T-TeleSec LineCrypt L
Contents
1. For wall mounting please use the enclosed drilling template and mount the LineCrypt with the sockets on the underside The installation place should be dry and free from dust The LineCrypt is designed for an environmental temperature range of 41 F to 104 F Therefore do not expose the LineCrypt in direct sunlight and be sure that there is sufficient ventilation Start Up Start Up After the appropriate installation connect the LineCrypt L with the mains cable plug to a earthed socket The LineCrypt L perform a self test After 10 to 15 seconas it will start up normal operation It is not possible to set up connections with other equipment in the delivery status To be able to configure encrypted connections with other LineCrypt equipment or unencrypted connections with other Ethernet devices a corresponding configuration of the LineCrypt L is required Use the provided PC program Icc to configure the LineCrypt Via the local management you also have the option of configuring authorized system administrators for remote maintenance CD configuration software The settled CD contains the configuration software for the LineCrypt L the operating instructions for the software as well as further documents Latest information can be found in the file readme txt Operation Operation LED on the top side On the top side of the LineCrypt there are three multi colored light emitting diodes LED which are labele2. mains plug Only terminal equipment that delivers SELV voltage and or corresponds with ETS 300 047 may be connected to the LineCrypt L Connect the device to a freely accessible earthed socket so that you can pull out the mains plug without delay when required oO General Power failure The configuration remains unchanged in case of a power failure The LineCrypt L is not provided with an emergency operation In the event of a power fallure you cannot communicate via the LineCrypt L Function Overview Function Overview The T TeleSec LineCrypt L provides protected data transfer via IP networks Ethernet The LineCrypt L acts as a link between a protected internal network and an unprotected external network The LineCrypt L is based on IP communication That means All other protocols IPX for example are not forwarded between internal and external sides by LineCrypt L LineCrypt L transfers the encrypted data through an IP Tunnel In this way two or more LineCrypt in an unprotected network allow a protected Virtual Private Network VPN to be set up The LineCrypt L can set up IP tunnels to LineCrypt L DSL and SoHo The option of unencrypted connections with other IP equipment can also be configured O Fig 1 LineCryot protecting your network Assembly Assembly Included in delivery Open the packaging and check that the contents is complete 1 LineCrypt L with mains cable and Chip card 1 Cro
3. number your communications partner requires this number You can find the certificate number directly on the Chip card enc at end of number or you can read it with the help of a PC and the configuration software from the LineCrypt PP a A A ale arg le 1e wi wi Fig 4 Chio card tyoe NetKey Card with certificate number 991715387 To remove the Chip card first open the lock by removing the housing cover Using a small phillips head screwdriver to unscrew the central locking screw from the housing cover Assembly It HH Fig 5 Unscrewing the cover Hit ilil ll Now remove the cover horizontally until the limit stop approx 9 mm and then lift it up To remove the Chip card pull the card lock out HMI tt N Ik Fig 6 Removing the cover Now remove the Chip card and note the Certificate ID Plug the Chip card back into the card slot Assembly 4 Card lock 3 B3450L e2 70000005185 3 e BEE al F cee Chip card a om 1 D p F err E S 2 Oo amp F Onl ID 10 qe TeleSec LineCrypt Fig 7 Chip card installation lf the Chip card should remain permanently in the LineCrypt L put the card lock back into its operational position Assemble the cover to the device and fix It with the screw Assembly Installation place Place or hang the LineCrypt L in a suitable place
4. T TeleSec LineCrypt L User s Guide Deutsche Telekom T Contents Oventeworpliclonal MO Seen 3 CENO ee een 3 Power Talite ecean a teers Rete stn dce Aten atid eect teen ionc lect ct 4 Preparato een INSTALO UC 11 LEID ONINELOD SO Onara 18 A EE 14 Registered trademarks trademarks and service names are used in this manual Even if they are not marked as such the relevant protection regulations apply IDEA is a trademark of Ascom Systec AG General General We strongly recommend that you read this user manual before using LineCrypt Deutsche Telekom cannot be held liable for any possible damage caused to the device or other facilities arising from the failure to follow the instructions in this manual Overview of pictorial symbols Safety symbol to warn against danger for people and property is identified with a triangular warning sign Safety notes Do not open the LineCrypt By opening the four screws on the base of the housing you may endanger the user and any warranty claim will be waived Allow no liquids to seep into the LineCrypt Assemble the device as described in the section Assembly Do not plug in or detach any connections to the LineCrypt during a thunderstorm The LineCrypt is only intended for use in dry indoor areas Lay the cables in such a way that they cannot be stood on or tripped over by anyone Before any maintenance work on the LineCrypt pull out the
