background image

  

S&C Instruction Sheet 1072-530

  

21

SpeedNet Security Administration

Figure 33. The Open Security Database window.

The 

SAD

 dialog box will open. See Figure 34.

Figure 34. The SAD dialog box.
STEP 29. 

Enter the network name and pass phrase, and click the 

OK

 button.

NOTICE

The SAD is encrypted with a key derived from the pass phrase. If you forget the pass 
phrase used when you created the SAD, data in the SAD will not be accessible and 
will therefore be lost. There is no back door or other key recovery method. To update 
secured radios without a valid SAD, you will first need to return them to the factory default 
configuration.

Once the SAD file is open, the configuration can be edited by opening the 

Tools

 menu at 

the top of the window. See Figure 35. Select 

Configuration

, or simply click the 

Network 

Configuration

 button located at the bottom of the 

SpeedNet KeyGen Utility

 window.

The SpeedNet KeyGen Utility will open the 

Main 

window shown in Figure 36 on page 22.

Figure 35. The SpeedNet KeyGen Utility—Network Configuration button.

Summary of Contents for SpeedNet

Page 1: ...base 19 Creating Another Security Association Database 20 Opening a Security Association Database 20 Network Configuration 22 Key Updater Tool 29 SpeedNet Client Tool Overview 33 Logging In 33 Main Wi...

Page 2: ...tools for working on or near exposed energized parts of electrical equipment These instructions are intended only for such qualified persons They are not intended to be a substitute for adequate train...

Page 3: ...nstitute ANSI in 4 1 of IEEE Standard for Safety Levels with Respect to Human Exposure to Radio Frequency Electromagnetic Fields 3 kHz to 30 GHz ANSI IEEE C95 1 1992 The SpeedNet Radio complies with t...

Page 4: ...to S C SpeedNet Radios Warranty Qualifications Warranty of the SpeedNet Radio is contingent upon the installation configuration and use of the SpeedNet Radio and software in accordance with S C s app...

Page 5: ...identifies important procedures or requirements that can result in product or property damage if instructions are not followed Following Safety Instructions If you do not understand any portion of thi...

Page 6: ...S Always follow safe operating procedures and rules 3 PERSONAL PROTECTIVE EQUIPMENT Always use suitable protective equipment such as rubber gloves rubber mats hard hats safety glasses and flash clothi...

Page 7: ...ion of the Ad hoc On demand Distance Vector AODV routing protocol AODV is a routing protocol for mobile ad hoc networks and other wireless ad hoc networks SpeedNet Radios use a proprietary AODV routin...

Page 8: ...e 1 is assigned an address of 192 168 202 1 The wireless interface of the SpeedNet Radio from the repeater node is assigned an address of 192 168 202 2 The wireless interface of the SpeedNet Radio fro...

Page 9: ...n Utility also allows generation of a common configuration file to load into multiple radios easing configuration overhead Creating a Security Association Database Use the following procedure to creat...

Page 10: ...atabase file as a sad file See Figure 5 The User Management window will open See Figure 6 Figure 5 The Security Association Database save dialog box User Management Window Figure 6 The KeyGen User Man...

Page 11: ...h Valid case sensitive characters are a z A Z and 0 9 Use the Tab key on your keyboard to proceed to the next field STEP 11 Retypethepasswordtoconfirmthepreviouslyenteredpassword Clicktocheckthe Admin...

Page 12: ...0 The User Management dialog box STEP 13 Click the Yes button to delete the selected user from the user list Modifying a User STEP 14 To modify a user name and or password first select the user from t...

Page 13: ...a MAC Address to the Revocation List The Mac Revocation Management window is used to update the revocation list for the Media Access Control MAC address filter See Figure 14 The MAC address is factor...

Page 14: ...ton SeeFigure15 Figure 15 The MAC Revocation Management window The Mac Management dialog box will be displayed See Figure 16 Figure 16 The Mac Management dialog box Click the Yes button to delete the...

Page 15: ...r input the user does not provide seeds or other data The Key Generation window is used to update keysets For a network or security configuration to be applied to the radio the configuration file must...

Page 16: ...eyset list Deleting a Keyset To delete a keyset open the Key Generation tab and highlight the keyset Then click the Delete button See Figure 21 Figure 21 The Key Generation window The confirmation dia...

