In case of questions and issues not covered by present manual, you can contact Nethix Customer Support for further information:
Email: support@nethix.com
Phone: +39 0423 770750
Web Site: nethix.com
WE200 is a secure feature-rich 3G/LTE industrial gateway solution that allows to remotely access any device or machine through the serial, USB or Ethernet interfaces such as a PLC or HMI for configuration or maintenance purposes.
WE200 provides a secure VPN connection between the device or machine and the workstation where the SCADA or HMI software is running. A single WE200 can be used to manage more the one device or machine simultaneously and it is highly compatible with any device or machine that uses an RS232, RS485, USB or TCP/IP serial port, independently of the used protocol.
The built-in Web interface allows to easily configure and update the device by using only a standard browser.
In the following sections all these concepts and their use through the WE200 will be described.
Using the industrial gateway function of the WE200, it’s possible to establish a secure connection to one or more remote devices or industrial machines ( PLC, SCADA, HMI operator panel and so on..), basing on the VPN network.
Once properly configured, the WE200 allows the user to access the USB and Ethernet serial ports of the monitored industrial device, in order to permit the programming, the monitoring and the remote assistance.
For the remote access operations it’s possible to use all available serial ports of the WE200 (No.2 RS232 and No.1 RS485), the USB port and the 4 RJ45 Ethernet interfaces.
To enable the remote access function on serial port it’s necessary to enter the menu page Networking → Remote Access-→ Serial.
From this page it’s possible to activate the service on one or more serial interfaces, among those available on the WE200. First of all it must be activated the Enable option of the required serial port, then the following additional parameters shall be added:
Clicking on Advanced the following advanced parameters are available:
If not specifically required by the producer of the device to be interfaced with the WE200, it’s highly recommended not to change the parameters under the section Advanced.
From the page Networking → Remote access → USB it’s possible to enter the section dedicated to the configuration of the USB Interface:
The parameters that can be configured here, are the same as for the serial interfaces:
Clicking on Advanced the following advanced parameters are available:
If not specifically required by the producer of the device to be interfaced with the WE200, it’s highly recommended not to change the parameters under the section Advanced.
The Remote Access function allows to communicate remotely with any device/machinery connected to one of the serial interfaces or USB available on WE200, regardless of the used communication protocol.
The Remote Access function, combined with the VPN service, allows to bypass potential firewalls and grants a high level of security.
Thanks to the free software Quick Tunnel (QuickTunnel) it’s also possible to integrate the Remote Access function to the user PC: when launched, this software creates some virtual serial ports on the PC, that will be automatically connected to those configured on the WE200.
A typical application is for example when a device/industrial machine needs to be connected through serial port, USB or Ethernet, to a PC, where a proprietary software is installed. In this case the WE200 works as a “bridge” to connect the PC with the machinery:
Beside the main functions described on the preceding chapters, the WE200 allows to configure parameters related to connectivity, in order to meet all customers requirements.
All settings of the network interface, the services and the functions regarding the connectivity of the device are available under the menu section Networking.
From the page Networking → Interfaces it’s possible to access the sections that allow to configure and start-up the different network interfaces and the different services.
all network interfaces can be activated concurrently.
WE200 allows to establish a HSPA/LTE connection (according to the modem required at order confirmation) in order to enter the web interface of the device and send data or emails, even if no Ethernet or Wi-Fi connections are available.
In order to activate the connection enter the page Networking → Interfaces → Modem.
DATA CONNECTION
Once enabled the service with a flag on the field Enable, it’s required to specify whether the connection must be always on or on demand.
If the parameters have been properly configured, after a few minutes the HSPA/LTE connection will be activated. On the status panel, positioned on the right side of the web interface, the HSPA/LTE indicator will become green and beneath it the connection uptime and the relevant IP address will be displayed.
There are some advanced parameters, that can be entered clicking on the option Advanced:
Make sure that the HSPA/LTE connection has been successfully established, by checking if all necessary operations have been executed:
It’s possible to check the quality of the connection by using the diagnostic tool Ping (8.3. Ping). Further information regarding the status of the connection can be found on page Diagnostics → Networking (8.2. Information of connectivity).
For the correct operating of the SMS service and HSPA/LTE connection, it could be necessary to define some SIM’s parameters according to the selected provider. Those parameters are available on SIM configuration section.
SMS SERVICE
To enable/disable the SMS service go to SMS configuration section. Beside the flag for enabling the service, it’s possible to enable or disable the sending of pre-set SMS notifications.
