Janitza Secure TCP ko Haɗin IP don UMG 508 Jagoran Mai Amfani
Gabaɗaya
Haƙƙin mallaka
Wannan bayanin aikin yana ƙarƙashin tanadin doka na kariyar haƙƙin mallaka kuma maiyuwa ba za a iya kwafin, sake bugawa, sake bugawa ko kwafi ko sake buga shi gabaɗaya ko wani ɓangare ta hanyar inji ko na lantarki ba tare da ɗaure bisa doka ba, amincewar rubuce-rubuce na
Janitza Electronics GmbH, Vor dem Polstück 6, 35633 Lahnau, Jamus
Alamomin kasuwanci
Duk alamun kasuwanci da haƙƙoƙin da suka taso daga gare su mallakin masu waɗannan haƙƙoƙin ne.
Disclaimer
Janitza Electronics GmbH ba shi da alhakin kurakurai ko lahani a cikin wannan bayanin aikin kuma ba shi da alhakin kiyaye abubuwan da ke cikin wannan bayanin aikin har zuwa yau.
Sharhi akan littafin
Maraba da sharhinku. Idan wani abu a cikin wannan jagorar bai bayyana ba, da fatan za a sanar da mu kuma ku aiko mana da imel a: info@janitza.com
Ma'anar alamomi
Ana amfani da hotuna masu zuwa a cikin wannan jagorar:
Ƙari mai haɗaritage!
Hadarin mutuwa ko mummunan rauni. Cire haɗin tsarin da na'urar daga wutar lantarki kafin fara aiki.
Hankali!
Da fatan za a koma ga takaddun. An yi nufin wannan alamar don faɗakar da ku game da haɗarin haɗari da ka iya tasowa yayin shigarwa, ƙaddamarwa da amfani.
Lura
Amintaccen haɗin TCP/IP
Sadarwa tare da na'urorin aunawa na jerin UMG yawanci ta hanyar Ethernet ne. Na'urorin aunawa suna ba da ka'idoji daban-daban tare da tashoshin haɗin kai don wannan dalili. Aikace-aikacen software kamar GridVis® suna sadarwa tare da na'urorin aunawa ta hanyar FTP, Modbus ko HTTP.
Tsaro na cibiyar sadarwa a cikin hanyar sadarwar kamfani yana ƙara muhimmiyar rawa a nan.
Wannan jagorar an yi niyya ne don tallafa muku amintaccen haɗa na'urorin aunawa cikin hanyar sadarwa, don haka kiyaye na'urorin auna yadda ya kamata daga shiga mara izini.
Jagoran yana nufin firmware> 4.057, kamar yadda aka yi canje-canjen HTML masu zuwa:
- Inganta lissafin ƙalubalen
- Bayan shiga uku kuskure, an katange IP (na abokin ciniki) na 900 seconds
- GridVis® saituna sun sake duba
- Kalmar sirri ta HTML: ana iya saita, lambobi 8
- Tsarin HTML gaba ɗaya mai kullewa
Idan ana amfani da na'urar aunawa a cikin GridVis®, akwai ka'idojin haɗi da yawa. Madaidaicin yarjejeniya shine ka'idar FTP - watau GridVis® yana karantawa files daga na'urar aunawa ta hanyar tashar jiragen ruwa ta FTP 21 tare da tashoshin bayanai daban-daban 1024 zuwa 1027. A cikin "TCP/IP" saitin, haɗin yana ba da tsaro ta hanyar FTP. Ana iya kafa amintaccen haɗi ta amfani da nau'in haɗin "TCP amintattu".
Hoto: Saituna don nau'in haɗin gwiwa a ƙarƙashin "Sanya haɗin
Canza kalmar shiga
- Ana buƙatar mai amfani da kalmar wucewa don amintaccen haɗi.
- Ta hanyar tsoho, mai amfani shine admin kuma kalmar sirri shine Janitza.
- Don amintaccen haɗi, kalmar sirri don samun dama ga mai gudanarwa (admin) ana iya canza shi a cikin menu na daidaitawa.
Mataki
- Bude maganganun "Sanya haɗin gwiwa".
Example 1: Don yin wannan, yi amfani da maɓallin linzamin kwamfuta don haskaka na'urar da ta dace a cikin taga ayyukan kuma zaɓi "Sanya haɗi" a cikin mahallin mahallin maɓallin linzamin kwamfuta na dama.
Example 2: Danna sau biyu akan na'urar da ta dace don buɗe kanview taga kuma zaɓi maɓallin "Configure Connection" button - Zaɓi nau'in haɗin "TCP amintattu"
- Saita adireshin mai masaukin na'urar
- Cika sunan mai amfani da kalmar wucewa.
Saitunan masana'anta:
Sunan mai amfani: admin
Kalmar wucewa: Janitza - Saita abin menu na "Encrypted".
Ana kunna ɓoyayyen AES256-bit na bayanan.
Hoto: Saita haɗin na'urar
Mataki
- Bude tagar daidaitawa
Example 1: Don yin wannan, yi amfani da maɓallin linzamin kwamfuta don haskaka na'urar da ta dace a cikin taga ayyukan kuma zaɓi "Tsarin" a cikin mahallin mahallin maɓallin linzamin kwamfuta na dama.
Example 2: Danna sau biyu akan na'urar da ta dace don buɗe kanview taga kuma zaɓi "Configuration" button - Zaɓi maɓallin "Passwords" a cikin taga mai daidaitawa. Canja kalmar sirrin mai gudanarwa, idan ana so.
- Ajiye canje-canje tare da canja wurin bayanai zuwa na'urar (maɓallin "Transfer")
Hankali!
KAR KA MANTA DA KYAUTA KASHIN KYAUTA. BABU KYAUTA KYAUTA. IDAN AKA MANTA DA KYAUTA KYAUTA, DOLE NE A AIKA NA'URAR ZUWA KASAR NAN!
Kalmar sirrin admin na iya zama matsakaicin tsayin lambobi 30 kuma yana iya ƙunshi lambobi, haruffa da haruffa na musamman (Lambar ASCII 32 zuwa 126, sai dai haruffan da aka jera a ƙasa). Hakanan, ba dole ba ne a bar filin kalmar wucewa ba komai.
Kada a yi amfani da haruffa na musamman masu zuwa:
(ladi na 34)
( lamba ta 92)
^ ( lamba ta 94)
( lamba ta 96)
| ( lamba ta 124)
Ana ba da izinin sarari (lambar 32) a cikin kalmar sirri kawai. Ba a yarda da shi azaman hali na farko da na ƙarshe ba.
Lokacin da ka sabunta zuwa sigar GridVis®> 9.0.20 kuma kayi amfani da ɗayan haruffa na musamman da aka kwatanta a sama, za a sa ka canza kalmar sirri bisa ga waɗannan ƙa'idodin lokacin da ka buɗe na'urar daidaitawa.
Bayanin "Canja kalmar sirri" tare da dokokin kalmar sirri kuma ya shafi nau'in haɗin "HTTP amintattu".
Hoto: Tsarin kalmomin shiga
Saitunan Firewall
- Na'urorin aunawa suna da hadedde Firewall wanda ke ba ku damar toshe tashar jiragen ruwa da ba ku buƙata.
Mataki
- Bude maganganun "Sanya haɗin gwiwa".
Example 1: Don yin wannan, yi amfani da maɓallin linzamin kwamfuta don haskaka na'urar da ta dace a cikin taga ayyukan kuma zaɓi "Sanya haɗi" a cikin mahallin mahallin maɓallin linzamin kwamfuta na dama.
Example 2: Danna sau biyu akan na'urar da ta dace don buɗe kanview taga kuma zaɓi maɓallin "Configure Connection" button - Zaɓi nau'in haɗin "TCP amintattu"
- Shiga azaman mai gudanarwa
Hoto: Haɗin na'urar (admin)
Mataki
- Bude tagar daidaitawa
Example 1: Don yin wannan, yi amfani da maɓallin linzamin kwamfuta don haskaka na'urar da ta dace a cikin taga ayyukan kuma zaɓi "Tsarin" a cikin mahallin mahallin maɓallin linzamin kwamfuta na dama.
Example 2: Danna sau biyu akan na'urar da ta dace don buɗe kanview taga kuma zaɓi "Configuration" button - Zaɓi maɓallin "Firewall" a cikin taga mai sanyi.
Hoto: Tsarin Firewall
- Ana kunna wuta ta hanyar maɓallin "Firewall".
- Tun daga fitowar X.XXX, wannan shine saitunan tsoho.
- Za a iya kashe ka'idojin da ba ku buƙata a nan.
- Lokacin da aka kunna Tacewar zaɓi, na'urar tana ba da izinin buƙatun kawai akan ka'idojin da aka kunna a kowace harka
Ka'idoji Port FTP Port 21, tashar bayanai 1024 zuwa 1027 HTTP Tashar ruwa 80 SNMP Tashar ruwa 161 Modbus RTU Tashar ruwa 8000 Gyara kuskure PORT 1239 (don dalilai na sabis) Modbus TCP/IP Tashar ruwa 502 BACnet Tashar ruwa 47808 DHCP UTP tashar jiragen ruwa 67 da 68 NTP Tashar ruwa 123 Sunan uwar garken Tashar ruwa 53
- Don sadarwa ta asali tare da GridVis® kuma ta shafin gida, saitunan masu zuwa zasu wadatar:
Hoto: Tsarin Firewall
- Amma don Allah a zaɓi rufaffiyar tashoshin jiragen ruwa a hankali! Dangane da ƙa'idar haɗin kai da aka zaɓa, ƙila za a iya yin sadarwa ta HTTP kawai, misaliample.
- Ajiye canje-canje tare da canja wurin bayanai zuwa na'urar (maɓallin "Transfer")
Nuna kalmar sirri
- Hakanan ana iya kiyaye tsarin na'urar ta maɓallan na'urar. Ie kawai bayan shigar da kalmar wucewa ne saitin zai yiwu. Za'a iya saita kalmar wucewa akan na'urar kanta ko ta GridVis® a cikin taga sanyi.
Dole ne kalmar wucewar nuni ta zama matsakaicin tsayin lambobi 5 kuma ya ƙunshi lambobi kawai.
Hoto: Saita kalmar sirrin nuni
Tsari:
- Bude tagar daidaitawa
Example 1: Don yin wannan, yi amfani da maɓallin linzamin kwamfuta don haskaka na'urar da ta dace a cikin taga ayyukan kuma zaɓi "Tsarin" a cikin mahallin mahallin maɓallin linzamin kwamfuta na dama.
Example 2: Danna sau biyu akan na'urar da ta dace don buɗe kanview taga kuma zaɓi "Configuration" button - Zaɓi maɓallin "Passwords" a cikin taga mai daidaitawa. Idan ana so, canza zaɓin "Masu amfani da kalmar wucewa don yanayin shirye-shirye akan na'urar"
- Ajiye canje-canje tare da canja wurin bayanai zuwa na'urar (maɓallin "Transfer")
Saitunan da ke kan na'urar za a iya canza su ta hanyar shigar da kalmar sirri
kalmar sirrin shafin gida
- Hakanan za'a iya kiyaye shafin gida daga shiga mara izini. Akwai zaɓuɓɓuka masu zuwa:
- Kar a kulle shafin gida
Ana samun damar shafin gida ba tare da shiga ba; za a iya daidaitawa ba tare da shiga ba. - Kulle shafin gida
Bayan shiga, za a buɗe shafin farko da tsarin adireshin IP na mai amfani na mintuna 3. Tare da kowane damar an saita lokacin zuwa mintuna 3 kuma. - Kulle daidaitawa daban
Ana samun damar shafin gida ba tare da shiga ba; Za a iya yin saitunan kawai ta shiga. - Kulle shafin gida da daidaitawa daban
- Bayan shiga, ana buɗe shafin gida don IP na mai amfani na mintuna 3.
- Tare da kowane damar an saita lokacin zuwa mintuna 3 kuma.
- Ana iya yin saiti ta shiga ciki kawai
Lura: Sai kawai masu canji waɗanda ke cikin init.jas ko suna da izini “Admin” ana ɗaukarsu azaman tsari
Dole ne kalmar sirrin shafin gida ya zama matsakaicin tsayin lambobi 8 kuma ya ƙunshi lambobi kawai.
- Kar a kulle shafin gida
Hoto: Saita kalmar sirrin shafin gida
Bayan kunnawa, taga shiga yana bayyana bayan buɗe gidan yanar gizon na'urar.
Hoto: Shiga shafin gida
Modbus TCP/IP tsaro sadarwa
Ba shi yiwuwa a amintar Modbus TCP/IP sadarwa (tashar jiragen ruwa 502). Ma'aunin Modbus baya bayar da kowane kariya. Haɗin boye-boye ba zai ƙara kasancewa bisa ƙa'idar Modbus ba kuma ba za a ƙara samun garantin yin aiki tare da wasu na'urori ba. Don haka, ba za a iya sanya kalmar sirri ba yayin sadarwar Modbus.
Idan IT ta fayyace cewa amintattun ladabi kawai za a iya amfani da su, dole ne a kashe Modbus TCP/IP tashar jiragen ruwa a cikin Tacewar zaɓi na na'urar. Dole ne a canza kalmar sirri mai sarrafa na'urar kuma dole ne sadarwa ta gudana ta hanyar "TCP amintattu" (FTP) ko "HTTP amintattu".
Modbus RS485 tsaro sadarwa
Kariyar sadarwar Modbus RS485 ba ta yiwuwa. Ma'aunin Modbus baya bayar da kowane kariya. Haɗin boye-boye ba zai ƙara kasancewa bisa ƙa'idar Modbus ba kuma ba za a ƙara samun garantin yin aiki tare da wasu na'urori ba. Wannan kuma ya shafi aikin babban Modbus. Ie, ba za a iya kunna ɓoyayyen ɓoyewa don na'urori a wurin RS-485 ba.
Idan IT ta fayyace cewa amintattun ladabi kawai za a iya amfani da su, dole ne a kashe Modbus TCP/IP tashar jiragen ruwa a cikin Tacewar zaɓi na na'urar. Dole ne a canza kalmar sirri mai sarrafa na'urar kuma dole ne sadarwa ta gudana ta hanyar "TCP amintattu" (FTP) ko "HTTP amintattu".
Koyaya, na'urorin da ke RS485 ke dubawa sannan ba za a sake karanta su ba!
Madadin a wannan yanayin shine watsawa tare da aikin babban Modbus kuma don amfani da na'urorin Ethernet na musamman kamar UMG 604/605/508/509/511 ko UMG 512.
Tsaron sadarwa "UMG 96RM-E".
UMG 96RM-E baya bayar da amintacciyar yarjejeniya. Sadarwa tare da wannan na'urar yana ta Modbus TCP/IP na musamman. Ba shi yiwuwa a amintar Modbus TCP/IP sadarwa (tashar jiragen ruwa 502). Ma'aunin Modbus baya bayar da kowane kariya. Ie idan za a haɗa ɓoyayyen ɓoye, ba zai ƙara kasancewa daidai da ƙa'idar Modbus ba kuma ba za a ƙara samun garantin yin aiki tare da wasu na'urori ba. Don haka, ba za a iya sanya kalmar sirri ba yayin sadarwar Modbus.
Taimako
Janitza Electronics GmbH Vor dem Polstück 6 | 35633 Lahnau Jamus
Tel. + 49 6441 9642-0 info@janitza.com www.janitza.com
Doc. a'a. 2.047.014.1.a | 02/2023 | Dangane da gyare-gyaren fasaha.
Za a iya samun sigar daftarin yanzu a wurin zazzagewa a www.janitza.com
Takardu / Albarkatu
![]() |
Janitza Secure TCP ko Haɗin IP don UMG 508 [pdf] Manual mai amfani UMG 508, UMG 509-PRO, UMG 511, UMG 512-PRO, UMG 604-PRO, UMG 605-PRO, Amintaccen TCP ko Haɗin IP don UMG 508, Amintaccen TCP ko Haɗin IP |