IMON-U300/310 Manual 3G Fault Monitor
Copyright © August 2017 INSYS MICROELECTRONICS GmbH Any duplication of this manual is prohibited. All rights on this documentation and the devices are with INSYS MICROELECTRONICS GmbH Regensburg. Trademarks The use of a trademark not shown below is not an indication that it is freely available for use. MNP is a registered trademark of Microcom Inc. IBM PC, AT, XT are registered trademarks of International Business Machine Corporation.
Content 1 2 3 Preface .................................................................................................. 8 1.1 Defects Liability Terms ........................................................................................ 8 1.2 Feedback ............................................................................................................ 8 1.3 Marking of Warnings and Notes .......................................................................... 9 1.
Contents 10 Assembly ............................................................................................. 34 11 Commissioning .................................................................................... 37 12 Operating Principle .............................................................................. 40 12.1 Operating the Web Interface ............................................................................. 40 12.2 Access via HTTPS Protocol..................................
Content 13.8 Messages .......................................................................................................... 89 13.8.1 13.8.2 13.8.3 13.8.4 13.8.5 Configuring the Message Dispatch ........................................................ 89 Enabling SMS Receipt ............................................................................ 90 Configuring E-Mail Dispatch .................................................................. 92 Configuring SMS Dispatch ...........................
Contents 22 Tables and Diagrams .......................................................................... 136 22.1 List of Tables ................................................................................................... 136 22.2 List of Diagrams .............................................................................................. 136 23 Aug-17 Index..................................................................................................
Preface 1 IMON-U300/310 Preface This manual allows for the safe and efficient use of the product. The manual is part of the product and must always be stored accessible for installation, commissioning and operating personnel. 1.1 Defects Liability Terms A usage not according to the intended purpose, an ignorance of this documentation, the use of insufficiently qualified personnel as well as unauthorised modifications exclude the liability of the manufacturer for damages resulting from this.
IMON-U300/310 1.3 Preface Marking of Warnings and Notes Symbols and Key Words Danger! Risk of severe or fatal injury One of these symbols in conjunction with the key word Danger indicates an imminent danger. It will cause death or severe injuries if not avoided. Warning! Personal injury This symbol in conjunction with the key word Warning indicates a possibly hazardous situation. It might cause death or severe injuries if not avoided.
Preface IMON-U300/310 1.4 Symbols and the Formatting in this Manual This section describes the definition, formatting and symbols used in this manual. The various symbols are meant to help you read and find the information relevant to you. The following text is structured like a typical operating instruction of this manual.
IMON-U300/310 2 Safety Safety The Safety section provides an overview about the safety instructions, which must be observed for the operation of the product. The product is constructed according to the currently valid state-of-the-art technology and reliable in operation. It has been checked and left the factory in flawless condition concerning safety. In order to maintain this condition during the service life, the instructions of the valid publications and certificates must be observed and followed.
Safety 2.2 IMON-U300/310 Permissible Technical Limits The product is only intended for the use within the permissible technical limits specified in the data sheets. The following permissible limits must be observed: The ambient temperature limits must not be fallen below or exceeded. The supply voltage range must not be fallen below or exceeded. The maximum humidity must not be exceeded and condensate formation must be prevented.
IMON-U300/310 2.6 Safety Markings on the Product The identification plate of the product is either a print or a label on a face of the product. Amongst other things, it can contain the following markings, which are explained in detail here. Observe manual This symbol indicates that the manual of the product contains essential safety instructions that must be followed implicitly.
Safety 2.8 IMON-U300/310 Safety Instructions for Electrical Installation The electrical connection must only be made by authorised expert personnel according to the wiring diagrams. The notes to the electrical connection in the manual must be observed. Otherwise, the protection category might be affected. The safe disconnection of circuits, which are hazardous when touched, is only ensured if the connected devices meet the requirements of VDE T.101 (Basic requirements for safe disconnection).
IMON-U300/310 Safety Caution! Overvoltage and voltage peaks from the mains supply! Fire hazard and damage of the product due to overvoltage. Install suitable overvoltage protection. Caution! Damage due to chemicals! Ketones and chlorinated hydrocarbons dissolve the plastic housing and damage the surface of the device. Never let the device come into contact with ketones (e.g. acetone) or chlorinated hydrocarbons, such as dichloromethane.
Using Open Source Software 3 Using Open Source Software 3.1 General Information IMON-U300/310 Our product IMON-U300 contains, amongst others, so-called open-source software that is provided by third parties and has been published for free public use. The open-source software is subject to special open-source software licenses and the copyright of third parties. Basically, each customer can use the open-source software freely in compliance with the licensing terms of the respective producers.
IMON-U300/310 3.2 Using Open Source Software Special Liability Regulations We do not assume any warranty or liability, if the open-source software programs contained in our product are used by the customer in a manner that does not comply any more with the purpose of the contract, which is the basis of the acquisition of our product. This concerns in particular any use of the open-source software programs outside of our product.
Device Variants 4 IMON-U300/310 Device Variants This manual describes different versions of the IMON-U300 that differ regarding the supported cellular frequencies. The router will feature increased RAM memory from version 1.1, which is of advantage for complex sandbox applications in particular. These devices are referred to as IMON-U300 in the manual. The devices are: IMON-U300 1.1 (EU version for the European and ROW (rest of world) markets) IMON-U310 1.
IMON-U300/310 5 Scope of Delivery Scope of Delivery The scope of delivery includes all accessories listed below. Please check if all accessories are included in the box. If a part is missing or damaged, please contact your distributor. 1 IMON-U300 1 Quick Installation Guide 1 Monitoring App 1 Monitoring package Siemens LOGO!™ 1 Monitoring package Modbus TCP/RTU The scope of delivery does not include optional accessories.
Technical Data IMON-U300/310 6 Technical Data 6.1 Physical Features All specified data was measured with nominal input voltage, at full load, and an ambient temperature of 25 ℃. The limit value tolerances are subject to the usual variations. Physical Feature Value Operating voltage 12 … 24 V DC (±20%) Power consumption idle (logged in) approx. 1 W Power consumption connection max.
