IP•Tube CEP RS232

The IP•Tube CEP RS232 converts RS232 serial data connections into IP packets, extending the serial data over very cost effective Ethernet or MPLS based LAN/WAN/MAN wired and wireless networks. Synchronous, Asynchronous, Isochronous or HDLC serial data is encapsulated into IP packets. This facilitates the interconnection of Serial Data over IP between Serial Bulk Encryptors (KIV7/OMNI), Data Terminals, Data Acquisition Systems, WAN Routers and Bridges and SCADA RTUs.

In Layer 1 operating mode every bit is encapsulated into an IP packet. The size and frequency of the IP packets can be set with data bit rates from 75 bits to 256 kilobits per second. Isochronous serial protocols, such as Conitel, are transported synchronously to maintain message alignment. A configured number of incoming packets are buffered in order to compensate for the packet delivery jitter introduced by the network. The size of the Tube bit buffer is configurable to accommodate the peak amount of jitter.

Asynchronous characters from the RS232 interface with 5 to 8 data bits, baud rates from 1.2 to 38.4 kilobits, 1 or 2 stop bits that are with or without parity are efficiently encapsulated into IP packets. The encapsulation supports block mode transfers to minimize the bandwidth required. Additionally the latency is controlled by setting the Tube Bytes per packet.

In Layer 2 operating mode HDLC Data frames, such as those used by Wide Area Networking protocols PPP and Frame Relay or proprietary Data Links, are transported within IP packets as HDLC over IP. The Serial to Packet conversion only occurs when HDLC frames are active.

The IP•Tube CEP RS232 transports Bit or Byte orientated SCADA protocols transparently because of its unique TDM circuit emulation capability. RTU transmit data is encapsulated into IP packets at 64,000 samples per second and de-encapsulated at the far end at the same rate, ensuring properly timed RTU SCADA message delivery. 

IP•Tube CEP isolates management and data plane functionality with the use of two separate processors modules. Management processor access is limited to encrypted sessions via SSH or SNMPv3, that employ AES 256 bit keys and sophisticated NIST passwords. These sessions may be established after authentication via TACACS+, RADIUS and two factor authenticated with RSA SecurID.

The independent Linux based management plane of the IP•Tube CEP ensures Critical Infrastructure Data is isolated from management network access. The Management Module uses internal serial ports to connect to the Data Plane processor.

Administration and User Logs are available with Syslog.

All IP•Tube CEP RS232 models ship with three 10/100BaseT
Ethernet LAN ports. The Ethernet interfaces provide for:

• Management interface
  
• Two Data Plane LAN interfaces for redundant connections
  
• Protector Option for Redundant Packet Path connections with Constant or Switch Over Criteria

In order to assure high quality communications over links with intermittent or noisy performance, such as Wireless, the IP•Tube CEP RS232 employs Engage’s robust Assured Delivery Protocol with the following benefits:

• Packet out of sequence detection and re-sequencing
• Duplicate skipping
• Lost packet retransmissions with configured delay

The IP•Tube CEP RS232 provides a transparent bandwidth regulated IP Tunnel for interconnecting remote Networks. With the IP•Tube CEP RS232 WAN security provisioning, such as firewalling, is maintained. WAN Protocols, such as PPP and Frame Relay, that utilize HDLC framing are encapsulated with HDLC Over IP. Broadband Service providers are able to transport Enterprise Wide Area Network connections with inband management of the Committed Information Rates. The IP•Tube CEP RS232 IP Tunnel can also be utilized as a secondary path for fault tolerant mission critical applications.

The IP•Tube CEP RS232 uses the Type of Service byte in the IP packets to prioritize the encapsulated data. The setting of the TOS byte can be used to ensure that the data from the IP•Tube CEP RS232 is ensured high priority.

Management of the IP•Tube CEP RS232 is accomplished with a Command Line Interface that is accessed through a Console or Telnet connection. Templates of the most common configuration provide for an Edit and Paste configuration. SNMP MIB I and II support is a standard feature.

The IP•Tube CEP RS232's Management module 10/100BaseT Ethernet interface provides a management port when interconnecting the IP•Tube CEP RS232 through a Virtual Private Network. Each LAN interface of the IP•Tube CEP RS232 features independent IP network configurations.  

The protector option utilizes the second Data Plane LAN interface as a redundant path for the interconnection of the IP encapsulated CEP RS232 data. The extension of the CEP RS232 has a fault tolerant link that is configured to always on, or with switch over criteria.

The Serial Redundancy option is used to switch the RS232 connection to a secondary IPTube in the case of a network or equipment failure maximizing network availability by providing complete hardware redundancy for mission critical applications.