RACOM RipEX User Manual

Other manuals for RipEX: User Manual
Manual is about: Radio modem & Router

Summary of RipEX

  • Page 1

    User manual . Ripex radio modem & router . Version 1.20 08/16/2017 fw 1.7.X.X www.Racom.Eu racom s.R.O. • mirova 1283 • 592 31 nove mesto na morave • czech republic tel.: +420 565 659 511 • fax: +420 565 659 512 • e-mail: racom@racom.Eu.

  • Page 3: Table Of Contents

    Table of contents important notice .................................................................................................................................. 7 quick guide ...........................................................................................................................

  • Page 4

    4.2.7. Gps ......................................................................................................................... 53 4.3. Indication leds .................................................................................................................. 54 4.4. Technical specificat...

  • Page 5: List Of Tables

    7.7.5. Miscellaneous ........................................................................................................ 202 7.7.6. Ssl certificate ....................................................................................................... 202 7.7.7. Remote access keys ................

  • Page 6

    10.5. Maximum voltage and current of individual interfaces ........................................................... 216 10.6. Compliance federal communications commission .............................................................. 224 ripex radio modem & router – © racom s.R.O. 6 ripex radio m...

  • Page 7: Important Notice

    Important notice copyright © 2017 racom. All rights reserved. Com’s products offered may contain software proprietary to racom s. R. O. (further referred to under the ab- breviated name racom). The offer of supply of these products and services does not include or infer any transfer of ownership. No...

  • Page 8: Quick Guide

    Quick guide ripex is a widely configurable compact radio modem, more precisely a radio ip router. All you have to do to put it into operation is to connect it to an antenna and a power supply and configure it using a pc (tablet, smart phone) and a web browser. Antenna indicator leds' sleep input hw ...

  • Page 9

    Scada radio network step-by-step building a reliable radio network for a scada system may not be that simple, even when you use such a versatile and easy-to-operate device as the ripex radio modem. The following step-by-step checklist can help you to keep this process fast and efficient. 1. Design y...

  • Page 10: 1.1. Introduction

    1. Ripex – radio router 1.1. Introduction ripex is a best-in-class radio modem, not only in terms of data transfer speed. This software defined radio with linux os has been designed with attention to detail, performance and quality. All relevant state-of-the-art concepts have been carefully implemen...

  • Page 11

    • fast remote access - only the effective data are transferred from remote ripex over the air, html page is downloaded from the local unit. • bridge or router - ripex is a device with native ip support which can be set as a standard bridge or router. • modbus, iec101, dnp3, pr2000, siemens 3964(r), ...

  • Page 12

    - snmp including generation of trap alarms when preset thresholds are exceeded - on-line/off-line (recorded to a file in the ripex) monitoring of all interfaces • security - 256 aes encryption, the most secure encryption meets fips 140 2 requirements - 2048 (1024, 512) bit ssl certificate (even your...

  • Page 13: 2. Ripex In Detail

    2. Ripex in detail 2.1. Applications radio modem ripex is best suited for transmission of a large number of short messages where a guaranteed delivery is required, i.E. For mission critical applications. Ripex has the following basic uses: ○ polling in poll-response networks a central master unit co...

  • Page 14

    Note limited broadcast 255.255.255.255 and direct broadcast e.G. 192.168.255.255 as well as multicast (224.0.0.0 through 239.255.255.255) on ethernet are supported and transferred over the network. You can see an instructional video explaining the bridge mode functionality here: http://www.Ra- com.E...

  • Page 15

    Step 1 polling cycle starts: fep sends a request packet for rtu3 through com1 to the connected ripex. Step 2 fep’s ripex broadcasts this packet on radio channel. Ripex3 and ripex1 receive this packet. Ripex2 doesn’t receive this packet, because it is not within radio coverage of fep’s ripex. Step 3 ...

  • Page 16

    Step 6 fep’s ripex sends the packet (the reply from rtu3) to fep through com1. Ripex1 sends this packet to rtu1. Rtu1 doesn’t react, because the packet is addressed to fep. Ripex1 repeats the packet on radio channel. All ripexes receive the packet. Step 7 ripex2 sends repeated packet to its com1 and...

  • Page 17

    192.168.5.51/24 192.168.5.50/24 192.168.5.12/24 192.168.5.2/24 192.168.5.3/24 192.168.5.11/24 192.168.5.1/24 192.168.5.13/24 3 fep 50 1 2 repeater fig. 2.1: bridge mode example repeater because using the bridge mode makes the network transparent, the use of repeaters has certain limit- ations. To ke...

  • Page 18

    1. Repeaters connected serially a packet is transmitted and repeated in steps 1, 2, 3. Centre rpt1 rpt2 remote 1 2 3 in improperly designed networks collisions happen if a remote radio modem lies in the range of two x collision! 1 1 2 2 wrong cen rpt1 rpt2 rem repeaters (see the image): the packet s...

  • Page 19: 2.3. Router Mode

    2. Parallel repeaters improperly designed network: centre repeater1 remote1 1 2 1 2 remote2 repeater2 x collision! Good wrong 1 2 1 2 cen cen rpt1 rpt1 rem1 rem1 1 2 1 2 rem2 rem2 rpt2 rpt2 2 - ripex rem1 is within the range of two repeaters (rpt1 and rpt2). The repeaters receive a packet (1) from t...

  • Page 20

    2.3.1. Router - flexible, detail description router mode with flexible protocol is suitable for multipoint networks of all topologies with unlimited number of repeaters on the way, and all types of network traffic where multi-master applications and any combination of simultaneous polling and/or rep...

  • Page 21

    Step 4 ripex1 transmitts the reply packet from rtu1 for fep on radio channel. All ripexes receive this packet. This packet is addressed to fep’s ripex, so only fep’s ripex reacts. It checks data integrity and transmits the acknowledgement to ripex1. At the same time the packet is sent to fep through...

  • Page 22

    10.10.10.50/24 192.168.50.2/24 routing table ripex50: 192.168.1.0/24 10.10.10.1 192.168.2.0/24 10.10.10.1 192.168.3.0/24 10.10.10.3 default gw 192.168.50.2 è è è 192.168.2.2/24 routing table : 192.168.1.0/24 10.10.10.1 ripex2 192.168.50.0/24 10.10.10.1 192.168.3.0/24 10.10.10.1 è è è 10.10.10.3/24 1...

  • Page 23

    2.3.4. Router - flexible, addressing hints in large and complex networks with numerous repeaters, individual routing tables may become long and difficult to comprehend. To keep the routing tables simple, the addressing scheme should follow the layout of the radio network. More specifically, every gr...

  • Page 24

    2.3.5. Router - base driven, detail description all traffic over the radio channel is managed by the base station. Radio channel access is granted by a deterministic algorithm resulting in collision free operation regardless of the network load. Uniform distribution of radio channel capacity among a...

  • Page 25

    Remote ripex 1 transmits the packet. If the base ripex successfully receives the packet, it sends an acknowledgement and then the remote ripex1 clears the packet from the queue. A part of the relation includes a hand over of information about the number of packets waiting in the queue. Step 4 rtu2 i...

  • Page 26

    Note: when only serial protocols are used (and optimization is not active), there is no need to use routing tables. Instead of using routing tables records, address translation in com protocol settings is used. Serial protocol address to ip address translation rules apply where the radio ip addresse...

  • Page 27

    2.4. Serial scada protocols even when the scada devices are connected via serial port, communication remains secured and address-based in all directions (centre-rtu, rtu-centre, rtu-rtu). In router mode, ripex utilises a unique implementation of various scada protocols (modbus, iec101, dnp3, pr2000,...

  • Page 28

    Important the anti-collision protocol feature is available only in the router mode. The bridge mode is suitable for simple master-slave arrangements with polling-type application protocol. 2.5. Combination of ip and serial communication ripex enables combination of ip and serial protocols within a s...

  • Page 29

    Opened tcp connections between the ripex and the locally connected application up to 10 on each terminal server. 2.6. Diagnostics & network management ripex radiomodem offers a wide range of built-in diagnostics and network management tools. 2.6.1. Logs there are ‘neighbours’ and statistic logs in r...

  • Page 30: Radio Modem Unit

    See chapter ripex app notes, snmp for racom ripex 1 for more. Mib table can be found there too. 2.6.4. Ping to diagnose the individual radio links ripex is equipped with an enhanced ping tool. In addition to the standard info such as the number of sent and received packets or the round trip time, it...

  • Page 31

    A firmware upgrade implements significant improvements and new functions which take the product to a new level. Downloading and applying a firmware upgrade is the same as with firmware update. However a software key may have to be purchased and applied to activate the new functionality or the upgrad...

