Moxa Technologies SMG-6100 User manual

SMG-1100/6100 User’s Manual
First Edition, January 2011
www.moxa.com/product
© 2011 Moxa Inc. All rights reserved.
Reproduction without permission is prohibited.

SMG-1100/6100 User’s Manual
The software described in this manual is furnished under a license agreement and may be used only in accordance with
the terms of that agreement.
Copyright Notice
Copyright ©2011 Moxa Inc.
All rights reserved.
Reproduction without permission is prohibited.
Trademarks
The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their respective manufacturers.
Disclaimer
Information in this document is subject to change without notice and does not represent a commitment on the part of
Moxa.
Moxa provides this document as is, without warranty of any kind, either expressed or implied, including, but not limited
to, its particular purpose. Moxa reserves the right to make improvements and/or changes to this manual, or to the
products and/or the programs described in this manual, at any time.
Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no responsibility for
its use, or for any infringements on the rights of third parties that may result from its use.
This product might include unintentional technical or typographical errors. Changes are periodically made to the
information herein to correct such errors, and these changes are incorporated into new editions of the publication.
Technical Support Contact Information
www.moxa.com/support
Moxa Americas
Toll-free: 1-888-669-2872
Tel: [phone]
Fax: [phone]
Moxa China (Shanghai office)
Toll-free: 800-820-5036
Tel: [phone]
Fax: [phone]
Moxa Europe
Tel: [phone]
Fax: [phone]
Moxa Asia-Pacific
Tel: [phone]
Fax: [phone]

Table of Contents
1. Introduction...................................................................................................................................... 1-1
Overview...........................................................................................................................................1-2
Introduction to IPSec VPN Connectivity .................................................................................................1-2
IPSec VPN Requirements..............................................................................................................1-2
Typical IPSec VPN Scheme ...........................................................................................................1-2
Planning IPSec VPNs....................................................................................................................1-2
Configuring IPSec Tunnels............................................................................................................1-3
Introduction to MODBUS Gateway ........................................................................................................1-3
MODBUS Gateway Applications .....................................................................................................1-3
Managing MODBUS Gateway.........................................................................................................1-4
2. Installation ....................................................................................................................................... 2-1
Installation ........................................................................................................................................2-2
Deploying the SMG-1100..............................................................................................................2-2
Installing Device Configuration Gateway................................................................................................2-2
Installing SMG Manager.......................................................................................................................2-4
Uninstalling Device Configuration Gateway and SMG Manager..................................................................2-6
3. SMG Manager .................................................................................................................................... 3-1
Launching Device Configuration Gateway...............................................................................................3-2
Launching SMG Manager .....................................................................................................................3-2
Connecting to Device Configuration Gateway .........................................................................................3-3
Introduction to the SMG Manager Interface............................................................................................3-5
Menu Bar Introduction .................................................................................................................3-5
Toolbar Functions ...............................................................................................................................3-7
Login/Change Password ...............................................................................................................3-7
Locate .......................................................................................................................................3-8
Set Device Name.........................................................................................................................3-9
Network Setup............................................................................................................................3-9
GPRS.......................................................................................................................................3-11
VPN(IPSec)...............................................................................................................................3-13
Modbus....................................................................................................................................3-20
Import/Export Configuration.......................................................................................................3-24
Apply.......................................................................................................................................3-25
Monitor Connections ..................................................................................................................3-25
Upgrading the Firmware.............................................................................................................3-26
Reboot.....................................................................................................................................3-28
Disconnecting Device Configuration Gateway................................................................................3-28

1
1. Introduction
Thank you for using Moxa’s SMG-6100 IPSec Gateway and SMG-1100 MODBUS Gateway. These products help
you easily establish the secured network communication with the IPSec protection and the protocol conversion
between MODBUS/Serial and MODBUS/TCP. In this manual, you will learn how to configure and monitor the
SMG-6100 and the SMG-1100 for your network communication.
The following topics are covered in this chapter:

Overview

Introduction to IPSec VPN Connectivity
IPSec VPN Requirements
Typical IPSec VPN Scheme
Planning IPSec VPNs
Configuring IPSec Tunnels

Introduction to MODBUS Gateway
MODBUS Gateway Applications
MODBUS TCP Master
MODBUS RTU/ASCII Master
Managing MODBUS Gateway

