Part Number: 940433-001 Copyright 2004 by Hypercom Corporation All rights reserved. Printed in the United States of America. This publication is propriety to Hypercom and intended solely for use by Hypercom customers. It may not be reproduced or distributed for any purpose without the written permission of Hypercom. The information Hypercom furnished in this publication is believed to be accurate and reliable. However, Hypercom assumes no responsibility for its use.
Table of Contents Chapter 1 - Introduction Product Overview ...................................................................................................................... 1 Product Features ....................................................................................................................... 1 In This Document ...................................................................................................................... 2 Chapter 2 - Software Information Overview ...........
Table of Contents Transaction Settings Screen ............................................................................................. 44 Chapter 4 - Control Panel Overview ................................................................................................................................. 45 File Management Functions .................................................................................................... 46 Loading Firmware ...................................................
Table of Contents Performing a Hex Dump ................................................................................................. 90 Determining the NIIs in Use ........................................................................................... 90 Chapter 8 - SNMP Traps Overview ................................................................................................................................. 91 SNMP Usage ......................................................................
Table of Contents vi Hypercom Corporation
Chapter 1: Introduction Product Overview The Hypercom® IN-tact™ 1101 is an IP gateway device that provides protocol conversion and secure managed connections for Hypercom Point of Sale (POS) terminals. The product is used to convert transactions on a Hypercom POS LAN (HLAN) to Internet Protocol (IP) transactions over Ethernet UTP. The IN-tact 1101 allows you to use your current POS LAN and take advantage of a DSL or cable modem Ethernet connection to access a host using TCP/IP protocol.
Introduction In This Document • Supports industry-standard Secure Socket Layer (SSL) for secure transactions over the Internet • Easy-to-install procedure allows devices to be delivered fully configured to customer locations • Supports SNMP services for use with existing customer-provided management systems • Includes integrated Web server allowing secure management via standard Web browser. In This Document This document provides information for configuring the IN-tact 1101 IP gateway device.
Chapter 2: Software Information Overview The IN-tact 1100 Series IP Gateways are software-driven devices. The functions that a particular model can perform depend on the version of application software that has been loaded into the unit’s memory at the factory. Configuration is performed via a Web Server interface, providing the IN-tact 1101 with a unique IP address and personality. This document discusses the IN-tact 1101 model and how the device is configured using the on-board Web Server.
Software Information Operating Modes Other models of modems may also work with the IN-tact 1101. However, unlike supported modems, the Last Modem Connect Speed may not be reported correctly on the Dial Backup Status screen. Within the IN-tact 1101, availability of the Ethernet port is constantly monitored. Once dial backup is enabled, any outage of the Ethernet port lasting longer than five seconds automatically triggers the device to switch to dial backup mode.
Operation without an Ethernet Connection Software Information Operation without an Ethernet Connection The IN-tact 1101 can be configured to use only the modem with a PPP connection instead of using Ethernet, but an Ethernet connection must initially be available in order to configure the device for this type of operation. To set up for this type of configuration: 1. 2. Attach the Ethernet cable and log in using the IN-tact 1101 IP address.
Software Information 6 Operation without an Ethernet Connection Hypercom Corporation
Chapter 3: Configuring the IN-tact 1101 Overview No CD-ROMs or diskettes are required to configure the IN-tact 1101. All configuration is done via a resident Web Server application, or alternately, through a SNMP manager. Initial configuration can only be accomplished via the Web Server application. SNMP is disabled by default. You can connect to the Web Server application using an Internet browser.
Configuring the IN-tact 1101 Before You Begin Login and Timeouts For security, the Web Server has a five-minute timeout by default. However, this can be changed during configuration to be up to an hour. You can also completely disable the timeout feature. It is suggested that you gather all configuration information, such as terminal CU addresses, host processor configuration, IP address,etc. before you begin the configuration process.
Before You Begin Configuring the IN-tact 1101 IP Addressing You must determine whether to use static IP addressing or DHCP-assigned IP addressing. This is important because the unit is set to seek a DHCP address by default. Before configuration, the IN-tact 1101 automatically tries to obtain a DHCP address three times when first powered on. If a DHCP address is not found, the unit reverts to and operates at its default static IP address of “192.168.1.20”.
Configuring the IN-tact 1101 Configuration Procedure Materials Required You will need the following in order to configure the IN-tact 1101: • A laptop or desktop PC with Internet browser (Microsoft Internet Explorer, version 5.0 or higher. Other browsers are not currently supported.) • Two standard Ethernet cables (any length) - one to connect your PC to the hub; the other to connect the hub to the IN-tact 1101.
Configuration Procedure 2. 3. 4. 5. Configuring the IN-tact 1101 (direct connection to the PC requires a crossover Ethernet cable). Connection to a terminal or terminal network is not required in order to configure the device. Apply power to the IN-tact 1101 and power on your PC. By default, the IN-tact 1101 seeks a DHCP IP address. Both LEDs on the LAN port will flash in short intervals as the unit seeks a DHCP IP address. This takes about 15 seconds.
Configuring the IN-tact 1101 Configuration Procedure This window is displayed by Internet Explorer and allows you to view certificate details and install a certificate on your computer. To install the Hypercom certificate on your machine, click Install Certificate and follow the instructions presented by the Import Certificate wizard. 7. On the Login screen, enter the default password “12345678” and click OK.
Configuration Procedure Configuring the IN-tact 1101 NOTE: You must set the password within the five-minute time period; it is suggested you do so immediately. If the time limit expires, you will have to reset the device in order to log in.
Configuring the IN-tact 1101 Configuration Procedure Password guidelines: • • • • • • There is one default user name (admin) and it cannot be changed The new password cannot be the same as the default The password can be changed whenever necessary on the System Setup - Security screen There is no password expiration period; the password you set remains valid until it is changed A minimum of eight characters are required, maximum of 32 characters Mixed case (upper and lowercase) is permitted To change th
Navigation Configuring the IN-tact 1101 Navigation The IN-tact 1101 configuration navigation tree is easy to understand; its operation is similar to Internet Explorer and other like applications. Shown below are examples of the navigation tree in its initial state of completely collapsed, fully expanded, and a subset of the configuration screens. • Click on the + or - symbols to expand or close branches of the tree • Click on any screen name to invoke that screen.
Configuring the IN-tact 1101 Using the Toolbar Using the Toolbar A toolbar displays near the upper-right corner of each IN-tact 1101 screen. Only the buttons applicable to the selected screen display. For example, most configuration screens display both an Apply and Restart button and a Save and Continue button. Read-only screens, like Overview, display only a Help and Print button. It is important to understand how the buttons work and which one you should use in a particular situation.
Configuration Screens Configuring the IN-tact 1101 Configuration Screens IN-tact 1101 Overview Screen The Overview screen is your starting point on the IN-tact 1101 and appears whenever you log in to the device or click Overview on the navigation tree. It provides a quick overview of current settings, along with identification information to help you confirm that you are connected to the correct device. The Overview screen is read only; there are no fields or required entries.
Configuring the IN-tact 1101 Configuration Screens Field Description Contact This can be the name of the administrator, support group, help desk, or other entity to contact for information about this configuration.This information is entered on the System Settings screen. MAC Address Current MAC address of the IN-tact 1101. This is not normally changed, but can be configured on the Ethernet Port Settings screen. IP Address Current IP address of the IN-tact 1101.
Configuration Screens Configuring the IN-tact 1101 System Settings Screen On the navigation tree, click IN-tact Setup > System Setup > System. The System Settings screen appears: This screen is used to configure basic information about the IN-tact 1101. Entries on this screen also appear on the Overview screen. Field/Button Description Description Use this field to define the device type (IN-tact 1101) or its purpose, such as "IP gateway for POS network.
Configuring the IN-tact 1101 Configuration Screens Ethernet Port Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Ethernet Port. The Ethernet Port Settings screen appears: Use this screen to set basic communication parameters for the Ethernet Port on the IN-tact 1101. Only IP version 4 is supported. The MAC address can be changed in the rare event that MAC address filtering or other firewall issues are preventing the provided MAC address from working correctly.
Configuration Screens Configuring the IN-tact 1101 Ethernet Port Advanced Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Ethernet Port > Advanced. The Ethernet Port Advanced Settings screen appears: Several additional settings are available by clicking Advanced on the Ethernet Port Settings screen. These settings can be used to “fine tune” IN-tact 1101 performance on your network.
Configuring the IN-tact 1101 Configuration Screens Field/Button Description Session Inactivity Timeout (seconds) Use the up and down arrows to set the number of seconds a session should remain active after no activity is detected. The default is 15 seconds. The minimum setting is five seconds, the maximum is 256 seconds. Note: This inactivity timer may have to be increased beyond the default setting to allow for larger messages, particularly when slow baud rates are in use.
Configuration Screens Configuring the IN-tact 1101 Security Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Security. The Security Settings screen appears: This screen is used to set IN-tact 1101 security features. It also appears the first time you log in to the device with the default password. If you have already set the password, you can skip this screen and continue with configuration. You can change the IN-tact 1101 password whenever necessary.
Configuring the IN-tact 1101 Configuration Screens Web Interface Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Web Interface. The Web Interface Settings screen appears: You have the option of restricting access to the IN-tact 1101 web server to a specific IP address (or range of addresses). This is useful in preventing unauthorized access attempts on the device from IP addresses outside your normal range of operation.
Configuration Screens Configuring the IN-tact 1101 stating "Your session is no longer valid. Please log in again." when they select a screen. Any changes made by User 1 that have not been saved with Apply and Restart are discarded. Field/Button Description Restrict Access to Web Server Use this checkbox to enable a specific range of IP addresses that will be able to contact the Web Server application. IP Address 1 Enter the first IP address that will be able to access the Web Server.
Configuring the IN-tact 1101 Configuration Screens SNMP Interface Settings Screen On the navigation tree, click IN-tact Setup > System Setup > SNMP Interface. The SNMP Interface Settings screen appears: SNMP management of the IN-tact 1101 is optional. The device is capable of hosting two separate SNMP sessions. Use this screen to configure the IP address for each of the sessions. Trap forwarding is optional and can be used independently of SNMP management.
Configuration Screens Configuring the IN-tact 1101 Dial Backup Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Dial Backup. The Dial Backup Settings screen appears: The IN-tact 1101 features dial backup capability in the event of ISP (or other) outage that affects the ability to process transactions via the device's Ethernet port.
Configuring the IN-tact 1101 Configuration Screens Other models of modems may also work with the IN-tact 1101. However, unlike supported modems, certain status screens may not accurately reflect correct values. Within the IN-tact 1101, availability of the Ethernet port is constantly monitored. Once dial backup is enabled, any outage of the Ethernet port lasting longer than 5 seconds automatically triggers the IN-tact 1101 to switch to dial backup mode.
Configuration Screens Configuring the IN-tact 1101 Field/Button Description Authentication Methods Allowed Click the CHAP and PAP checkboxes as necessary to match the authentication being used with this host processor. Both are enabled by default. User Name/Password If authentication is being used, enter both the User Name and Password to be transmitted in the appropriate fields. Retype Password Type the password again in the Retype Password field to confirm the password.
Configuring the IN-tact 1101 Configuration Screens Advanced Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Dial Backup >Advanced. The Advanced Dial Backup Settings screen appears: This screen allows you to set several advanced options associated with the dial backup feature. You can specify how long the modem will stay connected with no activity and how often the IN-tact 1101 checks to see if the Ethernet connection has been re-established.
Configuration Screens Configuring the IN-tact 1101 Field/Button Description Inactivity Disconnect Timer Use the Hours and Minutes fields to specify the amount of time you would like the IN-tact 1101 to hold the modem connection open after the last transaction was processed. The modem will automatically disconnect after the time you specify here transpires. By default, this is set to five minutes. The valid range of entries is between zero minutes and 24 hours.
Configuring the IN-tact 1101 Configuration Screens Time Settings Screen On the navigation tree, click IN-tact Setup > System Setup > Time. The Time Settings Screen appears: Use this screen to enable and configure SNTP timekeeping on the IN-tact 1101. If enabled, you will not be able to set system time for the device on the Set System Time screen. Instead, the IN-tact 1101 will keep time according to an NTP server.
Configuration Screens Configuring the IN-tact 1101 Field/Button Description Enable SNTP Click this checkbox to enable SNTP, the device will automatically obtain current time from a SNTP server on the network. You must Apply and Restart before this change will become effective. SNTP is disabled by default. Time Zone Configuration Time Zone Use this panel to select the time zone where the IN-tact 1101 is located.
Configuring the IN-tact 1101 Configuration Screens Terminal Port Settings Screen On the navigation tree, click IN-tact Setup > Application Setup > Terminal Port. The Terminal Port Settings screen appears: Use this screen to set the communication parameters for connection to your HLAN terminal network. Your settings here should match the configuration of your terminal network. You are required to configure at least one terminal for the IN-tact 1101 to be operational.
Configuration Screens Configuring the IN-tact 1101 Host Port Settings Screen On the navigation tree, click IN-tact Setup > Application Setup > Host Port. The Host Port Settings screen appears: This is the first of three screens used to set up host processors. This screen consists of several fields that allow you to configure basic information for each of your host processing functions. Each row represents a unique NII for routing to a specific host function.
Configuring the IN-tact 1101 Configuration Screens transactions to a processor for troubleshooting purposes or other reasons. All IP addressing information remains intact. When you are ready to resume sending transactions to a processor you have disabled, click Enabled to resume normal operation. 4. There are three Connection Types - Standard, HTTP, and Merchant Link. Use the drop-down list to choose the appropriate type for this host processor, then click Edit at the end of the row.
Configuration Screens Configuring the IN-tact 1101 Field/Button Description NII This is the NII routing code entered for this processor on the Host Port Settings screen. It is provided as a reminder of which processor you are currently working with. Description This is the description (or name) entered for this processor on the Host Port Settings screen. It is provided as a reminder of which processor you are currently working with.
Configuring the IN-tact 1101 Configuration Screens Permanent Mode Settings (Used when configuring connections requiring a permanent connection mode) On the navigation tree, click IN-tact Setup > Application Setup > Host Port. Click Edit, then select a permanent connection type. Click Edit again. This screen provides an option for how transaction headers are handled for permanent connection types. The Hypercom POS LAN Header and TPDU are required for permanent connections.
Configuration Screens Configuring the IN-tact 1101 On Demand Mode Settings (Used when configuring connections requiring a on demand connection mode) On the navigation tree, click IN-tact Setup > Application Setup > Host Port. Click Edit, then select an on-demand connection type. Click Edit again. This screen allows you to further define options for an on demand connection type. Options include how transaction headers and certain protocol settings are handled by the IN-tact.
Configuring the IN-tact 1101 Configuration Screens Field/Button Description Use STX/ETX Wrapper Use this checkbox to enable Start of Text (STX) and End of Text (ETX) wrappers if required by the host. This option is used primarily for hosts that don't run Visa protocol, but want to use async framing. Discard ACKs Use this checkbox to discard any ACKs sent by the terminals, rather than sending them to the host.
Configuration Screens Configuring the IN-tact 1101 HTTP Host Settings Screen (Used when configuring connections requiring HTTP protocol) On the navigation tree, click IN-tact Setup > Application Setup > Host Port. Select HTTP Connection Type and click Edit. The IN-tact 1101 uses the addressing information entered here to route transactions to the appropriate destination. Both a primary and alternate IP address or URL can be configured for each host processing function.
Configuring the IN-tact 1101 Configuration Screens Field/Button Description Include Length Field in Length Calculation As mentioned above, the first two bytes of the POS LAN header are a length indicator. This option determines whether or not these first two bytes are included as part of the length calculation. This option should be set to match host processor configuration. Include TPDU The TPDU is the next five bytes of the POS LAN Header and includes information used for routing purposes.
Configuration Screens Configuring the IN-tact 1101 Merchant Link Host Settings Screen (Used when configuring connections that require a Merchant Link gateway) On the navigation tree, click IN-tact Setup > Application Setup > Host Port. Select Merchant Link connection type and click Edit. The IN-tact 1101 uses the addressing information entered here to route transactions to the appropriate destination. Both a primary and alternate IP address or URL can be configured for each host processing function.
Configuring the IN-tact 1101 Configuration Screens Click Back, Save and Continue or Apply and Restart as appropriate. Keep in mind that your changes are not written to persistent memory until you click Apply and Restart. Transaction Settings Screen On the navigation tree, click IN-tact Setup > Application Setup > Transaction Processing.
Chapter 4: Control Panel Overview Each of the Control Panel screens and functions are explained in detail in this section. As the name suggests, Control Panel functions allow you to control certain IN-tact 1101 operations.
File Management Functions File Management Functions On the navigation tree, click Control Panel > File Management. The File Management Functions screen appears: This screen is used to import and export files to/from the IN-tact 1101. This includes upgraded firmware, configuration files, and SSL certificates.
File Management Functions Loading Firmware Use this procedure to load and upgrade firmware for the IN-tact 1101. This process interrupts normal operations. The IN-tact 1101 will automatically reset and load the new firmware once loading is complete. To load firmware: 1. Download the upgraded firmware to your local machine. Contact Hypercom for further information on firmware upgrades. 2.
File Management Functions Loading a Configuration to the IN-tact 1101 This function allows you to load a configuration file from your local machine to the IN-tact 1101. This is useful in situations where you may be configuring several units. Rather than having to configure all of the IN-tact 1101 settings for each unit, you can simply load a previously exported configuration file that has the correct settings, then make any minor adjustments as necessary. To load a configuration the IN-tact 1101: 1.
File Management Functions To load an SSL certificate: 1. Verify that the certificate is in PEM format. PEM-formatted certificates generally end with a PEM extension and are viewable in Notepad. A typical PEM certificate might appear as: There may be other sections and other data within the file. If the certificate is not in PEM format, then it must first be converted using OpenSSL (a freely available software package on the Internet) before the IN-tact 1101 can use it. 2.
File Management Functions Deleting an SSL Server Certificate from the IN-tact 1101 This function erases the selected SSL certificate file from the IN-tact 1101. To delete an SSL certificate: 1. From the File Management Functions screen, select the stored certificate from the drop-down list (near the bottom of the screen). NOTE: The drop-down list and the Delete button are available only when certificates are present in the system. 2. Click Delete.
System Operations Screen System Operations Screen On the navigation tree, click Control Panel > System Operations. The System Operations screen appears: Use this screen to perform various reset functions on the IN-tact 1101. Field/Button Description Restart Device Click to perform a hardware reset of the IN-tact 1101. This is the same as a system reboot and causes the IN-tact 1101 to reload all configured information as if you powered off, then back on.
System Operations Screen Field/Button Description Restore to Factory Defaults Click to erase the current configuration, any upgraded firmware, and restore all settings to those as shipped from the factory. WARNING: Use the previous two options only as the last resort! Performing these operations erases all IP addresses and other information and the IN-tact unit will have to be completely reconfigured before it can process any transactions.
Set Date/Time Screen Set Date/Time Screen On the navigation tree, click Control Panel > Set System Time. The Set System Date/Time Function screen appears: It is important to accurately set the time for the IN-tact 1101. Because some diagnostic functions, like event logging, use a wrap-around buffer to capture information, you will not be able to tell when specific events have occurred without a time reference. This is also important for SSL functions; the certificates will not be authenticated correctly.
Clear Statistics Screen Clear Statistics Screen On the navigation tree, click Control Panel > Clear Statistics. The Clear Statistics Function screen appears: Use this screen to permanently remove all current statistical data from the IN-tact 1101. This can be useful when troubleshooting problems and you wish to collect fresh statistical data. When you click Clear All Statistics, a confirmation message displays. Clicking OK causes all statistical data to be permanently removed.
Dial Backup Dial Backup On the navigation tree, click Control Panel > Dial Backup. The Dial Backup Functions screen appears: Dial backup operation is automatic when the IN-tact 1101 detects that transactions cannot be routed via the Ethernet port. However, you can also manually control dial backup operation using this screen.
Dial Backup Field/Button Description Dial and Route Transactions over Dial Link Click Dial to immediately dial the alternate processor, establish connection, and begin routing transactions via the modem. Disconnect Dial Click to disconnect the modem from either the primary or alternate host processor as soon as possible. If you are connected to the IN-tact via PPP (rather than the Ethernet interface) and click this button, you will be disconnected.
Chapter 5: Status Functions Overview Each of the IN-tact 1101 status functions are explained in detail in this section. Status functions allow you to monitor IN-tact 1101 operations and view statistical information about transactions, response times, terminal activity, and uptime. This can be useful information when monitoring performance or when troubleshooting possible problems.
System Status Screen System Status Screen On the navigation tree, click Status > System. The System Status screen appears: This screen is divided into two sections. The upper portion of the screen provides important “at a glance” information to help you quickly determine whether the IN-tact 1101 and its associated terminals are up and operating correctly. The lower portion of the screen provides reference information about the firmware currently loaded and running on IN-tact 1101.
System Status Screen Field/Button Description Current IN-tact 1101 Status: Current Status There are two possible displays: OK: indicates that the device has been configured and is working correctly Not Configured: indicates that the IN-tact 1101 has not been properly configured. Go to System Setup and configure the device. Current Mode Indicates whether the IN-tact 1101 is operating in “normal” mode or “install” mode. Install mode is used to test terminal communications and should not be left on.
Terminal Port Terminal Port On the navigation tree, click Status > Terminal Port. The Terminal Port Status screen appears: This screen provides a table that allows you to quickly analyze the status of all enabled terminals and see response time measurements (RTM). From these, you can determine what your average (or normal) response time is over a period of time. No configuration is done here; all terminal configuration is done on the Terminal Port Settings screen.
Host Port Status Screen Host Port Status Screen On the navigation tree, click Status > Host Port. The Host Port Status screen appears: This screen provides a table that allows you to quickly analyze the status of all enabled host processors. There are generally two entries for each host processor, one for the primary IP/URL and one for the alternate IP/URL. Click Refresh as needed to update the status.
Host Port Status Screen Field/Button Description Status Indicates the current status of the host processor. Valid status indications are color-coded and described below. Refer to the following table for the meaning of the most common failure codes.
Dial Backup Status Dial Backup Status On the navigation tree, click Status > Dial Backup. The Dial Backup Status screen appears: Use this screen to determine the current status of dial backup operations. Three fields are of particular value when troubleshooting - Current Status, Primary Failure Code and Alternate Failure Code. Explanations of the status messages or codes that can be displayed in these fields are provided on the following pages to help you quickly diagnose any possible problems.
Dial Backup Status Field/Button Description Last Modem Connect Speed The last reported connection speed of the modem. This value is not reset when you clear statistics for the IN-tact 1101. Inactivity Timer Disconnects The number of times the modem link was disconnected due to no transactions or inactivity. Dial Attempts Total number of dial commands attempted. Failed Dial Attempts Number of attempted dial commands that failed.
Dial Backup Status TABLE 5-1. Status Messages Status Message SNMP Code Query Modem/Not Working 11 Explanation The modem did not respond to a basic modem model query command. Please use one of the supported modem types: • US Robotics 5686e • Hayes H08-15328-C • ZOOM 3048C Modem Hanging Up 12 The modem is in the process of disconnecting. TABLE 5-2. Failure Codes Status Message 0 Explanation Normal operation. 100 Unable to initialize modem. Check modem initialization string.
Dial Backup Status 66 Hypercom Corporation
Chapter 6: Diagnostics Overview The IN-tact 1101 provides event logging in order to help you isolate and troubleshoot specific events that occur on the terminal network. An event is an asynchronous message generated by the system when it encounters a specific situation. The event message contains the severity of the situation and a description. Keep in mind that not all events captured in the Event Log indicate a problem; many are part of normal operation.
Event Logging Setup Event Logging Setup On the navigation tree, click Diagnostics > Event Logging > Setup. The Event Logging Setup screen appears: In order to use the Event Log, you must set up the IN-tact 1101 to capture specific events. Use the following information to enable event logging. Also, it is important to note that SNMP traps are not filtered by the Event Log settings specified here. Field/Button Description Severity Select the severity level of events to log from the drop-down list.
Event Log View Field/Button Description Apply Click when finished setting the Event Log configuration options. The configuration is saved to persistent memory. Any changes are immediately applied; you are not required to reset the device in order for your changes to take place. Event Log View On the navigation tree, click Diagnostics > Event Logging > View. The Event Log View screen appears: The Event Log View window allows you to see any events that have occurred and have been logged.
Event Log View Use Export to create a text file of the events in your browser window. You can then save the file as necessary. Use your browser's Back button to return to IN-tact 1101 Event Log View screen after you save the file. Notepad can be used for viewing the saved file, but you must associate the .dat file extension with Notepad in order to do so. To configure the Notepad association for .dat files: 1. Click Start > Settings > Control Panel > Folder Options. 2. Click the File Types tab. 3.
Event Log View Event Log Message Text Severity Level SNMP Trap Error attempting to add a header to a buffer Error Yes Retrieved an application frame which is not a buffer msg %d Error Yes Mailbox %d is full - - message discarded Error Yes Unable to acquire buffer from pool %d Error Yes Internal state error for address %02x eDropState=0x%2x Error Yes Unable to cancel POSIX resource %d Error Yes Retrieved an invalid event message %x Error Yes Error reading from HDLC - - %s Error Yes
Event Log View Event Log Message Text Severity Level SNMP Trap Mailbox full for NII %3X Error Yes Unable to route data from TCP for destination index %02X%02X Error Yes Invalid data from TCP Error Yes Using backup host for NII %03X Warning Yes Restored primary host for NII %03X Info No Error Yes Log Interface Events Invalid Registry IFace fields @addr:0x%08x Get requested @addr:0x%08x for illegal Item ID=0x%08x Error Yes Get requested @addr:0x%08x for invalid subrange - Item ID=0x%08
Event Log View Event Log Message Text Severity Level SNMP Trap Transacton open error %d Error Yes Mailbox full for NII %3X Error Yes Unable to route data from TCP for destination index %02X%02X Error Yes Invalid data from TCP Error Yes Using backup host for NII %03X Warning Yes Restored primary host for NII %03X Info No IN-tact 1101 Software Configuration Guide 73
Event Log View 74 Hypercom Corporation
Chapter 7: Configuration Examples Overview This section provides examples of how to configure the IN-tact 1101 to meet various needs. The examples assume a basic knowledge of the IN-tact 1101 purpose and illustrate the versatility of the product. They are not intended to be a replacement for the actual steps required to configure the device. Complete configuration details, including step-by-step instructions, are contained elsewhere in this document.
System Identification - Managed System Identification - Managed This screen allows unique descriptions to be defined for each IN-tact device. This information is essential when multiple IN-tact devices are deployed on a network in order to identify each of the devices. The information entered is returned in a status display when browsing the IN-tact 1101 settings. The Device ID field is alphanumeric and its entry is sent to an SNMP manager when SNMP is utilized for network monitoring purposes.
Ethernet Port Settings - Minimal Ethernet Port Settings - Minimal These settings establish the unique identity of the IN-tact 1101’s Ethernet port. DHCP is enabled by default. However, you can disable DHCP and assign a static IP address if necessary. These values must be synchronized with the IP addressing scheme of the network: Field/Button Description MAC Address Vendor-supplied hardware address and should not be changed Static IP Address Default address assigned to all IN-tact units.
Ethernet Port Settings - Managed Ethernet Port Settings - Managed These settings establish the unique identity of the IN-tact 1101’s Ethernet port. These values will need to be synchronized with the IP addressing scheme of the network. In this case, DHCP has been disabled and static IP addressing is being used. Field/Button Description MAC Address Normally not changed.
Host Processor Setup - Minimal with Single Host Host Processor Setup - Minimal with Single Host This is an example of a single host processor configuration for a fictional processor, i.e., Acme Processing. There are three screens involved with configuring a host processor (Figs. 1, 2, & 3). Figure 1. Host Port Settings Screen - Single Host By restricting the table to a single host processor entry, the end-user terminals are expected to send all POS transactions to a single destination.
Host Processor Setup - Minimal with Single Host Figure 2. Standard Host Settings Screen - Single Host The second host processor setup page is used to define connection mode, IP addressing, and SSL usage: Field/Button Description NII The value is carried over from the first configuration screen Description The text is carried over from the first configuration screen Connection Mode Defines the permament or on-demand TCP operation to be in use.
Host Processor Setup - Minimal with Single Host Figure 3. Permanent Mode Settings Screen Field/Button Description NII NII currently being configured Description The processor currenlty being congifured Include length field in length calculation The first two bytes of the POS LAN Header are a length indicator. This option determines whether or not these first two bytes are included as part of the length calculation. This option should be set to match host processor configuration.
Host Processor Setup - Minimal with Multiple Hosts Host Processor Setup - Minimal with Multiple Hosts This is an example of a multiple host processor configuration. Three screens are used to define the host processors in use (Figures 4, 5 & 6). Figure 4.
Host Processor Setup - Minimal with Multiple Hosts Figure 5.
Host Processor Setup - Minimal with Multiple Hosts Field/Button Description Include TPDU The TPDU is the next five bytes of the POS LAN Header and includes information used for routing purposes. This option determines whether or not these five bytes are included as part of the header. This option should be set to match host processor configuration. Use STX/ETX Wrapper Use this checkbox to enable Start of Text (STX) and End of Text (ETX) wrappers if required by the host.
Host Processor Setup - Minimal with Multiple Hosts Figure 6. Permanent Mode Settings Screen Field/Button Description NII NII currently being configured Description The processor currenlty being congifured Include length field in length calculation The first two bytes of the POS LAN Header are a length indicator. This option determines whether or not these first two bytes are included as part of the length calculation. This option should be set to match host processor configuration.
Transaction Routing - Minimal Transaction Routing - Minimal Each IN-tact 1101 should be provisioned with a standard set of routing rules. The rules determine how transactions will be routed between the terminal and host: • The default NII value is needed to supply a single destination to where all transactions that cannot be matched to an NII defined in the Host Processor settings should be routed. This must match one of the configured Host NII values.
Merchant Terminal Setup - Minimal Merchant Terminal Setup - Minimal The site survey checklist provides the information needed to verify the number and location of the terminals in use at the merchant location. • HLAN speed should be determined prior to installation and configured into the terminals during installation • The terminal addresses (CU address) conform to how each terminal will be configured during installation • Terminals are enabled by clicking in the Enabled checkbox.
SNMP Setup - Managed SNMP Setup - Managed The managed approach to provisioning allows the use of Simplified Network Management Protocol (SNMP) to be enabled. • An SNMP manager station at the ISO headquarters is assigned to receive information from the IN-tact devices by entering its IP address into the Manager Address and Trap Destination fields.
SNMP Setup - Managed Determining the NII Value from a Terminal An important part of configuring the IN-tact 1101 is determining any NII codes in use. The NII code is used to route transactions from the terminal to the correct host processor. In the IN-tact 1101, this configuration is done on the IN-tact Setup > Application Setup > Host Port Settings screen. In some cases, all terminals may route to a single processor. In other cases (like this example), multiple processors may be used.
SNMP Setup - Managed Performing a Hex Dump To perform a hex dump on a terminal: ICE Series Terminals T Series Terminals 1. Enter function 99 on the terminal. 1. Enter function 99 on the terminal. Press Enter. 2. Enter the password = 028510. 2. Enter the password = 028510. Press Enter. 3. Press the Init TBL key. 3. Enter 99 again. Press Enter. 4. Press the Print key. The terminal will now start printing a hex dump. The terminal will now start printing a hex dump.
Chapter 8: SNMP Traps Overview The IN-tact 1101 SNMP agent is capable of sending out traps (asynchronous notifications) to the configured SNMP manager IP addresses. SNMP manager addressing is configured on the System Setup > Management screen. See page 24 for details on configuring this option. Each trap includes the following fields: Field Description enterprise Identifies the subsystem that generated the trap. The value is taken from sysObjectID in the system group (MIB-II).
SNMP Usage Field Description time-stamp The time between the last initialization of the network entity that issued the trap and the generation of the trap. variable_bindings Additional implementation-specific information relating to the trap. SNMP Usage SNMP requests act on a variable-per-variable basis. However, in most cases, you will want to modify multiple variable first, then after all the changes are done, submit the whole configuration and apply all of the changes at the same time.
Trap Definitions Setting the configEditionControl Variable Once the configEditionControl variable is set to “editing”, it cannot be set to the same value. A second request to do so will fail. This mechanism helps avoid collisions by different managers when changing a configuration. You can also get the current value for this variable to verify that no one else is using the SNMP interface for configuration changes.
Trap Definitions Trap File Name Description Switched to Alternate Host (7) (trapSwitchedToAlternate) Issued when switching to alternate IP address due to loss of keep alive or loss of TCP session when in permanent TCP mode Invalid Terminal Message (8) (trapInvalidTerminalMessage) Issued when an improperly formatted message is received from a terminal Terminal Poll Lost (9) (trapTerminalPollLost) Issued when a transition from receiving responses to SDLC poll to no response is detected Terminal P
Trap Definitions Variable Description StaticAlternateNTPServer Read-write variable. IP address or name of static alternate NTP server. SntpSynchronizationInterval Read-write variable. Integer with valid values from 1 through 24. For manual time synchronization, the SynchronizeSNTP variable can be used. It is a read-write variable with noAction and synchronize as its values.
Trap Definitions Error Code Error Description SNMP Trap TCP/IP/Ethernet Interface Events 04-08 Ethernet link lost - If the dial backup link is not established when the Ethernet link is lost, this message appears only in the Event Log, but not in the syslog or SNMP trap destination. Yes 04-09 Ethernet link restored Yes 04-11 Received invalid length 0x%04X from %s:%d.
Time Zone Table for SNMP Time Zone Table for SNMP Time Zone Displayed Name Numerical Identifier (GMT - 12:00) Eniwetok, Kwajalein Pacific/Kwajalein 1 (GMT - 11:00) Midway Island, Samoa Pacific/Midway 2 (GMT - 10:00) Hawaii US/Hawaii 3 (GMT - 09:00) Alaska US/Alaska 4 (GMT - 08:00) Pacific Time (US & Canada); Tijuana US/Pacific 5 (GMT - 07:00) Arizona US/Arizona 6 (GMT - 07:00) Chihuahua, La Paz, Mazatlan America/Chihuahua 7 (GMT - 07:00) Mountain Time (US & Canada) US/Mountain 8
Time Zone Table for SNMP Time Zone Displayed Name (GMT + 02:00) Jerusalem Asia/Jerusalem Numerical Identifier 36 (GMT + 03:00) Baghdad Asia/Baghdad 37 (GMT + 03:00) Kuwait, Riyadh Asia/Kuwait 38 (GMT + 03:00) Moscow, St.
IN-tact 1101 MIB IN-tact 1101 MIB The MIB used by the SNMP agent within the IN-tact 1101 can be downloaded from the Hypercom website at http://www.hypercom.com. It is in the Products/IP Gateway device section of the site.
