Page 1
IOLAN SDS/SCS/STS/MDC User’s Guide Version 4.0 Part #5500161-40 February 2009...
Page 2
Markham, ON Canada L3R 0E1 Perle reserves the right to make changes without further notice, to any products to improve reliability, function, or design. Perle, the Perle logo, and IOLAN are trademarks of Perle Systems Limited. Microsoft, Windows 98, Windows NT, Windows 2000, Windows Server 2003, Windows XP, and Internet Explorer are trademarks of Microsoft Corporation.
Table of Contents Preface ................25 About This Book ................ 25 Intended Audience..............25 Documentation................25 Typeface Conventions............... 26 Online Help ................. 26 Chapter 1 Introduction............27 About the IOLAN ................ 27 IOLAN Family Models ..............27 IOLAN Features................28 Hardware ....................28 Software ....................
Page 4
Table of Contents Power Supply Specifications ............32 Desktop Models ..................32 Power Over Ethernet (PoE) Models ........... 32 I/O Models ..................32 Rack Mount Models (except Electric Utility models)......33 DC Power Requirements..............33 AC Power Requirements ..............33 Medical Unit Models ................33 Electric Utility models ................
Page 5
Table of Contents Powering Up the IOLAN ............42 Desktop/Rack Mount Models (excluding Electric Utility models)..42 Medical Unit Models ................43 I/O Models ....................43 DC Power Models (excluding Electric Utility models) ......44 Disconnecting 48V Power Supplies from the IOLAN ......45 Electric Utility Models ................
Page 6
Table of Contents Connecting to the IOLAN Using WebManager........58 Using WebManager................. 59 Command Line Interface............60 Overview ....................60 Access Platforms..................60 Features ....................60 Connecting to the IOLAN Using the CLI ..........60 Through the Network ................60 Through the Serial Port ..............61 Using the CLI...................61 Menu ....................61 Overview ....................61...
Page 7
Table of Contents Changes to the IOLAN+ Interface ............68 Chapter 4 Getting Started..........73 Introduction ................73 Easy Configuration Wizard ............74 Setting Up the Network ............. 75 Using DeviceManager ................75 Using WebManager ................76 Using a Direct Serial Connection to Specify an IP Address....76 Using a Direct Serial Connection to Enable BOOTP/DHCP ....
Page 8
Table of Contents Opening an Existing Configuration File ..........90 Importing an Existing Configuration File ..........90 Managing the IOLAN ..............90 Chapter 6 Network Settings ..........91 Introduction.................91 IP Settings ...................92 IPv4 Settings ...................92 Overview..................... 92 Field Descriptions ................92 IPv6 Settings ...................93 Overview.....................
Page 9
Table of Contents Field Descriptions................104 Dynamic DNS ..................105 Overview ..................105 Functionality ..................105 Field Descriptions................105 Account Settings ................106 Cipher Suite Field Descriptions............107 Adding/Editing a Cipher Suite ............108 Validation Criteria Field Descriptions ..........109 IPv6 Tunnels ..................
Page 10
Table of Contents Adding/Editing Additional TruePort Hosts ........132 Adding/Editing a Multihost Entry............132 Advanced Tab Field Descriptions............. 134 TCP Sockets Profile................136 Overview................... 136 Functionality ..................136 General Tab Field Descriptions ............136 Adding/Editing Additional Hosts ............138 Adding/Editing a Multihost Entry............138 Advanced Tab Field Descriptions.............
Page 11
Table of Contents Control Signal I/O Profile ..............169 Overview ..................169 Functionality ..................169 General Tab Field Descriptions............170 Input Signal Field Descriptions............170 Output Signal Field Descriptions............172 Modbus Gateway Profile..............173 Overview ..................173 Functionality ..................173 General Tab Field Descriptions............
Page 12
Table of Contents Advanced ..................197 Advanced Serial Settings Tab .............197 Overview................... 197 Field Descriptions ................197 Modems Tab ..................199 Overview................... 199 Functionality ..................199 Adding/Editing a Modem ..............199 TruePort Baud Rate Tab............... 200 Overview................... 200 Functionality ..................200 Field Definitions ................
Page 13
Table of Contents Chapter 9 Configuring Security ........213 Introduction ................213 Authentication................213 Authentication ..................214 Local ...................... 215 Overview ..................215 Field Descriptions................215 RADIUS....................216 Overview ..................216 General Field Descriptions............... 216 Attributes Field Descriptions ............217 Kerberos....................218 Field Descriptions................
Page 14
Table of Contents VPN ....................231 Overview ....................231 Functionality..................231 IKE Phase 1 Proposals..............232 ESP Phase 2 Proposals ..............232 IPsec.......................232 Field Descriptions ................232 Adding/Editing the IPsec Tunnel ............233 Shared Secret Field Description............235 Remote Validation Criteria Field Descriptions ........236 L2TP/IPsec.....................
Page 15
Table of Contents I/O UDP Settings................251 Temperature Functionality ..............252 Overview ..................252 Field Descriptions................252 Channels................... 253 Analog ....................253 Overview ..................253 Field Descriptions................254 Digital Input................... 255 Overview ..................255 Functionality ..................255 Field Descriptions................256 Digital Output..................
Page 16
Table of Contents Modbus TCP Application ..............278 Modbus I/O Access ..............278 Function Codes..................278 I/O Coil/Register Descriptions .............279 Serial Port Coil/Register Descriptions ..........280 A4/T4 Registers..................280 A4D2/A4R2 Registers ................281 D4/D2R2 Registers................282 Serial Pin Signals..................282 TruePort I/O................283 TruePort/Modbus Combination ............283 API Over TruePort Only................
Page 17
Table of Contents Overview ..................293 Editing Clustering Slave Settings ............. 293 Chapter 12 Configuring the Option Card ......295 Introduction ................295 Option Card Settings ............... 295 Overview....................295 Functionality ..................295 Configuring the IOLAN Modem Card ........295 Configuring a Wireless WAN Card ......... 296 Overview....................
Page 18
Table of Contents Network Time Tab Field Descriptions..........305 Time Zone/Summer Time Tab Field Descriptions ......306 Custom App/Plugin................307 Overview................... 307 Field Description................307 Advanced....................308 Overview................... 308 Login Tab Field Descriptions ............308 Bootup Files Tab Field Descriptions..........309 Message of the Day (MOTD) Tab Field Descriptions.......
Page 19
Table of Contents Downloading Configuration Files to Multiple IOLANs ...... 321 Uploading Configuration Files ............322 Specifying a Custom Factory Default Configuration ......322 Resetting the IOLAN to the Default Configuration ......323 Downloading IOLAN Firmware ..........323 Calibrating I/O ................323 Calibrating Analog Input..............
Page 20
RADIUS..................347 Supported RADIUS Parameters............347 Accounting Message ................350 Mapped RADIUS Parameters to IOLAN Parameters......351 Perle RADIUS Dictionary Example ............352 TACACS+...................354 Accessing the IOLAN Through a Serial Port Users......354 Accessing the IOLAN Through a Serial Port User Example Settings356...
Page 21
Table of Contents Accessing the IOLAN from the Network Users ......... 357 Accessing the IOLAN from the Network User Example Settings ..358 Appendix B SSL/TLS Ciphers ........359 Introduction ................359 Valid SSL/TLS Ciphers ............359 Appendix C Virtual Modem AT Commands ....361 Virtual Modem Initialization Commands........
Page 22
Table of Contents 1-Port IOLAN DB25 Male/Female............377 1-Port IOLAN RJ45................378 1-Port IOLAN RJ45 P (Power Over Ethernet) ........378 1-Port IOLAN DB9 ................. 379 2-Port IOLAN SDS1M (Modem) ............379 2-Port IOLAN ..................380 2-Port IOLAN RJ45 P (Power Over Ethernet) ........380 4-Port Desktop IOLAN ................
Page 23
Error Codes..................393 Decoder..................393 Appendix H Accessories ..........395 Introduction ................395 Installing a Perle PCI Card ............395 Starter Kit (Adapters/Cable)............ 398 RJ45F to DB25M DTE Crossover Adapter.......... 398 RJ45F to DB25M DCE Modem Adapter ..........399 RJ45F to DB25F DTE Crossover Adapter .......... 400 RJ45F to DB9M DTE Crossover Adapter..........
Page 24
Contacting Technical Support ..........417 Making a Technical Support Query............. 417 Who To Contact................417 Have Your Product Information Ready..........417 Making a support query via the Perle web page ......417 Repair Procedure ..................418 Feedback on this Manual ..............418 Glossary ................419 Index .................421...
Preface About This Book This guide provides the information you need to: configure the IOLAN incorporate the IOLAN into your production environment Intended Audience This guide is for administrators who will be configuring the IOLAN. Some prerequisite knowledge is needed to understand the concepts and examples in this guide: If you are using an external authentication application(s), working knowledge of the authentication application(s).
Typeface Conventions Typeface Conventions Most text is presented in the typeface used in this paragraph. Other typefaces are used to help you identify certain types of information. The other typefaces are: Typeface Example Usage At the C: prompt, type: This typeface is used for code examples and system- generated output.
Introduction Chapter 1 About the IOLAN The IOLAN is an Ethernet communications/terminal server that allows serial devices to be connected directly to LANs. The IOLAN can connect to a wide range of devices including: Terminals for multi-user UNIX systems Data acquisition equipment (manufacturing, laboratory, scanners, etc.) Retail point-of-sale equipment (bar coding, registers, etc.) PCs using terminal emulation or SLIP/PPP Modems for remote access and Internet access...
IOLAN Features IOLAN Features The IOLAN is a communications server used for making serial network connections. It attaches to your TCP/IP network and allows serial devices such as modems, terminals, or printers to access the LAN. It also allows LAN devices to access devices or equipment attached to IOLAN serial ports. This section highlights the hardware and software components you can expect to find in your IOLAN model.
Support for TCP/IP and UDP protocols including telnet and raw connections. Printer support via LPD and RCP. Virtual modem emulation. ‘Fixed tty’ support for several operating systems using Perle’s TruePort utility. DHCP/BOOTP for automated network-based setup. Dynamic statistics and line status information for fast problem diagnosis.
WINS support for Windows environments. Remote access support including PPP, SLIP, and SLIP with VJ Compression. Ability to remotely manage the Perle Remote Power Switch (RPS). Ability to cluster several IOLANs. Email alert notification. PPP authentication via PAP or CHAP.
Hardware and Connectivity Chapter 2 Introduction This chapter describes how to physically set up your IOLAN unit. It includes an overview of the IOLAN hardware components and how to power up the IOLAN to make sure it works correctly. IOLAN Components What’s Included The following components are included with your product: IOLAN unit...
Power Supply Specifications Available Accessories The following accessories are available for purchase for the various IOLAN models (except medical unit models): DIN Rail Mounting Kit (35mm) for the desktop models and Electric Utility models. IOLAN modem card for SCS rack mount models PCI adapter card for SCS rack mount models (for wireless WAN cards) 3 meter RJ45M-RJ45M 8-wire Sun/Cisco modular cable RJ45 to DB25 DTE Male adapter...
Power Supply Specifications Rack Mount Models (except Electric Utility models) DC Power Requirements The IOLAN DC is supplied with an integral Terminal Connections block to facilitate connection to a DC source(s). The DC supply(s) should have adequate over-current protection within the closed rack system and comply with local or national standards applicable to the installation territory.
Getting to Know Your IOLAN Getting to Know Your IOLAN This section describes the hardware components found on your IOLAN unit. Overview All IOLANs have the same basic hardware components to allow you to connect to serial devices, connect to the network, monitor LAN and serial activity, and manage the unit. Below is a list of these components: Serial Port(s)—Connector(s) that will be used to connect to a serial device.
Getting to Know Your IOLAN Power/Ready —This LED can cycle through several colors (amber, green, red) during a boot process, but should complete with a solid green light. The label of the LED, and whether or not the LED blinks green after power depends on the IOLAN, as shown in the table below. You can learn more about the Power/Ready LED in Hardware Troubleshooting on page 409.
Getting to Know Your IOLAN The 1-port IOLAN has one serial connection that is one of the following connectors: DB25 male, DB25 female, RJ45, or DB9 male. 2-Port This section describes the components found on the IOLAN 2-port models. Console/Serial Reset Switch External Power Supply...
Getting to Know Your IOLAN The 4-port IOLAN model has four RJ45 serial connections. This sections describes the basic components found on the IOLAN I/O models. Top View The following image shows a typical IOLAN I/O model. Your I/O model may have I/O connectors in slightly different positions.
Getting to Know Your IOLAN Rack Mount This section describes the basic components of all rack mount IOLAN models. This example uses the IOLAN SCS with dual Ethernet and dual AC power. Console Port/LED View Server LEDs Power ON/OFF Serial Activity Console Port Serial/Ethernet View Serial Ports...
Getting to Know Your IOLAN Medical Unit This section describes the basic components found on the IOLAN medical unit models. Top View Power LAN Activity Serial View Serial Ports Power/Ethernet View Power ON/OFF AC Power Ethernet Hardware and Connectivity 39...
Getting to Know Your IOLAN Electric Utility models This section describes the basic components of the Electric Utility models. This example uses the SDS32C DHV model. Front (LED/Console port)View Server LEDs Serial Activity Console Port Back (Serial/Ethernet/power) View Serial ports Ethernet port Reset switch Power/relay IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Getting to Know Your IOLAN Console/Serial Switch Located at the back of the desktop IOLAN models is a switch that controls whether serial port 1 is in Console or Serial mode. Note: The SDS T (Extended Temperature) models have two switches, Switch 1 is used for Console/Serial mode and Switch 2 is unused.
Powering Up the IOLAN Dedicated Console Port The rack mount IOLAN models have a dedicated Console port, located on the LED side of the IOLAN. You can use the supplied Administration cable (with the supplied RJ45 DB9F adapter if needed) to connect a terminal to the Console/Admin port to view diagnostic information and/or configure the IOLAN using the Menu or Command Line Interface (CLI).
Powering Up the IOLAN Medical Unit Models To power up the medical unit IOLAN, perform the following steps: You can attach the multi-function wall plate included with your medical unit IOLAN to the wall, then mount the IOLAN on the wall plate. Alternatively, you can mount the IOLAN on a tabletop or any suitable horizontal surface.
Powering Up the IOLAN DC Power Models (excluding Electric Utility models) To power up the IOLAN with DC power requirements, perform the following steps: Verify that the power switch on the IOLAN unit and the power source is in the Off position. Connect the primary and secondary DC input using the following specifications: Use wire gauge 20 to 22 AWG.
Powering Up the IOLAN Disconnecting 48V Power Supplies from the IOLAN To disconnect the power supply(s) from the IOLAN, do the following: Switch off the IOLAN. Switch off the power source(s). Disconnect all DC power input cables from the IOLAN terminal connector block. Remove any attached devices to the serial or Ethernet port(s).
Powering Up the IOLAN Electric Utility Models To power up the IOLAN, Electric Utility models, perform the following steps: Ensure that the power supply side of the connection is been powered down before attempting to connect the wires on the IOLAN side. Connect the power as outlined in the “wiring”...
Powering Up the IOLAN Wiring up an HV unit Terminal # Description Usage Normally Open Normally Open is a fail-safe relay connection. Use this with the Common terminal to act as switch contacts that remain open when the unit is powered off or in a failure state. Common Common is a fail-safe relay connection.
Powering Up the IOLAN Wiring up a DHV unit Terminal # Description Usage Normally Open Normally Open is a fail-safe relay connection. Use this with the Common terminal to act as switch contacts that remain open when the unit is powered off or in a failure state. Common Common is a fail-safe relay connection.
Powering Up the IOLAN For terminal# 1 through 8, the use of ring terminals size #6 (M3.5) is recommended using stranded wire size AWG 18-14. Tighten all screws to a torque of 12 Lb-in (1.36 Nm). For terminal# E, the use of ring terminal size #8 (M4) is recommended using stranded wire size AWG 18-14. Tighten screw to a torque of 12 Lb-in (1.36 Nm).
Page 50
Powering Up the IOLAN IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Configure IOLAN server parameters. Configure serial port parameters. Configure network parameters. Configure time parameters. Reboot the IOLAN. Manage the Perle Remote Power Switch (when applicable). Manage I/O channels (when applicable). View statistics while connected to the IOLAN. IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Configuration Methods Overview Configuration Methods Overview Some of the IOLAN configuration methods have the capability of configuring an IP address, which is the first required configuration step for a new IOLAN. Once the IOLAN has been assigned an IP address, any of the configuration methods can be used to configure the IOLAN. Configures an IP Address Following is a list of methods for setting the IOLAN IP address and a short explanation of when you would want to use that method:...
Printer (not supported on DS1/TS2 models) Serial Tunneling You can launch the Easy Config Wizard from the Perle website or from the installation CD-ROM. The Easy Config Wizard has been designed to walk you through the configuration process for any of the available configuration options shown on the Welcome window.
Connecting to the IOLAN Using DeviceManager Before you can use DeviceManager, you need to install it on your Windows operating system from the IOLAN CD-ROM or you can download it from the Perle website. After the DeviceManager application is installed, click...
Page 55
DeviceManager All discovered IOLANs will be displayed on the list along with their name and IP address. When a new IOLAN is discovered on the network, that has not yet been assigned an IP address, it will be displayed with an IP Address of Not Configured. To configure the IP address, click on the IOLAN and then click the Assign IP button.
DeviceManager Using DeviceManager After you have successfully connected to the IOLAN, DeviceManager displays the following window: Menu/Quick Access Buttons Navigation Tree Display Area Download Button Navigating the Options The left-hand navigation tree allows you to quickly and easily navigate the various Configuration and Statistics pages of DeviceManager.
From WebManager, you can launch EasyPort Web, which can be used to: access clustered IOLANs access ports configured with the Console Server profile and launch an SSH or Telnet session to those console ports exercise power management capability (when using the Perle Remote Power Switch) Configuration Methods 57...
WebManager Connecting to the IOLAN Using WebManager Before you can connect to the IOLAN using WebManager, the IOLAN must already be configured with a known IP address; see Setting Up the Network on page 75 to configure an IP address on your IOLAN.
WebManager Using WebManager After you have successfully logged into WebManager, you will see the following: Navigation Tree System Information You navigate through the different configuration windows by selecting an option in the left-hand navigation tree. When you click on an option that is under a folder, more navigation options are displayed: Navigation Tabs folder contains two configuration options,...
Command Line Interface Command Line Interface Overview The Command Line Interface (CLI) is a command line option for IOLAN configuration/management. See the Command Line Interface Reference Guide for a full breakdown of all the CLI commands and their functionality. Access Platforms The CLI is accessed by any application that supports a Telnet or SSH session to the IOLAN’s IP address, such as Putty, SecureCRT, or from a command prompt.
Menu Through the Serial Port To connect to the IOLAN through the serial port to configure/manage it using the CLI (or Menu), see Using a Direct Serial Connection to Specify an IP Address on page After you have established a connection to the IOLAN, you will get a Login: prompt.
Menu Using the Menu After you have successfully logged in, type screen at the prompt and press Enter . You will be asked to enter a terminal type, and then you will see the following Menu: To navigate through the Menu options, do the following: Highlight a Menu option by using the keyboard up and down arrows to navigate the list.
DHCP/BOOTP DHCP/BOOTP Overview Several IOLAN parameters can be configured through a DHCP/BOOTP server during the IOLAN bootup. This is particularly useful for configuring multiple IOLANs. Not all configuration parameters are supported in the DHCP/BOOTP configuration (see DHCP/BOOTP Parameters on page 64 for supported configuration parameters), so you will need to use another configuration method, such as DeviceManager, WebManager or CLI, to complete the configuration.
DHCP/BOOTP DHCP/BOOTP Parameters The following parameters can be set in the DHCP/BOOTP bootp file: SW_FILE—The full path, pre-fixed by hostname/IP address (IPv4 or IPv6), and file name of the firmware update. CONFIG_FILE—The full path, pre-fixed by hostname/IP address (IPv4 or IPv6), and file name of the configuration file.
To connect to the IOLAN through an SNMP Management tool or MIB browser, do the following: Load the file from the IOLAN CD-ROM or Perle website into your SNMP perle-sds.MIB manager (this MIB works for all SDS, SCS, STS, and MDC models).
Using the SNMP MIB After you have successfully connected to the IOLAN through your SNMP Management tool or MIB browser, expand the folder to see the IOLAN’s parameter folders. Below is PERLE-IOLAN-SDS-MIB an example of the configurable parameters under the folder. ServicesInfo...
IOLAN+ Interface IOLAN+ Interface Overview For environments that have both IOLAN and IOLAN+ models or for users who prefer to configure using the IOLAN+ Menu or CLI, the IOLAN+ user interface is available. The IOLAN+ interface is supported on all IOLAN SDS, SCS, and STS models up to and including 16 serial ports. Access Platforms The Menu is accessed by any application that supports a Telnet or SSH session to the IOLAN’s IP address, such as Putty, SecureCRT, or from a command prompt.
IOLAN+ Interface Changes to the IOLAN+ Interface You should be aware that the following IOLAN+ configuration fields are no longer supported: You no longer have the option of selecting Also, access Authentication/Logging. kill reboot are not available. stats When you select , the following fields are not available on the Port Setup Menu: port ** Administrator **...
Page 69
IOLAN+ Interface When you select line Access , the following fields are not available on the Access Menu: ** Administrator ** ACCESS MENU REMOTE-ADMIN TTY Name Access Authentication Mode UDP Retries Interval [abcd ] [Local ] N/A [Raw [abcdef ] [Local ] N/A [Raw ________________________________________________________________________________...
Page 70
IOLAN+ Interface When you select access Remote access sites. , the following fields are not available on the Remote Access Systems Screen: ** Administrator ** REMOTE ACCESS SYSTEMS SCREEN REMOTE-ADMIN Sitename User name Password Device type Service type Inactivity Phone number Login-script ________________________________________________________________________________ Service type...
Page 71
IOLAN+ Interface When you select server , the following fields are not available on the Server Configuration menu: ** Administrator ** SERVER CONFIGURATION REMOTE-ADMIN Name [wchiewsds2 Debug mode IP address [172.16.22.7 Subnet mask [255.255.0.0 Ethernet address (00:80:d4:88:88:88) Ethernet speed [AUTO Language [English Identification...
Page 72
IOLAN+ Interface IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
If you are setting up the IOLAN medical unit (MDC) model, you must first install the latest firmware to take advantage of the full feature set available with the MDC model. The latest firmware can be found either on the CD-ROM that came with the IOLAN or on the Perle website, (when you access the webpage, select your specific www.perle.com/downloads...
IOLAN. TruePort (Virtual COM Port)—Allows a networked system to communicate with your serial device through a virtual COM or TTY port, using the Perle TruePort software. TCP Sockets (Raw TCP)—Allows hosts on the network to communicate with a serial device that requires raw data throughput (such as a printer or card reader) connected to the IOLAN serial port.
Setting Up the Network Setting Up the Network The most important part of setting up the network is assigning an IP address to the IOLAN, whether this is a static IP address or enabling a DHCP/BOOTP-assigned IP address. You should also assign a name to the IOLAN, to make it easier to recognize.
Setting Up the Network Using WebManager To use the WebManager as your configurator, you must first assign an IP address to the IOLAN. You can use the Easy Config Wizard to assign an IP address to the IOLAN or any of the other methods described in this section.
Setting Up the Network Using a Direct Serial Connection to Enable BOOTP/DHCP If you are using BOOTP, you need to add an entry in the BOOTP server for the IOLAN that associates the MAC address (found on the back of the IOLAN) and the IP address that you want to assign to the IOLAN.
Setting Up the Network Using ARP-Ping You can use the ARP-Ping (Address Resolution Protocol) method to temporarily assign an IP address and connect to your IOLAN to assign a permanent IP address. To use ARP-Ping to temporarily assign an IP address: From a local UNIX/Linux host, type the following at the system command shell prompt: arp -s a.b.c.d aa:bb:cc:dd:ee:ff ®...
Setting Up the Serial Port(s) Setting Up the Serial Port(s) The DeviceManager and WebManager have the following serial port profiles that will simplify serial port setup: Console Management—The Console Management profile configures a serial port to provide network access to a console or administrative port. This profile sets up a serial port to support a TCP socket that listens for a Telnet or SSH connection from the network.
Page 80
Setting Up the Serial Port(s) Virtual Modem—The Virtual Modem (Vmodem) profile configures a serial port to simulate a modem. When the serial device connected to the IOLAN initiates a modem connection, the IOLAN starts up a TCP connection to another IOLAN configured with a Virtual Modem serial port or to a host running a TCP application.
Setting Up Users Setting Up Users When you have a user who is accessing a device connected to a serial port from the network or who is accessing the network from a device connected to a serial port through the IOLAN, you can create a user account and configure the user’s access privileges.
Page 82
Setting Up Users IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Using DeviceManager and WebManager Chapter 5 Introduction The DeviceManager and WebManager IOLAN managers have been designed to be very similar to use. DeviceManager is a Windows-based application and WebManager is a browser-based application. Both options use the IOLAN’s IP address to access the IOLAN; the DeviceManager can be used to assign an IP address to a new IOLAN and the WebManager requires that the IOLAN already have an IP address before it can be used to configure the IOLAN.
Navigating DeviceManager/WebManager Navigating DeviceManager/WebManager The DeviceManager and WebManager have very similar navigation methods. The left-hand side of the manager is the navigation tree and the center is the configuration area. The DeviceManager has menu and quick access buttons, whereas the WebManager has system information and some navigation options on the far right-hand side.
Navigating DeviceManager/WebManager WebManager The WebManager uses a expandable/collapsible buttons with folders and pages for the navigation tree. You can expand the buttons to view the folders and pages to see the available configuration options. When you access a configuration page, you can often navigate the tabs in the configuration area to access all of the configuration options.
Starting a New Session To start a new session and connect to the IOLAN using the DeviceManager: Start the DeviceManager by selecting Start All Programs Perle DeviceManager DeviceManager When the DeviceManager starts, it searches the network for IOLANs. Note: If you are not seeing IPv6 addresses in the list (you must expand the entry), see...
Using DeviceManager to Connect to the IOLAN Assigning a Temporary IP Address to a New IOLAN You can temporarily assign an IP address to the IOLAN that is connected to your local network segment, for the purpose of connecting to it and downloading a configuration file (containing a permanent IP address).
Using DeviceManager to Connect to the IOLAN Adding/Deleting IOLANs Manually To permanently add/delete the IOLAN to/from the IOLAN List , click the button. The following window is displayed: To permanently add the IOLAN to the IOLAN list, click the button and type in the IPv4 or IPv6 address of the IOLAN.
A user who does not Login have admin privileges can access EasyPort Web to access clustered serial ports, Perle Remote Power Switches (RPS), and/or RPS plugs (must already be configured on this IOLAN) by typing their user name and password on the login screen.
Managing the IOLAN Opening an Existing Configuration File If you select the File Open , a browse window is opened so you can select the configuration file you want to edit. IOLAN configuration files saved in the DeviceManager can be in the IOLAN-native binary format ( ) or as a text file ( ), which can be edited with a text editor.
Network Settings Chapter 6 Introduction The Network section is used to configure the parameters that identify the IOLAN within the network and how the IOLAN accesses hosts on the network. The following configuration windows are available: IP Settings—This window configures the IOLAN’s name, IP address, and Ethernet information.
IP Settings IP Settings IPv4 Settings Overview The parameters in IPv4 settings are used to access the IOLAN and are how the IOLAN accesses the network. Field Descriptions Configure the following parameters: System Name System Name is used for informational purposes by such tools as the DeviceManager and is also used in conjunction with the Domain field to construct a fully qualified domain name (FQDN).
IP Settings WINS Server When DHCP/BOOTP is enabled, you can enable this option to have the Obtain IOLAN receive the WINS IP address from the DHCP/BOOTP server. Automatically Default: Enabled IPv6 Settings Overview Configure IPv6 settings when the IOLAN resides in an IPv6 network. Field Descriptions Configure the appropriate parameters: Obtain IPv6...
Page 94
IP Settings Default Gateway Specify the gateway IP address that will provide general access beyond the local network. Field Format: IPv6 address DSN Server Specify the IPv6 address of a DNS host in your network for host name resolution. Field Format: IPv6 address DNS Server Obtain When DHCPv6 is enabled, you can enable this option to have the IOLAN Automatically...
IP Settings Adding/Editing a Custom IPv6 Address You can manually add one of the following: The IPv6 network prefix (and the IOLAN will determine an IPv6 address based on the network prefix and the IOLAN MAC address). The complete IPv6 address. Configure the following parameters: Create a unique When enabled, the IOLAN will derive an IPv6 address from the entered...
IP Settings Advanced Overview tab configures Active Standby (SCS models only), DNS update, IPv6 Advertising Advanced Router settings, and the Ethernet interface(s) hardware speed and duplex. Configure the parameters in the tab only if: Advanced you have already set up Dynamic DNS with DynDNS.com you want to enable Active Standby (SCS models only) you want to specify the line speed and duplex you want the IOLAN to act as an IPv6 Advertising Router...
Page 97
IP Settings Monitoring Interval (SCS only) The interval in which the active interface is checked to see if it is still communicating. Default: 100 ms Recovery Delay (SCS only) The time that the IOLAN will wait to make the secondary interface (Ethernet 2) active after it has been detected as up.
Advanced Advanced Host Table Overview The Host table contains the list of hosts that will be accessed by an IP address or Fully Qualified Domain Name (FQDN) from the IOLAN. This table will contain a symbolic name for the host as well as its IP address or FQDN.
Advanced Adding/Editing a Host Configure the appropriate parameters: Host Name The name of the host. This is used only for the IOLAN configuration. Field Format: Up to 14 characters, no spaces. IP Address The host’s IP address. Field Format: IPv4 or IPv6 address Fully Qualified When you have DNS defined in the IOLAN, you can enter a DNS resolvable Domain Name...
Advanced Route List Overview Entering routes in the routing list enables the identification of gateways to be used for accessing specific hosts or external networks from the IOLAN's local network. Functionality There are three types of routes: Default—A route that provides general access beyond your local network. Host—A route defined for accessing a specific host external to your local network.
Advanced Adding/Editing Routes From the tab, if you click the button, you will be able to add a new or edit an Route List Edit existing route. Configure the appropriate parameters: Type Specify the type of route you want to configure. Data Options: Host—A route defined for accessing a specific host external to your local network.
Advanced Interface The Interface list is comprised of configured IPv6 tunnels and serial ports defined for Remote Access (PPP) and Remote Access (SLIP) profiles. Select this option when you want to use the specified interface as the gateway to the destination.
Advanced Editing/Adding DNS/WINS Servers Configure the parameter: DNS IP Address You can configure up to four DNS servers. Field Format: IPv4 or IPv6 address WINS IP Address You can configure up to four WINS servers. Field Format: IPv4 address Overview The Routing Information Protocol (RIP) is a routing protocol used with almost every TCP/IP implementation.
Advanced Field Descriptions Configure the appropriate parameters: Ethernet Mode Enable/disable RIP (Routing Information Protocol) mode for the Ethernet interface. Data Options: None—Disables RIP over the Ethernet interface. Send—Sends RIP over the Ethernet interface. Listen—Listens for RIP over the Ethernet interface. Send and Listen—Sends RIP and listens for RIP over the Ethernet interface.
Advanced End Time The time that the MD5 key becomes invalid. The time format is dependent on your system’s settings. The MD5 key that is being used by your routers. Confirm Key Retype the MD5 key that is being used by your routers to verify that it was typed correctly.
Advanced User Name Specify the user name used to access the account set up on the DynDNS.org server. Password Specify the password used to access the account set up on the DynDNS.org server. Account Settings Click this button to configure the Dynamic DNS DynDNS.org account Button information.
Advanced Validate Peer Enables/disables peer validation between the DynDNS.org server and the Certificate IOLAN. This may be desirable, since the DynDNS user name and password are sent from the IOLAN to the DynDNS server when the IP address needs to be updated and when an account refresh is performed.
Advanced Adding/Editing a Cipher Suite To see a list of valid cipher suite combinations, see Appendix B, SSL/TLS Ciphers on page 359. Configure the following parameters: Encryption Select the type of encryption that will be used for the SSL connection. Data Options: Any—Will use the first encryption format that can be negotiated.
Advanced HMAC Select the key-hashing for message authentication method for your encryption type. Data Options: SHA1 Default: Any Validation Criteria Field Descriptions If you choose to configure validation criteria, the information in the peer SSL/TLS certificate must match exactly the information configured in this window in order to pass peer authentication and create a valid SSL/TLS connection.
Advanced Common Name An entry for common name; for example, the host name or fully qualified domain name. This field is case sensitive in order to successfully match the information in the peer SSL/TLS certificate. Data Options: Maximum 64 characters Email An entry for an email address;...
Advanced Adding/Editing an IPv6 Tunnel When you add/edit an IPv6 tunnel, you are determining how an IPv6 message will reach an IPv6 device through an IPv4 network. Configure the following parameters: Name The name of the IPv6 tunnel. Field Format: Maximum 16 alphanumeric characters Default: ipv6_tunnel1 Mode The method or protocol that is used to create the IPv6 tunnel.
Page 112
Advanced IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Configuring Serial Ports Chapter 7 Introduction The Serial section is used to configure the serial ports on your IOLAN. The following configuration windows are available: Serial Ports—Configures the type of connection that the serial port is being used for. This is accomplished by selecting a connection profile and then configuring the applicable parameters for that profile.
Serial Ports Editing a Serial Port In the Serial Port Settings window, click on a serial port and then click the button, the Edit following window is displayed: IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Serial Ports Click the Change Profile button to select a different serial port profile if you don’t want the displayed profile: As you select the different serial port profiles, a short description and a picture representing a typical application of the profile is displayed. When you have selected the appropriate profile for the serial port, click and those serial port profile configuration options will be displayed.
Serial Port Profiles Resetting a Serial Port When you change a serial port’s configuration, you can download the configuration file to the IOLAN and then reset a specific serial port(s) to see how you change affects the serial port’s behavior. To reset a serial port, select Tools Reset Serial Port(s)
Serial Port Profiles Hardware Tab Field Descriptions tab configures all the serial port hardware connection information. The window below Hardware shows an SDS1 model; your Hardware tab might display a subset of the parameters described, depending on the IOLAN model and supported hardware. Configure the following parameters: Serial Interface Specifies the type of serial line that is being used with the IOLAN.
Page 118
Serial Port Profiles Duplex Used with a EIA-485 serial interface, specify whether the serial port is Full Duplex (communication both ways at the same time) or Half Duplex (communication in one direction at a time). Default: Full TX Driver Control Used with a serial interface, if your application supports EIA-485 (Request To Send), select this option.
Serial Port Profiles Email Alert Tab Field Descriptions Email notification can be set at the Server and/or serial port levels. You can set unique email notifications for each serial port because the person who administers the IOLAN might not be the same person who administers the serial device(s) attached to the IOLAN port.
Serial Port Profiles Packet Forwarding Tab Field Descriptions tab can be used to control/define how and when serial port data packets are Packet Forwarding sent from the IOLAN to the network. Configure the following parameters: Minimize Latency This option ensures that all application data is immediately forwarded to the serial device and that every character received from the device is immediately sent on the network.
Page 121
Serial Port Profiles Packet Definition When enabled, this group of parameters allows you to set a variety of packet definition options. The first criteria that is met causes the packet to be transmitted. For example, if you set a ms and a Force Transmit Timer 1000 bytes, whichever criteria is met first is what will cause the...
Page 122
Serial Port Profiles EOF1 Character Specifies the End of Frame character, which defines when the frame is ready to be transmitted. The actual transmission of the frame is based on the Trigger Forwarding Rule. Range: Hex 0-FF Default: 0 EOF2 Character When enabled, creates a sequence of characters that must be received to define the end of the frame (if the EOF1 character is not immediately followed by the EOF2 character, the IOLAN waits for another EOF1 character to start the...
Serial Port Profiles SSL/TLS Settings Tab Field Descriptions You can create an encrypted connection using SSL/TLS for any serial port profile that accesses the IOLAN from the network. When you enable this feature, it will automatically use the global SSL/TLS settings (configured on Security SSL/TLS ), although you can configure unique SSL/TLS...
Serial Port Profiles Validation Criteria Click this button to create peer certificate validation criteria that must be met Button for a valid SSL/TLS connection. Validation Criteria Field Descriptions on page 126 for more information. Cipher Suite Field Descriptions The SSL/TLS cipher suite is used to encrypt data between the IOLAN and the client. You can specify up to five cipher groups.
Serial Port Profiles Adding/Editing a Cipher Suite To see a list of valid cipher suite combinations, see Appendix B, SSL/TLS Ciphers on page 359. Configure the following parameters: Encryption Select the type of encryption that will be used for the SSL connection. Data Options: Any—Will use the first encryption format that can be negotiated.
Serial Port Profiles HMAC Select the key-hashing for message authentication method for your encryption type. Data Options: SHA1 Default: Any Validation Criteria Field Descriptions If you choose to configure validation criteria, the information in the peer SSL/TLS certificate must match exactly the information configured in this window in order to pass peer authentication and create a valid SSL/TLS connection.
Serial Port Profiles Common Name An entry for common name; for example, the host name or fully qualified domain name. This field is case sensitive in order to successfully match the information in the peer SSL/TLS certificate. Data Options: Maximum 64 characters Email An entry for an email address;...
Serial Port Profiles Listen for The port number that the IOLAN will listen on for incoming TCP connections. Connections on Default: 10001, depending on the serial port number TCP Port Enable IP Aliasing Enables/disables the ability to access a serial device connected to the serial port by an IP address (or host name that can be resolved to the Internet Address in a DNS network) instead of the IOLAN’s IP address and port number.
Page 129
Serial Port Profiles Enable Microsoft When enabled, a user can access SAC (the interface of the Microsoft Special Emergency Management Systems utility) through EasyPort Web when the Administrator IOLAN’s serial port is connected to a Microsoft Server 2003 or Microsoft Console (SAC) Server 2008 host.
Serial Port Profiles Modem The name of the predefined modem that is used on this line. Phone The phone number to use when Dial Out is enabled. TruePort Profile Overview TruePort is especially useful when you want to improve data security, as you can enable an SSL/TLS connection between the TruePort host port and the IOLAN.
Serial Port Profiles General Tab Field Descriptions tab determines how the TruePort connection is initiated and then sets up the TruePort General appropriate connection parameters. Configure the following parameters: Connect to remote When enabled, the IOLAN initiates communication to the TruePort client. system Default: Enabled Host Name...
Serial Port Profiles Adding/Editing Additional TruePort Hosts You can define a list of hosts that the serial device will communicate to through TruePort Lite or a primary/backup host. Configure the following parameters: Define additional When this option is enabled, you can define up to 49 hosts that the serial device hosts to connect to connected to this serial port will attempt communicate to.
Page 133
Serial Port Profiles Host Name Specify the preconfigured host that will be in the multihost list. Default: None TCP Port Specify the TCP port that the IOLAN will use to communicate to the Primary Host Default: 10000 + serial port number - 1 (so serial port 47 defaults to 10046)
Serial Port Profiles Advanced Tab Field Descriptions tab determines how the TruePort connection is initiated and then sets up the TruePort Advanced appropriate connection parameters. Configure the following parameters: Signals high This option has the following impact based on the state of the TruePort when...
Page 135
Serial Port Profiles Enable Data When enabled, serial data will be buffered if the TCP connection is lost. When Logging the TCP connection is re-established, the buffered serial data will be sent to its destination (this option is not available when , or Monitor DSR Monitor DCD...
Serial Port Profiles TCP Sockets Profile Overview The TCP Socket profile allows for a serial device to communicate over a TCP network. The TCP connection can be initiated from a host on the network and/or a serial device. This is typically used with an application on a Workstation or Server that communicates to a device using a specific TCP socket.
Page 137
Serial Port Profiles TCP Port The TCP port that the IOLAN will use to listen for incoming connections. Default: 10000 plus the serial port number, so serial port 5 would have a default of 10005 Allow Multiple When this option is enabled, multiple hosts can connect to the serial device that Hosts to Connect is connected to this serial port.
Serial Port Profiles Adding/Editing Additional Hosts You can define a list of hosts that the serial device will communicate to or a primary/backup host. Configure the following parameters: Define additional When this option is enabled, you can define up to 49 hosts that the serial device hosts to connect to connected to this serial port will attempt communicate to.
Page 139
Serial Port Profiles TCP Port Specify the TCP port that the IOLAN will use to communicate to the Host Default: 0...
Serial Port Profiles Advanced Tab Field Descriptions Configure the following parameters: Authenticate User Enables/disables login/password authentication for users connecting from the network. Default: Disabled Enable TCP Enables a per-connection TCP keepalive feature. After the configured number Keepalive of seconds, the connection will send a gratuitous ACK to the network peer, thus either ensuring the connection stays active OR causing a dropped connection condition to be recognized.
Page 141
Serial Port Profiles Dial In If the device is remote and will be dialing in via modem or ISDN TA, enable this parameter. Default: Disabled Dial Out If you want the modem to dial a number when the serial port is started, enable this parameter.
Serial Port Profiles UDP Sockets Profile Overview The UDP profile configures a serial port to broadcast UDP data to systems and/or receive UDP data from systems. Functionality When you configure , you are setting up a range of IP addresses and the port numbers that you will use to send serial data to the LAN (using UDP) or receive UDP data from the LAN which will be forwarded to the serial port.
Serial Port Profiles An example UDP configuration is described based on the following window. The UDP configuration window, taken from the DeviceManager, is configured to: UDP Entry 1 All hosts that have an IP address that falls within the range of 172.16.1.1 172.16.1.25 and listen to...
Serial Port Profiles Direction The direction in which information is received or relayed: Disabled—UDP service not enabled. LAN to Serial— UDP Port can be set to Auto Learn Port . The IOLAN will listen on port value configured in the Listen for connections on UDP port parameter for messages coming from the learned or configured port.
Serial Port Profiles Functionality This profile can be configured for users: who must be authenticated by the IOLAN first and then a connection to a host can be established. who are connecting through the serial port directly to a host.
Serial Port Profiles General Tab Field Descriptions Configure the following parameters: Terminal Type Specifies the type of terminal connected to the line. Data Options: Dumb WYSE60 VT100 ANSI TVI925 IBM3151TE VT320 (specifically supporting VT320-7) HP700 (specifically supporting HP700/44) Term1, Term2, Term3 (user-defined terminals) Default: Dumb Require Login When users access the IOLAN through the serial port, they must be...
Page 147
Serial Port Profiles Connect to Remote When the serial port is started, the IOLAN will initiate a connection to the System specified host using the specified protocol. With this option, user authentication will not be performed by the IOLAN. Default: Disabled Protocol Specify the protocol that will be used to connect to the specified host.
Serial Port Profiles Advanced Tab Field Descriptions Configure the following parameters: Enable Message of Enables/disables the display of the message of the day. the Day (MOTD) Default: Disabled Reset Terminal on When enabled, resets the terminal definition connected to the serial port when disconnect a user logs out.
Page 149
Serial Port Profiles Idle Timeout Use this timer to close a connection because of inactivity. When the Idle expires, the IOLAN will end the connection. Timeout Range: 0-4294967 seconds (about 49 days) Default: seconds so the port will never timeout Session Timeout Use this timer to forcibly close the session/connection when the Session...
Serial Port Profiles User Service Settings Login Settings These settings apply to users who are accessing the network from a terminal connected to the IOLAN’s serial port. The Telnet, Rlogin, SSH, SLIP, PPP settings take effect when the connection method is defined in the user’s profile (or are passed to the IOLAN by a RADIUS or TACACS+ server when those authentication methods are being used).
Serial Port Profiles Telnet Settings The Telnet settings apply when the is set to or the Terminal profile specifies a User Service Telnet Telnet connection to a host. Configure the following parameters: Terminal Type Type of terminal attached to this serial port; for example, ANSI or WYSE60. Enable Local Echo Toggles between local echo of entered characters and suppressing local echo.
Serial Port Profiles Escape Defines the escape character. Returns you to the command line mode. This value is in hexadecimal. Default: 1d (ASCII value Rlogin Settings The Rlogin settings apply when the is set to or the Terminal profile has User Service Rlogin Require...
Serial Port Profiles SSH Settings The SSH settings apply when the is set to or the Terminal profile specifies an User Service connection to a host. Configure the following parameters: Terminal Type Type of terminal attached to this serial port; for example, ANSI or WYSE60. Verbose Mode When enabled, displays debug messages on the terminal.
Serial Port Profiles SSH2 Ciphers Select the order of negotiation for the encryption method (ciphers) that the Opt1-5 IOLAN will use for the SSH version 2 connection: Data Options: 3DES Blowfish Arcfour CAST When enabled, an authentication method used by SSH version 1 and 2. Use RSA authentication for the SSH session.
Page 155
Serial Port Profiles The Maximum Transmission Unit (MTU) parameter restricts the size of individual SLIP packets being sent by the IOLAN. Enter a value between 256 and 1006 bytes; for example, 512. The default value is . If your user is authenticated by the IOLAN, this MTU value will be overridden when you have set a value for the user.
Serial Port Profiles PPP Settings The PPP settings apply when the is set to User Service Configure the following parameters: IPv4 Local IP The IPV4 IP address of the IOLAN end of the PPP link. For routing to work, Address you must enter a local IP address.
Page 157
Serial Port Profiles IPv6 Remote The remote IPv6 interface identifier of the remote end of the PPP link. Choose Interface Identifier an address that is part of the same network or subnetwork as the IOLAN. If you enable , the IOLAN will ignore the Negotiate IP Address Automatically remote IP address value you enter here and will allow the remote end to specify its IP address.
Page 158
Serial Port Profiles User Complete this field only if you have specified (security CHAP protocols) in the field, and Authentication you wish to dedicate this line to a single remote user, who will be authenticated by the IOLAN, or you are using the IOLAN as a router (back-to-back with another IOLAN). When Connect is set to...
Page 159
Serial Port Profiles Remote Password Complete this field only if you have specified (security CHAP protocols) in the field, and Security you wish to dedicate this serial port to a single remote user, and this user will be authenticated by the IOLAN, or you are using the IOLAN as a router (back-to-back with another IOLAN) Remote password means the following: When...
Page 160
Serial Port Profiles Authentication The timeout, in minutes, during which successful PAP or CHAP authentication Timeout must take place (when are specified). If the timer expires before CHAP the remote end has been authenticated successfully, the link will be terminated. Range: 1-255 Default: 1 minute Roaming Callback A user can enter a telephone number that the IOLAN will use to callback...
Serial Port Profiles Dynamic DNS Launches the Dynamic DNS window when IP Address Negotiation is enabled, Button which can then update the DNS server with the IP address that is negotiated and accepted for the PPP session. Dynamic DNS Field Descriptions on page 186 for more information.
Serial Port Profiles Serial Tunneling Profile Overview The Serial Tunneling profile allows two IOLANs to be connected back-to-back over the network to establish a virtual link between two serial ports based on RFC 2217. Functionality The serial device that initiates the connection is the Tunnel Client and the destination is the Tunnel...
Serial Port Profiles General Tab Field Descriptions Configure the following parameters: Act As Tunnel The IOLAN will listen for an incoming connection request on the specified Server on the specified Internet Address TCP Port Default: Enabled TCP Port The TCP port that the IOLAN will listen for incoming connection on. Default: 10000+serial port number;...
Serial Port Profiles Virtual Modem Profile Overview Virtual Modem (Vmodem) is a feature of the IOLAN that provides a modem interface to a serial device. It will respond to AT commands and provide signals in the same way that a serially attached modem would.
Serial Port Profiles General Tab Field Descriptions Configure the following parameters: Listen on TCP Port The IOLAN TCP port that the IOLAN will listen on. Default: 10000 + serial port number (for example, serial port 12 defaults to 10012) Connect When enabled, automatically establishes the virtual modem connection when Automatically At the serial port becomes active.
Serial Port Profiles Success String String that is sent to the serial device when a connection succeeds. Default: CONNECT <speed>, for example, CONNECT 9600 Failure String String that is sent to the serial device when a connection fails. Default: NO CARRIER Numeric Codes When enabled, the connection status is sent to the connected device using the following numeric codes:...
Page 167
Serial Port Profiles DTR Signal Acts as Specify this option to make the DTR signal always act as a RI signal. Default: Disabled RTS Signal Always Specify this option to make the RTS signal always act as a RTS signal. Default: Enabled RTS Signal Acts as Specify this option to make the RTS signal always act as a DCD signal.
Serial Port Profiles Phone Number to Host Mapping If your modem application dials using a phone number, you can add an entry in the Phone Number to Host Mapping window that can be accessed by all serial ports configured as Virtual Modem. You need to enter the phone number sent by your modem application and the IOLAN IP address and TCP Port that will be receiving the “call”.
Serial Port Profiles VModem Phone Number Entry Create an entry in the Phone Number to Host Mapping window. Configure the following parameters: Phone Number Specify the phone number your modem application sends to the modem. Note: The IOLAN does not validate the phone number, so it must be entered in the exact way the application will send it.
Serial Port Profiles General Tab Field Descriptions tab displays the signal pins. This window is also used to enable/disable the signal pins. General Highlight a signal and then click the button to configure the signal pin’s parameters. Edit Input Signal Field Descriptions Digital I/O Extension on page 263 for information about the tab.
Page 171
Serial Port Profiles Trigger When the trigger condition is met, triggers the specified alarm action. Data Options: Disabled—No alarm settings. This is the default. Inactive—When the expected Digital input is active, going inactive will trigger an alarm. Active—When the expected Digital input is inactive, going active will trigger an alarm.
Serial Port Profiles Output Signal Field Descriptions Digital I/O Extension on page 263 for information about the tab. I/O Extension Configure the following parameters: Description Provide a description of the channel, making it easier to identify. Data Options: Maximum 20 characters, including spaces Failsafe Action When there has been no I/O activity within the specified time (set in the I/O Interfaces, Settings on the Failsafe Timer tab) and the...
Serial Port Profiles Modbus Gateway Profile Overview Each serial port can be configured as either a Modbus Master gateway or a Modbus Slave gateway, depending on your configuration and requirements. If your model supports I/O, see Modbus I/O Access on page 278 for more information on using the Modbus protocol to access I/O data.
Serial Port Profiles General Tab Field Descriptions Configure the following parameters: Mode Specify how the Modbus Gateway is defined on the serial port. Data Options: Modbus Master—Typically, the Modbus Master is connected to the Serial Port and is communicating to Modbus Slaves on the network. Modbus Slave—Typically, the Modbus Master is accessing the IOLAN through the network to communicated to Modbus Slaves connected to the IOLAN’s Serial Ports.
Serial Port Profiles Advanced Field Descriptions Configure the following parameters: Idle Timeout Use this timer to close a connection because of inactivity. When the Idle Timeout expires, the IOLAN will end the connection. Range: 0-4294967 seconds (about 49 days) Default: 0 (zero), which does not timeout, so the connection is permanently open.
Serial Port Profiles Modbus Slave IP Settings Field Descriptions This window is used to configure the Modbus Slaves. The following buttons are available: Add Button Adds an entry into the Modbus Destination Slave IP Settings table. Edit Button Edits an entry in the Modbus Destination Slave IP Settings table. Delete Button Deletes an entry from the Modbus Destination Slave IP Settings table.
Serial Port Profiles Adding/Editing Modbus Slave IP Settings Configure the following parameters: UID Start When is set to and you have sequential Modbus Slave IP Destination Host addresses (for example, 10.10.10.1, 10.10.10.2, 10.10.10.3, etc.), you can specify a UID range (not supported with IPv6 addresses) and the IOLAN will automatically increment the last digit of the configured IP address.
Serial Port Profiles End IP Address Displays the ending IP address of the TCP/Ethernet Modbus Slaves, based on the Start IP address and the UID range (not supported for IPv6 addresses). Field Format: IPv4 address Protocol Specify the protocol that is used between the Modbus Master and Modbus Slave(s).
Default: Disabled Power Management Profile Overview The Power Management profile applies when there is a Perle Remote Power Switch (RPS) connected to the serial port. This profile is used to configure the RPS. See RPS Control on page 313 information on how to actively management the RPS.
Serial Port Profiles General Tab Field Descriptions Configure the following parameters: RPS Name Specify a name for the RPS. RPS Model Specify the RPS model. Data Options: RSP820, RPS830, RPS1620, RPS1630 Default: RSP820 Edit Button Highlight a plug and then click the Edit button to configure the plug.
Serial Port Profiles Default State Sets the default state of the plug. Data Options: On, Off Default: Off Associated Port When a server or router has its console port connected to one of the serial ports on this IOLAN and that server/router is also powered by this RPS, the server/router serial port number should be entered here.
Serial Port Profiles fred wilma General Tab Field Descriptions Configure the following parameters: IPv4 Local IP The IPV4 IP address of the IOLAN end of the PPP link. For routing to work, Address you must enter a local IP address. Choose an address that is part of the same network or subnetwork as the remote end;...
Page 183
Serial Port Profiles IPv6 Local The local IPv6 interface identifier of the IOLAN end of the PPP link. For Interface Identifier routing to work, you must enter a local IP address. Choose an address that is part of the same network or subnetwork as the remote end. Do not use the IOLAN’s (main) IP address in this field;...
Serial Port Profiles Authentication Tab Field Descriptions Configure the following parameters: Authentication The type of authentication that will be done on the link. You can use CHAP to authenticate a serial port or user on the IOLAN, from a remote location, or authenticate a remote client/device, from the IOLAN.
Page 185
Serial Port Profiles Password Complete this field only if you have specified (security CHAP protocols) in the field and: Security you wish to dedicate this serial port to a single remote user, who will be authenticated by the IOLAN, or you are using the IOLAN as a router (back-to-back with another IOLAN) Password means the following: When...
Serial Port Profiles CHAP Challenge The interval, in minutes, for which the IOLAN will issue a CHAP re-challenge Interval to the remote end. During CHAP authentication, an initial CHAP challenge takes place, and is unrelated to CHAP re-challenges. The initial challenge takes place even if re-challenges are disabled.
Serial Port Profiles Advanced Tab Field Descriptions Configure the following parameters: Routing Determines the routing mode (RIP, Routing Information Protocol) used on the interface.This is the same function as the Framed-Routing attribute for RADIUS authenticated users. Data Options None—Disables RIP over the PPP interface. Send—Sends RIP over the PPP interface.
Page 188
Serial Port Profiles Configure Request The maximum time, in seconds, that LCP (Link Control Protocol) will wait Timeout before it considers a packet to have been lost. configure request Range: 1-255 Default: 3 seconds Configure Request The maximum number of times a packet will be re-sent configure request Retries...
Page 189
Serial Port Profiles Dial In If the device is remote and will be dialing in via modem or ISDN TA, enable this parameter. Default: Disabled Dial Out If you want the modem to dial a number when the serial port is started, enable this parameter.
Serial Port Profiles Remote Access (SLIP) Profile Overview Remote Access (SLIP) profile configures a serial port to allow a remote user to establish a SLIP connection to the IOLAN’s serial port. This is typically used with a modem for dial-in or dial-out access to the network.
Serial Port Profiles Advanced Tab Field Descriptions Configure the following parameters: The Maximum Transmission Unit (MTU) parameter restricts the size of individual SLIP packets being sent by the IOLAN. Enter a value between 256 and 1006 bytes; for example, 512. The default value is .
Page 192
Serial Port Profiles Dial In If the device is remote and will be dialing in via modem or ISDN TA, enable this parameter. Default: Disabled Dial Out If you want the modem to dial a number when the serial port is started, enable this parameter.
Custom App/Plugin profile is used in conjunction with custom applications created for the IOLAN by using the Perle SDK. See the SDK Programmer’s Guide (the SDK and guide are accessible via a request form located on the Perle website at ) for information about the functions that www.perle.com/supportfiles/SDK_Request.shtml...
Port Buffering Port Buffering Overview The Port Buffering feature allows data activity on the IOLAN’s serial ports to be held in memory for viewing at a later stage without affecting the normal operation of the serial ports. Note: Port Buffering is only supported on serial port(s) configured for the Console Management profile.
NFS server to convert the encrypted data to a readable file for administrators to analyze. The Decoder Utility can be found on your installation CDROM or on the Perle website (www.perle.com). The data that is sent to the remote buffer file is appended to the end of the file (even through IOLAN reboots), so you will want to create a size limit on the file on your remote NFS host, to keep the buffer file size from becoming too large for your system.
Page 196
NFS host for decrypting the data to a readable format. The Decoder utility software can be found on the installation CD-ROM and on the website. www.perle.com Default: Disabled Enable Port When enabled, buffered data is sent to the syslog host to be viewed on the Buffering to Syslog host’s monitor.
Advanced Advanced Advanced Serial Settings Tab Overview Advanced serial port settings apply to all serial ports. Field Descriptions Configure the following parameters: Process Break Enables/disables proprietary inband SSH break signal processing, the Telnet Signals break signal, and the out-of-band break signals for TruePort. Default: Disabled Flush Data Before When enabled, deletes any pending outbound data when a port is closed.
Page 198
Advanced Serial Port Menu When a user connects to the IOLAN through the network, the string used to String access the Easy Port Access menu without disconnecting the network connection. Data Options: You can specify control (unprintable) codes by putting the decimal value in angle brackets <...
Advanced Modems Tab Overview You need to configure a modem if there is a modem connected to the IOLAN. If your IOLAN model contains an internal modem or a PCI slot (SCS models) for a modem card, a permanent modem string called internal_modem IOLAN modem...
Advanced TruePort Baud Rate Tab Overview The TruePort utility acts as a COM port redirector that allows applications to talk to serial devices across a network as though the serial devices were directly attached to the server. For IOLAN I/O models, you can also monitor and control I/O through the TruePort client.
Configuring Users Chapter 8 Introduction You can configure up to four users in the IOLAN’s local user database for all DS, SDS, and STS 1-port to 4-port desktop models, in addition to the Admin user. You can configure up to 48 users in the IOLAN’s local user database for all STS, SCS, and SDS rack mount models and all MDC medical unit models, in addition to the Admin user.
User Settings User Settings Overview The Users window allows you to add, edit, and delete users from the IOLAN. Functionality The Users window displays the users who have been configured. You can add users, edit existing users, or delete users from this window. See Adding/Editing Users on page 203 for information on the parameters available when adding or editing a user.
Adding/Editing Users Adding/Editing Users General Tab Overview The General tab configures the basic user information. Functionality You must, minimally, provide a User Name Level for a user. Field Descriptions Configure the following parameters: User Name The name of the user. Restrictions: Do not use spaces.
Page 204
Adding/Editing Users Level The access that a user is allowed. Data Options: Admin—The admin level user has total access to the IOLAN. You can create more than one admin user account but we recommend that you only have one. They can monitor and configure the IOLAN. Users configured with this level can access the unit either via serial Terminal Profile connection or via a network originated Telnet or SSH connection to the IOLAN.
Adding/Editing Users Services Tab Overview tab configures the connection parameters for a user. Any connection parameters Services configured in this window will override the serial port connection parameters. Functionality When a Terminal profile is set for the serial port and Require Login has been selected, user’s accessing the IOLAN through the serial port will be authenticated.
Page 206
Adding/Editing Users TCP Port When the User Service Telnet , this is the target port number. The default value will change based on the type of Service selected; the most common known port numbers are used as the default values. IPv4 Address Used for User Service PPP...
Adding/Editing Users Enable VJ Used for , determines whether Van Jacobsen User Service PPP SLIP Compression Compression is used on the link. VJ compression is a means of reducing the standard TCP/IP header from 40 octets to approximately 5 octets. This gives a significant performance improvement, particularly when interactive applications are being used.
Page 208
Adding/Editing Users Session Timeout The amount of time, in seconds, before the IOLAN forcibly closes a user’s session (connection). The default value is (zero), meaning that the session timer will not expire (the session is open permanently, or until the user logs out).
Adding/Editing Users Sessions Tab Overview tab is used to configure specific connections for users who are accessing the network Sessions through the IOLAN’s serial port. Functionality Users who have successfully logged into the IOLAN ( User Service set to DSprompt ) can start up to four login sessions on network hosts.
Adding/Editing Users Field Descriptions Configure the following parameters: Session 1, 2, 3, 4 You can configure up to four (4) sessions that the user can select from to connect to a specific host after that user has successfully logged into the IOLAN (used only on serial ports configured for the Terminal profile).
Adding/Editing Users Serial Port Access Tab Overview tab controls the user’s read/write access on any given IOLAN serial port. Serial Port Access This pertains to users that are connecting from the network to a serial over a Console Management type session. This can be useful when you have multiple users connecting to the same serial device and you wish to control the viewing and/or the write to and from the device.
Page 212
Adding/Editing Users IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Configuring Security Chapter 9 Introduction group includes the following configuration options: Security Authentication—When a serial port is configured for the Console Management or TCP Sockets profile, the user can be authenticated either locally in the IOLAN user profile or externally. This option configures the external authentication server.
Authentication Authentication In the Authentication window, you can select up to two methods of authentication made up of external authentication options and/or the local user database. Configure the following parameters: Primary The first authentication method that the IOLAN attempts. Authentication Data Options: Local, RADIUS, Kerberos, LDAP, TACACS+, SecurID, NIS Method Default: Local...
Authentication Local Overview When authentication is selected, the user must either be configured in the IOLAN’s Local User List or you must enable users. Guest Field Descriptions Configure the following parameters: Enable Guest Mode Allow users who are not defined in the database to log into the IOLAN Users with any user ID and the specified password.
Authentication RADIUS Overview RADIUS is an authentication method that the IOLAN supports that can send back information; User RADIUS on page 347 for more information on the parameters that can be sent back by User RADIUS. General Field Descriptions Configure the following parameters: First Authentication Name of the primary RADIUS authentication host.
Authentication Account Port The port that the RADIUS host listens to for accounting requests. Default: 1813 Enable Accounting Enables/disables whether or not the IOLAN validates the RADIUS accounting Authenticator response. Default: Enabled Retry The number of times the IOLAN tries to connect to the RADIUS server before erroring out.
Authentication Use the following When enabled, the IOLAN will send the specified IPv4 address to the RADIUS NAS-IP-Address server. Default: Disabled IP Address The IPv4 address that the IOLAN will send to the RADIUS server. Default: 0.0.0.0 Automatically When enabled, the IOLAN will send the IOLAN’s IPv6 address to the determine NAS- RADIUS server.
Authentication LDAP Overview If you are using LDAP with , you need to download a CA list to the IOLAN that includes the certificate authority (CA) that signed the LDAP certificate on the LDAP host by selecting Tools Advanced Keys and Certificates .
Authentication TACACS+ Overview TACACS+ is an authentication method that the IOLAN supports that can send back User information; see Appendix , TACACS+ on page 354 for more information on the parameters User that can be sent back by TACACS+. Field Descriptions Configure the following parameters: Authentication/ The primary TACACS+ host that is used for authentication.
Authentication Accounting The secondary TACACS+ host that is used for accounting, should the primary Secondary Host accounting TACACS+ host fail to respond. Default: None Accounting Port The port number that TACACS+ listens to for accounting requests. Default: 49 Accounting Secret The TACACS+ shared secret is used to encrypt/decrypt TACACS+ packets in communications between two devices.
Authentication Field Descriptions Configure the following parameters: NIS Domain The NIS domain name. Primary NIS Host The primary NIS host that is used for authentication. Default: None Secondary NIS Host The secondary NIS host that is used for authentication, should the primary NIS host fail to respond.
Overview The IOLAN contains SSH Server software that you need to configure if the IOLAN is going to be accessed via SSH. If you specify more than one method and/or , the IOLAN Authentication Cipher will negotiate with the client and use the first authentication method and cipher that is compatible with both systems.
Users Passing Through the IOLAN Using SSH (Dir/Sil) This scenario applies to serial ports configured for the profile and are required to login to Terminal the IOLAN. The user’s service is set to the SSH protocol, therefore, users first log into the IOLAN and then are connected to a specified host (configured for the user when User Service SSH selected) through an SSH connection.
Field Descriptions Configure the following parameters: Allow SSH-1 Allows the user’s client to negotiate an SSH-1 connection, in addition to SSH- Protocol Default: Disabled When a client SSH session requests RSA authentication, the IOLAN’s SSH server will authenticate the user via RSA. Default: Enabled When a client SSH session requests DSA authentication, the IOLAN’s SSH server will authenticate the user via DSA.
SSL/TLS Break String The break string used for inband SSH break signal processing. A break signal is generated on a specific serial port only when the server's break option is enabled and the user currently connected using reverse SSH has typed the break string exactly.
SSL/TLS Field Descriptions Configure the following parameters: SSL/TLS Version Specify whether you want to use: Any—The IOLAN will try a TLSv1 connection first. If that fails, it will try an SSLv3 connection. If that fails, it will try an SSLv2 connection. TLSv1—The connection will use only TLSv1.
SSL/TLS Cipher Suite Field Descriptions The SSL/TLS cipher suite is used to encrypt data between the IOLAN and the client. You can specify up to five cipher groups. The following buttons are available on the Cipher Suite window: Add Button Adds a cipher to the cipher list.
SSL/TLS Adding/Editing a Cipher Appendix B, SSL/TLS Ciphers on page 359 for a list of valid SSL/TLS ciphers. Configure the following parameters: Encryption Select the type of encryption that will be used for the SSL connection. Data Options: Any—Will use the first encryption format that can be negotiated. 3DES ARCFOUR ARCTWO...
SSL/TLS HMAC Select the key-hashing for message authentication method for your encryption type. Data Options: SHA1 Default: Any Validation Criteria Field Descriptions If you choose to configure validation criteria, then the information in the peer SSL/TLS certificate must match exactly the information configured in this window in order to pass peer authentication and create a valid SSL/TLS connection.
Common Name An entry for common name; for example, the host name or fully qualified domain name. This field is case sensitive in order to successfully match the information in the peer SSL/TLS certificate. Data Options: Maximum 64 characters Email An entry for an email address;...
IKE Phase 1 Proposals The following IKE Phase 1 proposals are supported by the IOLAN VPN gateway: Ciphers—3DES, AES Hashes—MD5, SHA1 Diffie-Hellman Groups—2 (MODP1024), 5 (MODP1536), 14 (MODP2048), 15 (MODP3072), 16 (MODP4096), 17 (MODP6144), 18 (MODP8192) ESP Phase 2 Proposals The following ESP Phase 2 proposals are supported by the IOLAN VPN gateway: Ciphers—3DES, AES Authentication Algorithms—MD5, SHA1, SHA2...
Adding/Editing the IPsec Tunnel When you click the button or select an IPsec tunnel and click the button, the following Edit window is displayed: Configure the following parameters: Name Provide a name for the IPsec VPN tunnel to make it easy to identify. Text Characteristics: Maximum of 16 characters, spaces not allowed Authentication Specify the authentication method that will be used between VPN peers to...
Page 234
Secret/Remote Depending on the Authentication Method Validation Criteria Shared Secret—Specify the text-based secret that is used to authenticate the Button IPsec tunnel (case sensitive). This applies to all VPN tunnels (IPsec and L2TP/IPsec). X.509 Certificate—Specify the remote X.509 certificate validation criteria that must match for successful authentication (case sensitive).
Remote Next Hop The IP address of the router/gateway that will forward data packets to the IOLAN (if required). The router/gateway must reside on the same subnet at the remote VPN. Field Format: IPv4 or IPv6 address Remote The IP address of a specific host or the network address that the IOLAN will Host/Network provide a VPN connection to.
Remote Validation Criteria Field Descriptions When the is set to , you can configure the remote Authentication Method X.509 Certificate validation criteria. The information in the remote X.509 certificate must match exactly the information configured in this window in order to successfully authenticate and create a valid connection.
L2TP/IPsec Many operating systems support L2TP/IPsec VPN tunnels, however, Windows XP requires this VPN tunnel protocol. When L2TP/IPsec is enabled, the IOLAN will listen for L2TP/IPsec VPN tunnel requests. When you enable L2TP/IPsec, you are requiring that all access to the IOLAN go through the L2TP/IPsec tunnel, so you must configure any exceptions first (see Exceptions on page 238 for more...
Remote Validation Depending on the Authentication Method Criteria Shared Secret—Specify the text-based secret that is used to authenticate the IPsec tunnel (case sensitive). This applies to all VPN tunnels (IPsec and L2TP/IPsec). X.509 Certificate—Specify the remote X.509 certificate validation criteria that must match for successful authentication (case sensitive).
Delete Button Highlight an entry and click the button to remove the Exception List Delete entry from the list. Adding/Editing a VPN Exception The following parameters are available: IP Address The IP address of the host that will communicate with the IOLAN outside of the VPN tunnel.
Services Services Overview Services are either daemon or client processes that run on the IOLAN. You can disable any of the services for security reasons. Functionality If you disable any of the daemons, it can affect how the IOLAN can be used or accessed. For example, if you disable WebManager (HTTPS and HTTP) services, you will not be able to access the IOLAN with the WebManager.
Page 241
Services DeviceManager DeviceManager daemon process in the IOLAN. If you disable this service, you will not be able to connect to the IOLAN with the DeviceManager application. The DeviceManager listens on port 33812 and sends on port 33813. Default: Enabled WebManager WebManager daemon process in the IOLAN listening on port 80.
Keys and Certificates Keys and Certificates When you are using SSH, SSL/TLS, LDAP, or HTTPS, you will need to install keys and/or certificates or get server keys in order to make those options work properly. All certificates need to be created and all keys need to be generated outside of the IOLAN, with the exception of the IOLAN SSH Public keys, which already exist in the IOLAN.
Page 243
Keys and Certificates Key Type Specify the type of authentication that will be used for the SSH session. The following list details the keys that support each key type. Data Options: *RSA—Server SSH Public Key, SSH User Public Key, SSH User Private Key, SSH Host Public Key DSA—Server SSH Public Key, SSH User Public Key, SSH User Private Key, SSH Host Public Key...
Page 244
Keys and Certificates IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Configuring I/O Interfaces Chapter 10 Introduction There is a line of IOLANs that can control/monitor the following types of I/O: Analog Input Digital Input/Output Relay Output Temperature Input Some of the models are I/O combinations and some of the models support one I/O type, although all of the SDS I/O models are extensions of the feature rich, extended temperature SDS IOLAN.
TruePort COM redirector feature. TruePort Default: Disabled Modbus I/O Access on page 278 for function codes and I/O coil/registration descriptions and Accessing I/O Data Via TruePort on page for the Perle API. IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Allow I/O Access Allows serial application access to the I/O over the network using the TruePort via API through COM redirector feature via a custom application using the Perle API. TruePort Default: Permanently enabled when Enable I/O Access via TruePort...
Page 248
Settings Request Queuing When enabled, allows multiple, simultaneous messages to be queued and processed in order of reception. Default: Enabled Embedded When this option is selected, the address of the slave Modbus device is embedded in the message header. Default: Enabled Remapped Used for single device/port operation.
Settings Failsafe Timer Functionality Overview tab configures the I/O failsafe timer. The Failsafe Timer is enabled on a global Failsafe Timer basis and provides a trigger mechanism that can be configured for each channel when no I/O traffic/management has occurred for the specified amount of time. A Failsafe Action can be configured for each Digital Output channel, each Serial Signal Output pin (DTR and RTS), and each Relay channel to either Activate or Deactivate the output.
Settings UDP Functionality Overview tab configures the I/O UDP broadcast settings. The I/O UDP broadcast feature periodically broadcasts the I/O channel status in a UDP message. You can configure up to four sets of IP address entries (each entry consisting of a start and end IP address range) to broadcast I/O status data.
Settings I/O UDP Settings Configure the following parameters: UDP Entry When enabled, broadcasts I/O status (data) to the specified range of IP addresses. Default: Disabled Start IP Address The first host IP address in the range of IP addresses (for IPV4 or IPV6) that the IOLAN will listen for messages from and/or send messages to.
Settings Temperature Functionality Overview tab configures the temperature scale settings for T4 models. Temperature Field Descriptions Configure the following parameter: Temperature Scale Select the temperature scale that will be used to display temperature data. Data Options: Fahrenheit or Celsius Default: Celsius IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
(monitored by an Analog channel) a syslog message is sent to the Monitoring Application. The Monitoring Application then sends a command to the IOLAN via the Perle API that causes the Relay channel to activate an internal freezer dehumidifier. The relay is turned off when the Analog channel sends a clear syslog message to the Monitoring Application and the Relay channel is deactivated.
Channels Field Descriptions Configure the following parameters: Description Provide a description of the channel, making it easier to identify. Data Options: Maximum 20 characters, including spaces Type Select the type of input being measured. Data Options: Current or Voltage Default: Current Range Select the range for the measurement type.
Channels Digital Input Overview When the channel is set for digital input, it monitors voltage or current. Note that the internal jumpers must match the software setting and must be set to Input, which is the default; see Digital I/O Module on page 382 to find out how to set the internal jumpers.
Channels Field Descriptions Configure the following parameters: Description Provide a description of the channel, making it easier to identify. Data Options: Maximum 20 characters, including spaces Input Mode When selected, the channel will be reading the status of the line (input). The internal jumpers must match the software configuration;...
Page 257
Channels Auto Clear Mode When enabled, automatically clears the alarm when the trigger condition changes; for example, if the and the alarm is triggered, once Trigger Inactive the input becomes active again, the alarm will automatically be cleared Default: Enabled Manual Clear When enabled, a triggered alarm must be manually cleared.
In an industrial freezer warehouse, the IOLAN D4 is used to monitor the freezer doors. When one of the industrial freezer doors are left open for more than five minutes, the Monitoring Application (using the Perle API) starts the Digital output sink, causing the strobe light on top of the offending freezer to activate.
Channels Field Descriptions Configure the following parameters: Description Provide a description of the channel, making it easier to identify. Data Options: Maximum 20 characters, including spaces Output Mode When selected, the channel will drive the line (output). The internal jumpers must match the software configuration, so if you change this setting to Output , you will have to also change the internal hardware jumpers.
Page 260
Channels Pulse Mode When is set to , you can specify the manner of the pulse. Output Pulse Data Options: Continuous—Continuously pulses active and inactive. Count—Pulses an active/inactive sequence for the specified number of times. Default: Continuous Pulse Count The channel output will pulse for the specified number of times; each count consists of an active/inactive sequence.
Channels Relay Overview Relay channels can open or close a contact for a higher voltage circuit using a lower level control voltage. The Relay output channels work as a physical on/off switch, and are used to drive higher voltage devices with a lower controlling voltage. You can configure the following Relay output channel options: You can choose to manually activate/deactivate the Relay output.
Channels Field Descriptions Configure the following parameters: Description Provide a description of the channel, making it easier to identify. Data Options: Maximum 20 characters, including spaces Output Specify how the channel output will be handled. Data Options: Manual—You must manually manipulate the channel output. Pulse—Activates and deactivates the channel output activity in intervals after it is manually activated.
Channels Active Signal How long the channel will be active during the pulse mode. Width Range: 1-9999 x 100 ms Default: 1 (100 ms) Delay How long to delay an active-to-inactive or inactive-to-active setting after it is manually started. Range: 1-9999 x 100 ms Default: 1 (100 ms) Failsafe Action When there has been no I/O activity within the specified time (set in the I/O...
Channels Functionality The Digital I/O extension feature requires the digital input to be connected to one or more digital outputs/relays (local or on another IOLAN model), output serial signal pins, and/or TCP/IP applications. In order to create a successful connection between the input and output or application, one side must be must be set to Listen for connection and the other side must be set to...
Channels Field Descriptions option is different depending on whether you are configuring a Digital Input Local connection or a Digital Output/Relay channel. The Local connection option for Digital Input lists all the local Digital Output channels or output serial signal pins that it is associated with. Digital Input can be connected to multiple local Digital Output or Relay channels or output serial signal pins.
Page 266
Channels Allow Multiple When this option is enabled, multiple I/O channels and/or TCP/IP applications Hosts to Connect can connect to this channel/serial signal pin. Default: Disabled Connect to When enabled, the channel/serial signal pin initiates communication to another I/O channel or a TCP/IP application. Default: Enabled Host Name The configured host or another IOLAN that the I/O channel will connect to.
Channels Adding/Editing Additional Hosts You can define a list of hosts that the I/O channel will communicate to or a primary/backup host. Configure the following parameters: Define additional When this option is enabled, you can define up to 49 hosts/IOLANs that the hosts to connect to I/O channel or serial signal pin will attempt communicate to.
Page 268
Channels TCP Port Specify the TCP port that the I/O channel or serial signal pin will use to communicate to the Host Default: 0 IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Channels Temperature Temperature input channels monitor RTD or thermocouple temperature sensors inputs for the most common ranges. You can also configure severity alarms that can send an email, a syslog message, and/or an SNMP trap when an alarm is triggered or cleared; See Alarm Settings on page 271 more information about the alarms.
Channels Field Descriptions Configure the following parameters: Description Provide a description of the channel, making it easier to identify. Data Options: Maximum 20 characters, including spaces Type Specify the type of sensor you are using to measure temperature. Data Options: RTD, Thermocouple Default: RTD Range Specify the temperature range that you want to measure.
Channels Alarm Settings Analog and Temperature input models support an Alarm mechanism in which you can specify up to five severity levels of alarm triggers and clear levels; the alarm triggers/clear levels can activate in either increasing or decreasing severity levels. Each time an alarm is triggered or cleared, you can specify any combination of the following to be initiated: An SNMP trap...
Channels Send Syslog Alert When enabled, sends a message to syslog when an alarm is triggered or cleared. The syslog entry includes the severity level and the value that caused the alarm to trigger or clear. The syslog message is associated with Level Critical Default: Disabled...
Page 273
Channels Trigger If the , an alarm is triggered when the input drops below Trigger Type the specified value; other severity level trigger values must decrease in Trigger value with each subsequent level. If the , an alarm is Trigger Type High triggered when the input is higher than the specified value;...
I/O UDP I/O UDP Industrial applications often monitor the status of I/O devices such as sensors, alarms, relays, etc. by polling for I/O data. The IOLAN’s I/O UDP feature can help to minimize network traffic by broadcasting I/O status to industrial applications on specified intervals, providing I/O status in a timely manner.
I/O UDP Analog Section The Analog Section of the UDP packet is comprised of I/O data for each enabled Analog channel. Note: If the IOLAN I/O model does not support Analog channels, the Analog Channel Data subsection of the Analog Section will NOT be present in the UDP packet. Section Channel Analog Channel Data (for each enabled channel)
I/O UDP Digital/Relay Section The Digital/Relay Section of the UDP packet provides the status of Digital and Relay channels. The data for the status of each channel is represented by 1 byte, with each bit representing a channel (least significant bit format). Note: The Digital/Relay Channel Data subsection is present in the UDP packet regardless of whether or not the IOLAN model supports Digital/Relay channels.
I/O Modbus Slave UDP Unicast Example For an example of the I/O UDP unicast, see the sample program, , found on your CD- ioudpbcast.c ROM. I/O Modbus Slave If you have a Modbus serial or TCP application, it can access I/O connected to the IOLAN when the I/O Global Modbus Slave is enabled.
Modbus I/O Access Modbus TCP Application If you have a Modbus RTU or Modbus ASCII program, you can access the I/O by connecting to the IOLAN over the network. UID: 15 Power Network IOLAN PC running a Modbus RTU I/O Digital or ASCII Output Application...
Modbus I/O Access I/O Coil/Register Descriptions This section contains descriptions of I/O coils: MB_REG_DI_SENSOR—Status of Digital input. 1 is Active, 0 is Inactive. If Invert Signal configured , 0 is Active, 1 is Inactive. If input is , returns latched status. Latched MB_REG_DI_SENSOR_ALARM_STATE—Indication if input is in alarm state.
Modbus I/O Access Serial Port Coil/Register Descriptions This section contains descriptions of serial port coils: MB_REG_DI_DSR—The status of the DSR input signal. 1 is Active, 0 is Inactive. If Invert is configured , 0 is Active, 1 is Inactive. If input is , returns latched status.
Modbus I/O Access A4D2/A4R2 Registers The following coils and registers are supported by the IOLAN A4D2 and A4R2 I/O models: Data Model D1/R1 D2/R2 R/W Coils: MB_REG_DI_SENSOR ----- ----- ----- ----- 6149 6150 MB_REG_DI_SENSOR_ALARM_STATE ----- ----- ----- ----- 6213 6214 MB_REG_DO_SENSOR ----- -----...
Modbus I/O Access D4/D2R2 Registers The following coils and registers are supported by the IOLAN D4 and D2R2 I/O models: Data Model D3/R1 D4/R2 Coils: MB_REG_DI_SENSOR 6145 6146 6147 6148 MB_REG_DI_SENSOR_ALARM_STATE 6209 6210 6211 6212 MB_REG_DO_SENSOR 6657 6658 6659 6660 Holding Registers: MB_REG_HR_DI_SENSOR_LATCH 6145...
TruePort I/O TruePort I/O You can see a sample API I/O over TruePort program called .c on the CD-ROM. ioapiotp TruePort/Modbus Combination If you have a Modbus serial application running on a PC that is connected to a network, you can use TruePort as a virtual serial connection to communicate with the IOLAN over the network to access I/O data.
If you have a custom application that talks to a serial port, you can use TruePort as a virtual serial port to communicate with the IOLAN over the network to access I/O data using the Perle API. You also have the option of enabling SSL as a security option to encrypt the data that is communicated between the IOLAN and the host machine (SSL/TLS must be configured in the Server settings and on the TruePort host).
Accessing I/O Data Via TruePort Accessing I/O Data Via TruePort Introduction Analog and Digital I/O data, as well as output control, can be accessed in several ways. To have access from an application running on a workstation or server, the I/O Applications Program Interface (API) provided within Trueport can be used.
Accessing I/O Data Via TruePort Format of API Commands There are two groups of commands: Get Commands—Retrieve values of the I/O channel registers Set Commands—Set values on the I/O channel registers. Note: All commands need to be written to the COM port as a single write. I/O Channel registers are all assigned unique addresses, which need to be referenced in all of the commands.
Accessing I/O Data Via TruePort Example 1: Read the status of the first digital input (DI1) on a D2R2 unit. DI1 sensor is a coil register with the decimal value of 6145 (hex 0x1801). Request: 0x01 0x18 0x01 0x00 0x01 Response: 0x01 0x01 0x01 (Digital input 1 is active) Example 2: Read the values for the Inactive Signal Width, Active Signal Width, and Pulse count for the second digital output (DO2) on a D4 unit.
Accessing I/O Data Via TruePort Successful Response Format Byte(s) # of Bytes Value Command code (from request). Starting register number (see A4/T4 Registers on page 280, A4D2/A4R2 Registers on page 281, or D4/D2R2 Registers on page 282 for this value) from request. Number of registers written.
I/O SNMP Traps Error Codes Code Name Description Illegal Function The function code received in the query is not an allowable action for the server (or slave). Illegal Data The data address received in the query is not an allowable address for Address the server (or slave).
Configuring Clustering Chapter 11 Introduction Clustering is a way to provide access to the serial ports of many IOLANs through a single IP address. Clustering Slave List Overview The IP address that will be used to access all clustered serial ports will be that of the Master IOLAN in the cluster.
Clustering Slave List Adding Clustering Slaves Overview When you add a clustering slave IOLAN entry, you are adding the IOLAN that users will access through this master IOLAN. Field Descriptions Configure the following parameters: Server Name Specify a name for the slave IOLAN in the clustering group. This name does not have to correspond to the proper host name, as it is just used within the IOLAN.
Clustering Slave List Advanced Clustering Slave Options Overview button provides a means of configuring each individual serial port’s name, connection Advanced protocol, and port association in the clustered IOLAN slave. The Clustering Slave Settings window displays each clustered serial port slave entry, you need to click the Edit button to configure the individual serial port settings.
Page 294
Clustering Slave List Slave TCP Port Specify the TCP Port number configured on the Slave IOLAN that is associated to the port number you are configuring. Range: 1-99999 Master TCP Port Specify the TCP port number you want to map to the Slave IOLAN TCP Port. User’s will use this TCP port number to access the Slave IOLAN’s port.
Perle IOLAN Option Card modem card or a Perle PCI Adapter/wireless WAN card. Functionality The Perle IOLAN modem card or Perle PCI Adapter/wireless WAN card slide into the PCI slot as described in Installing a Perle PCI Card on page 395.
Sony Ericsson—You are using a Sony Ericsson wireless WAN card. Use Standard Driver—If the wireless WAN card you are using is not listed, try the standard driver. Use Custom Driver—A custom driver downloaded from the Perle website. Default: Sierra Wireless AirCard 881...
Page 297
Configuring a Wireless WAN Card Specify the APN required by your internet provider to access their network. See the internet provider documentation for more information. User Name Specify the name required by your internet provider to access their network. Password Specify the password required by your internet provider to access their network.
Page 298
Configuring a Wireless WAN Card IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Configuring the System Chapter 13 Introduction This chapter describes the alerts (email and syslog) that can be configured for the IOLAN and the advanced options (SNMP, time, custom applications/plugins, and other miscellaneous configuration options) that you will want to look at to see if they are required for your implementation. Alerts Email Alerts Overview...
Alerts Field Descriptions Configure the following parameters: Enable Email Alert Enables/disables a global email alerts setting. Even if this option is disabled, you can still configure individual serial port email alerts. When this option is enabled, individual serial ports can inherit these email alerts settings. Default: Disabled Level Choose the event level that triggers an email notification.
Alerts Syslog Overview The IOLAN can be configured to send system log messages to a syslog daemon running on a remote host if the service is activated. You can configure a primary and secondary host for the syslog Syslog information and specify the level for which you want syslog information sent. Note: You must ensure that the service in the...
IOLAN; this can be done in the DeviceManager, WebManager, CLI, or Menu. You must then load the perle-sds.MIB (found on the CD-ROM packaged with the IOLAN) file into your SNMP manager before you connect to the IOLAN.
Page 303
Management Internet Address The IP address of the SNMP manager that will send requests to the IOLAN. If the address is , any SNMP manager with the name can Community 0.0.0.0 access the IOLAN. If you specify a network address, for example , any SNMP manager within the local network with the 172.16.0.0 name can access the IOLAN.
Management V3 Read-Only Auth Specify the authentication algorithm that will be used for the read-only user. Algorithm Data Options: MD5, SHA Default: MD5 V3 Read-Only Auth Type in the read-only user’s authentication password. Password V3 Read-Only Retype the user’s authentication password. Confirm Password V3 Read-Only Specify the read-only user’s privacy algorithm (encryption).
Management Network Time Tab Field Descriptions You can configure your SNTP client in the IOLAN to automatically synchronize the IOLAN’s time. Configure the following parameters: SNTP Mode The SNTP mode. Data Options: None—SNTP is turned off. Unicast—Sends a request packet periodically to the Primary host. If communication with the Primary host fails, the request will be sent to the Secondary host.
Management Time Zone/Summer Time Tab Field Descriptions You can configure an automatic summer time (daylight savings time) time change. Configure the following parameters: Time Zone Name The name of the time zone to be displayed during standard time. Field Format: Maximum 4 characters and minimum 3 characters (do not use angled brackets <...
Custom App/Plugin Overview You can create custom applications for the IOLAN by using the Perle SDK. See the SDK Programmer’s Guide (the SDK and guide are accessible via a request form located on the Perle website at ) for information about the www.perle.com/supportfiles/SDK_Request.shtml...
Use a Generic When set, and the user connects to the IOLAN using WebManager, the WebManager WebManager login screen that is displayed is generic — the Perle banner, Login Screen IOLAN model name, and firmware version are not displayed to the user.
Management Bootup Files Tab Field Descriptions You must have a TFTP server running on any host that you are uploading or downloading files to/from. When you specify the file path, the path must be relative to the default path set in your TFTP server software.
Management Message of the Day (MOTD) Tab Field Descriptions The message of the day is displayed when users log into the IOLAN through a telnet or SSH session or through WebManager or EasyPort Web. There are two ways to retrieve the message of the day to be displayed to users when they log into the IOLAN: The message of the day file is retrieved from a TFPT server every time a user logs into the IOLAN.
Management TFTP Tab Field Descriptions You must have a TFTP server running on any host that you are uploading or downloading files to/from. Note: TFTP file transfers send via UDP packets. When the packet delivery is interrupted for any reason and a timeout occurs, that packet is resent if the retry count allows it. Therefore, if a very large file is being transferred and is interrupted, the entire file is not resent, just the part of the file that was not received.
Page 312
Management IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Controlling the RPS, I/O Channels, and IPsec Tunnels Chapter 14 Introduction The Control section appears when the IOLAN is connected to a Remote Power Switch and/or an I/O model or you want to control the IPsec tunnel. RPS Control Overview When a Remote Power Switch’s (RPS) console port is attached to the IOLAN’s serial port and the serial port is configured for the Power Management profile, you will be able to control the RPS’s power plugs either universally or individually (power on/off the whole RPS or individual plugs).
RPS Control Plug Control Overview When you click the button, you can power on/off individual plugs. Plug Control Field Descriptions The following buttons are available: On Button Turns the selected plug on. Off Button Turns the selected plug off. Cycle Button Turns the selected plug off and then on.
Serial Port Power Control Serial Port Power Control Overview window allows you to manage the power plugs that have been Serial Port Power Control associated with the serial devices connected to the IOLAN. Field Descriptions The following buttons are available: On Button Turns the selected plug on.
I/O Channels I/O Channels Overview When the DeviceManager is connected to an I/O model IOLAN, the I/O Status/Control option is available. You can view the I/O status and manually control such options as clearing alarms, clearing minimum/maximum values, resetting the channel(s), and activating/deactivating output. The following buttons are available: Reset Channel Resets the highlighted channel (click on a channel to highlight it).
IPsec Tunnel Control IPsec Tunnel Control You can start, stop, and restart all the IPsec tunnels. When you start the IPsec tunnels, the Boot configured for each IPsec tunnel is what determines its state. Action The following buttons are available: Start Button Starts all IPsec VPN tunnels.
Page 318
IPsec Tunnel Control IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
System Administration Chapter 15 Introduction This chapter addresses the functions that the Admin user or a user with Admin Level privileges might do. This chapter uses the DeviceManager as the configuration method described in most administrative functions. As a general rule, administrative functions are accessed from the menu bar in the DeviceManager and under the option in the WebManager’s navigation tree.
Managing Configuration Files Downloading Configuration Files You can download a configuration file to the IOLAN by doing the following: In DeviceManager: Connect to the IOLAN to retrieve the current configuration file. Open the configuration file you want to download to the IOLAN by selecting File Import Configuration from a File...
Managing Configuration Files Downloading Configuration Files to Multiple IOLANs You can download a configuration file to multiple IOLANs at the same time by doing the following in DeviceManager (DeviceManager is the only configurator that does this function): Select IOLAN Tools Download Configuration to Multiple Specify the IOLANs that you want to download the configuration to: Enter the following information for each IOLAN that you want to configure with the same...
Managing Configuration Files Click the Download> button to start the download process. A status window will display with the configuration download status. Uploading Configuration Files When you upload a configuration to the DeviceManager, you are uploading the IOLAN’s working configuration file. In most other configurators (the exception being SNMP), you are always seeing the working configuration file.
The RESET button is available on all IOLAN models (except medical unit models). The button allows you to reset the IOLAN to its Perle or custom factory default configuration. The Power/Ready LED color and the resetting of the IOLAN default configuration vary depending on how long you press and hold the RESET button, as shown in the table below.
Calibrating I/O Calibrating Voltage When calibrating the IOLAN Analog input for voltage, you will need a calibration meter that is better than .1% volts precision. When you calibrate one channel, all voltage channels are automatically calibrated for that range; if another channel is set for a different range, you will need to calibrate that channel separately, but all channels that use that range are also automatically calibrated.
Calibrating I/O Calibrating Analog Channels Analog Input can be calibrated for Analog and Temperature IOLAN models. Select the channel you want to calibrate. This example uses an A4 model that has channel A1 set to Current with a Range of 0 to 20mA. If you have not disabled confirmation messages ( in DeviceManager only), you will Tools...
You can reset the IOLAN to its factory default configuration by selecting Tools Reset Reset to in DeviceManager and in WebManager. Factory Default Administration Reset Factory Defaults The IOLAN will automatically reboot itself with the Perle factory default or custom factory default configuration. IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Resetting the SecurID Node Secret Resetting the SecurID Node Secret If you are using SecurID external authentication, you can select Tools Reset Reset SecurID Node in DeviceManager and in WebManager to reset the Secret Administration Reset SecurID Secret node secret. You do not need to reboot the IOLAN for this to take effect, it works instantly. Language Support Two language files, in addition to English, are supplied on the supplemental CD, French and German.
Language Support Translation Guidance To help you with your translation, of supplied ASCII text language files we offer the following guidance: The IOLAN will support languages other than English (and the supplied German and French languages). The English language file, , displays the character length of each line english.txt at the beginning of the line.
Downloading Terminal Definitions Downloading Terminal Definitions All terminal types can be used on the IOLAN. Some terminal types which are not already defined in the IOLAN, however, are unable to use Full Screen mode (menus) and may not be able to page through sessions properly.
. These capabilities can be found in the documentation supplied with the terminal. Resetting Configuration Parameters You can reset the IOLAN to its factory default settings (this will reset it to the Perle factory default or custom factory default settings, depending on what has been configured) through any of the following...
Lost Admin Password Lost Admin Password If the Admin user password is lost, there are only two possible ways to recover it: reset the IOLAN to the factory defaults have another user that has level rights, if one is already configured, reset the Admin admin password...
Page 332
Lost Admin Password IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Applications Chapter 16 Introduction This chapter provides examples of how to integrate the IOLAN within different network environments or applications. Each scenario provides an example of a typical setup and describes the configuration steps to achieve the IOLAN functionality feature. Configuring Modbus This sections provides a brief overview of the steps required to configure the IOLAN for your Modbus environment.
Configuring Modbus Modbus Gateway Settings The scenarios in this section are used to illustrate how the IOLAN’s Modbus Gateway settings are incorporated into a Modbus device environment. Depending on how your Modbus Master or Slave devices are distributed, the IOLAN can act as both a Slave and Master Gateway(s) on a multiport IOLAN or as either a Slave or Master Gateway on a single port IOLAN.
Configuring Modbus Modbus Serial Port Settings Modbus Master Settings When the Modbus Masters is attached to the IOLAN’s serial port, configure that serial port to the profile acting as a Modbus Master. You must configure the Modbus TCP Slaves Modbus Gateway on the TCP/Ethernet side so the IOLAN can properly route messages, using the Modbus Slave’s UIDs, to the appropriate TCP-attached devices.
Configuring Modbus Modbus Slave Settings When you have Modbus Slaves on the serial side of the IOLAN, configure the serial port to the profile acting as a Modbus Slave. There is only one Slave Gateway in the IOLAN, Modbus Gateway so all Modbus serial Slaves must be configured uniquely for that one Slave Gateway;...
Configuring PPP Dial On Demand Configuring PPP Dial On Demand The IOLAN can be configured to access remote networks via modems connected to the serial interface of the IOLAN. By configuring the IOLAN for the profile, data that Remote Access (PPP) is destined for the remote network will initiate a modem connection to the remote network to route the data to its appropriate destination.
Setting Up Printers Next you need to create a gateway and destination route entry. Select , and Network Advanced Route List tab. For the destination, if you want the connection to be able to reach any host in the remote network, set the and specify the network IP address and subnet/prefix bits;...
Setting Up Printers Remote Printing Using RCP When setting up a serial port that accesses a printer using RCP, do the following: Set the serial port to and configure the , and Printer Speed Flow Control Stop Bits Parity Bits parameters so that they match the printer’s port settings.
Configuring a Virtual Private Network Configuring a Virtual Private Network You can configure the IOLAN to act as a Virtual Private Network (VPN) gateway using the IPsec protocol. Any of the following scenarios can be configured using one IOLAN and a host/server running IPsec software or two IOLANs, each acting as the VPN gateway.
Page 341
Configuring a Virtual Private Network Use a utility (for example, Openswan’s newhostkey/showhostkey utilities) to generate the RSA signature public key. Copy the public key portion to a file using the following format: <description>=<keydata> or just <keydata> For example: # RSA 1024 bits scs48_vpn Tue Jan 3 15:29:33 2006...
Configuring a Virtual Private Network Network-to-Network The following examples shows how to configure a network-to-network IPsec tunnel. This example uses the X.509 Certificate authentication method, so it includes the configuration requirements for the X.509 certificate. is enabled in this example (on both sides) because the NAT Traversal (NAT_T) VPN tunnel is going private network to public network to private network.
Configuring a Virtual Private Network If the signer of the remote X.509 certificate has not already been included in the CA list file that has already been downloaded to the IOLAN, you need to add (append) the signer of the X.509 certificate to the CA list file and then download the file to the IOLAN by selecting Tools Advanced...
Page 344
Configuring a Virtual Private Network The following window configures the Right IOLAN VPN Gateway: is entered for the because the IP address is DHCP assigned Local IP Address %defaultroute and is therefore subject to change. is entered for the Remote IP Address to indicate that it will accept a VPN connection %any from any host/network;...
Configuring a Virtual Private Network VPN Client-to-Network The following example shows how to configure a VPN client-to-network IPsec tunnel. In this example, the IOLAN will accept VPN connections from multiple VPN clients on private networks that want to access the public 199.24.0.0 subnetwork through the VPN gateway.
Page 346
Configuring a Virtual Private Network IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
RADIUS and TACACS+ Appendix A Introduction This chapter describes the parameters that can be passed to the IOLAN when a user logs into the IOLAN (serial port set to profile ) from external authentication RADIUS and TACACS+ Terminal servers. RADIUS Although RADIUS can be used strictly for external authentication, it can also be used to configure line and user parameters.
Page 348
RADIUS Type Name Description Service-Type Indicates the service to use to connect the user to the IOLAN. A value of 6 indicates administrative access to the IOLAN. Supported values are: 1—Login 3—Callback-Login Equivalent to the IOLAN User Service set by Type 15, Login-Service.
Page 349
Specifies the callback phone number. This is the same implementation as (Callback-Number), but takes precedence if both are set. Vendor-Specific Perle’s defined attributes for line access rights and user level. See Perle RADIUS Dictionary Example on page 352 for an example of this file.
RADIUS Accounting Message This section describes the attributes which will be included by the IOLAN when sending an accounting message to the RADIUS server. Type Name Description User-Name The name of the user to be authenticated. NAS-IP-Address IP Address of IOLAN LAN interface. NAS-Port Port Line number of IOLAN.
RADIUS Mapped RADIUS Parameters to IOLAN Parameters When authentication is being done by RADIUS, there are several parameters Serial Port User that can be set by the RADIUS server. Any parameters sent by that RADIUS server that are not supported by the IOLAN are discarded. Below is a list of the RADIUS parameters and their IOLAN parameters: RADIUS Parameter IOLAN Parameter...
RADIUS users to have this level of configuration. See below for an example of the Perle defined attributes for the RADIUS server for a 4-port IOLAN (although the dictionary can contain 48 ports, even if they are not all defined): # Perle dictionary.
Page 353
ATTRIBUTE Perle-Line-Access-Port-46 146 integer Perle ATTRIBUTE Perle-Line-Access-Port-47 147 integer Perle ATTRIBUTE Perle-Line-Access-Port-48 148 integer Perle ATTRIBUTE Perle-Line-Access-Port-49 149 integer Perle Perle Clustered Port Access Values VALUE Perle-Clustered-Port-Access Disabled VALUE Perle-Clustered-Port-Access Enabled Perle User Level Values VALUE Perle-User-Level Admin VALUE Perle-User-Level...
TACACS+ VALUE Perle-Line-Access-Port-4 Disabled VALUE Perle-Line-Access-Port-4 Read-Write VALUE Perle-Line-Access-Port-4 Read-Input VALUE Perle-Line-Access-Port-4 Read-Input-Write VALUE Perle-Line-Access-Port-4 Read-Output VALUE Perle-Line-Access-Port-4 Read-Output-Write VALUE Perle-Line-Access-Port-4 Read-Output-Input VALUE Perle-Line-Access-Port-4 Read-Output-Input-Write 7 TACACS+ Although TACACS+ can be used strictly for external authentication, it can also be used to configure Serial Port and User parameters.
Page 355
TACACS+ Name Value(s) Description service = tcp_clear Settings when Perle_User_Service is set to 2. addr = IPv4 or IPv6 address port = TCP port number service = slip Settings when Perle_User_Service is set to 3. routing = true (Send and Listen) false (None) addr = IPv4 or IPv6 address...
TACACS+ Accessing the IOLAN Through a Serial Port User Example Settings The following example shows the parameters that can be set for users who are accessing the IOLAN from the serial side. These settings should be included in the TACACS+ user configuration file. Service = EXEC priv-lvl = x # x = 12-15 (Admin)
TACACS+ service = ppp routing=x # x = true (Send and Listen) # x = false (None) addr = x.x.x.x # ipv4 or ipv6 addr ppp-vj-slot-compression = x # x =true or false callback-dialstring = x # x = number to callback on service = ssh addr = x.x.x.x # ipv4 or ipv6 addr...
TACACS+ Accessing the IOLAN from the Network User Example Settings The following example shows the parameters that can be set for users who are accessing the IOLAN from the Ethernet side. These settings should be included in the TACACS+ user configuration file. # Settings for telnet/SSH access service = raccess priv-lvl = x...
SSL/TLS Ciphers Appendix B Introduction This appendix contains a table that shows valid SSL/TLS cipher combinations. Valid SSL/TLS Ciphers This chart displays all of the valid SSL/TLS combinations. Key- Key- Full Name Ver. Exchange Authentication Encryption Size HMAC ADH-AES256-SHA SSLv3 Kx=DH Au=None Enc=AES...
Virtual Modem AT Commands Appendix C Virtual Modem Initialization Commands Note: Virtual Modem initialization commands are only supported on IOLAN firmware and configurators version 3.2 or higher. You can initialize the modem connection using any of the following commands: Command Description Options ATQn...
Page 362
Virtual Modem Initialization Commands Command Description Options AT&Z1 Set command allows the user to store an IP address and port number or phone number to use when making a connection. The user will issue an ATDS1 to cause the IOLAN to initiate the connection.
Pinouts and Cabling Diagrams Appendix D Serial Pinouts DB25 Male This section defines the pinouts for the DB25 male connection used on the 1-port IOLAN. The power out pin (Pin 9) is available in the SDS model only. Pin 1 Pin 13 Pin 14 Pin 25...
Serial Pinouts EIA-485 EIA-485 Pinout EIA-232 EIA-422 Full Duplex Half Duplex RTS+ RTS- 20 (out) DTR RxD+ RxD+ RxD- RxD- CTS+ The power in pin (pin 12) can be 9-30V DC. DB25 Female This section defines the pinouts for the DB25 female connection used on the 1-port IOLAN. The power out pin (Pin 9) is available in the SDS model only.
Serial Pinouts EIA-485 EIA-485 Pinout EIA-232 EIA-422 Full Duplex Half Duplex RxD- RxD- CTS+ CTS- 20 (in) TxD+ TxD+ DATA+ TxD- TxD- DATA- RTS+ The power in pin (pin 12) can be 9-30V DC. RJ45 The RJ45 serial connector is available on IOLAN rack mount, desktop, Sun/Cisco, and medical unit models.
Serial Pinouts RJ45 (for desktop and rack mount models) This section defines the pinouts for the RJ45 connection. 1-port, 2-port, and 4-port desktop IOLAN models have a 10-pin RJ45 connector and all rack mount IOLAN models have an 8-pin RJ45 connector.
Serial Pinouts RJ45 (for SCS48C/SCS32C/SCS16C/SCS8C models) This section defines the pinouts for the RJ45 connection for the SCS48C/SCS32C/SCS16C/SCS8C (Sun/Cisco) models only. Pin 8 Pin 1 The following table provides pinout information, including the different pinouts for the Admin port and serial ports: Pinout EIA-232 EIA-232...
Serial Pinouts RJ45 (for SDS32C/SDS16C/SDS8C Electric Utility models) This section defines the pinouts for the RJ45 connection for the Electric Utility models. The serial ports can be set to operate in EIA-232, EIA-422 or EIA-485 mode. The table provides the pinout for each of the modes of operation.
Serial Pinouts RJ45 (for medical unit models) This section defines the pinouts for the RJ45 connection for the medical unit models. Pin 10 Pin 1 The following table provides pinout information: Pinout 10-pin EIA-232 DTR (out) TxD (out) RxD (in) DCD (in) RTS (out) CTS (in)
Power Over Ethernet Pinouts DB9 Male I/O This section defines the pinouts for the DB9 male connection used on the 1-port IOLAN I/O models. The following table provides pinout information: Pinout EIA-422/485 EIA-485 9-pin EIA-232 Full Duplex Half Duplex 1(in) 2 (in) RxD+ 3 (out)
EIA-232 Cabling Diagrams EIA-232 Cabling Diagrams This section shows how to create EIA-232 cables that are compatible with the Device Server. Terminal DB25 Connector The following diagrams show how the null modem cable should be configured when connecting to a terminal DB25.
EIA-232 Cabling Diagrams Modem DB25 Connector The following diagrams show how a standard straight through cable should be configured when connecting to a DB25 modem. DB25 Male IOLAN DS1 Modem DB25 DB25 (DTE) (DCE) 2 (TxD) 2 (RxD) 3 (RxD) 3 (TxD) 4 (RTS) 4 (CTS)
Setting Jumpers Appendix E Introduction The IOLAN contains jumpers that you might need to set before you configure it and put it into production. You can set the power out pin, pin 9, to a fixed 5V DC output or to the external adapter output;...
Introduction 1-Port IOLAN RJ45 To change the settings, do the following: Unplug the IOLAN from the electrical outlet and disconnect everything from the box. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case.
Introduction 1-Port IOLAN DB9 To change the settings, do the following: Unplug the IOLAN from the electrical outlet and disconnect everything from the box. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case.
Introduction 2-Port IOLAN To change the settings, do the following: Unplug the IOLAN from the electrical outlet and disconnect everything from the box. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case.
Introduction 4-Port Desktop IOLAN To change the settings, do the following: Unplug the IOLAN from the electrical outlet and disconnect everything from the box. Open the case by unscrewing the two side screws, one on each side, and lifting off the top of the case.
Introduction Digital I/O Module IOLANs that have Digital I/O have an input/output jumper that must be set for each channel and must match the software configuration for each channel. Depending on the model, the placement of the digital I/O board can change, so the diagram below shows how to set jumper for any digital board.To change the settings, do the following: Detach the IOLAN from the electrical power source and disconnect everything from the box.
Introduction Analog Input Module IOLANs that have Analog Input have a voltage/current jumper that must be set for each channel and must match the software configuration for each channel. To change the settings, do the following: Detach the IOLAN from the electrical power source and disconnect everything from the box. Open the case by unscrewing the five side screws, two on each side plus the grounding screw, and lifting off the top of the case.
Page 384
Introduction IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
I/O Wiring Diagrams Appendix F Wiring I/O Diagrams This section describes how to wire the various IOLAN I/O models. Digital I/O Make sure the Digital I/O jumpers support the software setting; see Digital I/O Module on page 382 for jumper settings. Digital Input Wet Contact If you are using a wet contact for your Digital input, for channel D1 connect one wire to D1 and the other wire to GND.
Wiring I/O Diagrams Digital Output Sink For a Digital output sink (ground) configuration for channel D1, follow the diagram below. Battery Device Digital Output Source For a Digital output source (voltage) configuration for channel D1, follow the diagram below. Battery Device IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Wiring I/O Diagrams Analog Input Make sure the Analog jumpers support the software setting; see Analog Input Module on page 383 for jumper settings. Current To connect channel A1 with a 2-wire shielded cable, connect the positive wire to A1+, the negative wire to A1-, and optionally the shield to GND.
Wiring I/O Diagrams Temperature Input If you are using RTD sensors, a short detected status will be displayed if the wires are connected improperly. RTD or thermocouple sensors will display an open detection status when the circuit is broken. Thermocouple To connect to Channel A1 with a 2-wire cable, connect the positive wire to A1+ and the negative wire to A1-;...
Wiring I/O Diagrams RTD 4-Wire In a 4-wire RTD configuration, connect the return wire to A1+, the excite wire to A1-, the sense wire to A1s, and leave the fourth wire disconnected. Relay Output Normally Open Contact To connect Relay channel R1 for a circuit that is normally inactive, connect one wire to the COM (common) connector and one wire to the NO (normally open) connector.
4,800 Currently, TruePort is supported on Linux, Windows, SCO, Solaris, and others. For a complete list of of supported operating systems, see the Perle website. For more information, see the TruePort User Guide or the TruePort Installation and Configuration Guide for Windows NT on the CD-ROM.
API I/O Access Over TruePort API I/O Access Over TruePort You can access IOLAN I/O data through TruePort using the Perle API. The API uses the command/response format. See the sample program, found on the product CD-ROM, ioapiotp.c for an example implementation.
Decoder Error Codes Code Name Description Illegal Function The function code received in the query is not an allowable action for the server (or slave). Illegal Data The data address received in the query is not an allowable address for Address the server (or slave).
Page 394
Decoder IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0...
Contact your sales representative to find out how to order the products listed in this appendix. Installing a Perle PCI Card This sections describes how to install the Perle IOLAN modem card and the Perle PCI adapter card, used with a wireless WAN card, in your SCS rack mount model. PCI Adapter Card...
Page 396
Installing a Perle PCI Card Unscrew the four screws along the bottom of the serial side of the SCS IOLAN. On the SCS 8- port/16-port/32-port models, this includes the screw that is at the bottom of the PCI face plate.
Page 397
Installing a Perle PCI Card The black bracket should then fit on the inside of the PCI adapter card bracket. Align the adapter card bracket and then insert the screw and tighten it to keep it firmly in place. 32-port model...
Starter Kit (Adapters/Cable) Starter Kit (Adapters/Cable) The IOLAN Starter Kit includes the following for all IOLAN models (except the medical unit models): RJ45F to DB25M DTE Crossover Adapter RJ45F to DB25M DCE Modem Adapter RJ45F to DB25F DTE Crossover Adapter RJ45F to DB9M DTE Crossover Adapter RJ45F to DB9F DTE Crossover Adapter Sun/Cisco RJ45M Connector Cable for Rack Mount Models...
SCS48C/SCS32C/SCS16C/SCS8C Starter Kit (Adapters/Cable) SCS48C/SCS32C/SCS16C/SCS8C Starter Kit (Adapters/Cable) The IOLAN Starter Kit includes the following for the SCS48C/SCS32C/SCS16C/SCS8C (Sun/Cisco) models: RJ45F to DB25M DTE Crossover Adapter RJ45F to DB25M DCE Modem Adapter RJ45F to DB25F DTE Crossover Adapter RJ45F to DB9M DTE Crossover Adapter RJ45F to DB9F DTE Crossover Adapter Sun/Cisco Roll-Over Adapter for Rack Mount Models The adapters/cable can be purchased as a kit or individually.
If the bootloader option does not appear when you reboot the IOLAN (to load new firmware), you need to make arrangements to return the IOLAN. If you purchased the IOLAN less than 30 days before this problem appears, contact your distributor; otherwise, see the Perle web site ( ) for factory service information. www.Perle.com Note: No factory service can be performed on IOLANs that have not been registered.
Communication Issues Power/Ready LED Labels The Power/Ready LED label varies depending on the IOLAN model, as shown in the table below. IOLAN Model LED Label Desktop Power/Ready Rack mount System Ready Medical unit Communication Issues General communication checks and practices are as follows: Are your cables connected and correctly configured? If you are using EIA-232, see EIA-232 Cabling Diagrams on page 371...
Host Problems Host Problems Cannot access a host by name: If using DNS or if DNS is required, ensure a nameserver is configured on your IOLAN and is accessible (ping it). If not using DNS, verify that the host is configured in the .
Login Problems Login Problems You cannot obtain a login on any of the serial ports Connect via the Admin port and check the settings of the front-mounted ports; they have probably been set to a profile that does support serial connections, such as the Console Management profile (in CLI or Menu, ‘direct’...
Unknown IP Address Unknown IP Address You have already configured the IOLAN and you do know your password, and have lost, misconfigured, or don't know the IP address of the IOLAN, so you cannot obtain a successful login. If the IOLAN resides within the local network segment, you can use DeviceManager to find the IOLAN.
Modem Problems Modem Problems The IOLAN is not initializing the modem. Check your is set to . If your line service is set to any other type, the Line Service SLIP IOLAN will not initialize a modem. You will need to configure the modem manually. PPP Problems The link fails on start-up when there are remote IP addresses set for both a user ( Framed IP...
SSL/TLS SSL/TLS If you are experiencing problems obtaining a successful SSL/TLS connection, you can set your and view the syslog for the following messages: Syslog Level Notice Line not SSL enabled. Abort connection when a user who is configured for Service SSL_RAW tries to login on the serial port.
IPv6 Issues IPv6 Issues You are not seeing the IPv6 address value when you attempt to connect to the IOLAN. Windows Vista and Server 2008 operating systems have IPv6 support already enabled, however, you will have to install IPv6 support for Windows XP. To install IPv6 support in Windows XP, do the following: In Control Panel, double-click the icon.
Perle offers free technical support to Perle Authorized Distributors and Registered Perle Resellers. If you bought your product from a registered Perle supplier, you must contact their Technical Support department; they are qualified to deal with your problem. Have Your Product Information Ready...
Contacting Technical Support Repair Procedure Before sending the IOLAN for repair, you must contact your Perle supplier. If, however, you bought your product directly from Perle you can contact directly. Customers who are in Europe, Africa or Middle East can submit repair details via a website form.
Glossary This chapter provides definitions for Device Server terms. BOOTP (BOOTstrap An Internet protocol that enables a diskless workstation to discover its own IP address, the IP Protocol) address of a BOOTP server on the network, and a file to be loaded into memory to boot the machine.
Page 420
PAP (Password Standard authentication protocol for PPP connections. see CHAP Authentication Protocol) RADIUS (Remote An open standard network security server that communicates with the PAP protocol. Authentication Dial In Users Services) Reverse Connection Connections that originate from a host that go directly to a serial device through the Device Server.
Index female male admin power in pin default password female lost password male analog DB9 male pinouts 369, calibrating DC power requirements Decoder utility I/O commands 285, default admin password TruePort definitions ARP-Ping, setting an IP address Device Server models authentication, general DeviceManager overview...
Page 422
Index J I/O SNMP traps IOLAN+ interface Decoder utility port buffering Menu NIS parameters IOLAN+, supported models IPsec IPv6, setting an IP address online help, using OpenSSH jumpers line termination power out setting parameters BOOTP/DHCP LDAP modems keys port buffering HTTPS RADIUS SecurID...
Page 423
R Index creating downloading rack mount text configuration file description 38, TruePort installing RADIUS Modbus parameters TruePort utility 130, supported RADIUS parameters RCP printing resetting to factory defaults overview configuring RJ45 UDP, I/O ethernet pinouts user sessions MDC serial pinouts utility SCS48C serial pinouts Decoder...
Need help?
Do you have a question about the IOLAN SDS and is the answer not in the manual?
Questions and answers