SMG-1100/6100 Introduction
1-2
Overview
The SMG-6100 can be used as a smart gateway with sophisticated Machine-to-Machine solutions to help
construct a tunnel server (IPSec) and bi-directional IP communications. When used with Moxa’s SMG-1100, the
SMG-6100 can serve as a secure networking host over IPSec to back-end host computers and MODBUS TCP
Master/Slave devices.
In addition, the SMG-1100 features 2 software selectable RS-232/422/485 ports, 1 Ethernet port, and
quad-band GPRS/EDGE 900/1800/850/1900 MHz for cellular communication.
The SMG-1100 series provides a sophisticated wireless M2M solution for distributed MODBUS devices.
Implemented with protocol conversion functionality, the SMG-1100 can serve both serial masters and slaves
and the built-in IPSec function guarantees that data transmission is encrypted in a wireless connectivity
environment.
Introduction to IPSec VPN Connectivity
This section describes how to use and manage IPSec VPN on the SMG-6100.
IPSec VPN Requirements
The following requirements must be met to use IPSec VPN on the SMG-6100:
You must have a fixed public IP address accessible to the Internet.
You must have a computer running Device Configuration Gateway (DCG) and SMG Manager to set up and
monitor IPSec VPN for the SMG-6100.
Typical IPSec VPN Scheme
An SMG-6100 acting as an IPSec VPN gateway can create multiple IPSec VPN tunnels between its VPN subnet
interface and remote mobile SMGs via the Internet. An IPSec VPN tunnel is created between the remote
SMG-1100s and the SMG-6100. Computers on the same VPN subnet as the SMG-6100 can securely and
mutually communicate with remote mobile SMGs via IPSec VPN tunnels.
Planning IPSec VPNs
The IPSec tunnel provides mobile operators with an independent solution that considers remote mobile SMGs
part of the internal intranet, allowing several remote mobile SMGs to be implemented on the same subnet. In
the example illustrated below, the SMG-1100 is assigned the IP address of 192.168.30.95 during LAN 1 port
network configuration. After it is deployed to the remote site, its IP address does not need to be changed. This
is convenient as it allows administrators to configure programs such as SCADA and remote device monitoring
at the local field site with a fixed IP address.

SMG-1100/6100 Introduction
1-3
Configuring IPSec Tunnels
To set up IPSec tunnels between the SMG-6100 and the remote mobile SMG (the SMG-1100), refer to the
VPN(IPSec) section in the SMG Manager chapter of this manual. We strongly recommend that IPSec tunnels
be configured from the SMG-6100 and deployed to the SMG-1100 at the same time via SMG Managerat the
local site. When finished, the SMG-1100 can be moved to the remote field site.
Introduction to MODBUS Gateway
The Moxa SMG-1100 is a secure mobile MODBUS gateway that provides IPSec tunnels between itself and the
peer IPSec Gateway SMG-6100 via the Internet while transferring MODBUS messages. It features two
RS-232/422/485 serial ports, one 10/100 Mbps Ethernet port, and a GPRS/EDGE wireless module for mobile
connections.
MODBUS Gateway Applications
MODBUS TCP Master
In the MODBUS Gateway configuration for a MODBUS TCP master and MODBUS RTU/ASCII slave, programs
running on the MODBUS TCP master can securely send MODBUS TCP request messages via the Internet to the
MODBUS TCP slave. The MODBUS Gateway then sequentially converts MODBUS TCP request messages to
MODBUS RTU/ASCII messages and sends the request messages to connected MODBUS RTU/ASCII slave
devices through the serial port, based on specified slave ID values in the MODBUS request messages and
settings in the MODBUS Gateway. When the slave devices receive MODBUS RTU/ASCII request messages, they
reply with MODBUS RTU/ASCII response messages to the MODBUS Gateway. Once the MODBUS Gateway
receives MODBUS RTU/ASCII response messages, they are converted to MODBUS TCP response messages and
sent to the corresponding programs of the MODBUS TCP master.

