will be written on the SO form and supplied to the repair department before your unit arrives This helps us to provide you with the best service in the fastest manner Repairs are completed as soon as possible If you need a quicker turnaround ship the unit to us by air freight We give priority service...

Page 276: ...Service and Support Information Revised 2017 08 31 Drawing No LP0997 C 268 Sixnet Series SN RAM 6000 RAM 9000 Software Manual ...

Page 277: ...ANTABILITY B WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE OR C WARRANTY AGAINST INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OF A THIRD PARTY WHETHER EXPRESS OR IMPLIED BY LAW COURSE OF DEALING COURSE OF PERFORMANCE USAGE OF TRADE OR OTHERWISE Customer shall be responsible for determining that a Product is suitable for Customer s use and that such use complies with any applicable local state or fe...

Page 278: ...Revised 2017 08 31 Licensing Warranty Drawing No LP0997 C Sixnet Series SN RAM 6000 RAM 9000 Software Manual 270 ...

Page 279: ...123456789012 unitFirmwareVersion DISPLAYSTRING Firmware Version Number e g 4 25 84 47 Cellular mdn DISPLAYSTRING Mobile Directory Number the actual phone of the device Cellular Mobile Directory Number e g xxx xxx xxxx minIMEI DISPLAYSTRING Mobile Identification Number the number given to a service plan provided by the carrier International Mobile Equipment Ind entity number used by the GSM network...

Page 280: ...omaSupported INTEGER32 Open Mobile Alliance for Device Management OMA DM designed for management of small mobile devices such as mobile phones PDAs and palm top computers The device management is intended to support the following typical uses Provisioning Configuration of the device including first time use enabling and disabling features Configuration of Device Allow changes to settings and param...

Page 281: ...Rssi INTEGER32 Current Received Signal Strength Indication Cellular Current Received Signal Strength Indication currentEcio INTEGER32 Ec Io is a ratio of good to bad energy representing the cell towers cleanness in its signal to you In other words signal to noise ratio Cellular Current EC IO svcType DISPLAYSTRING GSM which stands for Global System for Mobile communications reigns as the world s mo...

Page 282: ... DISPLAYSTRING The cellular interface name if known as presented by the operating system e g ppp0 txCount INTEGER32 Current Wireless PPP RX byte count since connection has been up updated every 30 minutes Cellular Module TX Byte Count updated every 30 mins rxCount INTEGER32 Current Wireless PPP RX byte count since connection has been up updated every 30 minutes Cellular Module RX Byte Count update...

Page 283: ...ss cardstats Cellular MM CS State gmmPsState DISPLAYSTRING Pulls CELLMODEM_GMM_PS_STATE from var log wireless cardstats Cellular GMM PS State wCdmaChannel DISPLAYSTRING Pulls CELLMODEM_WCDMA_CHANNEL from var log wireless cardstats Cellular WCDMA Channel wCdmaBand DISPLAYSTRING Pulls CELLMODEM_WCDMA_BAND from var log wireless cardstats Cellular WCDMA Band systemMode DISPLAYSTRING Pulls CELLMODEM_SY...

Page 284: ...tat Previous Month Rx for PPP0 Interface PreMonthTxPpp0 DISPLAYSTRING Vnstat Previous Month Tx for PPP0 Interface PreMonthTotalPpp0 DISPLAYSTRING Vnstat Previous Month Total Rx Tx for PPP0 Interface todayRxPpp0Kib INTEGER32 Vnstat Today Rx for PPP0 Interface in Kib todayTxPpp0Kib INTEGER32 Vnstat Today Tx for PPP0 Interface in Kib todayTotalPpp0Kib INTEGER32 Vnstat Today Total Rx Tx for PPP0 Inter...

Page 285: ...tat Today Tx for Eth0 Interface todayTotalEth0 DISPLAYSTRING Vnstat Today Total Rx Tx for Eth0 Interface yesterdayRxEth0 DISPLAYSTRING Vnstat Yesterday Rx for Eth0 Interface yesterdayTxEth0 DISPLAYSTRING Vnstat Yesterday Tx for Eth0 Interface yesterdayTotalEth0 DISPLAYSTRING Vnstat Yesterday Total Rx Tx for Eth0 Interface CurrMonthRxEth0 DISPLAYSTRING Vnstat Current Month Rx for Eth0 Interface Cur...

Page 286: ... in Kib yesterdayTotalEth1Kib INTEGER32 Vnstat Yesterday Total Rx Tx for ETH1 Interface in Kib CurrMonthRxEth1Kib INTEGER32 Vnstat Current Month Rx for ETH1 Interface in Kib CurrMonthTxEth1Kib INTEGER32 Vnstat Current Month Tx for ETH1 Interface in Kib CurrMonthTotalEth1Kib INTEGER32 Vnstat Current Month Total Rx Tx for ETH1 Interface in Kib PreMonthRxEth1Kib INTEGER32 Vnstat Previous Month Rx for...

Page 287: ...B Next 4 digits Rare 1003 Serial_Number_UINT16_C Next 4 digits Rare 1004 Serial_Number_UNIT16_D Last 4 digits Rare 1005 Serial_Number_UINT64_A UINT64 format LSW Rare 16 digit field saved as a single UNT64 Little Endian LSB First 1006 Serial_Number_UINT64_B Rare Serial Number Reg1005 Reg1006 2 16 Reg1007 2 32 Reg1008 2 48 1007 Serial_Number_UINT64_C Rare 1008 Serial_Number_UINT64_D Rare 1009 Model_...

Page 288: ...Total_B UINT32 MSW Sometimes 1077 ppp0_YesterdayRX_A UINT32 LSW Sometimes 1078 ppp0_YesterdayRX_B UINT32 MSW Sometimes 1079 ppp0_YesterdayTX_A UINT32 LSW Sometimes 1080 ppp0_YesterdayTX_B UINT32 MSW Sometimes 1081 ppp0_YesterdayTotal_A UINT32 LSW Sometimes 1082 ppp0_YesterdayTotal_B UINT32 MSW Sometimes 1083 ppp0_ThisMonthRX_A UINT32 LSW Sometimes 1084 ppp0_ThisMonthRX_B UINT32 MSW Sometimes 1085 ...

Page 289: ...ttle Endian LSB First 1202 GPS_TimeB UINT32 Quickly http www geomidpoint com latlon html 1203 GPS_Valid Fix Quality Quickly 0 Invalid V 1 Valid A 1204 GPS_LatDeg Latitude Degrees Quickly Absolute 1205 GPS_LatMin Latitude Minutes Quickly 1206 GPS_LatSec Latitude Seconds Quickly 1207 GPS_LatDir Latitude Direction Quickly 0 N 1 S 1208 GPS_LatDecDeg Latitude Signed Hours Quickly N is positive S is neg...

Page 290: ...P_b Second Octet Often 1313 Eth1_IP_c Third Octet Often 1314 Eth1_IP_d Fourth Octet Often 1315 Eth1_Subnet_a First Octet Often 1316 Eth1_Subnet_b Second Octet Often 1317 Eth1_Subnet_c Third Octet Often 1318 Eth1_Subnet_d Fourth Octet Often 1319 Eth1_DHCP DHCP Client Enabled Often 0 Static IP 1 DHCP Assigned IP 1320 Eth1_Link Link Status Often 0 No Link 1 Link detected 1321 ppp0_IP_a First Octet Of...

Page 291: ... Rapidly 1406 RAMQTT_Connect_Time_MM Connected time Minutes Rapidly 1407 RAMQTT_Connect_Time_SS Connected time Seconds Rapidly 1408 RAMQTT_Error_Code_M2X API Error Codes from M2X Often 400 Bad Request 401 Unauthorized 403 Forbidden 404 Not Found 429 Too Many Requests 500 through 504 Server Error 1409 RAMQTT_Error_Code_AWS API Error Codes from AWS Often 400 Bad Request Invalid JSON 401 Unauthorized...

Page 292: ...ten 1 Available 0 otherwise 1714 MODEL Often 3 or 4 digit chipset model 1715 RSSI units are dBm Often Absolute value shown 1716 ECIO units are dB Often Absolute value shown 1717 RSRP units are dBm Often Absolute value shown 1718 RSRQ units are dBm Often Absolute value shown 1719 CURRENTCHAN Often 1720 CellUpTime_Days Days 0 9999 Often Time in current cellular connection 1721 CellUpTime_Hours Hours...

Page 293: ...A 1xRTT 2 CDMA 1xEVDO 3 AMPS unsupported 4 GSM 5 UMTS 6 WLAN 7 GPS 8 LTE Others Unknown 1751 DATA_BEARER_E 0 or 255 Unknown See Appx B Notes Often 0 Unknown 1 CDMA 1xRTT 2 CDMA 1xEV DO Rev 0 3 GPRS 4 WCDMA 5 CDMA 1xEV DO Rev A 6 EDGE 7 HSDPA DL WCDMA UL 8 WCDMA DL HSUPA UL 9 HSDPA DL HSUPA UL 10 LTE 11 CDMA EV DO Rev A EHRPD 12 HSDPA and WCDMA 13 HSDPA and HSUPA 14 DC_HSDPA and WCDMA 15 DC_HSDAP a...

Page 294: ...1765 Reg1766 2 16 1766 SERVSYS_CELL_ID_B UINT32 MSW Often 1767 SMS_SENT Number of Send SMS Often 1768 SMS_SENT_FAIL Number of Failed Send SMS Often 1769 SMS_RECV Number of received SMS Often 1770 SINR Signal Interference Noise Ratio Often 1771 RSSI_ABS absolute units are dBm Often 1772 ECIO_ABS absolute units are dB Often 1773 RSRP_ABS absolute units are dBm Often 1774 RSRQ_ABS absolute units are ...

Search results

Summary of Contents for RAM-66 series

Reviews:

Related manuals for RAM-66 series

Brands by name

Popular brands

red lion RAM-66 series, Software Manual

Search results

Summary of Contents for RAM-66 series

Reviews:

Related manuals for RAM-66 series

Brands by name

Popular brands