dLAN ® AVpro manager The Network Innovation
dLAN®AVpro manager Version 6.0.
© 2012 devolo AG, Aachen, Germany While the information in this manual has been compiled with great care, it may not be deemed an assurance of product characteristics. devolo shall be liable only to the degree specified in the terms of sale and delivery. The reproduction and distribution of the documentation and software supplied with this product and the use of its contents is subject to written authorisation from devolo.
III Inhalt 1 Introduction ............................................................................................................3 1.1 What is dLAN? ........................................................................................................... 3 1.1.1 dLAN: Costs and transmission quality .......................................................... 3 1.1.2 Data security and radiation ......................................................................... 4 1.
IV 4.3 4.4 4.2.4 Creating a dLAN network .......................................................................... 49 4.2.5 Adding additional networks ...................................................................... 51 Managing networks ................................................................................................. 53 4.3.1 Finding dLAN devices ................................................................................ 53 4.3.2 Setting compatibility mode ....................
V devolo dLAN AVpro manager
1 Before we get started What dLAN AVpro manager offers you Complex dLAN networks mean new challenges for you and other administrators when managing the devolo dLAN devices in the networks. Therefore, we have developed the devolo management software program dLAN AVpro manager, which supports you effectively while configuring and monitoring the various devolo dLAN devices in your dLAN network. dLAN AVpro manager determines the dLAN devices available on the transmission medium and manages them in a database.
2 Chapter 6 shows you how you can reliably secure transmission in the network and access to devices, networks and databases. In the Annex chapter, you can find additional useful information. The Index eases quick finding of necessary information. Icons Below, you will get to know some important symbols used in the manual which indicate the emphasis of certain text passages: This symbol indicates a very important message which you must observe in order to prevent risk of damage.
Introduction 1 3 Introduction This chapter gives you a short overview of the various technologies for dLAN networking. 1.1 What is dLAN? dLAN ("direct LAN") is a high-performance alternative to the two currently widespread network technologies LAN and WLAN ("Wireless LAN").
4 Introduction high-performance "Quality of Service" functions. Because of this, "HomePlug AV" is the ideal medium for all Triple Play services (data, language and video services) and for the wide range of online entertainment offered today. You can operate "HomePlug AV / IEEE 1901" and "HomePlug 1.0" alongside each other in the same line network. Data exchange between "HomePlug 1.0" networks and "HomePlug AV" networks is possible here by means of a bridge.
Introduction 1.2 5 dLAN 'peer-to-peer' and 'MDU' operating modes There are two logical operating modes for dLANs. By default, dLANs are set up in "peer-to-peer" operating mode. Alternatively, there is also the 'MDU' operating mode, which you can configure with dLAN AVpro manager. a) In the dLAN peer-to-peer [P2P] operating mode, every dLAN device on the dLAN can communicate with every other dLAN device on the same dLAN directly.
6 Introduction The following illustration shows an example of the differences between a P2P network architecture (left) and a MDU network architecture (right): Fig. 1: P2P network MDU network Depending on the capabilities of your dLAN devices to support different cable systems, you can use physically different cable systems as transmission mediums for dLAN networking, specifically power lines (PowerLine 'PLC'), TV/SAT coaxial wiring ('Coax') or telephone or two-wire cabling.
Introduction 7 b) In coax networking, the existing TV/SAT antenna cable network is also used for dLAN transmission. Coax cables provide outstanding shielding due to their design. In comparison to PowerLine, they also enable a higher transfer rate, because with them, modifications to the transmission capacity are not required and neither can interference signals arise, the effects of which would otherwise have to be taken into account (for example, with corresponding settings in the modulation table).
8 1.2.1 Introduction Compatibility mode dLAN AVpro manager enables not only the management of dLANs on the PowerLine and Coax/two-wire transmission mediums, but also provides a special compatibility mode, which simplifies the management of the dLANs substantially.
dLAN AVpro manager 2 dLAN AVpro manager 2.1 Preliminary notes 9 You have to install dLAN AVpro manager on a PC which is equipped with one of the following operating systems: Windows 8 Windows 7 Windows Vista Windows XP Ubuntu openSUSE The respective computer has to be equipped with an Ethernet interface. If the respective computer is connected to an Ethernet LAN, a second, independent Ethernet interface has to be configured for operation as management computer.
