GUDE 8314 Expert Power Control User Manual

: June 2, 2024
: Gude

Table of Contents

GUDE 8314 Expert Power Control
Product Information
Product Usage Instructions
FAQs
Device Description
Operating
len: 0..100 email server set “” #len: 0..100 email port set 25 email security
Specifications
Creating your own Certificates
Expert Power Control 8316
References
Read User Manual Online (PDF format)
Download This Manual (PDF format)
port all state set “1,2,12” 1 OK.

GUDE 8314 Expert Power Control

Product Information

Specifications

Model: Expert Power Control 8316
Firmware Version: 1.6
Electrical Measurement: Yes
Sensor: Included

Product Usage Instructions

1. Device Description

The Expert Power Control 8316 is a device designed for power control and management.

1.1 Security Advice

Follow recommended security practices to ensure the safety of
the device and your network.

1.2 Content of Delivery

Check the package contents to ensure all components are included.

1.3 Description

The device provides capabilities for electrical measurement and sensor integration.

1.4 Installation

Refer to the installation manual for detailed instructions on
setting up the device.

2. Operating

2.1 Operating the Device Directly

You can operate the device directly using the control panel.

2.2 Control Panel

The control panel allows you to manage maintenance, configurations, and bootloader activation.

3. Configuration

3.1 Power Ports

Configure power ports and watchdog settings for efficient power management.

3.2 Ethernet

Set up IP address, IP ACL, and HTTP configurations for network connectivity.

3.3 Protocols

Manage various protocols for communication purposes.

3.4 Clock

Set up NTP and timer configurations for time synchronization and scheduling.

FAQs

Q: How do I reset the device to factory settings?

A: To reset the device to factory settings, access the maintenance page from the control panel and follow the reset instructions provided in the manual.

Q: Can I use the device without connecting it to an Ethernet network?

A: Yes, you can still operate the device directly without Ethernet connectivity, but some features may be limited.

Q: How often should I calibrate the electrical= measurements?

A: It is recommended to calibrate the electrical measurements periodically as per the maintenance guidelines to ensure accuracy.

“`

Device Description

1.1 Security Advice
· The device must be installed only by qualified personnel according to the following installation and operating instructions.
· The manufacturer does not accept responsibility in case of improper use of the device and particularly any use of equipment that may cause personal injury or material damage.
· The device contains no user-maintenable parts. All maintenance has to be performed by factory trained service personnel.
· This device contains potentially hazardous voltages and should not be opened or disassembled.
· The device can be connected only to 230V AC (50 Hz or 60 Hz) power supply sockets.
· The power cords, plugs and sockets have to be in good condition. Always connect the device to properly grounded power sockets.
· The device is intended for indoor use only. Do NOT install them in an area where excessive moisture or heat is present.
· Because of safety and approval issues it is not allowed to modify the device without our permission.
· The device is NOT a toy. It has to be used or stored out or range of children. · Care about packaging material. Plastics has to be stored out of range of children.
Please recycle the packaging materials. · In case of further questions, about installation, operation or usage of the device, which
are not clear after reading the manual, please do not hesitate to ask our support team. · Please, never leave connected equipment unattended, that can cause damage. · Connect only electrical devices that do not have limited on- time. I.e. in case of failure,
all connected appliances have to cope with a continuous on-time without causing damage.
1.2 Content of Delivery
The package includes:
· Expert Power Control 8314 / 8316 · Quick Start Guide
1.3 Description

The Expert Power Control 8314/8316 can switch 8 different load outputs and measure energy values on them. The device has the following features:
· (EPC 8314-1/8316-1) Switching of 8 load outputs (CEE 7/3 type F, max. 16A) · (EPC 8314-2/8316-2) Switching of 8 load outputs (IEC C13, max. 10A) · Energy Metering of the mains connection and measurement of voltage, current, active
power, reactive power, apparent power, frequency, phase angle, power factor

Expert Power Control 8316

6
© 2023 GUDE Systems GmbH

Device Description
· (only EPC 8316) Energy Metering and meters for each port of the 8 load outputs and measurement of voltage, current, active power, reactive power, apparent power, frequency , phase angle, power factor per output
· Connecting of two optional external sensors to determine the temperature and humidity, or a input switch
· One three-digit 7-segment LED display (for display of current or temperature / humidity of the external sensors)
· Console commands via SSH and Telnet · SSH support with public key and passwords · Individually parameterisable switch-on delay of all outputs · Programmable timetables and turn-on/turn-off sequences · Individually adjustable watchdog for each output, which switches depending on ac-
cessibility (network ping) · Dual TCP/IP stack with IPv4 and IPv6 support (IPv6-ready) · Control and monitoring of the device via Ethernet with an integrated web server with
SSL encryption (TLS 1.1, 1.2, 1.3) · Control and configuration with CGI parameters and JSON messages via HTTP (REST
API) · SNMP (v1, v2c and v3, traps) · MQTT 3.1.1 Support · Modbus TCP support · Radius support · Generation of messages (e-mail, syslog and SNMP traps) and switching of relays de-
pending on sensor measurement limits · Firmware update during operation via Ethernet possible · Encrypted e-mails (SSL, STARTTLS) · Access protection through IP access control · Low own consumption · Developed and produced in Germany
1.4 Installation

1. External sensor connector 1 (RJ45) 2. External sensor connector 2 (RJ45) 3. Ethernet connector (RJ45) 4. Select button 5. Ok button 6. Status LED 7. RS232 connector 8. 8 plain text displays (on/off) for the state of the outputs 9. Current power consumption (7-segment LED)
7
Expert Power Control 8316

Device Description

1. – 8. Load outputs (Expert Power Control 8314-2/8316-2, see Technical Specifications 8 for other models)
Start-up the device
· Connect the power cord (IEC C20, max. 16A) to the mains supply. · Plug the network cable into the Ethernet socket (RJ45). · If required, setup a serial connection to the RS232 port. · Insert optional external sensors. · Connect the consumers with the load outputs.
1.5 Technical Specifications

Interfaces
(EPC 8314-1/8316-1) (EPC 8314-2/8316-2) Network connectivity Power Supply Environment · Operating temperat-
ure · Storage temperature · Humidity Case Measurements Weight

1 x Ethernet port (RJ45) 1 x Serial connector (D-SUB, RS232) 1 x Mains cable (IEC C20, max.16A) 2 x RJ45 for external sensor 8 x Load outputs (CEE 7/3 type F, max. 16A) 8 x Load outputs (IEC C13, max. 10A) 10/100 MBit/s 10baseT Ethernet internal power supply (90-265V AC / -15% / +10%)
0°C – 50°C -15°C – 60°C 10% – 85%
powder coated, galvanized steel sheet 690 mm x 70 mm x 60 mm (L x H x W)
approx. 2.9 kg

Expert Power Control 8316

8
© 2023 GUDE Systems GmbH

Device Description

1.5.1 Electrical Measurement

typical fault tolerances for Ta=25°C, I=1Arms…16Arms, Un=90Vrms…265Vrms Electrical Measurement Specification

Operating

Operating
2 Operating 2.1 Operating the device directly
Port Switching
The current switching state of the output is indicated by the corresponding plain text displays (port LEDs). If the green “on” LED is lit, the port is switched on, if the red “off” LED is lit, the output port is switched off. The buttons “Select” and “Ok” are located on the device. If you press “select”, you can select the following modes one after the other (in the front panel 50 configuration you can deactivate the modes “All on” or “All off”).
1. All on (PALL in the display): All LEDs flash green. If you press the “Ok” button for 2.5 seconds, all ports are switched on.
2. All off (PALL in the display): All LEDs flash red. If you hold the “Ok” button for 2.5 seconds, all ports are switched off.
3. If you press “Select” again, the LED for the first output starts flashing, i.e. the output is selected. Press “Select” again to select the next output. Pressing and holding the “Ok” button for one second will toggle the state of the selected output.
If the ports are already “All on” or “All off”, the corresponding mode is skipped.
Display Information
If no port is selected manually, repeatedly pressing the “ok” button will show the IP-address and the values of the external sensors on the display.
Status-LED
The Status LED shows the different states of the device:
· red: The device is not connected to the Ethernet. · orange: The device is connected to the Ethernet and waits for data from the DHCP
server. · green: The device is connected to the Ethernet and the TCP/IP settings are allocated. · periodic blinking: The device is in Bootloader mode.
2.2 Control Panel
Access the web interface: http://”IP-address” and log-in.

13
Expert Power Control 8316

Operating

The web page provides an overview of the switching state, energy measurement values, as well as the external sensors, provided that they are connected. When a single port is clicked a panel with buttons to control a single port appear:

The Port icon is green when the relay is closed, or red in the open state. An additional small clock icon indicates that a timer is active. Timer can be activated by delay, reset or batch mode.

An activated Watchdog is represented by an eye icon. An “X” means, that the address that should be observed, could not be resolved. Two circular arrows show a booting status.
In addition to the panel, the Expert Power Control 8316 shows the measured values of the selected port:

Expert Power Control 8316

14
© 2023 GUDE Systems GmbH

Operating

The ports can be switched manually with the “On” and “Off” buttons. If the port is turned on, it can be turned off by pressing the “Reset” button, until after a delay it turns itself on again. The delay time is determined by the parameter Reset Duration, which is described in the chapter “Configuration – Power Ports 24 “. The “Close” button dissolves the panel again.
Batchmode
Each individual port can be set for a selectable period of time to the state “switch on” or “switch off”. After the selected time they are automatically switched to the second preselected state.

Optionally the device can be switched via a Perl script or external tools like wget. More information is available on our support wiki at www.gude.info/wiki.
2.3 Maintenance

The actual device generation with IPv6 and SSL allows all maintenance functions in the web interface to be carried out on the Maintenance Page 18 .

Maintenance in the web interface
The following functions are available from the maintenance web page:
· Firmware Update · Change the SSL certificate · Load and save the configuration · Restart the device · Factory Reset · Jump into the Bootloader · Delete the DNS cache

Upload Firmware, Certificate or Configuration
On the Maintenance Page 18 , select the required file with “Browse ..” in the sections
15

Expert Power Control 8316

Operating
“Firmware Update”, “SSL Certificate Upload” or “Config Import File Upload” and press “Upload”. The file is now transferred to the update area of the device and the contents are checked. Only now, pressing the “Apply” button will permanently update the data, or abort with “Cancel”.
Only one upload function can be initiated with a reboot, eg. you cannot transmit firmware and configuration at the same time.
If after a firmware update, the web page is not displayed correctly anymore, this may be related to the interaction of Javascript with an outdated browser cache. If a Ctrl-F5 does not help, it is recommended that you manually delete the cache in the browser options. Alternatively, you can test start the browser in “private mode”.
During a firmware update, old data formats are sometimes converted to new structures. If an older firmware is newly installed, the configuration data and the energy meters may be lost! If the device then does not run correctly, please restore the factory settings (e.g. from the Maintenance Page 18 ).
Actions in Bootloader mode
If the web interface of the device is no longer accessible, the device can be put into Bootloader mode (see chapter Bootloader activation 20 ). The following functions can be executed using the GBL_Conf.exe application:
· Set IPv4 address, net-mask and gateway · Turn HTTP password on and off · Turn IP-ACL on and off · Factory Reset · Allow jump from firmware to bootloader · Restart the device
For devices with relays, entering or exiting the bootloader mode does not change the state of the relays as long as the operating voltage is maintained.
The GBL_Conf.exe program is available free of charge on our website www.gude.info and can also be found on the enclosed CD-ROM.

Expert Power Control 8316

16
© 2023 GUDE Systems GmbH

Operating

Interface GBL_Conf
To check the network settings with GBL_Conf.exe, start the program and choose “All Devices” in the “Search” menu. From the list select the appropriate device. The lower part of the left half of the window now shows the current network settings of the device. If the IP address is displayed with the default settings (192.168.0.2), either no DHCP server is present on the network, or there could be no free IP address assigned to it.
· Activate the Bootloader Mode (see Chapter Bootloader Mode) and choose in menu “Search” the item “Bootloader-Mode Devices only”
· Enter the desired settings in the edit window and save them with “Save Config”. · Deactivate the boot loader mode for the changes to take effect. Select again “All
Devices” in the “Search” menu of GBL_Conf.exe.
The new network configuration is now displayed.
Changing the configuration with gbl_conf.exe is explicitly only allowed in bootloader mode!
Factory Reset
The device can be reset to the factory default via the web interface from the Maintenance Page 18 or from the Bootloader mode (see chapter Bootloader activation 20 ). All TCP/IP settings are reset in this operation.
If a unit is set to factory defaults, an uploaded certificate or updated firmware will be preserved.

17
Expert Power Control 8316

Operating
2.3.1 Maintenance Page
This section provides access to important functions such as Firmware Update or Restart Device. It is advisable to set an HTTP password for this reason.

Firmware Update: Start a firmware update.
SSL Certificate Upload: Saves your own SSL certificate. See chapter “SSL 64 ” for the generation of a certificate in the right format.
Config Import File Upload: Loads a new configuration from a text file. To apply the new configuration, a “Restart Device” must be executed after the “Upload”.
Config File Export: Saves the current configuration in a text file.

Saving the configuration should only be carried out in an SSL connection, since it contains sensitive password information (even if it is encrypted or hashed).
Restart Device: Restarts the device without changing the status of the relays.

Some functions such as a firmware update or changing of the IP-address and HTTP settings require a restart of the device. A jump to the boot loader or a restart of the device lead by no means to a change of the relay states.
Restore Fab Settings and Restart Device: Performs a restart and resets the device to factory default 21 .
18

Expert Power Control 8316

Operating
Enter Bootloader Mode: Jumps into bootloader mode, where additional settings can be made with GBL_Conf.exe. Flush DNS Cache: All entries in the DNS cache are discarded and address resolutions are requested again. Config/Status View: status.html: Displays the status.html page with the JSON data. Config/Status Download: export.json: Direct file download of JSON data from status.hml.
2.3.2 Configuration Management
The device configuration can be saved and restored in the maintenance area 18 .