5. d On and Il The On LED signals the ready status of the equipment The LED serves to display the data traffic on the network The II LED serves to display key exchanges and faults in the equipment management LED On Green light No Chip card plugged in Orange light Valid Chip card plugged in Orange blinking 1x Authorization file configuration missing 2X Problem with the Chip card IX Recovery Plug Chip card in properly or Ax change Chip card TeleSec NetKey Card 2 x Ox 9 Internal error detected during self test LED Red blinking Encrypted data traffic Green blinking Unencrypted data traffic LED Il Orange light Key exchange in progress Green light Key exchange successful Red light Key exchange failed Orange blinking Contiguration fault Red blinking Configuration fault Operation LED on the rear side On the rear side there are four LED Two of the LED green and yellow provide information about the status of the peer Ethernet interface and have the following meaning Yellow The Ethernet connection is intact Green Data is being transferred Technical Data Technical Data Power supply 110 to 230 V7 Power consumption Max 5 VA Environmental temperature 41 F to 104 F 5 C to 40 C Ethernet interface Ethernet interfaces 2 x 10Basel 10 Mbps half duplex full duplex with Western RJ45 WE8 8 sockets PC interface V 24 Mini DIN 8 Chip card T TeleSec NetKey Car
6. d with TCOS 2 x Payload data encryption IDEA DES or Triple DES Authentication RSA Table 2 Technical data Glossary Glossary Certificate Authenticated allocation of a public key for an identity expressed by the digital signature of a Trust Center of Deutsche Telekom AG Each T TeleSec NetKey Card has an individual certificate Certificate ID Number in a certificate that provides the certificate with unambiguous identification Company Card gt Y1COS Chip card that unlike the gt NetKey Card contains information about a closed user group Company Cards can be obtained from Deutsche Telekom if required Connection scheme Schematic diagram of possible connection variants EMC Electromagnetic compatibility The ability of an appliance installation or system to function satisfactorily in the electromagnetic environment without introducing electromagnetic interference to any appliance or system in that environment quoted from the EC EMC guideline article 1 clause 4 Ethernet The most widely used gt LAN standard Local Area Network Supports data rates of up to 10 Mbps 10Base T or 100 Mbps 100Base T P Internet Protocol The task of the Internet Protocol IP layer 3 is to transport data packets from a sender to a receiver across several networks The transmission is packet oriented connectionless and non guaranteed The data packets Glossary also called datagrams are t
7. ransported by the IP as independent data packets even in the case of identical senders and receivers IP guarantees neither observance of a particular sequence nor delivery to the receiver that is datagrams can be lost on account of network overload for example There are no receive acknowledgements on the IP layer IP Network Network based on the Internet Protocol Every device in the network Is addressed through an IP number IP Tunnel A connection between two subnetworks which conceals the precise addresses of the communication partners At the start of the tunnel all data packets receive an additional header that refers to the tunnel end Here the external frame is removed and the original data packet is torwarded to its actual receiver LAN Local Area Network A spatially restricted network The most widely used LAN standard is Ethernet LED Light Emitting Diode For displaying the operational status of the device and of the connection LineCrypt Company Card Special chip cards with information on closed user groups Can be obtained from Deutsche Telekom If required NetKey Card SmartCard with gt TCOS Operating System The private asymmetrical key and a gt Certificate for gt Authentication awarded by the Deutsche Telekom gt TrustCenter is stored on the gt NetKey Card Glossary TCP IP Internet Protocol and Transmission Control Protocol TCP is a connection oriented transport protocol for use in packet s
8. ssed Ethernet connection cable with RJ45 plug 1 Serial PC cable with mini DIN 8 plug 1 CDROM with LineCryptContig software for Windows 95 98 ME NT 2000 XP and operating instructions 1 Connection scheme for LineCrypt L 1 Drilling template 2 Dowels and 2 screws for wall mounting Assembly Connect the cable to the LineCrypt according to the connection scheme On oO OQ N gt 20 oO O E S I E 110 230 V Lokales Management PC E EY AY Router Hub 10BaseT 10BaseT Fig 2 Connection scheme LineCryot L Plug the connection to your internal network into the 10BaseT internal socket The connection to InternetGateway is made via the 10BaseT external socket As the pin assignment of the Ethernet socket corresponds to the pin assignment of a network card the following applies for the cable to be used Use a crossed cable when connecting to a network card e g PC Use an uncrossed cable when connecting to a hub or an Ethernet switch Contact Line Transmission lines LineCrypt F 1 2 transmits gt Not used 4 5 Reception lines LineCrypt receives 6 8 Not used Table 1 Allocation of the R 45 plug If you wish to manage the LineCrypt L locally plug the PC cable into the mini DIN 8 socket for the local management Assembly 10BaseT 10BaseT extern intern Fig 3 Overview of sockets If the authorizations based on the certificate
9. witched networks The protocol builds on the IP protocol supports the functions of the transport layer and establishes a secure connection between the entities before data transfer TCOS TeleSec Chip card Operating System Operating system for processor controlled Chip cards smart cards VPN Virtual Private Network A protected virtual sub network Is set up in an unprotected network using encryption mechanisms Index Authentication 15 Certificate ID 9 16 Chip card 6 dif 13 15 18 Connection scheme 6 16 drilling template 11 Environmental temperature 15 Ethernet Of 12 14ff IDEA 15 IP Network 17 IP Tunnel 5 17 LAN 17 LED 13 17 NetKey Card 13 15 17 Operating System 17f RSA 15 self test 12f TCP IP 18 VPN 5 18 Important telephone numbers Inthe event of malfunctions Sales enquiries Please enter the telephone number when handing over the unit The LineCrypt fulfils the requirements of the following EU Directive 1999 5 EG For this reason the LineCrypt bears the CE mark Responsible for content T TeleSec Products Further information Internet http www telekom de t telesec e mail T Telesec telekom de Issued by Deutsche Telekom AG Edition 17 11 03 subject to change without notice
Download Pdf Manuals
Related Search