10 2.2 dLAN AVpro manager Installing and starting dLAN AVpro manager It is best to start the installation program for dLAN AVpro manager directly from the product CD. During the installation, follow the installation program instructions step by step. After the installation is finished, you can find the installed files in the directory tree Programs devolo dlanavpromanager.
dLAN AVpro manager 11 You have the following options here: You retain the default settings by simply clicking on OK. can change these settings: You can change the name of the network to be created. You can change the network mode ('MDU' or 'peer-to-peer') of the network to be created. You can select a different database file, which dLAN AVpro manager should use from now on.
12 dLAN AVpro manager Simple mode is enabled by default (see Chap. 2.5). It provides an overview of the dLAN devices connected to the transmission medium in a "Live view" and shows which of them are connected with one another in dLANs and which do not belong to a dLAN. The expert mode is significantly more powerful (see Chap. 2.6). In this mode, you can open and create databases, configure networks and devices and create, edit and assign profiles for the configuration of networks and devices.
dLAN AVpro manager 13 By clicking on the Refresh view button (see Chap.2.5.1), you update the representation of these lists. Fig. 3: User interface in the simple mode 2.5.1 Selection buttons In the simple mode of dLAN AVpro manager, the following selection buttons are available: Simple mode If the dLAN AVpro manager is not in simple mode, you can change it to simple mode by clicking on this button. This button is active after every startup of the manager by default.
14 2.5.2 dLAN AVpro manager "Live View" window In simple mode of the dLAN AVpro manager, the "Live view" window is the most important element. It provides you with lists of all the connected, manageable dLAN devices on the local dLAN transmission medium and even sorts according to devices which form dLANs with each other ("connected devices") as well as according to devices which do not belong to any network, but can be accessed by the dLAN AVpro manager ("accessible devices").
dLAN AVpro manager 2.6 15 The user interface in expert mode If you click on the "Expert mode" selection button, dLAN AVpro manager switches the user interface to expert mode. Fig. 5: User interface in expert mode The expert mode user interface consists of the following elements: The header Shows the name of the SQL database file used by dLAN AVpro manager. (see Chap. 2.6.1.2). The header with the four menu buttons: Database (see Chap. 2.6.1.1) Network (see Chap. 2.6.1.3). Devices (see Chap. 2.6.
16 dLAN AVpro manager Add network Here you can create a new network. This function can also be called up via the network menu (see Chap. 2.6.1.3) Remote access Here you can start remote configuration access to your dLAN networks. This function can also be called up via the database menu (see Chap. 2.6.1.1) Detailed information on remote access can be found in Chap. 4.4.
dLAN AVpro manager 2.6.1 17 The header bar menus You can also call up menu items in the menus described below (Database menu, Network menu, Device menu, Help menu) using keyboard commands. You can find the respective command in the description of the respective menu item. A complete list of the keyboard commands is found in the Annex (see Chap. 7.4). 2.6.1.1 The database menu By clicking on "Database" in the header bar, you open the Database menu. Fig.
18 dLAN AVpro manager 6.2.1). Fig. 7: Defining database password You have to enter the respective password in the "Password" and "Confirm password" lines. The OK button below the input fields is active only if both entries are identical. By clicking on OK, the password is applied. With the password, you simultaneously protect your dLAN AVpro manager, as from now on it will only boot up after the correct database password is entered if the password-protected database is selected in dLAN AVpro manager.
dLAN AVpro manager 19 Edit profile By clicking on this menu item or using the key combination [ALT-P], you can create, edit and delete profiles. A profile is a container for settings of various types and is identified by its unique name. In Chap. 3, you can find detailed descriptions on the configuration of profiles and on the setting options in profiles. You can configure as many profiles as you like.
20 dLAN AVpro manager The databases generated with the older versions of dLAN AVpro manager are automatically converted to the current database format upon opening them for the first time with the current dLAN AVpro manager. The dLAN AVpro manager produces a message about this process. Please note that the converted database then can only be used with the current version of dLAN AVpro manager. 2.6.1.3 Network menu Clicking on "Network" in the header opens the Network menu. Fig.
dLAN AVpro manager 21 Fig. 9: Add new dLAN network The network is then added in the list of networks that your dLAN AVpro manager administers in the opened database. You can select and configure these networks individually in the expert user interface for display. Detailed information on creating networks can be found in Chap. 4.2. Remove Clicking on the menu item deletes the dLAN shown in the "dLAN networks" window after you have confirmed the dLAN AVpro manager security prompts in this respect.
