Echelon i.LON 100 e2 Internet Server - Manual (Page 74)

6-2 i.LON 100 Security
i.LON 100 Server Security
The i.LON 100 Internet Server institutes a number of security measures:
• MD5 Authentication. When functioning as an RNI, the i.LON 100 Internet
Server uses MD5 authentication with all communications between it and the
LNS Server, requiring a 16-byte authentication key.
• Security Web Page. The i.LON 100 Security Web page allows you to
password protect or disable entirely FTP, Web server, dial-in, and RNI access
to the i.LON 100 server.
• Security Access Reset. A security access reset is required to access the
security Web page. A security access reset requires physical access to the
i.LON 100 server hardware.
Security Access Reset
The Security Web page of the i.LON 100 Internet Server is only available after
performing a security access reset. This Web page allows you to set the user
name and password used for FTP access to the i.LON 100 server, the MD5
Authentication Key, and allows you to determine what methods may be used to
access the i.LON 100 server. To ensure maximum security, Echelon recommends
disconnecting the computer and i.LON 100 server from the local area network
before performing a security access reset.
A security access reset of the i.LON 100 Internet Server requires physical access
to the i.LON 100 server hardware. To perform a security access reset, follow
these steps:
1. Remove
the i.LON 100 server from the TCP/IP network and attach it to the
computer using an Ethernet cable or a local server hub. This step is optional,
but is likely to be necessary since performing a security access reset will
temporarily reset the i.LON 100 server’s IP address to 192.168.1.222.
2. Press and hold the service pin on the i.LON 100 server using a ballpoint pen
or similar device.
3. Reboot the i.LON 100 server while still holding down in the service pin. This
can be done from the Reboot Web page (see Rebooting the i.LON 100 Server
in Chapter 5 for more information), by using the Reboot command in the
console application (see Appendix A), or by pressing the Reset button (just
below the Output LEDs as described in Chapter 2).
4. Continue holding the service pin. In approximately 10 seconds, all the LEDs
on the i.LON 100 server will flash, continue holding the service pin.
5. Approximately 30 seconds from when the reboot began, the service LED will
illuminate solid orange; at this point you can release the service pin.
The i.LON 100 Internet Server will now be in security access mode. When the
i.LON 100 server is in security access mode, its IP address, subnet mask, and
gateway are temporarily changed to 192.168.1.222, 255.255.255.0, and
192.168.1.222, respectively, they are changed back to the values specified on
the Setup and Security Web pages once the i.LON 100 server exits security
access mode (i.e. when the i.LON 100 server is rebooted). This IP address change
may place the i.LON 100 server on a subnet that your computer cannot
communicate with. In order to communicate with the i.LON 100 server after a
Security Access Reset, you can either modify your computer’s IP configuration to