Tofino Argon 100 Hardware Installation and
Contents
1. 3 The Fault Event Mode LEDs will begin to flash in downward sequence to indicate a Save 4 When the flashing sequence stops remove the USB storage device 5 Ifthe save was successful the Tofino SA LEDs will revert to the state they were in prior to the saving action 6 Send copies of these files to technical support for analysis 2009 Byres Security Inc 5 The Fault LED will flash a number of times if a fault occurs with USB Configuration Loading or Diagnostic Saving Use Table 1 to diagnose the fault from the number of Fault LED flashes and to decide the appropriate course of action Table 1 Fault LED Activity During Load Save No of Flashes During Load Sequence During Save Sequence i The USB ports are disabled At N A the CMP console check the General Communications settings for the particular Tofino Confirm the USB Load Config setting is Enabled and apply the configuration 2 No USB storage device in the USB No USB storage device in the USB port or the USB storage device is port or the USB storage device is not formatted with the standard not formatted with the standard Fat32 format Fat32 format 3 The files on the USB storage The Tofino SA was unable to device are not valid create the diagnostics files Contact technical support 4 The Tofino SA was unable to she Tomo SA wasunablete decrypt the configuration files encrypt RL diagnostic files Contact2. Rem ove Tofino SA from network and contact technical support Fault LED Long Flash 2 seconds Tofino SA operating sy stem did not start properly Rem ove Tofino SA from network and contact technical support Fault LED Short Flash 0 5 seconds A Tofino LSM service did not start Update all LSMs using the Tofino CMP Tofino LSM Update Wizard If this does not solve the problem remove the Tofino SA from the network and contact technical support Event LED On or Flashing Tofino SA is defending the network from attack Determine the source of the attack using the Tofino CMP Event View Dev ice has been added to the network that is not registered in the Tofino CMP database Adda node to the network diagram on the Tofino CMP using the Network Editor Create a firewall rule to handle traffic as needed See Tofino CMP Firewall Rule Configuration in the Tofino CMP User s Guide Device on the network is generating broadcast traffic Create firewall rules tohandle broadcast traffic as needed See Tofino CMP Firewall Rule Configuration in the Tofino CMP User s Guide Mode LED Off Tofino SA is in PREDEPLOYED PASSIVE or DECOMMISSIONED mode See Tofino SA Modes in the Tofino CMP User s Guide Mode LED Long Flash 2 seconds Tofino SA isin TEST mode See Tofino SA Modes in the Tofino CMP User s Guide Mode LED Short Flash 0 5 seconds Tofino SA isin TEST FIELD FOR
3. the Tofino SA for 1 second blocking traffic The Tofino SA is not Tofino SA is not in OPERATIONAL mode Confirm that the Tofino SA Mode LED is on solid Firewall LSM is not installed or is not activated Check the Modules tab of the Tofino SA s properties page on the Tofino CMP Rules in the Tofino SA do not match therules shown on the Tofino CMP Sy nchronize the Tofino SA with the Tofino CMP See Synchronizing Your Tofino SA s Configurations in the Tofino CMP User s Manual Incorrect Allow rule is activ ated in the firewall Check the firewall rules on the Firewall page of the Tofino SA properties page on the Tofino CMP 2009 Byres Security Inc 3 3 Table 4 Tofino CMP to Tofino SA Communications Symptoms Possible Causes Solutions the Tofino SA from the Tofino CMP Unable to connect to The Tofino CMP and the Tofino SA donot havea clear communications path in the network Ensure that Tofino CMP can communicate with at least one device on the protected side of the Tofino SA Note Test may require the Tofino SA to be tem porarily switched to TEST FIELD FORCE mode by pressing the Mode button for 1 second Primary contact device is not set in the Tofino CMP Ensure the primary contact device is set for the Tofino SA See Editing the Properties of a Tofino SA in the Tofino CMP User s Manual The Tofino CMP does not ha
