Ekinex EK-IE1-SEC-TP User manual

1
KNX IP secure interface
KNX IP secure router
Codes: EK-IE1-SEC-TP / EK-IF1-SEC-TP
Secure IP devices for establishing the bidirectional data
connection between a PC or laptop and a KNX bus sy-
stem via a LAN network. They have an integrated KNX
bus communication module and are designed for 35 mm
rail mounting. The power supply takes place via the KNX
bus.
Description
KNX IP Interface EK-IE1-SEC-TP secure
The ekinex®KNX IP Interface EK-IE1-SEC-TP secure is
a compact bus powered interface between LAN/Ethernet
and KNX bus. With its compact design has a width of only
1 module (18 mm) and is powered by the KNX bus. The
device is an interface between IP and KNX and can be
used as programming interface for ETS® Software. You
can access the KNX Bus from every point of your LAN.
Furthermore, the KNX IP Interface EK-IE1-SEC-TP secu-
re allows you to program the KNX bus over the Internet.
The device supports KNX Security which can be enabled
in ETS. With its interface functionality (tunneling) KNX se-
curity prevents from unauthorized access.
The buttons and LEDs on the device allow a local dia-
gnosis including the operating status and communication
errors.
The device supports KNX Security which can be enabled
in ETS. As secure router the device allows coupling of
not secured communication on KNX TP to a secured IP
backbone. Also for the interface functionality (tunneling)
KNX security prevents from unauthorized access.
The IP address can be obtained by a DHCP server or
by manual conguration (ETS) respectively. This device
works according to the KNXnet/IP specication using the
core, the device management, the tunneling and the rou-
ting part.
The KNX IP Router EK-IF1-SEC-TP secure has an exten-
ded lter table for main group 0 ... 31 and is able to bu󰀨er
up to 150 telegrams. Power is supplied via the KNX bus.
Main functional characteristics
• Programming button and LED on the front
• LED for status and data tra󰀩c signaling on bus line and
Ethernet network
• Buttons for activating connection functions
• Bus line connection via KNX terminal
• Connection to Ethernet network via RJ45 connector
• Ethernet 100BaseT (100MBit/s)
• Supported internet protocols ARP, ICMP, IGMP, UDP/
IP, TCP/IP, DHCP and Auto IP
• Support for KNX secure technology, which can be ac-
tivated via ETS®
• Up to 8 KNXnet/IP Tunneling connections simulta-
neously
• Max. APDU length: 55
• KNXnet/IP Security (AES-128)
• KNX Line / Area coupler functionality (EK-IF1-SEC-TP
only)
• Extended lter table for main group 0 ... 31 (EK-IF1-
SEC-TP only)
Other characteristics
• Housing in plastic material (PC)
• Mounting on 35 mm rail (according to EN 60715)
• Protection degree IP20 (installed device, according to
EN 60529)
• Appliance class III (according to EN 60664-1)
• Classication climatic 3K5 and mechanical 3M2 (accor-
ding to EN 50491-2)
• 1 modular units (1 unit = 18 mm)
• Weight 40 g
• Dimensions (WxHxD): 17.8 x 90 x 60 mm
Technical data
Supply
• 30 Vdc from KNX bus line
• Current consumption from bus < 20 mA
• Power consumption < 600 mW
KNX
• Medium IP/TP
• KNX Security (AES-128) incl. Tunneling V2, Core V2
• Up to 8 KNXnet/IP Tunneling connections simulta-
neously
• Extended lter table for main group 0 ... 31 (EK-IF1-
SEC-TP only)
• Max. APDU length: 55
REFLIE1IF1TPD
KNX IP Router EK-IF1-SEC-TP secure
The ekinex® KNX IP Router EK-IF1-SEC-TP secure al-
lows forwarding of telegrams between di󰀨erent lines
through a LAN (IP) as a fast backbone. In addition this
device is suited to connect a PC to the KNX network e.g.
for ETS programming.
Datasheet STEKIE1IF1TP_EN
TP S X

