Belkin F5U104-EU-F Manual de usuario descargar pdf (Pagina 3)

EXCEL WEB CONTROL SYSTEM – NETWORKING WHITE PAPER

- 3 - EN2B0396GE51 R1214

The port of the web server can be changed. This has to be

redone after a firmware download. Therefore the

/usr/local/etc/apache/http.conf file has to be modified: The

line “listen <required port>” has to be added in this file. After

that the controller must be restarted.

FTP Access – Port 21

Excel Web controllers require FTP access for the following

purposes:

• Linux update: Though Excel Web controller come with

Linux pre-installed, Linux updates may become necessary

in order to allow for enhanced functionality or bug-fixes.

This port cannot be changed.

SECURITY NOTE:

Excel Web controllers with firmware 2.02.12 or older did

require FTP access for the following purposes but should not

be used for these purposes anymore because it is unsecure.

Use SSH instead!

For internet facing controllers, FTP must be replaced by SSH

(SFTP), which means that the latest controller firmware must

be installed and the latest CARE version used.

For controllers in closed networks or in VPNs the same

update is recommended.

This port is blocked by default, if the controller is configured

by CARE 10.04 or newer. The access via the USB interface

is still possible.

● Firmware download: This is done by the Honeywell

CARE engineering tool.

● Application up-/and download: This is done by the

Honeywell CARE engineering tool.

NOTE: For the Application download, CARE will make use

of RPC (Remote Procedure Call), and CARE will (try

and) open more ports than port 21. This means that

if CARE engineering is to be allowed from outside

the network, network access has to be given

accordingly. See section "RPC Communication –

Port 111, 5000, 5001, 5002" for details.

● Troubleshooting: Via FTP, is it possible to get

information on installed firmware and to debug all Excel

Web controllers in the same network easily and quickly.

● Graphic generation: *gif and *xml files for plant graphics

are downloaded via FTP.

The linux root user is disabled for FTP access. This port

cannot be changed.

SSH Access – Port 22

NOTE: This port cannot be changed.

Excel Web supports secure shell connections, beginning with

firmware 2.02.17. This allows secure console or FTP

connection (SFTP, this is not to be confused with FTPS,

which works totally differently) for firmware download,

application download and troubleshooting via file upload.

TFTP access – Port 69

Excel Web controllers require TFTP (trivial file transfer

protocol) access for the purpose of Linux update.

Excel Web controllers come with Linux OS pre-installed, but

may require Linux updating in order to enable enhanced

functionality or bug-fixes.

This port cannot be changed.

BACnet Communication – Port 47808

In order to allow for communication with other Excel Web

controllers (peer to peer) or 3

party BACnet controllers

(peer to peer) or with BACnet Clients (so-called “front-ends”

like EBI, SymmetrE or 3

party), port 47808 (BAC0) must be

opened.

Alternatively the BACnet port can be changed to any other

port if required. It is however highly recommended to use the

standard port 47808.

Some sites use “cross port” communication with different

ports. This is not recommended.

Email Alarming / TLS – Port 587

Sending emails is outbound traffic initiated by the Excel Web.

TLS (Transport Layer Security) = Port 587 is the supported

transmission and encryption security.

Due to cyber security vulnerabilities SSL 3.0 has started to

become unsupported by some Email providers and hence is

no more supported by Excel Web.

RPC Communication – Port 111, 5000,

5001, 5002

NOTE: These ports cannot be changed.

If you wish it to be possible to access Excel Web using the

Honeywell CARE engineering tool, four ports must be

opened: 111, 5000, 5001, and 5002.

NOTE: The CARE connection will make use of the RPC

Port Mapper port 111. CARE and Excel Web will

negotiate the ports on which the RPC communi-

cation will take place. These ports are in the range

5000 to 5002. This means that if CARE engineering

is to be allowed from outside the network, network

access has to be given accordingly.

LON sock – Port 3830

If the Honeywell CARE engineering tool access to Excel Web

should be possible, port 3830 must be opened.

NOTE: The CARE connection will make use of the port 3830.

This is proprietary communication in order to commission the

device. This means that if CARE engineering is to be allowed

from outside the network, network access has to be given

accordingly.

1 2 3 4 5 6 7 8

Comentarios a estos manuales

Sin comentarios

Belkin F5U104-EU-F Manual de usuario Pagina 3

Comentarios a estos manuales

Relacionado con productos y manuales para Redes Belkin F5U104-EU-F