Comtrol DeviceMaster LT - Page 59

DeviceMaster LT User Guide: 2000586 Rev. B
DeviceMaster LT Security - 59
Configure/Enable Security Features Overview
Enable Secure
Config Mode
If Secure Config Mode is enabled, unencrypted access to
administrative and diagnostic functions is disabled. Secure
Config Mode changes DeviceMaster LT behavior as follows:
• Telnet access to administrative and diagnostic functions is
disabled. SSH access is still allowed.
• Unencrypted access to the web
server via Port 80 (http://
URLs) is disabled.
• Encrypted access to the web se
rver via Port 443 (https://
URLs) is still allowed.
• Administrative commands that change configuration
or
op
erating state which are received using the Comtrol
proprietary TCP driver protocol on TCP Port 4606 are
ignored.
• Administrative commands that change configuration
or
o
perating state that are received using the Comtrol
MAC
mo
de proprietary Ethernet protocol
number 0x11FE are
ig
nored.
Enable
Monitoring
Secur
e Data via
Telnet
When checked, this allows the monitor command to be used
while Secure Data Mode is enabled. When unchecked, the
monitor command can only be used if Secure Data Mode is not
enabled. You must click Save and reboot the DeviceMaster LT for
the change to go into affect. This option is disabled by default.
The Enable Monitoring Secure Data via Telnet feature allows you to
monitor serial data being sent/received on a serial port (either
via NS-Link or SocketServer). The monitoring is done by
telnetting to the DeviceMaster LT and using the following
commands:
• monitor [-ac] portnumber
Display a live hex dump of TX/RX data for the specif
ied
serial port. Y
ou can only monitor one port at a time. Th
e live
dump will
continue until the Enter key is pressed. See th
e
foll
owing detailed description and examples. The data
is
l
ogged when it is written/read
to/from the serial port driver's
TX
/RX buffers -- as such, the
relative timing between RX/TX
by
tes is not precise, but it should be sufficient to debug
most
problems (especially frame-oriented, command/response
serial protocols).
Monitoring serial data through a te
lnet connection does
generate ext
ra network traffic and may have small effects on
the timing of DeviceMaster LT operations when larg
e
amounts of data are being log
ged at high baud rates.
See
Example 1 on Page 60 for more information.
-The -a option enable
s displaying of ASCII representation
of dat
a in a column to the right the hex representation.
See
Example 2 on Page 60.
-The -c option e
nables the use of color instead of < and >
to indicate the data flow direction. Tx is green and Rx is
red. See
Example 3 on Page 61.
(continued)
Security
O
ption
Description