Siemens RUGGEDCOM APE Series Instruction sheet

Edition 12/2019
Configuration Manual
SIMATIC NET
Networking Components
RUGGEDCOM APE (Application Processing Engine)
For APE1402, APE1402W7, APE1404, APE1404 ADM, APE1404W7,
APE1404CKP
https://www.siemens.com

SIMATIC NET
Networking Components
RUGGEDCOM APE (Application
Processing Engine)
Configuration Manual
For APE1402, APE1402W7, APE1404, APE1404
ADM, APE1404W7, APE1404CKP
Preface
Overview 1
Configuring and Using the
RUGGEDCOM APE 2
Frequently Asked Questions 3
12/2019
C79000-G8976-1121-05

Legal Information
Warning Notice System
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety
alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown be-
low are graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger
will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relat-
ing to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the
specific task in accordance with the relevant documentation, in particular its warning notices and safety in-
structions. Qualified personnel are those who, based on their training and experience, are capable of identify-
ing risks and avoiding potential hazards when working with these products/systems.
Proper Use of Siemens Products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommend-
ed or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permis-
sible ambient conditions must be complied with. The information in the relevant documentation must be ob-
served.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publica-
tion may be trademarks whose use by third parties for their own purposes could violate the rights of the own-
er.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software de-
scribed. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the in-
formation in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Digital Industry
Process Automation
Postfach 48 48
90026 NÜRNBERG
GERMANY
© 12/2019 Subject to Change Copyright © Siemens 2019
All rights reserved

Table of Contents
Preface ............................................................................................................................................ v
Related Documents ................................................................................................................. v
Training .................................................................................................................................. vi
Customer Support .................................................................................................................. vi
1 Overview ............................................................................................................................... 1
1.1 Operating System .................................................................................................. 1
1.2 Requirements and Restrictions ............................................................................... 2
1.3 Security Recommendations ................................................................................... 3
1.4 Operating Temperature Range and Behavior .......................................................... 4
1.5 Rebooting/Powering Down the RUGGEDCOM APE Module ...................................... 4
1.6 BIOS Configuration and Hardware Drivers .............................................................. 5
1.7 Internal Network Interface .................................................................................... 5
1.8 Suggested Software .............................................................................................. 6
1.9 Default IP Addresses .............................................................................................. 7
1.10 RUGGEDCOM APE Ethernet and Network Settings .................................................. 7
1.10.1 Example: Networking in Factory Default Conditions ............................................... 7
1.10.2 Example: RX15xx Services and WAN Networking ................................................... 9
2 Configuring and Using the RUGGEDCOM APE .................................................................... 11
2.1 Logging in to RUGGEDCOM APE .......................................................................... 11
2.2 Using the RUGGEDCOM APE as a Firewall ............................................................ 11
2.3 Upgrading Windows® Embedded Standard 7 Drivers ............................................ 12
2.4 Adding a User (Linux Only) ................................................................................. 13
2.5 Setting the Root and User Passwords (Linux Only) ............................................... 13
2.6 Setting the BIOS Password .................................................................................. 14
2.7 Disabling Alternative Boot Options ...................................................................... 14
2.8 Setting the BIOS Bootloader Password ................................................................. 15
2.9 Setting the GRUB Bootloader Password ................................................................ 16
2.10 Setting the Hard Drive Password ......................................................................... 16
2.11 Disabling SSH (Linux Only) .................................................................................. 17
2.12 Disabling Root Login via SSH (Linux Only) ........................................................... 17
2.13 Disabling the Gigabit Ethernet Port (Linux Only) .................................................. 17
2.14 Updating Linux Software ..................................................................................... 18
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 iii

