Moxa Technologies ToughNet User manual

ToughNet NAT Router User’s Manual
Edition 1.0, September 2015
www.moxa.com/product
© 2015 Moxa Inc. All rights reserved.
Reproduction without permission is prohibited.

ToughNet NAT Router User’s Manual
The software described in this manual is furnished under a license agreement and may be used only in accordance with
the terms of that agreement.
Copyright Notice
Copyright ©2015 Moxa Inc.
All rights reserved.
Reproduction without permission is prohibited.
Trademarks
The MOXA logo is a registered trademark of Moxa Inc.
All other trademarks or registered marks in this manual belong to their respective manufacturers.
Disclaimer
Information in this document is subject to change without notice and does not represent a commitment on the part of
Moxa.
Moxa provides this document as is, without warranty of any kind, either expressed or implied, including, but not limited
to, its particular purpose. Moxa reserves the right to make improvements and/or changes to this manual, or to the
products and/or the programs described in this manual, at any time.
Information provided in this manual is intended to be accurate and reliable. However, Moxa assumes no responsibility for
its use, or for any infringements on the rights of third parties that may result from its use.
This product might include unintentional technical or typographical errors. Changes are periodically made to the
information herein to correct such errors, and these changes are incorporated into new editions of the publication.
Technical Support Contact Information
www.moxa.com/support
Moxa Americas
Toll
-free: 1-888-669-2872
Tel:
[phone]
Fax:
[phone]
Moxa China (Shanghai office)
Toll
-free: 800-820-5036
Tel:
[phone]
Fax:
[phone]
Moxa Europe
Tel:
[phone]
Fax: [phone]
Moxa Asia
-Pacific
Tel:
[phone]
Fax: [phone]

Table of Contents
1. Introduction...................................................................................................................................... 1-1
Overview ........................................................................................................................................... 1-2
Package Checklist ............................................................................................................................... 1-2
Features ............................................................................................................................................1-2
Industrial Networking Capability....................................................................................................1-2
Designed for Industrial Applications ...............................................................................................1-2
Useful Utility and Remote Configuration .........................................................................................1-2
2. Getting Started.................................................................................................................................. 2-1
RS-232 Console Configuration (115200, None, 8, 1, VT100) ....................................................................2-2
Using Telnet to Access the ToughNet NAT Router’s Console......................................................................2-3
Using a Web Browser to Configure the ToughNet NAT Router ...................................................................2-4
3. TN-5916 Series Features and Functions ............................................................................................ 3-1
System..............................................................................................................................................3-2
System Information.....................................................................................................................3-2
User Account ..............................................................................................................................3-3
Date and Time ............................................................................................................................3-4
Warning Notification ....................................................................................................................3-6
System File Update—by Remote TFTP .......................................................................................... 3-10
System File Update—by Local Import/Export ................................................................................ 3-10
Restart..................................................................................................................................... 3-11
Reset to Factory Default............................................................................................................. 3-11
Port ................................................................................................................................................ 3-12
Port Settings............................................................................................................................. 3-12
Link Aggregation ....................................................................................................................... 3-13
The Port Trunking Concept ......................................................................................................... 3-13
Port Mirror................................................................................................................................ 3-15
Using Virtual LAN.............................................................................................................................. 3-15
The VLAN Concept ..................................................................................................................... 3-15
Configuring Virtual LAN .............................................................................................................. 3-16
Multicast.......................................................................................................................................... 3-18
The Concept of Multicast Filtering ................................................................................................ 3-18
IGMP Snooping ......................................................................................................................... 3-20
IGMP Snooping Settings ............................................................................................................. 3-20
IGMP Table............................................................................................................................... 3-21
Stream Table ............................................................................................................................ 3-22
Static Multicast MAC .................................................................................................................. 3-22
QoS ................................................................................................................................................ 3-23
QoS Classification...................................................................................................................... 3-23
CoS Mapping ............................................................................................................................ 3-24
ToS/DSCP Mapping.................................................................................................................... 3-24
MAC Address Table ........................................................................................................................... 3-25
Interface ......................................................................................................................................... 3-26
WAN ........................................................................................................................................ 3-26
LAN ......................................................................................................................................... 3-26
Network Service ............................................................................................................................... 3-27
DHCP Settings .......................................................................................................................... 3-27
SNMP Settings .......................................................................................................................... 3-30
Security........................................................................................................................................... 3-32
User Interface Management........................................................................................................ 3-32
Trusted Access.......................................................................................................................... 3-33
Monitor............................................................................................................................................ 3-34
Interface Statistics .................................................................................................................... 3-34
Port Statistics ........................................................................................................................... 3-35
Event Log................................................................................................................................. 3-35
4. Routing ............................................................................................................................................. 4-1
Unicast Routing ..................................................................................................................................4-2
Static Routing .............................................................................................................................4-2
RIP (Routing Information Protocol) ................................................................................................4-3
Routing Table .............................................................................................................................4-4
5. Network Redundancy ........................................................................................................................ 5-1
Layer 2 Redundant Protocols................................................................................................................5-2
Configuring RSTP ........................................................................................................................5-2
Configuring Turbo Ring V2............................................................................................................5-4
Layer 3 Redundant Protocols................................................................................................................5-5
VRRP Settings .............................................................................................................................5-5

