Setting Communications Parameters
Setting Communications Parameters (Modbus RTU Protocol)
Procedure
- On the home screen, choose .Figure 5-8 Modbus Settings
- Set the baud rate, communication address, and RS485 monitoring group.
Parameter
Description
Baud rate
Set this parameter based on the baud rate of the connected device. The baud rate must be the same as that on the NMS. The value can be 9600 or 19200.
Communication address
Enter the communications address of the smart cooling product as planned. The NMS communicates with the smart cooling product using this address, and the communications addresses of two smart cooling products connected to the same NMS must be different.
RS485 monitoring grouping
- In non-grouping scenarios, set RS485 monitoring grouping to Enable for each unit.
- In grouping scenarios, set RS485 monitoring grouping to Enable for the unit with the COM/FE port connected, and Disable for other units.
Setting Communications Parameters (Modbus TCP Protocol)
Context
This section applies to the scenario where the unit is connected to the NMS.
Procedure
- On the home screen, choose , and set the IP address, subnet mask, and gateway based on the actual plan.Figure 5-9 WAN IP Settings
The WAN IP address cannot be in the 192.168.245.X, 192.168.246.X, or 192.168.248.X network segment.
- On the home screen, choose .
Parameter
Description
Link mode
- Server: The smart cooling product works as the server and can connect to two clients for communication.
- Client: The smart cooling product works as the client and can connect to a remote server for communication.
- Server and client: The smart cooling product works as the server and can connect to two clients for communication. It also works as the client and can connect to a remote server for communication.
Client encryption
This parameter is configurable when Link mode involves Client.
NOTE:In the third-party NMS scenario, if the third-party NMS does not have a certificate or does not support encryption, you are advised to set this parameter to Disable for non-encrypted connection. For security purposes, encryption is enabled by default. You can configure encryption based on actual requirements and security scenario evaluation.
Server encryption
This parameter is configurable when Link mode involves Server.
NOTE:In the third-party NMS scenario, if the third-party NMS does not have a certificate or does not support encryption, you are advised to set this parameter to Disable for non-encrypted connection. For security purposes, encryption is enabled by default. You can configure encryption based on actual requirements and security scenario evaluation.
Encryption algorithm CBC
Specifies whether to use the CBC encryption algorithm. After the parameter setting is changed, the system automatically restarts. Exercise caution with the setting.
NMS IP address
Enter the actual IP address of the NMS. The IP addresses of the display board, client NMS, and server NMS must be unique.
This parameter is configurable when Link mode involves Client.
NMS port number
This parameter is configurable when Link mode involves Client.
- Connecting to the NetEco: Set this parameter to 32907 if Client encryption is enabled, or set it to 32906 if Client encryption is disabled.
- Connecting to other NMSs: You are advised not to change the value. In special cases, set this parameter based on the site requirements.
Pre-shared password
Secondary authentication password used for Modbus-TCP connection.
Setting Communications Parameters (SNMP Protocol)
Context
- To set communications parameters, log in as the admin user.
- This section is suitable only for SNMP. Skip this section if you use Modbus.
- Record the values entered in this section which will be needed when you access a smart cooling product to an NMS.
- One smart cooling product supports concurrent access of up to 6 NMSs through SNMP.
Procedure
- On the home screen, choose .Figure 5-10 Setting SNMP communication parameters
- Set SNMP Version as required and tap Submit.
- When SNMP Version is set to ALL or SNMPv1&v2c, you can set Read Community and Write Community.
- When SNMP Version is set to ALL or SNMPv3, you can add an SNMPv3 user.
SNMPv1&SNMPv2c are insecure protocols. SNMPv3 is recommended.
- Set Read Community and Write Community.
- Tap the text box next to Read Community, set the read community parameter based on the actual plan, and tap Submit.
- Tap the text box next to Write Community, set the write community parameter based on the actual plan, and tap Submit.
- Add an SNMPv3 user.
- Set User Name, Auth Protocol, and Prop Protocol based on the actual plan.
MD5 and DES protocols are not secure. It is recommended that you set Auth Protocol to SHA2-512, and set Prop Protocol to AES-256. The following operations use the recommended settings as an example.
Figure 5-11 Setting the protocol typePasswords of an authentication protocol and proprietary protocol must comply with the following policies:
- The password must contain at least two types of characters among uppercase letters (A–Z), lowercase letters (a–z), and digits (0–9). The password must contain 8 to 15 characters and be different from the user name or its reverse.
- A password must not be a string containing duplicate sections, such as 12a12a12a.
- Weak passwords such as Password, Admin_1243, and Changeme_123 are not allowed.
- Set User Name, Auth Protocol, and Prop Protocol based on the actual plan.
- Tap the text box next to SNMP Port, set SNMP Port based on the actual port number, and tap Submit.
SNMP Port is set to 161 by default.
- Tap Next Page.
- Set SNMP trap parameters.
- Set Trap Address as planned and Trap Port to the actual port number.
Trap Port is set to null by default.
- Set Trap Address as planned and Trap Port to the actual port number.
Follow-up Procedure
After a USB flash drive has been inserted into the USB port of the main control board and successfully identified, tap Export File under MIB File to export the MIB file to the USB flash drive for the customer's use in accessing a third-party NMS. Figure 5-12 shows successful file export.
Before using a USB flash drive, ensure that its data has been scanned by antivirus software and is secure.