Table of Contents
2.15 Troubleshooting the RUGGEDCOM APE ................................................................ 22
3 Frequently Asked Questions ............................................................................................... 25
iv RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Preface
This guide describes how to install and configure the RUGGEDCOM APE in any
RUGGEDCOM RX15xx device. Its purpose is to familiarize users with the ways that
RUGGEDCOM APE can be used to support processing applications in RX15xx net-
works. It includes information about:
• The RUGGEDCOM APE modules
• Obtaining, installing and using the RUGGEDCOM APE software
• Configuring networks with RUGGEDCOM APE
• Troubleshooting
This guide is intended for use by network technical support personnel who are fa-
miliar with the operation of networks and the supplied operating system (i.e. Win-
dows, Linux, Check Point, etc.). Others who might find the book useful are network
and system planners, system programmers, and line technicians.
Related Documents
The following are other documents related to this product that may be of interest.
Unless indicated otherwise, each document is available on the Siemens Industry On-
line Support (SIOS) [https://support.industry.siemens.com] website.
Note
Documents listed are those available at the time of publication. Newer versions of
these documents or their associated products may be available. For more informa-
tion, visit SIOS or consult a Siemens Customer Support representative.
Catalogs
Document Title Link
RUGGEDCOM RX1500 Modules Catalog https://support.industry.siemens.com/cs/ww/en/-
view/109747072
Installation Guides
Document Title Link
RUGGEDCOM RX1500 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82166529
RUGGEDCOM RX1501 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82164308
RUGGEDCOM RX1510 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82164310
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 v

Preface
Training
Document Title Link
RUGGEDCOM RX1511 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82166915
RUGGEDCOM RX1512 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82167597
Training
Siemens offers a wide range of educational services ranging from in-house training
of standard courses on networking, Ethernet switches and routers, to on-site cus-
tomized courses tailored to the customer's needs, experience and application.
Siemens' Educational Services team thrives on providing our customers with the es-
sential practical skills to make sure users have the right knowledge and expertise to
understand the various technologies associated with critical communications net-
work infrastructure technologies.
Siemens' unique mix of IT/Telecommunications expertise combined with domain
knowledge in the utility, transportation and industrial markets, allows Siemens to
provide training specific to the customer's application.
For more information about training services and course availability, visit https://-
www.siemens.com or contact a Siemens Sales representative.
Customer Support
Customer support is available 24 hours, 7 days a week for all Siemens customers.
For technical support or general information, contact Siemens Customer Support
through any of the following methods:
Online
Visit http://www.siemens.com/automation/support-request to submit a
Support Request (SR) or check on the status of an existing SR.
Telephone
Call a local hotline center to submit a Support Request (SR). To locate a lo-
cal hotline center, visit https://w3.siemens.com/aspa_app/?lang=en.
Mobile App
Install the Industry Online Support app by Siemens AG on any Android,
Apple iOS or Windows mobile device and be able to:
• Access Siemens' extensive library of support documentation, includ-
ing FAQs and manuals
• Submit SRs or check on the status of an existing SR
• Contact a local Siemens representative from Sales, Technical Support,
Training, etc.
vi RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Preface
Customer Support
• Ask questions or share knowledge with fellow Siemens customers
and the support community
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 vii

Preface
Customer Support
viii RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Overview 1
The RUGGEDCOM APE (Application Processing Engine) is an x64-based computer
designed to occupy a single line module slot in a RUGGEDCOM RX15xx device. The
RUGGEDCOM APE can host a variety of x64-based operating systems and features Gi-
gabit Ethernet, USB ports and a DVI-D Video port.
The following RUGGEDCOM APE modules are available:
• APE1402
• APE1402W7
• APE1404
• APE1404 ADM
• APE1404W7
• APE1404CKP (Requires a valid Check Point GAiA™ license for activation)
1
2
3
4
5 6
1 Drive Activity LED
2 Power LED
3 Power Button
4 USB Ports
5 Gigabit Ethernet (GbE) Port
6 DVI-D Video Port
Figure1.1 RUGGEDCOM APE Module
1.1 Operating System
Each RUGGEDCOM APE module comes with a pre-installed operating system.
Module Operating System
APE1402 Debian Linux®
APE1402W7 Windows® Embedded Standard 7
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 1