6. Network Address Translation ............................................................................................................ 6-1
Network Address Translation (NAT).......................................................................................................6-2
NAT Concept...............................................................................................................................6-2
1-to-1 NAT .................................................................................................................................6-2
N-to-1 NAT .................................................................................................................................6-3
Port Forward............................................................................................................................... 6-4
7. Diagnosis .......................................................................................................................................... 7-1
Ping ..................................................................................................................................................7-2
LLDP .................................................................................................................................................7-2
A. MIB Groups ....................................................................................................................................... A-1

1
1. Introduction
Welcome to the Moxa TN-5916 ToughNet NAT Router series. The ToughNet NAT Router is designed for
connecting Ethernet-enabled devices with network IP security.
The following topics are covered in this chapter:

Overview

Package Checklist

Features
Industrial Networking Capability
Designed for Industrial Applications
Useful Utility and Remote Configuration

ToughNet NAT Router User's Manual Introduction
1-2
Overview
As the world’s network and information technology becomes more mature, the trend is to use Ethernet as the
major communications interface in many industrial communications and automation applications. In fact, a
entirely new industry has sprung up to provide Ethernet products that comply with the requirements of
demanding industrial applications.
The ToughNet TN-5916, designed for rolling stock backbone networks, is a high performance M12 router. It
supports NAT and routing functionality to facilitate the deployment of applications across networks. The
TN-5916 router uses M12 and other circular connectors to ensure tight, robust connections and guarantee
reliable resilience against environmental disturbances, such as vibration and shock. In addition, wide
temperature models are available that operate reliably in hazardous, -40 to 75°C environments.
Package Checklist
The ToughNet NAT Routers are shipped with the following items. If any of these items are missing or damaged,
please contact your customer service representative for assistance.
•1 Moxa ToughNet NAT Router
•RJ45 to DB9 console port cable
•Protective caps for unused ports
•Hardware installation guide (printed)
•CD-ROM with user’s manual and Windows utility
•Warranty card
Features
Industrial Networking Capability
•Network address translation (N-to-1, 1-to-1, and port forwarding)
Designed for Industrial Applications
•Bypass relay ensures non-stop data communication in the event the router stops working due to a power
failure
•EN 50155/50121-3-2 compliant. See specs for details about compliance with specific parts of these
standards
•-40 to 75°C operating temperature (T models)
•Dual 24 to 110 VDC power inputs
•IP54, rugged high-strength metal case
•DIN rail or panel mounting ability
Useful Utility and Remote Configuration
•Configurable using a Web browser and Telnet/Serial console
•Send ping commands to identify network segment integrity