The “Config File Export” function can be used to save the current configuration as a text file. The syntax used in the configuration file corresponds to the commands of the Telnet console. If the configuration of a device is to be restored from a text file, load the file with “Upload” and restart the device with “Restart Device”.
Saving the configuration should only be carried out in an SSL connection, since it contains sensitive password information (even if it is encrypted or hashed). For the same reasons, it is advisable to carefully handle the generated configuration files when archiving.

Editing the configuration file

It is possible to customize a saved configuration file with a text editor for your own needs. For example, one scenario would be to use a script language to automate the creation of many customized versions of a configuration, then equip a large number of devices with an individualized configuration. Also Upload and restart with CGI commands can be done in scripting languages. With use of the comment sign “#” you can quickly hide single commands or add personal notes.
If you modify a configuration file manually, it is not always clear which limits are allowed for parameters. After uploading and restarting, commands with invalid parameters are ignored. Therefore, the generated configuration includes comments describing the boundaries of the parameters. Where “range:” refers to a numeric value, and “len:” to a text parameter. E.g:
email auth set 0 #range: 0..2 email user set “” #len: 0..100
The command “system fabsettings” from the beginning of a generated configuration file brings the device into the factory state, and then executes the individual commands that

19

Expert Power Control 8316

Operating

modify the configuration state. It may be desirable to make the changes relative to the current configuration, and not out of the factory state. Then the “system fabsettings” should be removed.

No output of default values
The configuration file contains (with exceptions) only values which differ from the default. The command “system fabsettings” (go to the factory state) from the beginning of a generated configuration file should not be removed, otherwise the device can get incompletely configured.

Configuration via Telnet
The configuration files can in principle also be transferred in a Telnet session, but then the settings are changed during operation, and not completely when restarting, as it would have been the case with an upload. It can happen that events are triggered at the same time as the device is configured. One should therefore:
a) disable the function b) completely parametrize c) reactivate the function

An example:
email enabled set 0 email sender set “” #len: 0..100 email recipient set “”

len: 0..100 email server set “” #len: 0..100 email port set 25 email security

set 0 #range: 0..2 email auth set 0 #range: 0..2 email user set “” #len: 0..100 email passwd hash set “” #len: 0..100 email enabled set 1 #range: 0..1

2.3.3 Bootloader Activation

The configuration of the device from the application “GBL_Conf.exe” is only possible, if the device is in Bootloader Mode.
Activation of the Bootloader Mode

via push button:
· Hold both buttons for 3 seconds
or
· Remove the power supply · Hold down the “Select” button. If the push button is recessed, use a pin or paper clip · Connect the operating voltage

20

Expert Power Control 8316

Operating

by Software:
· Start the “GBL_Conf.exe” program · Do a network search with the “Search” menu action · Activate in menu “Program Device” the item “Enter Bootloader”
This function is only possible if “Enable FW to BL” was activated in the application “GBL_Conf.exe” before, while the device was already in the bootloader.
via web interface:
Press “Enter Bootloader Mode” on the maintenance 18 web page.
Whether the device is in Bootloader mode, is indicated by the flashing of the status LED, or it is shown in “GBL_Conf.exe” application after a renewed device search (appendix “BOOT-LDR” after the device name). In Bootloader mode the program “GBL_Conf.exe” can disable the password and the IP ACL, perform a firmware update, and restore the factory settings.
For devices with relays, entering or exiting the bootloader mode does not change the state of the relays as long as the operating voltage is maintained.

Abandonment of the Bootloader Mode

via push button:
· Hold both buttons for 3 seconds (only if the device has 2 buttons)
or
· Remove and connect the power supply without operating a button
by Software:
· Start the “GBL_Conf.exe” application · Do a network search with the “Search” menu action · In menu “Program Device” activate the item “Enter Firmware”
For devices with relays, entering or exiting the bootloader mode does not change the state of the relays as long as the operating voltage is maintained.

Factory Reset
If the device is in bootloader mode, it can always be put back to its factory default. All TCP/IP settings are reset in this operation.

If a unit is set to factory defaults, an uploaded certificate or updated firmware will be preserved.

via push button:
· Activate the Bootloader Mode of the device

21

Expert Power Control 8316

Operating
· Hold down the button (or the “Select” button for devices with 2 buttons) for 6 seconds. If the push button is recessed, use a pin or paper clip
· The status LED will blink in a fast rhythm, please wait until the LED blinks slowly (about 5 seconds)
2) by Software:
· Activate the Bootloader Mode of the device · “Start the GBL_Conf.exe” program · In menu “Program Device” activate the item “Reset to Fab Settings” · The status LED will blink in a fast rhythm, please wait until the LED blinks slowly
(about 5 seconds)

Expert Power Control 8316

22
© 2023 GUDE Systems GmbH

Configuration

Configuration
3 Configuration
TCP/IP configuration by DHCP
After switching on the device is scanning on the Ethernet for a DHCP server and requests an unused IP address. Check the IP address that has been assigned and adjust if necessary, that the same IP address is used at each restart. To turn off DHCP use the software GBL_Conf.exe or use the configuration via the web interface. To check the network settings with GBL_Conf.exe, start the program and choose “All Devices” in the “Search” menu. From the list select the appropriate device. The lower part of the left half of the window now shows the current network settings of the device. If the IP address is displayed with the default settings (192.168.0.2), either no DHCP server is present on the network, or there could be no free IP address assigned to it.
3.1 Power Ports

Choose Power Port to configure: This field is used to select the power ports to be configured.
Label: You can assign a name up to 15 characters for each of the power ports. Using the name, an identification of the the device connected to the port can be facilitated.
Start-up Monitoring
It is important, that if necessary the condition of the power ports can be restored after a power failure. Therefore each port can be configured with Initialization status to a specific start-up state. This start-up sequence can be carried out delayed by the parameter Initialization Delay. There is in any case a minimum one-second delay between switching of ports.
Initialization status(coldstart): This is the port state (on, off, remember last state) the port should be set when the device is turned on. The setting “remember last state” saves the last manually set state of the power port in the EEPROM.
Initialization delay: Here can be configured how long the port should wait to switch to its defined state after the device is turned on. The delay may last up to 8191 seconds. This

Expert Power Control 8316

24
© 2023 GUDE Systems GmbH

Configuration
corresponds to a period of approx. two hours and 20 minutes. A value of zero means that the initialization is off.
Repower delay: When this feature is enabled (value greater than 0), the power port will switch itself on again a specified time after it has been disabled. Unlike the “Reset” button this function applies to all switch actions, including SNMP, or an optional serial interface.
Reset Duration: When the “Reset” button is triggered, the device turns the power port off, waits for the time entered here (in seconds) and turns the power port on.
3.1.1 Watchdog
The watchdog feature enables to monitor various remote devices. Therefore either ICMP pings or TCP pings are sent to the device to be monitored. If these pings are not answered within a certain time (both the time and the number of attempts can be set), the port is reset. This allows e.g. to automatically restart not responding server or NAS systems. The mode IP master-slave port allows you to switch a port depending on the availability of a remote device.
When a watchdog is activated it presents various information in the Control Panel. The information is color-coded.
· Green text: The watchdog is active and regularly receives ping replies. · Orange text: The watchdog is currently enabled, and waits for the first Ping response. · Red text: The watchdog is active and receives no ping replies anymore from the con-
figured IP address.
After the watchdog has been enabled, the display remains orange until the watchdog receives a ping response for the first time. Only then the watchdog is activated. Even after triggering a watchdog and a subsequent power port reset, the display will remain orange until the device is rebooted and responds again to ping requests. This will prevent a premature watchdog reset of the port, e.g. when a server needs a long time for a file check.
You can monitor devices on your own network, as well as devices on an external network, e.g. the operating status of a router.

25
Expert Power Control 8316

Configuration
Enable watchdog: Enables the watchdog function for this Power Port.
Watchdog type: Here you can choose between the monitoring by ICMP pings or TCP pings.
· ICMP Pings: The classic ping (ICMP echo request). It can be used to check the accessibility of network devices (for example, a server).
· TCP Pings: With TCP pings, you can check if a TCP port on the target device would accept a TCP connect. Therefore a non-blocked TCP port should be selected. A good choice would be port 80 for http or port 25 for SMTP.
TCP port: Enter the TCP port to be monitored. When using ICMP pings this is not needed.
Hostname: The name or IP address of the monitored network device.
Ping interval: Select the frequency (in seconds) at which the ping packet is sent to each network device to check its operating status.
Ping retries: After this number of consecutive unanswered ping requests the device is considered inactive.
Watchdog mode: When Reset port when host down is enabled, the Power Port is turned off and switched back on after the time set in Reset Duration. In mode Switch off once when host down the Power Port remains disabled.
At the default setting (Infinite wait for booting host after reset) the watchdog monitors the connected device. When there is no longer a reply after a set time, the watchdog performs the specified action, usually a reset of the Power Port. Now the watchdog waits until the monitored device reports again on the network. This may take several minutes depending on the boot duration of the device. Only when the device is accessible from network again, the watchdog is re-armed. If the option Repeat reset on booting host after x ping timeout is enabled, this mechanism is bypassed. Now the watchdog is re- activated after N Ping intervals (input field ping timeouts).
When enabling the IP master-slave mode, the port is switched depending on the availability of a remote device. Depending on the configuration, the port is switched on when the terminal is reachable, or vice versa.
The option Repeat reset on booting host after x ping timeout has the following pitfall: If a server, that is connected to the monitored Port is in need for a long boot process (e.g. it is doing a file system check), the server would probably exceed the tripping time of the watchdog. The server would be switched off and on again, and the file system check is restarted. This would be repeated endlessly.
count PING requests as unreplied when ethernet link down: If the Ethernet link of the device is not active, watchdog monitoring is not possible and the watchdog function is not activated. If this option is activated, a watchdog is also triggered if the Ethernet link is down.
3.2 Ethernet

Expert Power Control 8316

26
© 2023 GUDE Systems GmbH

Configuration
3.2.1 IP Address

Hostname: Here you can enter a name with up to 63 characters. This name will be used for registration on the DHCP server.
Special characters and umlauts can cause problems in the network.
IPv4 Address: The IP address of the device.
IPv4 Netmask: The network mask used in the network.
IPv4 Gateway address: The IP address of the gateway.
IPv4 DNS address: The IP address of the DNS server.
Use IPv4 DHCP: Select “yes” if the TCP/IP settings should be obtained directly from the DHCP server: When the function is selected, each time the device powers up it is checked if a DHCP server is available on the network.
If no DHCP server is available, the last IP address is used. However, the DHCP client tries to reach a DHCP server again every 5 minutes. The DHCP request lasts one minute until it is aborted. During this time the IP-address is not accessible! It is therefore essential to deactivate DHCP for a static IP addresses!
Use IPv6 Protocol: Activates IPv6 usage.
Use IPv6 Router Advertisement: The Router Advertisement communicates with the router to make global IPv6 addresses available.
Use DHCP v6: Requests from an existing DHCPv6 server addresses of the configured DNS server.

27
Expert Power Control 8316

Configuration
Use manual IPv6 address settings: Activates the entry of manual IPv6 addresses. IPv6 status: Displays the IPv6 addresses over which the device can be accessed, and additionally DNS and router addresses.
For IP changes a firmware reset is required. This can be done in the Maintenance web page. A restart of the device leads by no means to a change of the relay states.
Manual IPv6 Configuration
The input fields for the manual setting of IPv6 addresses allow you to configure the prefix of four additional IPv6 device addresses, and to set two DNS addresses, and a gateway.
3.2.2 IP ACL

Expert Power Control 8316

28
© 2023 GUDE Systems GmbH

Configuration
Reply ICMP ping requests: If you enable this feature, the device responds to ICMP pings from the network. Enable IP filter: Enable or disable the IP filter here. The IP filter represents an access control for incoming IP packets.
Please note that when IP access control is enabled HTTP and SNMP only work if the appropriate servers and clients are registered in the IP access control list.
If you choose a wrong IP ACL setting and locked yourself out, please activate the Bootloader Mode and use GBL_Conf.exe to deactivate the IP ACL. Alternatively, you can reset the device to factory default.
3.2.3 HTTP

29
Expert Power Control 8316

Configuration

HTTP Server option: Selects whether access is possible only with HTTP, HTTPS, or both.
Server port HTTP: Here can be set the port number of the internal HTTP. Possible values are from 1 to 65534 (default: 80). If you do not use the default port, you must append the port number to the address with a colon to address the device from a web browser. Such as: “http://192.168.0.2:800”
Server port HTTPS; The port number to connect the web server via the SSL (TLS) protocol.
Supported TLS versions: Limits the supported TLS versions.
Enable Ajax autorefresh: If this is activated, the information of the status page is automatically updated via http request (AJAX).

For some HTTP configuration changes a firmware reset is required. This can be done in the Maintenance web page. A restart of the device leads by no means to a change of the relay states.
Enable password protection: Password access protection can be activated. If the admin password is assigned, you can only log in by entering this password to change settings. Users can log in by entering the user password in order to query the status information and initiate switching operations.
Use radius server passwords: Username and password are validated by a Radius Sever.
Use locally stored passwords: Username and password are stored locally. In this case,
30

Expert Power Control 8316

Configuration
an admin password and a user password must be assigned. The password can have a maximum of 31 characters. The name “admin” and “user” are provided for the user name in the password entry mask of the browser. In factory settings, the password for the admin is set to “admin” or “user” for the user password.
If the password mask is redisplayed, only four “bullets” are shown as a symbolic placeholder, since for security reasons the device never stores the password itself, but only the SHA2-256 hash. If you want to change a password, the complete password must always be re-entered.
If you have forgotten your password, please activate the bootloader mode and then turn off the password prompt in GBL_Conf.exe.
3.3 Protocols
3.3.1 Console

Telnet 31
Expert Power Control 8316

Configuration
Enable Telnet: Enables the Telnet console. Telnet TCP port: Telnet sessions are accepted on this port. Raw mode: The VT100 editing and the IAC protocol are disabled. Active negotiation: The IAC negotiation is initiated by the server. Activate echo: The Telnet echo setting if not changed by IAC. Push messages: Sends push messages via SSH. Delay after 3 failed logins: After 3 wrong entries of username or password, the next login attempt is delayed.
SSH Enable SSH: Enables the SSH protocol. SSH TCP port: Port on which SSH sessions are accepted.
Activate echo: The echo setting for SSH. Push messages: Sends push messages via SSH.
SSH and Telnet
Require user login: Username and password are required. Use radius server passwords: Username and password are validated by a Radius Sever. Use locally stored passwords: Username and password are stored locally. Upload SSH public key: Input field for public key.
Delete public key: Setting this at Apply deletes the public key.

