Network Security and VPN
An integral part of the LOYTEC hardware is a configurable firewall, which can be enabled and configured over the built-in web server, over OPC XML‑DA, or OPC UA. The built-in web server is accessed via the secure HTTPS protocol. A pre-installed certificate allows a quick setup and can later be replaced by a locally generated certificate or by a certificate issued by a certification authority. Data communication is encrypted by TLS encryption methods. The use of secure certificates prevents man-in-the-middle attacks. Furthermore, the OPC UA server provides a secure alternative to OPC XML‑DA. It uses the installed server certificate and authorizes OPC clients by certificates.
LOYTEC devices can also be operated as part of a virtual private network (VPN) based on the OpenVPN technology. In a VPN setup, the device connects to a VPN server with an authenticated VPN certificate. The VPN provides a secured network channel that can carry any of the IP-based protocols. In combination with a VPN server on a public address, VPN devices can be accessed without having a public address. This provides a secure alternative to NAT forwarding and makes secure access to remote sites very simple. In combination with LWEB-900, setting up a VPN on the device is as easy as entering the LWEB-900 VPN project PIN code. LWEB-900 fully automatically generates the VPN certificates and enrolls the device in its own VPN.
A BACnet Operator Workstation is designed to provide an operator with all the information and editing ability needed for managing a system on a daily basis. In addition to viewing and editing selected BACnet object, an Operator Workstation can display trends, schedules, and other specialized objects. It can also display reports and graphics. A BACnet Operator Workstation will notify the operator that an alarm has occurred, lets the operator acknowledge the alarm, provides a summary of alarms, and allows to adjust the alarm thresholds of analog objects.
By the end of the 1990s, LON (Local Operating Network) was standardized by the Consumer Electronics Association (CEA) under the title “Control Network Protocol” as CEA-709. Today, the CEA-709 protocol is a recognized international communication standard, namely ISO/IEC 14908. LOYTEC is highly experienced in the CEA-709 technology. LOYTEC developed its own technology to make devices talk on CEA-709 networks. LOYTEC technology includes chip sets and also the fully featured ORION Protocol stack which executes the CEA-709 protocol on powerful 32-bit micro controllers. All LOYTEC devices supporting CEA-709 connectivity make use of this powerful technology. Communication Objects (Network Variables) and functional profiles, standardized by LonMark International (www.LonMark.org), describe the communication interface of a LonMark device. Configuration properties (CPs) allow downloading and modification of device parameters. Network integration is accomplished by a network management tool, which is independent of the hardware manufacturer (e.g. NL220 or LonMaker) and is used for device installation and creation of bindings between network variables, which are stored in a database. This allows for a clear separation between the application and the communication relations in the network. Configuration tools specific to LonMark nodes integrate as plug-ins into the network management tool and allow for fast and simple device configuration.