2
2. Getting Started
This chapter explains how to access the ToughNet NAT Router for the first time. There are three ways to access
the router: (1) serial console, (2) Telnet console, and (3) web browser. The serial console connection method,
which requires using a short serial cable to connect the ToughNet NAT Router to a PC’s COM port, can be used
if you do not know the ToughNet NAT Router’s IP address. The Telnet console and web browser connection
methods can be used to access the ToughNet NAT Router over an Ethernet LAN, or over the Internet. A web
browser can be used to perform all monitoring and administration functions, but the serial console and Telnet
console only provide basic functions.
The following topics are covered in this chapter:

RS-232 Console Configuration (115200, None, 8, 1, VT100)

Using Telnet to Access the ToughNet NAT Router’s Console

Using a Web Browser to Configure the ToughNet NAT Router

ToughNet NAT Router User's Manual Getting Started
2-2
RS-232 Console Configuration (115200, None, 8,
1, VT100)
NOTE
Connection
Caution!
We strongly suggest that you do NOT use more than one connection method at the same time. Following this
advice will allow you to maintain better control over the configuration of your
ToughNet NAT Router
NOTE
We recommend using Moxa PComm
Terminal Emulator, which can be downloaded free of charge from Moxa’s
website.
Before running PComm Terminal Emulator, use an RJ45 to DB9-F (or RJ45 to DB25-F) cable to connect the
ToughNet NAT Router’s RS-232 console port to your PC’s COM port (generally COM1 or COM2, depending on
how your system is set up).
After installing PComm Terminal Emulator, perform the following steps to access the RS-232 console utility.
1. From the Windows desktop, click Start Programs PCommLite1.3 Terminal Emulator.
2. Select Open in the Port Manager menu to open a new connection.
3. The Communication Parameter page of the Property window will appear. Select the appropriate COM
port from the Ports drop-down list, 115200 for Baud Rate, 8 for Data Bits, None for Parity, and 1 for Stop
Bits.

ToughNet NAT Router User's Manual Getting Started
2-3
4. Click the Terminal tab, select VT100 for Terminal Type, and then click OK to continue.
5. The Console login screen will appear. Use the keyboard to enter the login account (admin or user), and
then press Enter to jump to the Password field. Enter the console Password (the same as the Web
Browser password; leave the Password field blank if a console password has not been set), and then press
Enter.
NOTE
The default
password is blank. For greater security, please change the default password after the first log in.
6. Enter a question mark (?) to display the command list in the console.
The following table lists commands that can be used when the ToughNet NAT Router is in console (serial or
Telnet) mode:
Login by Admin Account
Command Description
quit Exit Command Line Interface
exit Exit Command Line Interface
reload Halt and Perform a Cold Restart
terminal Configure Terminal Page Length
copy Import or Export File
save Save Running Configuration to Flash
ping Send Echo Messages
clear Clear Information
show Show System Information
configure Enter Configuration Mode
Using Telnet to Access the ToughNet NAT
Router’s Console
You may use Telnet to access the ToughNet NAT Router’s console utility over a network. To access the TN’s
functions over the network (by either Telnet or a web browser) from a PC host that is connected to the same
LAN as the ToughNet NAT Router, you need to make sure that the PC host and the ToughNet NAT Router are
on the same logical subnet. To do this, check your PC host’s IP address and subnet mask. By default, the LAN
IP address is 192.168.127.254 and the Industrial subnet mask is 255.255.255.0 (for a Class C subnet). If you
do not change these values, and your PC host’s subnet mask is 255.255.0.0, then its IP address must have the

