background image

 

 

 

 

 

 
 

 
 

 

RAS-M156e   RAS-I1128e 

RAS- G134e   RASG12e 

 

 

Remote access server 

_________________ 

 

User’s guide 

Document reference: 9014509-03 

_________________

Содержание RAS- G134e

Страница 1: ...RAS M156e RAS I1128e RAS G134e RASG12e Remote access server _________________ User s guide Document reference 9014509 03 _________________ ...

Страница 2: ......

Страница 3: ...by ETIC TELECOMMUNICATIONS 13 Chemin du vieux chêne 38240 MEYLAN FRANCE TEL 33 4 76 04 20 00 FAX 33 4 76 04 20 01 e mail contact etictelecom com web www etictelecom com Hotline TEL 33 4 76 04 20 05 FAX 33 4 76 04 20 01 e mail hotline etictelecom com ...

Страница 4: ...INTERFACE 18 5 FANS 18 6 TELEPHONE LINE CONNECTION RAS M156E 18 7 ISDN CONNECTION RAS I1128E 19 8 GSM PRODUCTS INSTALLATION RAS G134E OR RAS G12E 19 9 GPRS SERVICE AVAILABILITY RAS G12E 20 10 RS232 RS485 INTERFACE 21 11 INPUTS OUTPUTS CONNECTION 21 12 INTERNET SUBSCRIPTIONS 23 12 1 Remote user PC subscription 23 12 2 RAS subscription 23 CONFIGURATION 1 OVERVIEW 25 2 CONFIGURATION THROUGH ETHERNET ...

Страница 5: ...iew 36 5 4 2 2 Building the firewall 37 5 4 3 VPN menu 39 5 5 Internet configuration menu 39 5 5 1 Account menu 39 5 5 2 Routing menu 40 5 5 3 Remote control menu 42 5 5 4 Dynamic IP address menu 43 5 5 4 1 Transmission of the IP address to a DynDns server 43 5 5 4 2 Transmission of the IP address inside an email 45 5 5 4 3 Transmission of the iP address of the RAS to a FTP server 46 5 6 IP RS gat...

Страница 6: ...S to the Internet 70 2 1 1 Internet callback type 1 70 2 1 2 Internet callback type 2 71 2 1 3 Internet connection as soon as the RAS is ON 71 2 1 4 Internet connection when the digital input 1 is enabled 71 2 2 Step 2 Get the RAS IP address if dynamic 72 2 2 1 Send the IP address to a DynDns server 73 2 2 2 receive the RAS IP address inside an email 73 2 2 3 Get the IP inside an Html page of a FT...

Страница 7: ......

Страница 8: ......

Страница 9: ...em Built in GSM GPRS EDGE modem 1 Ethernet 1 RS232 RS485 User list Safety callback On demand callback Fire wall DYNDNS Internet callback VPN PPTP IPSEC TSL over Internet DNAT Alarm E mail SMS Modbus master slave gateway Raw client and server gateway Telnet gateway Multicast gateway Unitelway gateway IO web server 3 inputs 1 output Html Configuration IO Viewer optional software module ...

Страница 10: ...rized users a remote access to the machines connected either to an IP LAN or to a serial RS232 RS485 interface as if his PC was directly connected to the LAN or to the RS232 On the user PC side the communication can be set either with a dial up modem or through an internet access Direct dial up communication Internet communication ...

Страница 11: ...fixed IP call back and DynDns functionalities The compatibility between the PC modem and line on one hand and the RAS on the other hand is summarized in the table below RAS reference M156e I1128e G134e G12e RAS line PSTN analog ISDN BRI GSM GSM GPRS PC modem PC line PC PSTN modem PSTN analog Yes No Yes Yes PC ISDN adapter ISDN No Yes Yes Yes PC ISDN modem adapter ISDN Yes Yes Yes Yes PC GSM modem ...

Страница 12: ...rnet DynDns and IP callback The RAS provides DynDns and IP callback functions that functions allow to connect the user remote PC to the RAS through the internet even if the RAS public IP address is dynamic Secure connection over Internet VPN The RAS is able to establish a secure connection VPN over the internet The VPN can be either PPTP for usual use but also IPSEC or TLS With the VPN a remote au...