Overview
1.2Requirements and Restrictions
Module Operating System
APE1404 Debian Linux®
APE1404 ADM Debian Linux® + CROSSBOW ADM
APE1404W7 Windows® Embedded Standard 7
APE1404CKP Check Point GAiA™
Upgrading or Changing the Operating System
The operating system can be upgraded or extended as needed. It can also be
changed to an alternative software platform, such as Linux Mint or Ubuntu.
IMPORTANT
Siemens assumes no responsibility for upgrades or changes made to the operating
system.
Other Software/Applications
Siemens does not support any software installed on the RUGGEDCOM APE. This in-
cludes, but is not limited to, software images provided by Siemens Customer Sup-
port.
Check Point GAiA™ Licensing
To run Check Point GAiA™ on the RUGGEDCOM APE, the Check Point operating sys-
tem must be activated after the RUGGEDCOM APE module has been installed.
1.2 Requirements and Restrictions
Note the following requirements and restrictions for using the RUGGEDCOM APE:
•Operating Temperature Range
Each module is rated for operation within the temperature range of -40 to 75 °C
(-40 to 167 °F).
•Power Consumption
CAUTION
Electrical hazard - risk of power failure
Installing more RUGGEDCOM APE modules than allowed on a RUGGEDCOM
RX15xx device can lead to power fluctuations and irregular shut downs.
On an RX1512 device, do not install more than one RUGGEDCOM APE module.
On an RX1500, RX1501, RX1510 or RX1511 device, do not install more than two
RUGGEDCOM APE modules.
2RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Overview
1.3Security Recommendations
1.3 Security Recommendations
To prevent unauthorized access to the module, note the following security recom-
mendations:
Hardware/Software
• Before commissioning the RUGGEDCOM APE line module, apply the latest secu-
rity updates from Debian or from Microsoft as per standard Windows® 10 Enter-
prise update procedure. For more information on applying security updates from
Debian, refer to the user documention provided by Debian or Microsoft.
• Before using the RUGGEDCOM APE, make sure all relevant CERT security advi-
sories and applications are applied. Security advisories that include links to ap-
plications are available on the Industrial Security website [http://www.indus-
try.siemens.com/topics/global/en/industrial-security/news-alerts/Pages/alerts.as-
px] or the ProductCERT Security Advisories website [http://www.siemens.com/in-
novation/en/technology-focus/siemens-cert/cert-security-advisories.htm]. Up-
dates to Siemens Product Security Advisories can be obtained by subscribing to
the RSS feed on the Siemens ProductCERT SSecurity Advisories website, or by fol-
lowing @ProductCert on Twitter.
• Only enable the services that will be used on the module, including physical
ports. Unused physical ports could potentially be used to gain access to the net-
work behind the module.
• When using the Windows®-based version of the RUGGEDCOM APE, use Bitlocker
to avoid unauthorized access to sensitive information stored on the hard drive.
Authentication
• When using the Linux-based version of the RUGGEDCOM APE, add an adminis-
trative account, disable the root user on Debian Linux, and replace any default
passwords. For a list of default user profiles and passwords, refer to "Logging in
to RUGGEDCOM APE (Page 11)".
• To prevent unauthenticated access to the BIOS, configure a supervisor password
and set the user passwords . For more information, refer to "Setting the BIOS
Password (Page 14)".
• When using the Linux-based version of the RUGGEDCOM APE, ensure the GRUB
bootloader password is configured. For more information, refer to "Setting the
GRUB Bootloader Password (Page 16)".
• Use strong passwords. Avoid weak passwords such as password1, 123456789,
abcdefgh, etc.
• Passwords should not be re-used across different usernames and systems, or af-
ter they expire.
• Make sure to take appropriate precautions when shipping the module beyond
the boundaries of the trusted environment:
• If SSH and SSL keys are configured, replace the existing keys with throwaway
keys prior to shipping.
• If SSH and SSL keys are configured, take the existing keys out of service.
When the module returns, create and program new keys for the module.
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 3