ToughNet NAT Router User's Manual Getting Started
2-4
form 192.168.xxx.xxx. On the other hand, if your PC host’s subnet mask is 255.255.255.0, then its IP address
must have the form, 192.168.127.xxx.
NOTE
To use
the ToughNet NAT Router
’s management and monitoring functions from a PC host connected to the
same LAN as the
ToughNet NAT Router, you must make sure that the PC host and the
ToughNet NAT Router
are connected to the same logical subnet.
NOTE
Before acc
essing the console utility via Telnet, first connect the ToughNet NAT Router
’s RJ45 Ethernet LAN
ports to your Ethernet LAN, or directly to your PC’s Ethernet card (NIC). You can use either a straight
-
through
or cross
-over Ethernet cable.
NOTE
The
ToughNet NAT Router’s default LAN IP address is 192.168.127.254.
Perform the following steps to access the console utility via Telnet.
1. Click Start Run, and then telnet to the ToughNet NAT Router’s IP address from the Windows Run window.
(You may also issue the Telnet command from the MS-DOS prompt.)
2. Refer to instructions 6 and 7 in the RS-232 Console Configuration (115200, None, 8, 1, VT100)
section on page 2-2.
Using a Web Browser to Configure the ToughNet
NAT Router
The ToughNet NAT Router’s web browser interface provides a convenient way to modify the router’s
configuration and access the built-in monitoring and network administration functions. The recommended web
browser is Microsoft Internet Explorer 6.0 with JVM (Java Virtual Machine) installed.
NOTE
To use the
ToughNet NAT Router
’s management and monitoring functions from a PC host connected to the
same LAN as the
ToughNet NAT Router, you must make sure that the PC host and the
ToughNet NAT Router
are connected to the same logical subnet.
NOTE
Bef
ore accessing the ToughNet NAT Router’s web browser, first connect the ToughNet NAT Router’s M12
Ethernet LAN ports to your Ethernet LAN, or directly to your PC’s Ethernet card (NIC). You can use either a
straight
-through or cross-over Ethernet cable.
NOTE
The
ToughNet NAT Router’s default LAN IP address is 192.168.127.254.
Perform the following steps to access the ToughNet NAT Router’s web browser interface.
1. Start Internet Explorer and type the ToughNet NAT Router’s LAN IP address in the Address field. Press Enter
to establish the connection.

ToughNet NAT Router User's Manual Getting Started
2-5
2. The web login page will open. Select the login account (Admin or User) and enter the Password (the same
as the Console password), and then click Login to continue. Leave the Password field blank if a password
has not been set.
NOTE
The default password is blank. For greater security, please change the default password after the first log in.
You may need to wait a few moments for the web page to be downloaded to your computer. Use the menu tree
on the left side of the window to open the function pages to access each of the router’s functions.

3
3. TN-5916 Series Features and Functions
In this chapter, we explain how to access the ToughNet NAT Router’s configuration options, perform monitoring,
and use administration functions. There are three ways to access these functions: (1) RS-232 console, (2)
Telnet console, and (3) web browser.
The web browser is the most user-friendly way to configure the ToughNet NAT Router, since you can both
monitor the ToughNet NAT Router and use administration functions from the web browser. An RS-232 or Telnet
console connection only provides basic functions. In this chapter, we use the web browser to introduce the
ToughNet NAT Router’s configuration and monitoring functions.
The following topics are covered in this chapter:

System
System Information
User Account
Date and Time
Warning Notification
System File Update—by Remote TFTP
System File Update—by Local Import/Export
Restart
Reset to Factory Default

Port
Port Settings
Link Aggregation
The Port Trunking Concept
Port Mirror

Using Virtual LAN
The VLAN Concept
Configuring Virtual LAN

Multicast
The Concept of Multicast Filtering
IGMP Snooping
IGMP Snooping Settings
IGMP Table
Stream Table
Static Multicast MAC

