Phoenix Contact 2702772 Скачать руководство пользователя страница 25

Страница: 25 / 90

Configuration and startup

3785_en_B

PHOENIX CONTACT

4.6.2

Security

The GW EIP/ASCII... includes several security options for data encryption and device

authentication. It is possible to configure the GW EIP/ASCII.... so that only authorized client

applications can connect using SSL/TLS. For secure operation, the GW EIP/ASCII... uses

a set of four keys and certificates. These keys and certificates are configurable.

To configure security settings:

From the “LAN Settings” page, click the “Security” tab.

Figure 4-5

“LAN Settings/Security” page

Configure the GW EIP/ASCII... so that only authorized client applications can connect

using SSL/TLS.

For secure operation, the GW EIP/ASCII... uses a set of four keys and certificates.

These keys and certificates may be configured.

RSA Key pair used by SSL and SSH servers:

This is a private/public key pair that is

used for two purposes:

–

It is used by some cipher suites to encrypt the SSL/TLS handshaking messages.

Possession of the private portion of this key pair allows an eavesdropper to decrypt

traffic on SSL/TLS connections that use RSA encryption during handshaking.

–

It is used to sign the RSA server certificate in order to verify that the

GW EIP/ASCII... is authorized to use the RSA server identity certificate.

If the RSA server key is to be replaced, a corresponding RSA identity certificate must

also be generated and uploaded, or clients cannot verify the identity certificate.

RSA Server Certificate used by SSL servers

: This is the RSA identity certificate that

the GW EIP/ASCII... uses during SSL/TLS handshaking to identify itself. It is used most

frequently by SSL server code in the GW EIP/ASCII... when clients open connections

to the GW EIP/ASCII... secure web server or other secure TCP ports. If a

GW EIP/ASCII... serial port configuration is set up to open (as a client) a TCP

connection to another server device, the GW EIP/ASCII... also uses this certificate to

identify itself as an SSL client if requested by the server.

In order to function properly, this certificate must be signed using the RSA server key.

This means that the RSA server certificate and RSA server key must be replaced as a

pair.

Possession of the private portion of this key pair allows others to pose as the

GW EIP/ASCII....

Содержание 2702772

Страница 1: ...User manual UM EN GW EIP ASCII Protocol converter for ASCII to EtherNet IP...

Страница 2: ...phoenixcontact com 3785_en_B Protocol converter for ASCII to EtherNet IP Designation Order No GW EIP ASCII 1E 1DB9 GW EIP ASCII 1E 2DB9 GW EIP ASCII 2E 2DB9 GW EIP ASCII 2E 4DB9 2702772 2702773 270277...

Страница 3: ...3 2 Mounting 13 3 3 Data interfaces 15 3 3 1 Connecting the V 24 RS 232 cable 15 3 3 2 Connecting the RS 422 cable 16 3 3 3 Connecting the RS 485 cable 16 3 3 4 Connecting the Ethernet cable 17 3 4 C...

Страница 4: ...finition object 74hex 55 5 4 Informational objects 57 5 4 1 Identity object 01hex 1 instance 57 5 4 2 Status word 58 5 4 3 Message router object 02hex 59 5 4 4 Connection manager object 06hex 60 5 4 5...

Страница 5: ...7 1 Resetting the device 79 7 1 1 Hardware reset 79 7 1 2 Software reset 79 7 2 LEDs 79 8 EDS files 81 8 1 Add the GW EIP ASCII to RSLinx 81 8 2 Add the EDS file to RSLinx 81 8 3 Troubleshooting RSLi...

Страница 6: ...GW EIP ASCII 4 PHOENIX CONTACT 3785_en_B...

Страница 7: ...less system is a Class A item of equipment and may cause radio interference in residential areas In this case the operator may be required to implement appropriate measures and to pay the costs incurr...

Страница 8: ...or non hazardous locations only This equipment is an open type device meant to be installed in an enclosure suitable for the environment that is only accessible with the use of a tool 1 4 2 Installati...

Страница 9: ...tric Select Modicon series and LMC058 Panasonic FP7 Mitsubishi select Q series AutomationDirect Productivity 1000 2000 3000 Do more H2 DM1E B R X20 system CodeSys Soft PLCs Many other PLCs SCADA syste...

