Dcbnet EtherSeries FT Bedienungsanleitung

FT-S erie s

E n c rypted Eth ern et

Tunn el

User’s Guide

Revised November 6,2016

Firmware Version 2.x

FCC Statement

This device complies with the limits for a lass A digital device, pursuant to Part 15 of the F rules.

This equipment has been tested and found to comply with the limits for a lass A digital device pursuant to

Part 15 of the F Rules. These limits are designed to provide reasonable protection against harmful

interference when the equipment is operated in a commercial environment. This equipment generates, uses,

and can radiate radio frequency energy and if not installed and used in accordance with the instruction

manual may cause harmful interference to radio communications.

Operation of this equipment in a residential area is likely to cause harmful interference, in which case the

user will be required to correct the interference at the user's own expense.

All trademarks and trade names are the properties of their respective owners.

RoHS

Some models of this product is available in RoHS versions.

TABLE OF CONTENTS

F Statement.........................................................i

RoHS.......................................................................i

Chapter 1

Introduction................................................................6

EtherSeries FT-6602 Applications.................................6

Other Features................................................................6

Protocols....................................................................6

DH P Protocol..........................................................7

Extensive Filtering.....................................................7

802.1q VLAN............................................................7

Upgradeable Firmware..............................................7

Security and Firewall Features...................................7

On-board Tools..........................................................7

Single-Interface operation..........................................7

Package ontents............................................................7

Software Requirements............................................7

FT-6602 Hardware.........................................................8

Introduction.............................................................8

onfiguration Options.............................................8

FT-6602 Front Panel................................................8

Rear Panel LED Indicators .....................................8

Rear Panel USB onnectors....................................8

Rear Panel RS-232 onnector................................8

Rear Panel Ethernet onnectors..............................9

Rear Panel USB onnectors....................................9

FT-6630 Specific – Two High Performance Ports.........9

Introduction.............................................................9

onfiguration Differences.......................................9

FT-6630 Front Panel................................................9

FT-6630 Front Panel LED Indicators.....................9

Chapter 2

Installation..................................................................11

Overview..................................................................11

Quick Start...............................................................11

Help Screens and Field Edits...................................11

Installation and onfiguration.......................................11

1. onfigure the Bridge’s IP address........................11

2. onnect the Ethernet able...................................13

3.Verify the IP Address onfiguration.....................13

4. Enter Your onfiguration ...................................14

5. Minimum onfiguration......................................14

Chapter 3

The Con iguration Process........................................15

Overview........................................................................15

Using the onfiguration Flexibility................................15

onfiguration Process Examples ...................................16

hange, test then save ............................................16

hange, save, then reset...........................................16

Restore with a saved configuration..........................16

Note regarding saved configurations........................16

Chapter 4

Con iguration..............................................................17

Overview........................................................................17

Administration................................................................17

Admin Password.............................................................18

Fields.......................................................................18

Notes........................................................................18

Admin Access ontrol....................................................19

Fields.......................................................................19

Notes........................................................................20

Set lock........................................................................21

Fields.......................................................................21

Notes........................................................................21

reate Web ertificates..................................................22

Fields.......................................................................24

Notes........................................................................24

Install ertificates...........................................................25

Fields.......................................................................26

Notes........................................................................26

Set lock........................................................................27

Fields.......................................................................27

Notes........................................................................27

Set All Defaults..............................................................28

onfiguration File..........................................................28

Fields.......................................................................29

Notes........................................................................29

Firmware Upgrade..........................................................30

Fields.......................................................................30

Notes........................................................................30

System Reboot................................................................31

Fields.......................................................................31

Notes........................................................................31

Version Information Screen............................................32

LAN 1 Ethernet Mode....................................................32

Fields.......................................................................33

Notes: ......................................................................33

Introduction

Ethernet IP onfiguration..............................................33

Fields.......................................................................34

Notes: ......................................................................34

DH P Server onfiguration...........................................35

Fields.......................................................................35

Notes: ......................................................................35

Ethernet PPPoE onfiguration ......................................36

Fields.......................................................................36

Tunnel Mode..................................................................38

Fields.......................................................................38

Encrypted Tunnel onfiguration....................................39

Fields.......................................................................39

Server Mode Enabled:.......................................39

lient Mode Enabled: .......................................39

On Failure: (Optional).......................................39

Notes........................................................................40

Generate ertificate Authority Key................................41

Fields.......................................................................41

Notes........................................................................42

Generate Local Key........................................................43

Fields.......................................................................43

Notes........................................................................44

Advanced Tunnel onfiguration....................................44

Fields.......................................................................44

Notes........................................................................45

Ethernet (MA ) Address Filters Screen........................45

Fields.......................................................................46

Notes........................................................................46

IP Address Filters Screen...............................................46

Fields.......................................................................47

Notes........................................................................47

UDP Address Filters Screen...........................................48

Fields.......................................................................48

Notes........................................................................49

T P Address Filters Screen...........................................49

Fields.......................................................................49

Notes........................................................................50

Additional lient Settings..............................................50

Fields.......................................................................50

Notes........................................................................51

Ping Screen....................................................................51

Fields.......................................................................51

Notes........................................................................51

Traceroute Screen..........................................................52

Fields.......................................................................52

Notes........................................................................52

iii

Packet Sniffer Screen.....................................................53

Fields.......................................................................54

Notes........................................................................54

Interface Status Screen..................................................55

Routing Table Screen....................................................55

Store onfiguration Screen...........................................56

Activate onfiguration Screen......................................56

Tunnel Log Screen........................................................57

Tunnel Nodes Screen.....................................................58

Tunnel Addresses Screen..............................................58

DH P Status Screen.......................................................59

PPPoE Log.....................................................................60

Chapter 5

Quick-Start Guide......................................................61

Overview .......................................................................61

Step 1: Setting Initial LAN1 IP address..................61

Step 2: Accessing the Web Interface.......................62

Step 3: onfigure LAN1..........................................63

Step 4: Activate hanges.........................................63

Step 5: Store onfiguration.....................................63

Step 6: onfigure LAN2..........................................63

Step 7: onfigure LAN3..........................................64

Step 8: Tunnel – Generate A Key.........................64

Step 9: Tunnel – Generate Local Key......................64

Step 10: Tunnel – Mode..........................................65

Step 11: Tunnel – onfiguration (Server)...............65

Step 12: Tunnel – onfiguration ( lient)................65

Step 13: Activate & Store hanges.........................65

Chapter 6

Troubleshooting..........................................................67

Hardware Problems........................................................67

an't onnect via the LAN.............................................67

Other Problems...............................................................68

hecking Bridge Operation............................................68

Appendix A

Speci ications..............................................................69

FT-6602 Bridge Specifications................................69

FT-6630 Bridge Specifications................................69

RS-232 PIN Assignments – Management Port.............71

ontrol Signal Operation................................................71

D D..........................................................................71

Receive Data..............................................................71

Introduction

Transmit Data............................................................71

DTR...........................................................................71

Signal Ground............................................................71

DSR...........................................................................71

RTS...........................................................................71

TS...........................................................................72

Ring Indicator............................................................72

ables.............................................................................72

To P 9-pin OM: port.....................................72

Bridge to hub or ethernet switch........................72

Appendix B

Open Source So tware In ormation..........................73

Introduction.............................................................73

Obtaining the Source ode......................................73

Appendix C

802.1Q VLAN Tagging ..............................................74

Introduction.............................................................74

VLAN onfiguration Differences...........................74

Chapter 1

Introduction

This chapter provides an overview of the EtherSeries FT Ethernet Tunnel Bridge’s

features and capabilities.

ongratulations on the purchase of your new EtherSeries FT Encrypted Ethernet Bridge. This is a

simple, easily configured tunneling device containing up to three Ethernet interfaces.

Two or more bridges connect using standard T P/IP using any insecure IP connection path. They tunnel

all Ethernet packets from the secure interface of each device to the other devices using a FIPS certified

encryption module and AES encryption.

The bridge transports all valid Ethernet protocols. It provides a virtual private network by bridging the

LANs with an IP tunnel that may be encrypted using the AES algorithm. Filtering is available based upon

IP or MA addresses and Protocol types. 802.1Q VLAN tagging is supported.

When used in its simplest mode, two bridges might “extend” a secure LAN segment to another physical

location via an insecure path. They may be used behind firewalls and NAT routers.

The FT includes the ability to create self-signed certificates. The certificate authority is stored on a USB

dongle, that allows the certificates to be shared between FT devices as well as web browsers used for

configuration. The FT series uses a FIPS certified encryption module.

EtherSeries FT Applications

The FT connects multiple LAN segments by using standard IP protocols between the bridges. It is

commonly used to connect a remote LAN to a central LAN. In this application, the bridges connect via any

valid T P/IP path, negotiate an encrypted link, and then bridge all non-filtered traffic between the two

LANs.

The encrypted ethernet bridge is also used to connect a single location to multiple remote sites. In this

application, remote sites may be “daisy-chained” to allow multiple locations to communicate via insecure

links.

In some applications, the FT is used to provide a path for multi-cast IP packets over a network not designed

for multi-casting. This is common for radio dispatch and VOIP applications.

Other Features

Protocols

The bridge uses the IP protocol to connect to its remote peer. It does pass IP, IPX, AppleTalk, and other

non-routable protocols through the encrypted IP tunnel.

Configuration

FIPS 1 0-2

The FT series uses a FIPS certified encryption module. AES is used for the bulk data encryption. SHA1 is

used for signing and RSA 2048 for key exchange and authentication. A USB memory device is used for

certificate information storage. ontact D B for current certificate information.

DHCP Protocol

The bridge supports the DH P protocol as a client or server. DH P may be served through the tunnelled

link.

Extensive Filtering

The bridge supports filtering based upon IP addresses, MA addresses, or Protocol type. Filtering may be

configured as “shall pass” or “shall deny”.

802.1q VLAN

The bridge passes 802.1Q VLAN tagged packets.

Upgradeable Firmware

Firmware upgrades may be installed using most web browsers. Internet Explorer Version 7 and newer or

the latest Firefox versions (version 2 or newer) are recommended. Older versions of web browsers may fail

due to TLS negotiation.

Security and Firewall Features

The bridge supports a number of security features. On the “insecure” side, all traffic is encrypted, including

the FT to FT negotiation. The encryption methodology is industry-standard AES using a FIPS certified

encryption module. It may be configured so only workstations on the “secure” side of a unit may be used to

configure or control it, and certificates may be required..

On-board Tools

The bridge contains diagnostic tools such as extensive logging, traceroute, ping, and a simple packet sniffer

to aid in network troubleshooting.

Single-Interface operation

The FT bridge may be configured in an "single-headed" mode. See details in the manual.

Package Contents

You should find the following items packaged with your bridge:

The FT Bridge

Power Adapter

This User’s Guide DROM

Short cable with RJ-45 connectors (Units with serial ports only)

9-pin P -direct adapter (Units with serial ports only)

9-pin Remote-P adapter (Units with serial ports only)

25-pin modem adapter (Units with serial ports only)

USB Dongle for certificate transfer

If any of the above are missing, contact your dealer immediately.

Software Requirements

The bridge supports IP and associated protocols such as UDP, I MP, PPPoE, DH P, multi-cast, and any

protocol built upon IP or T P/IP. It also bridges any valid Ethernet protocol. The initial IP address

may be entered using any terminal or terminal emulation software on a P .

A standard web browser ( Internet Explorer or Firefox are recommended.) may be used for configuration

once the bridge is configured with a valid IP address. Older versions of web browsers often fail due to TLS

negotiation. The use of a secure web browser connection for configuration (HTTPS://) is required.

Inhaltsverzeichnis

Beliebte Netzwerk-Router Handbücher anderer Marken

Allnet

Allnet ALL0333AU Bedienungsanleitung

HomeSeer

HomeSeer HT-SEL Bedienungsanleitung

Sercomm

Sercomm Genesis OC3505D Bedienungsanleitung

Billion

Billion BIPAC 5102 Series Bedienungsanleitung

TP-Link

TP-Link TD-8817 Bedienungsanleitung

Motorola

Motorola MR1900 Bedienungsanleitung

Digi

Digi IX14 Bedienungsanleitung

Cisco

Cisco NCS 540 Handbuch

XAVi

XAVi X8821e Bedienungsanleitung

BEC

BEC 6200WZL Bedienungsanleitung

MikroTik

MikroTik hAP ac3 Series Bedienungsanleitung

Korenix

Korenix JetNet 5428G Series Bedienungsanleitung

NETGEAR

NETGEAR FS526T - Switch Bedienungsanleitung

Korenix

Korenix JetNet 5710G Series Bedienungsanleitung

Automated Logic

Automated Logic ZN551 Betriebsanleitung

Cisco

Cisco ASR 1000 Series Bedienerhandbuch

EnGenius

EnGenius ESR-9710 Bedienungsanleitung

Cisco

Cisco 805 Series Bedienungs- und Sicherheitshinweise