Expert Power Control 8316

32
© 2023 GUDE Systems GmbH

Configuration

Enable serial console: Enables the serial console. Raw mode: The VT100 editing is disabled. Activate echo: The echo setting. Enable binary KVM protocol: Additionally activates the KVM protocol. Enable UTF8 support: Enables character encoding in UTF8. Push messages: Sends push messages via serial console. Require user login: Username and password are required. Delay after 3 failed logins: After 3 wrong entries of username or password, the next login attempt is delayed. Use radius server passwords: Username and password are validated by a Radius Sever. Use locally stored passwords: Username and password are stored locally.
3.3.2 Syslog

33
Expert Power Control 8316

Configuration
Enable Syslog: Enables the usage of Syslog Messages. Syslog Server: If you have enabled Syslog Messages, enter the IP address of the server to which the syslog information should be transmitted.
3.3.3 SNMP

SNMP-get: Enables the acceptance of SNMP-GET commands. SNMP-set: Allows the reception of SNMP-SET commands. SNMP UDP Port: Sets the UDP port where SNMP messages are received. sysContact: Value of RFC 1213 sysContact. sysName: Value of RFC 1213 sysName. sysLocation: Value of RFC 1213 sysLocation. Enable SNMP v2: Activates SNMP v2.
Expert Power Control 8316

34
© 2023 GUDE Systems GmbH

Configuration
Because of security issues, it is advisable to use only SNMP v3, and to disable SNMP v2. Accesses to SNMP v2 are always insecure.
Community public: The community password for SNMP GET requests.
Community private: The community password for SNMP SET requests.
Enable SNMP v3: Activates SNMP v3.
SNMP v3 Username: The SNMP v3 User Name.
SNMP v3 Authorization Algorithm: The selected Authentication Algorithm.
SNMP v3 Privacy Algorithm: SNMP v3 Encryption Algorithm..
If the password mask is redisplayed, only four “bullets” are shown as a symbolic placeholder, since for security reasons the device never stores the password itself, but only the key formed using the Authorization Algorithm. If you want to change a password, the complete password must always be re- entered.
The calculation of the password hashes varies with the selected algorithms. If the Authentication or Privacy algorithms are changed, the passwords must be re-entered in the configuration dialog. “SHA-384” and “SHA512” are calculated purely in software. If “SHA-512” is set on the configuration page, the time for the key generation may take once up to approx. 45 seconds.
Send SNMP traps: Here you can specify whether, and in what format the device should send SNMP traps.
SNMP trap receiver: You can insert here up to eight SNMP trap receiver.
MIB table: The download link to the text file with the MIB table for the device.
More information about SNMP settings are available from our support or can be found on the Internet at www.gude.info/wiki.

35
Expert Power Control 8316

Configuration
3.3.4 Radius

Enable Radius Client: Enables validation over Radius.
Use CHAP: Use CHAP password encoding.
Use Message Authentication: Adds the “Message Authentication” attribute to the Authentication Request.
Primary Server: Name or IP address of the Primary Radius server.
Shared secret: Radius Shared Secret. For compatibility reasons, only use ASCII characters.
Timeout: How long (in seconds) will be waited for a response from an Authentication Request.
Retries: How often an authentication request is repeated after a timeout.

Use Backup Server: Activates a Radius Backup server.
Backup Server: Name or IP address of the Radius Backup server.
Shared secret: Radius Shared Secret. For compatibility reasons, only use ASCII characters.
Timeout: How long (in seconds) will be waited for a response from an Authentication Request.

Expert Power Control 8316

36
© 2023 GUDE Systems GmbH

Configuration
Retries: How often an authentication request is repeated after a timeout.
Test Username: Username input field for Radius test. Test Password: Password input field for Radius test. The “Test Radius Server” function allows you to check whether a combination of Username and Password is accepted by the configured Radius Servers.
3.3.5 Modbus TCP
Enable Modbus TCP: Enables Modbus TCP support. Modus TCP port: The TCP/IP port number for Modbus TCP.

37
Expert Power Control 8316

Configuration
3.3.6 MQTT

Enable MQTT: Enables MQTT support. Broker: DNS or IP address of the MQTT broker. TLS: Turns on TLS encryption. Mode TCP port: The TCP/IP port number of the broker. Username: The MQTT username. password: The password for the username. Client ID: The MQTT client ID.
The client IDs of a user must be different! If two clients of a user have the same name, the connection of one client is normally terminated. Quality of Service (QoS): Sets the QoS value (0 or 1) of the MQTT publishes. Keep-alive ping interval: This defines the time interval in which the client sends an MQTT ping. Topic prefix: Defines the beginning of the topic with which all messages are sent. The strings [mac] and [host] symbolize the MAC address or the hostname of the device. Permit CLI commands: Enables the execution of console commands. Publish device data summary interval: Time interval in which messages with the global status of the device are sent.

Expert Power Control 8316

38
© 2023 GUDE Systems GmbH

Configuration
MQTT Logs: Outputs individual log messages about the connection setup. MQTT Broker Status: Time information about connection duration, the last publish and the last keep-alive.
3.4 Clock
3.4.1 NTP

Enable Time Synchronization: Enables the NTP protocol.
Primary NTP server: IP address of the first NTP server.
Backup NTP server: IP address of the second NTP server. Used when the first NTP server does not respond.
Timezone: The set time zone for the local time.

39

Expert Power Control 8316

Configuration
Daylight Saving Time: If enabled, the local time is converted to Central European Summer Time. set manually: The user can set a time manually. set to Browsertime: Sets the time corresponding to web browser.
If Time synchronization is enabled, a manual time will be overwritten at the next NTP synchronization.
3.4.2 Timer

Enable Timer: nables or disables all timers globally. Syslog verbosity level: Sets the verbosity level for timer syslog output. New Rule simple Timer: Shows a dialog for a simple timer rule. New Rule advanced Timer: Brings up the dialog for advanced timer settings.
3.4.3 Timer Configuration
In the timer configuration you have three options: Create a simple timer, add a complex timer, or change an existing configuration.
Timer rules are only executed if the device has a valid time. See configuration NTP 39 .
This instruction chapter applies to all Gude devices. For devices without switchable ports you can only create a complex timer. For an action there is only the register “Action CLI” available, and not the register “Action PortSwitch”.

Expert Power Control 8316

40
© 2023 GUDE Systems GmbH

Configuration

Creating a simple timer
If you activate “New Rule: simple Timer” the following dialog is displayed:

You set here which port should be switched for which time period, and on which days of the week the rule is active. In this example the period 9:00 to 17:00 is changed to 9:30 to 11:00 compared to the default input mask. Also, this rule should not be applied on Saturday and Sunday. The rule we have now says that every day, except Saturday and Sunday, port 1 will be switched on at 9:30 and switched off after 1.5 hours. Clicking on “Save” saves this rule.

We have now created 2 rules, one for when the port is turned on and the second for when it is turned off.
Creating a complex timer

41
Expert Power Control 8316

Configuration
If you create a complex timer or change an existing timer, you will always see an extended dialog. Here, ports can be switched as well as other actions can be executed via CLI commands. The setting of the switching times is more granular.
You can see here the extended representation of the first rule of the simple timer from the previous example. The action is started every day of every month at 9:30. The weekdays Saturday and Sunday are excluded. An existing rule can be removed with the “Delete” button.
If a rule is deleted, the following rules move up. The numbering of the following rules also changes by one. This also applies to the index in the console commands.

A simple timer is directly “enabled”, for a newly created complex timer “enable trigger” must be switched on manually. You can set a probability and a jitter for the timer rules. This makes random events possible. In this example the rule is executed with 100% probability. A jitter of 0 means that the action takes place exactly at the programmed time. Ports are switched as action mode, alternatively a console command (CLI Cmd) can be executed.
After changes to existing timers, the “Rule Name” may no longer be meaningful. To keep the overview, it may be useful to adjust the name.

Expert Power Control 8316

42
© 2023 GUDE Systems GmbH

Configuration

The switching function can be set in more detail on the “Action PortSwitch” register. Port 1 is switched on. You could extend the rule and switch more ports on or off. Additionally you can set a time for a batchmode in the field after “Between Action1 and Action 2 : wait”, which starts “Action 2” after expired time. However, the batch mode has the disadvantage that it is not automatically restarted when the device is rebooted. Also, the port is locked against manual operation on the web page as long as the batch mode is running.
The “Action PortSwitch” function is only available for devices with switchable ports.
Extending a rule
For demonstration purposes, here is an extension to the simple timer from the previous example:

The action is now started not only at 9:30, but also at 17:30 There are other changes: The timer is only active between October and December, also the action does not take place on the first day of a month.

Since all fields in the mask are always considered, it is not possible to define the times 9:30 and 17:10 in a single timer rule. You need a second rule for this. If you set the hours 9 and 17, as well as the minutes 10 and 30, then the four times 9:10, 9:30,

43

Expert Power Control 8316

Configuration
17:10 and 17:30 would be programmed. To change a field in this input mask without changing the state of the other fields,
the Ctrl key must be pressed during the mouse click.
For this rule, on the “Options” tab, the time period is limited to the range between 5.10.2021 and 5.4.2022. In this example, the timer rule is only executed with a probability (Random Trigger Probability) of 90%.

In this example, port 1 and port 5 are enabled and disabled after 90 minutes by batch mode.
A popup on the mouse pointer shows the port number of the field.
Console Commands

Expert Power Control 8316

44
© 2023 GUDE Systems GmbH

Configuration
Instead of switching a port, one or more console commands can be executed. These commands are entered in the “Action CLI” register. The “Action Cli” tab can only be selected if the option “Perform CLI Cmd” is activated in “Options”.
Example Switching a Port on a Date
If you want to switch on a timer on a certain date at a certain time and switch it off at a later time, you cannot do it directly with a simple timer. Therefore it can be useful to create the timer as a simple timer first, and then customize it in the advanced dialog.
Switch port 3 on every day at 9:25, and off again at 17:30. You save.

45
Expert Power Control 8316

Configuration
Then call up the two timer rules you created (“On” and “Off”) and enter the date on which the switching operation is to take place in the “Options” tab.
Example blind control
You can use the jitter e.g. for a shutter control. In the classic example of a shutter control, you do not always want to raise and lower the shutters at the same time in order to confuse potential burglars. The jitter of 1800 seconds means that the action is executed randomly in a period between 30 minutes before and 30 minutes after the programmed time. The probability (Random Trigger Probability) of execution here is 100%.

Expert Power Control 8316

46
© 2023 GUDE Systems GmbH

Configuration
3.5 Sensors

Sensor: Selects a sensor type to configure it. The first digit “1:” indicates the number of the sensor port (only important for devices with more than one sensor port). This is followed by the sensor name, and the adjustable sensor name.
Sensor Name: Changeable name for this sensor. For example, you can give the temperature and the humidity a different name, even if they belong to the same sensor.
Select Sensor Field: Selects a data channel from a sensor.
Enable value-threshold message trigger: Enables monitoring of sensor threshold values.
Maximum/Minimum value: Adjustable threshold values at which messages should be sent via console (Telnet/SSH), SNMP trap, Syslog, MQTT or e-mail.
Hysteresis: Defines the distance that must be exceeded after a limit value of an external sensor has been exceeded in order to signal that the limit value has fallen below.
When above/below Min/Max value Switch Port: Switches a port depending on the exceeding or falling below of a limit value.
Enable time interval message trigger: Generates console (Telnet/SSH) and MQTT messages within time intervals.

47
Expert Power Control 8316

Configuration
Enable value-delta message trigger: Generates console (Telnet/SSH) and MQTT messages when a sensor value deviates by a delta value.
Message channels: Enables the generation of messages on different channels.
Flashing display causes the 7-segment display to flash. Pressing a front panel button resets the beeper and the flashing display.
Min/Max measurement period: Selects the time range for the sensor min/max values on the overview web page.
Hysteresis Example:
A Hysteresis value prevents that too much messages are generated, when a sensor value is jittering around a sensor limit. The following example shows the behavior for a temperature sensor and a hysteresis value of “1”. An upper limit of “50 °C” is set. Example:
49.9 °C – is below the upper limit 50.0 °C – a message is generated for reaching the upper limit 50.1 °C – is above the upper limit … 49.1 °C – is below the upper limit, but in the hysteresis range 49.0 °C – is below the upper limit, but in the hysteresis range 48.9 °C – a message is generated for underrunning the upper limit inclusive hysteresis range …
3.5.1 Port Switching
Depending on the measured Current and the measured sensor values, switching actions can be triggered. During operation, the actions configured for crossing the limits are executed. For example, when a value moves from the range “above max value” inside the range “below max value”, the action defined for “below max value” is performed. In the case of device start, configuration or plug-in of the sensor, the actions corresponding to the range in which the current temperature is located are switched.
Example with “Maximum value” of 65 °C, “Minimum value” of 25 °C and hysteresis of 3 ° C. The dotted line shows the hysteresis.

Actions during configuration, device start or plugging in the sensor (for given example):

actual temperature during configuration
70 °C

actions Port 1 Off (above max) + Port 2 On (above min)

48

Expert Power Control 8316

Configuration

45 °C 20 °C

Port 1 On (below max) + Port 2 On (above min) Port 1 On (below max) + Port 2 Off (below min)

Action matrix during operation when limit values are exceeded (for given example):

to “above max” to “below max”

from “above max”

–

P1 On

from “below max”

P1 Off

–

from “above min”

P1 Off

–

from “below min” P1 Off + P2 On

P2 On

to “above min” P1 On P2 On

to “below min” P1 On + P2 Off
P2 Off P2 Off
–

Only the switching operations for which actions have been defined, are triggered. If no “On” or “Off” action is defined for a port, the port can never reach this state by exceeding sensor values. Unless it is the initial state.

3.6 E-Mail

Enable E-Mail: Activates the E-Mail dispatch of messages.
Sender address: The E-Mail address of the sender.
Recipient address: The E-Mail address of the recipient. Additional E-Mail addresses, separated by comma, can be specified. The input limit is 100 characters.
SMTP Server: The SMTP IP-address of the E-Mail server. Either as FQDN, e.g: “mail.gmx.net”, or as IP-address, e.g: “213.165.64.20”. If required, attach a designated port, e.g: “mail.gmx.net:25”.
SMTP server port: The port address of the E-Mail server. In the normal case this should be the same as the default, that is determined by the setting SMTP Connection Security.

49

Expert Power Control 8316

Configuration
SMTP Connection Security: Transmission via SSL or no encryption. SMTP Authentification (password): Authentication method of the E-Mail Server. Username: User name that is registered with the SMTP E-Mail server. Set new password: Enter the password for the login to the E-Mail server. Repeat password: Enter the password again to confirm it.
If the password mask is redisplayed, only four “bullets” are shown as a symbolic placeholder, since for security reasons the password is never shown itself. If you want to change a password, the complete password must always be re-entered. E-Mail Logs: Logging of E-Mail system messages.
3.7 Front Panel
Button Lock: Disables the front buttons (activates the key lock) with the exception of the bootloader activation. Allow switching all ports: Allows to switch all ports on or off with the front panel buttons. Display 1 default: Selects what sensor is displayed in the display.

Expert Power Control 8316

50
© 2023 GUDE Systems GmbH

Specifications

4 Specifications 4.1 Automated Access

The device can be accessed automatically via four different interfaces, which offer different possibilities to access the configuration data and status information. Only http and the console (telnet and serial) provide full access to the device.

This chapter is general for all Gude devices. Depending on the device model are ports, certain sensors or other features not available.

List of different access options:

Interface HTTP
Console 65 SNMP 56
Modbus TCP 93
MQTT

Scope of Access read / write status of Power Ports (relays or eFuses) read / write all configuration data read / write all status information (full access to the device) read / write status of Power Ports (relays or eFuses) read / write all configuration data read / write all status information (full access to the device) read / write status of Power Ports (relays or eFuses) read / write names of Power Ports (relays or eFuses) read / write status of Port start configuration read / write status Buzzer read / write configuration of power sources (EPC 8291) read / write fan configuration (EPC 8291) read measurement values of external sensors read measurement values of all energy sensors read NTP time and status resetting the energy meters read the status of Overvoltage Protection read / write status of Power Ports (relays or eFuses) read status of Inputs read / write configuration of power sources (EPC 8291) read / write fan configuration (EPC 8291) read measurement values of external sensors read measurement values of all energy sensors read the status of Overvoltage Protection Execute console commands

The device can be controlled via HTTP interface with CGI commands and returns the internal configuration and status in JSON format. The structure of the CGI commands and the JSON data is explained in more detail in our Wiki article: ht t p://wiki.gude.info/EPC_HT T P_Int erfac e

4.2 Messages

Depending on adjustable events, various messages can be sent from the device. The fol-
52

Expert Power Control 8316

Specifications

lowing message types are supported:
· Sending of e-mails · SNMP Traps · Syslog messages

E-Mail messages
Email messages are triggered by the following events:
· Switching of the Ports · Exceeding of the max / min values of attached sensors · State change of digital sensor input ports

SNMP Traps
SNMP Traps are system messages that are sent via the SNMP protocol to different recipients. SNMP traps are triggered by the following events:
· Switching of the Ports · Exceeding of the max / min values of attached sensors · State change of digital sensor input ports

Syslog messages

Syslog messages are simple text messages that are sent via UDP to a syslog server. Under Linux, normally a syslog daemon is already running (eg. syslog- ng), for Microsoft Windows systems some freeware programs are available on the market. The syslog messages are sent for the following events:

· Turning on the device · Enable/disable of syslog in the configuration · Switching of the Ports · Exceeding of the max / min values of attached sensors · State change of digital sensor input ports

Global Device started Switch port Port watchdog status Syslog switched on/off MQTT connection established MQTT connection lost Value-Threshold external sensors Current Time-Interval external sensors Current Value-Delta external sensors Current

SNMP Trap Console MQTT Syslog

x

Email x x x
x

53

Expert Power Control 8316

Specifications

SNMP traps
There are common traps for state changes of the same device resource. For example, a SwitchEvtPort trap is sent when a port is turned on or off. The state change itself is conveyed by the supplied data within the trap.
MQTT published data
Messages on the MQTT channel are sent in JSON format.
Example switch a port: “{“type”: “portswitch”, “idx”: 2, “port”: “2”, “state”: 1, “cause”: {“id”: 2, “txt”: “http”}, “ts”: 1632}”
Console Push Messages
Push messages can be activated on the console channels (Telnet, SSH or serial console), which output sensor values at timed intervals (every n seconds) or as of a configurable change in the magnitude of the sensor value on that channel. The generated message always starts with a “#” and ends with a CR/LF.
Example: Switch a port: “#port 2 ON”
If you open a telnet or SSH connection, the push messages are either preconfigured, or you switch on the push messages temporarily with “console telnet pushmsgs set 1” (or “console ssh pushmsgs set 1”). From now on, push messages will be sent asynchronously on this channel. The asynchronous nature of the messages can cause problems on a connection if you send commands yourself at the same time. There are then the possibilities:
· Filter all incoming characters between “#” and CR/LF · or open a second channel (Telnet, SSH, serial) and switch on the push messages
there.
4.3 IP ACL

IP Access Control List
The IP Access Control List (ACL IP) is a filter for incoming IP packets. If the filter is active, only the hosts and subnets whose IP addresses are registered in the list, can contact via HTTP or SNMP, and make changes. For incoming connections from unauthorized PCs, the device is not completely transparent. Due to technical restraints, a TCP/IP connection will be accepted at first, but then rejected directly.
Examples:

Entry in the IP ACL 192.168.0.123

Meaning the PC with IP Address “192.168.0.123” can access the device

Expert Power Control 8316

54
© 2023 GUDE Systems GmbH

Specifications

Entry in the IP ACL

Meaning

192.168.0.1/24

all devices of subnet “192.168.0.1/24” can access the device

1234:4ef0:eec1:0::/64 all devices of subnet “1234:4ef0:eec1:0::/64” can access the device

If you choose a wrong IP ACL setting and locked yourself out, please activate the Bootloader Mode and use GBL_Conf.exe to deactivate the IP ACL. Alternatively, you can reset the device to factory default.

4.4 IPv6

IPv6 Addresses
IPv6 addresses are 128 bit long and thus four times as long as IPv4 addresses. The first 64 bit form a so-called prefix, the last 64 bit designate a unique interface identifier. The prefix is composed of a routing prefix and a subnet ID. An IPv6 network interface can be reached under several IP addresses. Usually this is the case under a global address and the link local address.
Address Notation
IPv6 addresses are noted in 8 hexadecimal blocks at 16 bit, while IPv4 normally is noted in decimal. The seperator is a colon, not a period. E.g.: 1234:4ef0:0:0:0019:32ff:fe00:0124 Leading zeros may be omitted within a block. The previous example can be rewritten as: 1234:4ef0:0:0:19:32ff:fe00:124 One may omit one or more successive blocks, if they consist of zeros. This may be done only once within an IPv6 address! 1234:4ef0::19:32ff:fe00:124 One may use the usual decimal notation of IPv4 for the last 4 bytes: 1234:4ef0::19:32ff:254.0.1.36
4.5 Radius

The passwords for HTTP, telnet, and serial console (depending on the model) can be stored locally and / or authenticated via RADIUS. The RADIUS configuration supports a primary server and a backup server. If the primary server does respond, the RADIUS request is sent to the backup server. If the local password and RADIUS are enabled at the same time, the system is first checking locally, and then in the event of a failure the
55

Expert Power Control 8316

Specifications

RADIUS servers are contacted.
RADIUS attributes
The following RADIUS attributes are evaluated by the client:
Session-Timeout: This attribute specifies (in seconds) how long an accepted RADIUS request is valid. After this time has elapsed, the RADIUS server must be prompted again. If this attribute is not returned, the default timeout entry from the configuration is used instead. Please set this value to 300 seconds or greater to prevent the radius requests from becoming too large. Filter-Id: If the value “admin” is set for this attribute, then an admin rights are assigned for the login, otherwise only user access. Service-Type: This is an alternative to Filter-Id. A service type of “6” or “7” means admin rights for the HTTP login, otherwise only limited user access.
HTTP Login
The HTTP login takes place via Basic Authentication. This means that it is the responsibility of the web server, how long the login credentials are temporarily stored there. The RADIUS parameter “Session-Timeout” therefore does not determine when the user has to login again, but at what intervals the RADIUS servers are asked again.
4.6 SNMP

SNMP can be used for status information via UDP (port 161). Supported SNMP commands are:
· GET · GETNEXT · GETBULK · SET
To query via SNMP you need a Network Management System, such as HP OpenView, OpenNMS, Nagios etc., or the simple command line tools of NET-SNMP software. The device supports SNMP protocols v1, v2c and v3. If traps are enabled in the configuration, the device messages are sent as notifications (traps). SNMP Informs are not supported. SNMP Requests are answered with the same version with which they were sent. The version of the sent traps can be set in the configuration.
MIB Tables
The values that can be requested or changed by the device, the so-called “Managed Objects”, are described in Management Information Bases (MIBs). These substructures are subordinate to so-called “OID” (Object Identifiers). An OID digit signifies the location of a value inside a MIB structure. Alternatively, each OID can be referred to with its symbol name (subtree name). The device’s MIB table can be displayed as a text file by clicking on the link “MIB table” on the SNMP configuration page in the browser.

SNMP v1 and v2c
Expert Power Control 8316

56
© 2023 GUDE Systems GmbH

Specifications

SNMP v1 and v2c authenticates the network requests by so-called communities. The

SNMP request has to send along the so-called community public for queries (read ac-

cess) and the community private for status changes (write access)

. The SNMP

communities are read and write passwords. In SNMP v1 and v2 the communities are

transmitted unencrypted on the network and can be easily intercepted with IP sniffers

within this collision domain. To enforce limited access we recommend the use of DMZ or

IP-ACL.

SNMP v3
Because the device has no multiuser management, only one user (default name “standard”) is detected in SNMP v3. From the User-based Security Model (USM) MIB variables, there is a support of “usmStats …” counter. The “usmUser …” variables will be added with the enhancement of additional users in later firmware versions. The system has only one context. The system accepts the context “normal” or an empty context.
Authentication
The algorithms “HMAC-MD5-96” and “HMAC-SHA-96” are available for authentication. In addition, the “HMAC-SHA-2” variants (RFC7630) “SHA-256”, “SHA-384” and “SHA-512” are implemented.

“SHA-384” and “SHA512” are calculated purely in software. If “SHA-384” or “SHA512” is set on the configuration page, the time for the key generation may take once up to approx. 45 seconds.
Encryption
The methods “DES”, “3DES”, “AES-128”, “AES-192” and “AES-256” are supported in combination with “HMAC-MD5-96” and “HMAC-SHA-96.” For the “HMAC-SHA-2” protocols, there is currently neither RFC nor draft that will allow for cooperation with an encryption.

While in the settings “AES-192” and “AES256” the key calculation is based on “draft-blumenthalphoto-aes-usm-04”, the methods “AES 192-3DESKey” and “AES 2563DESKey” utilize a key generation, which is also used in the “3DES” configuration (“draft-reeder-snmpv3-usm-3desede-00”). If one is not an SNMP expert, it is recommended to try in each case the settings with and without “…- 3DESKey”.
Passwords
The passwords for authentication and encryption are stored only as computed hashes for security reasons. Thus it is, if at all, very difficult to infer the initial password. However, the hash calculation changes with the set algorithms. If the authentication or privacy algorithms are changed, the passwords must be re-entered in the configuration dialog.
Security
The following aspects should be considered:
· If encryption or authentication is used, then SNMP v1 and v2c should be turned off. Otherwise the device could be accessed with it.
· If only authentication is used, then the new “HMAC-SHA-2” methods are superior to
57

Expert Power Control 8316

Specifications

the MD5 or SHA-1 hashing algorithms. Since only SHA-256 is accelerated in hardware, and SHA-384 and SHA-512 are calculated purely in software, one should normally select SHA-256. From a cryptographic point of view, the security of SHA-256 is sufficient for today’s usage. · For SHA-1, there are a little less attack scenarios than MD5. If in doubt, SHA-1 is preferable. · Encryption “DES” is considered very unsafe, use only in an emergency for reasons of compatibility! · For cryptologists it’s a debatable point whether “HMAC-MD5-96” and “HMAC-SHA-96” can muster enough entropy for key lengths of “AES-192” or “AES-256”. · From the foregoing considerations, we would recommended at present “HMAC-SHA96” with “AES-128” as authentication and encryption method.

