IPLOG & LAN-RING in critical infrastructure
The open concept of the IPLOG-GAMA controllers allows customers to flexibly extend the production software with additional useful tools. Typical examples are the software packages described below for deployment, for example, in critical infrastructure facilities. IPLOG-GAMA controllers connected to the LAN-RING network infrastructure provide a comprehensive solution for authenticating network infrastructure users, logging configuration changes to network elements, providing encrypted VPN tunnel connectivity and other useful functions.
- Access to the system through an encrypted VPN tunnel
- Logging of LAN-RING system configuration changes
- IEEE 802.1X network user authentication
- Linux OS with secure SSH, HTTPS and SNMPv3 connections
- Industrial design with an operating temperature of -40°C to +70°C
- Backup route for reporting system failures
Access to the system through an encrypted VPN tunnel
The production software includes an OpenVPN package for encrypted connection of remote clients (PCs) to the protected network. OpenVPN allows you to secure the established connection using a shared key, digital certificate or username and password.
Logging of LAN-RING configuration changes
Every system runs the risk of being misconfigured. The cause can be negligence, ignorance or, in the worst case, intention. The metel-app-config-change-server application is a suitable preventive and analytical tool for eliminating these risks. All configuration changes made to the LAN-RING system are stored in the MySQL database of the IPLOG-GAMA controller. The personnel responsible for system security can then analyse them at any time.
Network user authentication using IEEE 802.1X protocol
All network users are authenticated by the freeradius-server application installed on the IPLOG-GAMA controllers before connecting to the network. In case a new user (PC, camera, server) tries to connect to the network, freeradius-server first verifies his identity and then, if the user has a valid credential, allows access to the network. Security incident alerts can be sent:
- SNMP traps to the visualization software
- SMS messages to mobile phones
- to any relay output in the system.
Linux operating system with secure SSH and HTTPS connection
IPLOG-GAMA controllers support secure configuration via SSH console, web interface with HTTPS or SNMPv3 support.
Industrial design with an operating temperature of -40°C to +70°C
In the manufacture of IPLOG & LAN-RING devices, we use components with a minimum operating temperature range of -40°C to +85°C. Inputs and outputs are protected from destruction by surge protectors.
Backup route for system fault reporting
The 2G, 3G and 4G/LTE interfaces can also be used as a backup route for system fault reporting.