2
Connectors
• Bus connector for KNX (red / black)
• LAN RJ-45 socket
Environmental conditions
• Operating temperature: - 5 ... + 45 °C
• Non-operating ambient temp.: - 25 ... + 70 °C
• Relative humidity: 5 ... 93% not condensing
Display elements
• Red LED (2) for displaying the active operating mode of
the device (on = programming, o󰀨 = normal operation)
• Multicolor KNX LED (4), that lights up green if the de-
vice is successfully powered by the KNX bus. The LED
indicates telegrams on the KNX bus by ickering. Com-
munication failures (e.g. repetitions of telegram or tele-
gram fragments) are indicated by a short change of the
LED color to red.
• Multicolor Mode LED (5):
a) for EK-IE1-SEC-TP, it shows the actually selected connec-
tion number by ashing (1x...5x times). An available KNXnet/
IP Tunneling connection is indicated by a green light and a
used tunneling connection is indicated by an orange light.
b) for EK-IF1-SEC-TP, it shows the forwarding of Individual
and/or Group Adressed telegrams.
• Multicolor IP LED (6), that lights up when an Ethernet
link is active. This LED is green if the device has valid
IP settings (IP address, Sub net and Gateway). With
invalid or nonexistent IP settings, or if the device has
not yet received the IP settings by a DHCP server, the
LED is red. The LED indicates IP telegrams by icke-
ring green.
For detailed information on conguration options, refer to
the application manual of the device.
Switching and display elements
The devices are equipped with a programming pushbut-
ton and a programming LED, two operating buttons, three
LEDs for status indication, terminals for connecting the
KNX bus line and the Ethernet/LAN.
Switching elements
• Pushbutton (3) for switching between the normal and
programming operating mode. This operation can be
done by simultaneously pressing the pushbuttons (7)
and (8) as well;
• Pushbuttons (7), (8) to perform the following operation:
a) for EK-IE1-SEC-TP, they allow to choose each single con-
nection. Conn Up counts the connection numbers up and
Conn Dn down. The actually selected connection number is
indicated by ashing (1x…5x times) of the Mode LED (5);
b) for EK-IF1-SEC-TP, with the button Pass GAs the forwar-
ding of Group Addressed telegrams can be activated, while
the button Pass IAs activates the forwarding of Individually
Addressed telegrams.
EK-IE1-SEC-TP
KNX IP Interface secure
1
3
5
4
6
2
7
8
9
1) KNX Bus connector
2) LED for Programming Mode (red)
3) Programming Mode button
4) KNX LED (multicolor)
5) Mode LED (multicolor)
6) IP LED (multicolor)
7) Connection Up button
8) Connection Down button
9) Ethernet/LAN connector
EK-IE1-SEC-TP
EK-IF1-SEC-TP
KNX IP Router secure
1
3
5
4
6
2
7
8
9
1) KNX Bus connector
2) LED for Programming Mode (red)
3) Programming Mode button
4) KNX LED (multicolor)
5) Mode LED (multicolor)
6) IP LED (multicolor)
7) Pass GAs (Group Addresses) button
8) Pass IAs (Individual Addresses) button
9) Ethernet/LAN connector
EK-IF1-SEC-TP

3
Conguration and commissioning
The KNX IP Interface and Router secure devices can be
programmed in di󰀨erent ways by the ETS®:
Via KNX Bus
The device only needs to be connected to the KNX bus.
The ETS®requires an additional interface (for example,
USB) to have access to the bus. Via this way both the
individual address and the entire application including IP
congura-tion can be programmed. Programming via the
bus is recommended if no IP connection can be establi-
shed.
Via KNXnet/IP Tunneling
No additional interface is required. Programming via
KNXnet/IP Tunneling is possible if the device already has
a valid IP conguration (e.g. via DHCP). In this case the
device is displayed in the interface conguration of the
ETS and must be selected. The download is executed via
the ETS®project as with many other devices.
Via direct IP connection
While KNXnet/IP Tunneling and KNXnet/IP Routing is li-
mited to the speed of KNX/TP connection, the device can
be loaded via a direct IP connection at high speed. The
direct IP connection is possible if the device already has
a valid IP conguration as well as an individual address.
To do this select “Use direct IP connection if available”
in the ETS® menu “Bus – Connections - Options”. The
download is then directly performed in the device and is
not visible in the ETS group monitor.
In addition, the EK-IF1-SEC-TP router device can also
be programmed via KNXnet/IP Routing. This is possible
if the device already has a valid IP conguration (e.g. by
Mounting
The device has degree of protection IP20, and is there-
fore suitable for use in dry interior rooms. The housing is
made for rail mounting according to EN 60715 in boards
or cabinets for electrical distribution. For the installation of
the device on the rail proceed as follows:
• with the aid of a tool bring the locking device in the fully
lowered position (a);
• place the upper edge of the rear inner prole on the
upper edge of the rail (b);
• rotate the device towards the rail (c);
• push the locking device upward until it stops (d).
Before removing the device, be sure the bus terminal has
been extracted from its slot. Use a screwdriver to slide
down the locking device and remove the device from the
rail.
Connection of the KNX bus line
The connection of the KNX bus line is made with the ter-
minal block (1) included in delivery and inserted into the
slot of the housing.
a b
dc
Characteristics of the KNX terminal block
• spring clamping of conductors
• 4 seats for conductors for each polarity
• terminal suitable for KNX bus cable with single-wire
conductors and diameter between 0.6 and 0.8 mm
• recommended wire stripping approx. 5 mm
• color codication: red = + (positive) bus conductor,
black = - (negative) bus conductor
+
-
KNX
Bus
LAN
Warning! In order to supply the KNX bus lines use
only KNX bus power supplies (e.g. ekinex EK-AB1-
TP, EK-AG1-TP or EK-AM1-TP). The use of other
power supplies can compromise the communica-
tion and damage the devices connected to the bus.
!
Warning! The electrical connection of the device
can be carried out only by qualied personnel. The
incorrect installation may result in electric shock or
re. Before making the electrical connections, make
sure the power supply has been turned o.
!

4
Dimensions [mm]
using DHCP or Auto IP). In the ETS®, the routing interfa-
ce appears if at least one device on the network which
supports rout-ing is available. The name of the network
interface appears in the PC as description. If routing is se-
lected as interface, the programming done from the ETS®
project as like with other devices. In this case LAN is used
as a KNX medium like TP. There is no additional interface
device required.
For detailed information on conguration options, refer to
the application manual of the device available on the web-
site www.ekinex.com
Commissioning
For commissioning the device the following activities are
required:
• make the electrical connections as described above;
• turn on the bus power supply;
• switch the device operation to the programming mode
by pressing the programming pushbutton located on
the front side of the housing. download into the devi-
ce the physical address and the conguration with the
ETS®program.
At the end of the download the operation of the device
automatically returns to normal mode; in this mode the
programming LED is turned o󰀨. Now the bus device is
programmed and ready for use.
Device reset
The device can be reset to factory settings as follows (ple-
ase refer to the pictures on page 2):
• disconnect the KNX bus connector (1) from the device;
• press the KNX programming button (3) and keep it
pressed;
• reconnect the KNX bus connector (1) of the device;
• press and hold the KNX programming button (3) for at
least another 6 seconds.
A short ash of all the LEDs (2), (4), (5), (6) conrms the
correct reset of the device to the factory settings.
Versions
Code Application program (## = version)
EK-IE1-SEC-TP APEKIE1TP##.knxprod
EK-IF1-SEC-TP APEKIF1TP##.knxprod
Marks
• KNX
• CE marking according to:
■EMC directive 2014 / 30 / EU
■RoHS directive 2011 / 65 / EU
■EN 63044-3: 2018, EN 50491-5-1: 2010
■EN 50491-5-2:2010, EN 50491-5-3: 2010
■EN 61000-6-2: 2019
■EN 61000-6-3: 2007 + A1: 2011
■EN 63000: 2018
Maintenance
The device is maintenance-free. To clean use a dry cloth.
It must be avoided the use of solvents or other aggressive
substances.
Disposal
At the end of its useful life the product
described in this datasheet is classied
as waste from electronic equipment in
accordance with the European Direc-
tive 2012/19/EU (WEEE recast), and
cannot be disposed together with the
municipal undi󰀨erentiated solid waste.
Note. The conguration and commissioning of KNX
devices require specialized skills. To acquire these
skills, you should attend the workshops at KNX cer-
tied training centers.
i
Warning! The reset restores the device back to the
state of delivery from the factory. The address and
the value of the parameters set during conguration
will be lost.
!
Documentation
This technical datasheet refers to the A1.0 release of the
ekinex® EK-IE1-SEC-TP and EK-IF1-SEC-TP devices
and is available for download on the website www.ekinex.
com in PDF format (Portable Data Format ).

5
Warnings
• Installation, electrical connection, conguration and
commissioning of the device can only be carried out by
qualied personnel in compliance with the applicable
technical standards and laws of the respective countri-
es
• Opening the housing of the device causes the imme-
diate end of the warranty period
• In case of tampering, the compliance with the essential
requirements of the applicable directives, for which the
device has been certied, is no longer guaranteed
• ekinex®KNX defective devices must be returned to the
manufacturer at the following address: EKINEX S.p.A.
Via Novara 37, I-28010 Vaprio d’Agogna (NO) Italy
File name Device release Update
STEKIE1IF1SECTP_EN.pdf A1.0 11 / 2022
Other information
• This datasheet is aimed at installers, system integra-
tors and planners
• For further information on the product, please contact
the ekinex®technical support at the e-mail address:
[email protected] or visit the website www.ekinex.
com
• Each ekinex®device has a unique serial number on
the label. The serial number can be used by installers
or system integrators for documentation purposes and
has to be added in each communication addressed to
the EKINEX technical support in case of malfunctioning
of the device
• KNX®and ETS®are registered trademarks of KNX As-
sociation cvba, Brussels
© EKINEX S.p.A. The company reserves the right to make changes to this
documentation without notice.
EK-IE1-SEC-TP
EK-IF1-SEC-TP