User Manual

ManualsBrandsADS-TEC ManualsComputersIF1000

UserManual

IT‐Infrastructure

IF1000series

Version2.3

Summary of content (46 pages)

PAGE 1
Version 2.
PAGE 2
IF1000 series 1 Index 1 Remarks 1.1 1.2 1.3 1.4 1.5 1.6 2 Relevant Documentation for this device Used Symbol Explanation Data, Figures, Modifications Trademarks Copyright Standards Notes on Operation & Safety 2.1 2.2 2.3 2.4 3 Safety Instructions Operation Location Damage Caused By Improper Use Warranty / Repair Introduction 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.
PAGE 3
IF1000 series 2 5.6.2 Status display activities when resetting to default settings 5.6.3 Status display activities with Firmware Updates 5.7 Interface Overview 5.7.1 Power Supply 24 VDC / BackUp 5.7.2 CUT & ALARM 5.7.3 Power Supply LAN‐in (RJ45) / PoE (IEEE 802.AF) 5.7.4 LWL Fibre Optic 5.7.5 Serial Interface COM (RS232) 5.7.6 SMARTCARD READER NACH ISO 7816 32 32 33 33 34 34 34 35 35 6 36 6.1 6.2 6.3 6.
PAGE 4
IF1000 series 3 1 Remarks 1.1 Relevant Documentation for this device The following documents are essential for setting up and operating this device: User Manual (This Documentation): Contains information for installation, commissioning and operating the device along with technical data of the device hardware. Qucik Start Guide: Quick Install Guide for fast commissioning. 1.
PAGE 5
IF1000 series 4 1.6 Standards This device complies with the requirements and protective aims of the following EC regulations: Standards  This device meets the test requirements for granting the CE sign according to the European test standards EN 61000‐6‐4 and EN 61000‐6‐2  This device complies with the test requirements in accordance with EN 60950 (VDE0805, IEC950) "Safety of Information Technology Equipment"  The device meets the EN 60068‐2‐6 test requirements (sinus excitation).
PAGE 6
IF1000 series 5 2 Notes on Operation & Safety The unit operates under electrical tension and implements supersensitive component parts. Intervention by the User is required only for power supply line connection operations. Should any further alterations be required, it is necessary to consult either with the Manufacturer directly or with authorised service personnel accordingly. During said connection operations, the unit must be completely powered down.
PAGE 7
IF1000 series 6 2.2 Operation Location This device is designed for use in industry. You must ensure compliance with the specified environmental conditions. Using the device in non‐specified environments, e.g. on board ship or in areas containing explosive vapours, gases or gas mixes, as well as in extreme heights, is prohibited Warning: For the prevention of water condensate accumulation, the unit should be turned ON only when it reaches ambient temperature.
PAGE 8
IF1000 series 7 3 Introduction The Industrial Firewall constitutes a link between the IT world and automation, thereby meeting the requirements of IT security as well as those by the production line maintenance personnel. It enables monitoring and control of the plant setup network, and of the relative access points. Its essential security protection mechanism is constituted by the event‐dependent and physical network separation.
PAGE 9
IF1000 series 8 3.5 Managed Switch Network segments can be set up without any additional hardware by using the managed switch integrated into the firewall. It is possible to connect multiple systems or terminals up to one Firewall. Each port can be switched off individually to prevent unauthorized data traffic monitoring. 3.6 Service Service access via a secure service port.
PAGE 10
IF1000 series 9 3.9 Environmental Conditions The unit can be put into operation and used under the following conditions. Failure to observe any one of the specified data will immediately terminate all warranty conditions. ads‐tec cannot be held liable for any damages arising due to improper device or unit use and handling.
PAGE 13
