Page 1
Z45x Series Industrial Controllers User Manual – UM002R4 Revision B December 23, 2020 1891 N. Gaffey St. Ste. E p. 310.241.2973 support@ctekproducts.com San Pedro, CA 90731 www.ctekproducts.com Z45X SERIES INDUSTRIAL CONTROLLERS - DECEMBER 23, 2020...
Page 3
Security ....................... 14 User Accounts ......................14 Security Preferences ....................14 General Configuration..................16 Web Administration ....................16 IP White List ......................16 SMS Management ....................16 White List Status (SMS) ................... 16 SSH Access ......................16 Additional Security Features ................17 Multiple Failed Login Attempts ................
Page 4
System-Wide IPsec Tunnel Options ..............21 Individual IPsec Tunnel Options ................21 Time and Location Source ............... 23 Cellular Network ....................23 Network Time Protocol (NTP) Server ..............23 GPS Location ......................23 Location Source ..................23 SkyCloud Services ..................23 Tools ......................
Introduction Welcome to the Ctek Z-45 Series Controller User’s Guide. The Z-45 Series is a gateway applications platform that provides advanced monitoring and control features over wired and wireless infrastructure and cellular 4G/LTE service on all North American networks with fallback 3G service appropriate for that network. This User’s Guide will explain the basic operation of the application platform and router, and take you through the necessary settings to get your wireless application online securely.
(power-cycle) and will return to service with the factory defaults in place. Setting or Parameter Factory Default Administrative User ID ctek *** Change after first login *** Administrative password ctek *** Change after first login *** Administrative IP address 192.168.1.10...
Administrative Access All administration and configuration is accomplished using the web UI, which can be accessed locally throughout the Ethernet connection or over the air through the WAN connection after the unit is connected to a cellular network. To use the local interface connect a computer to the controller’s Ethernet port using a standard Ethernet cable.
Page 8
The Quick Panel display presents an overview of the network and equipment status, and provides navigation to the Administrative functions. The Quick Panel status information is a snapshot in time and must be refreshed to observe changes in dynamic parameters such as network connections or signal strength. The Admin Main button on the Quick Panel will display the main administrative screen as shown in Figure 2.
Controller Indication/Terminations/Switches The updated Z45x Series controllers have a few I/O changes that make it a more versatile package for a wide range of applications. Below is a diagram of the new block terminations. /Pulse Digital Outputs The controller supports 2 digital outputs. Each output is an open drain configuration rated for 250ma at 24Vdc.
Page 10
Revision A Configuration Switches or Pulse Revision B Configuration Switches or Pulse Analog Analog Z45X SERIES INDUSTRIAL CONTROLLERS - DECEMBER 23, 2020...
Power Input The device requires 9-24v DC. The power input also has reverse polarity protection. RS-485 Serial Interface A two-wire RS485 interface is available. TR1- for data coming in and TR1+ for data going out. It is also recommended to use the one of the available ground pins (GND) to minimize signal interference.
Wireless Network Activation Ctek’s Z-45 Series Controllers are capable of operating on North American LTE networks on bands 2, 4, 5, 13, 17, and 25 with fallback to the appropriate 3G network for the selected carrier. It will also operate globally on HSPA (UMTS) networks on bands 1,2,4,5,...
Restart or power cycle the unit APN Selection and Account Provisioning Important Note: For the purposes of this manual, we divide the carriers (network operators) into two groups, legacy CDMA carriers, e.g. Sprint and Verizon, and the legacy GSM group, which is comprised of all other networks.
The default account can be modified but cannot be deleted. Ensure that at least 1 user has Admin privileges. NOTE - The default User ID and password for Ctek’s controllers is well known. Failure to perform this step exposes the user’s equipment to unauthorized access and tampering.
Page 15
Figure 4 Z45X SERIES INDUSTRIAL CONTROLLERS - DECEMBER 23, 2020...
General Configuration Firewall Status - When enabled the firewall blocks all WAN traffic except for port 80 and the serial pad port if, and only if the serial pad is active. Since an SMS command (TechNote TN009) can be used to temporarily open ports for ad-hoc maintenance there are very few reasons to ever disable the firewall.
Additional Security Features Multiple Failed Login Attempts Three (3) consecutive failed login attempts on either the LAN or the WAN interface will cause subsequent login attempts to see a “Locked” screen. Once the “Locked” condition occurs the user must wait for 30 minutes with no further login attempts before it clears.
Application Parameters Location The location name that will be displayed on the dashboard, on SkyCloud, and in reports and alarms Application Alarming Enables or disables alarms, selects alarm delivery mechanisms, assigns email addresses and phone numbers for alarm delivery, and assigns GPS/Location coordinates to alarms Application Logging Enables or disables application logging, enables or disables log deliver via email, selects a log delivery schedule, and assigns email addresses of log recipients...
Service Name – A name that will be associated with a service advertised on the Quick Panel of the WAN interface Forwarding From – The inbound (WAN side) port number managing the traffic Local Port – The port number on the LAN side that the traffic will be routed to Local IP –...
Tunneling and Encryption GRE Tunnels The Z4550 Controller allows for the configuration of up 2 GRE tunnels over the cellular wireless interface. The figure below shows the mode of operation Parameter Options Tunnel Select None/1/2/Both WAN MTU/MRU Increase for tunnel overhead (Yes/No) TTL Value Time for a packet to live in a tunnel (seconds) Multicast Support...
Other traffic will continue to route over the open IP network. This setting allows web type traffic to co- exist with secure traffic on the same Ctek controller. Allow Only Secure Traffic – In this mode only IP traffic addressed for the IPsec tunnel will be transmitted.
Page 22
Parameter Options Tunnel Enable/Disable an individual tunnel Auto-Connect Sends ICMP request as the defined interval in seconds to the router subnet to maintain the tunnel connection alive Local Router Definition Local Security Type – Available option are FQDN, USER FQDN, KEY ID or NONE Security ID –...
Page 23
The SkyCloud Services screen serves two related purposes. It provides a method of selecting a Dynamic Domain Name Service (DDNS) for the Z4550. Secondly, it is used to configure the unit for operation on Ctek’s cloud based visual access and management system, SkyCloud. See Technical Information Bulletin TIB006 for details.
Page 24
The Z4550 comes standard with the Automation-Light application installed. Automation- Lite is a scaled back version of the complete Automation application, which can be licensed from Ctek. See Application Note APN008 for details on the Automation application. Z45X SERIES INDUSTRIAL CONTROLLERS - DECEMBER 23, 2020...
Need help?
Do you have a question about the Z45 Series and is the answer not in the manual?
Questions and answers