Страница 13: ...nsmit any email or SMS coming from an SMTP client connected to the IP network Html configuration The RAS is configured with a PC and a web navigator The configuration can be achieved through the ethernet interface or remotely For safety reasons the remote configuration can be forbidden ...

Страница 14: ...156e RAS I1128e 9 to 60 VDC 125 mA at 24 VDC RAS G134e RAS G12e 9 to 30 VDC 170 mA at 24 VDC 0 60 C without condensation V90 56kb s compliant to E N CTR21 and US norms BRI ETSI EURO ISDN compliant 900 1800 1900 MHZ networks compliant 10 Mb s 1200 to 115200 kb s parity N E O Raw client and server Modbus master slave Multicast Telnet unitelway PPP PAP CHAP Callback MS CB VPN PPTP IPSEC TLS User list...

Страница 15: ...K Ethernet connection OK DATA Ethernet network activity RD Characters received from the PSTN or ISDN or GSM TD Characters transmitted to the PSTN or ISDN or GSM L or L Lit remote connection established Blinking GSM only the number of blinks indicates the quality of the reception signal VPN Lit VPN connection established Blinking VPN in progress Power led ...

Страница 16: ...tputs Pin Signal Function 1 3 V DC provided by the RAS 2 IN1 Digital input Nr 1 3 IN2 Digital input Nr 2 4 IN3 Digital input Nr 3 5 OUT1 Relay output 1 6 OUT2 Relay output 2 7 B RS485 polarity B 8 A RS485 polarity A Pin Circuit Designation RAS Terminal 1 CD 109 Carrier detect 2 RD 104 Data Reception 3 TD 103 Data Emission 4 DTR 108 Data terminal ready 5 GND 102 Ground 6 DSR 107 Data set ready 7 RT...

Страница 17: ...provided by the BOOTP or DHCP server ON ON Reserved 2 Supply voltage RAS M156e or RAS I1128e The supply voltage must be strictly lower than 60 VDC and higher than 9 VDC The consumption is 125 mA at 24 VDC RAS G134e or RAS G12e The power supply module must be powerful enough to provide the peak current which occur during a GSM communication The supply voltage must be strictly lower than 30 VDC and ...

Страница 18: ...156e is designed to be connected to an analog telephone line That line can be an analog public line PSTN subscriber line or an analog line connected to a company telephone switch PBX also called extension line If the RAS line is an extension line connected to a company PBX it must be a Direct Inward Dialing line DDI or DID in such a way that the remote user can dial the RAS number and be connected...

Страница 19: ...n signal level is good enough at the location you want to install the product that test can be done with a usual mobile phone using the same provider The signal level must be good or excellent GSM subscription The micro sim card must be inserted in the slot located at the top of the product No password must be set Antenna If the cabinet in which the RAS has to be installed is made of metal the ant...

Страница 20: ...he reception signal is fine briefly blinks 2 times The quality of the reception signal is acceptable briefly blinks 1 time The quality of the reception signal is poor is turned off No reception Is a GSM voice communication possible has the sim card been correctly inserted The Led must blink 3 times to ensure the transmission quality will be good 9 GPRS service availability RAS G12e GPRS and GPRS E...

Страница 21: ...y use the low speed GSM data service 9600 b s 10 RS232 RS485 interface The RAS provides an RS232 and an RS485 interface Asynchronous products can thus be integrated to the IP network RS232 The RS232 cable must not be longer than 10 meters RS485 If a product must be connected to the RS485 and if the distance is greater than 10 meters a 10 KOhm termination resistor will have to be connected between ...

Страница 22: ... Page 22 User s guide ref 9014509 03 Remote access server Relay output Max voltage 50 VDC max current 500 mA Inputs Not isolated Maximum differential voltage 20 VDC 3V IN1 1 2 3V IN2 3 1 3V IN3 4 1 OUT 5 6 RAS M156 ...

Страница 23: ... using PPTP must be open The IP protocol GRE 47 Generic Routing Encapsulation must be accepted Nota If setting a VPN is not necessary or not possible the link with the machines can be however established using the DNAT rules see configuration chapter in that case the communication through Internet will not be protected 12 2 RAS subscription The provider must be a national provider I e of same coun...

Страница 24: ...Installation Page 24 User s guide ref 9014509 03 Remote access server ...