Change in Trap Design
In older MIB tables, a separate trap was defined for each combination of an event and a port number. This results in longer lists of trap definitions for the devices. For example, from epc8221SwitchEvtPort1 to epc8221SwitchEvtPort12. Since new firmware versions can generate many more different events, this behavior quickly produces several hundred trap definitions. To limit this overabundance of trap definitions, the trap design has been changed to create only one specific trap for each event type. The port or sensor number is now available in the trap as an index OID within the variable bindings.
In order to recognize this change directly, the “Notification” area in the MIB table has been moved from sysObjectID.0 to sysObjectID.3. This way, unidentified events are generated until the new MIB table is imported. For compatibility reasons, SNMP v1 traps are created in the same way as before.

NET-SNMP
NET-SNMP provides a very widespread collection of SNMP command-line tools (snmpget, snmpset, snmpwalk etc.) NET-SNMP is among others available for Linux and Windows. After installing NET-SNMP you should create the device-specific MIB of the device in NET-SMP share directory, e.g. after
c:usrsharesnmpmibs
or
/usr/share/snmp/mibs
So later you can use the ‘subtree names’ instead of OIDs:
Name: snmpwalk -v2c -mALL -c public 192.168.1.232 gudeads OID: snmpwalk -v2c -mALL -c public 192.168.1.232 1.3.6.1.4.1.28507

NET-SNMP Examples These examples refer to Gude devices that have switchable ports.
Query Power Port 1 switching state: snmpget -v2c -mALL -c public 192.168.1.232 epc822XPortState.1
Expert Power Control 8316

58
© 2023 GUDE Systems GmbH

Specifications

Switch on Power Port 1: snmpset -v2c -mALL -c private 192.168.1.232 epc822XPortState.1 integer 1

4.6.1 Device MIB 8314
Below is a table of all device-specific OID ‘s which can be accessed via SNMP. In the numerical representation of the OID the prefix ” 1.3.6.1.4.1.28507 ” (Gude Enterprise OID) was omitted at each entry in the table to preserve space. The example for a complete OID would be “1.3.6.1.4.1.28507.64.1.1.1.1”. A distinction is made in SNMP OID ‘s in between tables and scalars. OID scalar have the extension “.0” and only specify a value. In SNMP tables the “x” is replaced by an index (1 or greater) to address a value from the table.

Name
epc8314TrapCtrl epc8314TrapIPIndex epc8314TrapAddr
epc8314portNumber epc8314PortIndex epc8314PortName epc8314PortState epc8314PortSw itchCount
epc8314PortStartupMode epc8314PortStartupDelay epc8314PortRepow erTime epc8314PortResetDuration epc8314ActivePow erChan epc8314Pow erIndex epc8314ChanStatus epc8314AbsEnergyActive epc8314Pow erActive epc8314Current epc8314Voltage epc8314Frequency
59
Expert Power Control 8316

OID

Type Acc.

Description

.97.1.1.1.1.0

Integer32 RW

0 = off 1 = Ver. 1 2 = Ver. 2c 3 = Ver. 3

.97.1.1.1.2.1.1.x Integer32 RO

A unique value, greater than zero, for each receiver slot.

.97.1.1.1.2.1.2.x

OCTETS RW

DNS name or IP address specifying one Trap receiver slot. A port can

optionally be specified: ‘name:port’ An empty string disables this slot.

.97.1.3.1.1.0

Integer32 RO

The number of Relay Ports

.97.1.3.1.2.1.1.x Integer32 RO

A unique value, greater than zero, for each Relay Port.

.97.1.3.1.2.1.2.x

OCTETS RW

A textual string containing name of a Relay Port.

.97.1.3.1.2.1.3.x

INTEGER RW

current state a Relay Port

.97.1.3.1.2.1.4.x Integer32 RO

The total number of sw itch actions ocurred on a Relay Port. Does not

count sw itch commands w hich w ill not sw itch the ralay state, so just

real relay sw itches are displayed here.

.97.1.3.1.2.1.5.x

INTEGER RW

set Mode of startup sequence (off, on , remember last state)

.97.1.3.1.2.1.6.x Integer32 RW

Delay in sec for startup action

.97.1.3.1.2.1.7.x Integer32 RW

Delay in sec for repow er port after sw itching off

.97.1.3.1.2.1.8.x Integer32 RW

Delay in sec for turning Port on again after Reset action

.97.1.5.1.1.0

Unsigned32 RO

Number of suppported Pow er Channels.

.97.1.5.1.2.1.1.x Integer32 RO

Index of Pow er Channel entries

.97.1.5.1.2.1.2.x Integer32 RO

0 = data not active, 1 = data valid

.97.1.5.1.2.1.3.x Unsigned32 RO

Absolute Active Energy counter.

.97.1.5.1.2.1.4.x Integer32 RO

Active Pow er

.97.1.5.1.2.1.5.x Unsigned32 RO

Actual Curent on Pow er Channel.

.97.1.5.1.2.1.6.x Unsigned32 RO

Actual Voltage on Pow er Channel

.97.1.5.1.2.1.7.x Unsigned32 RO

Specifications

Frequency of Pow er Channel

epc8314Pow erFactor

.97.1.5.1.2.1.8.x Integer32 RO

Pow er Factor of Channel betw een -1.0 and 1.00

epc8314Pangle

.97.1.5.1.2.1.9.x Integer32 RO

Phase Angle betw een Voltage and L Line Current betw een -180.0 and

180.0

epc8314Pow erApparent

.97.1.5.1.2.1.10.x Integer32 RO

L Line Mean Apparent Pow er

epc8314Pow erReactive

.97.1.5.1.2.1.11.x Integer32 RO

L Line Mean Reactive Pow er

epc8314AbsEnergyReactive

.97.1.5.1.2.1.12.x Unsigned32 RO

Absolute Reactive Energy counter.

epc8314AbsEnergyActiveResetta ble

.97.1.5.1.2.1.13.x Unsigned32 RW

Resettable Absolute Active Energy counter. Writing ‘0’ resets all

resettable counter.

epc8314AbsEnergyReactiveReset table

.97.1.5.1.2.1.14.x Unsigned32 RO

Resettable Absolute Reactive Energy counter.

epc8314ResetTime

.97.1.5.1.2.1.15.x Unsigned32 RO

Time in seconds since last Energy Counter reset.

epc8314Forw EnergyActive

.97.1.5.1.2.1.16.x Unsigned32 RO

Forw ard Active Energy counter.

epc8314Forw EnergyReactive

.97.1.5.1.2.1.17.x Unsigned32 RO

Forw ard Reactive Energy counter.

epc8314Forw EnergyActiveResett able

.97.1.5.1.2.1.18.x Unsigned32 RO

Resettable Forw ard Active Energy counter.

epc8314Forw EnergyReactiveRes ettable

.97.1.5.1.2.1.19.x Unsigned32 RO

Resettable Forw ard Reactive Energy counter.

epc8314RevEnergyActive

.97.1.5.1.2.1.20.x Unsigned32 RO

Reverse Active Energy counter.

epc8314RevEnergyReactive

.97.1.5.1.2.1.21.x Unsigned32 RO

Reverse Reactive Energy counter.

epc8314RevEnergyActiveResetta ble

.97.1.5.1.2.1.22.x Unsigned32 RO

Resettable Reverse Active Energy counter.

epc8314RevEnergyReactiveResett able

.97.1.5.1.2.1.23.x Unsigned32 RO

Resettable Reverse Reactive Energy counter.

epc8314LineSensorName

.97.1.5.1.2.1.100.x OCTETS RW

A textual string containing name of a Line Sensor

epc8314NTPTimeValid

.97.1.5.15.1.0

INTEGER RO

Show if valid Time is received

epc8314NTPUnixTime

.97.1.5.15.2.0

Unsigned32 RO

show received NTP time as unixtime (secs since 1 January 1970)

epc8314NTPLastValidTimestamp

.97.1.5.15.3.0

Unsigned32 RO

show seconds since last valid NTP timestamp received

epc8314SensorIndex

.97.1.6.1.1.1.x

Integer32 RO

None

epc8314TempSensor

.97.1.6.1.1.2.x

Integer32 RO

actual temperature

epc8314HygroSensor

.97.1.6.1.1.3.x

Integer32 RO

actual humidity

epc8314InputSensor

.97.1.6.1.1.4.x

INTEGER RO

logical state of input sensor

epc8314AirPressure

.97.1.6.1.1.5.x

Integer32 RO

actual air pressure

epc8314Dew Point

.97.1.6.1.1.6.x

Integer32 RO

dew point for actual temperature and humidity

epc8314Dew PointDiff

.97.1.6.1.1.7.x

Integer32 RO

difference betw een dew point and actual temperature (Temp –

Dew Point)

epc8314ExtSensorName

.97.1.6.1.1.32.x

OCTETS RW

60

Expert Power Control 8316

Specifications

A textual string containing name of a external Sensor

4.6.2 Device MIB 8316
Below is a table of all device-specific OID ‘s which can be accessed via SNMP. In the numerical representation of the OID the prefix ” 1.3.6.1.4.1.28507 ” (Gude Enterprise OID) was omitted at each entry in the table to preserve space. The example for a complete OID would be “1.3.6.1.4.1.28507.64.1.1.1.1”. A distinction is made in SNMP OID ‘s in between tables and scalars. OID scalar have the extension “.0” and only specify a value. In SNMP tables the “x” is replaced by an index (1 or greater) to address a value from the table.

Name
epc8316TrapCtrl epc8316TrapIPIndex epc8316TrapAddr
epc8316portNumber epc8316PortIndex epc8316PortName epc8316PortState epc8316PortSw itchCount
epc8316PortStartupMode epc8316PortStartupDelay epc8316PortRepow erTime epc8316PortResetDuration epc8316ActivePow erChan epc8316Pow erIndex epc8316ChanStatus epc8316AbsEnergyActive epc8316Pow erActive epc8316Current epc8316Voltage epc8316Frequency epc8316Pow erFactor epc8316Pangle
61
Expert Power Control 8316

OID

Type Acc.

Description

.64.1.1.1.1.0

Integer32 RW

0 = off 1 = Ver. 1 2 = Ver. 2c 3 = Ver. 3

.64.1.1.1.2.1.1.x Integer32 RO

A unique value, greater than zero, for each receiver slot.

.64.1.1.1.2.1.2.x

OCTETS RW

DNS name or IP address specifying one Trap receiver slot. A port can

optionally be specified: ‘name:port’ An empty string disables this slot.

.64.1.3.1.1.0

Integer32 RO

The number of Relay Ports

.64.1.3.1.2.1.1.x Integer32 RO

A unique value, greater than zero, for each Relay Port.

.64.1.3.1.2.1.2.x

OCTETS RW

A textual string containing name of a Relay Port.

.64.1.3.1.2.1.3.x

INTEGER RW

current state a Relay Port

.64.1.3.1.2.1.4.x Integer32 RO

The total number of sw itch actions ocurred on a Relay Port. Does not

count sw itch commands w hich w ill not sw itch the ralay state, so just

real relay sw itches are displayed here.

.64.1.3.1.2.1.5.x

INTEGER RW

set Mode of startup sequence (off, on , remember last state)

.64.1.3.1.2.1.6.x Integer32 RW

Delay in sec for startup action

.64.1.3.1.2.1.7.x Integer32 RW

Delay in sec for repow er port after sw itching off

.64.1.3.1.2.1.8.x Integer32 RW

Delay in sec for turning Port on again after Reset action

.64.1.5.1.1.0

Unsigned32 RO

Number of suppported Pow er Channels.

.64.1.5.1.2.1.1.x Integer32 RO

Index of Pow er Channel entries

.64.1.5.1.2.1.2.x Integer32 RO

0 = data not active, 1 = data valid

.64.1.5.1.2.1.3.x Unsigned32 RO

Absolute Active Energy counter.

.64.1.5.1.2.1.4.x Integer32 RO

Active Pow er

.64.1.5.1.2.1.5.x Unsigned32 RO

Actual Curent on Pow er Channel.

.64.1.5.1.2.1.6.x Unsigned32 RO

Actual Voltage on Pow er Channel

.64.1.5.1.2.1.7.x Unsigned32 RO

Frequency of Pow er Channel

.64.1.5.1.2.1.8.x Integer32 RO

Pow er Factor of Channel betw een -1.0 and 1.00

.64.1.5.1.2.1.9.x Integer32 RO

Specifications

Phase Angle betw een Voltage and L Line Current betw een -180.0 and

180.0

epc8316Pow erApparent

.64.1.5.1.2.1.10.x Integer32 RO

L Line Mean Apparent Pow er

epc8316Pow erReactive

.64.1.5.1.2.1.11.x Integer32 RO

L Line Mean Reactive Pow er

epc8316AbsEnergyReactive

.64.1.5.1.2.1.12.x Unsigned32 RO

Absolute Reactive Energy counter.

epc8316AbsEnergyActiveResetta ble

.64.1.5.1.2.1.13.x Unsigned32 RW

Resettable Absolute Active Energy counter. Writing ‘0’ resets all

resettable counter.

epc8316AbsEnergyReactiveReset table

.64.1.5.1.2.1.14.x Unsigned32 RO

Resettable Absolute Reactive Energy counter.

epc8316ResetTime

.64.1.5.1.2.1.15.x Unsigned32 RO

Time in seconds since last Energy Counter reset.

epc8316Forw EnergyActive

.64.1.5.1.2.1.16.x Unsigned32 RO

Forw ard Active Energy counter.

epc8316Forw EnergyReactive

.64.1.5.1.2.1.17.x Unsigned32 RO

Forw ard Reactive Energy counter.

epc8316Forw EnergyActiveResett able

.64.1.5.1.2.1.18.x Unsigned32 RO

Resettable Forw ard Active Energy counter.

epc8316Forw EnergyReactiveRes ettable

.64.1.5.1.2.1.19.x Unsigned32 RO

Resettable Forw ard Reactive Energy counter.

epc8316RevEnergyActive

.64.1.5.1.2.1.20.x Unsigned32 RO

Reverse Active Energy counter.

epc8316RevEnergyReactive

.64.1.5.1.2.1.21.x Unsigned32 RO

Reverse Reactive Energy counter.

epc8316RevEnergyActiveResetta ble

.64.1.5.1.2.1.22.x Unsigned32 RO

Resettable Reverse Active Energy counter.

epc8316RevEnergyReactiveResett able

.64.1.5.1.2.1.23.x Unsigned32 RO

Resettable Reverse Reactive Energy counter.

epc8316LineSensorName

.64.1.5.1.2.1.100.x OCTETS RW

A textual string containing name of a Line Sensor

epc8316spActivePow erChan

.64.1.5.5.1.0

Unsigned32 RO

Number of Single Port Pow er Channels.

epc8316spPow erIndex

.64.1.5.5.2.1.1.x Integer32 RO

Index of Single Port Pow er Channel entries. Indices 0-5 mean Ports A1

to A6, 6-11 are Ports B1 to B6.

epc8316spChanStatus

.64.1.5.5.2.1.2.x Integer32 RO

0 = data not active, 1 = data valid

epc8316spAbsEnergyActive

.64.1.5.5.2.1.3.x Unsigned32 RO

Absolute Active Energy counter.

epc8316spPow erActive

.64.1.5.5.2.1.4.x Integer32 RO

Active Pow er

epc8316spCurrent

.64.1.5.5.2.1.5.x Unsigned32 RO

Actual Curent on Pow er Channel.

epc8316spVoltage

.64.1.5.5.2.1.6.x Unsigned32 RO

Actual Voltage on Pow er Channel

epc8316spFrequency

.64.1.5.5.2.1.7.x Unsigned32 RO

Frequency of Pow er Channel

epc8316spPow erFactor

.64.1.5.5.2.1.8.x Integer32 RO

Pow er Factor of Channel betw een -1.0 and 1.00

epc8316spPangle

.64.1.5.5.2.1.9.x Integer32 RO

Phase Angle betw een Voltage and L Line Current betw een -180.0 and

180.0

epc8316spPow erApparent

.64.1.5.5.2.1.10.x Integer32 RO

L Line Mean Apparent Pow er

epc8316spPow erReactive

.64.1.5.5.2.1.11.x Integer32 RO

L Line Mean Reactive Pow er

62

Expert Power Control 8316

Specifications

epc8316spAbsEnergyReactive

.64.1.5.5.2.1.12.x Unsigned32 RO

Absolute Reactive Energy counter.

epc8316spAbsEnergyActiveReset table

.64.1.5.5.2.1.13.x Unsigned32 RW

Resettable Absolute Active Energy counter. Writing ‘0’ resets all

resettable counter.

epc8316spAbsEnergyReactiveRe settable

.64.1.5.5.2.1.14.x Unsigned32 RO

Resettable Absolute Reactive Energy counter.

epc8316spResetTime

.64.1.5.5.2.1.15.x Unsigned32 RO

Time in seconds since last Energy Counter reset.

epc8316spForw EnergyActive

.64.1.5.5.2.1.16.x Unsigned32 RO

Forw ard Active Energy counter.

epc8316spForw EnergyReactive

.64.1.5.5.2.1.17.x Unsigned32 RO

Forw ard Reactive Energy counter.

epc8316spForw EnergyActiveRes ettable

.64.1.5.5.2.1.18.x Unsigned32 RO

Resettable Forw ard Active Energy counter.

epc8316spForw EnergyReactiveR esettable

.64.1.5.5.2.1.19.x Unsigned32 RO

Resettable Forw ard Reactive Energy counter.

epc8316spRevEnergyActive

.64.1.5.5.2.1.20.x Unsigned32 RO

Reverse Active Energy counter.

epc8316spRevEnergyReactive

.64.1.5.5.2.1.21.x Unsigned32 RO

Reverse Reactive Energy counter.

epc8316spRevEnergyActiveReset table

.64.1.5.5.2.1.22.x Unsigned32 RO

Resettable Reverse Active Energy counter.

epc8316spRevEnergyReactiveRes ettable

.64.1.5.5.2.1.23.x Unsigned32 RO

Resettable Reverse Reactive Energy counter.

epc8316NTPTimeValid

.64.1.5.15.1.0

INTEGER RO

Show if valid Time is received

epc8316NTPUnixTime

.64.1.5.15.2.0

Unsigned32 RO

show received NTP time as unixtime (secs since 1 January 1970)

epc8316NTPLastValidTimestamp

.64.1.5.15.3.0

Unsigned32 RO

show seconds since last valid NTP timestamp received

epc8316SensorIndex

.64.1.6.1.1.1.x

Integer32 RO

None

epc8316TempSensor

.64.1.6.1.1.2.x

Integer32 RO

actual temperature

epc8316HygroSensor

.64.1.6.1.1.3.x

Integer32 RO

actual humidity

epc8316InputSensor

.64.1.6.1.1.4.x

INTEGER RO

logical state of input sensor

epc8316AirPressure

.64.1.6.1.1.5.x

Integer32 RO

actual air pressure

epc8316Dew Point

.64.1.6.1.1.6.x

Integer32 RO

dew point for actual temperature and humidity

epc8316Dew PointDiff

.64.1.6.1.1.7.x

Integer32 RO

difference betw een dew point and actual temperature (Temp –

Dew Point)

epc8316ExtSensorName

.64.1.6.1.1.32.x

OCTETS RW

A textual string containing name of a external Sensor

4.7 SSL

TLS Standard
The device is compatible with TLS v1.1 to TLS v1.3 standards, but due to lack of security, SSL v3.0, TLS 1.0, and RC4, MD5, SHA1, and DES encryption are disabled. All
63

Expert Power Control 8316

Specifications

ciphers use Diffie-Hellman key exchange (Perfect Forward Secrecy).

Creating your own Certificates

The SSL stack is supplied with a specially newly generated self-signed certificate. There is no function to generate the local certificate anew at the touch of a button, since the required random num bers in an em bedded device are usually not independent enough. However, you can create new certificates and im port them to the device. The s erver accepts RSA (2048/4096) and ECC (Elliptic Curve Cryptography) certificates.
Usually OpenSSL is used to create an SSL certificate. For Windows for exam ple, there is the light version of Shining Light Productions. There you open a command prompt, change to the directory “C:OpenSSL-Win32bin” and set these environm ent variables:
set openssl_conf=C:OpenSSL-Win32binopenssl.cfg set RANDFILE=C:OpenSSL- Win32bin.rnd

Here are some examples for the generation with OpenSSL:
Creation of a self-signed RSA 2048-bit certificate
openssl genrsa -out server.key 2048 openssl req -new -x509 -days 365 -key server.key -out server.crt

RSA 2048-bit certificate with Sign Request:
openssl genrsa -out server.key 2048 openssl req -new -key server.key -out server.csr openssl req -x509 -days 365 -key server.key -in server.csr -out server.crt
The server keys should be created with “openssl genrsa”. The Gude device processes keys in the traditional PKCS#1 format. This can be recognized by the fact that the generated key file starts with “—–BEGIN RSA PRIVATE KEY—–“. If the file starts with “—–BEGIN PRIVATE KEY—–“, the file is in PKCS#8 format and the key is not recognized. If you have only a key in PKCS#8 format, you can convert it to PKCS#1 with openssl: “openssl rsa -in pkcs8.key -out pkcs1.key”.

ECC Certificate with Sign Request:
openssl ecparam -genkey -name prime256v1 -out server.key openssl req -new -key server.key -out server.csr openssl req -x509 -days 365 -key server.key -in server.csr -out server.crt

If you have created your key and certificate, both files are concatenated to one file: Linux: cat server.crt server.key > server.pem Windows: copy server.crt + server.key server.pem

64

Expert Power Control 8316

Specifications
The created server.pem can only be uploaded in the maintenance section of the device.
If several certificates (Intermediate CRT’s) should also be uploaded to the device, one should make sure, that firstly the server certificate and secondly the Intermediates are assembled , e.g: cat server.crt IM1.crt IM2.crt server.key > server.pem
An uploaded certificate will be preserved, when a device is put back to factory defaults 21 .
Performance Considerations
If RSA 4096 certificates are used, the first access to the web server can take 8-10 seconds, because the math unit of the embedded CPU is highly demanded. After that, the parameters are in the SSL session cache, so all other requests are just as fast as with other certificate lengths. For a quick response even on the first access, we recommend RSA 2048-bit certificates that offer adequate security, too.
4.8 Console
For the configuration and control of the device, there is a set of commands with parameters that can be entered through a console. The console is available via SSH or Telnet, or for devices with RS232 port through using a serial terminal. It is not necessary to use Telnet, in Raw Mode a simple TCP/IP connection is sufficient to send commands. The communication can also be performed automated (e.g. via scripting languages). The console features are configured through the web interface 31 .
Login
A ssh / telnet log in can be configured with password or without:

Command Set
There are several command levels. The following commands are usable from each level:

65
Expert Power Control 8316

Specifications

back help help all logout quit

go back one level all commands of the actual level
show all commands logout (only when login required)
quit console

The “help” command returns all the commands of the current level. If “help” is called from the top level, e.g. the line “http [subtopics]” appears. This means that there is another level for “http”. With the command “http help” all commands below “http” are shown. Alternatively, with entering “http” you can select the http level, and “help” shows all the commands on the selected level. The command “back” again selects the top level. It is possible to use “help” at any position: “http passwd help” provides all commands that have the prefix “http passwd”.

You will find a complete list of all possible device commands in the chapter “Cmd Overview”.

Parameter
If parameters are expected for the command, the parameter may be passed as numeric or constant. If e.g. you get the following line as help: http server set {http_both=0|https_only=1|http_only=2}
the following instruction pairs are equivalent:
http server set https_only http server set 1
or
http server set https_both http server set 0

Numerical parameters can be entered with different bases. Here is an example of the decimal value 11:

Base decimal (10) hexadecimal (16) octal (8) binary (2)

Input 11 0xb 013 0b1011

Bit Field Parameter
Some parameters can take several values at the same time. In the following example, all values between 0 and 5 can be set. In the help, this can be recognized by the fact that the values are not separated by the “|” character, but by commas.
“{EVT_SYSLOG=0,EVT_SNMP=1,EVT_EMAIL=2,EVT_SMS=3,EVT_GSMEMAIL=4,EVT_BEEPER=5}”
To set EVT_SYSLOG and EVT_EMAIL in a command, you can use the following syntax:
66

Expert Power Control 8316

Specifications

extsensor 1 2 0 events type set “EVT_SYSLOG,EVT_EMAIL” OK.
or numeric
extsensor 1 2 0 events type set “0,2” OK.
Additionally you can set all values with “ALLSET” or encode any bit pattern as hexadecimal with a syntax like “#7f1a”.
Return Values
If a command is unknown or a parameter is incorrect, the output “ERR.” is given at the beginning of the line, followed by a description of the fault. Successful instructions without special return value will be acknowledged by “OK.”. All other return values are output within a single line. There are of two exceptions:
1. Some configuration changes, that affect TCP / IP and UDP, need a restart to be applied. These parameters are output on two lines. In the first line the current value is shown, on the second row the value after a restart. In the “Cmd Overview” table this is marked with “Note 2”.
2. Other configurations (such as the assigned IPv6 addresses) have several values that can change dynamically. This is marked with “Note 3” in the “Cmd Overview” table.
Numerical Returns
For parameters that support constants, these constants are output as return values. To better deal with scripting languages, it may be easier to work only with numerical returns. The command “vt100 numeric set ON” enables that only numerical values appear.
Comments
If you use a tool to send an entire file of commands via Telnet, it is helpful, if you can place comments in there. Beginning with the comment character “#”, the remaining contents of a line is ignored.
Telnet
If the configuration “Raw Mode” is turned off, it is tried to negotiate the Telnet configuration between client and server using IAC commands. If this fails, the editing functions are not active, and the “Activate echo” option determines whether the characters sent to the Telnet server will be returned. Normally the client begins with the IAC negotiation. If this is not the case with the client, the device configuration “Active negotiation” should be turned on.

Raw Mode
If you want to use the console only automated, it may be advantageous to set the con-
67

Expert Power Control 8316

Specifications

figuration “Raw mode” to “yes” and “Activate echo” to “no” to. Then there is no interfering interaction with the editor functions and the is no need to filter the sent characters to process the return values.
If in the console “Raw mode” is activated but not in the used Telnet client, the IAC commands sent at the beginning can appear as interfering characters in the command line (partially invisible).

Editing
The following edit functions are available when the terminal supports VT100, and Raw Mode is deactivated. Entered characters are inserted at the cursor position.

Keys Left, Right Pos1, End
Del Backspace Up, Down Tab, Ctrl-Tab
Ctrl-C

Function moves cursor left or right moves cursor to the beginning or end of line deletes character under the cursor deletes character left of cursor shows input lines history completes the word at cursor
clears the line

This chapter is general for all Gude devices. Depending on the device type, ports or certain sensors may not be available.
Sensor Examples
a) External Sensors

extsensor all show E=1,L=”7106″,0=”21.3°C”,1=”35.1%”,3=”1013hPa”,4=”5.2°C”,5=”16.0°C”” E=2,L=”7102″,0=”21.2°C”,1=”35.4%”,4=”5.3°C”,5=”15.9°C””
The command lists one connected external sensor per line, and the individual measured values are separated by commas after the label name. The digit before the equal sign corresponds to the Index field in the External Sensor Table.
extsensor 1 0 value show
Displays temperature of the sensor at Port 1

b) Line Sensors

linesensor all “0,1,2,3,12” show L=1,L=”Power Port”,0=”13000Wh”,1=”0W”,2=”225V”,3=”0A”,12=”998218s” L=2,L=”Power Port”,0=”13000Wh”,1=”0W”,2=”223V”,3=”0A”,12=”996199s”
This command outputs all line sensor values in one line. A list of all fields (according to the energy sensor table) is transferred as parameter. In this example these are the fields Absolute Active Energy (0), Power Active (1), Voltage (2), Current (3) and Reset Time (12).
68

Expert Power Control 8316

Specifications

linesensor 1 “0,1,2,3,12” show >linesensor 1 1 show
These variants give the sensor values of the field list or of a sensor at Line-In 1.
For devices with Overvoltage Protection, the “linesensor all” command also outputs the state of the protection (“OVP=x”). A “1” means ok, a “0” a failure of the protection.
c) Port Sensors
portsensor all “0,1,2,3,12” show P=1,L=”Power Port”,0=”13000Wh”,1=”0W”,2=”225V”,3=”0A”,12=”998218s” P=2,L=”Power Port”,0=”13000Wh”,1=”0W”,2=”225V”,3=”0A”,12=”996199s” … P=12,L=”Power Port”,0=”13000Wh”,1=”0W”,2=”225V”,3=”0A”,12=”998218s”
This command outputs all port sensor values in one line. A list of all fields (according to the energy sensor table) is passed as parameter. In this example these are the fields Absolute Active Energy (0), Power Active (1), Voltage (2), Current (3) and Reset Time (12).
portsensor 2 “0,1,2,3,12” show >portsensor 2 1 show
These variants give the sensor values of the field list or a sensor to at Outlet Port 2.

The following examples refer to Gude devices that have switchable ports.
d) Displaying Port Relays

port all state 1 show P1=ON,P2=OFF,P3=ON,P4=OFF,P5=OFF,P6=OFF,P7=OFF,P8=ON
The command “port all state {MODE0=0|MODE1=1|MODE2=2} show” returns the switching state of all relays in 3 possible formats.
e) Switching Port Relays

port all state set “1,2,12” 1 OK.

The command syntax “port all state set “{port_list}” {OFF=0|ON=1}” sets a list of ports to ON=1 or OFF=0.

4.8.1 SSH
The device supports SSH-2 connections with either public key authentication or user name and password. The “login” must be enabled for SSH. Users and passwords can be stored locally or retrieved via a radius server. If you want to use SSH in a terminal, Activate echo should be enabled.

69
Expert Power Control 8316

Specifications

Public Keys
The following public keys are accepted:
Key type RSA
ECDSA

Length 2048, 4096
256, 384

Generation with PuTTYgen

Generated keys can be copied directly from e.g. PuTTYgen,

and inserted into the Configuration – Console input field. Public keys are accepted in SSH2 or OpenSSH format.
Generation with ssh-keygen
The tool ssh-keygen is mostly shipped with Linux and Windows to generate SSH keys. Here is an example to generate an ECDSA 384 key.
ssh-keygen -t ecdsa -b 384 -f ssh.key
In the file ssh.pub is then the private key, the content of ssh.key.pub is inserted into the field “Upload SSH public key:”.

Expert Power Control 8316

70
© 2023 GUDE Systems GmbH

Specifications

4.8.2 Console Cmd 8314

Command
logout quit back help help all

Description
go to login prompt w hen enabled quits telnet session – nothing in serial console back one cmd level show all cmds f rom this level show all cmds

clock

enters cmd group “clock”

clock ntp enabled set {OFF=0|ON=1}

enables ntp

clock ntp enabled show

show s if ntp enabled

clock timezone set {minutes}

sets timezone

clock timezone show

show s timezone

clock dst enabled set {OFF=0|ON=1}

enables dst

clock dst enabled show

show s if dst is enabled

clock manual set “{hh:mm:ss yyyy-mm-dd}”

sets time and date manually

clock show

show s actual time and date

clock ntp server {PRIMARY=0|BACKUP=1} set “{dns_name}”

sets ntp server name

clock ntp server {PRIMARY=0|BACKUP=1} show show s ntp server name

console console version console telnet enabled set {OFF=0|ON=1} console telnet enabled show console telnet port set {ip_port} console telnet port show console telnet raw set {OFF=0|ON=1} console telnet raw show console telnet echo set {OFF=0|ON=1} console telnet echo show console telnet activeneg set {OFF=0|ON=1} console telnet activeneg show console telnet login set {OFF=0|ON=1} console telnet login show console telnet login local set {OFF=0|ON=1} console telnet login local show console telnet login radius set {OFF=0|ON=1} console telnet login radius show console telnet login delay set {OFF=0|ON=1} console telnet login delay show console telnet pushmsgs config set {OFF=0| ON=1} console telnet pushmsgs config show console telnet pushmsgs set {OFF=0|ON=1} console telnet pushmsgs show console telnet user set “{username}” console telnet user show console telnet passw d set “{passw d}” console telnet passw d hash set “{passw d}” console ssh enabled set {OFF=0|ON=1} console ssh enabled show console ssh port set {ip_port} console ssh port show

enters cmd group “console” show s unique console version number enables telnet on/off show s if telnet enabled sets telnet port show s telnet port sets raw mode (disables editing) on/off show s if raw mode enabled enables echo on/off show s if echo enabled enables telnet active negotiation (IAC) on/off show s if active negotiation enabled enables login on/off show s if login enabled enables local login on/off show s if local login enabled enables login for RADIUS on/off show s if RADIUS login enabled enables delay (after 3 login fails) on/off show s if login delay enabled
enables persistent push msgs
show s if persistent push msgs are enabled enables temporary push msgs show s if temporary push msgs are enabled sets login user name show s login user name sets login passw ord sets login hashed passw ord enables SSH show s if SSH enabled sets SSH port show s SSH port

Note
2 2 2 2 2

71

Expert Power Control 8316

Specifications

console ssh echo set {OFF=0|ON=1}

enables echo on/off

console ssh echo show

show s if echo enabled

console ssh pushmsgs config set {OFF=0|ON=1} enables persistent push msgs

console ssh pushmsgs config show

show s if persistent push msgs are enabled

console ssh pushmsgs set {OFF=0|ON=1}

enables temporary push msgs

console ssh pushmsgs show

show s if temporary push msgs are enabled

console ssh public hash set “{passw d}”

sets hash of SSH public key

console ssh public hash show

show s hash of SSH public key

console serial enabled set {OFF=0|ON=1}

enables serial console on/off

console serial enabled show

show s if serial console enabled

console serial raw set {OFF=0|ON=1}

sets raw mode (disables editing) on/off

console serial raw show

show s if raw mode enabled

console serial echo set {OFF=0|ON=1}

enables echo on/off

console serial echo show

show s if echo enabled

console serial kvm set {OFF=0|ON=1}

enables binary KVM cmds on serial port on/of f

console serial kvm show

show s if binary KVM cmds enabled

console serial utf8 set {OFF=0|ON=1}

enables UTF8 support

console serial utf8 show

show s if UTF8 enabled

console serial login set {OFF=0|ON=1}

enables login on/off

console serial login show

show s if login enabled

console serial login local set {OFF=0|ON=1}

enables local login on/off

console serial login local show

show s if local login enabled

console serial login radius set {OFF=0|ON=1} enables login for RADIUS on/off

console serial login radius show

show s if RADIUS login enabled

console serial login delay set {OFF=0|ON=1}

enables delay (after 3 login fails) on/off

console serial login delay show

show s if login delay enabled

console serial pushmsgs config set {OFF=0| ON=1}

enables persistent push msgs

console serial pushmsgs config show

show s if persistent push msgs are enabled

console serial pushmsgs set {OFF=0|ON=1}

enables temporary push msgs

console serial pushmsgs show

show s if temporary push msgs are enabled

console serial user set “{username}”

sets login user name

console serial user show

show s login user name

console serial passw d set “{passw d}”

sets login passw ord

console serial passw d hash set “{passw d}” sets login hashed passw ord

email

enters cmd group “email”

email enabled set {OFF=0|ON=1}

enables email on/off

email enabled show

show s if email is enabled

email sender set “{email_addr}”

sets email sender address

email sender show

show s email sender address

email recipient set “{email_addr}”

sets email recipient address

email recipient show

show s email recipient address

email server set “{dns_name}”

sets email SMTP server address

email server show

show s email SMTP server address

email port set {ip_port}

sets email SMTP port

email port show

show s email SMTP port

email security set {NONE=0|STARTTLS=1|SSL=2} sets SMTP connection security

email security show

show s SMTP connection security

email auth set {NONE=0|PLAIN=1|LOGIN=2}

sets email authentication

email auth show

show email authentication

email user set “{username}”

sets SMTP username

email user show

show s SMTP username

email passw d set “{passw d}”

sets SMTP passw ord

email passw d hash set “{passw d}”

sets crypted SMTP passw ord

email testmail

send test email

ethernet ethernet mac show ethernet link show ethernet phyprefer set {10MBIT_HD=0| 10MBIT_FD=1|100MBIT_HD=2|100MBIT_FD=3} ethernet phyprefer show

enters cmd group “ethernet” show s MAC address show s ethernet link state
sets preferred speed for PHY Auto Negotiation
show s preferred speed for PHY Auto Negotiation

extsensor

enters cmd group “extsensor”

72

Expert Power Control 8316

Specifications

extsensor all show

show s all values from connected external sensors

extsensor all show

show s all plugged sensors and fields

extsensor {port_num} {sen_field} value show show s sensor value

6

extsensor {port_num} {sen_type} label set “{name}”

sets sensor name to label

6

extsensor {port_num} {sen_type} label show show s label of sensor

6

extsensor {port_num} type show

show s type of sensor

extsensor {port_num} {sen_type} {sen_field} events set {off=0|on=1}

enables sensor events on/off

6

extsensor {port_num} {sen_type} {sen_field} events show

show s if sensor events are enabled

6

extsensor {port_num} {sen_type} {sen_field}

events type set

“V{ETV_STMSSY=3S,LEOVGT=G0,SEMVETM_SANILM=P4=,E1V,ETV_TB_EEEMPEARIL==52,E,Eenables different event types

6

VT_DISPLAY=6,EVT_CONSOLE=7,EVT_MQTT=8}

”

extsensor {port_num} {sen_type} {sen_field} events type show

show s w hat event types are enabled

6

extsensor {port_num} {sen_type} {sen_field} maxval set {num}

sets maximum value f or sensor

6

extsensor {port_num} {sen_type} {sen_field} maxval show

show s maximum value for sensor

6

extsensor {port_num} {sen_type} {sen_field} minval set {num}

sets minimum value f or sensor

6

extsensor {port_num} {sen_type} {sen_field} minval show

show s minimum value for sensor

6

extsensor set {num}

{port_num}

{sen_type}

{s en_f ield}

hystsets

hysterese

value

f

or

sensor

6

extsensor show

{port_num}

{sen_type}

{s en_f ield}

hystshow

s

hysterese

value

f or

sensor

6

extsensor {port_num} {sen_type} {sen_field}

publish mode set {NONE=0|INTERVAL=1|

sets publish mode

DELTA=2|INTERV_DELTA=3}

extsensor {port_num} {sen_type} {sen_field} publish mode show

show s publish mode

extsensor {port_num} {sen_type} {sen_field} publish mqtt retain set {OFF=0|ON=1}

sets mqtt retain

extsensor {port_num} {sen_type} {sen_field} publish mqtt retain show

show s if mqtt retain set

extsensor {port_num} {sen_type} {sen_field} publish timer set {num_secs}

sets publish time interval

extsensor {port_num} {sen_type} {sen_field} publish timer show

show s publish time interval

extsensor {port_num} {sen_type} {sen_field} publish delta set {float}

sets publish delta value

extsensor {port_num} {sen_type} {sen_field} publish delta show

show s publish delta value

extsensor {port_num} {sen_type} {sen_field}

{BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| sets Port for Pow er Port Sw itching actions

6

BELOWMAX=3} port set {port_num}

extsensor {port_num} {sen_type} {sen_field}

{BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| show s Port for Pow er Port Sw itching actions

6

BELOWMAX=3} port show

extsensor {port_num} {sen_type} {sen_field}

{BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| BELOWMAX=3} state set {OFF=0|ON=1|

sets Port state for Pow er Port Sw itching actions 6

DISABLED=2}

extsensor {port_num} {sen_type} {sen_field} {BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| BELOWMAX=3} state show

show s Port state for Pow er Port Sw itching actions

6

extsensor period set {24H=0|12H=1|2H=2|1H=3| 30MIN=4}

sets sensor Min/Max measurement period

extsensor period show

show s sensor Min/Max measurement period

73

Expert Power Control 8316

Specifications

http

enters cmd group “http”

http server set {HTTP_BOTH=0|HTTPS_ONLY=1| HTTP_ONLY=22|HTTPS_REDIR=3}

sets accepted connection types

http server show

show s accepted connection types

http port set {ip_port}

sets http port

http port show

show s http port

http portssl set {ip_port}

sets https port

http portssl show

show s https port

hTtLtpS1tl3s_m1o2d_e11s=e3t}{TLS12=0|TLS13_12=1|TLS13=2|restricts TLS mode

http tls mode show

show s TLS mode restriction

http ajax enabled set {OFF=0|ON=1}

enables ajax autorefresh on/off

http ajax enabled show

show s if ajax autorefresh enabled

http passw d enabled set {OFF=0|ON=1}

enables http passw ord on/off

http passw d enabled show

show s if http passw ord enabled

http passw d local set {OFF=0|ON=1}

enables local login on/off

http passw d local show

show s if local login enabled

http passw d radius set {OFF=0|ON=1}

enables login for RADIUS on/off

http passw d radius show

show s if RADIUS login enabled

http passw d user set “{passw d}”

sets http user passw ord

http passw d admin set “{passw d}”

sets http admin passw ord

http passw d hash user set “{passw d}”

sets hashed http user passw ord

http passw d hash admin set “{passw d}”

sets hashed http admin passw ord

ip4 ip4 hostname set “{name}” ip4 hostname show ip4 address set “{ip_address}” ip4 address show ip4 netmask set “{ip_address}” ip4 netmask show ip4 gatew ay set “{ip_address}” ip4 gatew ay show ip4 dns set “{ip_address}” ip4 dns show ip4 dhcp enabled set {OFF=0|ON=1} ip4 dhcp enabled show