Overview
1.4Operating Temperature Range and Behavior
Communication
• Log messages should be delivered using TLS-encrypted syslog over TCP to pre-
vent them from being sent as plain text.
Physical/Remote Access
• Do not connect the device to the Internet. Deploy the device only within a secure
network perimeter.
• Exercise extreme caution when changing any settings in the BIOS. For example,
USB and PXE boot are disabled by default; enabling these settings is not advis-
able for securing the module.
• Control access to the USB, SD Card slot, and gigabit Ethernet ports to the same
degree as any physical access to the module.
• Be aware of enabling any non-secure protocols on the module. Appropriate safe-
guards against non-secure protocols should be taken to prevent unauthorized ac-
cess to the module/network.
Policy
• Periodically audit the module to make sure it complies with these recommenda-
tions and/or any internal security policies.
• Review the user documentation for other Siemens products used in coordination
with RUGGEDCOM APE for further security recommendations.
1.4 Operating Temperature Range and Behavior
The RUGGEDCOM APE is rated for operation within the temperature range of -40 to
70 °C (-40 to 158 °F).
1.5 Rebooting/Powering Down the RUGGEDCOM APE Module
The RUGGEDCOM APE may be powered down or reset using the Power button on the
front face of the module. The Power button is recessed and can only be reached us-
ing either a pin, unfolded paper clip, or a small screwdriver.
NOTICE
Whenever possible, shut down or reboot the RUGGEDCOM APE from the operat-
ing system instead of requesting a shutdown or reboot with the Power button. This
helps to safeguard against improper shutdowns and protect data integrity.
Powering Down the RUGGEDCOM APE
To fully power down the module, press the Power button with a pin and hold for 4 to
5 seconds .
4RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Overview
1.6BIOS Configuration and Hardware Drivers
Rebooting the RUGGEDCOM APE
To reset the module, quickly press and release the Power button with a pin .
1.6 BIOS Configuration and Hardware Drivers
The RUGGEDCOM APE module features a BIOS with functionality similar to that of a
typical PC.
Note
Siemens does not recommend updating/upgrading the BIOS software on the
RUGGEDCOM APE module. Contact Siemens Customer Support for assistance with
BIOS-related issues.
The following BIOS settings can be configured:
• System Time
• Processor Options
• Boot Options
• Security Options
The most commonly changed options are the boot options, as the USB ports need to
be made bootable to install an operating system.
To display the BIOS menus, press F2 immediately after the RUGGEDCOM APE starts to
boot up. To display BIOS help, press F1 and follow the instructions at the bottom of
the screen.
To change the boot device, press F5 immediately after the RUGGEDCOM APE starts
to boot up. The RUGGEDCOM APE will boot from the chosen device. During the next
boot cycle, the RUGGEDCOM APE will revert back to the default boot device selected
in the BIOS.
Contact Siemens if any BIOS-related issues are experienced.
1.7 Internal Network Interface
In addition to the gigabit Ethernet interface on the faceplate, the RUGGEDCOM APE
features an internal gigabit Ethernet interface on the back of the module that inter-
faces with the host RUGGEDCOM RX15xx device. The interface can be used by the
operating system running on the RUGGEDCOM APE as a normal network interface.
Typical port parameters for the internal interface, such as speed, duplex, VLANs, and
more, can be configured via RUGGEDCOM ROX II.
NOTICE
Interface settings configured via RUGGEDCOM ROX II must be mirrored within the
RUGGEDCOM APE module. For instance, if a VLAN is assigned to the module in
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 5

