Siemens N148/23 Bedienungsanleitung

N 148/23

IP Interface Secure

Application program description

A6V11689762_en--_d Smart Infrastructure

2023-07-27

Supplementary information

Purpose of the application program description

The application program description contains detailed information on the paramet-

ers and communication objects of the ETS application program as well as a de-

scription of the functions that can be set via the different parameters.

Target audience of the application program de-

scription

The application program description is intended for people who want to commis-

sion IP interface or reconfigure it, who have a basic understanding of network tech-

nology and have successfully attended the following courses:

● KNX basics course

● IP fundamentals KNXnet/IP

Product documentation and support

Product documentation

Documents related the product, such as operating and installation instructions, ap-

plication program description, product database, additional software and CE de-

clarations can be downloaded from the following website:

http://www.siemens.com/gamma-td

Frequently asked questions

For frequently asked questions about the product and their solutions, see:

https://support.industry.siemens.com/cs/products?dtp=Faq&mfn=ps&lc=en-WW

FAQ

Support

Contact details for additional questions relating to the product:

Tel.: +49 89 9221-8000

http://www.siemens.com/supportrequest

2 | 18 A6V11689762_en--_d

A6V11689762_en--_d 3 | 18

Contents

1 Information on IP Interface Secure and on the application program 5

1.1 Cyber security disclaimer ......................................................................... 5

2 Function .................................................................................................. 6

2.1 Security functions of IP Interface Secure ................................................. 6

2.2 Functions of IP Interface Secure .............................................................. 6

3 Notes on secure data transfer............................................................... 8

4 Structure of the setting options in ETS................................................ 9

5 Parameter................................................................................................ 10

6 Commissioning ...................................................................................... 11

6.1 Function in factory settings....................................................................... 11

6.2 Location of the device certificate QR code............................................... 11

6.3 Commissioning the device ....................................................................... 11

6.4 Specifying the name and physical address of the device......................... 12

6.5 Assigning an IP address........................................................................... 12

6.6 Setting up additional physical addresses ................................................. 13

6.7 Setting up remote access......................................................................... 13

7 Help in case of errors and problems .................................................... 14

7.1 Frequently asked questions ..................................................................... 14

7.2 Possible errors ......................................................................................... 14

7.3 Troubleshooting using ETS ...................................................................... 14

7.4 Checking device certificates..................................................................... 15

8 Resetting the device to factory settings .............................................. 16

Index .................................................................................................................. 17

4 | 18 A6V11689762_en--_d

1 Information on IP Interface Secure and on

the application program

Product family: System device

Product type: Interface

Manufacturer: Siemens

Name: IP Interface Secure N148/23

Order no.: 5WG1 148-1AB23

Application: 07B0 CO IP Interface Secure 7205 03

System requirement:

● At least ETS 5.7.3 or above

1.1 Cyber security disclaimer

Siemens provides a portfolio of products, solutions, systems and services that in-

cludes security functions that support the secure operation of plants, systems, ma-

chines and networks. In the field of Building Technologies, this includes building

automation and control, fire safety, security management as well as physical secur-

ity systems.

In order to protect plants, systems, machines and networks against cyber threats, it

is necessary to implement – and continuously maintain – a holistic, state-of-the-art

security concept. Siemens’ portfolio only forms one element of such a concept.

You are responsible for preventing unauthorized access to your plants, systems,

machines and networks which should only be connected to an enterprise network

or the internet if and to the extent such a connection is necessary and only when

appropriate security measures (e.g. firewalls and/or network segmentation) are in

place. Additionally, Siemens’ guidance on appropriate security measures should be

taken into account. For additional information, please contact your Siemens sales

representative or visit https://www.siemens.com/global/en/home/company/topic-

areas/future-of-manufacturing/industrial-security.html.

Siemens’ portfolio undergoes continuous development to make it more secure.

Siemens strongly recommends that updates are applied as soon as they are avail-

able and that the latest versions are used. Use of versions that are no longer sup-

ported, and failure to apply the latest updates may increase your exposure to cyber

threats. Siemens strongly recommends to comply with security advisories on the

latest security threats, patches and other related measures, published, among oth-

ers, under https://www.siemens.com/cert/en/cert-security-advisories.htm.

Information on IP Interface Secure and on the application program

Cyber security disclaimer

A6V11689762_en--_d 5 | 18

2 Function

2.1 Security functions of IP Interface Secure

IP Interface Secure supports the “KNX IP Secure” security standard and offers the

following security functions, among others:

● Secured access only from authenticated devices

● Secure commissioning via ETS

During secure commissioning via ETS, the device certificate printed onto the

device (FDSK = Factory Default Setup Key) is imported and stored for this exact

device in the ETS project.

For more information on KNX IP Secure, refer to the ETS software help or go to

the following website: https://support.knx.org

Alternatively, insecure commissioning without KNX IP Secure is also possible. In

this case, the device is insecure and responds like other KNX devices without IP

Secure.

2.2 Functions of IP Interface Secure

IP Interface Secure is a rail-mounted device for installation in distributions. The

device uses the KNXnet/IP standard and acts as an interface to KNX/EIB via data

networks using the internet protocol (IP). To do so, this device enables bus access

from a PC or other data processing devices.

Connections and power

supply

The connection to KNX is established using a bus connector terminal (black and

red terminals). The connection to the data network (IP via 10 or 100BaseT (de-

pending on the switch)) is established using an RJ–45 socket.

IP Interface Secure also needs operating voltage in order to operate. IP Interface

Secure can obtain this operation voltage via the network line using “Power over

Ethernet” as per IEEE 802.3af. Alternatively, the operating voltage can be obtained

via the second terminal block (white-yellow terminals) from an AC/DC 24 V safety

extra low voltage supply or from a bus voltage supply (unchoked voltage, DC 29

V). As soon as the safety extra low voltage supply is connected to the second ter-

minal block, operating voltage is drawn from it.

Remote access Even if there is no direct network connection between a PC and an IP router, you

can use a suitable network infrastructure for remote access to a KNX installation.

Five simultaneous connections (remote accesses) are possible.

Setting up remote access [➙13]

Function

Security functions of IP Interface Secure

6 | 18 A6V11689762_en--_d

LAN

IP interface

KNX device

DSL router with VPN or ISDN/

dial-in router

LAN

Internet (via VPN connection

or dial-in modem)

DSL router

or modem

KNX

Fig. 1: Secure remote access

Additional functions IP Interface Secure has the following attributes:

● Easy to connect to higher-level systems by using the internet protocol (IP)

● Direct access to the KNX installation from every point in the IP network

(KNXnet/IP tunneling)

● Up to five KNXnet/IP tunneling connections are possible at the same time

● LED displays for operational readiness, KNX communication and IP communic-

ation

● Easy and secure configuration using ETS

● Easy to connect to visualization systems and facility management systems

● Slot for SD card (not in use)

Function

Functions of IP Interface Secure

A6V11689762_en--_d 7 | 18

3 Notes on secure data transfer

Instructions for secure operation of KNX IP Secure products

● Only operate the device in a protected network environment and do not allow

direct access from the Internet.

● Additionally secure remote access to the device via a VPN connection.

A virtual private network (VPN) establishes an encrypted and authorized con-

nection (VPN tunnel) from a remote connection to a network via the internet.

This VPN connection enables secure communication protected from eaves-

dropping between a remote device and the KNX installation.

● Only operate the device in secure mode. The device is in secure mode when

the device has been commissioned via secure commissioning, secure tunnel-

ing is enabled and strong and different passwords are used.

● Set up a separate IP network with its own hardware for KNX communication.

● Use user IDs and strong passwords to restrict access to the (KNX) IP network.

● Restrict access to the (KNX)IP network to an authorized group of people using

user IDs and strong passwords..

● Document network settings and give them to the building owner/operator or

LAN administrator.

● Coordinate the administration of access rights to this KNXnet/IP device in an IP

network with the respective IP network administrator.

Measures after replacing a device in the network

If an IP Router Secure or an IP Interface Secure in secure mode is stolen from a

network or replaced due to a defect, secure commissioning has to be repeated for

all other devices in the network. To do this, deactivate the“Secure commissioning“

option for each device in the settings of the project, activate the option again and

load the data to the devices again. (There is no need to load the data into the

device between deactivation and reactivation.)

Secure commissioning has to be repeated because it is not possible to exclude the

possibility that the keys that are in the secure section of the device can be read.

Recommissioning has the effect that new keys are generated and the old keys be-

come worthless. The removed device no longer works in the network.

More information on KNX security

For more information on KNX security, including, for example, a security check,

refer to the “KNX Secure” section on the KNX website (http://www.knx.org).

Notes on secure data transfer

8 | 18 A6V11689762_en--_d

4 Structure of the setting options in ETS

123

Fig. 2: ETS overview

1 Tree view of the different sections

(e.g. devices, topology and group

addresses)

2 Listing of parameter cards

3 Parameter section

In this area, parameters are set,

enabled or disabled.

4 “Properties” section (e.g. configur-

ation of IP and security, additional

physical addresses)

You can use the ‘Highlight changes’ button to highlight in yellow any parameters

that do not have the default settings.

Structure of the setting options in ETS 4

A6V11689762_en--_d 9 | 18

5 Parameter

Parameters of the “IP settings” parameter card

TTL (Time-to-Live) Uni-

cast Parameter Settings

TTL (Time-to-Live) Unicast 0 ... 255

Function:

This parameter can be used to set the TTL value for the IP protocol. The default

value is “128.” If the local network administrator specifies a different value, this

value can be entered here.

The value specifies the number of intermediate stations (e.g. routers) which a data

package may pass through between sender and receiver. If the value is set too

low, data packages can get lost and are not received by the recipient.

Parameter

10 | 18 A6V11689762_en--_d

Andere Handbücher für N148/23

Inhaltsverzeichnis

Andere Siemens Aufnahmegeräte Handbücher

Siemens

Siemens N148/22 Service-Handbuch

Siemens

Siemens SIMATIC NET CP 5613 Bedienungsanleitung

Siemens

Siemens AS-i Master CM 1243-2 a Bedienungsanleitung

Siemens

Siemens NCC-1F Bedienungsanleitung

Siemens

Siemens VIU-20 Bedienungsanleitung

Siemens

Siemens SIMATIC Distributed I/O System DP/ASi Link Bedienungsanleitung

Siemens

Siemens NIC-C Bedienungsanleitung

Siemens

Siemens D2300CPS Bedienungsanleitung

Siemens

Siemens SEZ50MB Bedienerhandbuch

Siemens

Siemens RUGGEDCOM RMC30 Bedienungsanleitung

Siemens

Siemens SINAMICS V90 Bedienungsanleitung

Siemens

Siemens CERBETUS PYROTRONICS VDT Technisches Datenblatt

Siemens

Siemens SENTRON 7KN POWERCENTER 3000 Bedienungsanleitung

Siemens

Siemens AEK84 Bedienungsanleitung

Siemens

Siemens NIC-C Bedienungsanleitung

Siemens

Siemens GAMMA instabus 5WG1 220-2AB21 Service-Handbuch

Siemens

Siemens SIPLUS CMS4000 ION BINARYINPUT T001 Bedienungsanleitung

Siemens

Siemens SIMATIC HMI KTP700F Mobile Bedienungsanleitung

Siemens

Siemens SINAMICS V90 Bedienungsanleitung

Siemens

Siemens TC35 Benutzerhandbuch

Siemens

Siemens VDO DTCO 1381 Stücklistenhandbuch

Siemens

Siemens 6AT8000-1BB00-0XA0 Bedienungsanleitung

Siemens

Siemens NET-7 Bedienungsanleitung

Siemens

Siemens ASM 456 Bedienungsanleitung

Beliebte Aufnahmegeräte Handbücher anderer Marken

KV2 Audio

KV2 Audio 500 Series Bedienungsanleitung

Robotics Technologies

Robotics Technologies microBus-Cam II Bedienungsanleitung

Seca

Seca 460 Bedienungsanleitung

Cognex

Cognex MVS-8000 Series Bedienungsanleitung

Mect

Mect MPNC006 Series Bedienungsanleitung

Bad Caf

Bad Caf THE LEASH Bedienungsanleitung

Strymon

Strymon NIGHTSKY Bedienungsanleitung

Mitsubishi Electric

Mitsubishi Electric 16CH DIGITAL RECORDER DX-TL5000U Bedienungsanleitung

Tews Technologies

Tews Technologies TPMC465 Bedienungsanleitung

Honeywell

Honeywell Excel 50 Bedienungsanleitung

SeaLevel

SeaLevel COMM+8.LPCI Bedienungsanleitung

Arturia

Arturia AUDIOFUSE STUDIO Bedienungsanleitung

Rukra

Rukra RK-1240 Bedienungsanleitung

Samson

Samson SCOM Bedienungsanleitung

Dynacord

Dynacord DPS260 Bedienungsanleitung

Pyle Pro

Pyle Pro PSS8 Bedienungsanleitung

Nice

Nice Core Bedienungsanleitung

RF-System

RF-System TinyGate Gebrauchs- und Pflegehandbuch