EDR-G903/G902 User’s Manual Second Edition, January 2011 www.moxa.com/product © 2011 Moxa Inc. All rights reserved. Reproduction without permission is prohibited.
EDR-G903/G902 User’s Manual The software described in this manual is furnished under a license agreement and may be used only in accordance with the terms of that agreement. Copyright Notice Copyright ©2011 Moxa Inc. All rights reserved. Reproduction without permission is prohibited. Trademarks The MOXA logo is a registered trademark of Moxa Inc. All other trademarks or registered marks in this manual belong to their respective manufacturers.
Table of Contents 1. Introduction ...................................................................................................................................... 1-1 Overview ........................................................................................................................................... 1-2 Package Checklist ............................................................................................................................... 1-2 Features ..........................
A. MIB Groups .......................................................................................................................................
1 1. Introduction Welcome to the Moxa EtherDevice Router (EDR-G903/G902), the Gigabit Firewall/VPN secure routers designed for connecting Ethernet-enabled devices in industrial field applications.
EDR-G903/G902 Introduction Overview As the world’s network and information technology becomes more mature, the trend is to use Ethernet as the major communications interface in many industrial communications and automation applications. In fact, a whole new industry has sprung up to provide Ethernet products that comply with the requirements of demanding industrial applications.
2 2. Getting Started This chapter explains how to access the EtherDevice Router for the first time. There are three ways to access the switch: (1) serial console, (2) Telnet console, or (3) web browser. The serial console connection method, which requires using a short serial cable to connect the EtherDevice Router to a PC’s COM port, can be used if you do not know the EtherDevice Router’s IP address.
EDR-G903/G902 Getting Started RS-232 Console Configuration (115200, None, 8, 1, VT100) NOTE Connection Caution! We strongly suggest that you do NOT use more than one connection method at the same time. Following this advice will allow you to maintain better control over the configuration of your EtherDevice Router NOTE We recommend using Moxa PComm Terminal Emulator, which can be downloaded free of charge from Moxa’s website.
EDR-G903/G902 Getting Started 4. Click the Terminal tab, and select VT100 for Terminal Type. Click OK to continue. 5. Type 1 to select ansi/VT100 terminal type, and then press Enter. 6. The Console login screen will appear. Use the keyboard to enter the login account (admin or user), and then press Enter to jump to the Password field. Enter the console Password (this is the same as the Web Browser password; leave the Password field blank if a console password has not been set), and then press Enter.
EDR-G903/G902 telnet Getting Started telnet (IP address) Open a telnet connection Example: telnet 192.168.127.10 telnet (IP address) (port number) Open a telnet connection with port number Example: telnet 192.168.127.10 23 ssh ssh (IP address) Open a ssh connection Example: ssh 192.168.127.10 Login by User account: Command Parameter/Example Description exit/quit Exit this consol mode connection list Print command list ping ping (IP address) Ping remote device via IP Example: ping 192.168.
EDR-G903/G902 Getting Started Perform the following steps to access the console utility via Telnet. 1. Click Start ( Run, and then telnet to the EtherDevice Router’s IP address from the Windows Run window. (You may also issue the telnet command from the MS-DOS prompt.). 2. Refer to instructions 6 and 7 in the RS-232 Console Configuration (115200, None, 8, 1, VT100) section on page 2-3.
EDR-G903/G902 NOTE Getting Started By default, the EtherDevice Router’s password is not set (i.e., is blank). You may need to wait a few moments for the web page to be downloaded to your computer. Use the menu tree on the left side of the window to open the function pages to access each of the router’s functions.
3 3. Features and Functions In this chapter, we explain how to access the EtherDevice Router’s configuration options, perform monitoring, and use administration functions. There are three ways to access these functions: (1) RS-232 console, (2) Telnet console, and (3) web browser. The web browser is the most user-friendly way to configure the EtherDevice Router, since you can both monitor the EtherDevice Router and use administration functions from the web browser.