IMON-U300/310 6.2 Technical Data Supply voltage, input voltage and switching voltage have to be considered as SELV and LPS. Technological Features Technological Feature Description Ethernet interface 10/100 Mbit/s full duplex auto sense; automatic detection of "crossover" or "patch" wiring. RS232 interface Max. baud rate 115,200 bit/s; hardware handshake RTS/CTS; software handshake XON/XOFF; various data formats RS485 interface Max. baud rate 115,200 bit/s; 3.
Display and Control Elements 7 Display and Control Elements Figure 1: Display and control elements on the front of the device Position 1 2 3 4 5 6 7 8 9 Designation Reset key Status LED for input 1 Status LED for input 2 Status LED for output 1 Status LED for output 2 Status LED Power LED Signal LED LAN 10/100 LED 10 11 12 LAN Link LED COM LED SIM card slot Table 3: Description of the display and control elements on the front panel of the device 22 IMON-U300/310
IMON-U300/310 7.
Display and Control Elements 7.2 IMON-U300/310 Function of the Control Elements Designation Reset key Operation Press once for a short time. Meaning Resets the software and restarts it. (Soft reset) Press at least 3 seconds. Resets the hardware and restarts it. (Hard reset) SIM card slot Press three times for a short time within 2 seconds. Deletes all settings and resets the device to the factory defaults. Press on SIM card for a short time Ejects the SIM card.
IMON-U300/310 Connections 8 Connections 8.1 Connections on the Top Figure 2: Connections on the top of the device Position 1 2 3 4 Designation Ethernet port (RJ45, 10/100 BT) Serial interface Serial 2 (RS485 or optional RS232 half-duplex RX/TX) Serial interface Serial 1 (RS232 connection V.24/V.
Connections 8.2 IMON-U300/310 Terminal Connections on the Bottom Figure 3: Connections on the bottom of the device Designation Description 12..
IMON-U300/310 8.3 Connections Pin Assignment of the Serial Interface Serial 1 Figure 4: 9-pin D-Sub connection at the device Pin Signal Description I/O 1 DCD Data Carrier Detect Out 2 RXD Receive Data Out 3 TXD Transmit Data In 4 DTR Data Terminal Ready In 5 GND Ground 6 DSR Data Set Ready Out 7 RTS Request To Send In 8 CTS Clear To Send Out 9 RI Ring Indication Out Table 9: Description of the pin allocation of the serial interface Serial 1 8.
Connections 8.5 IMON-U300/310 Connection of a SIEMENS LOGO!™ micro controller 8.5.1 Serial connection A Siemens LOGO!™ micro controller (up to version 0BA6) can only be connected to serial interface Serial 1. The LOGO! PC cable (configuration cable), which is delivered with the control and available from Siemens and the aftermarket, and a null modem cable with two male 9-pin D-Sub connectors is necessary for this. This null modem cable is available from INSYS icom.
IMON-U300/310 9 Function Overview Function Overview The IMON-U300 provides you with the following functions: Monitoring inputs Two digital inputs that can be monitored for the change of their state. Monitoring of Modbus devices Monitoring objects of connected Modbus devices, like bits, registers and communication status. Monitoring a Siemens LOGO!™ micro controller Monitoring of objects of a Siemens LOGO!™ micro controller, like inputs and outputs, flags and keys.
Function Overview IMON-U300/310 IPv6 routing Additionally to the IPv4 addresses, the interfaces have also addresses according to the IPv6 protocol. The router configures one or several IPv6 addresses for itself using SLAAC (StateLess Address Auto Configuration). If a router with router advertisement advertises IPv6 address prefixes in the LAN, the router configures itself another IPv6 address with the advertised prefix in addition to the already configured IPv6 addresses.
IMON-U300/310 Function Overview Periodic PPP connection set-up It is possible to establish and close a PPP connection time-controlled. Fixed times can be set for the connection setup and termination. OpenVPN The router can be used as OpenVPN server or client. This enables machines to establish a safe connection to the LAN behind the router from the outside via an unsafe network.
Function Overview IMON-U300/310 Firewall (stateful firewall) The firewall enables the limitation of incoming and outgoing IP connections. A flexible rule may be created for each connection and stored user. If one of these firewall rules applies to a connection through the router, this connection will be allowed, otherwise the connection is inhibited. The "Stateful Firewall" will allow connections also for protocols with special requirements, e.g. FTP.
IMON-U300/310 Function Overview Log files Different log files can be downloaded as text file via the web interface. Downloadable configuration files The configuration can be downloaded as binary or ASCII file. The file can be used as backup copy for configurationafter a reset to factory defaults, or for convenient loading of the same configuration into a different router. The ASCII configuration file can be edited and offers a comfortable option for an alternative configuration.
Assembly 10 IMON-U300/310 Assembly This section describes how to mount the IMON-U300 to a DIN rail, connect the power supply and uninstall it again. Observe the instructions in the "Safety" section of this manual, in particular the "Safety Instructions for Electrical Installation" for that purpose unconditionally. Caution! Moisture and liquids from the environment may seep into the interior of the device! Fire hazard and damage of the product.
IMON-U300/310 Assembly Mounting the device to the DIN rail How to mount the IMON-U300 to a DIN rail: 1. Position the device at the DIN rail such that the upper snap-in hooks engage behind the upper edge of the DIN rail. 2. Fold down the IMON-U300 perpendicular to the DIN rail until the lower, flexible snap-in hook engages in the DIN rail. The IMON-U300 is now readily mounted. Connecting the power supply The device has already been mounted to the DIN rail.
Assembly IMON-U300/310 Removing the device from the DIN rail How to uninstall the IMON-U300 from a DIN rail in a switch cabinet: You will need a small flat-blade screwdriver. The power supply of the switch cabinet is switched off and secured against being switched on accidentally. All connectors at the IMON-U300 are disconnected. 1. Insert the flat-blade screwdriver into the black lug at the bottom. 2. Move the flat-blade screwdriver up to move the lug down. 3.
