Phoenix Contact PSI-MODEM-GSM/ETH User manual

INTERFACE
UM EN PSI-MODEM-GSM/ETH
Order No.: 2910855
User manual
GPRS/EDGE modem with Ethernet interface

Designation:
Revision:
Order No.:
This user manual is valid for:
INTERFACE
103965_en_00 PHOENIX CONTACT
09/2009
GPRS/EDGE modem with Ethernet interface
UM EN PSI-MODEM-GSM/ETH
00
2910855
Designation Version Order No.
PSI-MODEM-GSM/ETH 2313355
User Manual

PSI-MODEM-GSM/ETH
PHOENIX CONTACT 103965_en_00
Please observe the following notes
In order to ensure the safe use of the product described, you have to read and understand
this manual. The following notes provide information on how to use this manual.
User group of this manual
The use of products described in this manual is oriented exclusively to
– qualified electricians or persons instructed by them, who are familiar with applicable
standards and other regulations regarding electrical engineering and, in particular, the
relevant safety concepts.
– qualified application programmers and software engineers, who are familiar with the
safety concepts of automation technology and applicable standards.
Phoenix Contact accepts no liability for erroneous handling or damage to products from
Phoenix Contact or third-party products resulting from disregard of information contained in
this manual.
Explanation of symbols used and signal words
The following types of messages provide information about possible property damage and
general information concerning proper operation and ease-of-use.
This is the safety alert symbol. It is used to alert you to potential personal injury
hazards. Obey all safety messages that follow this symbol to avoid possible
injury or death.
DANGER
This indicates a hazardous situation which, if not avoided, will result in death or serious
injury.
WARNING
This indicates a hazardous situation which, if not avoided, could result in death or serious
injury.
CAUTION
This indicates a hazardous situation which, if not avoided, could result in minor or
moderate injury.
NOTE
This symbol and the accompanying text alerts the reader to a situation which may cause
damage or malfunction to the device, either hardware or software, or surrounding
property.
This symbol and the accompanying text provides additional information to the reader. It is
also used as a reference to other sources of information (manuals, data sheets, literature)
on the subject matter, product, etc.

PSI-MODEM-GSM/ETH
103965_en_00 PHOENIX CONTACT
General terms and conditions of use for technical documentation
Phoenix Contact reserves the right to alter, correct, and/or improve the technical
documentation and the products described in the technical documentation at its own
discretion and without giving prior notice, insofar as this is reasonable for the user. The
same applies to any technical changes that serve the purpose of technical progress.
The receipt of technical documentation (in particular data sheets, installation instructions,
manuals, etc.) does not constitute any further duty on the part of Phoenix Contact to furnish
information on alterations to products and/or technical documentation. Any other
agreement shall only apply if expressly confirmed in writing by Phoenix Contact. Please
note that the supplied documentation is product-specific documentation only and that you
are responsible for checking the suitability and intended use of the products in your specific
application, in particular with regard to observing the applicable standards and regulations.
Although Phoenix Contact makes every effort to ensure that the information content is
accurate, up-to-date, and state-of-the-art, technical inaccuracies and/or printing errors in
the information cannot be ruled out. Phoenix Contact does not offer any guarantees as to
the reliability, accuracy or completeness of the information. All information made available
in the technical data is supplied without any accompanying guarantee, whether expressly
mentioned, implied or tacitly assumed. This information does not include any guarantees
regarding quality, does not describe any fair marketable quality, and does not make any
claims as to quality guarantees or guarantees regarding the suitability for a special purpose.
Phoenix Contact accepts no liability or responsibility for errors or omissions in the content
of the technical documentation (in particular data sheets, installation instructions, manuals,
etc.).
The aforementioned limitations of liability and exemptions from liability do not apply, in so
far as liability must be assumed, e.g., according to product liability law, in cases of
premeditation, gross negligence, on account of loss of life, physical injury or damage to
health or on account of the violation of important contractual obligations. Claims for
damages for the violation of important contractual obligations are, however, limited to
contract-typical, predictable damages, provided there is no premeditation or gross
negligence, or that liability is assumed on account of loss of life, physical injury or damage
to health. This ruling does not imply a change in the burden of proof to the detriment of the
user.

