Westermo RedFox Series Programming manual

www.westermo.com
©
Westermo Teleindustri AB
RedFox Series
Wolverine Series
Lynx Series
Falcon Series
Viper Series
6101-3201
Westermo OS
Management Guide
WeOS

Westermo OS Management Guide
Version 4.24.1-0
Legal information
The contents of this document are provided ”as is”. Except as required by appli-
cable law, no warranties of any kind, either express or implied, including, but not
limited to, the implied warranties of merchantability and fitness for a particular
purpose, are made in relation to the accuracy and reliability or contents of this
document. Westermo reserves the right to revise this document or withdraw it at
any time without prior notice.
Under no circumstances shall Westermo be responsible for any loss of data or
income or any special, incidental, and consequential or indirect damages how-
soever caused. More information about Westermo can be found at the following
Internet address: http://www.westermo.com
2 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
Contents
Legal information 2
Table of Contents 3
I Introduction to WeOS and its Management Methods 10
1 Introduction 11
1.1 Westermo and its WeOS products ..................... 11
1.2 Getting Started ................................. 11
1.3 Introduction to WeOS ............................. 12
1.4 How to read this document ......................... 12
1.5 Westermo products running WeOS .................... 14
2 Quick Start 17
2.1 Starting the Switch for the First Time ................... 17
2.2 Modifying the IP Setting ........................... 18
3 Overview of Management Methods 30
3.1 When to use the WeConfig tool ....................... 31
3.2 When to use the Web ............................. 31
3.3 When to use the CLI .............................. 32
4 Management via Web Interface 34
4.1 Document Conventions ............................ 35
4.2 Logging in .................................... 36
4.3 Navigation .................................... 38
4.4 System Overview ............................... 41
5 Management via CLI 48
© 2018 Westermo Teleindustri AB 3

Westermo OS Management Guide
Version 4.24.1-0
5.1 Overview of the WeOS CLI hierarchy ................... 48
5.2 Accessing the CLI ............................... 50
5.3 Using the CLI .................................. 54
5.4 General CLI commands ............................ 60
6 WeOS SNMP Support 64
6.1 Introduction and feature overview ..................... 64
6.2 Managing SNMP via the web interface .................. 77
6.3 Manage SNMP Settings via the CLI .................... 81
II Common Switch Services 86
7 General Switch Maintenance 87
7.1 Overview ..................................... 87
7.2 Maintenance via the Web Interface .................... 125
7.3 Maintenance via the CLI ........................... 140
8 General System Settings 172
8.1 Overview of General System Features .................. 172
8.2 Managing System Settings via Web .................... 176
8.3 Managing System Settings via CLI ..................... 182
9 Authentication, Authorisation and Accounting 201
9.1 Overview over AAA .............................. 202
9.2 Managing AAA via the web ......................... 211
9.3 Managing AAA via the CLI .......................... 231
9.4 Feature Parameters .............................. 251
10 Ethernet Port Management 252
10.1 Overview of Ethernet Port Management ................. 252
10.2 Managing port settings via the web interface ............. 267
10.3 Managing port settings via the CLI .................... 271
11 Ethernet Statistics 281
11.1 Ethernet Statistics Overview ........................ 281
11.2 Statistics via the web interface ....................... 288
11.3 Statistics via the CLI .............................. 293
12 SHDSL Port Management 296
12.1 Overview of SHDSL Port Management .................. 296
12.2 Managing SHDSL ports via the web interface ............. 302
4 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
12.3 Managing SHDSL ports via the CLI .................... 310
13 ADSL/VDSL Port Management 316
13.1 Overview of ADSL/VDSL Port Management ............... 316
13.2 Managing ADSL/VDSL ports via the web interface .......... 331
13.3 Managing ADSL/VDSL ports via the CLI ................. 343
14 Power Over Ethernet (PoE) 348
14.1 Overview of Power over Ethernet (PoE) ................. 348
14.2 Managing PoE via the web interface ................... 353
14.3 Managing PoE via the CLI interface .................... 358
15 Virtual LAN 362
15.1 VLAN Properties and Management Features .............. 362
15.2 Port-based network access control .................... 374
15.3 Managing VLAN settings via the web interface ............ 379
15.4 Managing VLAN settings via the CLI ................... 389
16 FRNT 401
16.1 Overview of the FRNT protocol and its features ............ 401
16.2 FRNT, RSTP and MRP coexistence ..................... 405
16.3 Managing FRNT settings via the web interface ............. 407
16.4 Managing FRNT settings via the CLI .................... 412
17 Ring Coupling and Dual Homing 415
17.1 Overview ..................................... 416
17.2 Managing via the Web ............................ 430
17.3 Managing via CLI ................................ 434
17.4 Feature Parameters .............................. 444
18 Spanning Tree Protocol - RSTP and STP 445
18.1 Overview of RSTP/STP features ....................... 445
18.2 Managing RSTP via the web interface .................. 451
18.3 Managing RSTP via the CLI ......................... 455
19 Media Redundancy Protocol 460
19.1 Managing MRP settings via the web interface ............. 466
19.2 Managing MRP settings via the CLI .................... 469
20 Link Aggregation 474
20.1 Link Aggregation Support in WeOS .................... 474
20.2 Managing Link Aggregation via the Web ................. 485
© 2018 Westermo Teleindustri AB 5

Westermo OS Management Guide
Version 4.24.1-0
20.3 Managing Link Aggregation via CLI .................... 489
21 Multicast in Switched Networks 494
21.1 Overview ..................................... 494
21.2 Managing IGMP in the Web Interface ................... 501
21.3 Managing IGMP in the CLI .......................... 504
22 General Network Settings 509
22.1 Overview ..................................... 509
22.2 Network interfaces ............................... 510
22.3 General IP settings ............................... 526
22.4 Managing network interfaces via the web ................ 531
22.5 Managing general IP settings via the web ................ 538
22.6 Managing network interfaces via the CLI ................ 544
22.7 Managing general IP settings via the CLI ................ 555
22.8 Feature Parameters .............................. 571
23 DHCP Server 572
23.1 Overview of DHCP Server Support in WeOS ............... 573
23.2 Configuring DHCP Server Settings via the Web ............ 589
23.3 Configuring DHCP Server Settings via the CLI ............. 597
23.4 Feature Parameters .............................. 610
24 DHCP Relay Agent 611
24.1 Overview of DHCP Relay Agent Support ................. 612
24.2 Configuring DHCP Relay Agent via the Web ............... 623
24.3 Configuring DHCP Relay Agent via the CLI ............... 626
24.4 Feature Parameters .............................. 633
25 Alarm handling, LEDs and Digital I/O 634
25.1 Alarm handling features ........................... 634
25.2 Managing Alarms via the Web ....................... 646
25.3 Managing Alarms via the CLI ........................ 652
25.4 Digital I/O .................................... 679
25.5 LEDs ........................................ 681
26 Logging Support 684
26.1 Logging Support in the web interface .................. 685
26.2 Managing Logging Support via the CLI .................. 686
6 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
III Router/Gateway Services 689
27 IP Routing in WeOS 690
27.1 Summary of WeOS Routing and Router Features ........... 690
27.2 Static unicast routes via Web ........................ 699
27.3 Enabling Routing, Managing Static Routing, etc., via CLI ...... 702
28 Dynamic Routing with OSPF 704
28.1 Overview of OSPF features ......................... 704
28.2 OSPF Web .................................... 720
28.3 Managing OSPF via the CLI ......................... 724
29 Dynamic Routing with RIP 737
29.1 Overview of RIP Features ........................... 737
29.2 RIP Web ...................................... 743
29.3 Managing RIP via the CLI ........................... 746
30 IP Multicast Routing 755
30.1 Summary of WeOS Multicast Routing Features ............. 755
30.2 Managing Multicast Routing via Web Interface ............. 759
30.3 Managing Multicast Routing via CLI .................... 764
31 Virtual Router Redundancy (VRRP) 768
31.1 Introduction to WeOS VRRP support .................... 769
31.2 Managing VRRP via the web interface .................. 777
31.3 Managing VRRP via the CLI ......................... 782
32 Firewall Management 790
32.1 Overview ..................................... 791
32.2 Firewall Management via the Web Interface .............. 819
32.3 Firewall Management via the CLI ..................... 843
IV Virtual Private Networks and Tunnels 857
33 Overview of WeOS VPN and Tunnel support 858
33.1 WeOS support for VPNs ............................ 858
33.2 Tunneling using PPP .............................. 859
33.3 Tunneling using GRE .............................. 859
34 PPP Connections 860
34.1 Overview of PPP Properties and Features ................ 861
© 2018 Westermo Teleindustri AB 7

Westermo OS Management Guide
Version 4.24.1-0
34.2 Managing PPP settings via the web interface .............. 871
34.3 Managing PPP settings via the CLI ..................... 877
35 GRE tunnels 888
35.1 Overview of GRE tunnel Properties and Management Features . . 888
35.2 Managing GRE settings via the web interface ............. 892
35.3 Managing GRE settings via the CLI .................... 894
36 IPsec VPNs 898
36.1 Overview of IPsec VPN Management Features ............. 899
36.2 Managing VPN settings via the web interface ............. 920
36.3 Managing VPN settings via the CLI .................... 930
36.4 Feature Parameters .............................. 947
37 SSL VPN 948
37.1 Overview of SSL VPN Management Features .............. 948
37.2 Managing SSL VPN settings via the web interface .......... 969
37.3 Managing SSL VPN settings via the CLI ................. 975
37.4 Feature Parameters .............................. 990
38 WeConnect 991
38.1 Installing WeConnect via the Web ..................... 993
38.2 Installing WeConnect via the CLI ...................... 995
38.3 Troubleshooting ................................. 997
V Serial Port Management and Applications 1001
39 Serial Port Management 1002
39.1 Overview of Serial Port Management ................... 1003
39.2 Managing serial ports via the web interface .............. 1006
39.3 Managing serial ports via the CLI interface ............... 1009
40 Serial Over IP 1015
40.1 Overview of Serial Over IP .......................... 1015
40.2 Managing Serial Over IP via the web interface ............. 1027
40.3 Managing Serial Over IP via the CLI interface ............. 1034
41 Modbus Gateway 1046
41.1 Managing Modbus Gateway via the web interface .......... 1048
41.2 Managing Modbus Gateway via the CLI interface ........... 1052
8 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
42 MicroLok II Gateway 1061
42.1 Overview of MicroLok Gateway Properties and Management Fea-
tures ........................................ 1061
42.2 Managing MicroLok Gateway via the web interface .......... 1066
42.3 Managing MicroLok Gateway via the CLI interface .......... 1070
VI Train Specific Protocols 1077
43 TTDP 1078
43.1 Overview of TTDP Management Features ................ 1078
43.2 Managing TTDP settings via the CLI .................... 1099
VII Appendixes 1106
Acronyms and abbreviations 1107
References 1111
Index 1116
© 2018 Westermo Teleindustri AB 9

Westermo OS Management Guide
Version 4.24.1-0
Part I
Introduction to WeOS and its
Management Methods
10 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
Chapter 1
Introduction
1.1 Westermo and its WeOS products
Westermo provides an extensive set of network products for robust industrial
data communications, managed as well as unmanaged products. Westermo’s
products are found in diverse set of harsh environment applications, and where
robustness and reliability are vital properties.
This guide describes the extensive functionality of managed Westermo products
running the Westermo OS (WeOS).
1.2 Getting Started
Please see www.westermo.com for the latest updated version of this document –
the WeOS Management Guide. There you can also find product User Guides, and
other support information for your product.
The dedicated User Guide of your product includes information on how to get
started with WeOS on your specific product. That is a good place to start if you
wish to do the least possible configuration of your switch (i.e., assign appropriate
IP settings) before putting it into your network infrastructure.
If the User Guide of your specific product lacks a section on how to get started
with WeOS, please visit the chapter 2 (Quick Start) of this document.
© 2018 Westermo Teleindustri AB 11