IMON-U300/310 11 Commissioning Commissioning This chapter describes how to activate the IMON-U300, i.e. how to connect it to a PC, and how to prepare it for the configuration. Inserting SIM card. How to insert the SIM card. The power supply is disabled. You will need a functionable Mini-SIM card of your mobile provider. You will also need the associated PIN. 1.
Commissioning IMON-U300/310 Connecting a cellular antenna and a PC How to connect the IMON-U300 to a GSM antenna and, via a network cable, to a PC. The power supply is disabled. You will need a Cat 5 network patch cable You will need a network card in the PC. You will need a suitable cellular antenna (available from INSYS icom).
IMON-U300/310 Commissioning Configuring the IMON-U300 The device is connected to the PC. The power supply of the device is enabled. You have the required access rights to change the IP address of the network card to which the IMON-U300 is connected. 1. 2. Change the IP address of the network card to which the device is connected to an address that starts with 192.168.1. As an alternative, you may also configure your network card to "Automatic address allocation".
Operating Principle 12 IMON-U300/310 Operating Principle This chapter describes how to operate and configure the IMON-U300. Configuration and operation are performed using a web-based interface (web interface). The web interface itself is displayed and operated using a web browser. 12.1 Operating the Web Interface The web interface allows easy configuration using a web browser. All functions can be configured via the web interface. The operation is mostly selfexplanatory.
IMON-U300/310 12.2 Operating Principle Access via HTTPS Protocol The web interface also allows a secure configuration using the HTTPS protocol. The HTTPS protocol allows an authentication of the server (i.t. the IMON-U300) as well as an encryption of the data transmission. in case of a first access via the HTTPS protocol, the browser indicates that the IMON-U300 uses an invalid security certificate. The certificate is not trusted, because the CA (certification authority) certificate is unknown.
Functions IMON-U300/310 13 Functions 13.1 Monitoring The Monitoring App of the IMON-U300 is displayed in a separate browser window upon selecting the menu item "Monitoring". It is a software application that runs on the device and is configured independently from the device. It must be kept in mind that the functionality of the monitoring application can be affected by settings at the device (e.g. interface reservations for the sandbox).
IMON-U300/310 13.2 Functions Basic Settings 13.2.1 Configuring Web Interface Access The web interface is used to configure the IMON-U300. It will be protected against unauthorised access by requesting user name and password (alternatively also via a Radius server). The web interface can be configured for a configuration from a computer in the internal network or for remote configuration from the WAN via the HTTP or HTTPS protocol. A location can be entered for a better differentiation.
Functions IMON-U300/310 13.2.2 Setting IP Addresses It must be possible to access the IMON-U300 in the LAN under a certain IP address. You must assign a static IP address for this. You can enter an IPv4 and an IPv6 address here. The router can configure one or several IPv6 addresses for itself using SLAAC (StateLess Address AutoConfiguration).
IMON-U300/310 13.2.3 Functions Entering a Static Route You can define static routes for forwarding data packets in the IMON-U300, which are loaded during system start. Configuration via web interface (menu "Basic Settings", page "Routing") In order to enter a static route, enter in the section "Add new route" the Net address, the netmask as well as the Gateway into the respective fields for IPv4 or IPv6.
Functions IMON-U300/310 13.2.5 Configuring MAC Filter A MAC filter can be enabled in the IMON-U300. This will then only accept packets at the local Ethernet interface that come from network devices that are explicitly permitted in the filter. This is only effective for connections that are initiated by the device in the local LAN, not for connections that are initiated from the WAN side.
IMON-U300/310 13.2.6 Functions Configuring Access Protection via Radius Server The access to the web interface or command line interface (CLI) can be protected against unauthorised access using an optional Radius server in the network. The access data for the Radius server must be configured in the IMON-U300 for this. Configuration via web interface (menu "Basic Settings", page "Radius") In order to configure access protection via a Radius server, enter its address and port into the respective fields.
Functions IMON-U300/310 13.2.7 Configuring Command Line Interface CLI Access Besides the configuration via the web-interface or configuration file, a IMON-U300 can also be configured via a CLI (Command Line Interface). It will be protected against unauthorised access by requesting user name and password (alternatively also via a Radius server). Access to the CLI can either be accomplished from the local network or remote via Telnet or SSH (encrypted).
IMON-U300/310 13.3 Functions UMTS 13.3.1 Entering the PIN of the SIM Card The PIN of the inserted SIM card (if the SIM card is protected by a PIN) is required for a login to the mobile network and establish CSD or IP connections. Note! Possible locking of the SIM card! If a wrong PIN is entered, the SIM card may be locked, resulting in not being able to log into the mobile network. When entering or changing the PIN, make sure that you enter the correct PIN for the SIM card.
Functions 13.3.2 IMON-U300/310 Configure Network Selection You can determine, into which mobile network the IMON-U300 should log into. Your SIM card must support roaming for this. The device can then connect to the strongest available network at the location, with a certain preferred network (which may not necessarily be the strongest available network), or exclusively with the network of a certain provider.
IMON-U300/310 13.3.3 Functions Configure Daily Login and Logout The IMON-U300 can log out of the mobile network and in again daily at a specified time. This enables you to limit the connection to certain times. Using periodic logout and login, you will increase the availability, which may otherwise be impaired by several circumstances, which require a re-login into the network, e.g. maintenance work at the mobile network. We recommend to use this function.
Functions 13.4 13.4.1 IMON-U300/310 Dial-In Configuring Dial-In You can use the IMON-U300 as dial-in server or incoming PPP server. The dial-in function enables the user to to connect with the network behind the device remotely via modem using the phone number of the SIM card in the device (the SIM card needs to support CSD (Circuit Switched Data) for this). Similar to the dialin with an Internet provider, users will authenticate themselves via user name and password.