PSI-MODEM-GSM/ETH
PHOENIX CONTACT 103965_en_00
Statement of legal authority
This manual, including all illustrations contained herein, is copyright protected. Use of this
manual by any third party is forbidden. Reproduction, translation, and public disclosure, as
well as electronic and photographic archiving or alteration requires the express written
consent of Phoenix Contact. Violators are liable for damages.
Phoenix Contact reserves all rights in the case of patent award or listing of a registered
design, in as far as this concerns software of Phoenix Contact that meets the criteria of
technicity or has technical relevance. Third-party products are always named without
reference to patent rights. The existence of such rights shall not be excluded.
Windows 3.x, Windows 95, Windows 98, Windows NT, Windows 2000, Windows XP, and
Windows Vista are trademarks of the Microsoft Corporation.
All other product names used are trademarks of the respective organizations.
How to contact us
Internet Up-to-date information on Phoenix Contact products and our Terms and Conditions can be
found on the Internet at:
www.phoenixcontact.com.
Make sure you always use the latest documentation.
It can be downloaded at:
www.phoenixcontact.net/download.
Subsidiaries If there are any problems that cannot be solved using the documentation, please contact
your Phoenix Contact subsidiary.
Subsidiary contact information is available at www.phoenixcontact.com.
Published by .
Should you have any suggestions or recommendations for improvement of the contents and
layout of our manuals, please send your comments to
[email protected].
PHOENIX CONTACT GmbH & Co. KG
Flachsmarktstraße 8
32825 Blomberg
Germany
Phone +49 - (0) 52 35 - 3-00
Fax +49 - (0) 52 35 - 3-4 12 00
PHOENIX CONTACT
P.O. Box 4100
Harrisburg, PA 17111-0100
USA
Phone [phone]

103965_en_00 PHOENIX CONTACT i
Table of contents
1 Description of the GSM modem...............................................................................................1-1
1.1 Description .........................................................................................................1-1
1.2 Ordering data .....................................................................................................1-2
1.3 Technical data ....................................................................................................1-2
2 Hardware installation ...............................................................................................................2-1
2.1 Housing dimensions ...........................................................................................2-1
2.2 Mounting the module on a DIN rail .....................................................................2-1
2.3 Description of the connections and LEDs...........................................................2-2
2.4 Establishing connections....................................................................................2-3
2.4.1 Safety notes ......................................................................................2-3
2.4.2 Connecting Ethernet networks ............................................................2-4
2.4.3 Connecting the antenna ......................................................................2-5
2.4.4 Inserting the SIM card .........................................................................2-6
2.4.5 Connecting the supply voltage ............................................................2-7
2.4.6 Connecting switching inputs and outputs ............................................2-8
2.5 Resetting the modem (reset) ..............................................................................2-9
3 Configuration via WBM ............................................................................................................3-1
3.1 Connection requirements ...................................................................................3-1
3.2 Starting web-based management (WBM) ..........................................................3-1
3.3 Device Information (View device status).............................................................3-3
3.3.1 Hardware ............................................................................................3-3
3.3.2 Status ..................................................................................................3-4
3.4 Local Network (Set up local network) .................................................................3-6
3.4.1 IP Configuration (Set up connection) ..................................................3-6
3.5 Wireless Network (Mobile phone settings) .........................................................3-7
3.5.1 GSM ...................................................................................................3-7
3.5.2 GPRS/EDGE .......................................................................................3-9
3.5.3 PING .................................................................................................3-10
3.5.4 Remote Configuration (Remote maintenance) ..................................3-11
3.6 Network Security (Security settings).................................................................3-12
3.6.1 Firewall (Definition of firewall rules) ...................................................3-12
3.6.2 NAT Table (Addressing table setup) .................................................3-15
3.7 VPN ..................................................................................................................3-16
3.7.1 IPsec Connections (IPsec connection setup) ....................................3-17
3.7.2 IPsec Certificates (Certificate upload) ...............................................3-22
3.7.3 IPsec Status (Status of the VPN connection) ....................................3-24
3.8 System .............................................................................................................3-25
3.8.1 User (Password modification) ...........................................................3-25
3.8.2 Additional AT commands ..................................................................3-26
3.8.3 RTC (Time and date setup) ...............................................................3-27
3.8.4 Reboot (Modem restart) ....................................................................3-29
3.8.5 Firmware Update ..............................................................................3-30
3.9 CIDR (Classless Inter-Domain Routing) ...........................................................3-31