4. current the higher voltage supply will take the load Power fail signals from the supplies may be used by connecting them to the connector plug pins 1 amp 2 at the top ofthe appliance ground returns should go to pin 3 Power fail Power connector connector LL power taa 1 Power fall 2 Supply 1 Supply 2 Connection Diagram POWERFAIL IN Fault Floating SCREEN ETHERNET PORTS UNSECURED PORT INPUT SECURE PORT OUTPUT TOFINO 9211 ET POWER IN 9 32V dc Power On Appliance Startup Do not connect the Tofino SA into the network at this stage The appliance will not pass any network traffic until it has executed its startup sequence At power ON all four LED indicators are lit and the appliance will commence its startup sequence At the end of the startup sequence i e after approx 1 minute the Power LED will remain ON but the Fault Event and Mode LED indicators will all be extinguished to show the sequence is complete 2009 Byres Security Inc Network Connection Note The appliance must have completed its startup before any network connections are made 1 Connect an RJ45 patch cable from the network switch router to the Unsecured Tofino SA port cul 2 Connect an RJ45 patch cable from the Secure Tofino SA port i to the network port ofthe equipment being protected 3 Check that the yellow Link activity light is flashing on both of the
5. CE m ode See Tofino SA Modes in the Tofino CMP User s Guide If appropriate return to OPERATIONAL mode by pressing the Mode button for 1 second Mode LED On Tofino SA isin OPERATIONAL protected mode No Action is required Link Activity LED Yellow Off Network connection tothe Tofino SA is missing Check the Ethernet cabling between the Tofino SA and the devices connected to the Tofino SA Check the Ethernet Link LEDs on the device connected tothe Tofino SA 2009 Byres Security Inc 3 2 Control System Network Communications Table 3 Symptoms Possible Cause Solution communications between control system equipment Unable to establish Network connection to the Tofino SA is missing Confirm that both Ethernet Link Activity LEDs Yellow are on or flashing Ifnot check all Ethernet cabling between the Tofino SA and the other network devices Tofino SA Firewall LSM is blocking network traffic that needs to be allowed Switch the Tofino SA into TEST FIELD FORCE mode by pressing the Mode button for 1 second When the button is released the Mode LED should start to flash indicating that all traffic is allowed to flow through the Tofino SA Determine what traffic is being blocked using the Event view on the Tofino CMP Create or adjust firewall rules to allow traffic as needed Return the Tofino SA to OPERATIONAL mode by pressing the Mode button on
6. D Zone 2 Ex nL IIC T4 Ta 70 C in accordance with Control Drawings No SCI 1032 hazardous indoor locations Conditions for safe use 1 In Class I Division 2 installations the subject equipment shall be mounted within a tool secured enclosure which is capable of accepting one or more of the Class I Division 2 wiring methods specified in the Canadian Electrical Code C22 2 In Class I Zone 2 installations the subject equipment shall be mounted within a tool secured enclosure which is capable of accepting one or more ofthe Class I Zone 2 wiring methods specified in the Canadian Electrical Code C22 1 Where installed in outdoor or potentially wet locations the enclosure shall at a minimum meet the requirements of IP54 Where installed in dry indoor locations the enclosure shall at minimum meet the requirements of IP4X The user shall take necessary measures to ensure that the supply voltage transients do not exceed 45V The user shall ensure that the field wiring insulation temperature is rated for 70 C The material used in the construction ofthe final enclosure shall not contain by mass more than 7 5 magnesium It is the responsibility ofthe manufacturer to provide warning markings in French where required by local jurisdictions 12 5 Technical Support Please contact the local representative in your region or e mail support tofinosecurity com web www tofinosecurity com 2009 Byres Securi
7. Hardware Installation amp Troubleshooting Guide TOFINO Copyright Information Byres Security Inc While this information is presented in good faith and believed to be accurate Byres Security Inc disclaims the implied warranties of merchantability and fitness for a particular purpose and makes no express warranties except as may be stated in its written agreement with and for its customers In no event is Byres Security Inc liable to anyone for any indirect special or consequential damages The information and specifications in this document are subject to change without notice Tofino Tofino Industrial Security Solution and Tofino Intrinsically Secure are trademarks of Byres Security Inc Other brand or product names are trademarks of their respective owners While every precaution has been taken in the preparation of this document the publisher and the author assume no responsibility for errors or omissions or for damages resulting from the use of information contained in this document or from the use of programs and source code that may accompany it In no event shall the publisher and the author be liable for any loss of profit or any other commercial damage caused or alleged to have been caused directly or indirectly by this document 2009 Byres Security Inc i Table of Contents Part Introduction Part Il Installation Guide Part III Troubleshooting 3 1 Tofino Security Appliance SA LED Indications 3 2 Con