EDR-G903/G902 Features and Functions The Overview page is divided into three major parts: Interface Status, Basic function status, and Recent 10 Event logs, and gives users a quick overview of the EtherDevice Router’s current settings. Click More… at the top of the Interface Status table to see detailed information about all interfaces.
EDR-G903/G902 Features and Functions Click More… at the top of the “Recent 10 Event Log” table to open the EventLogTable page. Configuring Basic Settings The Basic Settings group includes the most commonly used settings required by administrators to maintain and control the EtherDevice Router. System Identification The system identification section gives you an easy way to identify the different switches connected to your network. Router name Setting Description Factory Default Max.
EDR-G903/G902 Features and Functions Maintainer Contact Info Setting Description Factory Default Max. 30 Characters Enter the contact information of the person responsible for None maintaining this EtherDevice Router Web Configuration Setting Description http or https Users can connect to the EtherDevice Router router via http or http or https Factory Default https protocol. https only Users can connect to the EtherDevice Router router via https protocol only.
EDR-G903/G902 Features and Functions The following table shows additional configuration examples: Allowable Hosts Input Format Ay host Disable 192.168.1.120 192.168.1.120 / 255.255.255.255 192.168.1.1 to 192.168.1.254 192.168.1.0 / 255.255.255.0 192.168.0.1 to 192.168.255.254 192.168.0.0 / 255.255.0.0 192.168.1.1 to 192.168.1.126 192.168.1.0 / 255.255.255.128 192.168.1.129 to 192.168.1.254 192.168.1.128 / 255.255.255.
EDR-G903/G902 Features and Functions • ATTENTION! • By default, the Password field is blank. If a Password is already set, then you will be required to type the Password when logging into the RS-232 console, Telnet console, or web browser interface. Account Setting Description Factory Default Admin “admin” privilege allows the user to modify all configurations. Admin User “user” privilege only allows viewing device configurations.
EDR-G903/G902 NOTE Features and Functions The EtherDevice Router has a real time clock so the user does not need to update the Current Time and Current Date to set the initial time for the EtherDevice Router after each reboot. This is especially useful when the network does not have an Internet connection for an NTP server, or there is no NTP server on the network.
EDR-G903/G902 Features and Functions Time Server IP/Name Setting Description 1st Time Server IP or Domain address (e.g., 192.168.1.1, time.stdtime.gov.tw, None Factory Default IP/Name or time.nist.gov). 2nd Time Server The EtherDevice Router will try to locate the 2nd NTP Server if IP/Name the 1st NTP Server fails to connect. SettingCheck SettingCheck is a safety function for industrial users using a secure router.
EDR-G903/G902 Features and Functions If the user enables the SettingCheck function with the Accessible IP list and the confirmer Timer is set to 15 seconds, then when the user clicks the Activate button on the accessible IP list page, the EtherDevice Router will execute the configuration change and the web browser will try to jump to the SettingCheck Confirmed page automatically.
EDR-G903/G902 Features and Functions System File Update—by Remote TFTP The EtherDevice Router supports saving your configuration file to a remote TFTP server or local host to allow other EtherDevice Router routers to use the same configuration at a later time, or saving the Log file for future reference. Loading pre-saved firmware or a configuration file from the TFTP server or local host is also supported to make it easier to upgrade or configure the EtherDevice Router.
EDR-G903/G902 Features and Functions Log File Click Export to export the Log file of the EtherDevice Router to the local host. NOTE Some operating systems will open the configuration file and log file directly in the web page. In such cases, right click the Export button and then save as a file. Upgrade Firmware To import a firmware file into the EtherDevice Router, click Browse to select a firmware file already saved on your computer.
EDR-G903/G902 Features and Functions Network Settings Mode Configuration Network Mode EtherDevice Router provides Router Mode and Bridge Mode operation for different applications: Router Mode In this mode, EtherDevice Router operates as a gateway between different networks.
EDR-G903/G902 Features and Functions WAN1 Configuration Connection Note that there are there are three different connection types for the WAN1 interface: Dynamic IP, Static IP, and PPPoE. A detailed explanation of the configuration settings for each type is given below.