IMON-U300/310 13.4.2 Functions Automatic callback You can trigger an automatic callback to a predefined destination phone number of the IMON-U300 with a data call or a phone call. You can configure authorized callers for these numbers. The callers can identify themselves via the PPP authentication methods PAP or CHAP, or via their CLIP phone number. The connection, which will then be established by the router, must be configured before in the menu "Dial-Out".
Functions IMON-U300/310 13.4.3 Routing You can define IMON-U300 routes for forwarding data packets. You can still configure NAT (Network Address Translation) for incoming and outgoing packets separately. The router will replace the sender IP address of the incoming IP packet with its own local IP address for incoming IP connections. Due to the "stateful firewall" it is possible that changes to these functions will not become effective immediately.
IMON-U300/310 13.4.4 Functions Creating or Deleting a Firewall Rule A firewall is available for dial-in connections. It is used to prevent unauthorized data traffic. The logic of the firewall states that any data traffic is forbidden, which is not explicitly permitted through a rule. Define here, which connections will be permitted by the router. If you enable the firewall for the connection type "Dial-In", only connections will be possible which are authorised by the firewall rules.
Functions 13.5 13.5.1 IMON-U300/310 Dial-Out Configuring Dial-Out You can use the IMON-U300 for dial-out. A PPP connection to a remote terminal will automatically be established, when the network traffic occurs in the direction of the network of the terminal. The network traffic which may trigger a connection setup can be limited by rules. This optional "Dialing filter" will ensure that only packets from/to certain IP addresses or from/to certain ports trigger the dial-out connection.
IMON-U300/310 Functions In order to adjust the MTU (maximum permissible number of bytes in a packet to be transmitted), change the entry in the entry respective field. In order to adjust the MRU (maximum permissible number of bytes in a packet to be received), change the entry in the respective field. The default settings of MTU and MRU are suitable for most applications and do not need to be modified usually.
Functions 13.5.3 IMON-U300/310 Configuring a Periodical Dial-Out Connection Setup The IMON-U300 can establish and terminate the previously configured dial-out connection time-controlled. The dial-out connection is established and terminated daily at a certain time. This function will trigger individual events; no blocking time or similar is defined.
IMON-U300/310 13.5.4 Functions Routing You can define IMON-U300 routes for forwarding data packets. You can still configure NAT for incoming and outgoing packets separately. Due to the "stateful firewall" it is possible that changes to these functions will not become effective immediately. This may happen if connections or connection attempts have already been made.
Functions 13.5.5 IMON-U300/310 Setting up a Dialling Filter To avoid unnecessary costs due to undesired dial-out processes, a dialling filter may be activated optionally. This dialling filter can restrict the network traffic which could trigger a dial-out process. After a dial-out connection is established, however, all participants in the network may access the dial-out connection and transmit IP data.
IMON-U300/310 13.5.6 Functions Creating or Deleting a Firewall Rule A firewall is available for dial-out connections. It is used to prevent unauthorized data traffic. The logic of the firewall states that any data traffic is forbidden, which is not explicitly permitted through a rule. Define here, which connections will be permitted by the router. If you enable the firewall for the connection type "Dial-Out", only connections will be possible which are authorised by the firewall rules.
Functions IMON-U300/310 13.5.7 Creating or Deleting a Port Forwarding Rule If port forwarding is enabled, the router forwards packets coming in from the WAN to the machines in the LAN, which have been specified in the port forwarding rules. Only the WAN IP address of the IMON-U300 is accessible from the WAN, if NAT is enabled for packets going into the WAN. The local terminal devices in the network of the device can still be accessed with this IP address using port forwarding.
IMON-U300/310 13.5.8 Functions Defining the Exposed Host All packets which do not comply with any port forwarding rule, can be forwarded to a predefined computer in the LAN, also called "Exposed Host" (for example, for diagnostic purposes) optionally. The exposed host contains all packets which have not been requested by the local network of the IMON-U300 or which have not been forwarded to a participant in the local network by a port forwarding rule.
Functions 13.6 13.6.1 IMON-U300/310 VPN VPN General A VPN (virtual private network) is used to connect IP end devices or entire networks with each other, in a safe way. The data is transmitted tamper-proof to a destination and cannot be read by third parties. You can configure the IMON-U300 for an OpenVPN, PPTP IPsec or GRE connection. The exact proceeding for creating a certificate structure and configuring a VPN participant is described in a series of configuration guides.
IMON-U300/310 Functions In the sample configuration, the end points of the OpenVPN connection will have the IP addresses 10.1.0.1 and 10.1.0.2. The VPN tunnel will be established within an already existing WAN connection. The OpenVPN clients and servers must also know which network is located behind the according tunnel ends. In the sample configuration, this is the network 192.168.200.0/24 on one side. On the other side, this is the network 192.168.1.0/24.
Functions 13.6.3 IMON-U300/310 Setting Up an OpenVPN Server You can use the IMON-U300 as OpenVPN server, if you want to send confidential data via an unsecured network, for example. This section describes the set-up of an OpenVPN server. The basic settings are reasonable factory defaults, which you may change in certain circumstances. Here, you define which port of the IMONU300 is used to create the OpenVPN tunnel and if the OpenVPN transmission is performed with the UDP or the TCP protocol.
IMON-U300/310 Functions In order to enable remote OpenVPN terminals to change its IP during a connection ("Floating"), check the checkbox "Remote terminal is allowed to change its IP address (float)". This setting is activated by default. In order to enable or disable LZO compression, check or uncheck the checkbox "Activate LZO compression". If already strongly compressed data (e.g. jpg) is transmitted, the compression will have hardly any effect; however, if compressible data (e.g.
Functions IMON-U300/310 In order to adjust the ping restart interval, use the entry field "Ping restart interval". The ping restart interval configures the time in seconds after which the tunnel is to be established again, if no ping from the remote terminal has arrived during the complete time. The value "0" prevents the tunnel to be terminated, even if no ping is received any more. The ping interval and the ping restart interval must be adjusted to each other. Typical values are 30 and 60 (default).