8. current 24V per appliance A second i 2009 Byres Security Inc e redundant supply is optional Note 22V DC minimum is required for 18V power fail detection option 3 Wire for DC power amp power fail connections 4 Two 10 100 base T cables preferably screened to connect the Tofino SA between the network and the equipment being protected 5 A suitable 35mm DIN rail location to mount the appliance optional see mounting details 2009 Byres Security Inc Mounting the Appliance At the back of the appliance push out the mounting clips top and bottom Press the appliance firmly onto the DIN rail and push mounting clips back in Check that the appliance grips the rail securely Note An alternative fixing method is to use M4 screws through the holes in the clips 152mm between centres see diagram for mounting the appliance to a panel Record the T ofino ID number see label amp the installation location for future reference Ethernet ports Unsecured Seaure Ethernet LEDs Dimensions in mm inches 2009 Byres Security Inc 3 Wiring for DC Power see diagrams Note These two plugs use cage clamp screw terminals to accept a stripped wire ranging in size from 24 to 12 AWG 0 2 2 5mm2 One or two DC power supplies may be connected to the Tofino SA utilizing the four position connector plug 5 8 at the bottom ofthe Tofino SA appliance Two power supplies will not share the
9. network sockets to show network traffic The green Speed light will come on if the link is operating at 100Mb s IMPORTANT An unconfigured Tofino SA will pass all network traffic and will not provide any security Check with your network administrator to find out if the Tofino SA is pre configured or read the Tofino CMP User s Manual for information on howto configure the appliance and thus make it secure USB Load Save Loading New Configuration or Firmware The USB Load function loads files containing firmware or configuration updates from a USB storage device Note Only version 2 0 USB storage devices are supported 1 Ensure the Tofino SA has been powered for at least one minute 2 Insert the USB storage device containing the prepared files into one ofits USB ports 3 Press and hold the Config button for 5 6 seconds until the Mode Event Fault LEDs begin to flash in an upward sequence to indicate a Load 4 When the flashing sequence stops but not before remove the USB storage device 5 Ifthe load was successful the Tofino SA will go to OPERATIONAL mode with the Mode LED showing a steady light Saving Diagnostic Information The USB Save function copies diagnostic files from the Tofino SA to the USB storage device These files can then be sent to technical support for analysis 1 Insert a USB storage device into one of the USB ports 2 Press and hold the Config button for 1 2 but less than 5 seconds
10. rived from a regulated power supply complying with the requirement 4 2 USA Authority Standard Certificate No i Li ii rat ose FM 3029914 FM 3810 1 2 AEx nC IIC T4 Ta 70 C Equipment Ratings Nonincendive for Class I Division 2 Groups A B C and D Zone 2 AEx nC IIC T4 Ta 70 C in accordance with Control Drawings No SCI 1032 indoor hazardous classified locations Conditions for safe use 1 InClassI Division 2 installations the subject equipment shall be mounted within a tool secured enclosure which is capable ofaccepting one or more of the Class I Division 2 wiring methods specified in the National Electrical Code ANSI NFPA 70 In ClassI Zone 2 installations the subject equipment shall be mounted within a tool secured enclosure which is capable of accepting one or more of the Class I Zone 2 wiring methods specified in the National Electrical Code ANSI NFPA 7 0 Where installed in outdoor or potentially wet locations the enclosure shall at a minimum meet the requirements ofIP54 Where installed in dry indoor locations the enclosure shall at minimum meet the requirements of IP4X 2009 Byres Security Inc 11 4 3 2009 Byres Security Inc Canada Canada Authority Standard Certificate No CAN CSA E6007 9 0 IPA 1 2 ABCD T4 Ta 70 C CAN CSA E6007 9 15 3029914C 1 2 Ex nL IIC T4 Ta 70 C C22 2 N0 1010 1 Equipment Ratings Non sparking for Class I Division 2 Groups A B C and
