ETIC IPL-E User Manual
DOC_DEV_IPL-E_User guide_A
IPL-E
Router Firewall
_________________
USER GUIDE
The IPL-E router is manufactured by
ETIC TELECOM
13 Chemin du vieux chêne
38240 MEYLAN
FRANCE
TEL : + 33 4-76-04-20-00
Hotline : + 33 4-76-04-20-05
FAX : + 33 4-76-04-20-01
E-mail : hotline@etictelecom.com
web : www.etictelecom.com
Router Firewall IPL-E DOC_DEV_IPL-E_User guide_A Page 5
CONTENT
OVERVIEW ....................................................................................................................... 7
1
Certificate of conformity .................................................................................. 7
2
Products identification .................................................................................... 8
3
Data-sheet ..................................................................................................... 10
4
Product Overview .......................................................................................... 12
4.1 Applications .............................................................................................. 12
4.2 Functions .................................................................................................. 13
4.3 Router interfaces & organisation ................................................................ 14
INSTALLATION .............................................................................................................. 15
1
Product description ....................................................................................... 15
1.1 Dimensions ............................................................................................... 15
1.2 Push-buttons ............................................................................................ 15
1.3 Connectors ................................................................................................ 15
1.4 IPL-E-400 or IPL-EW-400 (WiFi option) ..................................................... 19
1.5 IPL-E-220 or IPL-EW-220 (WiFi option) ...................................................... 20
1.6 IPL-E-230 or IPL-EW-230 (WiFi option) ...................................................... 21
1.7 IPL-E-260 or IPL-EW-260 (WiFi option) ...................................................... 22
1.8 IPL-E-261 or IPL-EW-261 (WiFi option) ...................................................... 23
2
Mounting the product on a Din rail ................................................................. 24
3
Cooling .......................................................................................................... 24
4
Supply voltage ............................................................................................... 24
5
Digital input and output ................................................................................. 25
6
RS232 ........................................................................................................... 25
7
RS485 connection (IPL-E-220 or IPL-EW-220) ............................................... 25
8
RS422 isolated interface (IPL-E-260 or IPL-EW-260) .................................... 27
9
RS485 isolated interface (IPL-E-261 or IPL-EW-261) ..................................... 28
CONTENT
Page 6 DOC_DEV_IPL-E_User guide_A Router Firewall IPL-E
PREPARING THE SETUP ................................................................................................ 29
1
First setup ..................................................................................................... 29
2
Protecting the access to the administration web server ................................. 29
3
HTTPS set-up modifications through the WAN interface ................................ 30
4
Recovering the factory LAN IP address .......................................................... 30
5
Restoring the factory set-up .......................................................................... 30
6
Saving or restoring a set of parameters ......................................................... 31
7
Configuration steps ....................................................................................... 32
DIAGNOSTIC .................................................................................................................. 34
1
Diagnostic ..................................................................................................... 34
1.1 Logs .......................................................................................................... 34
1.2 Network status .......................................................................................... 35
1.3 Serial gateways status ............................................................................... 36
1.4 « Ping » tool .............................................................................................. 36
1.5 « WiFi » scanner tool .................................................................................. 36
2
Firmware update ............................................................................................ 37
Router Firewall IPL-E DOC_DEV_IPL-E_User guide_A Page 7
OVERVIEW
Certificate of conformity
The manufacturer, ETIC Telecom – 13 chemin du vieux chêne – 38240 Meylan – France, Hereby declares
that the listed products
Type of device : Ethernet interfaces IP router
Reference : IPL-E
conforms to the Council Directive 1999/5/EC related to radio and telecommunication terminal equipment.
The harmonized standards to which the equipment complies are :
Standard
Title
EN301489-1
Electromagnetic compatibility and Radio spectrum Matters :
Part 1 : General requirements
EN61000-6-2
Ed. 2001
Immunity :
EN60100-4-2 Electrostatic Discharge
EN60100-4-3 Radiated Immunity
EN60100-4-4 EFT/Burst Immunity
EN60100-4-5 Surge Immunity
EN60100-4-6 Conducted Immunity
EN61000-6-4
Ed 2001
Emission :
EN55022 radiated and conducted emission
EN60950
Security
EN50385
Human exposure to radio frequency fields exposure
Philippe DUCHESNE
Quality manager
5th January 2015
OVERVIEW
Page 8 DOC_DEV_IPL-E_User guide_A Router Firewall IPL-E
Products identification
The present user guide describes the products listed hereafter.
Router without WiFi
IPL-E-
400
220
230
260
261
IP routing
• • • • •
Firewall SPI
• • • • •
IPSEC & OpenVPN VPNs (16 tunnels max.)
• • • • •
25 remote users RAS
PPTP / L2TP/IPSec / OpenVPN / HTTPS
• • • • •
HTTPS portal
• • • • •
Serial gateway (Raw TCP & UDP, Telnet, Modbus,
Unitelway)
- • • •
Ethernet 10 / 100 BT (LAN / WAN)
4 / 1
2 / 1
2 / 1
2 / 1
2 / 1
RS232
- 1 2
-
-
RS485 - 1
- - -
RS422 isolated
-
-
- 1 -
RS485 isolated
-
-
- - 1
USB
1
1
1 1 1
NAT
• • • • •
Port forwarding
• • • • •
SNMP
• • • • •
DNS
• • • • •
DHCP server on the LAN inteface
• • • • •
Digital input for alarm email
1 1 1 1 1
HTTPS / HTML / SSH configuration
• • • • •
OVERVIEW
Router Firewall IPL-E User Guide 9021209-01 Page 9
Router with WiFi interface
IPL-EW-
400
220
230
260
261
IP routing
• • • • •
WiFi 2.4 & 5 GHz Client or Access point
• • • • •
Firewall SPI
• • • • •
IPSEC & OpenVPN VPNs (16 tunnels max.)
• • • • •
25 remote users RAS
PPTP / L2TP-IPSec / OpenVPN / HTTPS
• • • • •
HTTPS portal
• • • • •
Serial gateway (Raw TCP & UDP, Telnet, Modbus,
Unitelway)
_
• • •
•
Ethernet 10 / 100 BT (LAN / WAN)
4 / 1
2 / 1
2 / 1
2 / 1
2 / 1
RS232
_ 1 2
_
_
RS485 _ 1
_ _ _
RS422 isolated
_
_
_ 1 _
RS485 isolated
_
_
_ _ 1
USB
1
1
1 1 1
NAT
• • • • •
Port forwarding
• • • • •
SNMP
• • • • •
DNS
• • • • •
DHCP server on the LAN inteface
• • • • •
Digital input for alarm email
1 1 1 1 1
HTTPS / HTML / SSH configuration
• • • • •
Option
Référence
Service de connexion M2Me_Connect
M2Me pack initial
OVERVIEW
Page 10 DOC_DEV_IPL-E_User guide_A Router Firewall IPL-E
Data-sheet
General characteristics
Dimensions
137 x 48 x 116 mm (h, l, p)
Electrical safety
EN 60950- UL 1950
EMC
ESD : EN61000-4-2 : Discharge 6 KV
RF field : EN61000-4-3 : 10V/m < 2 GHz
Fast transient : EN61000-4-4
Surge voltage : EN61000-4-5 : 4KV line / earth
RoHS
2002/95/CE (RoHS)
Supply voltage
IPL-E-400, IPL-EW-400 10 to 60 VDC
IPL-E-230, IPL-EW-230 10 to 60 VDC
IPL-E-260, IPL-EW-260 10 to 60 VDC
IPL-E-261, IPL-EW-261 10 to 60 VDC
IPL-E-220, IPL-EW-220 10 to 30 VDC
Operating T°
-20°C / + 60°C Humidity 5 – 95 %
WiFI
Type
2.4 & 5 GHz
RF connector
R-SMA female
WiFi transmission
802.11 a/b/g/n
VPN & firewall
VPN
Client or server IPSEC or OpenVPN
Encryption AES256 3DES
Certificate X509 or preshared key
16 VPNs maximum of the same type (OpenVPN or IPSec)
Firewall
Stateful packet inspection (50 rules)
Deny of service filter
Source & destination IP address & port number filter
Remote users filter
Logs
Date and time stamped logs
Remote access server (RAS)
User list
25 users
Connection
PPTP / L2TP-IPSec / Open VPN / HTTPS
Login & password
Certificate X509
M2Me
(option)
VPN Compliant with the M2Me_Secure VPN client
Compliant with the M2Me_Connect mediation service
Alarms
1 input : emails or SM (cellular models)
OVERVIEW
Router Firewall IPL-E User Guide 9021209-01 Page 11
Serial interfaces
Data rate
1200 to 115200 kb/s parity N / E / O
Gateway
Raw TCP UDP client & server - Modbus master & slave
Multicast - Telnet - Unitelway
USB
1 USB host port
PPP client over the usb interface
IP router
Ethernet
10/100 BT – 2 or 4 switched ports
IP router
Static routes – RIP V2
IP address
translation
Source IP @ translation (NAT)
Destination IP @ translation (DNAT)
Port forwarding
DHCP
LAN interface : Fixed IP @ or DHCP client or DHCP server
OVERVIEW
Page 12 DOC_DEV_IPL-E_User guide_A Router Firewall IPL-E
Product Overview
The IPL-E router is a security product.
It is designed to interconnect safely automated devices over an Intranet or the Internet.
The IPL-E is at the same time
an IP router to route IP packets between a WAN interface and a LAN interface,
a powerful VPN client or server (IPSec or OpenVPN),
a remote access server (RAS) to provide a secure access to the LAN for remote users;
a stateful inspection firewall to filter the IP traffic.
4.1 Applications
That features in the same product make the IPL-E a top level solution for remote SCADA systems and
remote maintenance through the Internet.
Remote SCADA system
Remote access server
Firewall between a company network and a
factory network or a machine
Loading...