EDR-G903/G902 Features and Functions Example: Suppose a remote user (IP: 10.10.10.10) wants to connect to the internal server (private IP: 30.30.30.10) via the PPTP protocol. The IP address for the PPTP server is 20.20.20.1. The necessary configuration settings are shown in the following figure.
EDR-G903/G902 Features and Functions Gateway Setting Description Factory Default IP Address The Gateway IP address None Detailed Explanation of PPPoE Type PPPoE Dialup User Name Setting Description Factory Default Max. 30 characters The User Name for logging in to the PPPoE server None Setting Description Factory Default Max. 30 characters User-defined Host Name of this PPPoE server None Setting Description Factory Default Max.
EDR-G903/G902 Features and Functions Connection Type Setting Description Factory Default Static IP, Dynamic IP, Configure the connection type Dynamic IP PPPoE Detailed Explanation of Dynamic IP Type PPTP Dialup Point-to-Point Tunneling Protocol is used for Virtual Private Networks (VPN). Remote users can use PPTP to connect to private networks from public networks.
EDR-G903/G902 Features and Functions DNS (Doman Name Server; optional setting for Dynamic IP and PPPoE types) Server 1/2/3 NOTE Setting Description Factory Default IP Address The DNS IP Address None The priority of a manually configured DNS will higher than the DNS from the PPPoE or DHCP server.
EDR-G903/G902 Features and Functions Subnet Mask Setting Description Factory Default IP Address The subnet mask None Setting Description Factory Default IP Address The Gateway IP address None Gateway Detailed Explanation of PPPoE Type PPPoE Dialup User Name Setting Description Factory Default Max. 30 characters The User Name for logging in to the PPPoE server None Setting Description Factory Default Max.
EDR-G903/G902 Features and Functions Using DMZ Mode A DMZ (demilitarized zone) is an isolated network for devices—such as data, FTP, web, and mail servers connected to a LAN network—that need to frequently connect with external networks. The deployment of an FTP server in a DMZ is illustrated in the following figure. DMZ mode is configured on the WAN2 configuration web page. Set Connect Mode to Enable, Connect Type to Static IP, and checkmark the DMZ Enable check box.
EDR-G903/G902 Features and Functions LAN IP Configuration IP Address Setting Description Factory Default IP Address The LAN interface IP address 192.168.127.254 Setting Description Factory Default IP Address The subnet mask 255.255.255.0 Subnet Mask DHCP Server The EtherDevice Router provides a DHCP (Dynamic Host Configuration Protocol) server function for LAN interfaces.
EDR-G903/G902 Features and Functions Static DHCP List Use the Static DHCP list to ensure that devices connected to the EtherDevice Router always use the same IP address. The static DHCP list matches IP addresses to MAC addresses. In the above example, a device named “Device-01” was added to the Static DHCP list, with static IP address set to 192.168.127.101 and MAC address set to 00:09:ad:00:aa:01.
EDR-G903/G902 Features and Functions DHCP Leased List Use the DHCP Leased List to view the current DHCP clients. Dynamic DNS Dynamic DNS (Domain Name Server) allows you to use a domain name (e.g., moxa.edr-g903) to connect to the EtherDevice Router. The EtherDevice Router can connect to 4 free DNS servers and register the user configurable Domain name in these servers. Service Setting Description Factory Default > Disable Disable or select the DNS server Disable > freedns.afraid.org > www.3322.
EDR-G903/G902 Features and Functions Network Redundancy Moxa EtherDevice Router provides 2 types of network redundancy functions: WAN backup (EDR-G903 only) and VRRP. The EtherDevice Router has two WAN interfaces: WAN1 is the primary WAN interface and WAN2 is the backup interface. When the EtherDevice Router detects that connection WAN1 has failed (Link down or Ping fails), it will switch the communication path from WAN1 to WAN2 automatically.
EDR-G903/G902 Features and Functions Link Check Setting Description Factory Default Enable or Disable Activate Backup function by checking the link status of WAN1 Disabled Ping Check Setting Description Factory Default Enable or Disable Activates the Backup function if unable to ping from the Disabled EtherDevice Router to a specified IP address.
