Basic It Security; Batch Commands - Lightware RAP-B511-EU User Manual

   
4. Device Concept
4.7. Basic IT Security
DIFFERENCE:
Below mentioned features are available from FW package v1.1.0b3.
These entry-level network security improvements help to prevent unauthorized access to the Lightware
device: #new
▪
Cleartext login
▪
IP Port Block
▪ MAC Filtering
The Cleartext Login tool allows setting a password for login, thus, the device will not accept any command
coming from an interface (RS-232, Ethernet, etc...), only the device type and the serial number can be queried
without login. You can set all affected TCP/IP ports individually to enable or disable.
The IP Port Block feature is an additional protection for the Cleartext login. There are TCP/IP ports in
Lightware devices which are not protected by the login, so you can disable them if necessary. Example: due
to the working method of the LW2 communication, the Cleartext login does not provide protection when LW2
command is sent to the device, that is why the TCP port no.10001 shall be blocked manually.
Another level of security is the MAC Filtering tool. You can create an 'allowlist' of network devices based on
the MAC address which are allowed:
Controlling the device (Send option), or
▪
Querying parameters (Receive option) to/from the Lightware device.
▪
Below table shows the protection levels of these features.
IP Port Function
80 HTTP Post&Get
81 LW3 control (miniweb)
6107 LW3 protocol
800x Command injection (RS-232)
900x Command injection (IR)
10001 LW2 protocol
ATTENTION!
Be careful when combining these functions; improper settings may cause malfunction.
Most of these feature are available in LDC, see the
#new
MAC Filter Cleartext Login IP Port Block
-
 
-
 
-
 
-
 
-
 
-
 
Settings Menu section.
Applied firmware package: v1.1.0b3b3 | LDC software: v2.5.1b5
RAP-B511 series – User's Manual
4.8. Batch Commands

DIFFERENCE: Below mentioned features are available from FW package v1.1.0b3.
These features can be used to process a group of pre-defined commands. The commands can be stored
in the device as macros or you can save the commands in a plain text file and send the device by an HTTP
message.
LW3 over HTTP (Command Salvo)
This feature allows the LW device to be controlled over HTTP. In this case, a batch of commands is sent
over HTTP to the Lightware device for processing. Save the LW3 commands into a file, post it to the
<IP_address>/protocol.lw3 file and the commands are processed immediately.
Running Macros
In this case, the command sequences (macros) are stored in the device. You can create your custom macros
in a file, upload into the device and run at any time. The number of the macros depends on the device type, at
most 50 macros can be saved in the device. See more information about the feature in the
31
#new
Macros section.