IMON-U300/310 Functions In order to configure the authentication with static key, select the radio button "No authentication or authentication with preshared key". It is indicated under the option here, whether the static key is present (green checkmark) or not (red cross). A present key can also be downloaded (blue arrow) or deleted again (red cross on white box). If no key exists, the remote terminal will neither be authenticated nor the data traffic through the OpenVPN tunnel will be encrypted.
Functions 13.6.4 IMON-U300/310 Setting Up an OpenVPN Client You can use the IMON-U300 as OpenVPN client, if you want to connect to an OpenVPN server via an unsecured network. This section describes the set-up of an OpenVPN client. The basic settings are reasonable factory defaults, which you need to adjust to the VPN which will be connected to the IMON-U300.
IMON-U300/310 Functions If the remote terminal can only be accessed via a proxy server, enter its IP address or domain name into the "IP address or domain name of proxy server" field, select its type using the "HTTP" or "SOCKS5" radio buttons and enter its port into the "Port" field. If the proxy server requires an authentication, enter the access data into the "User name" and "Password" fields. In order to set a default route, check the checkbox "Set default route (redirect-gateway)".
Functions IMON-U300/310 In order to define a certain fragmenting size for the OpenVPN tunnel packets in bytes, use the entry field "Fragment packets". Enter the required maximum packet size in bytes here. If you don't enter a value, the OpenVPN packets will have a maximum size of 1.500 bytes. The actually transmitted amount of user data is lower, because OpenVPN creates a "protocol overhead", which means that the protocol information that is transmitted as well is a part of the packet size.
IMON-U300/310 Functions If tls-auth is used, it is possible to specify that the static key can only be used for a certain direction. It is important here that this setting is harmonised with the remote VPN terminal, i.e. no direction is configured for bot or the settings are complementary (0/1 or 1/0). In order to configure the authentication with static key, select the radio button "No authentication or authentication with preshared key".
Functions IMON-U300/310 13.6.5 PPTP General PPTP (Point-to-Point Tunnelling Protocol) is a VPN (virtual private network) that is not recommended for new installations. A recent alternative is OpenVPN. PPTP establishes a WWAN connection via a tunnel set-up with the GRE protocol. To establish the tunnel, it is essential that the GRE (Generic Routing Encapsulation) protocol is routed without restrictions between the two PPTP participants and a TCP connection with port 1723 is possible.
IMON-U300/310 Functions Enter the IP address of the local tunnel end into the field "IPv4 tunnel address local". If no explicit address is specified, the PPTP server will use the IP address 192.168.0.1. If this address is already reserved, another address can be specified here. Define the available IP address pool for the tunnel ends of the PPTP clients in the fields “IP address pool”. This pool must be in the network of the LAN.
Functions IMON-U300/310 If no default route to the tunnel is set, the local subnet behind the tunnel must be defined. Enter this network with respective netmask into the field "Remote subnet". Only that way, packets into the network behind the PPTP tunnel will be routed through the tunnel. In order to adjust the MTU (maximum permissible number of bytes in a packet to be transmitted), change the entry in the entry respective field.
IMON-U300/310 13.6.8 Functions Setting Up IPsec IPsec (Internet Protocol Security) is a security protocol for the safe communication via IP networks and can be used to set-up virtual private networks (VPN). Two subnets can be connected together using two suitable routers (e.g. INSYS MoRoS 2.1) via a secure tunnel. It is possible to configure up to 10 different tunnels. A tunnel can also be used as fall back tunnel for another active tunnel.
Functions IMON-U300/310 In order to assign a descriptive name to the loaded tunnel, enter it into the field "Tunnel name". This makes the assignment of messages in the log or status view easier. In order to specify the remote terminal, to which the tunnel is to be established, enter the IP address or the domain name of the remote terminal into the field "IP address or domain name of remote site".
IMON-U300/310 Functions In order to define encryption and hash algorithms as well as the DiffieHellman group for the IKE key exchange, select these from the dropdown lists "IKE algorithms". DES EDE3, AES 128/192/256 as well as SHA1 or MD5 and DH 768/1024/1536 are available. In order to define encryption and hash algorithms for the IPsec connection, select these from the drop-down lists "IPsec algorithms". DES EDE3, AES 128/192/256 as well as SHA1 or MD5 are available.
Functions IMON-U300/310 In order to configure the authentication for an IPsec connection, select either the radio button "Authentication based on certificates" or the radio button "Authentication with pre shared key (PSK)“. The authentication with certificates can be used for the main mode. It is indicated under the option here, whether the individual certificates and keys are present (green checkmark) or not (red cross).
IMON-U300/310 13.6.9 Functions Configuring a GRE Tunnel The Generic Routing Encapsulation protocol allows to transmit data transparently through an existing connection without changing the original packets. Configuration via web interface (menu "Dial-In"/"Dial-Out", page "GRE") In order to enable a GRE tunnel, check the checkbox "Activate GRE tunnel". Enter the remote tunnel terminal as IP address or domain name into the "IP address or domain name of remote site" field.
Functions 13.7 13.7.1 IMON-U300/310 Serial Ethernet Gateway Setting up the Serial Ethernet Gateway The serial Ethernet gateway enables the addressing of serial end devices from the local network of the IMON-U300 or via the WAN interface, which are connected to the serial interface. The data which is sent to a configurable network port of the IMON-U300 is output at the serial interface.
IMON-U300/310 Functions In order to enable incoming connectionsin "Connection on request" mode as well, select in the "Accept incoming connection" section either the radio button "TCP" or "Modbus TCP" and enter the port, on which the serial Ethernet gateway reacts on incoming connections, into the "Port" field. If "TCP" is selected, the serial Ethernet gateway monitors the port for incoming connections for transparent data transmission. This port is not necessary if IPT is used.
Functions IMON-U300/310 In order to specify a set-up of an outgoing connection by an active WAN connection, select in the "Outgoing connection" section the radio button "triggered by active WAN connection". Then, a connection will be established as soon as a WAN connection is established. A destination must be specified in this operation mode. Enter the IP address or the domain name of the target into the "IP address or domain name" field as well as the port into the "Port" field.
