SSL encryption
Network security is a very important
issue for many applications. This is especially
true for data that is transmitted over the Internet,
since data can be intercepted by third parties.
The NPort 6000 series of device servers uses the
SSL standard to implement secure modes of operation,
including secure TCP Server, secure TCP Client,
secure Pair-Connection, and secure Real COM. The
NPort 6000 server and PC drivers adhere to the
SSL standard and automatically negotiate the
encryption key. The NPort 6000 server will automatically
change the encryption method between DES/3DES
and AES to prevent hacker attacks.
Secure remote management and configuration with
SSHv2/SSL
Unauthorized access is one of the biggest headaches
for system managers. In addition to IP filtering
and password protection, NPort 6000 device servers
also provide extra protection from hackers by
using SSHv2 and SSL. To configure an NPort 6000
device server for secure data transmission, use
a web browser that supports https (e.g., Internet
Explorer) to open the server's web console, or
use a terminal emulator that supports SSH (e.g.,PuTTY)
to open the server's terminal or serial console.
HW encryption engine
NPort 6000 servers have a powerful hardware encryption
engine and support the complete DES/3DES/AES encryption
algorithms. For DES and 3DES, the NPort 6000 series
supports ECB, CBC, CFB, and OFB modes. For AES,
the series supports ECB, CBC, CFB, OFB, and CTR
modes with a 128-bit, 192-bit, or 256-bit key.
The HW encryption engine gives NPort 6000 servers
a throughput that can reach 250 Kbps for 16-port
encryption/decryption access.
802.3af Power over Ethernet
The NPort 6000 series of device servers supports
802.3af PoE (Power Over Ethernet), which means
that a server can be used without a power adaptor.
When an NPort 6000 server is installed at a site
that does not have an available power socket,
simply connect the server to an Ethernet switch
that supports PSE (Power Sourcing Equipment).
The PoE feature of NPort 6000 servers can be used
to provide power redundancy. If the power adaptor
fails, the appropriately configured NPort 6000
server will automatically switch to PoE without
suffering an interruption in service. When using
this feature, make sure that your Ethernet cables
support power inputs.
Off-line port buffering
For mission-critical applications, data collected
through the device server's serial ports cannot
be discarded even if the Ethernet connection is
severed. NPort 6000 servers provide a powerful
function for just this purpose. When the Ethernet
connection is down, data is stored in the NPort
6000's port buffers. Once the Ethernet line has
been reconnected, the buffered data will be sent
to the intended destination. The default size
of the port buffer is 64 KB for each port, but
users can increase the port buffer size for NPort
6250/6450/6650 by installing an external SD card.
Ethernet switch expansion module
Although more and more devices are now Ethernet-ready,
many legacy devices are only able to connect to
a serial interface. The main purpose of device
servers such as the NPort 6450 or NPort 6650 is
to connect serial devices to Ethernet, thereby
giving engineers the ability to manage all devices
in an integrated Ethernet environment. However,
a problem can arise if both Ethernet-ready and
legacy serial devices must be connected from the
same location. For NPort 6450 and 6650 servers,
an Ethernet switch expansion module can be used
to add more Ethernet ports. The expansion module
effectively allows the NPort 6450 or 6650 server
to function as both an Ethernet switch and a serial
device serve, eliminating the need to invest in
a separate, more expensive switch or hub. Modules
are available with copper, multi-mode fiber, or
single mode fiber ports. The Ethernet switch expansion
modules can also be used to create a cascade topology
that consists of a daisy-chain of NPort 6450 or
6650 servers.
Easy-to-use LCM
console
The NPort 6450 and 6650 have a built-in LCM console
that allows IP configuration without requiring
a connection to a computer. After assigning an
IP address to the server, users can use the built-in
"ping" function, accessible from the
front panel, to verify that the IP address is
correct and unique on the network.
|