Page 17: ...orted over UDP IP so logins will not work over wireless links in the case of mismatched keysets on radios with encryption enabled Generating a Security File Follow this process to generate a security...

Page 18: ...he dialog box The maximum number of keyset tags allowed is 63 If you attempt to add another keyset after 63 keyset tags have been entered the dialog box shown in Figure 27 will be displayed requesting...

Page 19: ...25 Open the File menu in the upper left corner of the SpeedNet KeyGen Utility window Scroll down and select Save See Figure 29 Figure 29 The SpeedNet KeyGen Utility window save SAD STEP 26 The Save S...

Page 20: ...electing a new SAD The new SAD window will open with all entries cleared Opening a Security Association Database Follow this process to open an SAD file STEP 27 Open the File menu in the upper left co...

Page 21: ...accessible and will therefore be lost There is no back door or other key recovery method To update secured radios without a valid SAD you will first need to return them to the factory default configur...

Page 22: ...37 will open and list all currently installed keysets Select the keyset that was used to encrypt the file Click the Continue button The data from the file will be displayed in the configuration dialog...

Page 23: ...the network configuration are saved in a file that can be uploaded and applied to the corresponding radio by using the client tool s Set Network Configuration function described in the Security Window...

Page 24: ...ireless interfaces of the radios should be on the same subnet but should use different individual addresses on that subnet Figure 41 Network Configuration of Serial Port s PPP Mode Settings Four seria...

Page 25: ...to a radio is deferred until uploaded using the SpeedNet Client tool Figure 43 Network Configuration of Serial Port s Repeater SpeedGate Mode Settings Figure 43 shows the Repeater SpeedGate Mode sett...

Page 26: ...ly button on this window because application to a radio is deferred until uploaded using the SpeedNet Client tool Figure 45 Network Configuration of Serial Port s Settings Figure 45 shows the Serial P...

Page 27: ...section on page 44 There is no Apply button on this window since application to a radio is deferred until uploaded using the SpeedNet Client tool Figure 47 Network Configuration of the AODV Gateway Fu...

Page 28: ...nd to those in the SpeedNet Client Tool described in the IP Routing Window Routes Tab section on page 48 Figure 49 Network Configuration of Address Resolution Protocol Figure 49 shows the network conf...

Page 29: ...53 Key Updater Tool The Key Updater tool is a PC based utility that provides ease of use in updating encryption keys remotely for a group of radios The Key Updater tool reads a text file containing r...

Page 30: ...e Figure 52 Figure 52 SAD dialog box STEP 32 Create a text file with the wireless address list of radios whose security file we want to change STEP 33 Select the Keyset and click on the Update Keys ta...

Page 31: ...the Load IP List button then choose text file Click the OK button STEP 36 Choose a timeout value it s the amount of time the Key Updater application waits for the process to complete for a single radi...

Page 32: ...Click Update button Choose LAN interface of Head End Radio See Figure 58 Fig 58 Key Updater IP address listing window STEP 40 A checkmark next to the IP address indicates the radio is successfully up...

Page 33: ...radio mesh has been configured you can also log in using the wireless IP address When logging in to a SpeedNet Radio for the first time after a factory reset the user name will be initial and the fact...

Page 34: ...ccess level See Figure 60 on page 33 SNMP Timeout The SNMP protocol automatically resends control data after a period of time The SNMP Timeout control is used to adjust the timeout value In the case o...

Page 35: ...t poll the radio to update displayed information between user transactions Thus the radio can have several client tools from different PCs logged in at the same time Also the radio can undergo changes...

Page 36: ...Interfaces window provides tabs that can be used to configure each interface of the SpeedNet Radio The tab will provide a list of configurable options for the selected interface The Ethernet tab show...

Page 37: ...second and third sets of digits replaced with FF IP Address Specifies the IP address of the wireless interface of the SpeedNet Radio The default IP address is 192 168 202 1 This address must be uniqu...

Page 38: ...ber of dB above the average signal in a particular frequency channel that will cause Analog Interference Detection to start functioning to skip that channel in the hopping sequence The default value i...

Page 39: ...DNP data between the SpeedNet Radio serial port and other Ethernet devices Repeater SpeedGate The Repeater SpeedGate mode is used for SpeedNet Radios that operate as fixed repeaters within a network S...