Страница 25: ...nnection Assign to the PC an IP in accordance with the RAS IP address Note Coming from factory the RAS IP address is 192 168 0 128 At the first configuration assign 192 168 0 127 to the PC see appendix 1 Any case the factory IP address of the RAS can be restored by setting the micro switches SW1 ON and SW2 OFF Step 2 Connect the PC directly to the RAS ethernet interface Using the red cross wired c...

Страница 26: ... ETIC FINDER to detect the RAS over the LAN Click the product once detected The Home page of the administration server is displayed Note If the identification window is displayed but not the Home page of the administration server the Login or the password are wrong See paragraph 4 and 5 4 Case of a LAN without BOOTP or DHCP server Careful If it is the first configuration of the product it is advis...

Страница 27: ...d admin admin are the factory user name and Password Enter the telephone number assigned to the RAS line Wait for the connection message Step 3 Connect to the RAS html server Click the remote connection icon and then the detail button the RAS IP address is stated the RAS factory IP is 192 168 0 128 Launch the html navigator and enter the RAS IP address don t enter www The RAS server home page is d...

Страница 28: ...e RAS IP address you entered is wrong you can recover the factory IP address by setting the SW01 ON and SW2 OFF The 192 168 0 128 IP address will be accepted by the RAS as long as the SW01 microswitch will be left ON Wrong Login to the administration server You can recover a free access only from the LAN ...

Страница 29: ... the IP automatically assigned to the remote user User list To assign an ID and PWD to each user and define their rights Target To define the machines which will have to be protected by the firewall Date time Modem To change the initialization AT command sent to the built in modem RS232 RS485 To set the RS232 RS485 data rate and frame SNMP To define traps and SNMP server Firmware upgrade To upgrad...

Страница 30: ...blic IP address to the remote user or to the remote user PC IP to RS gateway Modbus To configure the modbus gateway Transparent To configure the raw multicast telnet gateway Unitelway To configure the unitelway gateway Diagnostic Logs To display the Logs Network status To display all the parameters of the connection in use Microswitch To display the microswitches current position Ping To ping a ma...

Страница 31: ...It is the IP address of the product over the LAN Netmask To define the IP domain default is 255 255 255 0 Default gateway The default gateway address must be entered only if other routers are connected to the LAN Remote IP Enter the base address of the pool which will be automatically assigned by the RAS to the PC of a remote user ...

Страница 32: ...played Each line of the user list comprises the user name and the filter name which is assigned to him Coming from factory the user list includes only 1 user defined as follows User name admin Password admin Display the parameters of a user Click View Modify the parameters of a user Click modify Add a user Click add a user at the bottom of the page Enter the user settings and save ...

Страница 33: ...Configuration Remote access server User s guide ref 9014509 03 Page 33 Users list User form ...

Страница 34: ... the network only if he calls from the line number assigned to the parameter phone see above Parameter callback Callback None Once the Login and password of the calling user have been checked he will be connected to the LAN Callback Allowed Once the login and password of the calling user have been checked he is allowed to enter a telephone number to which the RAS will call back as soon the current...

Страница 35: ... public network Default initialization string This parameter defines the AT initialization sequence which is transmitted by the RAS to the built in modem The default sequence must only be modified in case of difficulty and after discussion with ETIC hotline Product location Select the country in which the RAS will be installed or leave international 5 3 6 RS232 RS485 This menu allows to define the...

Страница 36: ...icroswitch SW1 ON 5 4 2 Fire wall menu 5 4 2 1 Overview One filter is a list of IP addresses and TCP ports 2 policies can be applied to use one filter Cautious policy Access to the listed machines IP address TCP port is allowed and the rest of the domain forbidden This policy is cautious because the authorized machines are precisely pointed out access to any other machine is forbidden Opened polic...

Страница 37: ...ports also called services Step 2 Build the filters Step 3 Assign a filter to each user Step 1 Complete if necessary the list of TCP ports Important nota bene The main services html ftp modbus are available from factory for that reason most of the time that step can be skipped Select the menu system and then service list The list of TCP ports is displayed Click add a service Enter the label of tha...

Страница 38: ...ed Click add a new filter Assign a name to the new filter Choose the policy All is forbidden except what we specify is the advised policy Click add a new rule to the list Select a host also called machine or IP address among the ones which have been stored and a service also called TCP port Add other rules if necessary Click OK when the filter is complete the updated filters list is displayed ...

