iS5 iSG4F User manual

Intelligent Flexible Secure Gateway
IEC 61850-3 and IEEE 1613 compliant
iSG4F User’s Manual
Version 1.1
September 2014
iS5 Communications Inc.
#3-7490 Pacific Circle
Mississauga, Ontario, L5T 2A3
Tel: + 905 670 0004
Fax: + 289 401 5201
Website: www.iS5Com.com
E-mail: [e-mail]

iSG4F User’s Manual
iS5 Communications Inc.
2
COPYRIGHT NOTICE
Copyright © 2013 iS5 Communications Inc.
All rights reserved.
No part of this publication may be reproduced in any form without the prior written consent of
iS5 Communications Inc. (iS5).
TRADEMARKS
iS5Com is a registered trademark of iS5. All other trademarks belong to their respective owners.
REGULATORY COMPLIANCE STATEMENT
Product(s) associated with this publication complies/comply with all applicable regulations.
Please refer to the Technical Specifications section for more details.
WARRANTY
iS5 warrants that all products are free from defects in material and workmanship for a specified
warranty period from the invoice date (5 years for most products). iS5 will repair or replace
products found to be defective within this warranty period including shipping costs. This
warranty does not cover product modifications or repairs done by persons other than
iS5-approved personnel, and this warranty does not apply to products that are misused,
abused, improperly installed, or damaged by accident.
Please refer to the Technical Specifications section for the actual warranty period(s) of the
product(s) associated with this publication.
DISCLAIMER
Information in this publication is intended to be accurate. iS5 shall not be responsible for its use
or infringements on third-parties as a result of its use. There may occasionally be
unintentional errors on this publication. iS5 reserves the right to revise the contents of this
publication without notice.
CONTACT INFORMATION
iS5 Communications Inc.
#3-7490 Pacific Circle, Mississauga, Ontario, L5T 2A3
Tel: + 905-670-0004 // Fax: + 289-401-5206
Technical Support E-mail: [e-mail]
Sales Contact E-mail: [email protected]
Website: www.iS5Com.com

iSG4F User’s Manual
iS5 Communications Inc.
3
Table of Content
CAUTION: LASER ......................................................................................... 9
CAUTION: SERVICE ..................................................................................... 9
CAUTION: PHYSICAL ACCESS ..................................................................... 9
Getting to Know Your Router......................................................................10
1.1 About the iSG4F Intelligent Flexible Secure Gateway................................................................10
1.2 Software Features ...............................................................................................................................10
1.3 Hardware Features .............................................................................................................................10
Hardware Overview......................................................................................11
2.1 Front Panel ..........................................................................................................................................11
2.2 Rear.......................................................................................................................................................12
2.3 Bottom .................................................................................................................................................12
2.4 Side view ..............................................................................................................................................12
2.5 Logical System Diagram ................................................................................................................... 13
Hardware Installation...................................................................................13
3.1 DIN Rail Mounting ...........................................................................................................................13
3.2 Panel Mounting Option ....................................................................................................................14
3.3 Chassis Ground Connection ............................................................................................................14
3.4 Power Connections ............................................................................................................................15
3.5 Console Connection ..........................................................................................................................16
Configuration ...............................................................................................16
5.1 Command Line Interface..................................................................................................................16
5.2 Supported Functionalities.................................................................................................................17
5.3 System Default State..........................................................................................................................18
5.4 Main Commands ................................................................................................................................18
System Version and Data Base...................................................................19
6.1 Configuration Database ....................................................................................................................19
6.2 OS VERSION ....................................................................................................................................20
6.3 Commands Hierarchy........................................................................................................................20
6.4 OS Upgrade Example........................................................................................................................21
6.5 Safe Mode............................................................................................................................................23