Once enabled the SMS service, it’s possible to test the functioning through the section SMS test: entering a valid telephone number, complete with country code (for example +39NNNNNNNNNN for Italy), the WE200 will try to send an SMS with the following text ” Test message from WE200 “.
For granting the proper functioning of the SMS service, allowing the users to communicate with the WE200 and the WE200 to send alarm notifications, the procedure below must be carefully carried out:
All sent and received SMS can be displayed on page Status → Services → SMS: the first page to be entered will show the SMS received by the device.
In the table the following information will be available:
The button Refresh can be clicked at any time in order to update all information; Empty box for deleting all messages stored on Inbox.
Clicking on the drop-down menu on the top of the table, it’s possible to pass from Inbox to Outbox.
On this table is possible to display all the messages not yet delivered by the WE200. The available information are the following:
The button Refresh can be clicked at any time in order to update all information; Empty box for deleting all messages available on Outbox (such messages won’t be delivered).
Clicking on the drop-down menu on the top of the table, it’s possible to pass from Outbox to Sent.
On this table are displayed some information regarding the SMS already delivered by the WE200:
The button Refresh can be clicked at any time in order to update all information; Empty box for deleting all messages stored on Sent.
On the page Networking → Interfaces → LAN it’s possible to modify all parameters of the Ethernet interface.
First of all the MAC address of the device will be displayed, with the option of using the LAN network on static IP address or on DHCP.
If the Static address will be selected, the following parameters must be set for the correct operation of the service:
After settings modification the WE200 requires a reboot in order to activate them. If the entered parameters are correct, it’s possible to enter the web interface of the WE200 (even remotely if the network allows it), to send emails and send data to a Portal/Server.
Further information regarding the status of the connection can be found on page Diagnostics → Networking (8.2. Information of connectivity)
First of all it will be displayed the MAC address of the Wi-Fi device connected to the WE200, then the access data of the Wi-Fi network where the WE200 has to get connected to, have to be defined:
It will also be given the possibility to choose between a static or dynamic Ip address in the field IP address type. Choosing the static IP address, all necessary parameters for a proper functioning of the service will be required:
After clicking on Save, the WE200 starts to scan the on-site available Wi-Fi networks. Once found the network with the previously set SSID, the WE200 will make the authentication using the indicated parameters.
If all operations will be successful executed, the indicators on the status panel will become green.
The WLAN network allows all operations permitted by the LAN network (remote access to the web server, data sending, email sending).
For further information regarding the status of the LAN connection, it’s possible to enter the page Diagnostics → Networking on section WLAN Interface (see 8.2. Information of connectivity).
The menu section Networking → Services allows to enable some additional services, that use the connectivity of the device:
Before proceeding with the configuration of the WE200, it’s necessary to make the following:
Once a new account has been created, it’s possible to proceed with the configuration of the WE200, enabling the outgoing emails, the incoming emails or both of them from the page Networking → Services → Email.
On the section Outgoing mail setup the parameters required for the email sending from the WE200 must be set:
Once clicked on the button Save, a new section, called Outgoing mail test, will appear on the bottom of the page: from this section it’s possible to send a test email to any address.
On the section Incoming mail setup the parameters required for the email sending from the WE200 must be set:
A properly configured mail service allows the authorized users to send commands to the WE200 (see 7. Commands)
All sent and received emails can be visualized on the page Status → Services → Email.
The first page shows the emails received by the device:
On the displayed table the following information are available:
At any time it’s possible to click on the button Refresh in order to update the information, or Empty box, in order to delete all messages available inside Inbox.
Clicking on the drop-down menu on top of the table, it’s possible to pass from Inbox to Outbox.
On this table it’s possible to visualize all the emails not yet delivered by the WE200. The following information will be shown:
At any time it’s possible to click on the button Refresh in order to update the information, or Empty box, in order to delete all messages available inside Outbox ( deleted mails won’t be sent out)
Clicking on the drop-down menu on top of the table, it’s possible to pass from Outbox to Sent. On this table are displayed some information referred to the email already sent by the WE200:
At any time it’s possible to click on the button Refresh in order to update the information, or Empty box, in order to delete all messages available inside Sent.
From the page Networking → Services → VPN it’s possible to enable the VPN service to Nethix Portal or to a corporate VPN server.
It’s possible to enable the VPN according to two modes:
The automatic VPN is used to build up a secure connection to Nethix Portal. The automatic VPN allows also to build up a secure and encrypted connection between a PC and the device.