Overview
1.8Suggested Software
RUGGEDCOM ROX II, a corresponding VLAN must also be configured via the mod-
ule's operating system.
1
2
2
3
4
1 Switch Fabric Data Plane
2 Line Module (10/100/1000Base-TX)
3 RUGGEDCOM APE Module
4 Gigabit Ethernet (GbE) Network Interfaces
Figure1.2 A RUGGEDCOM RX15xx Device With an RUGGEDCOM APE Module Installed
1.8 Suggested Software
RUGGEDCOM ELAN SCADA Application Suite
Note
The RUGGEDCOM ELAN SCADA Application Suite is only available for Linux platforms.
Siemens’ RUGGEDCOM ELAN product family solves a wide range of issues related to
communications and data integration, from the substation to the control center and
into the enterprise. The RUGGEDCOM ELAN family of products provide:
• Open, flexible access to all substation and distribution devices, from any autho-
rized user or application
• Preservation of investment in legacy devices and control center applications
• Protocol conversion/normalization
• Support for both SCADA and non-SCADA hosts (e.g. PI historian)
• Automated retrieval of fault file data
6RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Overview
1.9Default IP Addresses
• Powerful automation processor
• Reliable extraction/presentation of relay target data
• Wide range of security options
For more information about RUGGEDCOM ELAN, visit http://w3.siemens.com/mcms/-
industrial-communication/en/rugged-communication/ruggedcom-portfolio/soft-
ware/Pages/elan.aspx.
1.9 Default IP Addresses
Based on the software platform installed on the RUGGEDCOM APE, the IP addresses
for the front and/or internal ports may be pre-configured or set dynamically by the
Dynamic Host Configuration Protocol (DHCP).
Software Platform External Port (RJ45) Internal Port
Windows® Embedded Standard
7
DHCP DHCP
Debian Linux® DHCP DHCP
Check Point GAiA™ OS Not Configured 169.254.100.100
1.10 RUGGEDCOM APE Ethernet and Network Settings
The RUGGEDCOM APE is essentially a two-port industrial computer. When the
RUGGEDCOM APE is inserted into a chassis, the first internal Ethernet port is acti-
vated on the connector that carries power to to the RUGGEDCOM APE. The second
RUGGEDCOM APE Ethernet port is available for use on the faceplate of the RUGGED-
COM APE line module.
To the RX15xx device, the RUGGEDCOM APE internal Ethernet port appears like any
other Gigabit-capable switched or routed port.
For examples of how the RUGGEDCOM APE can be configured in a RX15xx device, re-
fer to "Example: Networking in Factory Default Conditions (Page 7)" and "Exam-
ple: RX15xx Services and WAN Networking (Page 9)".
1.10.1 Example: Networking in Factory Default Conditions
The following figure illustrates how routing and switching would work when the
RUGGEDCOM APE is used in a RUGGEDCOM RX15xx chassis with a four-port Ethernet
module in LM2.
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 7