QoS
ToS/DSCP Mapping

MAC Address Table

Interface
WAN
LAN

Network Service
DHCP Settings
SNMP Settings

Security
User Interface Management
Trusted Access

Monitor
Interface Statistics
Port Statistics

Event Log

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-2
System
The System section includes the most common settings required by administrators to maintain and control a
Moxa switch.
System Information
Defining System Information items to make different switches easier to identify that are connected to your
network.
Router Name
Setting Description Factory Default
Max. 30 characters This option is useful for differentiating between the roles or
applications of different units. Example: Factory Switch 1.
Firewall/VPN Router
Router Location
Setting Description Factory Default
Max. 80 characters This option is useful for differentiating between
the locations of
different units. Example: production line 1.
Device Location
Router Description
Setting Description Factory Default
Max. 30 characters This option is useful for recording a more detailed description of
the unit.
None
Maintainer Contact Info
Setting Description Factory Default
Max. 30 characters This option is useful for providing information about who is
responsible for maintaining this unit and how to contact this
person.
None

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-3
User Account
The Moxa ToughNet NAT Router supports the management of accounts, including establishing, activating,
modifying, disabling and removing accounts. There are two levels of configuration access, admin and user. The
account belongs to admin privilege has read/write access of all configuration parameters, while the account
belongs to user authority has read access to view the configuration only.
NOTE
1.
In consideration of higher security level, strongly suggest to
change the default password after first log in
2.
The user with ‘admin’ account name can’t be deleted and disabled by default
Active
Setting Description Factory Default
Checked The Moxa switch can be accessed by the activated user name Enabled
Unchecked The Moxa switch can’t be accessed by the non-activated user
Authority
Setting Description Factory Default
admin The account has read/write access of all configuration
parameters.
admin
user The account can only read configuration but without any
modification.
Create New Account
Input the user name, password and assign the authority to the new account. Once apply the new setting, the
new account will be shown under the Account List table.
Setting Description Factory Default
User Name
(Max. of 30 characters)
User Name None
Password Password for the user account.
Minimum requirement is 4 characters, maximum of 16
characters
None

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-4
Modify Existing Account
Select the existing account from the Account List table. Modify the details accordingly then apply the setting to
save the configuration.
Delete Existing Account
Select the existing account from the Account List table. Press delete button to delete the account.
Date and Time
The Moxa ToughNet NAT Router has a time calibration function based on information from an NTP server or
user specified time and date. Functions such as automatic warning emails can therefore include time and date
stamp.
NOTE
The Moxa
ToughNet NAT Router
does not have a real time clock. The user must update the Current Time and
Current Date to set
the initial time for the Moxa switch after each reboot, especially when there is no NTP
server on the LAN or Internet connection.

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-5
System Up Time
Indicates how long the Moxa ToughNet NAT Router remained up since the last cold start.
Current Time
Setting Description Factory Default
User-specified time Indicates time in yyyy-mm-dd format. None
Clock Source
Setting Description Factory Default
Local Configure clock source from local time Local
NTP Configure clock source from NTP
SNTP Configure clock source from SNTP
Time Zone
Setting Description Factory Default
Time zone Specifies the time zone, which is used to determine the local
time offset from GMT (Greenwich Mean Time).
GMT (Greenwich
Mean Time)
Daylight Saving Time
The Daylight Saving Time settings are used to automatically set the Moxa switch’s time forward according to
national standards.
Start Date
Setting Description Factory Default
User-specified date Specifies the date that Daylight Saving Time begins. None
End Date
Setting Description Factory Default
User-specified date Specifies the date that Daylight Saving Time ends. None
Offset
Setting Description Factory Default
User-specified hour Specifies the number of hours that the time should be set
forward during Daylight Saving Time.
None