Page 40: ...ating a DNP table entry this value is the IP Address SCADA Address When creating a DNP table entry this value is the SCADA address The valid range of SCADA addresses is 0 65536 Add After entering an I...

Page 41: ...condary SCADA master enter 192 168 200 30 into the IP Address field Enter 25 into the SCADA address field Repeater SpeedGate Serial Mode Figure 68 Repeater SpeedGate settings The SpeedNet Repeater Spe...

Page 42: ...rial port The following parameters can be configured Baud Rate Determines the bit rate used for serial communications the default value is 9600 Data Bits Determines the number of data bits within each...

Page 43: ...er them The default value is 80 milliseconds Input Timeout The value that defines the amount of time in milliseconds the serial interface will wait before sending a packet after data is received the d...

Page 44: ...DV to use the feature Selecting AODV is recommended for ease of configuration robustness to radios going down and ease of adding radios to the mesh The remaining configuration options on the Ad Hoc Ro...

Page 45: ...of a secondary route may not succeed in the case of a link failure along the primary route If the Net Diameter is set too high route requests may propagate needlessly to too many radios generating exc...

Page 46: ...edNet normally attempts to find the path between nodes that has the fewest number of hops However sometimes the shortest path is not always the optimal one because of conditions such as RF interferenc...

Page 47: ...Ethernet subnets of all SpeedNet Radios that have a need to use a default gateway to reach devices that are not in the wireless network This list of networks determines which route requests the AODV...

Page 48: ...ibed below Delete to delete a route from the route table first select the route Click the Delete button to remove the route from the route table Adding Static Routes Clicking the Add Route button will...

Page 49: ...mprove reliability between the nodes configured with the Persistent Routes feature It is important to note that entries for persistent routes only need to be configured in each end point radio No inte...

Page 50: ...r Blacklist feature shown in Figure 77 allows the SpeedNet Client Tool to add delete and retrieve a blacklisted radio by using its IP address A SpeedNet Radio address listed in the Neighbor Blacklist...

Page 51: ...iguration or with a keyset loaded into that radio You will be prompted to log in to the SpeedNet Client Tool after the network configuration has been applied Note that after a radio is reset to the fa...

Page 52: ...nd work your way back to the closest radios Enable Encryption Placing a checkmark in the Enable Encryption checkbox enables wireless network encryption on the SpeedNet Radio Reset Configuration This f...

Page 53: ...peedNet Radio was rebooted SpeedNet Radio ID Administrators can use this field to assign a descriptive name to the SpeedNet Radio The SpeedNet Radio ID must consist of ASCII values but cannot contain...

Page 54: ...edNet Radio will prompt for reboot at the conclusion of the upgrade Power should not be cycled while a radio is upgrading firmware You will need to log in to the radio again once the post upgrade rebo...

Page 55: ...Prints the AODV neighbor list users can copy and paste the result into another tool e g Windows Notepad to create a record of radio neighbors that can greatly aid in determining the connectivity in th...

Page 56: ...he total number of receive errors Received frames dropped The total number of frames received by the SpeedNet Radio s Ethernet interface that were discarded Unknown protocol received The total number...

Page 57: ...n the packet transmission rate Redirect messages sent The total number of redirect messages sent a redirect is sent when an alternate route for the datagram is selected Echo request messages sent The...

Page 58: ...n ports Datagrams discarded due to format error The total number of UDP datagrams that were not delivered because of format errors Datagrams sent The total number of UDP datagrams sent Statistics Wind...

Page 59: ...atagrams discarded due to no route The total number of data packets discarded because of the lack of correct routing information Timeout value for reassembly queue The duration before the reassembly q...

Page 60: ...contained checksum errors involving length Packets received with bad CRC The total number of packets received by the SpeedNet Radio wireless interface that contained checksum errors Bytes transmitted...

Page 61: ...r List provides a list of SpeedNet Radios that are communicating wire lessly with the local SpeedNet Radio The Neighbor List is updated each time a Hello message is received from another SpeedNet Radi...

Page 62: ...lists SpeedNet Radios based on their unique MAC address Unlike the AODV Neighbor List the RSSI tab doesnotrequireanexchangeofHellobeacons The column headings for Signal Strength are described below M...

Reviews: