415U Condor-long-range wireless I/O and gateway
User Manual MN032006EN
Effective May 2018
N otee:
Messages that match any of the MAC filter rules are immediately passed (whitelist) or dropped (blacklist), and are not checked by the IP Filter
Rules. Messages that do not match any filter rules in the whitelist are also immediately dropped. Messages that do not match any rules in a blacklist are passed and subsequently checked by the IP Filter Rules.
Use the “Add Entry”, “Insert Entry” and “Delete Entry” buttons to manipulate the rows in the table. For each row in the table, enter the parameters:
Enable
MAC Address
DHCP Server
Check this to enable the rule. To temporarily disable a rule you can clear this checkbox.
This is the MAC address that this rule applies to.
You can configure one device in your network to act as a DHCP server for other devices in the network. This lets you automatically assign IP addresses to devices that join the network. This is most useful when you want to access the network with a device such as tablet or PC to connect to the devices in the network at their fixed network addresses.
N otee:
You must ensure there is only one DHCP server on your local bridged network. When your Base site is configured as a Bridge (Default), this includes DHCP servers connected to the Ethernet network that is connected to your Base station. When your Base site is configured as a Router, the
DHCP server will only operate on the radio network.
Enable
IP Range
Minimum/
Maximum
Gateway IP
Address
Primary/
Secondary DNS
Server
Lease Time:
Check this box to enable the DHCP server functionality
This sets the range of IP Addresses that are assigned to devices that connect to the network.
Make sure that this address range does not overlap any existing fixed address assignments you have made on your network. Normally this range will be part of the same IP network address range as the other devices on your network.
If the connected devices need a default gateway, you can enter this IP address here. Otherwise, leave this blank.
If the connected devices will be using DNS
(Domain Name Service) to register or lookup device names, enter the IP addresses of the primary (and secondary) DNS Servers here.
Otherwise, leave these blank.
This is the amount of time that connected devices are allocated an IP address. Once the lease time expires, the IP address becomes available for allocation to other DHCP client devices.
N otee:
The lease time in conjunction with the IP range limits the number of devices that can be assigned DHCP addresses within a particular period. If all of the available IP addresses are allocated to devices then new devices won’t be able to join the network until some of the existing leases expire.
VLAN Configuration
VLAN (Virtual Local Area Network) provides a method of segregating a single bridged network into multiple virtual networks that are logically separated. This allows segregation and prioritization of traffic in your network.
N otee:
VLAN is an advanced networking technique. You should only need to configure VLAN functionality if you have to interoperate with a network that already uses VLAN.
The following configuration items are available for VLAN.
VLAN Mode
To disable VLAN functionality, select mode
“VLAN Passthrough”. To enable the VLAN, select mode “VLAN Aware”.
When you select mode “VLAN Aware”, the IP
Address and Subnet Mask settings on the main
Quick Start page are ignored. The settings for
Management IP/Netmask on this page are used instead.
N otee:
It is possible to configure a VLAN setup that stops your PC from accessing the device’s web pages. If you are unable to access the device from the Ethernet port after configuring VLAN rules, you can either: Access the device from the USB connection; or restore the device’s default network settings. For instructions, see “Restoring the factory default connection settings” on Page 39.
Add VLAN Group Click this button to add another VLAN Group.
You can add multiple VLAN groups, with each group corresponding to a separate VLAN network. The first VLAN that you add is the
Management VLAN, which provides access to the device Configuration on the new VLAN using the same IP Address as configured on the Quick
Start page.
Name You can add a descriptive name for each VLAN group. By default the first VLAN is named
“Management VLAN”.
VLAN ID
VLAN Priority
Bridge STP/
Priority
This is the 16-bit number that uniquely identifies the VLAN. Each configured VLAN Group should have a separate VLAN ID.
This is the QoS priority given to messages on this VLAN when sending over the radio channel.
The radio channel takes this setting into account when prioritizing access to the radio for multiple separate VLANs.
These settings enable Spanning Tree Protocol on this VLAN. Spanning Tree Protocol is required where there are bridging loops which would otherwise allow packets to circulate continuously on the network.
Interface Membership for VLAN: This allows you to set which interfaces are part of the VLAN. The 215U-2 has two interfaces which can join the VLAN; The Ethernet Interface and the
Wireless Interface.
N otee:
The USB interface is reserved for local access to the device and cannot be connected to a VLAN.
Interface
Type
Select the desired interface(s) to be connected to the VLAN. Use the “Add Entry” button to add an additional interface. (You need to select at least one interface for the VLAN to be reachable at the device)
This specifies how data packets will be treated when they are received on this interface
(Ingress) or are transmitted on the interface
(Egress).
Table 8.
Type
Tagged
Untagged
Ingress behavior
Packet is only accepted if it’s
VLAN ID matches the configured
ID for this VLAN.
All non-VLAN packets are received into the VLAN.
Egress behavior
Packet is transmitted as a VLAN packet with the configured
VLAN ID
Packet is transmitted as a non-
VLAN packet.
EATON
www.eaton.com
57