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-6
NOTE
Changing the time zone will automatically correct the current time. Be sure to set the time zone before setting
the time.
Time Server IP/Name
Setting Description Factory Default
IP address or name of
time server
The IP or domain address (e.g., 192.168.1.1,
time.stdtime.gov.tw, or time.nist.gov).
None
IP address or name of
secondary time server
The Moxa switch will try to locate the secondary NTP server if
the first NTP server fails to connect.
Enable NTP/SNTP Server
Setting Description Factory Default
Enable/Disable Enables SNTP/NTP server functionality for clients Disabled
Warning Notification
Since industrial Ethernet devices are often located at the endpoints of a system, these devices will not always
know what is happening elsewhere on the network. This means that an ToughNet NAT Router that connects to
these devices must provide system maintainers with real-time alarm messages. Even when control engineers
are out of the control room for an extended period of time, they can still be informed of the status of devices
almost instantaneously when exceptions occur. The Moxa ToughNet NAT Router supports different approaches
to warn engineers automatically, such as email, trap, syslog and relay output. It also supports one digital input
to integrate sensors into your system to automate alarms by email and relay output.
System Event Settings
System Events are related to the overall function of the switch. Each event can be activated independently with
different warning approaches. Administrator also can decide the severity of each system event.
System Events Description
Cold Start Power is cut off and then reconnected.
Warm Start Moxa ToughNet NAT Router is rebooted, such as when network parameters
are changed (IP address, subnet mask, etc.).
Power Transition (OnOff) Moxa ToughNet NAT Router is powered down.
Power Transition (OffOn) Moxa ToughNet NAT Router is powered up.
Configuration Change Any configuration item has been changed
Authentication Failure An incorrect password was entered.

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-7
There are four response actions available on the EDS E series when events are triggered.
Action Description
Trap The ToughNet NAT Router will send notification to the trap server when event is triggered
E-Mail The ToughNet NAT Router will send notification to the email server defined in the Email
Setting
Syslog The ToughNet NAT Router will record a syslog to syslog server defined in Syslog Server
Setting
Relay The ToughNet NAT Router supports digital inputs to integrate sensors. When event is
triggered, the device will automate alarms by relay output
Severity
Severity Description
Emergency System is unusable
Alert Action must be taken immediately
Critical Critical conditions
Error Error conditions
Warning
Warning conditions
Notice Normal but significant condition
Information Informational messages
Debug Debug-level messages
Port Event Settings
Port Events are related to the activity of a specific port.
Port Events Warning e-mail is sent when…
Link-ON
The port is connected to another device.
Link-OFF The port is disconnected (e.g., the cable is pulled out, or the opposing
device shuts down).

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-8
Email Settings
Mail Server IP/Name
Setting Description Factory Default
IP address The IP Address of your email server. None
Account Name
Setting Description Factory Default
Max. 45 of charters Your email account. None
Password Setting
Setting Description Factory Default
Password The email account password. None
Email Address
Setting Description Factory Default
Max. of 30 characters You can set up to 4 email addresses to receive alarm emails
from the Moxa switch.
None
Send Test Email
After you complete the email settings, you should first click Apply to activate those settings, and then press
the Test button to verify that the settings are correct.
NOTE
Auto warning e
-mail messages will be sent through an authentication protected SMTP
server that supports
the CRAM
-MD5, LOGIN, and PAIN methods of SASL (Simple Authentication and Security Layer)
authentication mechanism.
We strongly recommend not entering your Account Name and Account Password if auto warning e
-mail
messages can be delive
red without using an authentication mechanism.

ToughNet NAT Router User's Manual TN-5916 Series Features and Functions
3-9
Syslog Server Settings
The Syslog function provides the event logs for the syslog server. The function supports 3 configurable syslog
servers and syslog server UDP port numbers. When an event occurs, the event will be sent as a syslog UDP
packet to the specified syslog servers. Each Syslog server can be activated separately by selecting the check
box and enable it.
Syslog Server 1/2/3
Setting Description Factory Default
IP Address Enter the IP address of Syslog server 1/2/3, used by your
network.
None
Port Destination
(1 to 65535)
Enter the UDP port of Syslog server 1/2/3. 514
NOTE
The following events will be recorded into the Moxa
ToughNet NAT Router’s
Event Log table, and will then be
sent to the specified Syslog Server:
•
Cold start
•
Warm start
•
Configuration change activated
•
Power 1/2 transition (Off (On), Power 1/2 transition (On (Off))
•
Authentication fail
•
Port link off/on
Relay Warning Status
When relay warning triggered by either system or port events, administrator can decide to shut down the
hardware warning buzzer by clicking Apply button. The event still be recorded in the event list.