  • Page 32: 3. Network Planning

    3. Network planning the significance of planning for even a small radio network is often neglected. A typical scenario in such cases goes as follows – there's not enough time (sometimes money) to do proper planning, so the network construction is started right away while decisions on antennas etc. A...

  • Page 33: 3.2. Frequency

    Centre rtu config. Pc rtu dummy antenna fig. 3.1: application bench test 3.2. Frequency often the frequency is simply given. If there is a choice, using the optimum frequency range can make a significant difference. Let us make a brief comparison of the most used uhf frequency bands. 160 mhz the bes...

  • Page 34: 3.3. Signal Budget

    News attached to this - the reliability of high speed links in such environment is once again limited. Otherwise, if network capacity is your main problem, then 900 mhz allows you to build the fastest and most reliable links. The price you pay (compared to lower frequency bands) is really the price ...

  • Page 35

    The available tx output power and guaranteed rx sensitivity level for the given data rate have to be declared by the radio manufacturer. Ripex values can be found in table 4.6, “technical parameters” and chap section 4.4.1, “detailed radio parameters”. Antenna gains and directivity diagrams have to ...

  • Page 36

    Are in different phases when hitting the receiving antenna. They may add-up, they may cancel each other out. Tx antenna fig. 3.3: multipath propagation what makes things worse is that the path length changes over time. Since half the wavelength – e.G. 0.3 m at 450 mhz - makes all the difference betw...

  • Page 37

    • directional antennas "do not work", e.G. A dipole placed at the right spot yields a better rss than a long yagi, or rotating the directional antenna shows several peaks and troughs of the signal and no clear maximum • rss changes rapidly (say 10 db) when antenna is moved by less than a meter in an...

  • Page 38: Correctly

    Alas, they are caused by pure multipath propagation, a self-made one. So always use a combiner and another directional antenna if such arrangement is needed. Always. Combiner correctly incorrectly fig. 3.5: main lobe 3.5. Network layout in general a radio network layout is mostly (sometimes complete...

  • Page 39

    Entire network. We need to be careful that these hill top systems are well engineered with appropriate filtering and antenna spacing so that the repeater radios operate under the best possible conditions. Hot standby repeaters can also improve the repeater integrity. Here is an analogy… it’s hard to...

  • Page 40: 3.6. Hybrid Networks

    • in report-by-exception networks the load of hops connecting the centre to major repeaters forms the bottle-neck of total network capacity. Moving these hops to another channel, or, even better, to a wire (fibre, microwave) links can multiply the throughput of the network. It saves not only the loa...

  • Page 41: 3.8. Recommended Values

    Generated noise. The ground plane forms an integral part of such an antenna, hence it has to be in a safe distance (several metres) from any electronic equipment as well as the antenna itself. A metallic plate used as shielding against interference must not form a part of the antenna. Incorectly cor...

  • Page 42

    • dq (data quality) min. 180 • per (packet error rate) max. 5 % ripex radio modem & router – © racom s.R.O. 42 network planning.

  • Page 43: 4. Product

    4. Product ripex is built into a rugged die-cast aluminium casing that allows for multiple installation possibilities, see section 6.1, “mounting”. 4.1. Dimensions fig. 4.1: ripex dimensions 43 © racom s.R.O. – ripex radio modem & router product.

  • Page 44

    Fig. 4.2: ripex dimensions – bottom din 35 rail din rail clip 134 150 118 58 50 fig. 4.3: ripex with din rail ripex radio modem & router – © racom s.R.O. 44 product.

  • Page 45

    Fig. 4.4: ripex dimensions with connectors for more information see section 6.1.1, “din rail mounting” and section 6.1.2, “flat mounting” 45 © racom s.R.O. – ripex radio modem & router product.

  • Page 46: 4.2. Connectors

    4.2. Connectors all connectors are located on the front panel. The upper side features an led panel. The reset button is located in an opening in the bottom side. Hw alarm output hw alarm input + – sleep input com1 com2 eth management wifi adapter eth/usb adapter antenna 10 – 30vdc + + eth fig. 4.5:...

  • Page 47

    Warning – hazardous locations antenna has to be installed outside of the hazardous zone. Fig. 4.7: separated rx and tx antennas warning: ripex radio modem may be damaged when operated without an antenna or a dummy load. 4.2.2. Power and control this rugged connector connects to a power supply and it...

  • Page 48

    Warning – hazardous locations the unit must be powered with an intrinsic save power source for use in hazardous locations. 1 2 3 4 5 6 pin no.: 7 si ai - + a0 + - 10–30vdc fig. 4.8: supply connector wire ports (7) retaining screws (2) lead binding screws (7) fig. 4.9: power and control - cable plug ...

  • Page 49

    If the external device requires connection to positive terminal of the power supply, pin 4 should be used. Power the power pins labelled + and - serve to connect a power supply 10–30 vdc. The requirements for a power supply are defined in section 6.6, “power supply” and section 4.4, “technical speci...

  • Page 50

    Fig. 4.11: serial connector tab. 4.3: com1, 2 pin description com2 – rs485 com1, 2 – rs232 dsub9f in/ out signal in/ out signal pin — out cd 1 in/out line b out rxd 2 in/out line a in txd 3 — in dtr 4 gnd gnd 5 — out dsr 6 — in rts 7 — out cts 8 — — — 9 ripex keeps pin 6 dsr at the level of 1 by rs2...

  • Page 51

    Note the flash disc has to contain the fat32 file system (the most common one at the time of writing). Any other file system will be simply ignored by the ripex. When in doubt, consult your it expert. Once the ripex recognizes a flash disc inserted into the usb interface, the status led starts blink...

  • Page 52

    All files/directories are optional, depending on the scope of upgrade. If no files are present, only data gathering will be performed. Note whenever an fw file (.Cpio) is found in the root directory of the disc, the upgrade is executed automatically, regardless of the version of the currently active...

  • Page 53

    Physical security = off: when button is depressed action if button released status led action time [seconds] — goes dark 0 - 5 device reboot flashes green 5 - 15 default access settings, reboot flashes green faster 15 - 18 factory settings, reboot flashes red faster 30 - 33 physical security = on: w...

  • Page 54: 4.3. Indication Leds

    4.3. Indication leds fig. 4.15: indication leds tab. 4.5: key to leds description color the ripex os (linux) is running successfully green status reset button has been pressed dark reset after five-seconds pressing the reset button green flashes slowly default access after 15-seconds pressing the re...

  • Page 55

    4.4. Technical specification tab. 4.6: technical parameters radio parameters 135–154; 154–174; 215–240; 300–320; 320–340; 340–360; 368–400; 400–432; 432–470; 470–512; 928–960 mhz frequency bands 6.25 / 12.5 / 25 / 50 khz [1] channel spacing ±1.0 ppm frequency stability qam (linear): 16deqam, d8psk, ...

  • Page 56

    Electrical 10 to 30 vdc, negative gnd primary power 5 w/13.8 v; 4.8 w/24 v; (radio part rx power consumption rf power tx - exponential - fsk (4cpfsk, 2cpfsk) 13.8 v 24v 13.8 w 13.2 w 0.1 w 15.2 w 14.4 w 1 w 33.1 w 31.2 w 5 w 41.4 w 38.4 w 10 w 30.4 w 30 w 0.5 w tx - linear - qam (16deqam, d8psk, π/4...

  • Page 57

    Modbus tcp, iec104, dnp3 tcp, comli tcp, terminal server… user protocols on ethernet modbus rtu / modbus tcp, dnp3 / dnp3 tcp serial to ip convertors protocol on radio channel yes multi master applications yes report by exception yes collision avoidance capability yes remote to remote communication ...

  • Page 58

    Standards ce, fcc, atex etsi en 300 113-2 v1.5.1 etsi en 302 561 v1.3.2 spectrum (art 3.2) fcc part 90, fcc part 101 etsi en 301 489-1 v1.9.2 emc (electromagnetic compatibility) (art 3.1.B) etsi en 301 489-5 v1.3.1 ieee 1613:2009 class 1 electric power substations environ- ment en 60950-1:2006 en 60...

  • Page 59

    4.4.1. Detailed radio parameters the very first parameter which is often required for consideration is the receiver sensitivity. Anyone interested in the wireless data transmission probably aware what this parameter means, but we should regard it simultaneously in its relation to other receiver para...

  • Page 60

    Tab. 4.9: ce 50 khz ce 50 khz rx blocking or desensitization [dbm] sensitivity [dbm] classification ±10 mhz ±5 mhz ±1 mhz ber 10 -6 ber 10 -3 ber 10 -2 modulation fec kbps -14 -14 -16 -107 -111 -114 2cpfsk 0.75 15.62 -14 -15 -16 -106 -110 -113 2cpfsk 1.00 20.83 -18 -18 -19 -101 -105 -108 4cpfsk 0.75...

