background image

57

4.2.5. Cryptography configuration

The Pro Series supports encrypted sessions for only the TCP mode including modem emulation mode

(not UDP mode).

Figure 4-10 Cryptography configuration

4.2.5.1. Secure Sockets Layer(SSL) cryptography method

By setting the cryptography method as SSL, the Pro Series can communicate with another device

supporting SSLv3 cryptography method during encrypted sessions.

SSL was developed by Netscape for use between clients and servers. SSL layers on top of any

transport protocol and can run under application protocols such as HTTP. SSL aims to be secure, fast,

and adaptable to other Web protocols. SSL provides data security for applications that communicate

across networks. SSL is a transport-layer security protocol layered between application protocols and

TCP/IP.

To initiate SSL sessions, exchange of messages called the SSL handshake is required between two

devices (Server and Client). The SSL protocol uses a combination of public-key and symmetric key

encryption. Symmetric key encryption is much faster than public-key encryption, but public-key

Summary of Contents for HelloDevice Pro PS110

Page 1: ...1 Universal Device Servers HelloDevice Pro Series PS110 410 810 User Guide Version 1 4 0 2007 05 07...

Page 2: ...and necessary safety devices should be utilized to protect against injury death or property damage due to system failure Such protection is the responsibility of the user This device is not approved f...

Page 3: ...on are corrected Descriptions for Modem Emulation mode command and IP Statistics are changed V1 1 1 2005 09 28 O J Jung Typo on AT command in modem emulation mode is corrected V1 1 2 2005 11 08 J S Ki...

Page 4: ...nsole 21 2 3 Accessing the Web Browser Management Interface 22 3 Network Configuration 25 3 1 IP Configuration 25 3 1 1 Using a Static IP Address 26 3 1 2 Using DHCP 27 3 2 SNMP Configurations 28 3 2...

Page 5: ...71 5 1 System Status 71 5 2 System Logging 71 5 3 Change Password 72 5 4 Device Name Configuration 73 5 5 Date and Time Settings 73 5 6 Factory Reset 74 5 7 Configuration management 74 5 8 Firmware U...

Page 6: ...own port numbers 96 Appendix 4 Guide to the Bios menu program 97 A 4 1 Overview 97 A 4 2 Main menu 97 A 4 3 RTC configuration menu 97 A 4 4 Hardware test menu 98 A 4 5 Firmware upgrade menu 101 Append...

Page 7: ...s such as telnet SSH serial console port or web You can easily configure and administrate the HelloDevice Pro Series with the full featured management functions of status monitor remote reset error lo...

Page 8: ...ckage Check List PS110 410 810 external box External 110V or 230V power supply PS110 PS410 or power cord PS810 Serial cable kit Quick Start Guide CD ROM including the Serial IP HelloDevice Manager and...

Page 9: ...ss filtering Modem emulation Full support for AT commands Web Telnet SSH Serial console port or HelloDevice Manager O S support Windows 98 ME NT 2000 XP System log Automatic email delivery of error lo...

Page 10: ...Session A series of interactions between two communication end points that occur during the span of a single connection Typically one end point requests a connection with another specified end point I...

Page 11: ...rotocol SMTP Simple Mail Transfer Protocol FTP File Transfer Protocol PPP Point To Point Protocol PPPoE Point To Point Protocol over Ethernet HTTP HyperText Transfer Protocol DNS Domain Name Service D...

Page 12: ...the 10 100Base Ethernet Link status Right two lamps indicate Receive and Transmit of the serial port There is a factory reset switch bottom panel of PS110 and the user can use this switch to restore f...

Page 13: ...ystem Ready Turned on if system is ready to run PS810 only LINK Turned on if connected to Ethernet network Ethernet Act Blinks whenever there is any activities such as incoming or outgoing packets thr...

Page 14: ...device Connect the provided power source to the Pro Series 2 2 1 Connecting to the network Plug one end of the Ethernet cable to the Pro Series Ethernet port The other end of the Ethernet cable shoul...

Page 15: ...cting to the device Connect the console cable to the Pro Series serial port To connect to the console port of the device the user needs to consider the type of console port provided by the device itse...

Page 16: ...le side And also please set the position of DIP switch for serial mode to RS 232 mode Configuration of the PS110 is discussed on Section 2 2 5 Figure 2 7 Connecting a equipment to the PS110 Figure 2 8...