22 dLAN AVpro manager access to your dLAN network from another location by clicking on the menu item or using the key combination [Alt-R]. In the Location field, select the location of the respective dLAN network. Enter your devolo Connect ID and click on Connect. Fig. 10: Dialog for remote maintenance Additional information can be found in Chap. 4.4. Define location In this menu item, you define the location of the opened dLAN network.
dLAN AVpro manager 2.6.1.4 23 Device menu By clicking on "Devices" in the header bar, you open the Device menu. Fig. 11: Device menu This menu provides you with the following options: Add device Clicking on the menu item or using the key combination [Ctrl-+] inserts a dLAN device in the database which is not yet connected to the transmission medium. Fig. 12: Add device You add the device to the database by entering the ID of the device.
24 dLAN AVpro manager The name and the description of the dLAN device (this information is optional) The security ID of the dLAN device The MAC address of the dLAN device The location of the device (for remote access) You can find the MAC address and the security ID of the device on the device label on the housing underside. The possible locations have to be predefined in the location field of the remote access dialog (see Chap. 4.4.3).
dLAN AVpro manager 2.6.1.5 25 Help menu By clicking on "Help" in the header bar, you open the Help menu. Fig. 13 : Help menu This menu provides you with the following option: About dLAN AVpro manager By clicking on the menu item, you open a window which shows you the version information for your dLAN AVpro manager: Fig.
26 2.6.2 dLAN AVpro manager The "dLAN network" window The dLAN AVpro manager shows you the network structure for the selected dLAN in the "dLAN networks" window with the list of the corresponding dLAN devices. It also shows the tabs for the other networks which are available in the database and are opened by clicking on their tab.
dLAN AVpro manager 27 Fig. 15: View of an MDU network segment with three slaves If a P2P dLAN contains a dLAN device which is connected to the dLAN AVpro manager computer via Ethernet, the respective dLAN device is highlighted in the network tree. This makes all remaining dLAN devices appear to be in a lower hierarchy level. Nevertheless, in this dLAN, all dLAN devices are completely equal to each other.
28 dLAN AVpro manager ple drag an available device from the "Unused devices" list onto the network name of a new, empty segment in MDU dLAN, the respective device automatically becomes master of that segment due to this action. If you would like to drag the device to a segment that already has a master, the device is automatically created as a slave in the respective segment.
dLAN AVpro manager 29 Selecting the network to be displayed dLAN AVpro manager can manage many dLANs in a database. The names of these dLANs appear in the tabs on the upper edge of the "dLAN network" window. You open the representation of a dLAN by clicking on the respective tab. Alternatively, you can use the drop-down menu on the right upper edge of the Network window. You can change the order of the tabs by moving the tabs to the left and right. Fig.
30 2.6.3 dLAN AVpro manager The "Unused devices" list The "Unused devices" list includes all dLAN devices that are not assigned to any of the networks which are managed in the opened database. In this list, the security ID is also displayed in addition to the MAC address of each device. If the device ID also contains the name of the device, the name is likewise displayed. By clicking on a column header on the list, it is sorted by the values in the respective column.
Profiles 3 Profiles 3.1 About profiles 31 The task of configuring complex dLAN networks can become a laborious and lengthy one due to the variety and quantity of the dLAN devices to be configured. In the individual dLAN devices of the same dLAN segment or network, sometimes devices must have the same and sometimes similar configurations.
32 3.2 Profiles Creating and editing profiles To create a new profile or edit an existing one, open the dialog window for configuring profiles in the Database menu by clicking on the Edit profile menu item. Fig. 18: Profile dialog On the left side, you can see the list of existing profiles. Clicking on Create profile opens a new profile. Enter a name for the new profile and click on OK. A profile is deleted by selecting the profile name and clicking on Delete.
Profiles 3.2.1 33 Default profile With some dLAN devices, device actions can be queried (e.g. deactivating the PoE function, VLAN settings); to implement these, a profile has to be assigned to the respective devices. If the respective device has no profile assigned and a device action is called up for the device, the dLAN AVpro manager automatically generates a suitably configured "Default profile" and assigns it to the respective device.
34 Profiles is an advanced management scheme with which the impending reduction of transfer bandwidth can be prevented. A side-effect of multi-segment mode can be a slight reduction of the attenuation budget, which can have adverse effects on the most distant slave's maximum permitted distance. 3.3.1.2 Limit bandwidth You can limit the bandwidth of dLAN devices depending on the profile assigned to them as needed in order to enable a uniform transmission quality of content to all dLAN devices.
Profiles 3.3.2 35 Setting transmitting power dLAN devices transmit their data according to the current HomePlug AV standard in the frequency band between 1.8 and 30 MHz (or 68 MHz for dLAN 500 AVpro devices). The emission of these signals via the power cables used for transmission can in some circumstances disrupt other sensitive services (such as amateur radio), which work in this frequency band.
36 Profiles Fig. 20: Configuring attenuation of carrier frequency ranges Examples: - If you want to decrease the transmitting power by 10 dB, enter the value "-10.0" in the Lowering field. - If you want to completely suppress the signal in a specified frequency band, enter the value "-30.0" in the Lowering field. The tab key conveniently moves the cursor from one input field to the next while entering the values.
Profiles 3.3.3 37 Transmission prioritisation Some applications (such as IPTV and VoIP) place high demands on transmission quality in the dLAN network. In order to guarantee an uninterrupted transmission of this multimedia content, you can configure your dLAN network so that certain types of data packets are transmitted with priority [through corresponding Quality of Service settings]. 3.3.3.
38 Profiles You can assign each of these eight priority values to one of the four listed dLAN priority levels ("bulk", "best effort", "video", "voice") by selecting the priority level you would like in the drop-down menu for the corresponding VLAN. Fig. 21: Example of assigning the dLAN priority levels to the VLAN priority values '0' to '7' To confirm your entry, click on OK.
Profiles 3.3.3.2 39 Prioritisation via MAC address and port number Moreover, the dLAN offers additional options to configure a prioritisation. You can for example link the MAC addresses for dLAN devices with a dLAN priority individually. You can also link target port numbers with a dLAN priority in any way you like. Enter the desired target address and target port number and, from the corresponding drop-down menu, select the priority level for which the data transmission should be given preference. Fig.
40 3.3.4 Profiles Other settings In the Other tab, you can activate/deactivate some functions of certain dLAN devices, such as the encryption button or all LEDs The Ethernet energy-saving feature. some For technical reasons, these functions are not available for all dLAN devices. 3.3.4.1 Switching off the encryption button Some dLAN devices have an encryption button with which secure communication can quickly and easily be set up in small networks.
Profiles 41 Fig. 23: Profile dialog "Other" To confirm your entry, click on OK. 3.3.4.2 Dimming / deactivating LEDs Because the flashing status LED is sometimes unwanted, some dLAN devices have the option to dim or permanently shut off their status LEDs. To dim the LEDs, enable the Dim button. To turn off the LEDs, enable the Disable button. To turn on the LEDs, enable the Enable button. To confirm your entry, click on OK.
42 Profiles Not all dLAN devices support dimming your LEDs. In addition, some dLAN devices do not allow all LEDs to be switched off. Details can be found in the manual for the respective device. 3.3.4.3 Turning off energy saving mode Some dLAN devices offer an energy saving mode ('Standby'). If the energy saving mode for the device is activated, its Ethernet interfaces are switched off if after a certain time there has been no further data transmission over the interfaces. This saves energy.
Network management 43 4 Network management 4.1 Managing dLAN networks using dLAN AVpro manager You can organise dLAN devices into MDU networks and peer-to-peer networks (see Chap.1.2) very conveniently using dLAN AVpro manager. In MDU networks, you can split an entire dLAN into different logical dLAN segments by assigning dLAN devices (as master or slave). You can save the properties shared by the dLAN devices of these segments (data prioritisation, transmitting power, transmission mode, etc.
44 4.1.1 Network management Notes on using database files You can create multiple databases as needed to map different locations or sites separately. For more information on this topic, refer to Chap. 2.6.1.2. You can then make further configuration changes to dLAN networks structured this way as needed (e.g. defining the compatibility mode for the network and assigning the networks customised profiles). For more information on this topic, refer to Chap. 4.3.
Network management 45 d) In the next step, fill the displayed dLAN network with dLAN devices by using the mouse to drag and drop dLAN devices from the list of "Unused devices" into the "dLAN networks" window (see Chap. 2.6). If you have selected the MDU operating mode for the network, generate the hierarchy of dLAN devices for the MDU network by dragging a device to the network root (this automatically makes it the master) in the "dLAN networks" window.
46 Network management This function is designed as an initial, preparatory step before setting up a dLAN later on. You have to run it before connecting the manager to the local dLAN in order to use it. If you do not stick to this step sequence, dLAN AVpro manager imports the devices via the dLAN after it starts and ignores the specifications in the text file as a result. If you want to add a single device to the database, you can do this using the Device menu in the Add device menu item (see Chap. 2.6.1.
Network management 4.2.3 47 The components of a dLAN device ID The ID for each dLAN device consists of the following components: Description text The description text is irrelevant for dLAN AVpro manager but important for you because it allows you and your colleagues to recognise the device in the network view. Therefore, the description text has to be unique to prevent mix-ups with other devices.