iSG4F User’s Manual
iS5 Communications Inc.
4
6.5.1 Safe Mode View..................................................................................................................................23
6.5.2 SW Image Installation .......................................................................................................................25
Ethernet Port Interfaces ..............................................................................27
7.1 Commands Hierarchy........................................................................................................................28
7.2 Port Commands Example ................................................................................................................28
Login and Management...............................................................................30
8.1 Serial Console Port ..........................................................................................................30
8.1.1 Connecting to the Console Port .......................................................................................30
8.1.2 CLI Terminal Commands ................................................................................................31
8.2 Management ....................................................................................................................31
8.2.1 Default state ....................................................................................................................31
8.2.2 Commands Hierarchy ......................................................................................................31
8.2.3 Commands Description ...................................................................................................32
IP Interfaces..................................................................................................33
9.1 IP Interfaces ....................................................................................................................33
9.1.1 Interface Assignment Rules..............................................................................................34
9.1.2 IP interface id ..................................................................................................................35
9.1.3 IP interface VLAN id.......................................................................................................35
9.1.4 IP Interface Commands Hierarchy ...................................................................................35
9.1.5 IP Interface Commands Description................................................................................36
9.1.6 IP Interface Example .......................................................................................................36
9.1.7 DHCP Example...............................................................................................................39
Diagnostic.....................................................................................................40
10.1 System logs export ...........................................................................................................40
10.1.1 Commands Hierarchy ......................................................................................................40
10.1.2 Commands Description ...................................................................................................40
10.2 Capture Ethernet service traffic .......................................................................................40
10.2.1 Commands Hierarchy ......................................................................................................41
10.2.2 Commands Description ...................................................................................................41
10.2.3 Example ..........................................................................................................................42
10.3 Syslog ..............................................................................................................................43
10.3.1 Syslog Priority indicator ...................................................................................................43
10.3.2 Syslog Commands Hierarchy............................................................................................44
10.3.3 Syslog Output example ....................................................................................................44
Alarm Relay..................................................................................................45
11.1 Alarm Relay Wiring example ............................................................................................45

iSG4F User’s Manual
iS5 Communications Inc.
5
11.2 Alarm Relay Contact Capabilities .....................................................................................46
11.3 Supported Alarms............................................................................................................46
11.3.1 SFP port state ..................................................................................................................46
11.3.2 L2 VPN state...................................................................................................................46
11.3.3 System up/down..............................................................................................................46
11.4 Default state ....................................................................................................................46
11.5 Commands Hierarchy ......................................................................................................46
11.6 Commands Description ...................................................................................................47
Clock and Time ............................................................................................48
12.1 Local Clock Commands Hierarchy...................................................................................48
12.2 Local Clock Commands Description................................................................................49
12.3 Set Local Clock Example .................................................................................................49
ACLs .............................................................................................................49
13.1 ACL Commands Hierarchy ..............................................................................................50
13.2 ACL Commands Descriptions .........................................................................................50
13.3 Configuration Example....................................................................................................53
QOS...............................................................................................................53
14.1 QOS Commands Hierarchy .............................................................................................53
14.2 QOS Commands Descriptions.........................................................................................53
NAT................................................................................................................54
15.1 NAT Networking.............................................................................................................54
15.2 NAT Commands Hierarchy .............................................................................................55
15.3 NAT Commands Description ..........................................................................................56
15.4 NAT Example .................................................................................................................56
OSPF.............................................................................................................59
16.1 OSPF Application Commands Hierarchy.........................................................................59
16.2 OSPF Application Commands Descriptions ....................................................................59
16.3 OSPF setup example........................................................................................................60
RIPv2.............................................................................................................66
17.1 RIP Commands Hierarchy ...............................................................................................66
17.2 RIP Commands Descriptions...........................................................................................67
Serial Ports and Services............................................................................68
18.1 Serial interfaces ................................................................................................................69
18.2 Services configuration structure .......................................................................................69

iSG4F User’s Manual
iS5 Communications Inc.
6
18.3 Serial Commands Hierarchy .............................................................................................70
18.4 Serial Commands Description..........................................................................................71
18.5 Declaration of ports ........................................................................................................74
18.6 Serial Port Default State ...................................................................................................75
18.7 RS- 232 Port Pin Assignment...........................................................................................75
18.8 RS- 232 Serial cable..........................................................................................................76
18.9 Led States ........................................................................................................................76
Transparent Serial Tunneling......................................................................77
19.1 Concept of Operation .....................................................................................................77
19.2 Supported Network Topologies .......................................................................................78
19.2.1 Point to Point ..................................................................................................................78
19.2.2 Point to multipoint point .................................................................................................78
19.2.3 Multi Point to multipoint point ........................................................................................79
19.3 Modes of Operation ........................................................................................................79
19.3.1 Port Mode .......................................................................................................................80
19.3.2 Service Buffer Mode ........................................................................................................80
19.3.3 Service Connection Mode ................................................................................................81
19.4 Addressing Aware Modes.................................................................................................81
19.5 Reference drawing............................................................................................................82
19.6 Serial Traffic Direction.....................................................................................................83
19.6.1 Serial ports counters ........................................................................................................83
19.7 Allowed Latency ..............................................................................................................84
19.8 Tx Delay..........................................................................................................................84
19.9 Bus Idle Time ..................................................................................................................84
19.9.1 Byte mode .......................................................................................................................84
19.9.2 Frame mode.....................................................................................................................84
19.10 Example Serial Tunneling.................................................................................................85
Protocol Gateway IEC 101 to IEC 104 ........................................................86
20.1 Modes of Operation ........................................................................................................87
20.2 IEC101/104 Gateway properties IEC 101 .......................................................................88
20.3 IEC101/104 Gateway Configuration................................................................................89
20.4 Gateway 101/104 Configuration Flow .............................................................................90
20.5 Gateway 101/104 Commands Hierarchy..........................................................................92
20.6 Gateway 101/104 Commands..........................................................................................93
20.7 Example Gateway 101/104..............................................................................................96
Terminal Server............................................................................................98
21.1 Terminal Server service....................................................................................................98

iSG4F User’s Manual
iS5 Communications Inc.
7
21.2 Terminal Server Commands Hierarchy...........................................................................100
21.3 Terminal Server Commands...........................................................................................101
21.4 Example local Service ....................................................................................................107
21.5 Example Networking .....................................................................................................111
Modbus Gateway .......................................................................................113
22.1 Modbus Gateway Implementation .................................................................................113
22.2 Modbus Gateway Commands Hierarchy ........................................................................113
22.3 Modbus Gateway Commands Description .....................................................................115
22.4 Modbus Gateway Example ............................................................................................116
DNP3 Gateway............................................................................................119
23.1 DNP3 Gateway Example...............................................................................................119
VPN .............................................................................................................120
24.1 Background ...................................................................................................................120
24.2 Modes supported ...........................................................................................................120
24.3 Layer 2 VPN..................................................................................................................120
24.4 Layer 3 DM-VPN ..........................................................................................................121
24.5 L2-VPN Commands Hierarchy ......................................................................................121
24.6 L2-VPN Commands ......................................................................................................122
24.7 L3 DM-VPN Commands Hierarchy...............................................................................122
24.8 L3 IPSec-VPN Commands Hierarchy ............................................................................123
24.9 IPSec .............................................................................................................................124
24.10 Applications...................................................................................................................124
24.11 Authentication Header (AH) ..........................................................................................124
24.12 Encapsulating Security Payload (ESP) ............................................................................124
24.13 Security Associations......................................................................................................124
24.14 ISAKMP........................................................................................................................125
24.15 IKE ...............................................................................................................................125
24.15.1 ISAKMP Phase 1...........................................................................................................125
24.15.2 ISAKMP Phase 2...........................................................................................................132
24.16 IPSec Command Association .........................................................................................133
24.17 IPSec Commands Hierarchy ..........................................................................................134
24.18 IPsec Commands ...........................................................................................................136
24.19 IPSec defaults ................................................................................................................142
GPRS/UMTS Interface................................................................................142
25.1 Overview .......................................................................................................................142
25.2 Method of operation .....................................................................................................143

iSG4F User’s Manual
iS5 Communications Inc.
8
25.2.1 SIM card state................................................................................................................144
25.2.2 Backup and redundancy .................................................................................................146
25.3 GPRS/UMTS Commands Hierarchy .............................................................................147
25.4 GPRS/UMTS Commands Description ..........................................................................148
25.5 Default State ..................................................................................................................152
25.6 Led States ......................................................................................................................152
25.7 Example for retrieving the IMEI....................................................................................152
25.8 Example for SIM Status .................................................................................................153
VPN Setup Examples.................................................................................154
26.1 L2 VPN over Layer 3 cloud ...........................................................................................154
26.1.1 Network drawing ...........................................................................................................154
26.1.2 Configuration.................................................................................................................154
26.1.3 Implementing IPSec.......................................................................................................157
26.2 L3 IPSec VPN over Layer 3 cloud..................................................................................157
26.2.1 Network drawing ...........................................................................................................158
26.2.2 Configuration.................................................................................................................158
26.3 DM-VPN Setup.............................................................................................................163
26.3.1 Network drawing ...........................................................................................................163
26.3.2 Configuration.................................................................................................................164
26.4 DM-VPN over Cellular Setup ........................................................................................167
26.4.1 Network drawing ...........................................................................................................168
26.4.2 Configuration.................................................................................................................169
26.4.3 Testing the setup............................................................................................................172
26.4.4 Adding a terminal server service ....................................................................................175
26.4.5 Adding a transparent serial tunneling service..................................................................176
Application Aware Firewall........................................................................177
27.1 Firewall Service Flow .....................................................................................................177
27.2 Firewall Flow Illustration ...............................................................................................178
27.3 Supported Hardware......................................................................................................178
27.4 Configuration.................................................................................................................178
27.5 Example ........................................................................................................................179
27.6 Firewall Commands Hierarchy .......................................................................................180
27.7 Firewall Commands .......................................................................................................180
Technical Specifications ...........................................................................182

iSG4F User’s Manual
iS5 Communications Inc.
9
FCC Statement and Cautions
Federal Communications Commission Radio Frequency Interference Statement
This equipment has been tested and found to comply with the limits for a Class A digital device
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment.
This equipment can generate, use, and radiate radio frequency energy. If not installed and used in
accordance with the instruction manual, may cause harmful interference to radio
communications. Operation of this equipment in a residential area is likely to cause harmful
interference in which case the user will at his/her own expense, be required to correct the
interference.
Caution: LASER
This product contains a laser system and is classified as a CLASS 1 LASER PRODUCT. Use of controls
or adjustments or performance of procedures other than those specified herein may result in
hazardous radiation exposure.
Caution: Service
This product contains no user-serviceable parts. Attempted service by unauthorized personnel shall
render all warranties null and void.
Changes or modifications not expressly approved by iS5 Communications Inc. could invalidate
specifications, test results, and agency approvals, and void the user's authority to operate the
equipment.
Should this device require service, please contact [email protected].
Caution: Physical Access
This product should be installed in a restricted access location. Access should only be gained by qualified
service personnel or users who have been instructed on the reasons for the restrictions applied at the
location, and any precautions that havebeen taken. Access must only be via the use of a tool or lock
and key, or other means of security, and is controlled by the authority responsible for the location.

iSG4F User’s Manual
iS5 Communications Inc.
10
Getting to Know Your Router
1.1 About the iSG4F Intelligent Flexible Secure Gateway
The iSG4F Flexible Secure Gateway is designed for use in remote sites that require secure remote
connections over a public network (via serial or IP connection). A serial RTU/IED connected to an
iSG4F would communicate its data over a landline or a cellular public/private connection for those
sites that are remotely distributed and connected to a SCADA control center. The user data can
either be transparently encapsulated over an IP tunnel, or converted to an IP SCADA session using
the integrated SCADA gateway. Network connectivity is secured using a Layer 2 or Layer 3 VPN
with IPSec, as well a SCADA firewall for validating all traffic to the device. The iSG4F can be
managed centrally and conveniently by our powerful Windows utility called the iManage Software
Suite. The product is made from galvanized steel and has a wide operating temperature from -40°C
to 85°C suitable for the harshest of environments without the use of fans.
1.2 Software Features
Layer 2 and Layer 3 VPN with IPSec
SCADA firewall for validating all traffic to the device
Supports Layer 3 protection
Supports Gateway Translation for IES 101, IEC 104, Modbus and DNP3
ACL (Access Control Lists)
NAT (Network Address Translation)
OSPF (Open Shortest Path First) protocol
RIPv2 (Routing Information Protocol)
Transparent Serial Tunneling
Terminal Server service for transposing of a TCP session to serial session
Modbus RTU to Modbus TCP
GPRS/UMTS Interface
1.3 Hardware Features
Network Uplink over Ethernet or Cellular
Supports 2 x RS232 ports, or 1 x RS232 and 1x RS485 port (RJ45 sockets)
Supports 1x 10/100 Base (TX) and 1 x 1000 Base (X) Ethernet Ports
Supports 2 SIM Cellular Interfaces for connecting to remote sites over a cellular network
Console Port
Dual Redundant Power Input
Wide Operating Temperature: -40 to 85oC