Страница 39: ...emote user PC and the RAS over the internet For usual operation select PPTP no parameters have to be set in that case 5 5 Internet configuration menu 5 5 1 Account menu The information you have to enter her are provided by the internet provider see your subscription document Phone number Enter the telephone number the RAS has to dial to connect to the Internet provider Login and password Enter the...

Страница 40: ...t delay if no IP frames have to be routed from the LAN Nota bene The Idle time before disconnecting from Internet parameter applies only if the connection has been established by the routing process it does not apply if the connection has been established on demand of a user or remote user First packet time out parameter Once connected and after that delay the RAS will disconnect if a first IP fra...

Страница 41: ... that the remote user wishes to communicate with the PLC1 port 102 and also with the PLC2 port 502 and with the PC port 80 The following rules have to be entered Internet WAN interface LAN translation Service Machine Service 102 192 168 0 15 102 502 192 168 0 16 502 80 192 168 0 17 80 ...

Страница 42: ...the RAS to connect to the Internet Allow Internet callback If that option is selected the RAS will connect to the Internet if the user requests an internet callback The user has first to call the RAS directly through the PSTN or ISDN or GSM and ask for an Internet callback by entering the figure 0 zero in the callback pop up displayed at the end of the calling process The RAS will clear the call a...

Страница 43: ...he remote PC The RAS transmits its IP address to a well known DynDns server The RAS transmits its IP address to the remote user by email The RAS transmits its IP address to a FTP server 5 5 4 1 Transmission of the IP address to a DynDns server Principle of DynDns operations Step 1 DynDns account subscription An account has to be subscribed to DynDns org web www dyndns org It consists in a login pa...

Страница 44: ...ansmits its own IP address to the DynDns server in front of its hostname Each time he wants to connect to the RAS through the internet the remote user will enter the RAS hostname etic ras dyndns org for instance instead of the IP address which he does not know His PC will automatically go to the DynDns server pick up the RAS IP address and connects to the RAS ...

Страница 45: ... that IP address to set a VPN and connect to the to the machines of the LAN To enable that method a few parameters have to be set up Inform of the IP address by email Select that option to enable the transmission of the public address to the remote user inside an email HTML email with VPN launcher Select that option to include a VPN launcher inside the email to simplify the remote user procedure E...

Страница 46: ...g its public iP address by email to the remote user the RAS can transmit an html page to a FTP server That page will include the public IP address The user will have to go to that FTP server to get the RAS public iP address Parameter Transmit IP address to a FTP server Select that option if you want the RAS to transmit an HTML page to a FTP server Parameters FTP server IP address Login name Passwo...

Страница 47: ...u allows to configure the IP to asynchronous RS232 RS485 gateway included in the RAS The gateway can be used as well from the ethernet IP LAN as from a remote PC or both Using the gateway function does not prevent from transmitting from a remote IP machine to another machine connected to the IP LAN ...

Страница 48: ... ethernet TCP IP network and able to answer to a modbus request received from a TCP modbus client device A TCP modbus server is equivalent to a slave A TCP modbus server can answer to any client of the Ethernet TCP IP network 5 6 1 2 ETIC modbus gateway capabilities The ETIC modbus gateway can be configured either to link serial slaves to several TCP modbus clients devices connected to the etherne...

Страница 49: ...bus server gateway Modbus slaves devices are connected to the serial interface That gateway links asynchronous modbus slaves to modbus TCP clients connected to the ethernet network Each TCP client i e modbus master can send requests to any modbus slave device of the serial interface ...

Страница 50: ...ameter Set up the number of times the gateway will repeat a request to one of the modbus slaves on the serial interface before declaring a failure Inter character gap parameter Set up the maximum delay the gateway will have to wait between a received character of a modbus answer frame on the serial interface and the following character of the same frame Modbus slave address parameter If only one m...

Страница 51: ...User s guide ref 9014509 03 Page 51 TCP inactivity Timeout parameter Set the time the gateway will wait before disconnecting the TCP link if no characters are received TCP port number parameter Set the port number the gateway has to use ...

Страница 52: ...ver 5 6 1 4 Modbus client gateway A Modbus master device is connected to the serial interface of the RAS That modbus master can send requests to slaves connected to the serial interface or to 256 modbus TCP servers maximum connected to the IP network i e modbus slaves ...

Страница 53: ...le When the serial master sends a modbus request to a slave it includes the modbus address of that slave If that slave is not a serial slave but a TCP modbus server on the ethernet network the ETIC gateway needs to know what is its IP address That IP address table allows to assign an IP address to each modbus slave address To assign an IP address to each modbus slave device with which the serial m...

Страница 54: ... access server 5 6 2 1 Raw client gateway That gateway can be used if a serial master device has to send requests to one slave device also called server located on the IP network The serial device must be for example a master device in half duplex protocols ...

Страница 55: ... RS232 485 end of frame parameter Set up the delay the gateway will wait before declaring complete a string received from the asynchronous device Once declared complete the gateway will transmit the string to the IP network TCP inactivity Timeout parameter Set the time the gateway will wait before disconnecting the TCP link once characters are no longer detected TCP port number parameter Set the p...

Страница 56: ...ide ref 9014509 03 Remote access server 5 6 2 2 Raw server gateway That gateway can be used if a serial slave device has to answer requests coming from devices located on the IP network and acting like a master also called TCP client ...

Страница 57: ...string the gateway will store before transmitting it to the IP network Timeout of RS232 485 end of frame parameter Set up the delay the gateway will wait before declaring complete a string received from the asynchronous device Once declared complete the gateway will transmit the string to the IP network TCP inactivity Timeout parameter Set up the time the gateway will wait before disconnecting the...

Страница 58: ...ic by simultaneously delivering a single stream of information to thousands of corporate recipients Thus the multicast gateway must be used when a serial master device has to send requests to multiple slave devices that devices can be IP or serial devices Or when an IP master device client has to send requests to multiple slave devices that devices can be IP or serial devices ...

Страница 59: ...so those local multicast boundaries can be defined This also allows for address reuse among these smaller domains Note This address range is only for the group address or destination address of IP multicast traffic The source address for multicast datagrams is always the unicast source address To configure the multicast gateway Select the transparent and then the multicast menus Enable the multica...

Страница 60: ...r programs in order to maintain remotely a Schneider Electric PLC It can also be used to integrate an unitelway master PLC to an IP network Select the Unitelway menu select enable the unitelway transceiver Enter the XWAY address assigned to the asynchronous unitelway PLC on the IP network Select enable the IP RS transceiver Enter the Xway address of the master PLC and if they exist the Xway addres...

Страница 61: ...g frame to any IP address Digital inputs output RAS M156e RAS I1128e RAS G134e That screen displays the status of the 3 digital inputs and allows to set ON or OFF the digital output 5 8 Alarm email menu RAS M156e RAS I1128e RAS G134e Enable the alarm email option Select this option if you want an email to be sent to a user when the digital input 1 is set ON or OFF Alarm launched on event Parameter...

Страница 62: ......

Страница 63: ...uilt in PSTN modem RAS M156 or RAS M156e The PC must be installed as follows PC PSTN modem subscriber PSTN line PC PSTN modem analog line connected to a PBX PC digital modem ISDN line We call digital modem an ISDN adapter including a V34 or V90 modem PC GSM modem Case of a RAS with a built in ISDN adapter The PC must be installed as follows PC ISDN adapter ISDN line ...

Страница 64: ... GSM GPRS EDGE modem The PC must be installed as follows PC PSTN modem subscriber PSTN line PC GSM modem PC ISDN adapter ISDN line 1 2 Setting the PC remote connection A remote connection tool has to be created It will be used each time you will have to connect the remote PC to the LAN through the RAS See appendix 2 ...

Страница 65: ...k connect When the callback popup is displayed click cancel The connection popup indicates your PC is now connected to the remote site an icon appears is the PC toolbar if you click it you will get detailed information about the connection In particular RAS IP address You can get more detailed information about the connection in the diagnostic and then network status menu of the administration ser...

Страница 66: ... and calls back After a few tens of seconds once connected again the connection icon in the tool bar indicates the PC is connected 1 5 Safety callback It is possible to ask the RAS to call you back at the telephone number you have stored in the user form That function is called safety callback That function must have been previously authorized See the safety menu and then user list and then callba...

Страница 67: ...erver system configuration and then target list select the Display the web portal option The web portal screen displays the list of the machines which have been declared in the target list menu 3 links are associated to each machine The html link To go directly to the web server of the associated machine The explore link To explore the HD of the associated machine if it is a Windows machine The ft...

Страница 68: ...t to the machines of the LAN through the Internet 3 steps are necessary Step 1 Connect the RAS to the internet This operation can be carried out by several means see drawing Step 2 Get the IP address of the RAS if it is a dynamic IP address You can get the IP address by using the DynDns function or also inside an email ...

Страница 69: ... access server User s guide ref 9014509 03 Page 69 Step 3 Set a VPN between the PC and the RAS then connect the remote PC to the machines Note If a VPN cannot be set the DNAT function allows to connect to the machines ...

Страница 70: ...N Internet connection when the Connection button is pressed That options are selected in the Internet menu and then remote control they are not exclusive 2 1 1 Internet callback type 1 No local action is necessary the order can be given remotely by the user The callback allowed option must have been assigned to the user See the System menu and then User Connect to the RAS directly through the PSTN...

Страница 71: ...et connection as soon as the RAS is ON The connect to the Internet as soon as the RAS is ON option must have been selected previously see the internet menu and then Remote control Switch the RAS ON front panel ON OFF switch The RAS connects to the Internet The RAS will disconnect from the Internet as soon as the VPN will break 2 1 4 Internet connection when the digital input 1 is enabled The conne...

Страница 72: ... user through the Internet The user will then use that address to connect to the machines 4 possibilities are offered to transmit to the remote user the IP address assigned dynamically to the RAS The IP address can be displayed in the administration server Diagnostic and then Network status The IP address is automatically transmitted to a DynDns server dyndns org The IP address can be received on ...

Страница 73: ...ds its own IP address to the DYNDNS server 2 2 2 receive the RAS IP address inside an email The send the IP address inside an email option must have been selected See the internet menu and then the Dynamic IP The RAS sends the IP address inside an email as shown below Hello admin i am connected to internet IP 62 147 75 153 MAC 00 0A B4 00 01 5F SITE FORD BRAZIL DATE Mon Nov 17 09 06 14 2005 2 2 3 ...

Страница 74: ...ternet is secure Create a VPN connection PPTP or IPSEC or TSL in accordance with the option you selected in the RAS Internet and then VPN Click the VPN connection icon Enter the IP address assigned to the RAS over the Internet or the RAS host name etic ras dydns org for instance if you use dyndns in the field Destination IP address and click OK Wait until the VPN is established 2 3 2 Connecting to...

Страница 75: ...s 62 10 10 7 That IP address may be fixed or if it is dynamic the remote user got it by one of the means explained above Principle of operations As the PLC1 PLC2 and PC IP addresses are not public and as a VPN has not been set the user will have to use a translating mean called DNAT Translation rules have to be stored inside the RAS in such a way that when the remote user sends an IP frame to the ...

Страница 76: ...rver and select the Internet menu and then routing To be able to connect to the PLC1 and PLC2 and the PC he will enter the DNAT rules hereafter If the RAS receives frames from internet to it will send that frames over the LAN to IP destination TCP IP destination TCP 62 10 10 7 102 192 168 0 15 102 62 10 10 7 502 192 168 0 16 102 62 10 10 7 8081 192 168 0 17 80 ...

Страница 77: ...ng an ethernet connection Remote access server User s guide ref 9014509 03 Page 77 Modifying an Ethernet connection so as to connect a PC directly to the Ethernet interface of the RAS Windows 2000 case Not available yet ...

Страница 78: ......

Страница 79: ...APPENDIX 2 Setting a remote connection Remote access server User s guide ref 9014509 03 Page 79 Set a remote connection Windows 2000 case Not available yet ...

Страница 80: ......

Страница 81: ...APPENDIX 3 Setting a VPN connection Remote access server User s guide ref 9014509 03 Page 81 Create a VPN connection Windows 2000 case Not available yet ...

Страница 82: ......

Страница 83: ......

Страница 84: ...13 Chemin du Vieux Chêne 38240 Meylan France Tel 33 4 76 04 20 00 Fax 33 4 76 04 20 01 E mail infos etictelecom com Web www etictelecom com ...

Отзывы: