background image

14    S&C Instruction Sheet 1074-530

SpeedNet Security Administration

Figure 20. New keyset number available on the Install Keyset list.

Deleting a Keyset

To delete a keyset, open the 

Key Generation

 tab and highlight the keyset. Then, click 

the 

Delete

 button. See Figure 21.

Figure 21. Key Generation window.

The confirmation dialog will open. See Figure 22. Click the 

Yes

 button to delete the 

keyset.

Figure 22. Delete keyset(s) confirmation dialog box. 

Summary of Contents for SpeedNet ME

Page 1: ...ing a Security File 15 Saving a Security Association Database 17 Creating Another Security Association Database 18 Opening a Security Association Database 18 Network Configuration 20 SpeedNet Client T...

Page 2: ...to be a substitute for adequate training and experience in safety procedures for this type of equipment Read this Instruction Sheet NOTICE Read this instruction sheet thoroughly and carefully before...

Page 3: ...e equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the...

Page 4: ...ollowed NOTICE NOTICE identifies important procedures or requirements that can result in product or property damage if instructions are not followed Following Safety Instructions If you do not underst...

Page 5: ...ODV routing system that works dynamically to maintain message routing It generates fewer transmissions and conserves network capacity In the case of SpeedNet ME Radios AODV is limited to discovering a...

Page 6: ...ress of 192 168 202 1 The wireless interface of the SpeedNet ME Radio from the Repeater Node is assigned an address of 192 168 202 2 The wireless interface of the SpeedNet ME Radio from End Point Node...

Page 7: ...generates security keys updates user access and radio revocation lists and saves updated security profiles within a Security Association Database SAD The KeyGen Utility also allows generation of a co...

Page 8: ...nation means the Security Association Database becomes unusable This may imply that a new database would need to be created and all radios reset to factory settings and re programmed with security fil...

Page 9: ...0 9 Use the Tab key on your keyboard to proceed to the next field STEP 3 Enter a password that is 8 to 16 characters in length Valid case sensitive characters are a z A Z and 0 9 Use the Tab key on yo...

Page 10: ...9 KeyGen User Management window Delete button The User Management dialog box will open See Figure 10 Figure 10 User Management dialog box Click the Yes button to delete the selected user from the user...

Page 11: ...name and password Adding a MAC Address to the Revocation List The Mac Revocation Management window is used to update the revocation list for the Media Access Control MAC address filter See Figure 14 T...

Page 12: ...ment window Then click the Delete button See Figure 15 Figure 15 Mac Revocation Management window The Mac Management dialog box will be displayed See Figure 16 Figure 16 Mac Management dialog box Clic...

Page 13: ...s keysets randomly without user input the user does not provide seeds or other data The Key Generation window is used to update keysets For a network or security configuration to be applied to the rad...

Page 14: ...l Keyset list Deleting a Keyset To delete a keyset open the Key Generation tab and highlight the keyset Then click the Delete button See Figure 21 Figure 21 Key Generation window The confirmation dial...

Page 15: ...use SNMPv3 which is transported over UDP IP so logins will not work over wireless links in the case of mismatched keysets on radios with encryption enabled Generating a Security File STEP 1 Select up...

Page 16: ...eyset tags allowed is 63 If you attempt to add another keyset after 63 keyset tags have been entered the dialog box shown in Figure 27 will be displayed requesting permission to overwrite an existing...

Page 17: ...EP 1 OpentheFilemenuintheupper leftcorneroftheSpeedNetKeyGenUtilitywindow and scroll down and select the Save button See Figure 29 Figure 29 SpeedNet KeyGen Utility window save SAD STEP 2 The Save Sec...

Page 18: ...w SAD A new SAD window will open with all entries cleared Opening a Security Association Database Follow these steps to open a Security Association Database STEP 1 Open the File menu in the upper left...

Page 19: ...ible and will be lost There is no back door or other key recovery method To update secured radios without a valid SAD you will first need to return them to their factory default configuration Once the...

Page 20: ...restore the current working network configuration to factory default values When opening a network configuration file the window shown in Figure 37 will open and list all currently installed keysets...

Page 21: ...ration functions parallel the corresponding tabs in the SpeedNet Client Tool but instead of applying to the radio the client is connected to the settings developed in the network configuration are sav...

Page 22: ...old and Transmit Power settings function the same as in the corresponding SpeedNet Client window as described in the Interfaces Window Wireless Tab section starting on page 30 There is no Apply button...

Page 23: ...tings These settings are described in the same Interfaces Window Serial Mode Tab section on page 32 There is no Apply button on this window because application to a radio is deferred until uploaded us...

Page 24: ...s deferred until uploaded using the SpeedNet Client tool Figure 44 Network Configuration of AODV Settings Figure 44 shows configuration of the AODV Settings These settings correspond to those in the S...

Page 25: ...nd to those in the SpeedNet Client Tool described in the IP Routing Window Routes Tab section on page 38 Figure 46 Network Configuration of Address Resolution Protocol Figure 46 shows the network conf...

