Kieback&Peter IT554 Guide

Kieback&Peter GmbH & Co. KG
Tempelhofer Weg 50, 12347 Berlin/Germany
Telefon: [phone], Telefax: [phone]
www.kieback-peter.de, [e-mail]
Datasheet 4.30-50.554-11-EN
IT554
Issue 2012-01-23
A
Änderungen vorbehalten - Contents subject to change - Sous réserve de modifications - Reservado el derecho a modificación - Wijzigingen
voorbehouden - Con riserva di modifiche - Innehåll som skall ändras - Změny vyhrazeny - Zmiany zastrzeżone - Возможны изменения -
A változtatások jogát fenntartjuk - 保留未经通知而改动的权力
Commissioning
IT554 VPN Router
Application
IT554 is a VPN router with client functionality and
customized software that enables the secure transfer of
encrypted data between controllers and building
management systems. It serves as a central firewall and
VPN gateway for small-sized and medium-sized
locations.
Content Page
Important Information Regarding Product Safety ..................................................................................................2
Commissioning ......................................................................................................................................................3
Preparatory steps ................................................................................................................................................3
Connecting the Router.........................................................................................................................................3
Installing Firmware on the VPN Router .................................................................................................................3
Initial firmware installation of the IT554 VPN Router ...........................................................................................4
Update of the IT554 VPN Router.........................................................................................................................5
Resetting the VPN Router .....................................................................................................................................6
Connecting the Router On-Site..............................................................................................................................6

APage 2 / 8
CommissioningIT554
Datasheet 4.30-50.554-11-EN
Important Information Regarding Product Safety
Safety Instructions
This data sheet contains information on installing and commissioning the product "IT554". Each
person who carries out work on this product must have read and understood this data sheet. If you
have any questions that are not resolved by this data sheet, you can obtain further information from
the supplier or manufacturer.
If the product is not used in accordance with this data sheet, the protection provided will be impaired.
Applicable regulations must be observed when installing and using the device. Within the EU, these
include regulations regarding occupational safety and accident prevention as well as those from the
VDE (Association for Electrical, Electronic & Information Technologies). If the device is used in other
countries, it is the responsibility of the system installer or operator to comply with local regulations.
Mounting, installation and commissioning work on the devices may only be carried out by qualified
technicians. Qualified technicians are persons who are familiar with the described product and who
can assess given tasks and recognize possible dangers due to technical training, knowledge and
experience as well as knowledge of the appropriate regulations.
Legend
WARNING
Indicates a hazard of medium risk which can result in death or severe bodily injury if it is not avoided.
CAUTION
Indicates a hazard of low risk which can result in minor or medium bodily injury if it is not avoided.
!NOTICE
Indicates a hazard of medium risk which can result in material damage or malfunctions if it is not
avoided.
NOTE
Indicates additional information that can simplify the work with the product for you.
Notes on Disposal
For disposal, the product is considered waste from electrical and electronic equipment (electronic
waste) and must not be disposed of as household waste. Special treatment for specific components
may be legally binding or ecologically sensible. The local and currently applicable legislation must be
observed.

A
Page 3 / 8
Datasheet 4.30-50.554-11-EN
IT554Commissioning
Commissioning
Preparatory steps
NOTE
The router may only be configured by a qualified specialist. Changing the firmware and setting up an
IP address within an existing network may render the computers in the network unable to establish a
connection with each other.
Before performing the tasks described below, you must successfully complete the Kieback&Peter
online training course “Network Technology 1” at https://testcenter.kiebackpeter.kup.
To install the firmware, up-to-date firmware must be available for all VPN routers. Up-to-date firmware
is created with the TechnoWay Configurator (see the TechnoWay Configurator user manual).
NOTE
Ensure that the Internet access router is configured to support a permanent Internet connection.
Otherwise you may experience interruptions in the connection.
Configuring port forwarding on the Internet access router
For the VPN server: Port 1194/UDP must be forwarded to the WAN IP of the VPN router on the
Internet access router.
►To do this, contact the network administrator of the network in which the server is located.
NOTE
Make sure that none of the LAN or WAN networks conflict with any of the client WAN networks
distributed via DHCP. This could cause connection problems between the affected peers.
Connecting the Router
►Unpack the router.
►Check the scope of delivery.
Scope of delivery:
■1x IT554 VPN router
■1x power supply unit including power cable
Connect:
►Connect the router to the LAN port of the Windows PC with a patch cable.
!NOTICE
Damage to property can result from the use of non-original power supply units.
Use only the original power supply unit. The router can be damaged if another power supply unit is
used.
►Connect the VPN router to the power supply.
The “Power” LED flashes during the startup procedure.
Once the “Power” LED lights up steadily, the startup procedure is complete.
Installing Firmware on the VPN Router
Depending on the project, there are two different ways to update the firmware:
■Initial firmware installation:
Initial installation of the Kieback&Peter firmware on a IT554 VPN router
■Updating existing firmware:
Updating IT554 VPN routers when there are changes to the network configuration

APage 4 / 8
CommissioningIT554
Datasheet 4.30-50.554-11-EN
Requirements
For the initial installation of the firmware, you will need the BIN file from the generated ZIP file. (See
the TechnoWay Configurator user manual.)
The TRX file is used to update the firmware. (See the TechnoWay Configurator user manual.)
►Unpack the ZIP file.
Initial firmware installation of the IT554 VPN Router
Initial firmware installation
During the initial firmware installation, the pre-installed firmware is replaced by the new firmware.
►Ensure that all routers have been labeled.
►Start the browser.
►Enter the IP address of the router in the address field of the browser: “http://192.168.1.1”.
►Press the ENTER key.
The firmware starts and opens the logon dialog.
►Skip over the “User name” text box. It remains empty.
►Enter the password “admin”.
►Click the “OK” button.
The start screen of the firmware is displayed.
►Select the “Administration” menu.
►Select the “Update firmware” menu.
The selection dialog for the upgrade file is displayed.
►Click the “Browse” button.
►Select the BIN file.
►Click the “Update” button.
The firmware installation is carried out.
NOTE
In the “Update successful” window, do not click the button “Continue”. Since the IP address of the
VPN router was changed by the installation, this results in a browser error message.
Restarting the VPN router
After successful installation, the router restarts. The “Power” LED flashes during startup. The new IP
address is activated. After about two minutes, the restart is complete. When the “Power” LED stops
flashing, the firmware is installed.
►Switch off the router for at least three seconds. Alternatively, you can remove the network cable
from the LAN port.
►Switch on the router or insert the network cable back into the LAN port.
The computer recognizes the new IP address and establishes the connection to the router.
NOTE
Check the connection to the new IP address of the router by entering the IP address in the address
field of the browser.
NOTE
Label the router with the configuration ID and LAN IP.

A
Page 5 / 8
Datasheet 4.30-50.554-11-EN
IT554Commissioning
Access to a VPN router with unknown IP configuration
If you do not know the IP address of the VPN router, use the following steps to import a valid firmware
image.
►Use a patch cable to connect the LAN port of the VPN router to a Windows PC.
►Configure the network interface of the PC to DHCP.
The VPN router assigns network settings to the PC using DHCP.
The gateway assigned to the PC corresponds to the IP address of the router.
►Connect to the VPN router using the browser.
►Carry out another update of the firmware (See chapter “Updating the firmware after network
changes”, page 5.).
Update of the IT554 VPN Router
Updating the firmware after network changes
►Ensure that all routers have been labeled.
►Start the browser.
►Enter the IP address of the router in the address field of the browser.
►You can find the IP address on the router.
►Press the ENTER key.
The firmware starts and opens the logon dialog.
►Enter the user name “root”.
►Enter the password in the corresponding “Password” text box according to the printed configu-
ration overview.
►Click the “Login” button.
The start screen of the firmware is displayed.
►Select the “System” menu.
►Select the “Flash Firmware” submenu.
The selection dialog for the upgrade file is displayed.
►Click the “Browse” button.
►Select the TRX file.
►Deactivate the “Keep configuration files” checkbox so that the system settings from the TRX file
are applied.
►Click the “Upload image” button.
The screen displays an information window.
►Click the “Proceed” button to start the update of the firmware.
Restarting the VPN router
After successful installation, the router restarts. The “Power” LED flashes during startup. The new IP
address is activated. After about two minutes, the restart is complete. When the “Power” LED stops
flashing, the firmware is installed.
►Switch off the router for at least three seconds. Alternatively, you can remove the network cable
from the LAN port.
►Switch on the router or plug the network cable back into the LAN port.
The computer recognizes the new IP address and establishes the connection to the router.
NOTE
Check the connection to the new IP address of the router by entering the IP address in the address
field of the browser.

APage 6 / 8
CommissioningIT554
Datasheet 4.30-50.554-11-EN
NOTE
Update the label on the router.
Resetting the VPN Router
Resetting the VPN router
You cannot reset the router yourself.
►Send in the router when a reset is necessary.
Connecting the Router On-Site
!NOTICE
Before connecting the router to the broadband router, check the IP network distributed to this router
via DHCP. Make sure that the IP network does not conflict with any other IP network in this
TechnoWay configuration.
If the IP network conflicts with another IP network, change this DHCP network on the broadband
router to an available subnet.
►Connect the VPN router according to the following diagrams.
NOTE
Check the connection to the new IP address of the router by entering the IP address in the address
field of the browser.
Connection
1 Internet: The Internet port (WAN connection) is used to connect the Internet connection
(broadband router).
2 1, 2, 3, 4: These Ethernet ports (LAN connection) connect the router with PCs, the BMS
or controllers.
3 Power: The power supply unit is connected to the power supply.
3
21

A
Page 7 / 8
Datasheet 4.30-50.554-11-EN
IT554Commissioning
Connection Diagram
Status indicators
1 Power
2DMZ
3 Ethernet
4 Internet
LEDs Status Description
Power
On/Off
Lights up/flashes
green
Lights up green when the router is supplied with current. Flashes
during startup when a self-diagnosis is being carried out.
DMZ Lights up green Lights up green if the DMZ function is in use.
Ethernet
1, 2, 3, 4
Lights up/flashes
green
When the relevant LED lights up steadily, the router is connected
to a device on this port. When the relevant LED flashes, there is
network activity on this port.
Internet Lights up/flashes
green
Lights up green if a connection is established on the Internet port.
When the relevant LED flashes, there is network activity on this
port.
VPN-Client VPN-Server
Internet
Router Router
VPN
LAN A LAN B
IT554 IT560
321 4

APage 8 / 8
CommissioningIT554
Datasheet 4.30-50.554-11-EN