PSI-MODEM-GSM/ETH
ii PHOENIX CONTACT 103965_en_00
4 Creating certificates.................................................................................................................4-1
4.1 Installing XCA .....................................................................................................4-1
4.2 Creating a database ...........................................................................................4-1
4.3 Creating a CA certificate.....................................................................................4-3
4.4 Creating machine certificates .............................................................................4-7
4.4.1 Creating templates ..............................................................................4-7
4.4.2 Creating machine certificates based on a template ...........................4-11
4.4.3 Exporting machine certificates ..........................................................4-14
5 Application examples for secure VPN connections..................................................................5-1
5.1 Modem-to-modem connection via GPRS/EDGE ................................................5-1
5.1.1 Setting up modem 1 ............................................................................5-1
5.1.2 Setting up modem 2 ............................................................................5-4
5.2 Connection from a modem to a control center via GPRS/EDGE
and the Internet ..................................................................................................5-5
5.2.1 Loading certificates on the modem .....................................................5-5
5.2.2 Loading certificates on the FL MGUARD RS VPN ..............................5-8
5.2.3 Setting a packet filter on the FL MGUARD RS VPN ..........................5-10
5.2.4 Setting up the VPN connection in mGuard ........................................5-10
5.2.5 Checking the status of the VPN connection in mGuard .....................5-13

Description of the GSM modem
103965_en_00 PHOENIX CONTACT 1-1
1 Description of the GSM modem
1.1 Description
The PSI-MODEM-GSM/ETH GSM modem is a high-performance modem for industrial
Ethernet networks, which can be used to transmit sensitive data securely via GSM
networks. The integrated firewall and the VPN support (Virtual Private Network) protect your
application against unauthorized access.
Remote stations can be integrated into an IP network via a GPRS/EDGE connection or by
dialing the phone number. The quad band technology means that the modem can be used
globally in all 850, 900, 1800, and 1900 MHz GSM networks.
No matter where your system or controller is located – the process data is available at any
location via a secure VPN connection.
For reliable and safe communication, the focus is on EMC, electrical isolation, and surge
protection.
In addition, the GPRS/EDGE service and GSM network quality are monitored. If necessary,
a corresponding message is sent or the GSM connection is reestablished.
Features
– Quad band (850 MHz/900 MHz/1800 MHz/1900 MHz)
–GPRS(General Packet Radio Service) and EDGE (Enhanced Data Rates for GSM
Evolution)
– Integrated TCP/IP stack
– Virtual permanent line for connecting networks via GPRS
– Integrated firewall
– VPN support
– Wide supply voltage range of 10 V DC to 30 V DC
– Temperature range of -25°C to +60°C
– High-quality electrical isolation (VCC // Ethernet)
– Integrated surge protection
– Easy configuration via web-based management (WBM)

PSI-MODEM-GSM/ETH
1-2 PHOENIX CONTACT 103965_en_00
1.2 Ordering data
1.3 Technical data
Modem
Description Type Order No. Pcs./Pkt.
Quad band modem for GPRS/EDGE and GSM with Ethernet interface,
firewall, VPN support, and alarm inputs and outputs
PSI-MODEM-GSM/ETH 2313355 1
Accessories
Description Type Order No. Pcs./Pkt.
GSM quad band antenna with omnidirectional characteristics PSI-GSM-QB-ANT 2313155 1
Antenna cable with SMA circular connector
Degree of protection
Dimensions
2 m
IP65
76 mm x 20 mm
GSM stub antenna for installation directly on the device, angled antenna
connector (90°, SMA circular connector)
PSI-GSM-STUB-ANT 2313342 1
System power supply unit,
primary-switched
Input voltage range
Nominal output voltage
Nominal output current
45 Hz ... 65 Hz
85 V AC ... 264 V AC
24 V DC ±1%
1.5 A
MINI-SYS-PS-100-240AC/24DC/1.5 2866983 1
DIN rail connector (3 required) ME 17,5 TBUS 1,5/ 5-ST-3,81 GN 2709561 1
Power supply
Supply voltage 10 V DC ... 30 V DC
Via COMBICON plug-in screw terminal block
24 V DC ±5% (alternative or redundant, via backplane bus contact and system
power supply)
Frequency DC
Current consumption
Nominal current consumption
Standby current consumption
< 360 mA at 24 V
< 90 mA at 24 V
LED indicator VCC (green LED)
Steady light: Operation
Ethernet interface
Connection method RJ45 female connector, shielded
Transmission speed 10/100 Mbps
Transmission length 100 m (twisted pair, shielded)
Supported protocols TCP/IP, UDP, TFTP, HTTP, MODBUS TCP, PPP, PROFINET, EtherNet IP,
CHAP
Secondary protocols ARP, DHCP, BOOTP, SNMP, RIP, RARP
LED indicator/data indicator TD (yellow LED), GSM data to modem (dynamic)
RD (green LED), GSM data from modem (dynamic)
LED indicator/control signal indicator ACT (yellow LED), Ethernet data transmission
LINK (green LED), Ethernet link established
Function
Management Web-based management, SNMP