IMON-U300/310 Functions In order to specify the maximum block size, from which the serially received data are packed to a TCP packet and sent when reached, enter the value into the field "Maximum block size". In order to specify the maximum time until packing a TCP packet, enter the time into the field "Aggregation timeout" in milliseconds. If this time has expired, the serially received data will be packed to a TCP packet and sent, even if the maximum block size has not yet been reached.
Functions 13.7.3 IMON-U300/310 Modem Emulator The serial Ethernet gateway can emulate a modem. It provides a series of AT commands for this. A modem will be emulated for each connection type with this function. If an outgoing connection has been triggered by the ATD command, the modem emulator will always be used, even if it is disabled.
IMON-U300/310 Functions AT command Description AT+FDIS AT+FDT Puts the serial Ethernet gateway into fax mode. Then, the Modem emulation waits for a dialling command (ATD or ATDT) for 10 seconds. The dialling command hands over the phone number, but dialling will not yet be started. A CONNECT does not take place as well. Dialling will only be initiated if the command AT+FDT is received within 10 seconds.
Functions IMON-U300/310 In order to upload an AT answer file, click on the “Browse…” button and locate the respective file. The file will be uploaded after clicking on "OK". This file must be a text file, which defines an associated answer for each desired AT command. Each line in this text file defines an "commandanswer-pair" in the form .
IMON-U300/310 13.8 13.8.1 Functions Messages Configuring the Message Dispatch The IMON-U300 can send an e-mail, an SMS or an SNMP trap to any recipient on different events. A series of pre-define events are available for this, like set-up of connections or VPN tunnels for example. Configuration via web interface (menu "Messages", page "Configuration") In order to enable to send an e-mail, you must enter the necessary data for the e-mail account in the section "E-mail".
Functions IMON-U300/310 13.8.2 Enabling SMS Receipt The IMON-U300 can receive commands via SMS. The execution of the command can be protected using a password. We strongly recommend to use password protection. If a password is configured, the SMS must contain the password; if no password is configured, the SMS must not contain a password. If this rule is violated, the SMS will not be processed in both cases. The password is case-sensitive.
IMON-U300/310 Functions Command Effect update An automatic update will be performed. Table 13: List of SMS commands An SMS with the text TOPsecret,reset for example triggers a restart, if the password is "TOPsecret". An SMS with the text openvpn restarts the OpenVPN, if no password is configured. SMS messages that do not comply with this syntax, can optionally be forwarded to the sandbox. The subdirectory "/var/spool/sms_in" must exist in the sandbox image for this.
Functions 13.8.3 IMON-U300/310 Configuring E-Mail Dispatch The IMON-U300 can send an e-mail to any recipient on different, pre-defined events. An attachment, which can be selected from different log files, can be attached to every e-mail. Moreover, it is possible to attach the status page of the web interface to the message text. It is possible to create and manage a series of different combinations of recipient, event, attachment, and text.
IMON-U300/310 13.8.4 Functions Configuring SMS Dispatch The IMON-U300 can send an SMS to any recipient on different, pre-defined events. The text of an SMS messages can consist of up to 140 characters, while not all characters are permissible and are removed from the entered text automatically during sending. It is possible to create and manage a series of different combinations of recipient, event, and text.
Functions 13.8.5 IMON-U300/310 Configuring SNMP Trap Dispatch The IMON-U300 can dispatch an SNMP trap to any recipient on different predefined events. It is possible to create and manage a series of different combinations of recipient and event. The SNMP traps are described in the MIB (Management Information Base). Dispatching an SNMP trap is only possible if the settings for the SNMP traps are configured correctly in the menu "Messages" on the page "Configuration".
IMON-U300/310 13.9 13.9.1 Functions Server Services Setting up DNS Forwarding You may use the IMON-U300 as DNS relay server. If it is configured as DNS server at the locally connected network devices, it will either forward the DNS requests to the previously configured DNS servers in the Internet, or will use the DNS server sent during the connection establishment.
Functions IMON-U300/310 13.9.2 Dynamic DNS Update The IMON-U300 can forward the IP address, which it was allocated during the dialin into the Internet, to a DynDNS provider, so it can be reached from the Internet with a domain name. This means that the network behind the router can always be reached with the same domain name from the Internet, also for dynamically allocated IP addresses (if incoming connections are not blocked by the provider).
IMON-U300/310 13.9.3 Functions Setting up the DHCP Server On request, the DHCP server of the IMON-U300 can automatically allocate other devices in the LAN an address. This automatically allocated, dynamic IP addresses are only valid for a certain time. The validity of the IP addresses allocated by the DHCP server are controlled via the "Lease time". If there is already a DHCP server in the network, in which the IMON-U300 is used, this function must absolutely be disabled in the device.
Functions IMON-U300/310 In order to delete one or more allocations, check in the section "Fixed allocation of IP addresses to MAC addresses“ the checkbox in the column "delete" and click then "OK" to accept the setting. 13.9.4 Configuring the Router Advertiser IPv6 prefixes can be advertised in the local LAN with the router advertiser. Machines connected to the LAN can configure one or several IPv6 addresses (SLAAC) independently using these received prefixes.
IMON-U300/310 13.9.5 Functions Configuring a Proxy Server The IMON-U300 provides a proxy server. This does not serve as a cache for frequently accessed websites. It is used to delay the connection timeouts for connections that load slowly and to filter undesired URLs (e.g. www.xyz.xx). The proxy supports the HTTP and HTTPS protocols. Configuration via web interface (menu "Server services", page "Proxy") In order to enable the proxy server, check the checkbox "Activate proxy server".
Functions 13.9.6 IMON-U300/310 Configuring an URL Filter With the help of the URL filter, the proxy server can restrict possible URLs, which can be accessed by computers from the internal network of the IMON-U300. This will allow only access to URLs which are entered in the filter list. All other URLs are blocked. To allow access to the Internet only via the proxy, the firewall must be activated. Without the firewall, the access to any URLs would be possible just by bypassing the proxy.
