SMG-1100/6100 User’s Manual First Edition, January 2011 www.moxa.com/product © 2011 Moxa Inc. All rights reserved. Reproduction without permission is prohibited.
SMG-1100/6100 User’s Manual The software described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agreement. Copyright Notice Copyright ©2011 Moxa Inc. All rights reserved. Reproduction without permission is prohibited. Trademarks The MOXA logo is a registered trademark of Moxa Inc. All other trademarks or registered marks in this manual belong to their respective manufacturers.
Table of Contents 1. Introduction ...................................................................................................................................... 1-1 Overview ........................................................................................................................................... 1-2 Introduction to IPSec VPN Connectivity ................................................................................................. 1-2 IPSec VPN Requirements .....................
1 1. Introduction Thank you for using Moxa’s SMG-6100 IPSec Gateway and SMG-1100 MODBUS Gateway. These products help you easily establish the secured network communication with the IPSec protection and the protocol conversion between MODBUS/Serial and MODBUS/TCP. In this manual, you will learn how to configure and monitor the SMG-6100 and the SMG-1100 for your network communication.
SMG-1100/6100 Introduction Overview The SMG-6100 can be used as a smart gateway with sophisticated Machine-to-Machine solutions to help construct a tunnel server (IPSec) and bi-directional IP communications. When used with Moxa’s SMG-1100, the SMG-6100 can serve as a secure networking host over IPSec to back-end host computers and MODBUS TCP Master/Slave devices.
SMG-1100/6100 Introduction Configuring IPSec Tunnels To set up IPSec tunnels between the SMG-6100 and the remote mobile SMG (the SMG-1100), refer to the VPN(IPSec) section in the SMG Manager chapter of this manual. We strongly recommend that IPSec tunnels be configured from the SMG-6100 and deployed to the SMG-1100 at the same time via SMG Managerat the local site. When finished, the SMG-1100 can be moved to the remote field site.
SMG-1100/6100 Introduction MODBUS RTU/ASCII Master In the MODBUS Gateway configuration for a MODBUS RTU/ASCII master and MODBUS TCP slave, the software running on each MODBUS RTU/ASCII master device sends MODBUS RTU/ASCII request messages to the MODBUS Gateway via its connected serial port.
2 2.
SMG-1100/6100 Installation Installation Deploying the SMG-1100 You must use SMG Manager to configure the SMG-1100. In the example shown below, SMG Manager, Device Configuration Gateway, and the SMG-6100 are all on subnet 192.168.3.xxx. Each SMG-1100 also has an intranet IP address in subnet 192.168.30.xxx, and this IP address is used when the SMG-1100 is deployed at the remote site. The next step in the implementation process is to insert the SIM card, Ethernet cable and power cable.
SMG-1100/6100 Installation 2. Click Next to continue. 3. Next, select Browse if you would like DCG to be installed in a different folder. Click Next to continue. 4. Click Finish to complete the installation procedure.
SMG-1100/6100 Installation Installing SMG Manager SMG Manager should be installed on the computers at the control center. Once installed, the computers at the local site can connect to the Device Configuration Gateway and connect over the internet to the SMGs at the remote site. SMG Manager can be downloaded from Moxa’s website. The files will be packaged in zip format. Follow these steps to install SMG Manager. 1. Unzip the files and then double click SMG Manager V1.0_Build_xxx.
SMG-1100/6100 Installation 3. Next, select Browse if you would like SMG Manager to be installed in a different folder. Click Next to continue. 4. Click Next to confirm the installation. 5. Wait until the installation has finished.
SMG-1100/6100 Installation 6. Click Close to complete the installation procedure. Uninstalling Device Configuration Gateway and SMG Manager Follow these instructions to uninstall Device Configuration Gateway and SMG Manager. 1. Select Add or Remove Programs from Start Settings Control Panel. 2. Select Device Configuration Gateway and SMG Manager from the program list, and click Remove to continue.
SMG-1100/6100 Installation 3. Click Yes to start removing Device Configuration Gateway or SMG Manager from your computer.
3 3. SMG Manager This chapter describes how to use SMG Manager to monitor and configure SMG-6100 and SMG-1100 devices at remote sites over the Internet.
SMG-1100/6100 SMG Manager Launching Device Configuration Gateway Before using SMG Manager on your PC to manage SMGs, you must first run Device Configuration Gateway. 1. Select Device Configuration Gateway from the Start menu under All ProgramsMOXA. 2. The Device Configuration Gateway will run in the background; an icon will be displayed in the system tray. Launching SMG Manager 1. Click SMG Manager from Start All Programs MOXA.
SMG-1100/6100 SMG Manager 2. Once launched, the SMG Manager interface will appear. Connecting to Device Configuration Gateway 1. Choose Gateway Manager from Tools.
SMG-1100/6100 SMG Manager 2. Type in the IP address and the name of the Gateway Server. Click Add to continue. 3. The Gateway information will be displayed as follows. Click Connect to continue. 4. If the information is correct, you will be able to connect to the Gateway Server and the main screen of the SMG Manager will appear. You can check the Gateway Server that has just been connected to in the left panel.
SMG-1100/6100 SMG Manager 5. If you have left Gateway Server and would like to connect to the existing server again, right-click the name of the Gateway, and then select Connect. 6. Please note that only one Gateway Server is allowed to connect. If you would like to connect to another server, disconnect the first server and then connect the second one. Introduction to the SMG Manager Interface When you connect to a Gateway Server, the following screen will appear. 1.
SMG-1100/6100 SMG Manager Exit: Click this to quit SMG Manager. Function Each function will be introduced in the Toolbar Functions section. View Allows you to decide if the toolbar will be displayed. Check the Toolbar option to show the toolbar; uncheck the Toolbar option to remove the toolbar. Help Allows users to view the About SMG Manager information.
SMG-1100/6100 SMG Manager About SMG Manager: The SMG Manager version number will appear in the SMG Manager window. Toolbar Functions The icons that appear on the toolbar, listed from left to right, are Login/Change Password, Locate, Set Device Name, Network Setup, GPRS, VPN(IPSec), Modbus, Import/Export Configuration, Apply, Monitor Connections, Firmware Upgrade and Reboot. See the following sections for detailed descriptions.
SMG-1100/6100 SMG Manager The default Username and Password is smguser. If you want to change password, click Login/Change Password again, and fill in old, new passwords and confirm the new password. Locate If you are managing multiple SMG units, it can be confusing to keep track of which physical SMG unit you are currently configuring in SMG Manager. To check which SMG unit is currently being configured, select the unit in SMG Manager and click Locate.
SMG-1100/6100 SMG Manager Click OK once you have found the correct unit. Set Device Name You can enter a name to help you identify the unit, such as the location, function, etc. Network Setup SMG Manager provides a Network Setup function that allows users to configure network settings. Select and right-click on the SMG, and then select Network Setup to continue. You may also use the Network Setup icon from the toolbar to complete the task. You can only perform Network Setup on one device at a time.
SMG-1100/6100 SMG Manager This function configures the IP address and DNS settings. Click the IP tab to select the interface, and enter the related IP information, including the interface name, DHCP or Fixed IP, IP address, subnet mask, and default gateway. If there is more than one network interface, select one from the Interface Name option menu to continue.
SMG-1100/6100 SMG Manager GPRS 3-11
SMG-1100/6100 SMG Manager Before using the GPRS, the APN (Access Point Name), Username (user ID account) and Password (user password) must be filled in for the modem initialization command. Connect rule: Select Connect at boot to configure the SMG-1100 to automatically connect to GPRS upon boot up, or select none if not using a GPRS connection. Reconnect rule: Select Periodically Reconnect to configure the SMG-1100 to automatically reconnect to GPRS if disconnected.
SMG-1100/6100 SMG Manager VPN(IPSec) This section introduces how to configure the SMG-6100 as the IPSec Gateway.It also illustrates how to configure the SMG-1100 to work with the SMG-6100 via IPSec security on the Internet for secure data transmission and remote device monitoring. Client IP: Wan IP: Client IP: Select the SMG-6100 on the device list to check the information of the device and click the VPN(IPSec) icon.
SMG-1100/6100 SMG Manager You can see the IPSec tunnel list. Select which WAN interface you wish to use and click Add to continue. The following section describes how to make a offline configuration file for future/remote use, and how to directly import IPSec configuration into the client over the network.
SMG-1100/6100 SMG Manager Off-Line Import IPSec Configuration Tunnel Name: Select the Off-Line Client and click Next to continue. Tunnel Name: Provide a name for this IPSec tunnel. In the screenshot below the tunnel is named T1. Server/Client Tunnel ID: Provide the ID that will be used in authentication. This ID must be in the form of a domain name preceded by @ or an IP address.
SMG-1100/6100 SMG Manager Click OK to save the IPSec configuration. Select a local file to save.
SMG-1100/6100 SMG Manager In SMG-6100 page, you can see all IPSec configuration that you have set. Take this IPSec configuration file to corresponding SMG-1100s, and click Import to load the IPSec tunnel info. Connect Rule: whenever the SMG-1100 have IPSec tunnel info, you can select its activity mode. Select None to manually connect to the IPSec tunnel by yourself; select Connect follows GPRS to automatically connect to the IPSec tunnel once a GPRS connection is established.
SMG-1100/6100 SMG Manager 3-18
SMG-1100/6100 SMG Manager On-Line Import IPSec Configuration If the SMG-1100 is online for configuration, you will see the IP in the drop-down list. Select the IP of the client you wish to configure and directly import the IPSec configuration. Refer to off-line configuration directions for information on IPSec settings. Click Add to continue. Select Auto import client configuration to SMG-1100 and click OK.
SMG-1100/6100 SMG Manager Once you see the Import VPN configuration successfully popup message, the IPSec tunnel info has been configured in both the SMG-6100 and SMG-1100. Modbus In the device list, select the SMG-1100, then click the Modbus icon.
SMG-1100/6100 SMG Manager You will be guided to the Modbus Gateway Configuration dialog. Select either Slave or Master type for Port 1 and Port 2. Note that both Modbus serial ports use the same type, but can have different Transmission Modes: RTU or ASCII.
SMG-1100/6100 SMG Manager The Serial tab is where each serial port’s communication parameters are configured. You can configure Baud Rate, Parity, Stop Bit, Flow Control, FIFO, and Interface Mode. Data bits is not configurable. The Slave ID Map tab is where slave IDs are managed. The definitions on this tab determine how requests will be routed by the unit. When the serial port is set to RTU Master or ASCII Master mode, simple select the Slave ID entry in the table and modify the range.
SMG-1100/6100 SMG Manager When the serial port is set to RTU Slave or ASCII Slave mode, simple select the Slave ID entry in the table and modify the range. For TCP slaves, you can add an entry that assigns a range of Slave IDs from any IP address access. On the Miscellaneous page, all fields are set independently for each serial port. The Response Time-out field is used to configure how long the gateway will wait for a response from a Modbus ASCII or RTU slave.
SMG-1100/6100 SMG Manager Import/Export Configuration To import or export the configuration of an SMG-6100/1100, click Import/Export Configuration, and then follow the onscreen instructions to upload/download the configuration file.
SMG-1100/6100 SMG Manager Apply After configuring the SMG-6100/1100, remember to click Apply to save the information to the host system registry. Settings or changes to the SMG-6100/1100 will not become effective until they are applied. Monitor Connections Click Monitor Connections to check the status of GPRS, VPN and Modbus connections.
SMG-1100/6100 SMG Manager Upgrading the Firmware If you would like to upgrade the firmware on one device, first click the check box next to the SMG, and then right-click it and select Firmware Upgrade. You may also use the Firmware Upgrade icon in the toolbar. If you would like to upgrade the firmware on two or more devices, make sure that the devices have been selected, and then click the Firmware Upgrade icon to continue.
SMG-1100/6100 SMG Manager In the Open window, choose the firmware file, and then click Open to continue. If you would like to upgrade the firmware on multiple SMGs, make sure that they are of the same model type and that you have the correct firmware file. Using the incorrect firmware may cause the system to crash. Select additional devices from the Non-selected device(s) list and use the arrow buttons to move them to the Selected device(s) list. When ready, click Upgrade to continue.
SMG-1100/6100 SMG Manager Please note that when firmware upload is complete, it will still take several minutes for the SMG to update the new information. All the functions may not work during this period. Reboot SMG Manager provides a Reboot function that allows users to reboot the device. Select and right-click the SMG and then select Reboot to continue. Note that you can only use the Reboot function on one SMG at a time. Make sure you want to reboot the SMG and then click OK to finish.
SMG-1100/6100 SMG Manager 3-29