For further information about the use and the advantages granted by the VPN service, see the relevant manual manual.
On the other hand the manual VPN is used to build up a secure connection to a external VPN service, compatible with OpenVPN clients.
The parameters to be configured in order to enable a manual VPN are the following:
The WE200 offers also the possibility of associating the connection with a dynamic DNS service, choosing from the List of Providers available on page Networking → Services → DDNS.
This service allows to access the WE200 even if no static IP is available, since the device will be identified by the selected provider at every single connection, allowing the users to reach the web interface, just entering the hostname as configured on the browser. For further information see the Provider’s site or contact Nethix Support.
From the section Networking → Routing it’s possible to enable the NAT function and set the rules for the port forwarding.
NAT function is available on page Networking → Routing → NAT
Enabling the function NAT, the device will run in gateway mode, i.e. it will provide connectivity through the interface, selected by the connected devices.
Port Forwarding function is available on page Networking → Routing → Port Forwarding
Setting the routing rules it’s possible to forward to a defined IP address and port, the traffic coming to the WE200.
For instance:
WE200 is inside a LAN network and has the local IP address 10.0.0.1 and the public IP address 1.2.3.4 (for entering Internet). It is necessary to reach the port 80 of another device (connected with WE200) having local IP address 10.0.0.2. It’s possible to set the following rule:
According to this rule, by typing 1.2.3.4:8080 in the address bar of your Internet browser, you will be redirected to the port 80 of the device having IP 10.0.0.2.
WE200 includes 1 digital input and 1 digital output which can be used for general purposes, i.e. send notifications to the users or turn on/turn off electrical devices.
In order to configure the on-board digital input it’s necessary to enter the menu page Administration → I/O → Input.
First of all is requested to complete the fields Close label and Open label. Close label refers to the value (or status), that will be displayed when the digital input is closed, Open label refers to the open input. For WE200 a closed Digital Input variable has a logic value of 1. In case of an open input, the logic value is 0. This becomes a very important information for the definition and setting of the events.
There are some advanced parameters, that can be entered clicking on the option Advanced:
Clicking on Add event link a new page will be entered. From this page it’s possible to enter the text to be sent via SMS or Email in case of status change of the digital input.
From the field Type it’s possible to choose between Send Email and Send SMS options. The following fields do not depend from the selection made previously.
After definition of the event and action that generate the SMS to be sent to a defined user, some more conditions are necessary:
After definition of the event and action that generate the email to be sent to a defined user, some more conditions are necessary:
In order to configure the on-board digital output it’s necessary to enter the menu page Administration → I/O → Output.
It’s required to set the operating mode in the Output mode field. The available options are:
Regardless of the selected option, the field Status change delay(s) must be filled in with the number of seconds of delay required between an impulse and the enabling/disabling of the output.
There are some advanced parameters, that can be entered clicking on the option Advanced:
Clicking on Add event link a new page will be entered. From this page it’s possible to enter the text to be sent via SMS or Email to change the digital output status.
From the field Data source it’s possible to choose between Email and SMS options. The following fields do not depend from the selection made previously.
After definition of the event, some more conditions are necessary:
SMS
The page Status → Variables Status contains and displays both variables listed in alphabetical order:
The table with all variables is divided into 6 columns:
The page Status → Variables Status is automatically refreshed every 5 seconds. It’s therefore possible to display possible status variations without refreshing the page manually.
In order to enter the device web interface and to receive/send SMS and Mail, it’s necessary to define the users.
Three different types of users are available: SYSTEM, ADMIN and USER. The main features of each user’s level are the following:
Originally the default user is a System Administrator type SYSTEM, whose credentials for access are the following (it’s recommended to change these credentials as soon as possible):
Username: admin
Password: admin
It’s possible to create a new user from page Administration → Users → Users.
On this page some information regarding the previously created users are displayed:
To edit an existing user just click on its username, to generate a new one click on Add new user.
The parameters to be set in order to create a user are the following:
If the system has a high number of users, the management of events and actions might become complex. In order to help managing this situation, it’s possible to create groups of users.
For creating, deleting and editing the groups of users, it’s necessary to go to page Administration → Users → Groups.
On this page it’s possible to read the information regarding the previously created groups, as for example:
To edit an existing group just click on its name, to generate a new one click on Add new group.
For the proper creation of a new group only few information are necessary:
Clicking Save, the group will be created. Here are some remarks referred to the groups of users:
On section Administration → General Setup it’s possible to define some general settings of the device.
On the page Administration → General Setup → System, under the section System, it’s possible to configure the contents to be displayed on the page Status → Site immediately after the login. These parameters are not compulsory and are used just to identify the device.
On the page Administration → General Setup → System**under the section **Time/Date, it’s possible to set the date and time of the device:
It is also possible to specify a custom NTP server, by clicking the Advanced link.
Some graphical personalizations of the web interface of the device are possible from page Administration → General Setup → Web Interface, and will be valid for all the users.
Clicking on all colored fields, a color picker will allow to select the desired color and automatically insert the relevant hexadecimal value.
On page Administration → System → Info it’s possible to find some additional information regarding the WE200. On section System Information are displayed some general information:
On the section System Status, the status of some other services and functions of the device is shown. Beside every single service is available a graphic indicator, that allows to have a quick overview of the WE200 status.
Generally speaking, a green indicator means that the service is enabled and properly functioning, while a grey indicator means that the service is disabled and the red indicator, that the service is not properly configured and not in use. Clicking on any indicator, it’s possible to access the configuration section of the relevant service.
WE200 offers the possibility to make a backup of the device configuration as an encrypted file on page Administration → System → Backup/Restore.
The backup includes:
Not included in the backup:
To make the backup, click on Backup.
Once received the encrypted backup file, it’s possible to load it on any other device in line with the first one.
From the section Restore configuration, select the encrypted backup file and click on Restore. After this operation, it’s recommended to reboot the device, in order to make the modification effective.
The Backup/Restore function can be useful to keep a copy of the configuration made, in order to reload it on the device itself or on some more additional devices having the same configuration.
In this last case (Restore on additional WE200) the devices must have the same Firmware version. If not, please contact Nethix support.
The internal memory of the WE200 allows to store a huge number of logs. But to avoid an overloading of the device, it’s possible to delete any logs from the page Administration → System → Reset Logs.
The Logs that can be deleted are the following:
Once selected one or more of above listed positions, click on Erase logs for deleting permanently the logs from the device memory.
From the page Administration → System → Factory Reset it’s possible to delete all stored logs and data and reset the configuration, bringing the device back to the factory settings.
Click the big red button on the page, and confirm the choice. After the confirmation the WE200 will reboot and after the initialization phase the device will be again accessible via LAN.
The WE200 can be upgraded any time upon customer’s request or on suggestion of Nethix.
The upgrading can be made in two different ways: * downloading the updated version from the official Nethix Server (after having contacted Nethix Support) * uploading on the device an encrypted file, containing the upgrade (to be requested at Nethix Support).
Both procedures are available on page Administration → System → Upgrade.
On section Upgrade from official server it’s possible to enter the name and number of the version to be downloaded, and get it directly from the Nethix Server. In order to know the Name and Firmware version number to be installed on the device, it’s necessary to contact Nethix Support.
Once received the string, enter it in the field Version and then click on Upgrade.
The download time depends from the connection speed available with the WE200. Once downloaded the version, the WE200 will restart in order to proceed with the installation. This operation could require about 5 minutes.
Once the WE200 has returned to be available, it’s recommended to enter the interface in order to check the result of the upgrading operation (on the status panel).
On the other hand, from the section Upgrade from file, it’s possible to send to the WE200 an encrypted package, containing the upgrade, after having downloaded it on the PC.
The package changes according to the starting version to be upgraded, it therefore must be required directly at Nethix’s support.
To start the upgrading it’s required to select the file to be sent and click the relevant button Upgrade. Once the file has been sent to the device, the WE200 will restart in order to proceed with the installation of the new version.
The download time depends directly from the speed of the active connection available with the WE200. Once downloaded the version, the WE200 will restart in order to proceed with the installation. This operation could require about 5 minutes.
Once the WE200 has returned to be available, it’s recommended to enter the interface in order to check the result of the upgrading operation (on the status panel).
The plugins are encrypted packs, that allow to add or change part of the configuration and some of the available web pages.
To load a new plugin or to check the list of the already installed plugins on a device, go to page Administration → System → Plugins.
The plugin tool allows, for example, to send a package to a WE200, in order to add a pre-set configuration according to the specifications or requirements of the customer.
Through a plugin it’s possible to add:
The main difference between a plugin and a backup restore, is that through the plugins some additional pages can be created and added, and that also new additional variables, events or actions can be introduced beside those already existing (with the restore function the configuration is only overwritten).