Page 17: ...power cable to the Pro Series If the power is properly supplied the Power lamp will light up solid red Figure 2 10 Connecting the power to the PS110 Figure 2 11 Connecting the power to the PS410 Figu...

Page 18: ...or SSH client NOTE Please note that Pro Series supports only the SSH v2 so user must use the SSH client which is able to support SSH v2 Web Remote users who want to use a web browser to configure the...

Page 19: ...ial port of the user s computer 3 Run a terminal emulator program i e HyperTerminal Set the serial configuration parameters of the terminal emulation program as follows 9600 Baud rate Data bits 8 Pari...

Page 20: ...h to current menu save save current configuration apply apply current configuration help display this exit exit ________________________________________________________________________________ COMMAND...

Page 21: ...o the non volatile memory space of the Pro Series but the settings will not be stored until users enter save command on the menu All the configuration change will be effective after entering apply com...

Page 22: ...protocols The Pro Series also contains its own Web management utility To access the Pro Series Web management utility enter the IP address or resolvable hostname of the Pro Series into the web browse...

Page 23: ...ly or Cancel their actions After changing the configuration parameter values the users must select Save to save the changed parameter values to the non volatile memory To apply all changes made the us...

Page 24: ...24 Figure 2 19 The Pro Series web management screen...

Page 25: ...ay choose one of three Internet protocols in setting up the Pro Series IP address i e Static IP DHCP Dynamic Host Configuration Protocol The Pro Series is initially defaulted to STATIC mode with a sta...

Page 26: ...hased or leased from a local ISP Subnet mask A subnet represents all the network hosts in one geographic location such as a building or local area network LAN The Pro Series will use the subnet mask s...

Page 27: ...uired to assign an IP address are automatically configured on the DHCP server side and each DHCP client computer receives this information when the IP address is provided at its boot up Each time the...

Page 28: ...can be notified of significant events TRAPs query a device for more information GET and make changes to the device state SET SNMPv2 adds a GET Bulk function for retrieving tables of information and s...

Page 29: ...permitted to generate power on traps EnableAuthenTrap Indicates whether the SNMP agent process is permitted to generate authentication failure traps The value of this object overrides any configuratio...

Page 30: ...or SNMP Browser the user must set the access control configuration properly so that the Pro Series permits host access where the NMS or SNMP Browser is executed Figure 3 3 shows a screen shot of a typ...

Page 31: ...IP address change By default the Pro Series only supports Dynamic DNS service offered at Dynamic DNS Network Services LLC www dyndns org Contact Sena technical support for issues regarding other Dyna...

Page 32: ...gure 3 6 Required parameters for each SMTP configuration include SMTP server IP address SMTP user name SMTP user password Device mail address The device mail address specifies the sender s email addre...

Page 33: ...ltering feature is All services and ports are accessible from any host The meanings of each parameter in IP filtering configuration are as follows Interface Apply IP filtering rule to the incoming pac...

Page 34: ...determined to be dropped or accepted by IP filtering list For example in case there is no IP filtering list and all the services are set to be Accept all the Pro Series won t respond to any packet wh...

Page 35: ...5 255 0 Normal 192 168 0 1 192 168 255 254 192 168 0 0 255 255 0 0 Normal 192 168 1 1 192 168 1 126 192 168 1 0 255 255 255 128 Normal 192 168 1 129 192 168 1 254 192 168 1 128 255 255 255 128 Normal...

Page 36: ...to work as a server TCP or UDP the host acting as a client has to know the IP address of the Pro Series However under the dynamic IP address environment such as DHCP arbitrary IP address can be assig...

Page 37: ...or 8 Note Local ports Each 2 byte data represent current local port setting of the corresponding serial port Local ports data length of PS110 should be 2 bytes while 8 bytes and 16 bytes for PS410 an...

Page 38: ...log or port data log of the If there is a firewall between the Pro Series and the SYSLOG server there must be a rule that allows all outgoing and incoming UDP packets to travel across the Pro Series a...

Page 39: ...it decides that the connection is dead Multiplied with the TCP keep alive intervals this gives the time that a link is forced to close after a keep alive packet has been sent for the first time The de...

Page 40: ...orm the session control by using AT commands Only TCP session is supported With the port logging feature while in console server mode the data sent through the serial port is transferred to MEMORY or...

Page 41: ...nable Disable Email notification Subject of Email Email notification Recipient s Email address Enable Disable SNMP notification Subject of SNMP trap SNMP trap receiver s IP address SNMP trap community...

