Setting up own without authentication on the RouterNode - LSM 3.6 SP1 Business + Prof.

NOTE

notice

TLS on RouterNode 3 requires TLS in the software

When TLS is enabled onRouterNode 3 , RouterNode 3 will only communicate via the TLS port (the default is 2153). Software components such as the CommNode server will no longer be accessible via the standard TCP port (default: 2101) until TLS has also been configured within the software.

  1. The configuration interface opens, (see Configuration interface).
  2. Certificates are available (see Create your own certificates (OpenSSL under Windows/Linux)).
  1. Use Konfiguration to select the Ports & Protocols input.
  3. From the drop-down menuSV TLS SecPort, select item Ein.
  5. From the drop-down menuSV TLS Client Authentication, select item Aus.
  7. From the drop-down menuUse SV Certificate, select item Aus.

  8. NOTE

    notice

    Lockout due to faulty certificate

    An incorrect certificate can interrupt the connection to the RouterNode 3. For this reason, the embedded WaveNet server is first converted to TLS and then to the configuration interface. If the certificate is faulty and a connection to the WaveNet server cannot be established, the configuration interface will still be accessible. In this case, the certificate can be replaced.

    1. Leave the setting Use SV Certificate set to Ausuntil you are certain that the certificate works.
    2. Once the TLS connection to the WaveNet server has been established (identifiable by “TLS” in the WaveNet Manager), change the setting Use SV Certificate to Ein.
  9. Click the button Save, to apply the changes.
  10. RouterNode 3 informs about restart.
  12. After restarting, log in to the configuration interface again.
  13. RouterNode 3 already uses TLS, however, the standard certificate is still in use.
  14. Open the Sicherheit & Zertifikate tab using Administration.
  16. From the drop-down menuSelect, select item Upload Device certificate.
  18. The selection area for the certificate and key appears.
  20. For the entry Select Certificate file select the certificate file in DER format (example: customdevice_crt.der).
  21. For the entry Select Key file select the key file in DER format (example: customdevice_key.der).
  23. Click the Apply button.
  24. Certificates uploaded to RouterNode 3.
  26. Open the Reboot tab using Administration.
  28. Click the Reboot button.
  29. RouterNode 3 informs about restart.
  1. RouterNode 3 restarts.

After restarting, the RouterNode 3 indicates that its own device certificate and the WaveNet CA certificate are in use:

After successful connection of software and RouterNode 3

Only perform these steps once you have successfully established a connection to the software with your own certificates (see Set up TLS with your own certificate in the software).

  1. Open the configuration interface of the RouterNode 3.
  2. Use Konfiguration to select the Ports & Protocols input.
  3. From the drop-down menuUse SV Certificate, select item On.
  5. Click the button Save, to apply the changes.
  6. RouterNode 3 informs about restart.
  1. RouterNode 3 restarts.
  2. RouterNode 3 is set up with its own certificates without authentication.