11. technical The files may have been corrupted during the transfer ome process onto the USB storage device Please try transferring them again Ifthis second transfer attempt is unsuccessful then please contact technical support 5 The Tofino SA was unable to load The Tofino SA was unable to copy the files The files may have been the encrypted diagnostics files to corrupted during the transfer the USB storage device The USB process onto the USB storage storage device may be full device Please try transferring them again If this second transfer attempt is unsuccessful then please contact technical support 6 The Tofino SA was unable to shut The Tofino SA was unable to shut down the USB port Contact down the USB port Contact technical support technical support 2009 Byres Security Inc 3 Troubleshooting The Tofino SA is provided with LEDs to indicate normal and other modes of operation Use Table 2 for assistance in interpreting the LED displays Table 3 and Table 4 offer further assistance in identifying and solving any possible communication malfunctions 2009 Byres Security Inc 7 3 1 Tofino Security Appliance SA LED Indications Table 2 Symptom Possible Cause Solution Power LED Off Tofino SA does not have power Ensure the Tofino SA has 9 32 VDC power connected Fault LED On Solid Tofino SA has detected a hardware fault and did not start
12. trol System Network Communications 3 3 Tofino CMP to Tofino SA Communications Part IV Certification 4 1 Europe 4 2 USA 4 3 Canada PartV Technical Support 2009 Byres Security Inc 10 11 11 11 12 13 1 Introduction This inline Tofino SA Ethernet appliance can be used to protect HMI DCS PLC or RTU control devices as clusters or as individual devices The Tofino Industrial Security System consists of two additional core components not covered by this manual The Central Management Platform CMP a Windows based management system and database for centralized monitoring and configuration of each Tofino SA regardless of its physical location in the company network Loadable Security Modules LSM a variety of software plug ins providing security services such as firewalls intrusion detection systems IDS and virtual private network VPN encryption One or more LSMs can be downloaded into a Tofino SA to provide a customized security function to suit the requirements ofthe control system LSMs require an activated software license For information about LSM license activation consult the Tofino CMP help or the Tofino CMP User s Manual 2 Installation Guide Unpacking Unpack the appliance and check it for damage Do not use any parts that show evidence of damage Preparation To install the Tofino SA you will need 1 A 3mm straight blade screwdriver 2 9 32V DC supply with 350mA
13. ty Inc 13
14. ve the correct IP address for the primary and backup contact devices Ensure the primary contact device is set for the Tofino SA See Editing the Properties of a Tofino SA in the Tofino CMP User s Manual Both primary or backup contact device is are off the network Ensure the primary or backup contact device are powered up and on the network The Tofino ID is missing or incorrect on the Tofino CMP Confirm the Tofino IDon the face of the Tofino SA is identical tothe ID entered in the Tofino CMP See Editing the Properties of a Tofino SA in the Tofino CMP User s Manual The Tofino SA is already configured to connect to another Tofino CMP For security reasons a Tofino SA can only connect to one Tofino CMP If necessary factory reset the Tofino SA and reattem pt connection 2009 Byres Security Inc 10 4 Certification 4 1 Europe Europe Authority Standard Approved For Certificate No EN 600795 2005 Eu 3G Ex nA nCIICT4 40 C lt Ta lt 70 C MTLo7ATEX9211X Conditions for safe use 1 The apparatus must be installed in an enclosure or an environment that provides a degree of protection not less than IP54 The module must not be inserted or removed unless either a the area in which the apparatus is installed is known to be non hazardous or b the circuit to which it is connected has been de energized The 9 32V supply that provides the input to the module must be de
Download Pdf Manuals
Related Search