Overview
1.10.1Example: Networking in Factory Default Conditions
Figure1.3 Example Configuration
In the factory default condition, all Ethernet interfaces on the RUGGEDCOM RX15xx
router (including the internal port of the RUGGEDCOM APE) are created as switched
ports in the default VLAN. When DHCP is configured in RUGGEDCOM ROX II, an IPv4
subnet and a gateway IP are automatically assigned to this VLAN.
In RUGGEDCOM ROX II, the default conditions for this VLAN are to use PVID 1 and to
operate untagged. The factory default creates the switch group (switch.0001) for de-
vices on this VLAN and creates a virtual interface 192.168.0.2/24 for devices (such as
the RUGGEDCOM APE) in switch.0001 to reach services on the control module and
network management.
In this situation, the RUGGEDCOM APE can be assigned an unused IP address in sub-
net 192.168.0.0/24 and communicate with other devices in VLAN1 at a bridging and
routing level. In Figure1.3, “Example Configuration”, the RUGGEDCOM APE ETH0 in-
terface has been assigned an address of 192.168.0.1, either manually by the user
or automatically by a pre-configured DHCP server, to allow it to communicate on
VLAN1. It has also been assigned a unique subnet to its ETH1 port.
The RUGGEDCOM APE can also access services and network management of the
RUGGEDCOM RX1500 control module at its 192.168.0.2 address. These services in-
clude SSH, HTTP and HTTPS services for network management, DHCP, NTP and TCP
connections to chassis serial ports.
The RUGGEDCOM APE can also communicate with any hosts on interfaces lm-2-1
through lm-2-4.
Should you wish to configure the RUGGEDCOM APE to forward traffic through to the
192.168.1.0/24 network via fe-cm-1, you would need to configure 192.168.0.2 as a
default gateway.
For much the same reason, should you wish to forward traffic arriving on fe-cm-1
through to the 172.16.0.0/16 network via the RUGGEDCOM APE, you would need to
configure a route for it on the RUGGEDCOM RX15xx device and enable IP forwarding
from the Windows or Linux operating system.
Note
When operating the RUGGEDCOM APE in either switch or router mode, the RUGGED-
COM RX15xx will issue RSTP BPDUs to the RUGGEDCOM APE.
8RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Overview
1.10.2Example: RX15xx Services and WAN Networking
If you do not wish the RUGGEDCOM APE to receive these BPDUs, they may be
disabled in RUGGEDCOM RUGGEDCOM APE in the interface switch menu for the
RUGGEDCOM APE interface.
1.10.2 Example: RX15xx Services and WAN Networking
The following illustration shows how the RUGGEDCOM APE might be used in a more
complex situation in which it is routed as opposed to bridged. The use of internal ser-
ial ports, firewalls, and port forwarding is discussed.
Figure1.4 Example Configuration
In this scenario, the RUGGEDCOM APE is reached via a routed interface. This is ac-
complished by moving the RUGGEDCOM APE port onto its own VLAN, and creating a
point-to-point connection between it and the control module.
The figure shows six serial ports available on serial LM 3. In order to become net-
work-accessible, these ports must be configured as socket ports that allow incom-
ing calls on TCP ports 5001 (ser-3-1) through 5006 (ser-3-6). While any address on
the RX1500 control module may be used to connect the RUGGEDCOM APE to these
ports, switch.0001, switch.0002, and dummy0 addresses are recommended. In par-
ticular, dummy0 addresses are useful when router redundancy is implemented.
As in the previous scenario, devices on the 192.168.0.0/24 subnet are still available
to the RUGGEDCOM APE; however, in this scenario, they are available through rout-
ing.
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 9

Overview
1.10.2Example: RX15xx Services and WAN Networking
10 RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05

Configuring and Using the RUGGEDCOM APE 2
The following sections describe how to configure and use the RUGGEDCOM APE:
NOTICE
Before using the RUGGEDCOM APE, create a backup image that can be restored
should the module be configured improperly.
Warranty does not support modules rendered inoperable/inaccessible due to config-
uration errors made by the user.
2.1 Logging in to RUGGEDCOM APE
Use the following default username and password to log in to the RUGGEDCOM APE:
NOTICE
Security hazard – risk of unauthorized access
To prevent unauthorized access to the device, make sure to change the default pass-
word before commissioning the device.
Software Platform Default Username Default Password
Windows® Embedded Standard
7
There is no default username or password for Windows® Embedded
Standard 7 installations. The username and password is set by the
user during the first boot.
Linux root admin
Linux + CROSSBOW ADM admin admin
Check Point GAiA™ admin admin
2.2 Using the RUGGEDCOM APE as a Firewall
The RUGGEDCOM APE can be used as a firewall, as an external network interface, or
as a one-armed firewall.
As an external network interface, the unprotected network is attached to the
RUGGEDCOM APE external Ethernet port and a firewall application, such as Shore-
wall or Check Point GAiA, is used. The RUGGEDCOM APE firewall acts as the primary
router and forwards traffic to the RX15xx device. This scenario is ideal when Layer 2
device hardware is used.
RUGGEDCOM APE (Application Processing Engine)
Configuration Manual, 12/2019, C79000-G8976-1121-05 11