Tosibox Central Lock Instruction Manual
Contents
1. ee g I and Address 90 E2 BA 33 04 80 Static routes view displays all configured static routes EN Moses 2 Ed IPv4 10 29 0 1 24 Inthe Routes and MACs view there are all the routes EEE SEHE and MAC addresses known by the Central Lock The MN Dos un 052219 s Zu DHCP view lists active DCHP leases of the Central Lock IAC AGERE SREZIATZ0E DI LAN3 RE 2 Z Edit and IP addresses bound to the MAC address ret 1033744720 MAC Address 90 E2 BA 33 04 85 _ erre 2 Edi IPv4 10 22 0 2 24 MAC Address D4 AE 52 CB 0C 87 _ _pe 2 Edi IPv4 10 199 11 142 24 4 4 Logs view l TOSIBOX The Logs tab contains the log events from the Central g STATUS SETTINGS NETWORK Lock and its serialized locks Log events can be c filtered by event type text match and date Logging e Ceci ai EERTE TTTTTTT TTT TZ TTT TZ TZ ZZZ TTT ht ZE is configured via Central Lock s Settings gt Industry nn E Date range yyyy mm dd settings view and from the same view of the serialized Aen Locks Leno 12 3261 next Date Time Source Details 2014 04 10 13 20 11 03 Lock 90e2ba330480 VPN opened from Key 7895 149 126 183 178 to Lock 90e2ba330480 2014 04 10 13 19 56 03 Lock 90e2ba330480 VPN closed from Key 7895 149 126 183 178 to Lock 90e2ba330480 2014 04 09 22 25 07 03 Lock 109ab9000efb VPN opened from Lock 109ab9000efb 149 126 183 177 to Lock 90e2ba330480 2014 04 07 10 19 31 03 Lock 90e2ba330480 VPN closed from Lock 000f01383d42 149 126 183 177 to Lock 90e2. of the device Visit http help tosibox com for more information 6 Central Lock Use Case examples Infoscreens Customer Customer Mobile Client Sub key Infoscreen 1 Tosibox Lock 1 e Internet di Infoscreen 2 ADPAT vs TP LAng 0000 Tosibox Tosibox E Infoscreen 3 Central Lock Tosibox Lock 3 Service person Master Key Car washing machine Control room Internet Tosibox Central Lock a LAT Alle Kr mw au a l Car washing a aR Tosibox i EC BI machine 1 e Tosibos Car washing Production line e Lock 2 machine 1 Tosibox Car washing Lock serializing and Lock 3 machine 1 naming in production Tosibox Mobile Client Service people worldwide Remote users Remote user customer Central Locks on multiple sites Remote users worldwide ADD X KEYS JB Tosibox Lock 4 ha Tosibox Central Lock Sweden Tosibox Lock 5 elec 2299 Internet o ge sesanjes oo ooe SE ei i Service co 3 A Ses esses A R mrs a 3 H i Tosibox Tosib Central Lo s Finland Hm Lock 3 ADD X KEYS Service co 1 Service co 2 Multiple customer croups Company X Master backup Customer Group 2 Technical Data 8 Glossary Properties DHCP Dynamic Host Configuration Protocol Gbit s Gigabits per se
3. 150 11 20 q Tosibox Central Lock Instruction Manual EASY QUICK SECURE v1 4 English ES 1 Introduction The purpose of this document is to illustrate the deployment of Tosibox Central Lock and its most important properties The creation and administration of Keys for Central Lock and the user interface are also presented here Please note that this document concentrates only on the properties of Central Lock The basics of Key and Lock products are explained in the Key and Lock user manual 1 1 Central Lock in brief The Central Lock operates on the same basic properties as the Lock but has better throughput and encryption capacity This allows the building of large scale systems that provide simultaneous access to as many as 4000 Locks and Keys and the devices behind them The Central Lock also has three additional features not found in the Lock but are usually needed in more complex network systems These are Concurrent usage of sites with overlapping IP addresses Collecting audit log data Monitoring and alert services to detect and notify the user about connection problems The benefits of Tosibox Take in use only in 5 minutes High sophisticated information security Flexible and scaling architecture Operates trustworthy in all internet interfaces 660 2 Setup Basic requirements The deployment of Central Lock has a few basic requirements to operate It needs 1 A wire
4. 2ba330480 2014 04 07 10 19 31 03 Lock 90e2ba330480 VPN closed from Lock 000f01383d0e 149 126 183 177 to Lock 90e2ba330480 2014 04 07 10 17 44 03 Lock 000f01383d0e VPN opened from Key 7895 0 0 0 0 to Lock 000f01383d0e 2014 04 07 10 14 54 03 Lock 000f01383d4a VPN opened from Key 7895 0 0 0 0 to Lock 000f01383d4a 2014 04 07 10 14 45403 Lock 000f01383d0e VPN opened from Key 7895 0 0 0 0 to Lock 000f01383d0e 12 3261 next 5 Maintenance Instructions 5 1 Checklist for different situations The Internet browser opened by the Key does not show the device connections or the Lock connection in the window The Key s connection window does not show the remains red connections Make sure the controlled devices are connected to the The computer is not connected to the Internet The Key is not serialized to the Lock The Lock does not have an Internet connection or is not connected to the Tosibox AC adapter The Lock connection in the window remains yellow The Key has found a Lock but a VPN connection has not yet been established Lock In case the controlled device is connected to the Lock wirelessly use the Ethernet Service Port to Log in to the Lock Check that the wireless connection is enabled and that the Lock and the Controlled device has the same password and encryption settings Make sure the controlled device has a DHCP service If not add the device in the device list of the Lock and specify the IP address
5. N network in two ways It can be used as a router or it can be connected alongside an existing router If the Central Lock is used as a router a DHCP server must be assigned to the specific LAN In this situation the remote sites can be accessed from the LAN network of the Central Client In the other situation when the Central Lock is not acting as a router the DHCP server is usually disabled In this case accessing remote sites requires opening a Key connection to the Central Lock or static routes must be configured to the user s computer 3 5 Administration of Keys It is possible to create a backup from a Key serialized to the Central Lock see Lock and Key manual Serializing new Sub keys also works in the same way as other Tosibox products The Backup and Sub Keys of the Central Lock can be administrated from the Key user interface through the Manage Keys menu The Master Key has full privileges and it can be used to serialized additional Keys to Locks for deployment An empty Key that is first serialized with a Lock becomes the Master Key for that Lock and additional Master Keys can be created with the Key backup function A sub Key has restricted rights and it cannot be used to serialize additional Keys nor take new Locks into use Key grouping can be used to help manage a large number of Keys The groups are visible only in the Key user interface A single Key can belong to only one group and it is currently not possible to c
6. cond One 1 Gbit s WAN ports 7 Four 1 Gbit s LAN ports f din Over 700 Mbit s encryption throughput IP Internet Protocol 1000 concurrent remote connections per LAN network LAN Local Area Network Encryption and authentication PKI 1024 2048 bit RSA LED Light Emitting Diode Data encryption TLS Blowfish 128 CBC AES 256 CBC Mbit s Megabits per second Physical properties mm Millimetre PKI Public Key Infrastruct 1U rack unit for19 rack cabinet rack rails included i Length 430 mm width 483 mm height 43 mm TLS Transport Layer Security USB Universal Serial Bus Environmental conditions V Voltage Operational temperature 10 30 VPN Virtual Private Network Humidity 20 80 non condensing W Watt p i 250 W Power consumption max 250 WAN TE EE Meme Input voltage 90 264 V AC Input frequency 47 63 Hz L2 Layer 2 bridged connection type L3 Layer 3 routed connection type LAN1 LAN2 LAN3 LAN4 WAN SERVICE VA Links amp Contacts www tosibox com help tosibox fi support tosibox com 10 Tosibox Licenses Tosibox Oy Elektroniikkatie 10 FIN 90590 OULU SUOMI FINLAND 2014 Tosibox Oy All rights reserved Reproduction distribution or storage of part or all of the content of this document without the prior written permission of Tosibox is prohibited Because of continuous product development Tosibox reserves the right to change and improve any product mentioned here
7. d network 2 One non firewalled public IP address 3 An Internet connection with speed of at least 10 10 Mbit s Physical installation After the basic requirements of deployment are met you can start the physical installation of the Central Lock Please check that the following items are included in the sales package 1 Ethernet cable RJ45 1 m 2 Power cord 3 Extension power cord The steps of physical installation 1 Proper mechanical mounting of device 2 Plugging in the power cord 3 Connecting the network cable to the WAN port of the Central Lock Serialization Powering on the Central Lock starts the deployment After 2 minutes the Key can be inserted to the Central Lock s USB port Once the LED light in the Key stops blinking the serialization is completed and the Key can be removed from the Central Lock Configuration Configuring the Central Lock is done from the Web user interface see chapter Web User Interface The Internet connections for the Central Lock are configured in the WAN settings of the Network tab The protocol can be set to a fixed IP address or a DHCP client in which case the address is fetched from a DHCP server By assigning the protocol to the static address the IP address and subnet mask are written to the fields below When a static address is used it is important to set the address of the domain name server Deployment After the serialization and configuration are done the
8. deployment of Central Lock is completed and Locks Keys and network devices can be added to the system 3 System Description 3 1 Overview The Central Lock makes it possible to build a system consisting of large number of Tosibox Locks and Keys 3 2 Additional features Features specific to the Central Lock can be found here 1 Translation of networks with identical addresses Using this feature it is possible to translate real IP addresses of the Lock and its LAN devices to different configurable IP addresses This feature enables using the same IP address range for several Locks so that the Locks and their devices can be used simultaneously with the Central Lock or a Key 2 Audit log data collection and connection monitoring The Central Lock collects log data about the events of serialized Locks This feature logs the events of the Central Lock itself and also the events of any serialized Locks and sub Locks Log collection and monitoring can be enabled from the Settings Industry settings view of both the Central Lock and the Locks that are expected to report events Only Locks from which log data is desired should have the logging enabled 3 Connection monitoring and alerts The Central Lock can be set to send email alerts for connections being established and closed The alerts can be set for any or all serialized Locks Activating alerts does not require any additional services and can be done from the Settings gt Ale
9. in without prior notice Tosibox shall not take responsibility of any loss of information or income or any special incidential consequential or indirect damages The contents of this document are provided as is No warranties of any kind either express or implied including but not limited to the implied warranties of merchantability and fitness for a particular purpose are made in relation to the accuracy reliability or contents of this document Tosibox reserves the right to revise this document or withdraw it at any time wihout prior notice Tosibox products contain software which is based on opensource software When requested by the customer Tosibox will deliver more detailed information from the parts that the licenses require The source code requests shall be submitted to sourcecode request tosibox com or by mail Tosibox Oy Elektroniikkatie 10 FIN 90590 OULU SUOMI FINLAND 2014 Tosibox Inc All Rights Reserved Tosibox logo is registered trademark of Tosibox Inc
10. ll devices SA Demo Master Key SA Tosbox Key 3755 SA Tosibox Key 4998 Tosibox Key 5182 SA Tosbox Key 6231 SH veikko EditTosiboxdevices Show Key access permissions 2 Logout admin IITTTTTTTTTZTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTTETTTTTTTTTTTTTTTTTTETTTTTTTTTTTTTTTTTTT TT TT TT TT TT TT TTT TTTTTT TT TT TTT TT TTT n n The latest version of the Tosibox Central Lock software is downloaded cryptographically verified and installed The settings and serializations are not lost during update Reboot may be necessary to apply all changes and restart all programs after update VPN connections might be restarted automatically after update If you are connected to the web interface via VPN you might lose connectivity to web interface until VPN is reconnected It may take up to a couple of minutes to finish the software update Start software update 10 29 0 1 cgi bin luci stok 527ec17d22416fb7 10b48a6ae0ef8a16 tosibox admin settings 4 3 Network view TOSIBOX STATUS SETTINGS Logout admin The Central Lock network settings can be edited in the Interfaces Static routes Routes and MACS DHCP Network tab The Interfaces view shows the settings for Interfaces LAN LAN2 LAN3 LAN4 WAN LAN and Internet connections A section inside the LAN n SECO EEE TEETH ETE EEE THEE EEE Ee interface allows for DCHP server configuration The e
