I-Janitza Secure TCP noma i-IP Connection ye-UMG 508 User Manual

Okujwayelekile

I-copyright

Le ncazelo yokusebenza ingaphansi kwezinhlinzeko ezingokomthetho zokuvikelwa kwe-copyright futhi akufanele ikopishwe, iphrintwe kabusha, ikhiqizwe kabusha noma iphindwe noma iphinde ishicilelwe ngokuphelele noma ingxenye ngezindlela zemishini noma ze-elekthronikhi ngaphandle kwemvume ebophayo ebhaliwe

I-Janitza electronics GmbH, Vor dem Polstück 6, 35633 Lahnau, Germany

Izimpawu zokuhweba

Zonke izimpawu zokuhweba namalungelo avela kuzo ziyimpahla yabanikazi abafanele balawa malungelo.

Umshwana wokuzihlangula

I-Janitza electronics GmbH ayithwesi icala ngamaphutha noma ukukhubazeka ngaphakathi kwale ncazelo yokusebenza futhi ayithathi sibopho sokugcina okuqukethwe kwale ncazelo yokusebenza kusesikhathini samanje.

Amazwana ngemanuwali

Imibono yakho yamukelekile. Uma okuthile kule ncwajana kubonakala kungacacile, sicela usazise futhi usithumelele i-imeyili kokuthi: info@janitza.com

Incazelo yezimpawu

Ama-pictograms alandelayo asetshenziswa kule manuwali:

Voltage!
Ingozi yokufa noma yokulimala kanzima. Nqamula isistimu nedivayisi ekunikezeni amandla ngaphambi kokuqala umsebenzi.

Qaphela!
Sicela ubheke amadokhumenti. Lolu phawu luhloselwe ukukuxwayisa ngezingozi ezingase zivele ngesikhathi sokufakwa, ukuthunywa nokusetshenziswa.

Qaphela

Vikela uxhumano lwe-TCP/IP

Ukuxhumana namadivayisi wokulinganisa ochungechunge lwe-UMG kuvame ukusebenzisa i-Ethernet. Amadivayisi wokulinganisa ahlinzeka ngamaphrothokholi ahlukene nezimbobo zokuxhuma ezifanele zale njongo. Izinhlelo zesofthiwe ezifana ne-GridVis® zixhumana nemishini yokukala nge-FTP, i-Modbus noma iphrothokholi ye-HTTP.

Ukuphepha kwenethiwekhi kunethiwekhi yenkampani kudlala indima ebaluleke kakhulu lapha.

Lo mhlahlandlela uhloselwe ukukusekela ekuhlanganiseni ngokuphephile amadivaysi okulinganisa kunethiwekhi, ngaleyo ndlela uvikele ngempumelelo amadivaysi okulinganisa ekufinyeleleni okungagunyaziwe.

Umhlahlandlela ubhekisela ku-firmware > 4.057, njengoba izinguquko ezilandelayo ze-HTML zenziwe:

• Ukuthuthukiswa kwesibalo senselele
• Ngemva kokungena okungalungile okuthathu, i-IP (yeklayenti) ivinjelwa imizuzwana engu-900
• Izilungiselelo ze-GridVis® zibuyekeziwe
• Iphasiwedi ye-HTML: ingasethwa, amadijithi ayi-8
• Ukucushwa kwe-HTML kukhiyeke ngokuphelele

Uma idivayisi yokukala isetshenziswa ku-GridVis®, kunemithethonqubo eminingi yokuxhumana etholakalayo. Iphrothokholi ejwayelekile iphrothokholi ye-FTP - okungukuthi i-GridVis® ifundeka files kusuka kudivayisi yokulinganisa ngembobo ye-FTP engu-21 enezimbobo zedatha ezifanele 1024 ukuya ku-1027. Kuzilungiselelo ze-“TCP/IP”, uxhumano lwenziwa lungavikelekile nge-FTP. Uxhumano oluvikelekile lungasungulwa kusetshenziswa uhlobo lokuxhuma oluthi “i-TCP evikelekile”.

Umfanekiso: Izilungiselelo zohlobo lokuxhuma ngaphansi kokuthi “Lungiselela uxhumano

SHINTSHA iphasiwedi

• Umsebenzisi nephasiwedi kuyadingeka ukuze kuxhunywe okuphephile.
• Ngokuzenzakalelayo, umsebenzisi ungumqondisi futhi iphasiwedi ithi Janitza.
• Ukuze uthole uxhumano oluphephile, iphasiwedi yokufinyelela yomlawuli (admin) ingashintshwa kumenyu yokumisa.