  • Page 61

    Tab. 4.10: ce 25 khz ce 25 khz rx blocking or desensitization [dbm] sensitivity [dbm] classification ±10 mhz ±5 mhz ±1 mhz ber 10 -6 ber 10 -3 ber 10 -2 modulation fec kbps -5 -6 -8 -111 -115 -118 2cpfsk 0.75 7.81 -7 -8 -10 -110 -114 -117 2cpfsk 1.00 10.42 -7 -9 -9 -107 -112 -115 4cpfsk 0.75 15.63 -...

  • Page 62

    Tab. 4.11: ce 12.5 khz ce 12.5 khz rx blocking or desensitization [dbm] sensitivity [dbm] classification ±10 mhz ±5 mhz ±1 mhz ber 10 -6 ber 10 -3 ber 10 -2 modulation fec kbps -3 -4 -6 -113 -117 -120 2cpfsk 0.75 3.91 -5 -6 -8 -112 -116 -119 2cpfsk 1.00 5.21 -5 -6 -6 -108 -114 -117 4cpfsk 0.75 7.81 ...

  • Page 63

    Tab. 4.12: ce 6.25 khz ce 6.25 khz rx blocking or desensitization [dbm] sensitivity [dbm] classification ±10 mhz ±5 mhz ±1 mhz ber 10 -6 ber 10 -3 ber 10 -2 modulation fec kbps +5.5 +1.0 -0.5 -114 -120 -122 2cpfsk 0.75 1.96 +4.0 -1.0 -2.5 -113 -119 -121 2cpfsk 1.00 2.61 +5.0 -0.0 -1.5 -111 -116 -119...

  • Page 64

    Tab. 4.13: fcc 50 khz fcc 50 khz rx blocking or desensitization [dbm] sensitivity [dbm] classification ±10 mhz ±5 mhz ±1 mhz ber 10 -6 ber 10 -3 ber 10 -2 modulation fec kbps -15 -16 -16 -108 -112 -115 2cpfsk 0.75 15.62 -15 -16 -17 -107 -111 -113 2cpfsk 1.00 20.83 -15 -21 -21 -103 -107 -110 4cpfsk 0...

  • Page 65

    Fcc 25 khz tx 26 db bandwidth obw 99% [khz] classification emission modulation kbps 23.6 18.5 18k6f1d 4cpfsk 20.83 22.8 19.7 19k8g1d π/4-dqpsk 34.72 22.6 19.8 19k8g1d d8psk 52.08 22.6 19.9 19k8d1d 16deqam 69.44 tab. 4.15: fcc 25 khz ripex-928, ripex-215 fcc 25 khz rx ripex-928, ripex-215 blocking or...

  • Page 66

    Tab. 4.16: fcc 12.5 khz fcc 12.5 khz rx blocking or desensitization [dbm] sensitivity [dbm] classification ±10 mhz ±5 mhz ±1 mhz ber 10 -6 ber 10 -3 ber 10 -2 modulation fec kbps -4 -5 -5 -108 -114 -117 4cpfsk 0.75 7.81 -6 -7 -7 -105 -112 -115 4cpfsk 1.00 10.42 -2 -2 -2 -109 -113 -115 π/4-dqpsk 0.75...

  • Page 67

    Fcc 6.25 khz tx 26 db bandwidth obw 99% [khz] classification emission modulation kbps 5.01 3.55 3k60f1d 4cpfsk 5.21 5.63 4.89 5k00g1d π/4-dqpsk 8.68 5.56 4.88 5k00g1d d8psk 13.02 5.63 4.87 5k00g1d 16deqam 17.36 tab. 4.18: narrow 25 khz narrow 25 khz rx blocking or desensitization [dbm] sensitivity [...

  • Page 68

    3. All the values above are guaranteed for temperatures from -30 to +60 °c (-22 to +140 °f) and for all frequency channels. 4. The ripex spurious response rejection is defined as "better than 70 db", where 70 db is the limit defined by etsi en 300 113. We confirm that the real measured values of thi...

  • Page 69: 4.5. Model Offerings

    4.5. Model offerings ripex radio modem has been designed to have minimum possible number of hardware variants. Dif- ferent hw models are determined by frequency, internal gps and separate connectors for rx and tx antennas. Upgrade of functionality does not result in on-site hardware changes – it is ...

  • Page 70

    Speed – enables the two highest data rates for 50 and 25 khz channel spacings (part no. Ripex-sw-speed) com2 – enables the second serial interface configurable as rs232 or rs485 (part no. Ripex-sw-com2) 10w – enables rf output power 10 w for cpsk modulations (part no. Ripex-sw-10w) backup routes – e...

  • Page 71

    Ripex_d_rack_48 – 19" rack shelf double, incl. 2× ps 48 vdc / 24 vdc ripex_s_rack_ms – 19" rack shelf single, incl. Ms2000/12 + aku 7.2 ah ripex_s_rack_230 – 19" rack shelf single, incl. Ps 100–256 vac / 24 vdc ripex_s_rack_48 – 19" rack shelf single, incl. Ps 48 vdc / 24 vdc others ripex_x5 – eth/u...

  • Page 72: 4.6. Accessories

    4.6. Accessories 1. Ripex hot standby ripex-hs is redundant hot standby chassis. There are two hot-stand-by standard ripex units inside. In case of a detection of failure, automatic switchover between ripex units sis performed. Ripex-hs is suitable for central sites, repeaters or important remote si...

  • Page 73

    3. Wifi adapter fig. 4.19: wifi adapter wifi adapter for service access to the web inter- face via usb connector. Includes a built-in dhcp server which provides up to 5 leases. To access the ripex always use the fixed ip 10.9.8.7. For details on use see section 5.3, “connecting ripex to a programmin...

  • Page 74

    • outside dimension: 455 × 365 × 185 mm • weight approx. 4 kg (excluding the ripex and m!Dge units) 5. L-bracket fig. 4.21: l-bracket installation l bracket for vertical mounting. For details on use see chapter mounting and chapter dimensions. 133 124 60 122 l - bracket 32 100 fig. 4.22: ripex with ...

  • Page 75

    95 174 184 flat - bracket 134 150 118 58 50 70 fig. 4.24: ripex with flat-bracket 95 174 184 8 70 75,4 2×o4,5 4×m3 / 101 fig. 4.25: flat-bracket dimensions 7. 19" rack shelf – single • 1,6u (70 mm) high • ready for assembly with one ripex • weight 2.5 kg (without power supply and ripex) • can be ass...

  • Page 76

    Fig. 4.26: 19" rack shelf fig. 4.27: 19" rack shelf – dimensions 8. 19" rack shelf – double • 1,6u (70 mm) high • ready for assembly with two ripex’es • can be assembled with power supplies ○ 100 – 256 v ac / 24 v dc ○ 230 v ac / 24 v dc ○ 48 v dc / 24 v dc ○ ms2000/12 + back up battery 7.2 ah ripex...

  • Page 77

    Fig. 4.28: 19" rack shelf – double fig. 4.29: 19" rack shelf–double – dimensions 77 © racom s.R.O. – ripex radio modem & router product.

  • Page 78

    9. Dummy load antenna fig. 4.30: dummy load antenna dummy load antenna for ripex is used to test the configuration on a desk. It is unsuitable for higher output – use transmitting output of 1.0 w only. 10. Coaxial overvoltage protection fig. 4.31: overvoltage protection frequency range 100-512 mhz, ...

  • Page 79

    13. Migration serial cable this is an rs232 crossing cable (null-modem) for connection of legacy base station to ripex. There is also ‘carrier on’ contact available for legacy base station keying (relay dry contact), managed by cts envelope from ripex. Fig. 4.34: cable connection fig. 4.35: migratio...

  • Page 80: 5. Bench Test

    5. Bench test 5.1. Connecting the hardware before installing a ripex network in the field, a bench-test should be performed in the lab. The ripex demo case is great for this as it contains everything necessary: 3 ripex’s, power supply, dummy load antennas, etc. If you use your own installation for l...

  • Page 81

    1. Using the external wifi adapter 2. Using the external eth/usb adapter 3. Directly over the ethernet interface https://192.168.169.169 pc 192.168.169.250 https://10.9.8.7 pc dhcp https://10.9.8.7 pc dhcp fig. 5.2: connecting to a pc over eth and over wifi or eth/usb adapter 1. Pc connected via wif...

  • Page 82

    Start > settings > network connections > local area connections right click > properties > general select internet protocol (tcp/ip) > properties > general ip address 192.168.169.250 - for ripex in the default state subnet mask 255.255.255.0 default gateway leave empty ok (internet protocol properti...

  • Page 83

    Certificate. You must install this certificate into your web browser (mozilla firefox, internet explorer). The first time you connect to the ripex, your computer will ask you for au- thorisation to import the certificate into your computer. The certificate is signed by the certification authority ra...

  • Page 84: 5.4. Basic Setup

    Warning: before you start any configuration, make sure only one unit is powered on. Otherwise, a different radio modem could reply to your requests! (all units share the same ip address and are in bridge mode when in factory settings.) 5. Ip address unknown if you don’t have the adapter or you have ...

  • Page 85: 6. Installation

    6. Installation step-by-step checklist 1. Mount ripex into cabinet (section 6.1, “mounting”). 2. Install antenna (section 6.2, “antenna mounting”). 3. Install feed line (section 6.3, “antenna feed line”). 4. Ensure proper grounding (section 6.4, “grounding”). 5. Run cables and plug-in all connectors...

  • Page 86

    Fig. 6.2: flat widthwise mounting to din rail when tightening the screw on the clip, leave a 0,5 mm gap between the clip and the washer. Fig. 6.3: clip mounting for vertical mounting to din rail, l-bracket (optional accessory) is used. Only use the m4×5 mm screws that are supplied. Use of improper s...

  • Page 87

    6.1.2. Flat mounting for flat mounting directly to the support you must use the flat bracket (an optional accessory). Only use the m4×5 mm screws that are supplied. Use of improper screws may result in damage to the ripex mainboard! Fig. 6.6: flat mounting using flat bracket fig. 6.7: flat mounting ...

  • Page 88: 6.2. Antenna Mounting

    6.1.3. 19" rack mounting for installation into the 19" rack you can use the 19" rack shelf – single or 19" rack shelf- double for one or two ripexes. 19" rack shelf is an optional accessory delivered with/without a power supply. Fig. 6.8: rack shelf 6.1.4. Ip51 mounting to meet ip51 protection requi...

  • Page 89: 6.3. Antenna Feed Line

    Additional safety recommendations only qualified personnel with authorisation to work at heights are entitled to install antennas on masts, roofs and walls of buildings. Do not install the antenna in the vicinity of electrical lines. The antenna and brackets should not come into contact with electri...

  • Page 90: 6.6. Power Supply

    6.6. Power supply we do not recommend switching on the ripex’s power supply before connecting the antenna and other devices. Connecting the rtu and other devices to ripex while powered increases the likelihood of damage due to the discharge of difference in electric potentials. 10 – 30vdc + + +10 to...

  • Page 91: 7. Advanced Configuration

    7. Advanced configuration this chapter is identical with the content of helps for individual menu. 7.1. Menu header ripex can be easily managed from your computer using any web browser (mozilla firefox, microsoft internet explorer, etc.). If there is an ip connection between the computer and the res...

  • Page 92

    When a remote ripex is successfully connected, the disconnect button shows up. When the disconnect process is executed, the local ripex (ip address in the local box) can be managed and the unit name in the "values from" box changes accordingly. • logout use the logout link in the top right corner of...

  • Page 93: 7.2. Status

    7.2. Status fig. 7.3: menu status 7.2.1. Device, radio, eth&com this part of status page displays basic information about the ripex (e.G. Serial no., mac addresses, hw versions etc.) and overview of its most important settings. Configurable items are underlined and one click can take you to the resp...

  • Page 94: 7.3. Settings

    7.3. Settings fig. 7.4: menu settings 7.3.1. Device ■ unit name default = noname each unit may have its unique name – an alphanumeric string of up to 32 characters. Utf8 is supported. Following characters are not allowed: " (double quote) ` (grave accent) \ (backslash) $ (dollar symbol) ; (semicolon...

  • Page 95

    ■ operating mode list box: bridge, router default = bridge operating mode defines whether the ripex unit acts as a simple transparent device (bridge mode) or ethernet router (router mode). Bridge bridge mode is suitable for point-to-multipoint networks, where master-slave application with polling-ty...

  • Page 96

    ■ hot standby when ripex unit is used in ripex-hs and hot standby is "on" there are some limitations with it. Specifically, cd pin on com1 and hw alarm input and output are used internally and not available to the user. Neither save nor sleep modes can be activated. Please refer ripex-hs user manual...

  • Page 97

    Fill in the date in the required format when auto toggle mode starts. Start time [hh:mm:ss] fill in the time in the required format when auto toggle mode starts on "start date" day. Period [min.] minimum value 60 min. Within this period units "a" and "b" will change their activities over. Unit "a" s...

  • Page 98

    Date [yyyy-mm-dd] fill in local date in required format time [hh:mm:ss] fill in local time in required format ripex time zone select ripex time zone from list box. Default = (gmt +1:00) central europe this time zone is used for conversion of internal unix epoch time to "human readable date&time" in ...

  • Page 99

    Default = on if on, daylight saving is activated according the respective rules for selected ripex time zone. Ripex ntp server information about the status of internal ntp server in the ripex state not synced - not synchronized synced to gps - synchronized to internal gps synced to ntp - synchronize...

  • Page 100

    ■ snmp you can read more about snmp in ripex (mib table description incl.) in application note "ripex snmp configuration guide" here: http://www.Racom.Eu/eng/products/m/ripex/app/snmp.Html list box: off, v1/v2c/v3, v3 only default = off when enabled, ripex works as a standard snmp agent, i.E. It res...

  • Page 101

    (space) when there is not any char. Filled, default value (public) is used. Snmp v3 security user name this user name is used for authentication with snmp manager. Max. Length is 32 chars. Following characters are not allowed: " (double quote) ` (grave accent) \ (backslash) $ (dollar symbol) ; (semi...

  • Page 102

    $ (dollar symbol) ; (semicolon) (space) snmp notification list box: off, trap, inform default = off the snmp notification can be activated. The snmp trap or snmp inform can be used to notify the remote management station(s) of unit alarms. The unit alarms are generated ac- cording to the settings in...

  • Page 103

    ■ firewall ip (l3) list box: off, on note: the l3 firewall may be activated in both the router and bridge modes. Default = off if "on", a standard layer 3 linux firewall is activated. Port – a range of port numbers can be entered. E.G. 2000-2120. Connection state – state-firewall active only for tcp...

  • Page 104

    Note 3: l3 firewall settings do not impact packets received and redirected from/to radio channel. The problem described in note 2 will not happen when the affected ripex router is a radio repeater, i.E. When it uses solely the radio channel for both the input and output. Mac (l2) list box: off, on d...

  • Page 105

    ■ alarm management the average values of parameters listed in the table (watched values) are continuously monitored. When any of them exceeds the respective threshold, the selected action(s) is(are) invoked. Note: at least 10 values have to be included on average before it is checked for the possibl...

  • Page 106

    After reboot all snmp traps for active alarms (out of thresholds) are re-sent, hw alarm input (hs active when hot standby is "on") included. When statistic and neighbours logs are cleared, rsscom, dqcom, eth, com1, com2 alarms are cleared as well. When hot standby is "on", alarm thresholds and hw al...

  • Page 107

    ■ power management power supply mode list box: always on, save mode, sleep mode default = always on always on ripex is always on, no special power saving modes are active. Save mode when a ripex is switched to the save mode, it can be in one of two states – the save state or the active state. In the...

  • Page 108

    Any ip address routed through this ripex. I.E. Ripex is woken up not only with packets which end in it, but also with packets which end in the connected device behind ripex or which are relayed over the radio channel (when this ripex is configured as the repeater for them). When an unexpected reboot...

  • Page 109

    ■ wifi list box: off, on default = on when "on", ripex management can be executed over wifi using the w1 - wifi/usb adapter from ripex accessories. This equipment must be plugged into ripex usb interface. You just switch on wifi in your device (notebook, tablet, smartphone…) and connect it to the ri...

  • Page 110

    Channel your wifi can work on different channels within 2,4 ghz band. When the selected channel is noisy, i.E. Your wifi connection is not stable, you can try another one. List box: possible values default = 1 security list box: possible values default = off off if "off", wifi is without any securit...

  • Page 111

    ■ neighbours&statistics parameters list box: default, manual default = default default default (recommended) values are set and can not be edited. Manual values can be set manually. There are 2 tables with diagnostic information in the main menu - diagnostic/neighbours, dia- gnostic/statistic. The n...

  • Page 112

    ■ graphs parameters list box: default, manual default = default graphs displays history of watched values and history of some of the items from the statistic table. Displayed values are stored in each ripex including data from selected five neighbouring units. Neighbour = ripex, which can be accesse...

  • Page 113

    Oldest data is replaced. The detail graph files may not cover a continuous segment of history. See detail graph start for details. Detail graph start list box: no, alarm, single, continual default = no detail graph data sampling is started based on selected event from list box: no – detail graph doe...