11. reate nested groups 4 Web User Interface You can login to the Central Lock Web user interface with an Internet browser using any LAN port address that your computer belongs to or by using address http 172 17 17 17 when directly plugged in to the service port There is a single access level admin and the default password has been delivered along with the installation of the Central Lock 4 1 Status view The Status view presents basic information about the network configuration and all serialized Locks Keys and network devices Clicking Show hide IP ranges either shows or hides information about static and dynamic IP address ranges of the LAN network New devices are added either manually by clicking the New network device button or automatically by clicking the Scan for LAN devices button which searches for all the devices inside the LAN networks of the Central Lock The network device list can be cleared by clicking Remove all devices The Edit Tosibox devices button located near the bottom opens a view where you can rename items prevents access to key connected devices that are connected to a Lock s network select an L2 or L3 connection type define a static IP address for the Key and select LAN s accessible by the Key 4 2 Settings view The Settings tab makes it possible to change the password of the admin account restart the Central Lock remove all the serializations of the Central Lock change the indu
12. rts view In other respects the functionality and usage of the Central Lock is identical with other Lock devices in the Tosibox product family Please see Lock documentation for more detail 3 3 System Central Lock allows using up to 4000 serialized Locks and Keys simultaneously First the Key is serialized with all Locks to be connected The serialization process is presented in the Key and Lock User Manual Serializing a Key to the Central Lock is carried out in the same way but during the process the connection type is defined as L2 or L3 In the case of a L2 connection a Lock to Sub Lock relationship is created which means that both Locks are in the same network Selecting L3 creates a routed connection where the Lock and the Central Lock have their own IP sub networks If the L3 connection is chosen the Key connection type must also be L3 Every serialized Key uses a bridged L2 or routed L3 connection The bridged Key connection allows access to a specific LAN network only The routed L3 Key connection allows the selection of multiple LAN networks that are bound and routed The desired connection type is selected in the Web user interface by clicking the Edit Tosibox Devices button The default connection type for Keys serialized to a Central Lock is L3 More Keys to the Central Lock can be serialized in the same way as they are to a Lock 3 4 Connecting Central Lock to LAN The Central Lock can be connected to an existing LA
13. strial settings set email alarms and update the software The industrial setting makes it possible to Change automatic discovery of the LAN devices Allow remote support from Tosibox Ltd Enable logging Prevent network device access to the Internet Prevent VPN access from Tosibox to the Mobile Client Prevent traffic between the Sub Locks serialized to the Central Lock Limit LAN device traffic to certain MAC or IP addresses Force computers using the Key to route all Internet traffic through the Central Lock Logout admin Tosibox Central Lock tb 90e2ba330480 Refresh Show hide IP ranges Internet connection OK WAN port WAN port IP Network mode B Lock mode Lock LAN LAN3 IP 10 29 0 1 IP 192 168 50 1 IP 10 37 44 1 IP 10 22 0 2 DHCP server ON DHCP server ON DHCP server OFF DHCP server OFF Tosibox devices Show all Network devices Show all details Tosibox Central Lock tb 90e2ba330480 10 22 08 28 Locks and Sub Locks 6 Test683 Za 000f01383a80 Test681 Za 000f01383b46 6 Test679 Za 000f01383c72 Test676 Za 000f013841d0 Test673 Za Tosibox Sub Lock tb 109ab900016c Test689 Za Tosibox Sublock tb 109ab90007d5 10 22 01 BA Tosibox Sublock tb 109ab9000b62 Test678 i Tosibox Sublock tb 109ab9000bbc Test669 Aa Keys 10 22 0488 28 C Alavain 5666 AsusEeePC ZR Backup 4947 S sil 5247 New network device ScanforLAN devices X Remove a
Download Pdf Manuals
Related Search