48 4.2.3.1 Network management Changing a dLAN device ID You can add description text in the ID for a dLAN device or edit existing text at any time. If the device is in the opened network in the "dLAN network" window, open the context menu for the device by right-clicking on the respective device. In the context menu, open the menu item Edit properties and enter or edit the description there.
Network management 4.2.4 49 Creating a dLAN network If your dLAN devices are in the list of "Unused devices", you can create a network architecture in the database quite easily. Use the mouse to move devices one-by-one from the list to the network opened in the "dLAN network" window by dragging and dropping them. The network mode (P2P or MDU) for the respective network determines its network hierarchy. You have to pay attention to this hierarchy when creating P2P networks and MDU networks. 4.2.4.
50 Network management Creating an MDU network MDU networks have two hierarchy levels: master and slave. Which device is a 'master' and which is a 'slave' depends on the position in the network tree that you drag the device to from the list of "Unused devices" in the open network.
Network management 51 This is why a warning notice appears when moving a master; you have to confirm this warning notice to have your changes take effect. By definition, there is a maximum of one master in each MDU network segment. Thus, setting up a new master automatically establishes a new MDU segment. You remove a device from a network by dragging it from the opened network to the list of "Unused devices". It is then once again available there as a "free device".
52 Network management work name of your choice here. Select the network mode (MDU or peer-to-peer) and click on OK. The new network is created as a tab in the "dLAN network" window. Clicking on the corresponding tab displays the network in the dLAN network window. You can change the order of the networks that can be displayed by individually dragging the tabs for the networks to the left or right using the mouse. 4.2.
Network management 4.3 Managing networks 4.3.1 Finding dLAN devices 53 In the Device menu, you can perform a targeted search for specific dLAN devices through all of the networks and lists available in the database after clicking on Search devices. This brings up a horizontally divided dialog window that lists all of the known dLAN devices (including their description, MAC address and, if assigned, the current network name and current profile assignment) in the lower area.
54 4.3.2 Network management Setting compatibility mode If you have created a dLAN segment, you can set the compatibility mode for the respective segment. To do so, right-click on the network name at the root of the network tree and select the Compatibility mode option from the network's context menu. Here you can select between HomePlug AV mode and Coax mode. Fig.
Network management 4.3.3 55 Updating firmware If new dLAN devices are registered with dLAN AVpro manager, their firmware is updated to the most up-to-date version automatically in the background as soon as a new firmware version is available to dLAN AVpro manager. Clicking on the Help menu opens the About dLAN AVpro manager window, which displays the version number of dLAN AVpro manager and the currently offered firmware states. Fig.
56 4.3.4 Network management Assigning profiles You can configure profiles in the Database menu or using the Edit/create profiles selection button (see Chap. 3). You can assign these profiles to individual dLAN devices, dLAN segments (MDU mode) or entire dLAN networks as your needs dictate. Special procedures are available to you for this. If a profile is assigned to a dLAN device, the profile name is displayed next to the respective device in the list for the network opened in the "dLAN network" window.
Network management 57 In the context menu, select the option Assign profile to network; wait until the list containing the available profile names drops down and select the desired profile from it. The settings for the respective profile are immediately assigned to the dLAN devices for the segment. 4.3.4.3 Assigning a profile to a specific dLAN device Right-click on the name of the respective device to open its context menu. Select the menu item Edit properties. Fig.
58 4.3.5.1 Network management Network update After you have made a change in a network using dLAN AVpro manager, enable this change by calling up the network's context menu by right-clicking on the network name in the opened network and clicking on Update network in the context menu. This function is not available if Automatic update (see Chap. 4.3.5.3) is active. The network is inaccessible during an update. The following message is output: Fig. 31: Network update message 4.3.5.
Network management 4.3.5.3 59 Automatic update The Automatic update feature ensures that each change is immediately transmitted to the respective devices and is activated there. The feature works on all of the networks in the database. You can enable this function by clicking on the menu item Automatic update in the Network menu or pressing the function key F7. The following message appears: Fig. 32: Message during ongoing "Automatic update" process You have to confirm this message with OK.
60 4.3.6 Network management VLAN settings Some dLAN devices have special features for processing tagged VLAN data traffic in accordance with IEEE 802.1Q and IEEE 802.1p. You can also use this to take advantage of the various benefits of VLANs in your dLAN. VLAN is an abbreviation for Virtual Local Area Network. To change VLAN settings for a dLAN device in a network, open the device's context menu by right-clicking and click on the menu item Edit VLAN settings in the context menu.
Network management 61 the 4094 possible VLAN IDs are required in most applications, VLAN numbers are automatically numbered consecutively, making it much easier to maintain an overview during configuration. VLAN number 1 2 3 4 5 VLAN ID 1 140 30 50 55 Description Management network DMZ IP telephony Workstations Guest WLAN Table 1: Example assignment In the Edit VLAN settings dialog (see Fig.
62 4.4 Network management Remote access dLAN AVpro manager offers you the option of managing dLAN networks remotely. You have to completely meet the following prerequisites for this: 1. The instance of dLAN AVpro manager from which you want to undertake remote access has the database for this remote dLAN. 2. The computer on which this instance of dLAN AVpro manager is installed has an Internet connection. 3. You have received a Connect ID from devolo. This authorises you to run remote access. 4.
Network management 63 stances of dLAN AVpro manager. The devolo Connect server checks the Connect ID you have provided. If it is correct, you can continue with remotely accessing the dLAN networks you have at other locations. If the Connect ID you provided is incorrect, an error message is output and the connection to the devolo Connect server is closed. 4.4.
64 Network management You can then exclusively access the dLAN network at the selected location remotely via this communication channel. You can access multiple dLAN locations remotely at the same time. No other authorised persons can access the respective dLAN network for configuration purposes while the communication channel to the dLAN network is occupied by your remote access connection at one location. 4.4.
Network management 4.4.5 65 Important notes on remote access 1. The communication channel to the respective dLAN network is open for you if you are accessing it remotely. It remains reserved for you until you end remote access. You can leave remote access enabled continuously. 2. Protect your Connect ID from unauthorised use! 3.
66 Network management 6. When remote access is in progress, there is a risk that configuration changes to the dLAN network can result in the connection to the devolo Connect server being severed accidentally. To minimise this risk, you have to tell dLAN AVpro manager which dLAN devices are being used to connect to the Internet. The Couple option is available in the context menu of devices in the respective network for this purpose. Clicking on Couple marks a device as required for remote access.
Troubleshooting 5 Troubleshooting 5.1 Replacing defective devices 67 If a dLAN device in a dLAN network (local or remote) fails and has to be replaced, you can configure a locally available dLAN device as a replacement device using dLAN AVpro manager by transferring the configuration of the defective device to the replacement device on a 1:1 basis. If you follow this procedure, no further configuration steps are needed onsite.
68 Troubleshooting c) Finally, all that remains to be done onsite is to swap in the replacement device, which has already been logically integrated into the respective network, and swap out the defective device. In the database of the respective network, (r) (=’replaced’) is automatically appended to the description of the replaced dLAN device to indicate the replacement. 5.1.2 Calling up the list of the replaced dLAN devices of the network In the Device Menu (see Chap. 2.6.1.
Troubleshooting 5.1.3 69 Replacing the device in the network (without the database of the network) If the database of the respective network is not available, you have to configure a locally connected dLAN device manually so that afterwards, it can replace the device to be replaced in the respective network on a 1:1 basis. There are multiple alternative approaches for doing this: a) You can register the device with dLAN AVpro manager as described in Chapter 4.2.2.
70 Troubleshooting From the five options offered, select the network mode and the function of the device to be replaced in its network. Fig. 37: Configuring local device Peer-to-Peer mode: The dLAN device is working in a P2P dLAN and there, has no preference regarding a separate role as CCo. Peer-to-Peer mode (always CCo): The dLAN device is working in a P2P dLAN, where it is the CCo. Peer-to-Peer mode (never CCo): The dLAN device is working in a P2P dLAN, where it is never the CCo.
Troubleshooting 5.2 71 Resetting the dLAN device to factory defaults Using the dLAN AVpro manager, you can reset a locally connected dLAN device to the factory settings. This can be necessary, for example, if the device can no longer be reached due to a configuration error. There are two alternatives for carrying out the device reset: a) First, register the corresponding device with dLAN AVpro manager (see Chap. 4.2.2). This causes the device to appear in the list of „Unused devices“.
72 Troubleshooting devolo dLAN AVpro manager
Security and access protection 6 Security and access protection 6.1 Setting a network password 73 dLAN AVpro manager automatically assigns a network-specific network password to all of the dLAN devices in a network. There are two reasons for this: Using a shared network password, a logical segment [a 'password sphere'] is defined.
74 6.1.2 Security and access protection Individualised network password You can replace the default network password with an individualised network password as desired; you can create and assign it as follows: a) Select the respective network by left-clicking on the name of the network in the "dLAN networks" window. b) In the Network menu, call up the menu item Network password. Enter the desired network password in both fields here. OK is enabled if there were no errors with the entry.
Security and access protection 6.1.2.1 75 Notes for the dLAN 200 AVpro Wireless N Note the following if you are using a dLAN 200 AVpro Wireless N: the network password is set using dLAN AVpro manager or via the dLAN encryption button (pushbutton), the password is forwarded to the device automatically. In this case, all of the dLAN settings made in the dLAN 200 AVpro Wireless N's own configuration interface are irrelevant.
76 6.2 Security and access protection Access protection In addition to the option of securing data transmission against interception by third parties using a network password, you can also protect dLAN AVpro manager, its databases and the dLAN devices from unauthorised access by third parties by using a password. 6.2.
Security and access protection 77 c) If you want to delete or replace the existing database password, call up the menu item AVpro manager password in the Database menu and enter the existing password in the topmost input field. You can delete the existing database password by leaving both input fields empty and clicking on OK. You can replace the existing database password by entering a new database password in both input fields and clicking on OK. Fig.
78 Security and access protection This opens the following dialog: Fig. 41: Changing the encryption key for a dLAN device Enter the database password in the Password and Confirm password input fields. The OK button is enabled if both entries are the same. Now confirm your input by clicking on OK. c) Repeat step (b) for each additional dLAN device in the network that you would like to protect from being transferred into another database in this way.
Annex 7 Annex 7.1 Revision history 79 Version 2.0 Support of peer-to-peer mode Access and password protection for databases and devices Remote firmware upgrade Multi-segment mode Version 3.
80 Annex Version 5.2.1 Support of the dLAN 200 AVpro Wireless N product Version 6.
Annex 7.2 81 Example of a device file To make setting up networks easier, we recommend that you manage the identifier data of the dLAN devices of your network in a text file. You can quickly and easily import this device file in dLAN AVpro manager into the list of "Unused devices" in the database. Each line of this device file may contain only one entry for a device; this entry must consist of at least the security ID and the MAC address of the dLAN device.
82 7.3 Annex Status symbols of dLANs and dLAN devices From the status symbol that dLAN AVpro manager prefixes to the network/device name in the device lists, you can read out the type of each dLAN and the status of each dLAN device.
Annex 83 Table 4: Status symbols of AVpro devices Status symbol Meaning Available AVpro device (in the list of "Unused devices") AVpro in the P2P dLAN (online) AVpro in the P2P dLAN (offline) AVpro in the P2P dLAN (busy, device is being updated) AVpro as CCo AVpro in the P2P dLAN: Incorrect database password, AVpro adapter not accessible.
84 Annex Table 4: Status symbols of AVpro devices Status symbol Meaning AVpro as master (busy, device is being updated) AVpro as slave (unknown status) AVpro as slave (online) AVpro as slave (offline) AVpro as slave (busy, device is being updated) Table 5: Status symbols of AVpro WP devices Status symbol Meaning Available AVpro WP device (in the list of "Unused devices") AVpro WP in the P2P dLAN (online) AVpro WP in the P2P dLAN (offline) AVpro WP in the P2P dLAN (busy, device is being updated) devo
Annex 85 Table 5: Status symbols of AVpro WP devices Status symbol Meaning AVpro WP as CCo AVpro WP in the P2P dLAN: Incorrect database password, AVpro WP device not accessible. AVpro WP as MDU: available only locally as slave or not available locally as master AVpro WP as master (unknown status) AVpro WP as master (online) AVpro WP as master (offline, e.g.
86 Annex Table 5: Status symbols of AVpro WP devices Status symbol Meaning AVpro WP as slave (online) AVpro WP as slave (offline) AVpro WP as slave (busy, device is being updated) Table 6: Status symbols of AVpro DINrail devices Status symbol Meaning Available AVpro DINrail device (in the list of "Unused devices") AVpro DINrail in the P2P dLAN (online) AVpro DINrail in the P2P dLAN (offline) AVpro DINrail in the P2P dLAN (busy, device is being updated) AVpro DINrail as CCo AVpro DINrail in the P2P d
Annex 87 Table 6: Status symbols of AVpro DINrail devices Status symbol Meaning AVpro only available locally as slave or not available locally as master AVpro DINrail as master (unknown status) AVpro DINrail as master (online) AVpro DINrail as master (offline) AVpro DINrail as master (busy, device is being updated) AVpro DINrail as slave (unknown status) AVpro DINrail as slave (online) AVpro DINrail as slave (offline) AVpro DINrail as slave (busy, device is being updated) devolo dLAN AVpro manager
88 Annex Table 7: Status symbols of AVpro Wireless N devices Status symbol Meaning Unknown AVpro Wireless N device (offline) AVpro Wireless N in the P2P dLAN (offline) AVpro Wireless N in the P2P dLAN (online) AVpro Wireless N in the P2P dLAN (busy) AVpro Wireless N as CCo AVpro Wireless N in the P2P dLAN: Incorrect database password, AVpro Wireless N device not accessible AVpro Wireless N as slave (unknown status) AVpro Wireless N as slave (offline) AVpro Wireless N as slave (online) AVpro Wireless N
Annex 89 Table 7: Status symbols of AVpro Wireless N devices Status symbol Meaning AVpro Wireless N as master (offline) AVpro Wireless N as master (busy) AVpro Wireless N only accessible locally as a slave or not accessible locally as a master devolo dLAN AVpro manager
90 7.
Annex 91 Keyboard command Function Ctrl-Shift-Tab Only if multiple networks can be selected: Select previous network tab Ctrl-Num1* Jump to "dLAN network" window Ctrl-Num2* Jump to list of "Unused devices" * Numbers on the number pad devolo dLAN AVpro manager
92 7.5 Annex VLAN scenarios Different applications can logically and securely be separated from each other within a dLAN by using VLANs. If multiple organisation areas use the same dLAN, the network setup can ensure that each organisation area only has access to its own VLAN by configuring VLANs and assigning these VLAN to the different organisation areas.
Annex 93 Fig.
94 Annex Scenario B: "VLAN home office" application The following basic conditions apply to this scenario: Private home data are transmitted via "VLAN 1"; business data are transmitted via "VLAN 2": in the office, the printer uses "VLAN 2", "VLAN 1" is for computers + personal data The router assigns rights accordingly dLAN 200 AVpro Wireless N in the residential rooms Private home computers also have access to the printer Fig.
Annex 95 Scenario C "Building with VLAN and WLAN" application The following basic conditions apply to this scenario: The dLAN includes a large building with multiple floors meeting rooms are located on different floors Guests have access to the Internet in the meeting rooms via a WLAN The WLAN is made available via a VLAN for being able to assign rights. A router is used to assign rights dLAN 200 AVpro Wireless N dLAN devices are being used Various Fig.
96 Annex Scenario D "Building networking" application The following basic conditions apply to this scenario: Company XY is spread over two neighbouring buildings buildings are connected by means of dLAN using a two-wire line; dLAN 500 AVpro UNI devices are being used Alternatively, dLAN 200 AVpro Wireless N could also be used with bridge mode (Client – AP) Different departments are mapped Example: Development and IT have access to printers The departments are spread across both buildings E
Annex 97 Scenario E "Medical practice" application The following basic conditions apply to this scenario: Medical practice with multiple treatment rooms (each with a computer, printer and telephone); office (computer, printer and telephone); reception (computer, printer and telephone); waiting room (TV); lab (computer and telephone) A VLAN is used for VoIP telephony, prioritised accordingly by the router Patient data are accessed as needed on the extranet via another VLAN with high priority T
98 Access protection 44 Advanced Encryption Standard 4 AES 4 Attenuation budget 34 AVpro DINrail 6 devolo Connect ID 22 devolo Connect server 63 Disconnect 63, 64 dLAN 200 AVpro 2 7 dLAN 200 AVpro WP 6 dLAN 200 AVpro2 6 dLAN priority level 37 dLAN segment 31 dLAN 200 AVpro Wireless N 6 dLAN 500 AVpro UNI 6 Downstream bandwidth 34 B E Index Numerics 128-bit triple AES encryption 4 A Bandwidth limitation 34 Barrier filter 6 best effort 37 Broadcast storm 43 Brute force (attack method) 4 bulk 37 Enable
99 Location of the device 24 M MAC address 81 Master 5 Master's MAC address 73 MDU 5 Modulation table 6 Multiple Dwelling Unit 5 Multi-segment mode 31 Slave 5, 34 Standards 4 Standby 42 T Network menu 20 Network root 45 Network segment (logical] 5 Notch filter 6 Target address 39 Target MAC address 39 Target port number 39 Telephone cabling 6 Transfer bandwidth 35 Transmission capacity 6 Transmitting power 35 Triple play services 37 TV/SAT 6 Two-wire cabling 6 Tx Force Untag 61 P U Peer-to-peer 5 PL
100 devolo dLAN AVpro manager