Westermo OS Management Guide
Version 4.24.1-0
1.3 Introduction to WeOS
Westermo OS (WeOS) is a network operating system delivering an extensive set
of functionality including layer-2 (basic switching, VLAN, IGMP snooping, etc.),
layer-3 (routing, firewall, NAT, etc.), and higher-level services (DHCP, DNS, etc.).
Furthermore, WeOS provides easy management via a Web interface, via the as-
sociated WeConfig tool, and via a USB stick. To satisfy even more advanced cus-
tomer needs, WeOS provides flexible management via a command line interface
(CLI), as well as via SNMP.
WeOS provides two levels of functionality, WeOS Standard and WeOS Extended.
Products running WeOS Standard are outstanding layer-2 switches suitable to
build reliable LAN infrastructures. Products running WeOS Extended extends the
WeOS functionality by adding routing capabilities and a rich set of related higher
level services (NAT, firewall, VPN, etc.).
1.4 How to read this document
This guide is structured in the following parts:
 Part I: This part gives general information on WeOS, and introduces the main
methods to manage a WeOS unit (WeConfig, Web, CLI and SNMP)1.
The information in Part I applies both to products running WeOS Standard
and WeOS Extended.
–Chapter 1 is this chapter.
–Chapter 2 describes how to get started with your WeOS product.
–Chapters 3 gives an overview of the different ways to manage a WeOS
unit. If you need recommendations of which method to use, please read
chapter 3.
–Chapters 4-5present the WeOS Web and CLI support. Detailed informa-
tion for Web and CLI Management is provided in the later parts of the
document.
–Chapters 6 is the main source of information for WeOS SNMP support.
1For information on how to configure a WeOS unit using a USB memory stick, see Chapter 7.
12 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
 Part II: Each of the chapters in this part covers services and features in
common software levels Standard and Extended.
–Chapter 7 handles general maintenance task (firmware upgrade, config-
uration file handling, factory reset, etc.) and tools such as ping,tracer-
oute, which be useful when troubleshooting your network.
–Chapters 8-9handle various general System setttings and AAA services.
–Chapters 10-14 cover management of Ethernet, SHDSL and xDSL (ADSL/
VDSL) ports.
–Chapters 15-21 concern various layer-2 services in WeOS (VLANs, layer-
2 redundancy (FRNT, RSTP, Link Aggregation), and IGMP Snooping).
–Chapter 22 covers network interface configuration including IP address,
netmask, etc., as well system wide network settings such as default
gateway and DNS.
–Chapters 23-26 handle DHCP services (DHCP Server and Relay), and
status maintenance (Alarm, Digital I/O, Front Panel LEDs, and logging).
 Part III covers WeOS router/gateway services. These features are only appli-
cable for WeOS Extended products.
–Chapters 27-31 describe static and dynamic routing, and VRRP support
in WeOS.
–Chapter 32 concerns NAT and Firewall support.
 Part IV covers WeOS VPN and tunneling services. These features are only
provided for WeOS Extended products.
–Chapter 33 gives an overview to VPN and tunneling services.
–Chapter 34 covers PPP support (PPP over serial port and PPPoE).
–Chapter 35 describes GRE tunneling support.
–Chapters 36-37 present VPN support using IPsec and SSL (OpenVPN).
 Part V contains information on serial port configuration (chapter 39) and
applications. These features apply to WeOS products with serial ports, both
for WeOS Standard and WeOS Extended.
–Chapter 40 describes Serial Over IP and Modem Replacement function-
ality
–Chapters 41-42 cover Modbus Gateway and Microlok Gateway support.
© 2018 Westermo Teleindustri AB 13