To know the available plugins or to request additional customized plugins, it’s necessary to contact Nethix’s Support.
The WE200 has a list of preconfigured commands, that allow to set or to read some system parameters. Commands can be sent by any authorized user, both via SMS and via mail. On the table below are listed all system commands with relevant description:
Command | Description |
---|---|
STAT | Request of the system status. The device answers sending an SMS or Mail, containing following information:
Example: IP:192.168.1.146 (15:54:49 UP 9 DAYS, 7:07, load average: 0.32, 0.23, 0.18) |
WAKEUP | Request of a HSPA/LTE On-Demand connection. When the WE200 receives this command (SMS or Mail) from an authorized user, if the HSPA/LTE connection is On-Demand, it will establish a new connection, which remains on for 15 minutes. If no dynamic DNS service is enabled, it’s possible to use the above mentioned STAT command to receive the IP address of the WE200. |
SETTIME MMDDhhmmYYYY | When the WE200 receives this command (via SMS or Email) from a registered user, a new date and time, as indicated in the text message, will be set. The syntax means: MM=month, DD=day, hh=hour, mm=minutes, and YYYY=year EXAMPLE: For setting the date 6th December 2019 and the time 11:07 send the following message: SETTIME 020611072019 |
SIGNAL | Request for the GSM Signal strength When the WE200 receives this command (either via SMS or Email) from a registered user, the device will check the strength of the available GSM signal and will inform the requesting party according to the following format: GSM Signal:XX Where instead of “XX” a number between “01”(no signal) and “31” ( max. signal) will be reported. |
ReBooT | Request for a system reboot. When the WE200 receives this command (either via SMS or Email) from a registered user, it will start a system reboot. Pay attention to upper and lower case letters. |
PowerOff | Request for a system power off. When the WE200 receives this command (either via SMS or Email) from a registered user, it will turn off the system. It will be necessary to disconnect and then reconnect the power in order to let the device start again. |
The WE200 offers the possibility to make some diagnostic operations and display some data referred to the system functioning.
Entering the section Diagnostics it’s possible to get some additional information regarding the active connections, in order to check the proper functioning of the same.
From the page Diagnostics → System → System it’s possible to read the last 20 logs of the system.
On the table are displayed some useful information for having a feedback on the system status and for finding possible malfunctions. For updating the list of the displayed logs, click on the button Refresh.
In case of error notifications, check the device configuration and refer to Nethix support for further instructions.
From the page Diagnostics → System → Boot it’s possible to display the logs referred to the system boot, that is the operations executed by the WE200 at every restart/reboot.
Those information can be relevant for Nethix Support in case of technical assistance.
From the page Diagnostics → Networking it’s possible to get additional information regarding the status of the active connections.
The page is divided into three sections: LAN interface, WLAN Interface and 3G(4G) Interface.
Every section reports a number of technical information regarding the relevant connection.
LAN Interface:
WLAN Interface:
3G(4G) Interface:
In case of communication problems, for example when sending a mail, the WE200 gives the possibility to run a ping towards any host, allowing the selection of the network interface to be used.
For this operation enter the page Diagnostics → Ping.
Once completed above mentioned fields, click on Ping in order to start the operation. The results will be reported on the lower part, allowing the user to find any possible problems arising.
If you plan to use Nethix products in special applications where anomalies and discontinuity of service can have serious effect on human life or can cause physical or material damages, or where extremely high levels of reliability are required (for example in aerospace systems, in atomic energy control systems or n electro-medical devices), please contact Nethix for support to your particular application. Nethix is not responsible of damages caused from its products if such applications are not previously authorized.
The product shall not be treated as household waste. It shall be instead handed over to an appropriate collection point for the recycling of electrical and electronic products. For further information about recycling of this product, contact the local city office and/or the local waste disposal service.
Nethix warrants to the buyer that the product will be defect-free within two years (24 months) from the date of purchase.
During warranty time, and against presentation of purchase invoice, the product will be repaired or replaced, at Nethix’s discretion, without any additional costs as regards spare parts and repair, if the damages are proven to be manufacturing defects.
Warranty will be voided if the product has not been used properly.
In case of technical problems the user can ask for support:
Product return to NETHIX must be previously authorized, requesting a RMA number.
Please send an Email at Nethix containing all following information:
Nethix will communicate the RMA number, in order to start the return procedure of the product. The delivery of the goods shall be arranged DDP at Nethix premises. Products returned without factory seals will be automatically treated as out-of-warranty repair services.