Page 42: ...t enable disable 2 Port title 3 Host mode 4 Cryptography 5 Serial port parameters 6 Modem configuration 7 Port logging 8 Port event handling 4 2 1 Port Enable Disable Each serial port can be enabled o...

Page 43: ...rom serial port or from TCP port If there is no connection established on a TCP port the TCP port accepts a connection request from any registered remote hosts and relays the transmitted data to the c...

Page 44: ...ata transfer between a remote host and the Pro Series is completed the state is changed to this state as a result that either of the remote host or the Pro Series sent a disconnection request After th...

Page 45: ...ial state is Listen If there are data coming from the serial port it will connect to the remote host as a TCP client and then transfer data through the TCP port If there is incoming connection request...

Page 46: ...ompliant Telnet client program Please refer to section 4 2 6 Serial port parameters for more detail information about serial parameters Usually this option is used with the RFC2217 compliant COM port...

Page 47: ...In this case Socket ID is available for identification of each device Pro Series send the Socket ID string before starting the data transmission User can define Socket ID with a specific string In TC...

Page 48: ...n Incoming TCP connection request Incoming data via serial port Sync Recvd Reject Accept Closed Data Figure 4 5 State Transition Diagram of TCP mode 4 2 3 2 UDP mode The UDP mode operation is similar...

Page 49: ...can force Pro Series accept all incoming UDP datagram regardless remote host configuration by setting Accept UDP datagram from unlisted remote host parameter as Yes If there is any incoming data from...

Page 50: ...mode Inactivity Timeout is used in maintaining recent unlisted remote host If there is no data transmission between unlisted remote host and serial port of Pro Series during Inactivity Timeout Pro Se...

Page 51: ...nd flow when ATDA command is used to connect to the Ethernet network Table 4 2 AT commands supported in the Pro Series Command Internal Operation Response 4 Verbose Code Return to command input mode N...

Page 52: ...similar to ATA The difference is that ATAS forces the connection to be SSLv3 connection The Cryptography configuration should be SSLv3 If not this command returns ERROR ATEn CR LF E E0 Disable echo E1...

Page 53: ...192 168 1 1 AT DNS Set the domain name server e g AT DNS 168 126 63 1 168 126 63 2 If success OK CR LF If failure ERROR CR LF Table 4 3 AT commands Response Code Verbose Code After ATV1 command execu...

Page 54: ...user set the phone number to host address port mapping table as shown on Figure 4 8 Pro Series will try to connect to port 6001 of 192 168 0 100 host by the atdt25737772 command in modem emulation mod...

Page 55: ...of AT command that is entered by user in this menu Same functionality to ATEn command Default data mode User can select the TCP data mode between Raw TCP mode and Telnet binary mode The Raw TCP means...

Page 56: ...dose not send data to secondary remote host until connection to primary remote host failed And the maximum possible number of primary remote host is limited up to 4 remote connections In UDP mode use...

Page 57: ...een clients and servers SSL layers on top of any transport protocol and can run under application protocols such as HTTP SSL aims to be secure fast and adaptable to other Web protocols SSL provides da...

Page 58: ...ncrypts it with the server s public key obtained from the server s certificate sent in step 2 and sends the encrypted premaster secret to the server SSL differ in the way this shared master secret is...

Page 59: ...ure 4 11 Typical SSL Handshake Process The Pro Series can act as a SSL server or as a SSL client depending on status of TCP mode If TCP connection with SSL is initiated from remote host first Pro Seri...

Page 60: ...ate key should be in PEM format 4 2 5 2 RC4 cryptography method In RC4 cryptography mode the Pro Series encrypt and decrypt all TCP streams using a Key string The Pro Series can communicate with anoth...

Page 61: ...data bits parity stop bits flow control DTR DSR behavior and inter character timeout UART type First of all the Pro Series and the serial device must agree on the serial communication type which is o...

Page 62: ...or the UART type on the UI as shown on Figure 4 15 which will hinder communications to the serial port 2 In case of PS810 UART type can be changed by software through configuration only So PS810 does...

Page 63: ...63 Stop bits Stop bits can be between 1 bit and 2 bits The factory default setting is 1 bit Figure 4 16 Serial parameter configuration PS110 410 Figure 4 17 Serial parameter configuration PS810...

Page 64: ...s established The DSR input behavior can be set to one of two types none or allow TCP UDP connection only by high If user sets the DSR input behavior as Allow TCP UDP connection only by HIGH TCP conne...