Westermo OS Management Guide
Version 4.24.1-0
 Part VI contains information on train related protocols and train networks.
–Chapter 43 describes WeOS support for the Train Topology Discovery
Protocol (TTDP)[14]. TTDP support is limited to RFR-212-FB products[57]
(Corazon platform).
1.5 Westermo products running WeOS
Below you find the list of Westermo products running WeOS, as well as references
to their respective User Guide:
 Falcon: User Guide [48] (FDV-206-1D1S). (”Basis” platform)
 Lynx: User Guides [53] (Lynx-L110/210) and [49] (Lynx-L106/206-F2G). (”Ba-
sis” platform)
 Lynx-DSS: User Guides [50] (L108/208-F2G-S2), [51] (L105/205-S1), and
[52] (L106/206-S2). (”Basis” platform)
 RedFox Industrial (RFI): User Guides [55] (”Corazon” platform) and [54] (”At-
las” platform)
 RedFox Industrial Rack (RFIR): User Guide [56] (”Corazon” platform)
 RedFox Rail (RFR): User Guide [57] (RFR-212-FB (”Corazon” platform), and
RFR-12-FB (”Atlas” platform)).
 Wolverine: User Guides [43] (DDW-142/2422), [44] (DDW-142/242-485)3,
[45] (DDW-142-BP), [46] (DDW-225) and [47] (DDW-226). (”Basis” platform)
 Viper:
–Viper-12A and Viper-20A (”Coronet” platform): User Guides [60] (Viper-
112A/212A), [61] (Viper-112A/212A-P8), [62] (Viper-120A/220A), and [63]
(Viper-120A/220A-P8). See the user guides for details on available vari-
ants, including number of Gigabit ports.
–Viper-12 (”Basis” platform): [58] (Viper-112/212 and Viper-112/212-T3G)
and [59] (Viper-112/212-P8 and Viper-112/212-T3G-P8).
2DDW-142 and DDW-242 are also referred to as DDW-x42 in this guide.
3DDW-142-485 and DDW-242-485 are also referred to as DDW-x42-485 in this guide.
14 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
Atlas, Basis, Corazon and Coronet denote HW platforms used by different
products. Products utilising the same HW platform use the same kind of
CPU, and have the same amount of RAM and flash memory.
Note
1.5.1 Product hardware details affecting WeOS functionality
The WeOS functionality described in the Management Guide generally applies to
all Westermo products running WeOS of the appropriate software level (Standard
or Extended). However, where functionality assumes the presence of certain
hardware (such as a USB port), those functions are limited to products including
that hardware. The table below provides a summary of hardware differences af-
fecting the availability of certain WeOS functions. For a more definite description
of hardware specifications you are referred to the dedicated User Guide of each
product (see section 1.5).
Ethernet Ports SHDSL Ports xDSL Port Serial Port(s) Console port Digital In/Out USB Port Bypass Relay PoE Ports
Falcon
FDV-206-1D1S X X X X X X
Lynx
L106/206-F2G X X X X
L110/210 X X X
Lynx-DSS
All Lynx-DSS models X X X X X
RedFox Industrial &
RedFox Industrial Rack
All RFI and RFIR models X X X X
RedFox Rail
All RFR models X X X1
Viper
All ”non-PoE’ models X X X
All ”PoE” models X X X X
Wolverine
DDW-x42 X X2X X X X
DDW-x42-485 X X2X X X X
DDW-x42-BP X X2X X X X X1
DDW-225 X X X X X
DDW-226 X X X X X X
© 2018 Westermo Teleindustri AB 15

Westermo OS Management Guide
Version 4.24.1-0
1Bypass Relay is available on DDW-x42-BP, and RedFox Rail models ”RFR-12 FB” and ”RFR-
212 FB”. See the related User Guides, listed in section 1.5, for more information on bypass relay
functionality.
2The DDW-x42 SHDSL ports have support for PAF (SHDSL link bonding).
16 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
Chapter 2
Quick Start
This section provides a guide to quickly get started with your switch. Only simple
configuration procedures will be covered1. The steps covered concern:
 Get familiar with the factory default setting
 Configuring an appropriate IP address
2.1 Starting the Switch for the First Time
When booting the switch for the first time the switch will use the factory default
setting.
The factory default setting makes the switch operate as a manageable layer-2
switch, where all Ethernet ports belong to the same virtual LAN (VLAN)2.
 Manageable: The switch is manageable via any of the Ethernet ports. To
manage the switch via an Ethernet port you need to know the IP address of
the switch (see table 2.1). For switches equipped with a console port, the
switch can as well be managed via that port without knowing the IP address
of the switch.
1For more advanced settings, we refer to the remaining chapters of this guide as well as the
online help provided via the Web configuration tool and the Command Line Interface (CLI).
2On Falcon series of switches, all Ethernet ports belong to the default VLAN (VLAN 1), while the
xDSL port belongs to a separate VLAN (VLAN 1006). That is, by factory default Falcon operates as
a router. See chapter 13 for more details.
© 2018 Westermo Teleindustri AB 17

