Enertex ENA Guida rapida

Manual and Configuration

ENA (Electronic Network Defense)

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - [email protected]

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 2 von 33

Without prior written approval y Enertex® Bayern Gm H, the contents of this document may not e re-

produced, transferred, distri uted or stored in any form, either in whole or in part.

Enertex® is a registered trademark of Enertex® Bayern Gm H. Other product and company names which

are mentioned in this manual can e marketing or tradenames of their respective owners.

This manual can e changed without notification or announcement, and does not claim to completeness

or accuracy.

Inhalt

Note................................................................................................................................................................ 3

Function Description...................................................................................................................................4

Remote Maintenance............................................................................................................................... 4

Secure Connection to your Home............................................................................................................4

On Demand (nur iOS)............................................................................................................................... 5

Secure Internet Connection.....................................................................................................................5

General view............................................................................................................................................ 5

Specifications............................................................................................................................................... 7

K X.......................................................................................................................................................... 7

Installation and Connection........................................................................................................................8

Commissioning............................................................................................................................................8

Quick Guide.............................................................................................................................................. 8

Web Interface................................................................................................................................................ 8

etwork.................................................................................................................................................... 9

Time Server..............................................................................................................................................................9

Dynamic D S........................................................................................................................................... 9

Experts Options......................................................................................................................................................10

Public-Key-Infrastructure........................................................................................................................ 10

Operating Mode......................................................................................................................................................11

Import......................................................................................................................................................................11

Chrome.............................................................................................................................................................12

Firefox..............................................................................................................................................................12

iOS...................................................................................................................................................................12

Expert-Options........................................................................................................................................................12

HTTPS Reverse Proxy...........................................................................................................................12

User Administration................................................................................................................................................13

Connecting Domain Name ....................................................................................................................................13

OpenVP ............................................................................................................................................... 13

User Administration................................................................................................................................................13

Download of Configuration Data Files...................................................................................................................13

iOS VPN "on demand"...........................................................................................................................................14

Experts Options......................................................................................................................................................14

Connection Settings.........................................................................................................................................14

Automatically Unlink Connection.....................................................................................................................14

OpenVPN Client Setup...........................................................................................................................................14

iOS 8.3.............................................................................................................................................................14

Android 5.1.......................................................................................................................................................20

Windows 7........................................................................................................................................................25

K X Connection.....................................................................................................................................29

KNXnet/IP Connection...........................................................................................................................................29

OpenVPN-KNX connection....................................................................................................................................30

Administration......................................................................................................................................... 31

Changing Login Details for We admin Surface.....................................................................................................31

Restart....................................................................................................................................................................31

Restore Factory Defaults.......................................................................................................................................31

Refresh Firmware...................................................................................................................................................31

Save the Configuration...........................................................................................................................................31

Restore Configuration............................................................................................................................................31

nderungsverzeichnis...............................................................................................................................32

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 3 von 33

Note

•Installation and assem ly of electrical equipment must e carried out y qualified electri-

cians.

•Connecting KNX/EIB interfaces requires specialized knowledge y KNX™ trainings.

•Non-o servance of the instruction can entail damange to the implement, fire or other ha-

zards.

•This instruction is component of the product and has to remain at the end user.

•The producer takes no responsi ility for charge or damage which are accured y using

this device to the user or third person, misusing or distur ance of the connection, distur-

ance of the device or devices of participants.

•The opening of the case other unauthorised changes and or re uilding of the device

leads to the expiration of the warranty!

•The producer is not in charge for not designated use!

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 4 von 33

Function Description

KNX and IT are connected more closely in Smarthome. There y the aspect of security of attacks

y third parties reaches a new dimension. Often this aspect is neglected ecause the electrician

has to maintain the complete system and the functionality of security reduces su stantially the

comfort of operating unit e.g. y cum ersome password entries.

The solution: The electronic network defense – ENA - of Enertex® Bayern Gm H.

Remote Maintenance

A remote maintenance of the system without functionality of security entitles IT-specialised crimi-

nals each posi ility to open electric pivots and doors et cetera. Via targeted attacks the entire IT

network of the whole family can e hacked.

With the ENA the otherwise extensively configurating function of security can e made easily

switcha le for the user via the visualisation or via the KNX utton. If you want to the remote

maintenance access can e opened or can e turned off. And you recognise if this is used –

simply at your KNX switches.