EDR-G903/G902 Features and Functions Virtual Router Redundancy Protocol (VRRP) VRRP Settings The Virtual Router Redundancy Protocol (VRRP) feature can solve the problem with static configuration. VRRP enables a group of routers to form a single virtual router with a virtual IP address. The LAN clients can then be configured with the virtual router’s virtual IP address as their default gateway. The virtual router is the combination of a group of routers, and is also known as a VRRP group.
EDR-G903/G902 Features and Functions Static Routing and Dynamic Routing The EtherDevice Router supports two routing methods: static routing and dynamic routing. Dynamic routing makes use of RIP V1/V1c/V2. You can either choose one routing method, or combine the two methods to establish your routing table.
EDR-G903/G902 Features and Functions Clickable Buttons Add For adding an entry to the Static Routing Table. Delete For removing selected entries from the Static Routing Table. Modify For modifying the content of a selected entry in the Static Routing Table. NOTE The entries in the Static Routing Table will not be added to the EtherDevice Router’s routing table until you click the Activate button.
EDR-G903/G902 Features and Functions Routing Table The Routing Table page shows all routing entries.
EDR-G903/G902 Features and Functions Enable/Disable NAT Policy Setting Description Factory Default Enable or Disable Enable or disable the selected NAT policy Enabled Setting Description Factory Default N-1 Select the NAT types N-1 NAT Mode 1-1 Port Forwarding Interface (N-1 mode) Setting Description Factory Default Auto Select the Interface for this NAT Policy Auto WAN1 WAN2 The EtherDevice Router provides a Dual WAN backup function for network redundancy.
EDR-G903/G902 Features and Functions Enable/Disable NAT policy Setting Description Factory Default Enable or Disable Enable or disable the selected NAT policy Enabled Setting Description Factory Default N-1 Select the NAT types N-1 NAT Mode 1-1 Port Forward Interface (Port Forward mode) Setting Description Factory Default WAN1 Select the Interface for this NAT Policy WAN1 WAN2 Protocol (Port Forward mode) Setting Description Factory Default TCP Select the Protocol for NAT Policy TC
EDR-G903/G902 Features and Functions 1-to-1 NAT If the internal device and external device need to communicate with each other, choose 1-to-1 NAT, which offers bi-directional communication (N-to-1 and Port forwarding are both single-directional communication NAT functions). 1-to-1 NAT is usually used when you have a group of internal servers with private IP addresses that must connect to the external network. You can use 1-to-1 NAT to map the internal servers to public IP addresses.
EDR-G903/G902 Features and Functions Enable/Disable NAT policy Setting Description Factory Default Enable or Disable Enable or disable the selected NAT policy None Setting Description Factory Default N-1 Select the NAT types None NAT Mode 1-1 Port Forward Interface (1-1 NAT type) Setting Description Factory Default WAN1 Select the Interface for this NAT Policy WAN1 WAN2 LAN/DMZ IP (1-1 NAT type) Setting Description Factory Default IP Address Select the Internal IP address in LAN/DMZ
EDR-G903/G902 Features and Functions Firewall Settings Firewall Policy Concept A firewall device is commonly used to provide secure traffic control over an Ethernet network, as illustrated in the following figure. Firewall devices are deployed at critical points between an external network (the non-secure part) and an internal network (the secure part). Firewall Policy Overview The EtherDevice Router provides a Firewall Policy Overview that lists firewall policies by interface direction.
EDR-G903/G902 Features and Functions Firewall Policy Configuration The EtherDevice Router’s Firewall policy provides secure traffic control, allowing users to control network traffic based on the following parameters.
EDR-G903/G902 Features and Functions Destination IP Setting Description All (IP Address) This Firewall Policy will check all Destination IP addresses in the All Factory Default packet Single (IP Address) This Firewall Policy will check single Destination IP addresses in Range (IP Address) This Firewall Policy will check multiple Destination IP addresses the packet in the packet Destination Port Setting Description Factory Default All (Port number) This Firewall Policy will check all Destinati
EDR-G903/G902 Features and Functions EtherType Setting Description Factory Default 0x0600 to 0xFFFF When Protocol is set to “Manual” you can set up EtherType None manually Target Setting Description Accept The packet will pass the Firewall when it matches this Firewall None Factory Default policy Drop The packet will not pass the Firewall when it matches this None Firewall policy Source MAC Address Setting Description Mac Address This Firewall Policy will check all Source MAC addresses of
EDR-G903/G902 Features and Functions Quick Automation Profile Ethernet Fieldbus protocols are popular in industrial automation applications. In fact, many Fieldbus protocols (e.g., EtheNet/IP and Modbus TCP/IP) can operate on an industrial Ethernet network, with the Ethernet port number defined by IANA (Internet Assigned Numbers Authority).
EDR-G903/G902 Features and Functions Modbus TCP/IP (UDP) 502 PROFInet RT Unicast (TCP) 34962 PROFInet RT Unicast (UDP) 34962 PROFInet RT Multicast (TCP) 34963 PROFInet RT Multicast (UDP) 34963 PROFInet Context Manager (TCP) 34964 PROFInet Context Manager (UDP) 34964 IEC 60870-5-104 (TCP) 2404 IEC 60870-5-104 (UDP) 2404 DNP (TCP) 20000 DNP (UDP) 20000 The Quick Automation Profile also includes the commonly used Ethernet protocols listed in the following table: Ethernet Protocol Port
EDR-G903/G902 Features and Functions Mask: Policy [X] is masked by Policy [Y] The Source/Destination IP range or Source/Destination port number of policy [X] is smaller or equal to policy [Y] but the action target (Accept/Drop) is different. For example, two firewall policies are shown below: Index Input Output Protocol Source IP Destination IP Target 1 WAN1 LAN All 10.10.10.10 192.168.127.10 ACCEPT 2 WAN2 LAN All 20.20.20.10 192.168.127.20 ACCEPT to 20.20.20.
EDR-G903/G902 Features and Functions Suppose the user next adds a new policy with the following configuration: Index Input Output Protocol Source IP Destination IP Target 3 WAN2 LAN All 20.20.20.25 192.168.127.20 DROP to 192.168.127.30 The source IP range in policy 3 is smaller than policy 2, but the destination IP of policy 2 is smaller than policy 3, and the target actions (Accept/Drop) of these two policies are different.
EDR-G903/G902 Features and Functions SYN/RST Scan Setting Description Factory Default Enable or Disable Enable or disable the SYN/RST Scan None Description Factory Default ICMP-Death Setting Enable or Disable Enable or disable the ICMP-Death defense None Packet/Second The limit value to activate ICMP-Death defense None SYN-Flood Setting Description Factory Default Enable or Disable Enable or disable the Null Scan function None Packet/Second The limit value to activate SYN-Flood defens
EDR-G903/G902 Features and Functions IPSec Configuration IPSec configuration includes 5 parts: • Global Setting: Enable / Disable all IPSec Tunnels and NAT-Traversal function • Tunnel Setting: Set up the VPN Connection type and VPN network plan • Key Exchange: Authentication for 2 VPN gateways • Data Exchange: Data encryption between VPN gateways • Dead Peer Detection: The mechanism for VPN Tunnel maintenance.
EDR-G903/G902 Features and Functions Tunnel Setting Enable or Disable VPN Tunnel Setting Description Factory Default Enable or Disable Enable or Disable this VPN Tunnel Disable Setting Description Factory Default Max. of 16 characters User defined name of this VPN Tunnel. None Name of VPN Tunnel NOTE The first character cannot be a number.
EDR-G903/G902 Features and Functions Local Network / Netmask / ID Setting Description Factory Default IP Address IP address of local VPN network IP address of LAN Subnet Mask Subnet Mask of local VPN network interface Netmask of LAN interface ID ID for indentifying the VPN tunnel connection. None The Local ID must be equal to the Remote ID of the VPN Gateway.
EDR-G903/G902 Features and Functions In X.509 Mode, the user needs to upload the Local and Remote certifications first, and then select the certifications from the drop-down list. See the X.509 Certification section in this chapter for details.
EDR-G903/G902 Features and Functions Data Exchange (IPSec phase II) Perfect Forward Secrecy Setting Description Factory Default Enable or Disable Uses different security key for different IPSec phases to Disable enhance security SA Lifetime Setting Description Factory Default SA lifetime (minutes) Lifetime for SA in Phase 2 480 (min) Encryption Algorithm Setting Description Factory Default DES Encryption Algorithm in data exchange 3DES Setting Description Factory Default Any Hash Al
EDR-G903/G902 Features and Functions IPSec Status The user can check the VPN tunnel status in the IPSec Connection List. This list shows the Name of the IPSec tunnel, IP address of Local and Remote Subnet/Gateway, and the established status of the Key exchange phase and Data exchange phase. X.509 Certification X.509 is a digital certificate method commonly used for IPSec Authentication.
EDR-G903/G902 Features and Functions Certificate Generation The user must fill in the following information to generate the Root certification: • Country name (2 Letter code) • Certificate Days • State or Province Name • Locality Name • Organization Name • Organization Unit Name • Common Name • Email Address After keyin in all information, press Activate to generate the Root Certification.
EDR-G903/G902 Features and Functions Local Certificate Upload Upload the .p12 local certificate on this page. The Password must be the same as the .p12 certificate file. If the password is not correct, the certificate import process will fail. Label: User defined name for this local certificate Name/Subject: Show the Name and subject when the certificate is imported successfully or the user selects the certificate on the list PKCS#12 Upload: Use Browser to select the .
EDR-G903/G902 Features and Functions L2TP Configuration L2TP Server Mode Setting Description Factory Default Enable / Disable Enable or Disable the L2TP function on the WAN1 or WAN 2 Disable interface Local IP Setting Description Factory Default IP Address The IP address of the Local Subnet 0.0.0.0 Offered IP Range Setting Description Factory Default IP Address Offered IP range is for the L2TP clients 0.0.0.0 Login User Name Setting Description Factory Default Max. to xx character.
EDR-G903/G902 Features and Functions Examples for Typical VPN Applications Site to Site IPSec VPN tunnel with Per-shared Key The following example shows how to create a secure LAN to LAN VPN tunnel between the Central site and Remote site via an Intranet network. VPN Plan: • All communication from the Central site network (100.100.1.0/24) to the Remote site Network (100.100.3.0/24) needs to pass through the VPN tunnel. • Intranet Network is 100.100.2.
EDR-G903/G902 Features and Functions L2TP for Remote User Maintenance The following example shows how a Roaming user uses L2TP over IPSec to connect to theremote site network. VPN Plan: • All communication from the Roaming user (no fixed IP) to the Remote site Network (100.100.3.0/24) needs to pass through the VPN tunnel. • Communication goes through the Internet. • The configuration of the WAN/LAN interface for the EtherDevice Router is shown in the following table.
EDR-G903/G902 Features and Functions How Traffic Prioritization Works The EtherDevice Router provides four different priorities levels (0-3, high to low) for incoming and outgoing traffic. The following figure illustrates incoming traffic, which refers to the traffic transmitted from WAN1 to LAN or WAN2 to LAN interface. Outgoing traffic refers to the traffic transmitted from LAN to WAN1 or from LAN to WAN2. The following figures show the configuration for incoming and outgoing traffic.
EDR-G903/G902 Features and Functions Max.
EDR-G903/G902 Features and Functions Priority Setting Description Factory Default Priority 0/1/2/3 Select the priority for this policy Priority 0 Setting Description Factory Default All (IP Address) Select the Source IP address for this policy All Setting Description Factory Default All (Port number) Select the Source port number for this policy All Source IP Single (IP Address) Range (IP Address) Source Port Single (Port number) Range (Port number) Destination IP Setting Description
EDR-G903/G902 Features and Functions The EtherDevice Router will manage the bandwidth for outgoing packets. Based on the four outgoing policies below, when the source IP of the Ethernet traffic matches the outgoing policies, the maximum bandwidth for a packet sent from these source IP addresses will be reserved by its target priority.
EDR-G903/G902 Features and Functions SNMP Read Settings SNMP Versions Setting Description Factory Default Disable Select the SNMP protocol version used to manage the secure Disable V1, V2c, V3, or router. V1, V2c, or V3 only Contact Person Setting Description Factory Default Admin or Admin privilege allows access and authorization to read and Admin user write the MIB file. User privilege only allows reading the MIB file, but does give authorization to write. Auth.
EDR-G903/G902 Features and Functions Access Control Setting Description Factory Default Read only (Public MIB Access control type after matching the community string Read only Setting Description Factory Default IP Address Enter the IP address of the Trap Server used by your network. Read only only) No Access Target IP Address SNMP Trap Type SNMP Trap Types can be divided into two basic groups: System Events and Port Events.
EDR-G903/G902 Features and Functions 1. Configure Email Event Types Select the desired Event types from the Web Browser Event type page (a description of each event type is given later in the Email Alarm Events setting subsection). 2.
EDR-G903/G902 Features and Functions E-mail Setup Main Server IP/Name Setting Description Factory Default IP address The IP Address of your email server. None Setting Description Factory Default Port number The port number of your email server. None Port Account Name Setting Description Factory Default Max. 30 Characters Your email account name (typically your user name) None Email Password Setting Description Factory Default Max.
EDR-G903/G902 Features and Functions Configuring Relay Warning The Auto Relay Warning function uses relay output to alert the user when certain user-configured events take place. There are two basic steps required to set up the Relay Warning function: 1. Configuring Relay Event Types Select the desired Event types from the Web Browser Event type page (a description of each event type is given later in the Relay Alarm Events setting subsection). 2.
EDR-G903/G902 Features and Functions Using Diagnosis The EtherDevice Router provides Ping tools and LLDP for administrators to diagnose network systems. Ping The Ping function uses the ping command to give users a simple but powerful tool for troubleshooting network problems. The function’s most unique feature is that even though the ping command is entered from the user’s PC keyboard, the actual ping command originates from the EtherDevice Router itself.
EDR-G903/G902 Features and Functions Neighbor Port Description: A textual description of the neighbor device’s interface. Neighbor System: Hostname of the neighbor device. Using Monitor You can monitor statistics in real time from the EtherDevice Router’s web console. Monitor by System Access the Monitor by selecting “System” from the left selection bar. Monitor by System allows the user to view a graph that shows the combined data transmission activity of all the EtherDevice Router’s 3 ports.
EDR-G903/G902 Features and Functions Using System Log The EtherDevice Router provides EventLog and Syslog functions to record important events. Using EventLog Field Description Bootup This field shows how many times the EDR-G509 has been rebooted or cold started. Date The date is updated based on how the current date is set in the “Basic Setting” page. Time The time is updated based on how the current time is set in the “Basic Setting” page.
EDR-G903/G902 Features and Functions DI transition (On -> Off) Cold start NOTE Factory default Warm start System restart Warm start Firmware Upgrade Warm start Configuration Upgrade Warm start The maximum number of event entries is 1000. Using Syslog This function provides the event logs for the syslog server. The function supports 3 configurable syslog servers and syslog server UDP port numbers.
EDR-G903/G902 2. Features and Functions A warning message will appear to warn the user that the security certificate was issued by a company they have not chosen to trust. 3. Select Yes to enter the EtherDevice Router’s web browser interface and access the web browser interface secured via HTTPS/SSL.
A A. MIB Groups The EtherDevice Router comes with built-in SNMP (Simple Network Management Protocol) agent software that supports cold start trap, line up/down trap, and RFC 1213 MIB-II. The standard MIB groups that the EtherDevice Router series support are: MIB II.1 – System Group sysORTable MIB II.2 – Interfaces Group ifTable MIB II.4 – IP Group ipAddrTable ipNetToMediaTable IpGroup IpBasicStatsGroup IpStatsGroup MIB II.5 – ICMP Group IcmpGroup IcmpInputStatus IcmpOutputStats MIB II.
