Niagaraax Networking and IT Guide; Niagaraax 3.X Drivers Guide; Niagaraax SNMP Guide; Niagaraax SMS Guide
Total Page:16
File Type:pdf, Size:1020Kb
Network Basics Technical Documents: NiagaraAX Networking and IT Guide; NiagaraAX 3.x Drivers Guide; NiagaraAX SNMP Guide; NiagaraAX SMS Guide Network Types Network Type Description LAN Local Area Networks (LANs) are typically node-to-node communications within building or facility. Ethernet over twisted pair cabling and Wi-Fi are the two most common technologies to build LANS. RS-485 multidrop LANs are common with BACnet architectures. WAN Wide Area Networks (WANs) are used where nodes are separated by large distances (ie, region-to-region). WANs are often built using private leased lines. A Virtual Private Network (VPN) is a form of WAN where the difference is the ability to use public networks rather than private leased lines (eliminates long-distance charges). The user VPN initiates a tunnel request through the Internet Service Provider (ISP). The VPN software encrypts the data, packages it in an IP packet (for compatibility with the Internet) and sends it through the tunnel, where is it is decrypted at the other end (the server). There are several tunneling protocols: IP security (IPsec), Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP). Network Architecture LAN Type Description Polling DDC Controllers cannot pass information directly to each other. Data must flow to a “Bus Supervisor” then to the controller. Typical cabling is RS-485 multi-drop LAN. Peer-to-Peer DDC Controllers are able to pass information directly to each other. Typical cabling is twisted- pair. Protocol examples are BACnet RS-485 MS/TP (Master-Slave/Token Passing) and LON. Client-Server Niagara Web Controllers (JACE) are client-server hosts where the Java, TCP/IP, Http and XML technologies that permit internet connectivity are hardware and O/S independent. As a client, the JACE makes a request to a server. As a server, the JACE waits for a client application to initiate contact. Web Controllers permit multiple user access using a web browser. Network Devices Network Device Description IP Router An IP router routes TCP/IP packets from one network to another. By default, IP routers do not propagate broadcast packets. LON IP Router/Server – Building industry name for an EIA-852 compliant, LonTalk-to-IP router that allows IP to be used as a LonWorks channel. LON IP ‘servers’ are routers with web server capabilities (Echelon iLON 1000), while others are just Layer3 LonTalk routers (Echelon iLON LON IP 600, Loytec 709 IP Router). “Lon Over IP” (EIA-852) is not “Lon over Ethernet”. Like BACnet, “Router” “Ethernet” is MAC address communication and has no routing capability. IP is IP address or communication and was invented to allow routing. “Server” Configuration Server (CS) management is either software-based (iLON 600) which resides in the BMS server or ‘Point Server’ (Honeywell), or is hardware based (Loytech’s LIP ‘IP Router’). The Config Server collects address information from each of the members of the Lon-IP channel, and then updates all the other members with the collected information. It necessary to have one central device responsible for member information since the EIA-852 protocol does not provide a mechanism for members to discover each other. Packet Assembler/Dissembler. Wraps an IP ‘frame’ around an BACnet/Ethernet packet so it PAD can be routed through a IP network. BACnet device object instances (how Bacnet devices reference each other) are translated into the IP address of the PAD. BACnet Router Converts BACnet/Ethernet to BACnet/IP (Layer 2 to Layer 3). BACnet Broadcast Management Device. Since, by default, IP routers do not propagate broadcast packets, a BBMD intercepts a BACnet/IP broadcast packet (message) on a physical BBMD subnet and ‘forwards’ it to the BBMDs located on each physical subnet with BACnet devices. The BBMDs then ‘recreate’ the broadcast packet on their respective subnets. A computer, router or other communication device that controls data flow between networks. It Firewall is the first-line of defense against attacks from the outside world. A firewall can hardware-based or software-based. A h/w firewall is a special router with additional filter and management capabilities. A s/w firewall runs on top of the o/s and turns the PC into a firewall. Gateway A gateway performs routing functions and protocol conversions from one network to another. 1 Ports A port is a communication channel that allows different applications on the same computer to use network resources without interfering with each other. To use the telephone analogy, a port is like a telephone extension. While the main telephone number (the IP address) is used to direct a call (the data) to the particular company (the computer), the extension (the port) directs the call to the particular person (the application). Port numbers fall into two groups, as defined by the IANA: 1. Well-Known: ports 0 to 1023 2. Registered: ports 1024 to 49151 Windows listing of IANA ports: c:\Windows\System32\drivers\etc\services IANA listing of registered ports: http://www.iana.org/assignments/port-numbers Port Type Port # / Listening Application 7 – Echo request. 20 – FTP (data), 21 (control) - File Transfer Protocol. 23 – Telnet - command-line interface for remote host configuration. 25 – SMTP - Simple Mail Transfer Protocol – send email to a remote server. Well-Known 53 – DNS - Domain Name System - translates domain name to IP address. 80 – HTTP - Hypertext Transfer Protocol (world wide web). 110 – POP3 - Post Office Protocol v3 – retrieve email from a remote server. 161 – SNMP, 162 (trap) – Simple Network Management Protocol. 389 – LDAP - Lightweight Directory Access Protocol. 443 – HTTPS - HTTP Secure - HTTP over TLS/SSL encryption. 465 – SMTPS - SMTP Secure – SMTP over SSL encryption. 8080 – HTTP alternative. Commonly used for Web proxy and caching server, or for running a Web server as a non-root user. The 8080 port can be used to view a router’s configuration web page: http://<IP Registered address>:8080/ (see ‘Cellular Broadband Router’ section, pg. 8). 1911 – Niagara AX Station 3011 – Niagara AX Platform Internet Protocol (IP) Suite The Internet protocol suite is the set of communication standards used for the Internet. It is the most popular protocol stack for WANs. It is commonly known as TCP/IP because of its important protocols: Transmission Control Protocol (TCP) and Internet Protocol (IP). TCP/IP provides end-to-end connectivity specifying how data should be formatted, addressed, transmitted, routed and received at the destination. IP Suite has four abstraction layers, each with its own protocols: 1) Application, 2) End-to-End, 3) Network, 4) Link. Abstraction layers can be thought of as the assembly line in the computer. At each layer, certain things happen to the data that prepare it for the next layer. IP Suite 4-Layer OSI 7-Layer Protocols Purpose Allows access to network resources. DNS, DHCP, FTP, Troubleshoot: 1) application program, 2) resource HTTP, LADP, Application (4) Application (7) device, 3) DNS server, 4) DHCP server, SMTP, SNMP 5) C:/> ping or ipconfig /all or tracert, 6) Host File; BACnet 7) NTFS permissions Presentation (6) TLS (6) Provides reliable process-to-process message End-to-End (3) Session (5) SOCKS (5) delivery and error recovery. Transport (4) TCP, UDP (4) Troubleshoot: 1) Port #’s, 2) Windows Sockets Moves packets from source to destination. Network (2) Network (3) IP Troubleshoot: 1) Router, 2) C:/>ping or tracert. Data Link: ARP, Data Link: organized bits into frames. Provides hop- Data Link (2) Ethernet, LonTalk, to-hop delivery. Troubleshoot: NIC cards/drivers, Token Ring, VLAN switches. Link (1) Physical (1) Physical: TP, CAT5, Physical:: transmission over medium (‘circuit’). radio, cellular, fiber Troubleshoot: CAT5 cable, connectors, hubs. 1) C:/> Ping 127.0.0.1 (NIC card/driver test), 2) C:/> ipconfig /all; "media disconnected" = check CAT5 cable, WiFi card. 2 OSI Layer Definitions (7) - Application DNS – Domain Naming System. DNS translates the domain name (google.com) to the numerical IP address. DHCP - Dynamic Host Configuration Protocol. The protocol that delivers to the computer (host) its IP address, DNS server, gateway IP address, and subnet mask. HTTP - Hypertext Transfer Protocol. HTTP is the protocol to exchange or transfer hypertext data communication for the World Wide Web (www). LDAP - Lightweight Directory Access Protocol. LDAP is a protocol that accesses and maintains distributed directory information services over an IP network. SNMP - Simple Network Management Protocol. SNMP is an Internet standard protocol for managing and authorizing users and devices on IP networks (routers, switches, servers, workstations, printers, modem racks, etc). (4) – Transport TCP - Transmission Control Protocol. TCP provides reliable, ordered and error-checked delivery of a data stream of octets within computers on the internet. It preserves the sequence of messages sent on the same connection to ensure reconstruction of the message. Applications that do not require the reliability and error checking of a TCP connection use the connectionless User Datagram Protocol (UDP) which emphasizes low-overhead operation. (3) – Network IP - Internet Protocol. In layer 3 a logical network of IP addresses is established. Each network consists of a collection of hosts where the job the IP address is to deliver packets between the source host and destination host. The IP address role involves: 1) a name (what we seek), 2) an address (where the device is) and 3) a route (how to get there). IP is sometimes referred to as a connectionless protocol because it has no concept of a sequence. Each bit of data is contained in a packet which has no knowledge of other packets. Therefore, it is an unreliable protocol and must be teamed with another protocol (such as TCP) to increase reliability. IP addresses are configured either manually by a static IP address or automatically by the mechanism of DHCP (Dynamic Host Configuration Protocol).