SMG-1100/6100 Introduction
1-4
MODBUS RTU/ASCII Master
In the MODBUS Gateway configuration for a MODBUS RTU/ASCII master and MODBUS TCP slave, the software
running on each MODBUS RTU/ASCII master device sends MODBUS RTU/ASCII request messages to the
MODBUS Gateway via its connected serial port. The MODBUS Gateway then converts the messages to MODBUS
TCP request messages and securely sends them to MODBUS TCP slaves in MODBUS TCP slave devices via the
Internet, based on slave ID values in the MODBUS request messages and settings in the MODBUS Gateway.
After the slave devices receive MODBUS TCP request messages, they reply with MODBUS TCP response
messages to the MODBUS Gateway. Once the MODBUS Gateway receives MODBUS TCP response messages,
they are converted to MODBUS RTU/ASCII response messages and sent to the corresponding MODBUS
RTU/ASCII master device.
Managing MODBUS Gateway
After the MODBUS Gateway application for each serial port is determined, the configuration of MODBUS
Gateway can be set up via SMG Manager. Refer to MODBUS section for detailed MODBUS Gateway configuration
instructions.

2
2. Installation
The following topics are covered in this chapter:

Installation
Deploying the SMG-1100

Installing Device Configuration Gateway

Installing SMG Manager

Uninstalling Device Configuration Gateway and SMG Manager

SMG-1100/6100 Installation
2-2
Installation
Deploying the SMG-1100
You must use SMG Manager to configure the SMG-1100. In the example shown below, SMG Manager, Device
Configuration Gateway, and the SMG-6100 are all on subnet 192.168.3.xxx. Each SMG-1100 also has an
intranet IP address in subnet 192.168.30.xxx, and this IP address is used when the SMG-1100 is deployed at
the remote site. The next step in the implementation process is to insert the SIM card, Ethernet cable and
power cable. After the SMG-1100 is accessible via the LAN, SMG-1100 should connect to Device Configuration
Gateway automatically. Finally, use SMG Manager to configure the SMG-1100. A step-by-step procedure is
outlined below.
1. Refer to the MODBUS section in the SMG Manager chapter of this manual to set up the MODBUS Gateway.
In addition, see Step 4 below to manage MODBUS Gateways on an SMG-1100.
2. Refer to the VPN(IPSec) section in the SMG Manager chatper to create an IPSec tunnel between an
SMG-6100 and SMG-1100.
3. When deploying the SMG-1100, change the IP address of the LAN port to a static private IP address,
without default gateway. In the example shown above, 192.168.30.95 is used for the SMG-1100.
4. Reboot the SMG-1100 to test the configuration.
5. Power off the SMG-1100 and deploy it to the remote site.
To use SMG Manager to remotely monitor and manage Moxa’s SMGs, you need to install two software
programs:
1. Device Configuration Gateway: This program must be installed on the computer(s) used as the Device
Configuration Gateway. It serves as a portal between two programs, allowing them to share information by
communicating between protocols on the same computer or between computers. Device Configuration
Gateway can be used to connect to many SMGs at remote sites, so that a centralized management
architecture can be established.
2. SMG Manager: This program is installed on the computer, usually a PC or a laptop, in the control center.
It allows users to connect to the Device Configuration Gateway to monitor and manage the remote SMGs.
Installing Device Configuration Gateway
Device Configuration Gateway should be installed on the computers that you will use as the Device
Configuration Gateway that the remote SMGs connect to. Device Configuration Gateway can be downloaded
from Moxa's website. The files will be packaged as zip files.
Follow these steps to install Device Configuration Gateway.
1. Unzip the file and double click DCG_Setup_Ver1.0_Build_xxx.exe to start the installation procedure.
Client IP:
Wan IP:
Client IP:

SMG-1100/6100 Installation
2-3
2. Click Next to continue.
3. Next, select Browse if you would like DCG to be installed in a different folder. Click Next to continue.
4. Click Finish to complete the installation procedure.

SMG-1100/6100 Installation
2-4
Installing SMG Manager
SMG Manager should be installed on the computers at the control center. Once installed, the computers at the
local site can connect to the Device Configuration Gateway and connect over the internet to the SMGs at the
remote site. SMG Manager can be downloaded from Moxa’s website.
The files will be packaged in zip format. Follow these steps to install SMG Manager.
1. Unzip the files and then double click SMG Manager V1.0_Build_xxx.msi to start the installation.
2. Click Next to continue.

SMG-1100/6100 Installation
2-5
3. Next, select Browse if you would like SMG Manager to be installed in a different folder. Click Next to
continue.
4. Click Next to confirm the installation.
5. Wait until the installation has finished.

SMG-1100/6100 Installation
2-6
6. Click Close to complete the installation procedure.
Uninstalling Device Configuration Gateway and
SMG Manager
Follow these instructions to uninstall Device Configuration Gateway and SMG Manager.
1. Select Add or Remove Programs from Start Settings Control Panel.
2. Select Device Configuration Gateway and SMG Manager from the program list, and click Remove to
continue.

SMG-1100/6100 Installation
2-7
3. Click Yes to start removing Device Configuration Gateway or SMG Manager from your computer.

3
3. SMG Manager
This chapter describes how to use SMG Manager to monitor and configure SMG-6100 and SMG-1100 devices at
remote sites over the Internet.
The following topics are covered in this chapter:

Launching Device Configuration Gateway

Launching SMG Manager

Connecting to Device Configuration Gateway

Introduction to the SMG Manager Interface
Menu Bar Introduction

Toolbar Functions
Login/Change Password
Locate
Set Device Name
Network Setup
GPRS
VPN(IPSec)
Modbus
Import/Export Configuration
Apply
Monitor Connections
Upgrading the Firmware
Reboot
Disconnecting Device Configuration Gateway

SMG-1100/6100 SMG Manager
3-2
Launching Device Configuration Gateway
Before using SMG Manager on your PC to manage SMGs, you must first run Device Configuration Gateway.
1. Select Device Configuration Gateway from the Start menu under All ProgramsMOXA.
2. The Device Configuration Gateway will run in the background; an icon will be displayed in the system tray.
Launching SMG Manager
1. Click SMG Manager from Start All Programs MOXA.

SMG-1100/6100 SMG Manager
3-3
2. Once launched, the SMG Manager interface will appear.
Connecting to Device Configuration Gateway
1. Choose Gateway Manager from Tools.

SMG-1100/6100 SMG Manager
3-4
2. Type in the IP address and the name of the Gateway Server. Click Add to continue.
3. The Gateway information will be displayed as follows. Click Connect to continue.
4. If the information is correct, you will be able to connect to the Gateway Server and the main screen of the
SMG Manager will appear. You can check the Gateway Server that has just been connected to in the left
panel.

SMG-1100/6100 SMG Manager
3-5
5. If you have left Gateway Server and would like to connect to the existing server again, right-click the name
of the Gateway, and then select Connect.
6. Please note that only one Gateway Server is allowed to connect. If you would like to connect to another
server, disconnect the first server and then connect the second one.
Introduction to the SMG Manager Interface
When you connect to a Gateway Server, the following screen will appear.
1. Menu Bar: Includes the Tools, Function, View, and Help menus.
2. Toolbar: The icons shown, listed from left to right, are Login/Change Password, Locate, Set Device Name,
Network Setup, GPRS, VPN(IPSec), Modbus, Import/Export Configuration, Apply, Monitor Connections,
Firmware Upgrade and Reboot. Note that if right-click a device, a list of function options will appear. Each
function will be introduced in the following sections.
3. Gateway & Device Tree: In this area, you can view the Gateway Server and the currently active SMGs
under this Gateway. Both gateway and IP address can be shown here. Double-click the Gateway icon, you
can view the all device information on the right frame.
4. Device List: This area contains all of the information on the SMGs attached under the Gateway Service that
you have connected to. This includes device IP, model name, firmware version, and device name.
Double-click a device icon to view information about a single SMG in the right frame.
Menu Bar Introduction
This section briefly introduces the options under the Tools, View, and Help menus.
Tools
Gateway Manager: Enables users to manage the gateway information and connect to the Device
Configuration Gateway Server.

SMG-1100/6100 SMG Manager
3-6
Exit: Click this to quit SMG Manager.
Function
Each function will be introduced in the Toolbar Functions section.
View
Allows you to decide if the toolbar will be displayed. Check the Toolbar option to show the toolbar; uncheck the
Toolbar option to remove the toolbar.
Help
Allows users to view the About SMG Manager information.