  • Page 114

    ■ management parameters list box: default, manual default = default default default (recommended) values are set and can not be edited. Manual values can be set manually. Web server list box: http+https, https, off default = http+https required protocol for configuration web page is set here. If "of...

  • Page 115

    Ssh port default = 22 just for information, can not be changed. Physical security list box: off, on default = off when "on", external flash disc access is disabled (it is not possible to download or upload the configuration automatically). When the hw reset button is pressed, "total purge" instead o...

  • Page 116

    7.3.2. Radio there are 2 different operation modes in ripex: bridge and router with 3 different protocols on radio channel: transparent used in bridge mode, flexible and base driven used in router mode. Radio channel protocols configuration differs for each of the protocols: ■ radio protocol common ...

  • Page 117

    There is only a link to them in description of the respective radio protocol. * these items are active only when in router mode ** these items have to be set in accordance with the license issued by the respective radio regulatory authority mode** ripex allows multiple settings of modulation paramet...

  • Page 118

    Modulation rate [kbps]** list box: possible values possible values in list box are dependent on the modulation type setting. The two highest rates for 25 and 50 khz channel spacing are available only when the corresponding sw feature key is active (either the 166/83 kbps key or the master key). High...

  • Page 119

    Queue size [kb] default = 5 [1 - 48] queue size dictates the total size of all records that can be held in the queue. Tx buffer timeout list box: off, on default = off the frames waiting for transmission in the radio protocol output frame queue will be discarded after the tx buffer timeout expires. ...

  • Page 120

    ○ transparent //operating mode = bridge bridge mode with transparent radio protocol is suitable for point-to-multipoint networks, where master-slave application with polling-type communication protocol is used. The transparent protocol does not have collision avoidance capability. A crc check of dat...

  • Page 121

    It is possible to use more than one repeater within a network. To eliminate the risk of creating a loop, the "number of repeaters" has to be set in all units in the network, including the repeater units themselves. Warning: should repeater mode be enabled "modulation rate" and "fec" must be set to t...

  • Page 122

    ○ flexible //operating mode = router router mode with flexible protocol is suitable for multipoint networks of all topologies with un- limited number of repeaters on the way, and all types of network traffic where multi-master ap- plications and any combination of simultaneous polling and/or report-...

  • Page 123

    Default = 120 rss (received signal strength) limit for access to radio channel. Ripex does not start transmitting when a frame is being received and the rss is better than the set limit or when the destination mac address of the frame is its own. Repeat com broadcast list box: on, off default = off ...

  • Page 124

    Mv – value "max variable [no]" [0..Mv] represents a random number from sequence 0 to mv (limiting values included). Progressivity list box: off, on default = off when on, the prog value used in the formula above is calculated as follows: prog = ft * (nr - 1) ft – see above nr – the retransmission se...

  • Page 125

    The range from which the random integer number is chosen to multiply the slot length in order to get the access time period. This value is used when the previous channel event was a data frame reception (by the same radio). Note that ack is not considered a data frame. Slots after tx [no] default = ...

  • Page 126

    ○ base driven //operating mode = router router mode with base driven protocol is suitable for a star network topology with up to 256 remotes under one base station. Each remote can simultaneously work as a repeater for one or more additional remotes. This protocol is optimized for tcp/ip traffic and...

  • Page 127

    • base only one base station should be present within one radio coverage when base driven protocol is used. Italicised parameters are described in common parameters. Mode modulation type modulation rate fec remotes radio protocol parameters for every remote station must be configured in this table. ...

  • Page 128

    Set value is used in one direction from base to remote (remote to base direction is configured in remote unit in its radio protocol settings). If the remote station is behind repeater, set value is used for both radio hops: base station - repeater and repeater - remote. Retries set value is used in ...

  • Page 129

    Advanced parameters tx buffer queue length queue size [kb] tx buffer timeout tx buffer timeout [s] others query timeout [s] default = 3 [1 - 31] when any remote doesn't communicate with the base within a query timeout period, base station transmits 'query packet' in order to find out whether this 'n...

  • Page 130

    . • remote up to 256 remote stations can be configured under one base station. Any remote station [stand-alone, repeater or behind a repeater] must also be configured in base station/radio protocol/remotes. If a frame needs to be routed from one remote station to another remote station, it must be r...

  • Page 131

    Tx buffer queue length queue size [kb] tx buffer timeout tx buffer timeout [s] others radio arp timeout [min] ■ ip* default = 10.10.10.169 ip address of radio interface ■ mask* default = 255.255.255.0 network mask of radio interface ■ tx frequency** transmitting frequency. Format mhz.Khz.Hz. Step 5 ...

  • Page 132

    Note: max. Rf power for ripex-470 is 8 w. (even if there was 10w in list box for fw ver. 1.3.X.X and older) ■ optimization* list box: on, off default = off optimization is applicable in router mode for packets directed to radio channel. It watches packets on individual radio links and optimizes both...

  • Page 133

    When a packet to be transmitted from the radio interface is longer than the mtu (maximum transmission unit) set, the ripex router performs standard ip fragmentation. A packet longer than the configured size is split into the needed number of fragments, which are then independently transmitted - the ...

  • Page 134

    7.3.3. Eth * active only when router mode ■ ip default = 192.168.169.169 ip address of eth interface ■ mask default = 255.255.255.0 mask of eth interface ■ default gw default = 0.0.0.0 (= not active) when operating mode is set to bridge, it is the default gateway (applies to whole ripex). When opera...

  • Page 135

    Start ip default = ip address of eth interface + 1 dhcp server assigns addresses to connected clients starting from this address. End ip dhcp server assigns ip addresses to clients from the range defined by start ip and end ip (inclusive). No of leases default = 5 [1 - 255] maximum number of dhcp cl...

  • Page 136

    ** - denotes items to be used only when either all or some rtus (remote telemetry unit) on remote sites are connected via rs232 or rs485 interface to ripex, using the modbus rtu protocol. Then automatic conversion between modbus tcp and modbus rtu protocols takes place for such units. List box: on, ...

  • Page 137

    When the ip destination address of the udp datagram, in which serial scada message received from com1(2) is encapsulated, is created, this base ip is taken as the basis and only the part defined by mask is replaced by 'protocol address'. Mask default = 255.255.255.0 a part of base ip address defined...

  • Page 138

    Active you may tick/untick each translation line in order to make it active/not active. Modify delete and add buttons allow to add or to delete a line. The lines can be sorted using up and down arrows. ■ terminal servers* generally a terminal server (also referred to as a serial server) enables conn...

  • Page 139

    Note: max. User data length in a single datagram processed by the terminal server is 8192 bytes. ■ tcp proxy* compared to udp, the tcp protocol generates more load (longer headers, extra handshake data- grams), which in some circumstances may significantly reduce the user data throughput in a nar- r...

  • Page 140

    Active you may tick/untick each line in order to make it active/not active. Modify delete and add buttons allow to add or to delete a line. The lines can be sorted using up and down arrows. ■ arp proxy & vlan general description arp proxy (router mode only) when a remote device connected over a rout...

  • Page 141

    Vlan settings apply only to packets destined to the local ripex (e.G. Management traffic, terminal server sessions etc.) all the remaining packets (frames) are processed transparently by the bridge regardless of their vlan tags (these are kept untouched). Packets forwarded to the radio interface are...

  • Page 142

    Note 1: when two ripex units are connected via their ethernet ports in the same lan, their ip networks defined on radio interface must not overlap (both units would reply to the same arp request). Note 2: it is highly recommended to activate arp proxy as the last change when all the other settings a...

  • Page 143

    7.3.4. Com * active only when router mode the com ports in ripex are served by special daemons, which are connected to the ip network through a standard linux socket. Consequently a com port can be accessed using any of the two ip addresses (either eth or radio interface) used in a ripex and the res...

  • Page 144

    Default = 19200 select baud rate from the list box: 300 to 115200 bps rates are available. Serial ports use two-level (binary) signaling, so the data rate in bits per second is equal to the symbol rate in bauds ■ data bits list box: 8, 7 default = 8 the number of data bits in each character. ■ parit...

  • Page 145

    Rts/cts (request to send / clear to send) hardware flow control (handshake) between the dte (data terminal equipment) and ripex (dce - data communications equipment) can be enabled in order to pause and resume the transmission of data. If rx buffer of ripex is full, the cts goes down. Note: rts/cts ...

  • Page 146

    Ripex radio network works in ip environment, so the basic task for protocol interface utility is to convert scada serial packets to udp datagrams. The address translation settings are used to define the destination ip address and udp port. Then these udp datagrams are sent to ripex router, processed...