Page 26: ...nfiguration Figure 47 Network Configuration of System Information Figure 47 shows the network configuration of System information These settings cor respond to those in the SpeedNet Client Tool in the...

Page 27: ...efaultis192 168 200 1 Whentheradiomeshhasbeenconfigured you can also log in using the wireless IP address When logging into a SpeedNet ME Radio for the first time after a factory reset the user name w...

Page 28: ...meout The SNMP protocol automatically resends control data after a period of time The SNMP Timeout control is used to adjust the timeout value In the case of a busy network and or when traversing many...

Page 29: ...er transactions Thus the radio can have several client tools from different PCs logged in at the same time Also the radio can undergo changes such as a reboot behind the client tool session with no im...

Page 30: ...in the client tool Some of the following parameters can be configured MAC ID This read only field displays the unique Media Access Control MAC address of the SpeedNet ME Radio wireless interface The w...

Page 31: ...dB above the average signal in a particular frequency channel that will cause the Analog Interference Detection function to start functioning to skip that channel in the hopping sequence The default...

Page 32: ...cerns DNP The Distributed Network Protocol DNP mode is used for transferring DNP data between the SpeedNet ME Radio serial port and other Ethernet devices Note The Repeater SpeedGate Mode setting is n...

Page 33: ...ng a DNP table entry this value is the IP address SCADA Address When creating a DNP table entry this value is the SCADA address The valid range of SCADA addresses is 0 65536 Add After entering an IP a...

Page 34: ...econdary SCADA master To create the table entry for the primary SCADA master enter 192 168 200 20 into the IP Address field Enter 25 into the SCADA Address field To create the table entry for the seco...

Page 35: ...ODV function to use the feature Selecting the AODV setting is recom mended for ease of configuration robustness to radios going down and ease of add ing radios to the mesh The remaining configuration...

Page 36: ...Setting the Net Diameter too high is a more critical issue in high density connected mesh deployments than in linear deployments In mesh deploy ments the overhead incurred by the Net Diameter can inc...

Page 37: ...referencesettingis enabled and a radio experiences an inability to deliver messages through a given neighboring node SpeedNet Radios will attempt to avoid that neighbor if alternate neighbors are avai...

Page 38: ...elete a route from the route table first select the route Then click the Delete button to remove the route from the route table Adding Static Routes Clicking the Add Route button will add an Add Route...

Page 39: ...ell as to add or delete ARP table entries The following parameters can be configured Address Resolution Protocol Table The Address Resolution Protocol table pro vides a list of current ARP entries An...

Page 40: ...ios that qualify as valid neighbors but they are neighbors that you do not want to use as next hop links for that particular radio address One reason to exclude a neighbor is that it may have a perman...

Page 41: ...on or with a keyset loaded into that radio You will be prompted to login to the SpeedNet Client Tool after the network configuration has been applied Note that after a radio is reset to the factory se...

Page 42: ...iguration window The MAC Filter window shown in Figure 64 can be used to view the list of MAC addresses that have been added to the MAC Address Revocation list using the SpeedNet KeyGen Utility There...

Page 43: ...was rebooted SpeedNet Radio ID This field can be used by administrators to assign a descriptive name to the SpeedNet ME Radio The SpeedNet ME Radio ID must consist of ASCII values but cannot contain...

Page 44: ...dNet ME Radio will prompt for reboot at the conclusion of the upgrade Power should not be cycled while a radio is upgrading firmware You will need to log in to the radio again once the post upgrade re...

Page 45: ...he AODV neighbor list Users can copy and paste the result into another tool e g Windows Notepad to create a re cord of radio neighbors which can greatly aid in determining the connectivity in the Spee...

Page 46: ...ve errors Received frames dropped This is the total number of frames received by the SpeedNet ME Radio s Ethernet interface that were discarded Unknown protocol received This is the total number of fr...

Page 47: ...reduction in the packet transmission rate Redirect messages sent This is the total number of redirect messages sent A redirect is sent when an alternate route for the datagram is selected Echo reques...

Page 48: ...ation layer and uses ports to facilitate application to application communication Datagrams received This is the total number of UDP datagrams successfully re ceived Datagrams destined for unknown por...

Page 49: ...d destination Datagrams with unknown protocols This is the total number of data packets re ceived with protocols not recognized by the radio Input datagrams discarded This is the total number of IP da...

Page 50: ...successfully received by the Speed Net ME Radio wireless interface Packets received This is the total number of packets successfully received by the SpeedNet ME Radio wireless interface Received packe...

Page 51: ...a SpeedNet ME Radios whose Hello message has been received by the local SpeedNet ME Radio Link This provides a measurement of the local SpeedNet ME Radio signal strength as measured by the remote Spe...

Page 52: ...trength Indicator tab lists Speed Net ME Radios based on their unique MAC address Unlike the AODV Neighbor List the RSSI tab does not require an exchange of Hello beacons MAC Address This field displa...

Reviews: