Page 1
VPN Server - Router - Firewall _________________ USER GUIDE _________________ DOC_DEV_SIG_ User guide_A...
Page 2
This Industrial VPN Server family is manufactured by ETIC TELECOM 13 Chemin du vieux chêne 38240 MEYLAN FRANCE TEL : + (33) (0)4-76-04-20-05 E-mail : hotline@etictelecom.com web : www.etictelecom.com Page 2 DOC_DEV_SIG_ User guide_A...
Page 3
DECLARATION OF CONFORMITY The manufacturer, ETIC Telecom – 13 chemin du vieux chêne – 38240 Meylan – France, Hereby declares under sole responsibility that the listed devices conform to the Radio Equipment Directive (RED) 2014/53/UE, the Restriction of the use of certain Hazardous Substances (RoHS) Directive 2011/65/UE.
OVERVIEW OVERVIEW Purpose of this manual The present user guide describes the features and the installation of the SIG hardware version which is an Industrial VPN Server. The commissioning of the virtual VPN server version is described in another document. In the rest of the document the term "SIG"...
OVERVIEW Specifications General characteristics With feet: 50 X 220 X 220 mm (h, l, p) Dimensions Without foot: 44 X 220 X 220 mm (h, l, p) Max 0.65 kg Weight Metallic Casing IP20 – IEC60529 Non-operating: -40°/ + 85°C Temperature Operating: -20°/ + 60°C (fanless) Humidity...
Page 9
Address translation (DNAT, SNAT, NAT 1:1) IP@ assignment WAN interface: DHCP client or fixed IP LAN interface: DHCP server WAN interface: compatible with DYNDNS, No-IP or ETIC DNS LAN interface: relay & server VRRP RFC 3768 protocol Redundancy Multi WAN for backup on some SIG models...
Page 10
OVERVIEW Security OpenVPN (TLS/SSL), IPSEC, L2TP/IPSEC, PPTP VPN tunnel Shared key or X509 certificate Encryption 3DES & AES 128-192-256 Authentication: MD5 & SHA-1 Up to 100 VPN tunnels (mix OpenVPN IPSEC allowed) Firewall Stafeful packet inspection (SPI: 50 rules) IP@ and ports filtering Up to 25 remote users Remote access RAS access: Login &...
OVERVIEW Product overview The SIG is both a VPN server, a router, a firewall and a remote access server for industrial applications. It is designed to connect industrial machines on an intranet or the Internet with a high level of security. It provides depending on model: SIG-E : A WAN Ethernet interface •...
OVERVIEW Main functions IPSec VPN and OpenVPN VPN for safety VPN connection guarantees a high level of performance and security: Transparency: The VPN interconnects the two networks so that any machine in one network can communicate with a machine on the other network. Authentication: The router that establishes the VPN is authenticated by the one that accepts it and any other connection is rejected.
Page 13
Configuration The SIG is configured using an HTML browser (HTTP or HTTPS). EticFinder The ETICFinder software can easily detect all ETIC branded products connected to an Ethernet network to display their MAC address and their IP address. Page 13 DOC_DEV_SIG_ User guide_A...
INSTALLATION INSTALLATION Description Dimensions 220 mm 220 mm 44 mm 6 mm Front panel SIG-E-400 SIG-EC-400 Cellular Ethernet LAN Ethernet LAN Ethernet cards Ethernet Push button B1 Push button B1 SIG-A-400 Ethernet LAN ADSL Push button B1 Page 15 DOC_DEV_SIG_ User guide_A...
INSTALLATION Push-buttons Front panel push-button B1 Pressing the PB Function 10 seconds 5 flashes The hotline of ETICTELECOM is authorized to connect remotely to the router administration server within 1 hour delay. Rear panel push-button B2 Pressing the PB Function During operation Flashing red Temporary return to the factory configuration.
INSTALLATION LED indicators LED indicators Depending on models Function Description Power off Operation Steady green The unit is ready Slow blinking green The unit is busy Steady red Startup (30s) – Hardware or software failure or SIM card missing or memory flash drive missing Fast blinking red Firmware download in progress Application...
INSTALLATION Safety instructions The product shall be installed in a fire electrical resistant cabinet by a qualified operator. The product shall be connected only to equipment that complies with the IEC60950-1 or IEC62368-1 standards and that meets the following classifications: IEC60950-1 : Limited power circuits and SELV type –...
INSTALLATION Connecting to the ADSL line Line length / signal level : The SIG-A can be connected to an analogue line telephone line or an unbundled loop when the attenuation of the reception signal is better than 63 dB When the reception level is close to the limit, disconnections may occur. In that situation, we recommend to ask to the ISP to setup the line with the RE-ADSL modulation which is suited for long line and weak signal.
INSTALLATION Connecting the to the cellular network Pre-installation checks Authorization to use a cellular connection Check the use of a cellular router is authorized. Control of the reception level before installing Before installing the SIG, refer to a cell map over the Internet to check that the cellular reception signal is strong enough at the location where it will be installed.
INSTALLATION Cellular service subscription The SIG is designed to connect to the LTE-UMTS-GPRS data transmission service like the one used by the tablets. The subscription should also provide the SMS service if SMS alarms are required. A telephone service subscription is not needed. One will take care to subscribe to a service authorizing the right volume of data per month (MB/month) and to check the price of the MB exceeding the limit of the subscription plan, if it exists.
INSTALLATION Controlling the conformance of the connection After installing and setting up the SIG, control the conformance of the connection: Reception level The reception level must be better than -90 dBm (two flashes of the reception level led indicator). See the table below. PING error rate Each PING request must receive an answer.
PREPARING THE SETUP PREPARING THE SETUP Connecting a PC for configuration Overview The SIG is configured using a PC with a web browser. No additional software is required. Online help: For most pages of the administration server an help page is available by clicking located at the top right of the page.
PREPARING THE SETUP First configuration Step 1: Create or modify the PC TCP/IP connection Assign to the PC an IP address different but consistent with the factory IP address of the SIG. For the first configuration, assign for instance 192.168.0.1 to the PC. Step 2: Connect the PC to the SIG Connect the PC directly to the SIG with any Ethernet cable (straight or cross-wired);...
PREPARING THE SETUP Access to the administration server through the WAN interface To allow the access to the administration server through the WAN interface: • In the menu, choose Setup > Security > Administration rights. • Enter the username and the password. •...
EticFinder can be used. This software detects all ETIC branded products on a local network. After starting the software, click on the "Search" button, and when the product list is displayed, double-click on the product address to access the html server.
PREPARING THE SETUP Protecting the access to the administration server • In the menu, choose Setup > Security > Administration rights • Enter a user name and password to protect the administration server. • Tick the Password protect the web site access checkbox If the username and password to access the administration server are lost, you have to temporarily return to...
Page 30
13, Chemin du Vieux Chêne 38240 Meylan - France Tel : +33 (0)4 76 04 20 00 contact@etictelecom.com www.etictelecom.com...
Need help?
Do you have a question about the SIG Series and is the answer not in the manual?
Questions and answers