IF1000 series 12 4.3 Mounting options The device unit is designed for both top hat rail mounting as well as for wall‐mounting. 4.3.1 Top Hat Rail Mounting 1. The Firewall must be placed obliquely up against the top of the top hat rail. 2. Fix it on by pressing the underside lightly up against the rail. 3. The Firewall must firmly snap into place on the top hat rail. Abb. 3: Note: Check to make sure that the Firewall will not detach itself from the top hat rail by lightly tugging the underside forward.
PAGE 14
IF1000 series 13 4.3.2 Wall mounting 1. Provide for screws on the relative device mounting wall so that they are set horizontally level, with a distance between screws amounting to 170mm. 2. Attach on the Firewall by way of the appropriate cavities as illustrated. Abb. 4: To release the unit from the DIN rail, proceed in reverse order. © ads‐tec GmbH • Raiffeisenstr.
PAGE 15
IF1000 series 14 5 Systemfeatures 5.1 Frontpanel Operation Keys The device is provided with operation keys for navigation and unit configuration via the LCD menus. Said LCD menus are easily accessed via simple operation of the ESC or the ENTER keys. You will find a description of the single menu items in the following LC display section. The front panel operation keys are provided with the following functions: Symbol Navigation function Configuration function Press to exit the current menu level.
PAGE 16
IF1000 series 15 Menu navigation direction arrow (LEFT) Menu navigation direction arrow (DOWN) If the input mode is activated, each digit is marked and can be changed via access with the UP and DOWN arrow keys. For selection amongst a number of options, the DOWN key will access and highlight the selection item in ascending/up order (e.g. selection of either German or English from the available language options).
PAGE 17
IF1000 series 16 5.1.1 Example configuration IP‐Adresss and Contactname IP‐Adress Default IP address 192.168.0.254 needs to be changed into 192.168.1.250 whilst the subnet mask must be changed from 255.255.255.0 into 255.255.52.0. The IP address is highlighted and the input window is deactivated. To change the IP, proceed as follows: Menu Action Press ENTER to activate the iput mode. ‐> The input focus will be active on the first digit.
PAGE 18
IF1000 series 17 Press the DOWN direction arrow key twice ‐> Change on the space Press the RIGHT direction arrow key twice ‐> The input focus will be active on the 5 Press the DOWN direction arrow key three times ‐> Change to 2 Now press ENTER to confirm all the changes to the first line in the input mode. ‐> The overall IP is highlighted The text message “Please wait” will come up on display whilst the data is being stored.
PAGE 19
IF1000 series 18 Contact name Contact name Mr. Miller must be changed to Ms. Miller.. The Contact Name is highlighted and the input window is deactivated. To change the Contact Name, following steps are required:: Menu Action Press ENTER to activate the iput mode. ‐> The input focus will be active on the first digit. Press the RIGHT direction arrow key once. ‐> The input focus will be active on the r Press the UP direction arrow key once.
PAGE 20
IF1000 series 19 5.2 LC‐Display The device is fitted with an LCD which allows direct access to configuration settings. Any modifications to the firewall and web interface settings made via the LCD menu will take effect immediately. Furthermore, the display shows event messages and status information for quick on‐site system analysis. The LCD menu option Lock can be used to lock the display and all front panel keys.
PAGE 22
IF1000 series 21 5.3.1 Description of individual Menu items Network Selection Action Transbridge The network mask allows setting the operational mode. Additional options are available for each mode. Anzeige In Transparent Bridge mode, the Firewall acts as a Layer 2 Bridge and is invisible to all participants. Transbridge= LAN Settings IP‐Router The Firewall treats the networks at the LAN‐In and LAN‐Out interfaces as two separate networks and filters these separately.
PAGE 23
IF1000 series 22 Systeminfo Selection Action System name This name serves as a unique identifier of the device at its installation site. Display The Firewall system name displayed can be specified/changed here. You may freely choose a Firewall system name. The name entered here will be shown in the LCD menu and in the web interface. System location This item serves as a unique identifier of the location at which the device is operated. The Firewall system location can be specified/changed here.
PAGE 24
IF1000 series 23 LCD‐Menu Selection Action Language Deutsch/Englisch Two language options are available. Changing the language setting here will also affect the language of the web interface. The default setting is English. Display & Keys The display and keys can be locked to prevent unauthorised access. When locked, the display will not show any information and the keys can no longer be used to modify the device configuration.
PAGE 25
IF1000 series 24 Reboot New PIN In order to change the PIN, the old PIN needs to be entered. The PIN may be changed independently from the web interface password. The default PIN is empty; any user‐defined PIN may be up to 14 digits long. Selection Action Display The reboot option allows re‐starting the Firewall via the LCD menu. Confirm selection of this option by pressing the down key . © ads‐tec GmbH • Raiffeisenstr.
PAGE 27
IF1000 series 26 5.4.1 Description of individual menu items Events Selection Action Event log The event log allows retracing system messages and alarms. Select individual log entries using the UP and DOWN keys. Anzeige The event log display is comparable to a transcript of messages. Use the Event log menu to view any logged events. Connections Melssage Ack. Use the Message Acknowledgement option to override or end, respectively, any events logged in the event log.
PAGE 28
IF1000 series 27 Device info Selection Action Device info This option displays general device information. Anzeige The screen shows the name of the manufacturer, the device variant, whether a NVRAM card is installed, the current firmware version, and the current firmware build. Device Test Selction Action Screen Starts the display test. Anzeige Press Enter to start the display test. Perform this test to check the display for correct functioning.
PAGE 29
IF1000 series 28 Internal Cut Sets the internal CUT. Sets the CUT and turns on the CUT LED. The letters INT will appear in the upper right corner of the display, indicating that an internal CUT was triggered. INT will continue to flash until the internal CUT is either switched off or acknowledged automatically. Perform this test to check the internal CUT for correct functioning. Ping‐Test With the aid of the PING‐Test, the accessibility of an affiliated remote station is tested.
PAGE 30
IF1000 series 29 5.5 Operational LED Status Display The boot‐up process starts as soon as the firewall is supplied with a voltage source. With the aid of the Lan‐in LEDs it is possible to check whether the Firewall is booting up as well. The table herunder provides boot‐up process LED blink frequency via which it is possible to check that the device is booting up correctly. In the example, no LAN‐in cable / PoE is connected up.
PAGE 31
IF1000 series 30 CUT & ALARM Signal L+ Action CUT & ALARM interface is not supplied with a voltage. The CUT & Alarm functionality is not available. L+ CUT & ALARM interface is supplied with a voltage. The CUT & Alarm functionality is given. INT An internal Cut is triggered EXT An external Cut is triggered AL An Alarm is triggered LAN‐IN Signal Action PoE The device is not supplied with a power. PoE The device is provided with voltage via PoE and is ready for operation.
PAGE 32
IF1000 series 31 5.5.2 LAN‐OUT Abb. 6: LAN‐OUT Signal Action LINK The interface is connected to a remote station and is ready for operation. ACT Displays the traffic between the firewall and remote. © ads‐tec GmbH • Raiffeisenstr.
PAGE 33
IF1000 series 32 5.6 Operational LED Status Displays 5.6.1 Status Display Activities when Booting Te boot‐up process starts as soon as the firewall is supplied with a voltage source. With the aid of the Lan‐in LEDs it is possible to check whether the Firewall is booting up as well. 5.6.
PAGE 34
IF1000 series 33 5.7 Interface Overview Abb. 7: The device has the following interfaces (front): 1. Power 24V DC voltage supply (2 pole COMBICON plug) 2. Backup 24V DC BACKUP voltage supply (2 pole COMBICON plug) 3. CUT& ALARM plug (4 pole COMBICON plug) 4. LAN‐in with RJ45 (PoE) or LWL fibre optic connection 5. 9 pole SUB‐D connector / RS232 6. LAN‐out with 4x RJ45 connection Note: All input voltages can be hooked up redundantly (Power, Backup and PoE via LAN‐in). 5.7.
PAGE 35
IF1000 series 34 5.7.2 CUT & ALARM Pin‐Number Signal‐Name 1 TX + 2 TX ‐ 3 RX + 4 NC PIN 1: = L+ 24V DC feed‐in of the alarm output voltage PIN 2: = GND Ground feed‐in of the alarm output voltage PIN 3: = CUT 24V DC feed‐in of an external switching signal (galvanically isolated) PIN 4: = AL 24V DC ALARM output (galvanically isolated) alarm out put for signalling to external users 5.7.3 Power Supply LAN‐in (RJ45) / PoE (IEEE 802.
PAGE 36
IF1000 series 35 5.7.5 Serial Interface COM (RS232) 9 pole SUB‐D connector RS232 for connection of an analogue, ISDN or GPRS standard modem unit Pin‐Number Signal‐Name 1 DCD 2 RxD 3 TxD 4 DTR 5 GND 6 DSR 7 RTS 8 CTS 9 RI 5.7.6 SMARTCARD READER NACH ISO 7816 The SIM card reader serves for the storage of the configuration data. Pin‐Number Signal‐Name 1 VCC 5 Volt 2 RESET 3 CLOCK 4 NC 5 GND 6 NC 7 I/O 8 NC © ads‐tec GmbH • Raiffeisenstr.
PAGE 37
IF1000 series 36 6 Commissioning 6.1 Inititial‐Commissioning Achtung: The initial installation of this device can only be performed by using the RJ45 interface labelled with HOST. A RJ45 PATCH CABLE IS REQUIRED FOR INITIAL CONFIGURATION. Connecting the 24 V DC power source The power for this device can be supplied by a 24V DC (2‐pin connector) power supply. The corresponding COMBICON connector is included in the scope of delivery. Connect the device with a suitable power supply unit.
PAGE 38
IF1000 series 37 6.2 Manual Network adapter configuration Note: The notes below have been created by using Windows XP®. Should you use a different operating system, the directory paths and properties described here might vary. Open the Properties tab of the network adapter you are using. The directory path is: Start> Settings> Network connections> LAN connections> Properties. Select the following option in the pop‐up dialogue: Internet protocol (TCP/IP); then click on Properties . Abb.
PAGE 39
IF1000 series 38 6.3 Settings for use with Internet Explorer 8 Warning: If Internet Explorer 8 is used, issues with the web interface might occur. If you experience any problems, the IP address of the device must be entered in the Local Intranet list in order to display the web interface correctly. Open Internet Explorer and navigate to the Security tab with the following directory path: ToolsInternet optionsSecurity Switch to the Local Intranet tab and click there on Sites.. Abb.
PAGE 40
IF1000 series 39 The entered IP address should now appear in the list under Websites. Abb. 11: © ads‐tec GmbH • Raiffeisenstr.
PAGE 41
IF1000 series 40 6.4 Calling up the Device Web Interface To access and open the device web interface, start up your web browser. In the browser’s address bar, enter the following IP address then confirm with Enter http://192.168.0.254 Login Once the IP address has been entered with success, the login prompt appears. In the login prompt, entry of the default settings is required.
PAGE 42
IF1000 series 41 Finally, the device web interface will come up on screen. Abb. 13: © ads‐tec GmbH • Raiffeisenstr.
PAGE 43
IF1000 series 42 7 Technical Details Device Data IF1000 series Operating System Embedded LinuX Configuration protocol http, https Power Supply 24V DC +/‐ 20%, redundant power Supply Interfaces 1 x CUT & ALARM 1 x LAN RJ45‐ Connection10/100/1000MBit/s Autocrossover 4 x LAN RJ45‐ Connection10/100/1000MBit/s Autocrossover 1 x SUB‐D RS232 External Device Dimensions 203 mm x 156mm x 35mm Weight ca. 1 kg Protection Class IP20 Max. Power consumption max.12 Watt (typ.
PAGE 44
IF1000 series 43 8 Service & Support The ads‐tec company and their partner companies offer a comprehensive service and support to your customers providing a quick and professional support in case of any question with respect to ads‐tec products and components. Since the devices from ads‐tec company are also used by partner companies, these devices might be configured according to specific customer requirements.