IMON-U300/310 Functions In order to increase the time between connection attempts, check the checkbox "Increase reconnection interval". In this case, the interval between the connection attempts will increase (1, 5, 15, 30, 60 minutes). Otherwise, the IMON-U300 will try to establish a connection every minute.
Functions 13.9.8 IMON-U300/310 Configuring the SNMP Agent The IMON-U300 provides an SNMP agent that responds to incoming SNMP Get requests. All parameters that exist in the ASCII configuration file, can be read via SNMP Get requests (except user name and password of the web interface authentication). These parameters are described in the MIB (Management Information Base).
IMON-U300/310 13.9.9 Functions Configuring MCIP MCIP (Management Control and Information Protocol) is a minimalist protocol for exchanging short telegrams between an MCIP server and MCIP device drivers based on TCP. Device drivers register with the MCIP server and inform it about the Object IDs (OIDs) which can be addressed by it. An OID can be assigned to the objects contained in the router so that they can be addressed in MCIP telegrams.
Functions IMON-U300/310 13.10 System Configuration The IMON-U300 displays system data such as firmware version, serial number, hardware revision or firmware checksum, together with short system messages about events and errors in the menu "System" on the page "System data". This information is helpful and should be known together with the configured IP address if you contact the support. Furthermore, several links enable to display system states and connection logs. 13.10.
IMON-U300/310 13.10.3 Functions Setting Time and Time Zone The IMON-U300 has an internal clock to control time-controlled events. This clock must be set to ensure that time-controlled events are processed precisely to the desired time, and that system messages are dated correctly. The clock can be updated automatically via an NTP server from the Internet. During each connection establishment, it will be tried to synchronize the time from the specified NTP server.
Functions IMON-U300/310 13.10.4 Reset You can reset the IMON-U300 via the web interface or by pressing the reset key on the front of the device. A software reset can be initiated by briefly pressing the reset key once. Pressing the reset key for at least three seconds initiates a hardware reset. A restart will be made in both cases. Pressing the reset key briefly three times within two seconds loads the factory defaults (see Section Display and Control Elements – Function of the Control Elements).
IMON-U300/310 13.10.5 Functions Update You can update the IMON-U300 with a new firmware or provide a new configuration using the web interface. A detailed description about these processes can be found in the following sections "Updating the Firmware" and "Uploading the Configuration File" of this manual. Moreover, a daily automatic update of firmware files, configuration files (binary and ASCII) or sandbox image files is possible. These must be provided on a server accordingly for this.
Functions IMON-U300/310 13.10.6 Updating the Firmware You can update the firmware of the IMON-U300 manually. The firmware is a combination of operating system and programs, in which the device functions are implemented. You'll find the latest firmware under www.insys-icom.com/firmware. Note Function loss due to faulty update! A connection failure during the update and a following restart may cause a loss of function of the IMON-U300.
IMON-U300/310 Functions The update process starts. The browser waits. During the update, the Status/VPN LED lights up red. After the completed update, a page is displayed which confirms the successful update procedure. Do not perform any action at the web interface until this page is displayed. An update of the file "data_" is not always necessary. You'll find further information about this in the PDF file contained in the firmware package. 5.
Functions IMON-U300/310 13.10.7 Uploading the Configuration File You may upload a previously downloaded or edited configuration file to the IMONU300, to replace the current configuration by the settings in the file. Uploading the Configuration File You have a configuration file for your version of the IMON-U300. 1. In the web interface under "System", switch to the page "Update". 2. Click on Browse... in the "Manual update" section and select the configuration file (e.g. configuration.bin). 3.
IMON-U300/310 13.10.8 Functions Download You can download the complete configuration file of the IMON-U300 in binary, encoded form via the web interface. With this file, you can configure other, identical devices, or safely store a working configuration. Moreover, it is possible to download an ASCII text file of the configuration or an "empty" configuration file (ASCII template). A description of the ASCII configuration file can be found in the respective add-on manual.
Functions IMON-U300/310 13.10.9 Sandbox The IMON-U300 provides a freely programmable sandbox. The sandbox is a kind of a virtual machine, which runs on the device. It is possible to start programs, collect data and offer services in the sandbox, which do not exist in the system of the actual device. Moreover, the IMON-U300 can be configured out of the sandbox using an ASCII configuration file. A current configuration can be imported into the sandbox in addition.
IMON-U300/310 Functions In order to install a new sandbox image with automatic update, the checkbox "Install new sandbox image on automatic update" must be checked. Otherwise, it will only be stored and must be installed manually. Note Unauthorised access to the device! If the configuration out of the sandbox without authentication is allowed, the configuration can be tampered with to gain unauthorised access.
Functions IMON-U300/310 13.10.10 Debugging Various tools of the IMON-U300 enable to analyse problems with network connections. The "PING" tool allows to send ICMP pings (ping packets). This enables to test, whether a specific machine is available in the network, easily. The "TRACEROUTE" tool shows the route of an IP packet to its destination. The "DNS LOOKUP" tool allows to request DNS information via an IP address or a domain name. The "TCPDUMP" tool allows to record network packets.
IMON-U300/310 Maintenance, Repair and Troubleshooting 14 Maintenance, Repair and Troubleshooting 14.1 Maintenance The product is maintenance-free and does not require special regular maintenance. 14.2 Troubleshooting If a failure occurs during the operation of the product, you will find troubleshooting tips in the "Knowledge Base" on our web site (http://www.insysicom.de/knowledge/). If you need further support, please contact your reseller or INSYS icom.
Waste Disposal IMON-U300/310 15 Waste Disposal 15.1 Repurchasing of Legacy Systems According to the new WEEE guidelines, the repurchasing and recycling of legacy systems for our clients is regulated as follows: Please send those legacy systems to the following address, carriage prepaid: Frankenberg-Metalle Gaertnersleite 8 D-96450 Coburg Germany This regulation applies to all devices which were delivered after August 13, 2005.
IMON-U300/310 16 Declaration of Conformity Declaration of Conformity Hereby, INSYS Microelectronics GmbH declares that herein described radio equipment type is in compliance with Directives 2014/53/EU and 2011/65/EU. The full text of the EC Declaration of Conformity is available under the following Internet address: www.insys-icom.com/manual For compliance with CE conformity, it is also necessary to comply with DIN EN62311. This controls the exposure of persons to electromagnetic fields.
FCC Statement 17 IMON-U300/310 FCC Statement Note: This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Modifications not expressly approved by the manufacturer could void the user's authority to operate the equipment under FCC rules.
IMON-U300/310 18 Export Restriction Export Restriction The chip sets for analogue modems and cellular radio adapters used by INSYS Microelectronics GmbH are subject to export restrictions as per US ECCN classification (5A991).
Licenses 19 IMON-U300/310 Licenses The software technologies and programs of the firmware used in the IMON-U300 are partly bound to the following licenses. The source code of the firmware components of the IMON-U300 which are bound to these licenses may be obtained from INSYS MICROELECTRONICS on request. 19.1 GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc.
IMON-U300/310 Licenses Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1.
Licenses IMON-U300/310 on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4.
IMON-U300/310 Licenses 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
Licenses IMON-U300/310 Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that companies distributing free software will individually obtain patent licenses, thus in effect transforming the program into proprietary software. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all.
IMON-U300/310 Licenses 2. You may modify your copy or copies of the Library or any portion of it, thus forming a work based on the Library, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) The modified work must itself be a software library. b) You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change.
Licenses IMON-U300/310 If such an object file uses only numerical parameters, data structure layouts and accessors, and small macros and small inline functions (ten lines or less in length), then the use of the object file is unrestricted, regardless of whether it is legally a derivative work. (Executables containing this object code plus portions of the Library will still fall under Section 6.
IMON-U300/310 Licenses 9. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License.
Licenses IMON-U300/310 THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 19.
IMON-U300/310 Licenses "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)" THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
Licenses IMON-U300/310 The licence and distribution terms for any publically available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution licence [including the GNU Public Licence.
IMON-U300/310 20 International Safety Instructions International Safety Instructions The following safety instruction of Cinterion is valid for the used GPRS engine TC63i or EDGE engine MC75i. Following US FCC specifications, each device must have a sticker with a note referring to the “FCC ID” attached. 20.1 Safety Precautions The following safety precautions must be observed during all phases of the operation, usage, service or repair of any cellular terminal or mobile incorporating TC63i/MC75i.
International Safety Instructions IMON-U300/310 Speakerphones must be installed by qualified personnel. Faulty installation or operation can constitute a safety hazard. IMPORTANT! Cellular terminals or mobiles operate using radio signals and cellular networks. Because of this, connection cannot be guaranteed at all times under all conditions. Therefore, you should never rely solely upon any wireless device for essential communications, for example emergency calls.
IMON-U300/310 21 Glossary Glossary This describes the most important terms and abbreviations of this manual. APN: Access Point Name, computer name that provides cellular subscribers of the GPRS network with Internet access. AT command: Commands to devices such as modems to set up this device. Broadcast: Data packet that is sent to all participants of a network. Caller ID: Phone number transmitted by the caller that can be evaluated by the called device.
Glossary IMON-U300/310 Gateway: This is a machine that works like a -> Router. In contrast to the router, a gateway can also route data packets from different hardware networks. GPRS: General Packet Radio Service; advancement of the -> GSM cellular network to achieve higher data transmission rates. GSM: Global System for Mobile communications; cellular network for voice and data transmission. ICMP: Internet Control Message Protocol; protocol that is often used to control a network.
IMON-U300/310 Glossary PPPoE: Point to Point Protocol over Ethernet; a protocol, which connects two devices via an Ethernet line to enable the exchange of TCP/IP packets between those two machines. Router: This is a machine in a network, which is responsible for the incoming data of a protocol to be forwarded to the planned destination or sub network. SCN: Service Center Number, phone number of the computer that accepts short messages (->SMS) via the GSM network and forwards them to the recipients.
Tables and Diagrams 22 Tables and Diagrams 22.1 List of Tables IMON-U300/310 Table 1: Physical Features ....................................................................................... 20 Table 2: Technological Features .............................................................................. 21 Table 3: Description of the display and control elements on the front panel of the device ...........................................................................................................
IMON-U300/310 23 Index Index Access Point Name ....................... 133 Accessories ..................................... 19 Additional information ..................... 10 Aggressive mode ............................ 78 Alternative results ........................... 10 Analysis purposes ......................... 104 APN ......................................... 56, 133 ASCII configuration file ..... 29, 33, 112 Assembly......................................... 34 AT command .....................
Index EDGE ............................................. 133 Electrical installation........................ 14 E-mail ............................ 29, 32, 89, 92 E-mail address ................................. 89 E-mail dispatch .......................... 32, 92 Encryption ................................. 74, 75 Encryption algorithm ................. 66, 70 Encryption method .................... 67, 71 Environment .............................. 14, 34 Environmental Protection ................
IMON-U300/310 Menu ............................................... 40 Messages ........................................ 89 MIB .......................................... 94, 102 Mobile network ......................... 50, 51 Modbus ........................................... 29 Modem emulator............................. 86 Modification ............................ 14, 115 Moisture .................................... 14, 34 Monitoring....................................... 42 Monitoring App .............
Index Repair ...................................... 14, 115 Repurchasing ................................ 116 Reset input ...................................... 26 Reset key ........................... 22, 24, 106 Responsibilities of the operator ....... 12 Restart ........................................... 106 RFC 2217......................................... 84 Ring tone ......................................... 52 Roaming .......................................... 50 Route .....................
IMON-U300/310 Timer ............................................... 29 Transmitted output .......................... 20 Transport ......................................... 12 Tunnel ....................................... 74, 77 Tunnel end ...................................... 75 UDP ......................................... 66, 135 UMTS ............................................ 135 Update............................. 33, 107, 108 URL ....................................... 100, 135 URL filter ........