Page 65: ...behavior on the modem configuration page The Pro Series supports modem connection only when host mode is set as TCP mode Enable Disable modem By enabling this menu user can attach a modem directly to...

Page 66: ...e closed If user wants to use dial out function he should set DCD behavior as None because he must be able to access modem connected to a serial port to send dial out command to the modem first Figure...

Page 67: ...tore log data the maximum port buffer size is unlimited The user should configure the NFS server to ensure that the port logging system works properly Figure 4 19 Port logging configuration 4 2 9 Port...

Page 68: ...e usage minimization NOTE The port command in keyword response is not affected by this parameter Port command will be sent immediately when the corresponding keyword is detected Email notification Thi...

Page 69: ...iver that will receive SNMP trap notification when pre defined keyword is detected SNMP trap community This parameter sets a community that will be included in SNMP trap message when pre defined keywo...

Page 70: ...elect enable or disable for the SNMP trap notification action on keyword selected Port command Pro Series supports direct reaction to a device attached to serial port when pre defined keyword is detec...

Page 71: ...ro Series device name date and time settings and reload factory default settings in this menu group The users can also upgrade the firmware of the Pro Series using the web interface remote consoles or...

Page 72: ...umber of logs unsent reaches a pre defined number If enabled the user must set parameters to initiate the creation of a email These parameters would include the number of logs required to trigger an e...

Page 73: ...internal battery power Please note that PS110 does not have a battery for internal clock Current date and time setting will not be retained after system rebooting So it is recommended to use NTP serv...

Page 74: ...ing Factory default at location property at the import part Figure 5 8 shows the configuration management screen The following parameters should be properly set up in order to export import configurat...

Page 75: ...ort the exported configurations follow this 1 Select the location to import from 2 Select the configurations to import 3 Select the encrypting option 4 Select the file to import from the file selectio...

Page 76: ...support Zmodem transfer protocol The previous settings will be retained after the firmware upgrade To upgrade firmware via a remote console 1 Obtain the latest firmware 2 Connect the terminal emulatio...

Page 77: ...n Figure 5 12 It will also maintain the current firmware version login root Password editconf _ ________________________________________________________________________ 1 Network configuration 2 Seria...

Page 78: ...005b157 Firmware upgrade failed Now reboot Figure 5 12 Firmware upgrade failure message 5 9 User administration User can enable port authentication see section 4 2 3 1 TCP mode then user should enter...

Page 79: ...n this menu To set the password for the port user or to change the configuration of each port user click the corresponding number associated with the port user on port user administration page then po...

Page 80: ...tics display statistical usage of the link layer lo eth and serial ports IP ICMP TCP and UDP statistics display usages of four primary components in the TCP IP protocol suite 6 1 Network Interfaces St...

Page 81: ...rticular computer InReceives Shows the number of datagrams received InHdrErrors Shows the number of datagrams received that have header errors Datagrams Received Header Errors is the number of input d...

Page 82: ...r space This counter would include datagrams counted in Datagrams Forwarded if any such packets met this discretionary discard criterion OutNoRoutes Specifies the number of datagrams for which no rout...

Page 83: ...ns and descriptions of each parameter are described below InMsgs OutMsgs Specifies the number of messages received or sent InErrors OutErrors Specifies the number of errors received or sent InDestUnre...

Page 84: ...cho requests received or sent An echo request causes the receiving computer to send an echo reply message back to the originating computer NEchoReps OutEchoReps Specifies the number of echo replies re...

Page 85: ...using a TCP protocol Definitions and descriptions of each parameter are described below RtoAlgorithm Specifies the retransmission time out RTO algorithm in use The Retransmission Algorithm can have o...

Page 86: ...ssive opens In a passive open the server is listening for a connection request from a client AttemptFails Specifies the number of failed connection attempts EstabResets Specifies the number of establi...

Page 87: ...f datagrams received NoPorts Specifies the number of received datagrams that were discarded because the specified port was invalid InErrors Specifies the number of erroneous datagrams that were receiv...

Page 88: ...he changes in the configuration file will be committed to the internal flash memory area of the Pro Series This will result in the changes being kept after the reboot sequence Invalid configuration ch...

Page 89: ...l port 2 Run a PC terminal emulation program 3 Configure the PC serial port to 9600 8 N 1 No flow control 4 Press enter 5 Login with the Pro Series root account Telnet console 1 telnet Pro_Series_ip_a...

Page 90: ...ge 3 Rx White with green 4 NC Blue 5 NC White with blue 6 Rx Green 7 NC White with brown 8 NC Brown A 1 2 Console and Serial port pin outs The pin assignment of the PS110 PS410 PS810 DB9 connector is...

Page 91: ...ion of each DIP switch as shown below But please note that the power of the Pro Series should be turned off before changing the serial communication type Figure A 3 Serial communication type and DIP s...

Page 92: ...TS 8 DTR 4 DSR 6 GND 5 Rx Tx CTS RTS DSR DTR GND HelloDevice Serial Device RS232 Figure A 6 RS232 wiring diagram A 1 4 2 RS422 485 Serial Wiring Diagram Data means that coupling of Tx 1 pin and Rx 2 p...

Page 93: ...93 Termination Resistor at Tx side can be omitted if the signal status is good Figure A 8 RS422 wiring diagram...

Page 94: ...le Port 1 serial 1 hostmode mode 0 serial 1 hostmode port 7001 serial 1 hostmode userauth 0 serial 1 hostmode telnet 0 serial 1 hostmode max_connection 8 serial 1 hostmode cyclic_time 0 serial 1 hostm...

Page 95: ...95 network snmp nms 4 0 0 0 0 public 0 network snmp trap 1 0 0 0 0 public 0 network snmp trap 2 0 0 0 0 public 0 network snmp trap 3 0 0 0 0 public 0 network snmp trap 4 0 0 0 0 public 0...

Page 96: ...ms executed by privileged users Table A 3 shows some of the well known port numbers For more details please visit the IANA website http www iana org assignments port numbers Table A 3 Well known port...

Page 97: ...yed only when the Data Console switch is located at the Console side A 4 2 Main menu After entering the bios menu program the user will see following main menu page BIOS v1 0 0 c 1998 2005 Sena Techno...

Page 98: ...to the remote host server IP address and UART test are also performed once If the user selects Looping without External test in Auto test the auto test is performed repeatedly until the user presses t...

Page 99: ...0 Test Mode Looping With External test in Auto Test 1 Auto test 2 DRAM test 3 FLASH test 4 EEPROM test 5 Ethernet test 6 UART Mode test ESC Back ENTER Refresh 0 Hardware Test Select menu 0 Test Mode O...

Page 100: ...re auto detect and auto test SUMMARY 1 DRAM Test PASSED 2 FLASH Test PASSED 3 EEPROM Test PASSED 4 ETHERNET Test PASSED 5 UART Test Summary Port Number Port Mode Data Communication Test RTS CTS DTR DS...

Page 101: ...he unit is 192 168 161 5 For firmware upgrade a firmware file configured as Firmware File Name on the server configured as Server s IP address must exist Firmware upgrade Select menu 1 Protocol TFTP 2...

Page 102: ...ade start Cramfs Block Write to Flash done Cramfs upgrade complete Configuration upgrade start Configuration Block Write to Flash done Configuration upgrade complete Firmware upgrade is finished succe...

Page 103: ...required Raw TCP connection Disable TCP Enabled None No login required Telnet Disable TCP Disabled Enabled No login required Raw TCP connection SSLv3 or TLSv1 SSLv3 only TCP Enabled Enabled No login...

Page 104: ...104 Figure A 16 Host mode configuration Step 2 Set Cryptography configuration of serial port 1 of Pro Series as follows SSL enable Enable Figure A 17 Cryptography configuration...

Page 105: ...by pressing Select Ports button Figure A 18 Select Ports on Serial IP Control Panel Step 4 Enter IP address of Server IP address of Pro Series and Port number port number of serial port 1 correctly An...

Page 106: ...Serial IP Control Panel Step 5 Open the terminal emulation program and select the corresponding COM port Then user can use the serial port of Pro series using his local terminal emulation program as i...

Page 107: ...07 Figure A 20 Connect to serial port of Pro series via Serial IP Step 6 User can monitor or trace the connection status using Serial IP Port Monitor or Trace window Figure A 21 Serial IP Trace Window...

Page 108: ...international distributor it was purchased through and providing proof of purchase or receipt date Customer agrees to insure the Product or assume the risk of loss or damage in transit to prepay ship...

Page 109: ...tuations high voltage discharges Improper grounding incorrect cabling Misuse negligence by the customer or any other third party Failure to install or operate the product s in accordance to their SENA...

Reviews: