ABB i-bus ® Contents Contents Page General ....................5 Using the product manual ......................5 1.1.1 Notes ............................5 Cyber security (network security) ....................6 Preventing access to the different media ..................6 Twisted pair cabling ........................6 IP cabling inside the building ....................... 6 Connection to the Internet ......................
Page 4
ABB i-bus ® Contents vi 2CDC502099D0211 Rev. A | IPR/S 3.5.1...
ABB i-bus ® General General The ABB i-bus ® IP Router Secure IPR/S 3.5.1 connects the KNX bus with an Ethernet network. KNX telegrams can be sent to or received from other devices via the network. The device supports the KNX Secure protocol (KNXnet/IP Security).
Cyber security (network security) The industry is increasingly faced with cyber security risks. To increase the stability, security and robustness of its solutions, ABB has introduced official robustness tests for Internet security as part of the product development process. In addition, the information below includes guidelines and mechanisms that you can use to improve the security of KNX systems.
See also chapter 3.5, Secure. Overview of product and functions The ABB i-bus ® IP Router Secure IPR/S 3.5.1 connects the KNX bus with an Ethernet network. KNX telegrams can be sent to or received from other devices via the network.
(IP discovery) and the settings to be made for unicast communication (see chapter 4.2, The i- bus® Tool). An ETS app (ABB KNX Bus Update) is available for the firmware update. If KNX Secure mode is not activated for the devices, a firmware update can also be performed with the i-bus ® Tool.
ABB i-bus ® General 1.8.2 Overview of versions Device IPR/S 3.1.1 IPR/S 3.5.1 IP Router /2.0 IP Router Application Secure/1.0 ETS 4/5 ETS 5 Properties of IP Router Number of tunneling servers Number of unicast connections Monitoring for bus voltage failure ...
ABB i-bus ® Device technology Device technology IPR/S 3.5.1 The IP Router Secure 3.5.1 is the interface between KNX installations and IP networks. It can be used as a line coupler or area coupler and can utilize the local network (LAN) for exchange of telegrams between lines/areas.
Page 12
Secure) on the side of the unit will be required as well. The latest version of the application and corresponding software information are available for download from www.abb.com/knx. After import into ETS, the application appears in the Catalogs window under Manufacturers/ABB/System components/Coupler.
KNX connection ON LED Cover cap LAN or LAN/PoE connection Note It is also possible to power the Router via the voltage output without choke of an ABB KNX power supply (type SV/S). IPR/S 3.5.1 | 2CDC502099D0211 Rev. A 13...
ABB i-bus ® Device technology Mounting and installation The device is a modular DIN rail component for quick installation in distribution boards on 35 mm mounting rails to EN 60 715. The mounting position for the device can be selected as required.
Any USB interface used for programming a KNX Secure device must support “long frames.” One suitable USB interface is the USB/S 1.2 from ABB. There must be a connection to the KNX TP (twisted pair) in order to program the device.
Only a DC voltage in a range of 12 to 30 V may be connected to the power supply input. We recommend using an NT/S power supply from our range. It is also possible to power the Router via the voltage output without choke of an ABB KNX power supply (type SV/S).
ABB i-bus ® Device technology Operating controls There are no operating controls on the IP Router Secure. Display elements Three indicator LEDs are located on the front of the IPR/S: LAN/LINK Telegram • The LED lights for a few seconds after connection of the supply voltage.
Commissioning The IPR/S is parameterized using the application and the Engineering Tool Software (ETS). The application can be found under Manufacturers/ABB/System components/Coupler. For parameterization purposes, a PC or laptop with ETS and a connection to the KNX bus are required.
ABB i-bus ® Commissioning 3.2.1 Parameter window KNX -> LAN In the parameter window KNX -> LAN it is possible to define the processing of telegrams from the KNX system to the LAN network. Note The device is supplied with the option Route. This is not the default setting in the application, but it simplifies commissioning.
Page 21
ABB i-bus ® Commissioning Group telegrams main groups 14…31 Options: Filter Route Block This parameter defines whether the telegrams with group addresses of the main groups 14 ... 31 are filtered, routed or blocked. Filter: The telegrams with the group addresses of the main groups 14 ... 31 from the KNX to the LAN •...
Page 22
ABB i-bus ® Commissioning Telegram confirmation for group telegrams Options: Only if routed Always This parameter defines whether the IP Router Secure is to acknowledge group telegrams with a telegram. Only if routed: The group telegrams are acknowledged (send ACK) only if they are also routed by the •...
ABB i-bus ® Commissioning 3.2.2 Parameter window LAN -> KNX In the parameter window LAN -> KNX it is possible to define the processing of telegrams from the LAN network to the KNX system. Group telegrams main groups 0…13 Options:...
Page 24
ABB i-bus ® Commissioning Group telegrams main groups 14…31 Options: Filter Route Block This parameter defines whether the telegrams with group addresses of the main groups 14 ... 31 are filtered, routed or blocked. Filter: The telegrams with the group addresses of the main groups 14 ... 31 from the KNX to the LAN •...
Page 25
ABB i-bus ® Commissioning In case of errors repeat telegrams Options: User-defined • Yes: If an error is detected when a telegram is transmitted, the telegram is repeated up to three times. No: The telegram is not repeated. • •...
Address. Unicast: The routing for the device is switched off. • This special communication type does not comply with the KNXnet/IP specification. The ABB i-bus ® Tool is required for configuration. The Unicast type of communication cannot be used when the device is operated in KNX Secure mode.
Page 27
The following note also appears with the selection Unicast: Attention! This setting switches off routing for the device. The IP telegrams will now be sent as unicast to up to nine target addresses. Unicast configuration is performed with the ABB i-bus ® Tool.
Page 28
ABB i-bus ® Commissioning The remaining configuration of the IP parameters (device name, assignment of the IP address by DHCP or static) takes place in the Properties window of the ETS. The device name can be entered in the Settings Properties window. The device name loaded into the device can be changed in the Name field.
Page 29
ABB i-bus ® Commissioning The IP address can be defined in the IP Properties window. The following options are available for setting the IP address: Options: Obtain an IP address automatically Use a static IP address • Obtain an IP address automatically: In the default setting the IP Router Secure expects the assignment of an IP address by a DHCP (dynamic host configuration protocol) server.
ABB i-bus ® Commissioning Multicast Address (default = 224.0.23.12) Options: 224.0.23.12 The routing multicast address defines the target address of the IP telegrams of the IPR/S. The preset address 224.0.23.12 is the defined address for the KNXnet/IP from the KNX Association in conjunction with IANA for KNX IP devices.
ABB i-bus ® Commissioning Use of the integrated tunneling servers The IP Router Secure offers five additional physical addresses, which can be used for a tunneling connection. These so-called tunneling servers can be used with the ETS as a programming interface or with another client, e.g.
ABB i-bus ® Commissioning 3.4.1 Settings in ETS 5 An additional Properties window is available in ETS for setting the additional physical addresses. After insertion of the Router into the line, the ETS automatically reserves the first five free addresses of this line for the tunneling servers of the Router.
Commissioning KNX Secure The ABB IP Router Secure is a KNX device according to the KNX Secure standard. In other words, the device can be put into operation in a secure manner. Communication on the IP backbone is secure (all KNX IP devices must support the KNXnet/IP Security protocol for this purpose), and the tunneling connections are encrypted.
ABB i-bus ® Planning and application Planning and application The IP Router Secure in the network The IP Router Secure is designed for use in 10/100 BaseT networks compliant to IEEE 802.3. The device features an AutoSensing function and sets the baud rate (10 or 100 Mbit) automatically.
If multicast communication is not possible in a network, the ABB IP Routers can also communicate with each other via unicast. Up to ten ABB IP Routers can be combined to form a unicast group. The unicast group can consist of IPR/S 3.1.1 and/or IPR/S 3.5.1 or a mix. Each Router is then assigned nine IP addresses to which it sends its telegrams.
ABB i-bus ® Planning and application Note A description of the functions is provided in the i-bus ® Tool online help. Note If unicast is used as the type of communication, it must be ensured that the IP address of the •...
ABB i-bus ® Planning and application 4.1.5 IGMP The device supports IGMP snooping version V3. IGMP snooping is the capability of routing multicast routing traffic only to where it is actually needed. The IT infrastructure and the device must use the same IGMP version, otherwise this IGMP mechanism will not work.
ABB i-bus ® Planning and application 4.1.7 IPR/S as a line coupler The IP Router Secure can assume the function of a line coupler in a KNX system. For this purpose it must receive the physical address of a line coupler (1.1.0…15.15.0).
ABB i-bus ® Planning and application 4.1.8 Mixed topology If it is necessary in a KNX system to use the IP Router Secure as an area coupler at one point, e.g. office complex, and as a line coupler at another point, e.g. a remote underground garage, this is possible.
Click the corresponding button to select Discovery or Unicast mode. 4.2.1 Discovery Select Discovery mode in the ribbon area. This function serves to find and display ABB IP devices in the network. Not all information is displayed when the IP Router is operated in KNX Secure mode. Note The functions are described in the i-bus ®...
® Tool in KNX Secure mode. In this case, the firmware update will be possible only with the ETS app “ABB KNX Bus Update.” The app can be loaded free of charge from the KNX Online Shop. Select Update mode in the ribbon area. If this should become necessary, the firmware can be updated using this function.
ABB i-bus ® Appendix Appendix Ordering details Device type Product name Order No. bbn 40 16779 Weight 1 Packaging [pcs.] [kg] IPR/S 3.5.1 90650 0 IP Router Secure, MDRC 2CDG110176R0011 Open source software components A list of the open source components used is available on the Internet at: http://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A5258&LanguageCode=en&Doc...