Isinyathelo

• Vula ibhokisi elithi "Lungiselela uxhumano".
  Example 1: Ukuze wenze lokhu, sebenzisa inkinobho yegundane ukuze ugqamise idivayisi ehambisanayo efasiteleni lephrojekthi bese ukhetha "Lungiselela uxhumano" kumenyu yokuqukethwe yenkinobho yegundane elingakwesokudla.
  Example 2: Chofoza kabili kudivayisi ehambisanayo ukuze uvule ngaphezuluview ifasitela bese ukhetha inkinobho ethi "Lungisa uxhumano".
• Khetha uhlobo lokuxhuma "i-TCP ivikelekile"
• Setha ikheli lesikhungo sedivayisi
• Gcwalisa igama lomsebenzisi nephasiwedi.
  Izilungiselelo zasefekthri:
  Igama lomsebenzisi: admin
  Inombolo yomthetho: Janitza
• Setha into yemenyu ethi "Ebethelwe".
  Ukubethela kwedatha kwe-AES256-bit kuyabe kuyasebenza.

Umfanekiso: Ukucushwa koxhumano lwedivayisi

Isinyathelo 

• Vula iwindi lokumisa
  Example 1: Ukuze wenze lokhu, sebenzisa inkinobho yegundane ukugqamisa idivayisi ehambisanayo efasiteleni lephrojekthi bese ukhetha "Ukucushwa" kumenyu yokuqukethwe yenkinobho yegundane elingakwesokudla.
  Example 2: Chofoza kabili kudivayisi ehambisanayo ukuze uvule ngaphezuluview ifasitela bese ukhetha inkinobho ethi "Configuration".
• Khetha inkinobho ethi "Amagama-mfihlo" efasiteleni lokucushwa. Shintsha iphasiwedi yomlawuli, uma uthanda.
• Londoloza izinguquko ngokudlulisela idatha kudivayisi (inkinobho "Dlulisa")

Qaphela!
UNGAKHOHLWA IPSWEDI NGAPHANSI KWANOMA YIZIPHI IZIMO. ALIKHO IPHASWEDI LE-MASTER. UMA IPHASIWEDI LIKHOHLWA, IDIVAYISI KUMELE ITHUNYELWE EMKHANGWENI!

Iphasiwedi yomlawuli ingase ibe amadijithi angu-30 ubude futhi ingaba nezinombolo, izinhlamvu nezinhlamvu ezikhethekile (ikhodi ye-ASCII 32 kuya ku-126, ngaphandle kwezinhlamvu ezibalwe ngezansi). Futhi, inkambu yephasiwedi akumele ishiywe ingenalutho.
Izinhlamvu ezikhethekile ezilandelayo akufanele zisetshenziswe:
” (ikhodi 34)
\ (ikhodi 92)
^ (ikhodi 94)
`(ikhodi 96)
| (ikhodi 124)
Isikhala (ikhodi 32) sivunyelwe kuphela ngaphakathi kwephasiwedi. Akuvunyelwe njengomlingiswa wokuqala nowokugcina.
Uma usuthuthukele enguqulweni ye-GridVis® > 9.0.20 futhi usebenzisa eyodwa yezinhlamvu ezikhethekile ezichazwe ngenhla, uzocelwa ukuthi ushintshe igama-mfihlo ngokwale mithetho lapho uvula isihleli sedivayisi.

Incazelo ethi "Shintsha iphasiwedi" nemithetho yayo yephasiwedi iphinda isebenze ohlotsheni lokuxhuma "i-HTTP evikelekile".

Umfanekiso: Ukucushwa kwamaphasiwedi

Izilungiselelo ze-firewall

• Amadivayisi okulinganisa ane-firewall ehlanganisiwe ekuvumela ukuthi uvimbe izimbobo ongazidingi.

Isinyathelo

• Vula ibhokisi elithi "Lungiselela uxhumano".
  Example 1: Ukuze wenze lokhu, sebenzisa inkinobho yegundane ukuze ugqamise idivayisi ehambisanayo efasiteleni lephrojekthi bese ukhetha "Lungiselela uxhumano" kumenyu yokuqukethwe yenkinobho yegundane elingakwesokudla.
  Example 2: Chofoza kabili kudivayisi ehambisanayo ukuze uvule ngaphezuluview ifasitela bese ukhetha inkinobho ethi "Lungisa uxhumano".
• Khetha uhlobo lokuxhuma "i-TCP ivikelekile"
• Ngena ngemvume njengomlawuli

Umfanekiso: Ukucushwa koxhumano lwedivayisi (admin)

Isinyathelo 

• Vula iwindi lokumisa
  Example 1: Ukuze wenze lokhu, sebenzisa inkinobho yegundane ukugqamisa idivayisi ehambisanayo efasiteleni lephrojekthi bese ukhetha "Ukucushwa" kumenyu yokuqukethwe yenkinobho yegundane elingakwesokudla.
  Example 2: Chofoza kabili kudivayisi ehambisanayo ukuze uvule ngaphezuluview ifasitela bese ukhetha inkinobho ethi "Configuration".
• Khetha inkinobho ethi "Firewall" ewindini lokucushwa.
  Umfanekiso: Ukucushwa kwe-firewall
  
• I-firewall ivulwa ngenkinobho ethi "Firewall".
  • Kusukela ekukhishweni kwe-X.XXX, lesi isilungiselelo esizenzakalelayo.
  • Amaphrothokholi ongawadingi angenziwa angasebenzi lapha.
  • Uma i-firewall ivuliwe, idivayisi ivumela kuphela izicelo kumaphrothokholi avuliwe esimweni ngasinye
    

    Imithethonqubo	Itheku
    I-FTP	I-Port 21, ichweba ledatha 1024 kuya ku-1027
    I-HTTP	Imbobo 80
    I-SNMP	Imbobo 161
    I-Modbus RTU	Imbobo 8000
    Susa iphutha	I-PORT 1239 (ngokwezinjongo zesevisi)
    I-Modbus TCP/IP	Imbobo 502
    I-BACnet	Imbobo 47808
    I-DHCP	Imbobo ye-UTP 67 kanye ne-68
    I-NTP	Imbobo 123
    Igama leseva	Imbobo 53

• Ngokuxhumana okungajwayelekile neGridVis® nangekhasi eliyisiqalo, izilungiselelo ezilandelayo zizokwanela:
  Umfanekiso: Ukucushwa kwe-firewall
  
• Kodwa sicela ukhethe amachweba avaliwe ngokucophelela! Kuya ngephrothokholi yokuxhumana ekhethiwe, kungenzeka ukuxhumana kuphela nge-HTTP, ngokwesiboneloample.
• Londoloza izinguquko ngokudlulisela idatha kudivayisi (inkinobho "Dlulisa")

Bonisa iphasiwedi

• Ukumiswa kwedivayisi ngokhiye bedivayisi nakho kungavikelwa. Ie kuphela ngemva kokufaka iphasiwedi ukucushwa kungenzeka. Iphasiwedi ingasethwa edivayisini ngokwayo noma nge-GridVis® efasiteleni lokucushwa.

Iphasiwedi yesibonisi kufanele ibe nenani eliphakeme lamadijithi angu-5 ubude futhi ibe nezinombolo kuphela.

Umfanekiso: Ukusetha iphasiwedi yokubonisa

Inqubo: 

• Vula iwindi lokumisa
  Example 1: Ukuze wenze lokhu, sebenzisa inkinobho yegundane ukugqamisa idivayisi ehambisanayo efasiteleni lephrojekthi bese ukhetha "Ukucushwa" kumenyu yokuqukethwe yenkinobho yegundane elingakwesokudla.
  Example 2: Chofoza kabili kudivayisi ehambisanayo ukuze uvule ngaphezuluview ifasitela bese ukhetha inkinobho ethi "Configuration".
• Khetha inkinobho ethi "Amagama-mfihlo" efasiteleni lokucushwa. Uma uthanda, shintsha inketho "Iphasiwedi yomsebenzisi yemodi yokuhlela kudivayisi"
• Londoloza izinguquko ngokudlulisela idatha kudivayisi (inkinobho "Dlulisa")

Ukulungiselelwa kudivayisi kungashintshwa kuphela ngokufaka iphasiwedi

Iphasiwedi yekhasi eliyisiqalo

• Ikhasi eliyisiqalo nalo lingavikelwa ekufinyeleleni okungagunyaziwe. Izinketho ezilandelayo ziyatholakala:
  • Ungalikhiyi ikhasi eliyisiqalo
    Ikhasi eliyisiqalo liyafinyeleleka ngaphandle kokungena ngemvume; ukulungiselelwa kungenziwa ngaphandle kokungena ngemvume.
  • Khiya ikhasi eliyisiqalo
    Ngemva kokungena ngemvume, ikhasi eliyisiqalo kanye nokucushwa kwe-IP yomsebenzisi kuzovulwa imizuzu emi-3. Ngokufinyelela ngakunye isikhathi sisethelwa kumaminithi angu-3 futhi.
  • Khiya ukucushwa ngokwehlukana
    Ikhasi eliyisiqalo liyafinyeleleka ngaphandle kokungena ngemvume; ukulungiselelwa kungenziwa kuphela ngokungena ngemvume.
  • Khiya ikhasi eliyisiqalo nokucushwa ngokwehlukana
    • Ngemva kokungena ngemvume, ikhasi eliyisiqalo liyavulelwa i-IP yomsebenzisi imizuzu emi-3.
    • Ngokufinyelela ngakunye isikhathi sisethelwa kumaminithi angu-3 futhi.
    • Ukulungiselela kungenziwa kuphela ngokungena ngemvume
      Qaphela: Okuguquguqukayo kuphela okuku-init.jas noma okugunyazwe "Umphathi" kuthathwa njengokucushwa
      Iphasiwedi yekhasi eliyisiqalo kufanele ibe namadijithi angu-8 ubude futhi ibe nezinombolo kuphela.

Umfanekiso: Setha iphasiwedi yekhasi eliyisiqalo

Ngemva kokwenza kusebenze, iwindi lokungena liyavela ngemva kokuvula ikhasi eliyisiqalo ledivayisi.

Umfanekiso: Ukungena ngemvume kwekhasi eliyisiqalo

Ukuphepha kokuxhumana kwe-Modbus TCP/IP

Akwenzeki ukuvikela ukuxhumana kwe-Modbus TCP/IP (port 502). Izinga le-Modbus alihlinzeki nganoma yisiphi isivikelo. Ukubethela okuhlanganisiwe ngeke kusaba ngokwezinga le-Modbus futhi ukusebenzisana namanye amadivayisi ngeke kusaqinisekiswa. Ngalesi sizathu, akukho phasiwedi enganikezwa ngesikhathi sokuxhumana kwe-Modbus.

Uma i-IT icacisa ukuthi amaphrothokholi avikelekile kuphela angasetshenziswa, imbobo ye-Modbus TCP/IP kufanele ivalwe ku-firewall yedivayisi. Iphasiwedi yomlawuli wedivayisi kufanele ishintshwe futhi ukuxhumana kufanele kwenzeke “nge-TCP evikelekile” (FTP) noma “i-HTTP evikelekile”.

Ukuphepha kokuxhumana kwe-Modbus RS485

Ukuvikelwa kokuxhumana kwe-Modbus RS485 akunakwenzeka. Izinga le-Modbus alihlinzeki nganoma yisiphi isivikelo. Ukubethela okuhlanganisiwe ngeke kusaba ngokwezinga le-Modbus futhi ukusebenzisana namanye amadivayisi ngeke kusaqinisekiswa. Lokhu futhi kuthinta ukusebenza okuyinhloko kwe-Modbus. Okungukuthi, akukho ukubethela okungenziwa kusebenze kumadivayisi kusixhumi esibonakalayo se-RS-485.

Uma i-IT icacisa ukuthi amaphrothokholi avikelekile kuphela angasetshenziswa, imbobo ye-Modbus TCP/IP kufanele ivalwe ku-firewall yedivayisi. Iphasiwedi yomlawuli wedivayisi kufanele ishintshwe futhi ukuxhumana kufanele kwenzeke “nge-TCP evikelekile” (FTP) noma “i-HTTP evikelekile”.

Kodwa-ke, amadivayisi kusixhumi esibonakalayo se-RS485 ngeke esafundwa!

Okunye kuleli cala ukuqeda ukusebenza kwe-Modbus master kanye nokusebenzisa kuphela amadivayisi e-Ethernet afana ne-UMG 604/605/508/509/511 noma UMG 512.

"UMG 96RM-E" ukuphepha kokuxhumana

I-UMG 96RM-E ayinikezi iphrothokholi evikelekile. Ukuxhumana nale divayisi kwenziwa nge-Modbus TCP/IP kuphela. Akwenzeki ukuvikela ukuxhumana kwe-Modbus TCP/IP (port 502). Izinga le-Modbus alihlinzeki nganoma yisiphi isivikelo. Okungukuthi uma ukubethela bekuzohlanganiswa, bekungeke kusahambisana nezinga le-Modbus futhi ukusebenzisana namanye amadivayisi bekungeke kusaqinisekiswa. Ngalesi sizathu, akukho phasiwedi enganikezwa ngesikhathi sokuxhumana kwe-Modbus.

Ukusekela

Janitza electronics GmbH Vor dem Polstück 6 | 35633 Lahnau Germany
Ucingo. +49 6441 9642-0 info@janitza.com www.janitza.com

UDokotela. cha. 2.047.014.1.a | 02/2023 | Kungaphansi kwezinguquko zobuchwepheshe.
Inguqulo yamanje yedokhumenti ingatholakala endaweni yokulanda ku www.janitza.com

Amadokhumenti / Izinsiza

I-Janitza Secure TCP noma i-IP Connection ye-UMG 508 [pdf] Imaniwali yosebenzisayo UMG 508, UMG 509-PRO, UMG 511, UMG 512-PRO, UMG 604-PRO, UMG 605-PRO, Secure TCP noma IP Connection ye-UMG 508, Secure TCP noma IP Connection

Izithenjwa

• Imaniwali yosebenzisayo