A ildung 1: Remote mainteance

Secure Connection to your Home

When you are in your home network the operation of visualisation, LAN devices are comforta le

accessi le via a specific APP.

The same comfort should e ensured too if you are on move, ut what is not possi le without a

secure connection.

With the ENA the secure aspect is guaranteed without resigning the user comfort.

A ildung 2: Secure connection to your home

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 5 von 33

On Demand (nur iOS)

The Enertex ENA offers secure access via internet to your home network. With the „on demand“

- technology optimal secure is guaranteed, without cum ersome password entries.

Just click on your APP. ENA and your iPhone deal the rest (tested with iOS 8 and 9).

Secure Internet Connection

With ENA you make your Internet connection safer in transit: You dial in via a pu lic internet ac-

cess in your home network and than you surf exclusively and securely via your private connenc-

tion.

A ildung 3: Secure internet connection

General view

The Enertex ENA offers secure access via Internet to your home network.

The setup of the equipment is possi le in a few steps in the simplest way:

•Easy configuration via a We rowser

◦Basic configuration

◦Applying security patches

◦Backup / restore of configuration

•Management of dynamic DNS (DDNS) a out following suppliers:

◦Dyn.com

◦FreeDNS

◦Gira DNS

◦No IP

•HTTPS reverse proxy with four redirects (2048 ite key)

•OpenVPN-Server

◦User management

◦User authentication using an encrypted PKCS#12 file

◦Encrypted data transfer at the highest level (AES-256)

•Creating the OpenVPN configuration files for:

◦iOS

◦Android

◦PC systems (Windows/OSX/Linux)

•Optional integration into the KNX system (KNXnet/IP interface or router required):

◦Opening and closing of the access authorisation of a user via KNX 1 it group ad-

dress i.e. Display whether a user actually uses the OpenVPN connection.

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 6 von 33

◦Display of connection status via KNX 1 ite group address i.e. Display whether a

user actually uses the OpenVPN connection.

◦Turn on/off of the OpenVPN server cia KNX 1 ite group address

•OpenVPN experten options – configura le easily

◦OpenVPN „on demand“ for Apple iOS

◦Lead external Internet connection via your own home network via VPN, if you e.g.

registered in a pu lic WLAN.

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 7 von 33

Specificati-

ons

Hardware

Dimensions Rail, 6 TE

Power supply 20 ... 30 V DC

Performance input 1,2 – 1,7 W (depends on LAN activity)

Interface Ethernet 10/100 M it/s

Software

Operating system Linux

OpenVPN Any num er of users

16 users controlla le via KNX

2048 ite RSA key

Transmission encryption AES-256

Perfect Forward Secrecy

HTTPS Reverse Proxy 4 forwarders

2048-Bit RSA key

Transmission encryption AES-256 Perfect For-

ward Secrecy

Dynamic DNS Administration of 4 Domains

Note

Some of the encryption methods depend on the capa ilities of the used link partners ( rowser,

OpenVPN Client, operating system).

KNX

An interface which is required to operate on the EIB/KNX system is not included in the delivery,

and may need to e procured separately.

We recommend:

• Enertex® KNXNet/IP Router

• Enertex® KNXNet/IP Interface

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 8 von 33

Installation and Connection

For the operation of the Enertex® ENA is required:

•A power supply with at least 2W output power: Safety extra-low voltage 20 to 30 VDC (direct

current)

•A 10/100 M yte compati le Ethernet connection

•An Internet connection for the remote control and port transmission in the router and access

to DNS server and NTP server

Please note:

The external safety extra-low voltage is connected via the device to the earth potential of the

LA . For this reason exists any isolation to earth, if the LA shield is grounded. To establish a

separation we advise to use an external low voltage power supply only for the Enertex® E A.

Commissioning

The oot time when engaging amounts to ca 60 seconds. The preadjustment for the network is

DHCP.

As soon as the green LED starts flashing, you can access ENA. You have to determine the IP

address of the device y using the router. Alternatively, the network can e scanned for devices

y smartphone. Thereto we recommend the APP „Fing“ (Android/iOS). The MAC address set to

work on 00:50:C2:79.

You enter the IP address in a We rowser and get that way to the We interface of the ENA.

Note

At the first startup ENA generates security certificates. Meanwhile there are not all settings

availa le in the We interface.

Quick Guide

1. Log on with the rowser of the ENA We interface: User admin, Password admin

2. Network: Configured IP addresses. Ensure ENA access to a DNS server an a NTP

server.

3. Dynamic DNS: Activate DDNS administration, choose DDNS provider, specify and apply

data of access and domain names. Wait and see till the PKI su system has finished.

4. Pu lic Key Infrastructur: Download the CA certificate and import it in rowser (Firefox,

Chrome) or operating system (Android/iOS).

5. HTTPS Reverse Proxy: Apply user name und password, connect the external DDNS

domains with HTTP hosts in LAN. Send Port 443 (TCP) on ENA.

6. OpenVPN: Add user and wait till PKI su system has ended. Download the matching

configuration on your terminal device. Send Port 1194 (UDP) on ENA.

7. Specify IP address of KNXnet/IP interfaces. Specify group addresses respectively for

start/stop and status of OpenVPN server. The same for each OpenVPN user.

Web Interface

Start page

On the start page you can chose etween the admin area (we admin) and pu lic area. Pu lic

area is disa led y default.

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 9 von 33

Webadmin

The admin area of the we interface of ENA is access protected. The standard login is:

User: admin

Password: admin

Network

The network settings of ENA can e made here.The ENA supports the automatic configuration

via DHCP or the static allocation of the network settings.

Picture 4: Network Settings

Note

For the OpenVPN operation it is o ligatory necessary, that ENA as an OpenVPN server is loca-

ted in a su system with another network address, as the accessed OpenVPN clients. Therefore

it is recommended, that ENA is not located in a su net with widely-used network addresses

192.168.0.0 or 192.168.1.0 or 192.168.2.0. For iOS VPN on demand a DNS server in the local

network is required. Add it as DNS server 1.

Time Server

The ENA synchronises its time with a time server. Which time server should e used, can either

e choosed via a specified location list (synchronisation via Internet) or can e defined manual.

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Hand uch-ENA-en-11.odt, 2017-04-21 Seite 10 von 33

Dynamic DNS

Dynamic DNS or DDNS is a technic to refresh dynamically domains in the Domain Name Sys-

tem. The purpose is that a computer is changing automatically the depending domain entry after

the change of its IP address. So the computer is always accessi le under the same domain

name, even if the actual IP address is unknown for the user.

The ENA is a le to self administrate and to refresh up to four DDNS domain names. Activate for

this the DDNS administration and choose one DDNS provider out of the list.

Picture 5: DDNS Administration activated

The ENA checks cyclically the own pu lic IP address and refreshes the DNS entries for all spe-

cified DDNS domains at DDNS provider.

Alternative another device (e.g. Internet router) can refresh the DNS entries respectively can e

accessed via fixed IP address to the ENA. In this case the domains respectively the IP address

has to e pu licised to the ENA under which it is accessi le from the Internet.

Picture 6: Access via fixed IP address

Experts Options

If the DDNS administration is refreshed, in the expert options can e fixed in which term the

own, pu lic IP address can e checked and if changing it can e transferred to the DDNS provi-

der. Furthermore it is possi le to specify an own we side with which the pu lic IP address will e

identified. The output of the we side has to contain the IP address in the HTML format.

Please compare page myip.enertex.de.

Enertex® Bayern Gm H – E ermannstädter Straße 8 - 91301 Forchheim - Deutschland - mail@enertex.de

Indice

Manuali Server popolari di altre marche

HP AlphaServer ES47 Manuale utente

Dell

Dell PowerEdge R410 Manuale utente

PowerNAS

PowerNAS CMA Manuale utente

Supero

Supero FatTwin F617R3-FT Manuale utente

MSI

MSI P1-109N-L70 Manuale utente

Dell

Dell PowerEdge XE9640 Manuale

Dell

Dell PS4100 Istruzioni di montaggio

EtroVISION

EtroVISION EV3151 Manuale utente

NEC

NEC Express5800/T110j Manuale utente

HP ProLiant Gen9 Manuale utente

Compaq

Compaq ProLiant 3000 Manuale

Dell

Dell PowerEdge 3YPMN Manuale utente

iRobo

iRobo IPC2U Manuale utente

Nortel

Nortel 1000 Con?guration guide Manuale utente

Asus

Asus AP7500 Manuale operativo e di manutenzione

Avid Technology

Avid Technology AirSpeed 5000 Manuale utente

HP Integrity rx2600 Guida all'installazione

Milestone

Milestone Husky IVO 350T Manuale utente