Interra ITR901-1001 Product Manual

Knx secure ip router

Hide thumbs

Table Of Contents

Table of Contents

Quick Links

Download this manual

KNX Secure IP Router

System Device

Product Manual

PM2405200219AEN

Table of Contents

Need help?

Do you have a question about the ITR901-1001 and is the answer not in the manual?

Questions and answers

Summary of Contents for Interra ITR901-1001

Page 2: Table Of Contents
3. ETS Parameters & Descriptions ..................26 General Page ........................27 3.1.1. Parameters List ........................... 27 IP Configuration ......................... 28 3.2.1. Parameters List ........................... 28 KNX Multicast Address ...................... 29 3.3.1. Parameters List ........................... 29 Main Line (IP) ........................30 ©2024 INTERRA PM2405200219AEN...
Page 3 4.2.1. Access via Windows Network UPnP ................... 34 4.2.2. Access via IP Address ......................... 34 4.2.3. Access via MAC Address ......................35 Device Info ......................... 36 KNX ........................... 37 Firmware Update & Boot Mode ..................38 IP Tunnelling Address Assignment ..................40 ©2024 INTERRA PM2405200219AEN...
Page 4 FITNESS FOR PURPOSE. Interra disclaims all liability arising from this Printed on recycled paper. information and its use. Use of Interra devices in life support and/or safety applications is entirely at the TS EN ISO 9001:2008 buyer’s risk, and the buyer agrees to defend,...
Page 5: To Our Customers
To obtain the most up-to-date version of this product manual, please visit our Web site at: http://www.interratechnology.com You can determine the version of an Interra document by examining its literature number found on the bottom right corner of any page.
Page 6: Content Of The Document
This user manual is intended for use by KNX installers and describes the functions and parameters of the ITR901-1001 KNX Secure IP Router devices and how it is possible to change the settings and configurations using the ETS software tool. This document also describes the installation, programming, commissioning and use of the devices with detailed information.
Page 7: Product Description
  ITR901-1001 is able to filter the traffic according to the installation place in the bus system hierarchy and according to the built-in filter tables for group oriented communication. Con- figuring from the subline can be blocked. Message filtering can be temporarily deactivated by a single button press. The time period to automatically switch back to normal operation is ETS-configurable.
Page 8: Technical Information
KNX Secure IP Router Product Manual 2.1. Technical Information The following table shows the technical information of the ITR901-1001 KNX Secure IP Router. Product Code ITR901-1001 Power Supply 21-30 V DC, KNX Bus Voltage Current Consumption < 20 mA RJ45 Ethernet Connector...
Page 9: Connection Features
KNX Secure IP Router Product Manual Connection Features The figure below shows the KNX Secure IP Router. All of the ITR901-1001 models have the same connection layout. Fig. 1: Connection Features of KNX Secure IP Router BUTTON / CONNECTOR State IP (Main Line)
Page 10 Blinking Red: No IP connection. Off: Program Mode/Boot Mode not active. Note: If the device is used as IP Router without physical address x.y.0, the "physical address routing" named LED 6 (PA) works not like described at Table 1. ©2024 INTERRA PM2405200219AEN...
Page 11: Device Commissioning
All telegrams are blocked due to the filter table is not defined.  The Manual Function switch-off time is 120 min.  Physical address is “15.15.0”.  Never connect the device to 230 V.  Ethernet KNX BUS – KNX BUS+ Fig. 2: Connection Scheme ©2024 INTERRA PM2405200219AEN...
Page 12: Secure Commissioning
Fig. 3: Password Window The individual Device Certificate always is enclosed with a KNX Secure product. To keep the product fully configurable by the user, it is important to make sure the Device Certificate cannot be lost. ©2024 INTERRA PM2405200219AEN...
Page 13: Dimensions
KNX Secure IP Router Product Manual Dimensions All values given in the device dimensions are millimetres. Fig. 4: Dimensions of KNX Secure IP Router ©2024 INTERRA PM2405200219AEN...
Page 14: Functionality
IACK sending on sent out messages is ETS configurable.  When there is no IACK response on the subline the Interra KNX IP Secure Router is able to repeat  messages up to three times. Repetitions can be configured for both Physical Telegrams and Group Telegrams via ETS (to ease troubleshooting).
Page 15: Knxnet/ Ip
Product Manual KNXNET/ IP ITR901-1001 is a KNX IP Secure Router and KNX IP Secure Routers are highly similar to TP line couplers. The only difference is that they use the IP communication medium as main line and the KNXnet/IP communication protocol.
Page 16 Tool Key, which is then used for programming. This Tool Key cannot be modified and can only be deleted by performing a device reset (see chapter 2.9.6.2. Restore Factory Settings). After the reset, ETS uses the registered FDSK to access the device and program a new Tool Key. ©2024 INTERRA PM2405200219AEN...
Page 17: Operational Description
2.9.2. IP Network ITR901-1001 sends telegrams from/to the TP network to/from the IP network in accordance with the KNXnet/IP protocol specification. According to the default setting these telegrams are sent as multicast telegrams to the multicast IP address 224.0.23.12 port 3671. The multicast IP address 224.0.23.12 is the defined address for the KNXnet/IP by KNX Association in conjunction with the IANA.
Page 18: Knx Network Installation
(X.0.0, 1≤X≤15). In ETS up to 15 areas can be defined. If ITR901-1001 is used in a KNX system for both purposes, it is only necessary to ensure that the ITR901-1001 used as a line coupler has a line coupler address assigned from a free addressing area. Following figure illustrates the ITR901-1001 router topology for KNX lines and KNX areas.
Page 19: Adding Device Certificate
XXXXXX-XXXXXX XXXXXX-XXXXXX XXXXXX-XXXXXX Fig. 6: Interra KNX Secure IP Router Device Certificate Enable After opening the project, the Device Certificate list can be edited. In the Security tab under Project Overview Device Certificates can be added and deleted. When the Device Certificate list does not contain the Device Certificate of a specific secure device, the following window appears upon starting the secure download into this device.
Page 20: Programming
The device comes with the Individual Address 15.15.0 as the Factory Default Setting. It is advisable not to use this address for regular operation and instead assign a different address during commissioning. A blinking red Programming LED indicates the Ethernet cable is not properly connected or no IP network connection is available. ©2024 INTERRA PM2405200219AEN...
Page 21: Ip Configuration
IP networks, it's recommended to consult your local network administrator. Fig. 9: Automatic IP Address Assignment When the “Use a static IP address” option is chosen, IP address, Subnet Mask and Default Gateway can be set manually. Fig. 10: Manual IP Address Assignment ©2024 INTERRA PM2405200219AEN...
Page 22: Special Functions
Step Manual Function Hold Function button for 3 seconds. LED 1 now is orange indicating Manual Function is on. After switch-off, normal operation is indicated by LED 1 lighting green. Table 2: Activation of Manual Functions ©2024 INTERRA PM2405200219AEN...
Page 23: Restore Factory Settings
To start the Firmware Update download process, a short press on the Function Button is necessary during Programming Mode is active. After a click on the “request update” button in the web front-end, KNX Secure IP Router switches to its boot mode and ‘Status: update authorized’ is indicated. Fig. 11: Authorized Update Request ©2024 INTERRA PM2405200219AEN...
Page 24: Led Status Display
Bus State KNX TP Orange Green Filter Group Address Routing Orange Route All Block All Green Filter Individual Address Orange Route All Routing Block All Table 6: LED Status Display for Factory Reset After First Button Press ©2024 INTERRA PM2405200219AEN...
Page 25 KNX Secure IP Router Product Manual NUMBER COLOUR DESCRIPTION State IP (Main Line) Green blinking, then lighting Bus State KNX TP Blinking Green (Subline) Telegram Traffic IP Green (Main Line) Programming LED Table 7: LED Status Display for Firmware Update ©2024 INTERRA PM2405200219AEN...
Page 26: Ets Parameters & Descriptions
Product Manual 3. ETS Parameters & Descriptions In this chapter, the ETS parameters of ITR901-1001-KNX IP Secure Router devices are described using the parameter pages and options. The parameter page features are dynamic structures which means further parameters and parameter pages are enabled depending on the configuration.
Page 27: General Page
When Security is switched on, the web front-end can available having full mode is activated be set to fully available (read/write), to available with functionality limited usage (only readout) or be deactivated. only status info display front-end available HTTP port Select the HTTP port. 8080 ©2024 INTERRA PM2405200219AEN...
Page 28: Ip Configuration
DNS server*¹ Due to each part is 1 byte, the values should be 0-255.0-255.0-255.0- adjusted by entering between 0 and 255. [0.0.0.0] *¹This parameter, is only visible when the “DHCP” parameter is set to “do not use”. ©2024 INTERRA PM2405200219AEN...
Page 29: Knx Multicast Address
Set manually if system multicast address is not used. 0 (0-255) Byte 4*¹ Set manually if system multicast address is not used. 0 (0-255) *¹This parameter, is only visible when the “System multicast” parameter is set to “do not use”. ©2024 INTERRA PM2405200219AEN...
Page 30: Main Line (Ip)
Filtering of Physical telegrams can be configured to transmit (not route all telegrams, no telegrams, or only telegrams recommended) according to their Individual Address. block filter *¹This parameter, is only visible when the “Telegram routing” parameter is set to “configure”. ©2024 INTERRA PM2405200219AEN...
Page 31: Subline (Knx Tp)
KNX Secure IP Router Product Manual Subline (KNX TP) For Group Telegrams and Physical Telegrams the setting “transmit all” is intended only for testing purposes. Please do not use for normal operation. Fig. 16: Subline (KNX TP) Tab Parameters ©2024 INTERRA PM2405200219AEN...
Page 32: Parameters List
(KNX TP) block configured from its main line side and configuring devices on main line (and behind) from the subline side is blocked. *¹This parameter, is only visible when the “Telegram routing” parameter is set to “configure”. ©2024 INTERRA PM2405200219AEN...
Page 33: Web Front-End
To ensure full protection of a secured installation, the web front-end availability must be set to “web front-end not available” (default value). For reasons of efficient protection, it is strictly recommended not to use the “available having full functionality” option on a permanent basis. ©2024 INTERRA PM2405200219AEN...
Page 34: Accessing The Device Web Front-End
Accessing the Device Web Front-End There are three ways to access the Interra KNX Secure IP Router. It can be accessed like a Microsoft Windows UPnP network device (Windows7 or later) and by a web browser. For access by a web browser either the IP address or the MAC address, together with the HTTP port, have to be known.
Page 35: Access Via Mac Address
When NetBIOS is installed (by default on Windows systems and Linux systems containing SAMBA) the MAC address that is printed on a label on the side of the ITR901-1001 housing can be used. Due to name resolution is mandatory to establish communication by Host name, activation of NetBIOS is necessary.
Page 36: Device Info
KNX Secure IP Router Product Manual Device Info After accessing the Web front-end the Device Info tab is shown. All general information about the current device settings is visible. Fig. 19: Device Info Tab ©2024 INTERRA PM2405200219AEN...
Page 37: Knx
The red curve shows the maximum busload history and the green one shows the average busload history both of the TP side. Fig. 20: KNX Tab Note: The web browser used has to support SVG graphics. ©2024 INTERRA PM2405200219AEN...
Page 38: Firmware Update & Boot Mode
Firmware Update & Boot Mode Under the Update tab the ITR901-1001 firmware can be updated like described in following steps 1 to 5. During the firmware update process KNX Secure IP Router enters Boot Mode. Then LEDs 1, 2, 3, and 7 have states as described in Table 4.
Page 39 Step 5: The update file can be selected and be uploaded by a click on „Upload”. After that, the device exits boot mode and restarts. Clicking on the “Abort” button cancels the firmware update procedure and the device exits boot mode. Fig. 25: Select Update File ©2024 INTERRA PM2405200219AEN...
Page 40: Ip Tunnelling Address Assignment
To use IP Secure Tunneling both Secure Commissioning and Secure Tunneling must be activated in the Properties window of KNX Secure IP Router. After that, the passwords for protection of each Tunneling Channel can be entered (or changed). Fig. 27: Activation of Secure Tunneling ©2024 INTERRA PM2405200219AEN...
Page 41 Turkey THE INTERRA WEBSITE Interra Interra provides documentation support via our Cumhuriyet Mah. Kartal Cad. Interra R&D Centre website www.interratechnology.com. This website No:95/1 Kartal/İstanbul is used as a means to make files and information easily available to customers. Accessible by using...