Westermo OS Management Guide
Version 4.24.1-0
 Single VLAN: By default all ports on the switch will belong to the same VLAN.
Thus, devices connected to different ports of the switch should be able to
communicate with each other right away. For more advanced setups, the
ports of the switch can be grouped into different VLANs. In the factory de-
fault setting all ports belong to VLAN 1.
The default IP setting for the switch is as shown in table 2.1.
Address Netmask Gateway
Primary IP address Dynamic (DHCP) (Dynamic) (Dynamic)
Secondary IP address 192.168.2.200 255.255.255.0 Disabled
Table 2.1: Factory Default IP settings.
Thus, when you power up your WeOS unit with the factory configuration, you can
connect to it via two addresses:
 The static IP address 192.168.2.200: This address is simplest to use if you
are setting up a single unit.
 Adynamic address assigned by a DHCP server3(if present): This address
may be simplest to use if you want to connect and configure multiple new
WeOS units simultaneously.
Before you put your switch into your production network you should change
its IP setting according to your network topology. How you change your IP
setting is described in the next section.
Note
2.2 Modifying the IP Setting
The switch can be configured with a static IP setting, or it can get its IP address
dynamically via DHCP. The latter case is useful if you are running a DHCP server
on the same LAN as the switch will be located.
WeOS provides several management tools, which will be presented further in
later chapters of this guide. In this chapter we limit the scope to describe how
these tools can be used to update the IP settings of the switch.
3In addition, the unit will autoconfigure itself with a link-local address in the 169.254.x.x range,
where ’x’ is in interval 0-255. See section 22.2.6 for more information.
18 © 2018 Westermo Teleindustri AB

Westermo OS Management Guide
Version 4.24.1-0
 WeConfig: is Westermo’s Network configuration management tool (NCM)
made for commissioning and maintenance of components in a network. It
replaces the former Westermo tool known as IPConfig. For further informa-
tion on WeConfig’s features and how to use the tool, see the WeConfig User
Guide[65].
 Web: Configuration of IP settings via the Web interface is described in sec-
tion 2.2.1.
 CLI: Configuration of IP settings via the Command Line Interface (CLI) is
described in section 2.2.2.
If you are not sure what IP address your switch has, use the WeConfig tool,
or the CLI via console method (section 2.2.2.1). If neither of these methods
work, please visit section 7.1.3 for information on how to conduct a factory
reset.
Hint
© 2018 Westermo Teleindustri AB 19

Westermo OS Management Guide
Version 4.24.1-0
2.2.1 Using the Web Interface to Update the Switch IP Settings
To configure the IP settings via web your switch is required to be located on the
same IP subnet as your PC.
Router IP address:
192.168.55.1
PC
Host with Web browser.
PC IP address and netmask known, e.g.,
IP address 192.168.55.35 and netmask 255.255.255.0
To Internet or
company Intranet
Router
Ethernet portsConsole
Switch with default IP setting:
Default gateway: Disabled
IP address: 192.168.2.200
Netmask: 255.255.255.0
Should get the following settings:
IP address: 192.168.55.100
Netmask: 255.255.255.0
Default gateway: 192.168.55.1
WeOS switch
In this example the switch shall be assigned the IP address 192.168.55.100, net-
mask 255.255.255.0 and default gateway 192.168.55.1. To achieve this you must
(temporarily) change the IP address of the PC in order to be able to communicate
with the switch.
The steps to configure the IP settings via the web interface are as follows:
1. Connect your PC to the switch: Connect your PC to the switch as shown in
the figure above.
2. Modifying IP Settings on PC: The IP settings on the PC must be updated to
match the default settings on the switch, i.e., the PC should be assigned an
IP address on the 192.168.2.0/24 network, e.g.,
 PC IP address: 192.168.2.1
 PC Netmask: 255.255.255.0
3. Access switch via web browser: Open your web browser and enter URL
http://192.168.2.200 in the browser’s address field. You will be asked to
enter a username and a password. Use the factory default account settings
shown below:
 Login username: admin
 Password: westermo
20 © 2018 Westermo Teleindustri AB