Страница 10: ...et port and one RS 232 422 485 serial port with a D SUB 9 connector Figure 2 1 GW EIP ASCII 1E 1DB9 Table 2 2 GW EIP ASCII 1E 1DB9 structure Item Description 1 Power connector 2 P1 D SUB 9 connector 3...

Страница 11: ...32 422 485 serial ports with D SUB 9 connectors Figure 2 2 GW EIP ASCII 1E 2DB9 Table 2 3 GW EIP ASCII 1E 2DB9 structure Item Description 1 Power connector 2 P1 D SUB 9 connector 3 Ethernet port RJ45...

Страница 12: ...h D SUB 9 connectors Figure 2 3 GW EIP ASCII 2E 2DB9 Table 2 4 GW EIP ASCII 2E 2DB9 structure Item Description 1 Power connector 2 P1 D SUB 9 connector 3 Ethernet link status LED 4 E2 Ethernet port RJ...

Страница 13: ...2 4 GW EIP ASCII 2E 4DB9 Table 2 5 GW EIP ASCII 2E 4DB9 structure Item Description 1 Power connector 2 P3 D SUB 9 connector 3 Ethernet link status LED 4 E2 Ethernet port RJ45 5 Ethernet activity stat...

Страница 14: ...GW EIP ASCII 12 PHOENIX CONTACT 3785_en_B...

Страница 15: ...the device yourself but replace it with an equivalent device Repairs may be carried out only by the manufacturer The manufacturer is not liable for any damage caused by violation of the prescribed re...

Страница 16: ...e 1 Use a suitable screwdriver to release the locking mechanism A on the snap on foot of the device 2 Hold on to the device by the housing cover and carefully tilt it upward B 3 Remove the device from...

Страница 17: ...a PC Connect the GW EIP ASCII to the V 24 RS 232 device to be connected for example a PC by way of the PSM KA 9SUB 9 BB 2 METER V 24 RS 232 cable Order No 2799474 The cable is an interface cable with...

Страница 18: ...In RS 485 mode an RS 485 network with several I O devices can be created Use a twisted pair common shielded bus cable to connect the I O devices Connect the individual conductors of the data cable to...

Страница 19: ...d of the chain so it is recommended to overload and test for performance in the environment The application may also limit the total number of ports that may be installed Some basic guidelines are lis...

Страница 20: ...nection CAUTION Incorrect connection may result in damage to equipment and or serious personal injury Only qualified personnel may connect the power start up and operate this device According to the s...

Страница 21: ...lf the current parameters and the operating state are clearly displayed 4 3 Login To log in 1 Set the IP address of the connected PC to the subnetwork of the GW EIP ASCII for example IP 192 168 254 10...

Страница 22: ...2 Home screen Advanced settings can be accessed through the menu at the top of the screen The Home screen can be accessed at any time by clicking the Home button in the upper left corner of the web ba...

Страница 23: ...the listed information 3 If desired change the listed information The Device Identification group provides fields for entering descriptive information about individual devices Device Name Enter a nam...

Страница 24: ...P Address page 2 Select the method for assigning the LAN IP address If a DHCP server assigns an IP address click the Automatic address assignment DHCP button If using static IP addresses click the Man...

Страница 25: ...er to decrypt traffic on SSL TLS connections that use RSA encryption during handshaking It is used to sign the RSA server certificate in order to verify that the GW EIP ASCII is authorized to use the...

Страница 26: ...w Class 1 multicast addresses are allocated When Automatic default is selected the GW EIP ASCII gateway uses the standard automatic multicast address mechanism When User Defined is selected the GW EIP...

Страница 27: ...ial settings 1 Click the Serial Settings tab to configure the serial port s The Overview page provides a quick summary of the current configuration of the serial port s 2 Click the appropriate configu...

Страница 28: ...ce Shipping Label for example for easy identification Port mode Select the port operating mode Available settings are RS 232 RS 422 RS 485 2 wire RS 485 4 wire M and RS 485 4 wire S where M indicates...

Страница 29: ...the start of the next data packet If one byte is selected the GW EIP ASCII starts to collect data when the STX byte is detected If the first byte is not the STX byte it discards the byte The GW EIP A...

Страница 30: ...byte is selected the GW EIP ASCII adds one byte the beginning of the packet If two bytes is selected the GW EIP ASCII appends two bytes Byte 1 Specifies the character that represents the first STX by...

Страница 31: ...include Class 1 or full object support Only Write to File and communication using PCCC MSG instructions is provided Transfer mode to PLC Specifies how the Raw ASCII data will be transferred via Ether...

Страница 32: ...he PLC and the GW EIP ASCII Maximum RX packet size When Write to Tag File or Polling in the Transfer mode to PLC field are selected this setting specifies the maximum acceptable size of a received ser...

Страница 33: ...isabled all transmit messages are transmitted regardless if the sequence number has been incremented or not Disable Rx Queue to PLC Select this option to only receive the last received data packet If...

Страница 34: ...the configuration related to each Ethernet TCP IP connection of the GW EIP ASCII device Figure 4 13 Socket Settings Overview page 2 To edit the configuration of an Ethernet TCP IP connection click th...

Страница 35: ...ation Enable This must be checked to use the port as a socket Listen Check the Listen box so that the GW EIP ASCII listens for incoming TCP IP socket connections on the port number specified in the On...

Страница 36: ...tes The GW EIP ASCII continues to discard the bytes until it finds the two STX bytes Byte 1 Specifies the character that represents the first STX byte The GW EIP ASCII looks for this character in the...

Страница 37: ...ne byte or two bytes marking the end of the serial packet The length indicates the number of ETX bytes if none is selected this function is disabled If one byte is selected one ETX byte is appended to...

Страница 38: ...GW EIP ASCII do not overflow The default is Class 1 Transfer mode from PLC Specifies the EtherNet IP transfer mode from the PLC for this port When Write Msg is selected the PLC writes the data to the...

Страница 39: ...ence number When a duplicate sequence number is received and the Transfer mode from PLC field is set to Write Msg the message is rejected and the Duplicate Transmit Sequence Error Count counter increm...

Страница 40: ...38 PHOENIX CONTACT 3785_en_B 4 8 2 1 Class 1 overview The Class 1 Overview pages provide an array of highly informative Class 1 interface information to aid when programming a PLC Figure 4 17 Class 1...

Страница 41: ...displays the number of bytes transmitted from the serial port TX packet count This displays the number of serial packets transmitted from the serial port RX byte count This displays the number of byt...

Страница 42: ...II socket port RX packet count The number of packets received by the GW EIP ASCII socket port To PLC dropped packet count Displays the number of dropped packets that were intended for the PLC To PLC t...

Страница 43: ...nnections established Displays the total number of established connections Connections timed out Displays the number of connections that have closed due to a time out Connections closed Displays the n...

Страница 44: ...class errors Displays the number of unsupported CIP request instance errors These errors occur when a message with an invalid class is received by the GW EIP ASCII Unsupported CIP instance errors Dis...

Страница 45: ...message and up to 128 messages are logged This helps with debugging serial connectivity problems displaying the proper start and end of transmission bytes and diagnosing device problems Click the Res...

Страница 46: ...ick the Reset Log button at any time to clear the log Figure 4 21 Ethernet Logs page The format is as follows Pkt n ddd hh mm ss mmm Rx Tx data ddd days since last system restart hh hours since last s...

Страница 47: ...ange the password used to access the web server Figure 4 22 Password page The GW EIP ASCII has administrator level passwords The administrator level user may make changes to the configuration The defa...

Страница 48: ...return the GW EIP ASCII to the original factory defaults including the IP address Figure 4 23 Restore Defaults page 2 Check the Check the box to confirm box 3 Click the Apply Changes button Note that...

Страница 49: ...iles page 2 Click the Save Logfile button to save the log as a text file for future use or review the log in the web browser The log displays information about the device such as when a PC created or...

Страница 50: ...sers from applying the system configuration file to an unapproved node to gain access to the network 3 Click the Save Configuration button to open a dialog box where the file name and storage location...

Страница 51: ...ick the Browse button and navigate to the file in the Browse dialog box 4 Highlight the file to select it and then click the Close button 5 Click the Apply Changes button to install the firmware NOTE...

Страница 52: ...GW EIP ASCII 50 PHOENIX CONTACT 3785_en_B...

Страница 53: ...f the actual receive data message All unused bytes in a message returned to the PLC are filled with zeros The GW EIP ASCII supports serial packets of up 1518 bytes and socket packets up to 2048 bytes...

Страница 54: ...eived from the PLC may contain extra unused data All unused bytes in a message are ignored A Get command returns the last successfully transmitted serial socket packet 5 2 EtherNet IP interface profil...

Страница 55: ...a array Array of USINT 0 255 3 Receive GW EIP ASCII to PLC produced data sequence number Normally sent to the PLC from the GW EIP ASCII in data transfer UINT 0 65535 FFFFhex Set Get 5 Transmit PLC to...

Страница 56: ...serial packets over 440 bytes the GW EIP ASCII places the data into a sequence of tags These tags must meet the following criteria Must be of type SINT The entire sequence must be large enough to cont...

Страница 57: ...EIP ASCII Get 3 Num instances UINT Number of ports on the GW EIP ASCII Get Table 5 8 Socket port data transfer object instance attributes Attribute ID Name Data type Data value Access rule 1 Transmit...

Страница 58: ...so have the same sequence number Socket packets up to 2048 bytes may be received while operating with the Write To Tag field set to Transfer to PLC For serial packets over 440 bytes the GW EIP ASCII p...

Страница 59: ...ss rule 1 Revision UINT 1 Get 2 Max class UINT 1 Get 3 Max instance UINT 1 Get 4 Maximum number class attributes UINT 7 Get 5 Maximum number instance attributes UINT 7 Get Table 5 12 Identity object i...

Страница 60: ...n 0000 Indicates the system is not operational It may be in any of the following states system startup configuration in process idle or critical major fault 8 0 No recoverable minor fault No error his...

Страница 61: ...ue Access rule 1 Revision UINT 1 Get 2 Max class UINT 1 Get 3 Max instance UINT 1 Get 4 Optional attribute list UINT 2 Get 5 Option service list UINT 1 Get 6 Maximum number class attributes UINT 7 Get...

Страница 62: ...x Attribute ID Name Data type Data value Access rule 1 Open requests UINT 0 0xFFFFFFFF Set Get 2 Open format rejects UINT 0 0xFFFFFFFF Set Get 3 Open resource rejects UINT 0 0xFFFFFFFF Set Get 4 Open...

Страница 63: ...hex Service code Implemented in class Implemented in instance Service name Table 5 21 Port object class attributes F4hex 1 instance Attribute ID Name Data type Data value Access rule 1 Revision UINT 2...

Страница 64: ...name Array of UINT Backplane Get 7 Node address USINT 2 10hex 0hex Get 10 Port routing capabilities UDINT 17hex Bit 0 Routing of incoming Unconnected Messaging supported Bit 1 Routing of outgoing Unco...

Страница 65: ...Get Table 5 25 TCP IP object instance attributes Attribute ID Name Data type Data value Access rule 1 Status DWORD Bit 0 0 The interface configuration attribute has not been configured 1 The interface...

Страница 66: ...255 Default 1 Get 9 IP multicast address configuration Structure of Allocation control USINT 0 Default algorithm 1 Configuration Set Reserved USINT 0 Set Num multicast address UINT 1 32 Set Start mult...

Страница 67: ...models GW 1E 3 Two Ethernet port models GW 2E Get 4 Optional attribute list UINT 4 Get 6 Maximum number class attributes UINT 7 Get 7 Maximum number instance attributes UINT 11 Get Table 5 28 Etherne...

Страница 68: ...2E models Instance 1 IP Address E1 external 1 Instance 2 IP Address E2 external 2 Instance 3 IP Address Internal Get 11 Interface capability UDINT Capability bits Interface capabilities other than spe...

Страница 69: ...4Bhex No Yes Execute_PCCC Table 5 31 Message structure for message name requests Name Data type Description Length USINT Length of requester ID Vendor UINT Vendor number of requester Serial Number UD...

Страница 70: ...ta to the GW EIP ASCII Table 5 33 Supported PCCC command types Types FNC Description 0Fhex 67hex PLC 5 typed write 0Fhex 68hex PLC 5 typed read 0Fhex A2hex SLC 500 protected typed read with three addr...

Страница 71: ...the initial output instance or up to the total length of the remaining output instances For example the write may begin at output instance 109 and be the length of output instance 109 or begin at ins...

Страница 72: ...utput instances For example the write may begin at output instance 109 and be the length of output instance 109 or begin at instance 109 with a length of output instances 109 110 113 and 114 Only one...

Страница 73: ...Transmit data to socket ports 1 to 2 BYTE array length 4 maximum RX packet size 0 255 Set 113 Transmit data to socket ports 1 to 2 BYTE array length 4 maximum RX packet size 0 255 Set 114 Transmit dat...

Страница 74: ...r Name Data type Data value Access rule 109 Transmit data to serial ports 1 to 4 Transmit data to socket ports 1 to 4 BYTE array length 4 maximum RX packet size 0 255 Set 110 Transmit data to serial p...

Страница 75: ...e set to MicroLogix When configuring the GW EIP ASCII to operate in Write to Tag File mode enter the file name starting with the standard file format i e N10 0 Polling is performed through the PLC 5 S...

Страница 76: ...sion R or later Series D Revision H or later Series E Revision G or later Enhanced PLC 5 attached to Ethernet module 785 L11B 1785 L20B 1785 L30B 1785 L40B 1785 L40L 1785 L60B 1785 L60L 1785 L80B Seri...

Страница 77: ...NTs 101 INTs PLC 5 234 SINTs 117 INTs PLC 5 typed read 104 CLX 234 SINTs 117 INTs SLC 252 SINTs 126 INTs PLC 5 238 SINTs 119 INTs CLX 230 SINTs 115 INTs SLC 248 SINTs 124 INTs PLC 5 234 SINTs 117 INTs...

Страница 78: ...SCII supports serial packets of up 1518 bytes and socket packets up to 2048 bytes when Write to Tag File is selected in the Transfer mode to PLC field When large packets of data are received the data...

Страница 79: ...ast successfully transmitted serial socket packet 6 6 Sequence number messages PLC 5 and SLC typed read and typed write messages can read and modify both receive and transmit produced data sequence nu...

Страница 80: ...setting may need to be increased in order to ensure the PLC program processes the data before the message is overwritten by the next incoming message 6 7 2 Polling The Polling option allows the PLC t...

Страница 81: ...er a successful reset the module returns to the factory default address 192 168 254 254 7 1 2 Software reset To force a software reset 1 Start the web server and navigate to the Device Maintenance Res...

Страница 82: ...GW EIP ASCII 80 PHOENIX CONTACT 3785_en_B...

Страница 83: ...the Server s IP Address or Hostname field and then click the OK button 7 Click the RSWho button to verify that RSLinx can communicate with the GW EIP ASCII 8 2 Add the EDS file to RSLinx 1 Open the E...

Страница 84: ...form the following procedure 1 Navigate to the File Exit menu and then click the Shutdown option to exit and shutdown RSLinx 2 Remove the following files from the hard drive Program Files Rockwell Sof...

Страница 85: ...ure 4 4 LAN Settings IP Address page 22 Figure 4 5 LAN Settings Security page 23 Figure 4 6 LAN Settings EtherNet IP Stack page 24 Figure 4 7 Serial Settings Overview page 25 Figure 4 8 Serial Setting...

Страница 86: ...cs Communication Statistics page 39 Figure 4 19 PLC Interface page 41 Figure 4 20 Serial Log page 43 Figure 4 21 Ethernet Logs page 44 Figure 4 22 Password page 45 Figure 4 23 Restore Defaults page 46...

Страница 87: ...ons 54 Table 5 7 Socket port data transfer object class attributes 55 Table 5 8 Socket port data transfer object instance attributes 55 Table 5 9 Socket port data transfer object common services 56 Ta...

Страница 88: ...ssage name responses 67 Table 5 33 Supported PCCC command types 68 Table 5 34 Assembly object class attributes F6hex 68 Table 5 35 Assembly object instance attributes 69 Table 5 36 Assembly object com...

Страница 89: ...products in your specific application in particular with regard to observing the applicable standards and regulations All information made available in the technical data is supplied without any accom...

Страница 90: ...products Subsidiaries If there are any problems that cannot be solved using the documentation please contact your Phoenix Contact subsidiary Subsidiary contact information is available at phoenixconta...

Результаты поиска

Содержание 2702772

Отзывы:

Похожие инструкции для 2702772

Бренды по названию

Популярные бренды

Phoenix Contact 2702772, Руководство пользователя

Результаты поиска

Содержание 2702772

Отзывы:

Похожие инструкции для 2702772

Бренды по названию

Популярные бренды