  • Page 147

    Scada master always sends addressed messages to slaves. The way of addressing is different from scada protocol to scada protocol, so this is one of the main reasons why an individual protocol utility in ripex for each scada protocol has to be used. Broadcast list box: on, off default = off some mast...

  • Page 148

    List box: com1,com2, ts1-ts5, mbtcp, manual. This udp port is used as the destination udp port in udp datagram in which serial scada packet received from com1(2) is encapsulated. Default udp ports for com1, com2 or terminal servers 1-5 (ts1-ts5) or modbus tcp (mbtcp) can be used or udp port can be s...

  • Page 149

    Scada slave typically only responds to master requests, however in some scada protocols it can communicate spontaneously. Messages from serial interface are processed in similar way as at master site, i.E. They are en- capsulated in udp datagrams, processed by router inside the ripex and forwarded t...

  • Page 150

    Frames format list box: format1,format2,format3,format4,format5 default = format1 one of the possible c24 frames formats can be selected. According to the c24 protocol spe- cification, it is possible to set frames formats 1-4 for protocol frames 1c-3c and formats 1-5 for 4c. Important the ripex acce...

  • Page 151

    Mode of connected device master address translation table mask slave ■ df1 only the full duplex mode of df1 is supported. Each frame in the allen-bradley df1 protocol contains the source and destination addresses in its header, so there is no difference between master and slave in the full duplex mo...

  • Page 152

    ■ iec 870-5-101 iec 870-5-101 is a serial polling-type communication protocol used by master-slave application. When ripex radio network run in router mode, more iec 870-5-101 masters can be used within one radio network and one slave can be polled by more masters. Iec 870-5-101 protocol configurati...

  • Page 153

    There is not a possibility to set the broadcast address, since itt flygt broadcast messages always have the address 0xffff. Hence when the broadcast is on, packets with this destination are handled as broadcasts. First slave address default = 1 slave addresses are not defined in the itt flygt protoc...

  • Page 154

    Default = 300 (min. 0, max. 8190) the repeat timeout parameter controls how long the unit waits for an acknowledgement frame (see retries parameter description). The timeout is started when the original frame received from the radio channel is transmitted to the connected device (over the serial cha...

  • Page 155

    Ack list box: on, off default = on frame acknowledgement when transmitted over wire (com or ethernet) interface. Ack (0x06) frames are transmitted on successful reception and nak (0x15) on unsuccessful frame reception. Ack timeout [ms] default = 1000 (min. 0, max. 65535) when "ack" is enabled, ripex...

  • Page 156

    Over the network in order to check whether the respective slave is still on. When the rb response from the slave to this rb packet is not received over the radio channel within the set rb timeout, i.E. The respective slave is out of order, the central ripex stops local answering to rb packets from t...

  • Page 157

    The 3964 protocol is utilized by the siemens company as a point-to-point connection between two controllers. Meanwhile it has developed into an industry standard that can be found on many devices as a universal communications interface. 3964r is the same as 3964, in addition it only uses bcc (block ...

  • Page 158

    Retries [no] default = 3 (min. 0, max. 7) when dle timeout is „on", and dle packet is not received from the connected device (rtu) within the set dle timeout, ripex retransmits the frame. The number of possible retries is specified. Priority list box: low, high default = low when the equipment sends...

  • Page 159

    ■ uni uni is the 'universal' protocol utility designed by racom. It is supposed to be used when the ap- plication protocol is not in the ripex list and the addressed mode of communication is preferable in the network (which is a typical scenario). The key condition is that messages generated by the ...

  • Page 160

    Note: it may happen, that a response from a slave (no.1) is delivered after the respective timeout expired and the master generates the request for the next slave (no.2) in the meantime. In such case the delayed response from no.1 would have been considered as the response from no.2. When poll respo...

  • Page 161: 7.4. Routing

    7.4. Routing routing table is active only when router mode (settings/device/operating mode) is set. In such a case ripex works as a standard ip router with 2 independent interfaces: radio and eth. Each interface has its own mac address, ip address and mask. Ip packets are then processed according th...

  • Page 162

    7.4.2. Routes ■ destination, mask, gateway each ip packet, received by ripex through any interface (radio, eth, com1 or com2), has got a destination ip address. Ripex (router) forwards the received packet either directly to the destination ip address or to the respective gateway, according to the ro...

  • Page 163

    Hello packets are used for path testing. Each direction (back and forth) is tested independently, i.E. The routing can be non-symmetrical. Data in the transmitted hello packet carry the information about received hello packets from the counterpart (peer ip). The path is evaluated as the good one, wh...

  • Page 164

    Manual – values can be set manually. Hello packet period [s] default = 60 sec, [max=3600] when the set period expires, the next hello packet is transmitted. To avoid the collisions, there is a jitter of approx. 5%. Hello packet success rate [%] list box: possible values default = 87.5 when succes ra...

  • Page 165: 7.5. Vpn

    7.5. Vpn 7.5.1. Ipsec fig. 7.7: menu ipsec ■ ipsec basic description internet protocol security (ipsec) is a network protocol suite that authenticates and encrypts the packets of data sent over a network. Ipsec includes protocols for establishing mutual authentication between agents at the beginning...

  • Page 166

    Symmetrical cryptography is used to encrypt the packets. The symmetric keys must be safely delivered to the peer. In order to maintain a secure connection, symmetric keys must be regularly exchanged. The protocol used for secure key exchange is ike (internet key exchange). Both ike version 1 and the...

  • Page 167

    The specific behavior depends on the "start state" and "dead-peer detection" parameters. The fastest transition occurs if the "start state" parameter is set to "start" value. ■ ipsec ipsec list box: on, off default = off ipsec system turning on/off make-before-break list box: on, off default = off t...

  • Page 168

    Traffic selectors "traffic selector" defines which traffic is forwarded to the ipsec tunnel. The rule that defines this selection matches an incoming packet to "local network" and "remote network" address ranges. Basic rules: each line contains the configuration settings of one child sa and indicate...

  • Page 169

    Default = on enables mobike for ikev2 supporting mobility or migration of the tunnels. Please note ike is moved from port 500 to port 4500 when mobike is enabled. The peer configuration must match. Dead peer detection list box: on, off default = on detection of lost connection with the peer. Ike tes...

  • Page 170

    The pfs (perfect forward secrecy) feature is performed using the diffie-hellman group method. Pfs increases ike sa key exchange security. The ripex unit load is seriously affected when key exchange is in process. The "legacy" marked methods are recognized as unsafe. Peer configuration must match. Th...

  • Page 171

    The sa lifetime for child sa is normally much shorter than sa lifetime for ike sa because the child sa normally transfers much more data than ike sa (key exchange only). Changing the keys serves as protection against breaking the cypher by analyzing big amounts of data encrypted by the same cypher. ...

  • Page 172

    Troubleshooting • user data packets are dropped until the ipsec connection is established. Icmp "admin pro- hibited" packets are sent back to the source address. The ping response is "packet filtered". • there is only one instance of the sa under normal conditions. When the key exchange is in proces...

  • Page 173

    7.5.2. Gre fig. 7.8: menu gre ■ gre tunnel basic description gre (generic routing encapsulation) is a tunneling protocol developed by cisco systems that can encapsulate a wide variety of network layer protocols inside virtual point-to-point links over an internet protocol network. From the point of ...

  • Page 174

    Tunnel ip/mask both sides of the tunnel must be configured with the same mask and different tunnel ip ad- dresses. The tunnel ip is used as a "gateway" when routing traffic to the tunnel. Routing of assigned packets to the gre tunnel is provided by the "routing" configuration. The "gateway" field sh...

  • Page 175

    Gre tunnel traffic can be protected using ipsec. Note: the ipsec traffic selector must be configured to capture the gre packets without inter- fering with the routing to the gre tunnel. When necessary, it is possible to add other addresses in "arp proxy & vlan" configuration. ■ gre diagnostics gre t...

  • Page 176: 7.6. Diagnostic

    7.6. Diagnostic 7.6.1. Neighbours and statistic fig. 7.9: menu neighbours neighbours and statistics follow the same pattern. Most importantly, they share a common time frame. One log save period and one difference log (pair of clear and display buttons) apply to both logs. For both logs there is a h...

  • Page 177

    Notice, that the log start, last upd. And log uptime labels at the top change to diff. Start, diff. Upd. And diff. Uptime when the difference log is displayed. They show the respective values for difference log. History there is a possibility to display history logs using standard buttons. They are ...

  • Page 178

    • green background indicates, that the item is monitored for alarm and its average value is within the "normal" range (settings/device/alarm management) • red background indicates, that the item is monitored for alarm and its average value is in the alarm range (settings/device/alarm management) • w...

  • Page 179

    Statistic fig. 7.10: menu statistic statistic log provides information about communication on all interfaces: radio, eth, com1, com2 and eth protocols (modbus tcp, terminal servers, tcp proxy). Vlan packets are part of eth. Balloon tips provide on line help for all column names. These tips explain t...

  • Page 180

    Note remember that the ip source and ip destination addresses of user ip packets are not the ip addresses of ripexes who transport them. 1. 2. Eth protocol packets for tcp proxy are counted on "tcp socket", i.E. Between ripex ethernet and host device. Rx from host device to ripex, tx from ripex to h...

  • Page 181

    File period corresponds to the time, for which the values have been recorded in the file. The 60 samples per graph file result in (depending on the sampling period) 60 (2d 11:00:00), 120 (4d 23:00:00), 240 (9d 23:00:00) or 720 (29d 23:00:00) hours recorded in each file. • available files list box: p...

  • Page 182

    7.6.3. Ping fig. 7.12: icmp ping ping (packet internet groper) is a utility used to test the reachability of a particular host on an ip network. It operates by sending echo request packets to the target host and waiting for an echo response. In the process it measures the rtt (round trip time - the ...

  • Page 183

    ■ destination default = 127.0.0.1 destination ip address ■ length [bytes] default = 80 the length of user data, the range from 8 to 4096 byte. Some overhead to this length is always added like these: icmp - 28 bytes rss - 43 bytes for ip+udp+racom header + 8 bytes (trace-rss and dq) per each radio h...

  • Page 184

    Rtt min/avg/max/mdev round trip time, minimal/average/maximal/standard deviation ■ rss ping report rss ping report provides rich set of diagnostic information: rss ping from 192.168.141.213 to 192.168.141.215, size:80+43(+trace) 131 bytes from 192.168.141.215: seq=1 rtt=0.391s 192.168.141.213-->10.1...

  • Page 185

    Run-time report: rss ping from 192.168.141.213 to 192.168.141.215, size:80+43(+trace) 131 bytes from 192.168.141.215: seq=1 rtt=0.391s 192.168.141.213-->10.10.10.214 :52/229[rss/dq]--> 10.10.10.215 :45/220[rss/dq]-->192.168.141.215 192.168.141.215-->10.10.10.214 :45/232[rss/dq]--> 10.10.10.213 :51/2...

  • Page 186

    Radio hop with lowest rss – direction to destination rss: 52.0/52.0/52.0/0.0 min/avg/max/mdev dq : 220.0/221.0/223.0/1.4 min/avg/max/mdev radio hop with lowest rss – direction from destination rss: 51.0/51.3/52.0/0.5 min/avg/max/mdev dq : 229.0/230.0/232.0/1.4 min/avg/max/mdev there is rss (received...

  • Page 187

    7.6.4. Monitoring monitoring is an advanced on-line diagnostic tool, which enables a detailed analysis of communication over any of the ripex router interfaces. In addition to all the physical interfaces (radio, eth, com1, com2), some internal interfaces between software modules can be monitored whe...

  • Page 188

    A short demonstration of a monitoring message: 07:55:04.661446 [com1:phy:rx] length 2 0x0000: aaaa 07:55:04.674861 [rf:phy:tx] (88) ip 192.168.141.213.8881>192.168.141.214.8882: udp,length 32 0x0000: 0800 4500 001e 0000 4000 4011 9dd2 c0a8 0x0010: 8dd5 c0a8 8dd6 22b1 22b2 000a 72cf aaaa examples of ...

  • Page 189

    Available for radio, eth and internal radio (router), comn(router), tsn(router), modbus tcp(router), tcp proxy (tcp), tcp proxy(router): ip src ip source address range in the following format: aaa.Bbb.Ccc.Ddd/mask ip dst ip destination address range in the following format: aaa.Bbb.Ccc.Ddd/mask port...

  • Page 190

    • off – only frames which are normally received by this unit, i.E. Frames whose radio ip des- tination equals to radio ip address of this ripex unit and broadcast frames are processed further by monitoring filters. • on – all frames detected on the radio channel are passed to monitoring filters link...

  • Page 191

    The standard tcpdump program is used for eth monitoring. An arbitrary user rule in tcpdump syntax can be written in the text box. The rule is then added after the rules generated from the filters set for the eth interface on this web page. Note: not all general rules are supported. When unsupported ...

  • Page 192: Radio Modem Unit

    Buttons indicate that a change has been made. They turn red when the respective monitoring process is idle and they change into apply button when the monitoring is running, i.E. When the respective start (file start) button has been gray. Clicking the apply button enforces the configuration change (...

  • Page 193

    ■ monitoring examples monitoring examples - com, radio the hexadecimal data aaaa is coming through the port com1 and then the frame is sent over the radio channel. Monitored on ip address 192.168.141.213: 07:55:04.661446 [com1:phy:rx] length 2 0x0000: aaaa 07:55:04.674861 [rf:phy:tx] (88) ip 192.168...

  • Page 194

    Monitoring including internal interfaces. Monitored on ip address 192.168.141.213: 12:26:34.700971 [com1:phy:rx] length 2 0x0000: aaaa 12:26:34.701476 [com1:rou:tx] ip 0.0.0.0.8881 > 192.168.141.215.8882: udp, length 0+2 0x0000: aaaa 12:26:34.702074 [rf:rou:rx] ip 192.168.141.213.8881 > 192.168.141....

  • Page 195

    Ethernet frame received and transmitted via radio. Monitored on ip address 192.168.141.213: 08:23:19.197235 [eth] arp, request who-has 192.168.141.214 tell 192.168.141.212, length 46 0x0000: 0001 0800 0604 0001 0002 a949 c067 c0a8 0x0010: 8dd4 0000 0000 0000 c0a8 8dd6 0000 0904 0x0020: 690f 5600 aaa...

  • Page 196

    Internal errors and warning displayed by monitoring ■ errors (red background) ○ requested monitoring data missing required data for monitoring are not available for an unknown reason. Can be displayed on an independent line while any interface is being monitored. ○ rf preheader error "rf-preheader" ...

  • Page 197

    ○ rf interface not ready! Rf interface is not ready. May happen when system is booting, after reconfiguration, after radio part recalibration made automatically after some time etc. The packet is discarded. Displayed while "internal-radio" (tx) interface is being monitored as part of a packet header...

  • Page 198

    Displayed while "radio" (rx) interface is being monitored as part of a packet header. ○ stream mode frame the frame in "bridge/stream" format has been received, but operating mode is not bridge or frame closing (com) is not stream. Displayed while "radio" (rx) interface is being monitored as part of...

  • Page 199: 7.7. Maintenance

    7.7. Maintenance 7.7.1. Sw feature keys fig. 7.14: menu maintenance sw feature keys certain advanced ripex features have to be activated by software keys. On the right side one may see the list of available keys and their respective status values. Possible status values are: • not present • active •...

  • Page 200

    7.7.2. Configuration fig. 7.15: menu maintenance configuration unit • back up – back up saves the active configuration into a backup file in the unit. • restore – configuration saved in the backup file in the unit is activated and the unit reboots itself. • factory settings – sets the factory defaul...

  • Page 201

    The firmware in the unit consists of several parts, however they come in one firmware package (file_name.Cpio). Individual part names and their versions can be seen. There can be two versions of firmware packages stored within the unit – "active" and "archive". Unit is always using the active versio...

  • Page 202

    7.7.4. Administrator account fig. 7.17: menu maintenance administrator account the administrator account (user name "admin") is the primary account for unrestricted unit configuration. Password length is at least 5 and maximum 32 characters long. Only characters a-za-z0-9.:_- are al- lowed. It is hi...

  • Page 203

    When your ssl certificate consists of two files, fill in the key file, or browse your disk in order to find the file. When file(s) is selected, it can be uploaded. • upload – when pressed, the selected certificate is uploaded into the ripex, however it is not active yet. • apply – when pressed, the ...

  • Page 204

    – browse your disk in order to find the file with your user key and upload. This can be done only locally; this button is not active in the remote unit while using fast remote access. • save to file – the user key displayed in the box can be saved into a file. This can be done only locally and when ...

  • Page 205: 8. Cli Configuration

    8. Cli configuration cli interface (command line interface) is an alternative to web access. You can work with the cli interface in text mode using an appropriate client, either ssh (putty) or telnet. Cli “login” and “password” are the same as those for web access via browser. Access using ssh keys ...

  • Page 206

    Com mtu: 1600 bytes com handshake: none (n) com break length: 1000 chars com protocol: modbus (mod) the cli is a powerful tool for advanced management of ripex, especially suited for automated tasks. It is best learned through its own help system, hence it is not described in further detail here. Se...

  • Page 207

    Please select action (save, apply, cancel): s cli_cnf_set_radio: update saved. Cli(admin):~$ cli_cnf_set_com 1 -bitrate 19200 continuing from previous update(s). Updated values: com link type: rs232 (rs232) com bitrate: 19200 (19200) com data bits: 8 (8) com parity: even (e) com stop bits: 1 (1) com...

  • Page 208: 9. Troubleshooting

    9. Troubleshooting 1. I don’t know what my ripex’s ip is – how do i connect? • use the "x5" – external eth/usb adapter and a pc as a dhcp client. Type 10.9.8.7 into your browser’s location field. • alternatively, you can reset your ripex to default access by pressing the reset button for a long time...

  • Page 209

    Arp -d 192.168.169.169 or delete the entire table by typing: arp -d * then you can ping the newly connected ripex again. 5. I have assigned the ripex a new ip address and my pc lost connection to it. • change the pc’s ip address so that it is on the same subnet as the ripex. 6. I entered the router ...

  • Page 210: 10.1. Frequency

    10. Safety, environment, licensing 10.1. Frequency the radio modem must be operated only in accordance with the valid frequency license issued by na- tional frequency authority and all radio parameters have to be set exactly as listed. Important use of frequencies between 406.0 and 406.1 mhz is worl...

  • Page 211

    160 mhz/2 m band – 5 w rf power 90 190 5.8 7.6 stacked double dipole ov160.2 90 200 6.3 8.0 3 element directional yagi sa160.3 150 330 17.8 12.5 5 element directional yagi sa160.5 160 mhz/2 m band – 4 w rf power dist. Where the fcc limits are met for gain g [–] gain g [dbi] antenna description anten...

  • Page 212

    160 mhz/2 m band – 1 w rf power 70 150 17.8 12.5 5 element directional yagi sa160.5 tab. 10.2: minimum safety distance 216–220 mhz 216–220 mhz – 10 w rf power dist. Where the fcc limits are met for gain g [–] gain g [dbi] antenna description antenna code general population / controlled expos- ure [c...

  • Page 213

    300–400 mhz/70 cm band – 4 w rf power 50 110 5.8 7.6 3 element directional yagi sa380.3 60 130 7.4 8.7 5 element directional yagi sa380.5 90 200 17.8 12.5 9 element directional yagi sa380.9 300–400 mhz/70 cm band – 3 w rf power dist. Where the fcc limits are met for gain g [–] gain g [dbi] antenna d...

  • Page 214: 10.3. High Temperature

    300–400 mhz/70 cm band – 0.5 w rf power 15 30 2.9 4.6 single dipole ov380.1 20 40 5.8 7.6 stacked double dipole ov380.2 20 40 5.8 7.6 3 element directional yagi sa380.3 20 45 7.4 8.7 5 element directional yagi sa380.5 30 70 17.8 12.5 9 element directional yagi sa380.9 tab. 10.4: minimum safety dista...

  • Page 215: 10.5. Hazardous Locations

    This product may contain a battery. Batteries must be disposed of properly, and may not be disposed of as unsorted municipal waste in the european union. See the product docu- mentation for specific battery information. Batteries are marked with a symbol, which may include lettering to indicate cadm...

  • Page 216: Of Equipment

    Tab. 10.5: maximum voltage and current of individual interfaces recommended min. Cross section of cu wire max. Current max. Voltage in/out v03vh-h 2×0.5 5 a 30 vdc dc power 0.5 mm 2 v03vh-h 1×0.5 10 ma 30 vdc si 0.5 mm 2 v03vh-h 1×0.5 10 ma 30 vdc alarm input 0.5 mm 2 v03vh-h 1×0.5 2 a 30 vdc alarm ...

  • Page 217

    Conditions of use of this product software abide by the license mentioned below. The program spread by this license has been freed with the purpose to be useful, but without any specific guarantee. The author or another company or person is not responsible for secondary, accidental or related damage...

  • Page 219

    10.9. Simplified eu declaration of conformity bg С настоящото racom s.R.O. декларира, че този тип радиосъоръжение ripex-160, ripex-300, ripex-400 е в съответствие с Директива 2014/53/ЕС. Es por la presente, racom s.R.O. Declara que el tipo de equipo radioeléctrico ripex-160, ripex-300, ripex-400 es ...

  • Page 220

    Hu racom s.R.O. Igazolja, hogy a ripex-160, ripex-300, ripex-400 típusú rádióberendezés megfelel a 2014/53/eu irányelvnek. Mt b'dan, racom s.R.O., niddikjara li dan it-tip ta' tagħmir tar-radju ripex-160, ripex-300, ripex-400 huwa konformi mad-direttiva 2014/53/ue. Nl hierbij verklaar ik, racom s.R....

  • Page 221: 10.10. Atex Certificate

    10.10. Atex certificate fig. 10.2: atex certificate ripex, 1/3 221 © racom s.R.O. – ripex radio modem & router safety, environment, licensing.

  • Page 222

    Fig. 10.3: atex certificate ripex, 2/3 ripex radio modem & router – © racom s.R.O. 222 safety, environment, licensing.

  • Page 223

    Fig. 10.4: atex certificate ripex, 3/3 223 © racom s.R.O. – ripex radio modem & router safety, environment, licensing.

  • Page 224

    10.11. Compliance federal communications commission tab. 10.6: compliance federal communications commission fcc id fcc part code sqt-ripex-135 90 ripex-135 sqt-ripex-154 90 ripex-154 sqt-ripex-215 90 ripex-215 sqtra400-400 90 ripex-400 sqtra400-432 90 ripex-432 sqt-ripex-928 101 ripex-928 ripex radi...

  • Page 225: 10.12. Country Of Origin

    10.12. Country of origin country of origin declaration manufacturer: racom s.R.O. Address: mirova 1283, 592 31 nove mesto na morave, czech republic vat no: cz46343423 we, the manufacturer, hereby declare that country of origin of the and its accessories is the czech republic, eu. Ripex radio modem &...

  • Page 226: 10.13. Warranty

    10.13. Warranty racom-supplied parts or equipment ("equipment") is covered by warranty for inherently faulty parts and workmanship for a warranty period as stated in the delivery documentation from the date of dispatch to the customer. The warranty does not cover custom modifications to software. Du...

  • Page 227: 10.14. Ripex Maintenance

    10.14. Ripex maintenance note period action quarterly visual check – antenna: draining hole on dipole must be downward pointing there should be no damaged elements on the antenna angle of elevation of antenna azimuth (angle of horizontal deviation) in accordance with design annually visual check – c...

  • Page 228: Appendix A. Oid Mappings

    Appendix a. Oid mappings ripex internal snmp server messages (answers) contain oid according to rfc1157. "mib tables", and whole file "oid mappings" can be downloaded from: http://www.Racom.Eu/eng/products/radio-modem-ripex.Html#download more details are described in application note: see ripex app ...

  • Page 229: Appendix B. Abbreviations

    Appendix b. Abbreviations mdix medium dependent interface crossover ack acknowledgement aes advanced encryption standard mib management information base nms network management system atm automated teller machine ber bit error rate n.C. Normally closed n.O. Normally open cli command line interface cr...

  • Page 230

    Tcp transmission control protocol ts5 terminal server 5 tx transmitter udp user datagram protocol vswr voltage standing wave ratio weee waste electrical and electronic equipment ripex radio modem & router – © racom s.R.O. 230 abbreviations.

  • Page 231: Index

    Index a accessories, 72 addressing bridge, 16 router, 21 administrator account, 202 alarm in/out, 48 management, 105 antenna, 46 dummy load, 78, 80 mounting, 88 overvoltage, 78 separated, 69 antenna switch, 78 b base driven protocol, 126 base driven protocol, 24 basic setup, 84 bench test, 80 bridge...

  • Page 232

    Router, 19 base driven, 24 flexible, 20 mode offerings, 69 monitoring menu, 187 mounting bracket, 74, 86 din rail, 85 ip51, 88 rack, 75, 88 multipath propagation, 35 n neighbours, 111, 177 network example, 23 layout, 38 management, 29 planning, 32 o ordering code, 69 output hw, 48 p part number, 69 ...

  • Page 233

    Appendix c. Revision history revision this manual was prepared to cover a specific version of firmware code. Accordingly, some screens and features may differ from the actual unit you are working with. While every reasonable effort has been made to ensure the accuracy of this publication, product im...

  • Page 234

    2015-02-25 revision 1.10 changed information in section 4.6, “accessories” upgraded information in country of origin, vibration & shock and seismic qualification standards 2015-04-28 revision 1.11 added information about ripex-200 upgraded chapter safety, environment, licensing added physical securi...