enters cmd group “ip4” sets device hostname show s device hostname sets IPv4 address show s IPv4 address sets IPv4 netmask show s IPv4 netmask sets IPv4 gatew ay address show s IPv4 gatew ay address sets IPv4 DNS server address show s IPv4 DNS server address enables IPv4 DHCP on/off show s IPv4 DHCP state

ip6 ip6 enabled set {OFF=0|ON=1} ip6 enabled show ip6 routadv enabled set {OFF=0|ON=1} ip6 routadv enabled show ip6 dhcp enabled set {OFF=0|ON=1} ip6 dhcp enabled show ip6 address show ip6 gatew ay show ip6 dns show ip6 manual enabled set {OFF=0|ON=1} ip6 manual enabled show ip6 manual address {1..4} set “{ip_address}” ip6 manual address {1..4} show ip6 manual gatew ay set “{ip_address}” ip6 manual gatew ay show ip6 manual dns {1..2} set “{ip_address}” ip6 manual dns {1..2} show

enters cmd group “ip6” enables IPv6 on/off show s if IPv6 is enabled enables IPv6 router advertisement show s IPv6 router advertisement state enables IPv6 DHCP on/off show s if IPv6 DHCP is enabled show all IPv6 addresses show all IPv6 gatew ays show all IPv6 DNS server enables manual IPv6 addresses show s if manual IPv6 addresses are enabled sets manual IPv6 address show s manual IPv6 address sets manual IPv6 gatew ay address show s manual IPv6 gatew ay address sets manual IPv6 DNS server address show s manual IPv6 DNS server address

ipacl ipacl ping enabled set {OFF=0|ON=1} ipacl ping enabled show ipacl enabled set {OFF=0|ON=1} ipacl enabled show ipacl filter {ipacl_num} set “{dns_name}” ipacl filter {ipacl_num} show

enters cmd group “ipacl” enables ICMP ping on/off show s if ICMP ping enabled enable IP filter on/off show s if IP filter enabled sets IP filter {ipacl_num} show s IP filter {ipacl_num}

Expert Power Control 8316

3 3 3 3 3 3
3 3 3 4 4 4 3 3 3 3
74
© 2023 GUDE Systems GmbH

Specifications

linesensor

enters cmd group “linesensor”

linesensor all {field_list} show

show s energy sensors according field list of all line sensors

5

linesensor {line_num} {field_list} show

show s energy sensors according field list of one line sensor

5

linesensor {line_num} {energy_sensor} value show

show s energy sensor of given line

5

linesensor {line_num} ovp show

show state of Overvoltage Protection

linesensor {line_num} counter reset

resets energy metering counter

linesensor {line_num} label set “{name}”

sets line meter to label

linesensor {line_num} label show

show s label of line meter

linesensor {line_num} {energy_sensor} events set {OFF=0|ON=1}

enables events on/off

linesensor {line_num} {energy_sensor} events show

show s if events are enabled

linesensor {line_num} {energy_sensor} events

type set “{EVT_SYSLOG=0,EV

T_SNMP=1,EVT_EMAIL=2,Eenables

dif

f

erent

event

types

VT_SMS=3,EVT_GSMEMAIL=4,EVT_BEEPER=5}”

linesensor {line_num} {energy_sensor} events type show

show s w hat event types are enabled

linesensor {line_num} {energy_sensor} maxval set {float}

sets maximum value f or line meter

linesensor {line_num} {energy_sensor} maxval show

show s maximum value for line meter

linesensor {f loat}

{line_num}

{energy_sensor}

minval

s et s ets

minimum

value

f or

line

meter

linesensor {line_num} {energy_sensor} minval show

show s minimum value for line meter

linesensor {line_num} {energy_sensor} hyst set {f loat}

sets hysterese value for line meter

linesensor {line_num} {energy_sensor} hyst show

show s hysterese value for line meter

linesensor {line_num} {energy_sensor} publish

mode set {NONE=0|INTERVAL=1|DELTA=2|

sets publish mode

INTERV_DELTA=3}

linesensor {line_num} {energy_sensor} publish mode show

show s publish mode

linesensor {line_num} {energy_sensor} publish mqtt retain set {OFF=0|ON=1}

sets mqtt retain

linesensor {line_num} {energy_sensor} publish mqtt retain show

show s if mqtt retain set

linesensor {line_num} {energy_sensor} publish timer set {num_secs}

sets publish time interval

linesensor {line_num} {energy_sensor} publish timer show

show s publish time interval

linesensor {line_num} {energy_sensor} publish delta set {float}

sets publish delta value

linesensor {line_num} {energy_sensor} publish delta show

show s publish delta value

linesensor {line_num} {energy_sensor}

{BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| sets Port for Pow er Port Sw itching actions

BELOWMAX=3} port set {port_num}

linesensor {line_num} {energy_sensor}

{BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| show s Port for Pow er Port Sw itching actions

BELOWMAX=3} port show

linesensor {line_num} {energy_sensor}

{BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| BELOWMAX=3} state set {OFF=0|ON=1|

sets Port state for Pow er Port Sw itching actions

DISABLED=2}

linesensor {line_num} {energy_sensor} {BELOWMIN=0|ABOVEMIN=1|ABOVEMAX=2| BELOWMAX=3} state show

show s Port state for Pow er Port Sw itching actions

linesensor {line_num} events set {OFF=0|ON=1} LEGACY – enables events on/off

L

75

Expert Power Control 8316

Specifications

linesensor {line_num} events show

LEGACY – show s if events are enabled

L

linesensor {line_num} events type set

“{EVT_SYSLOG=0,EVT_SNMP=1,EVT_EMAIL=2,E

VT_SMS=3,EVT_GSMEMAIL=4,EVT_BEEPER=5,E LEGACY – enables different event types

L

VT_DISPLAY=6,EVT_CONSOLE=7,EVT_MQTT=8}

”

linesensor {line_num} events type show

LEGACY – show s w hat event types are enabled L

linesensor {line_num} maxval set {float}

LEGACY – sets maximum value f or line meter

L

linesensor {line_num} maxval show

LEGACY – show s maximum value for line meter L

linesensor {line_num} minval set {float}

LEGACY – sets minimum value f or line meter

L

linesensor {line_num} minval show

LEGACY – show s minimum value for line meter L

linesensor {line_num} hyst set {float}

LEGACY – sets hysterese value for line meter

L

linesensor {line_num} hyst show

LEGACY – show s hysterese value for line meter L

linesensor {line_num} {BELOWMIN=0| ABOVEMIN=1|ABOVEMAX=2|BELOWMAX=3} set {port_num}

portLaEcGtioAnCsY

–

sets

Port

f or

Pow

er

Port

Sw

itching

L

linesensor {line_num} {BELOWMIN=0| ABOVEMIN=1|ABOVEMAX=2|BELOWMAX=3} show

portLaEcGtioAnCsY

–

show

s

Port

f or

Pow

er

Port

Sw

itching

L

linesensor {line_num} {BELOWMIN=0| ABOVEMIN=1|ABOVEMAX=2|BELOWMAX=3} state set {OFF=0|ON=1|DISABLED=2}

LEGACY – sets Port state for Pow er Port Sw itching actions

L

linesensor {line_num} {BELOWMIN=0| ABOVEMIN=1|ABOVEMAX=2|BELOWMAX=3} state show

LEGACY – show s Port state for Pow er Port Sw itching actions

L

modbus modbus enabled set <off=0/on=1> modbus enabled show modbus port set

modbus port show

enters cmd group “modbus” enables Modbus TCP support show s if Modbus is enabled sets Modbus TCP port show s Modbus TCP port

mqtt mqtt {broker_idx} enabled set {OFF=0|ON=1} mqtt {broker_idx} enabled show mqtt {broker_idx} server set “{dns_name}” mqtt {broker_idx} server show mqtt {broker_idx} tls enabled set {OFF=0|ON=1} mqtt {broker_idx} tls enabled show mqtt {broker_idx} port set {ip_port} mqtt {broker_idx} port show mqtt {broker_idx} user set “{username}” mqtt {broker_idx} user show mqtt {broker_idx} passw d set “{passw d}” mqtt {broker_idx} passw d hash set “{passw d}” mqtt {broker_idx} client set “{name}” mqtt {broker_idx} client show mqtt {broker_idx} qos set {QOS0=0|QOS1=1} mqtt {broker_idx} qos show mqtt {broker_idx} keepalive set {num_secs} mqtt {broker_idx} keepalive show mqtt {broker_idx} topic set “{name}” mqtt {broker_idx} topic show mqtt {broker_idx} console enabled set {OFF=0| ON=1} mqtt {broker_idx} console enabled show mqtt {broker_idx} device data timer set {num_secs} mqtt {broker_idx} device data timer show

enters cmd group “mqtt” enable mqtt show s if mqtt enabled sets broker name show s broker name enable TLS show s if TLS enabled set broker TCP/IP port show s broker TCP/IP port sets username show s username sets passw ord sets hashed passw d sets client name show s client name sets QoS level show s QoS level sets keep-alive time show s keep-alive time sets topic prefix shw os topic prefix
permit console cmds
show s if console cmds allow ed
sets telemetry interval
show s telemetry interval

port port {port_num} state set {OFF=0|ON=1} port {port_num} state show
port all state set “{port_list}” {OFF=0|ON=1}

enters cmd group “port” sets port to new state show s port state sets several ports in one cmd – e.g. port all state set “1,3,5” 1

76

Expert Power Control 8316

Specifications

port all state {MODE0=0|MODE1=1|MODE2=2} show

show s all port states in 3 different view modes

4

port all set {OFF=0|ON=1|OFF_REV=2|ON_REV=3} sw itch all ports on/off forw ard or reverse

port restart all set {REINIT=0| OFF_REV_REINIT=1,OFF_REINIT=2}

reinit coldstart sequence (optional first all off)

port {port_num} reset

start reset sequence for port

port {port_num} toggle

toggles port

port {port_num} batch set {OFF=0|ON=1} w ait {num_secs} {OFF=0|ON=1}

starts batch mode for port

port {port_num} batch cancel

cancels batch mode

port {port_num} label set “{name}”

sets port label name

port {port_num} label show

show s port label name

port {port_num} initstate coldstart set {OFF=0| ON=1|REMEMBER=2}

sets port coldstart initialization

port {port_num} initstate coldstart show

show s port coldstart initialization

port {port_num} initstate delay set {num}

sets port init delay

port {port_num} initstate delay show

show s port init delay

port {port_num} repow erdelay set {num}

sets port repow er delay

port {port_num} repow erdelay show

show s port repow er delay

port {port_num} resettime set {num}

sets port reset duration

port {port_num} resettime show

show s port reset duration

port {port_num} w atchdog enabled set {OFF=0| ON=1}

sets port w atchdog to on/off

port {port_num} w atchdog enabled show

show s port w atchdog state

port {port_num} w atchdog mode set {OFF=0| PORT_RESET=1|IP_MS=2|IP_MS_INV=3}

sets port w atchdog mode

port {port_num} w atchdog mode show

show s port w atchdog mode

port {port_num} WD_TCP=1}

w

atchdog

type

set

{WD_ICMP=0|

sets

port

w

atchdog

type

port {port_num} w atchdog type show

show s port w atchdog type

port {port_num} ON=1}

w

atchdog

link

dow

n

set

{OFF=0|

sets

if

w

atchdog

active

w

hen

eth

link

dow

n

port {port_num} w atchdog link dow n show

show s if w atchdog active w hen eth link dow n

port {port_num} w atchdog host set “{dns_name}” sets port w atchdog host target

port {port_num} w atchdog host show

show s port w atchdog host target

port {port_num} w atchdog port set {ip_port}

sets port w atchdog TCP port

port {port_num} w atchdog port show

show s port w atchdog TCP port

port {port_num} w atchdog pinginterval set {num} sets port w atchdog ping interval

port {port_num} w atchdog pinginterval show show s port w atchdog ping interval

port {port_num} w atchdog pingretries set {num} sets port w atchdog ping retries

port {port_num} w atchdog pingretries show

show s port w atchdog ping retries

port {port_num} w atchdog retrybooting set {OFF=0|ON=1}

sets port w atchdog retry booting to on/off

port {port_num} w atchdog retrybooting show show s port w atchdog retry booting state

port {port_num} w atchdog bootretries set {num} sets port w atchdog retry boot timeout

port {port_num} w atchdog bootretries show

how s port w atchdog retry boot timeout

radius

enters cmd group “radius”

radius {PRIMARY=0|SECONDARY <of f =0/on=1>

=1}

enabled

set

enables

radius

client

radius {PRIMARY=0|SECONDARY=1} enabled show

show if radius client enabled

radius {PRIMARY=0|SECONDARY=1} server set “”

sets radius server address

radius {PRIMARY=0|SECONDARY=1} server show

show s radius server address

radius {PRIMARY=0|SECONDARY=1} passw ord set “{passw d}”

sets radius server shared secret

radius {PRIMARY=0|SECONDARY=1} passw ord hash set “{passw d}”

sets radius server crypted shared secret

radius {PRIMARY=0|SECONDARY set {num_secs}

=1}

auth

timeout s ets

server

request

timeout

radius show

{PRIMARY=0|SECONDARY=1}

auth

timeout s how

s

server

request

timeout

radius {PRIMARY=0|SECONDARY=1} retries set {0..99}

sets server number of retries

77

Expert Power Control 8316

Specifications

radius {PRIMARY=0|SECONDARY=1} retries show radius chap enabled set <off=0/on=1> radius chap enabled show radius message auth set <off=0/on=1>
radius message auth show
radius default timeout set {num_secs}
radius default timeout show

show s server number of retries
enables CHAP show s if CHAP is enabled enables request message authentication show s if request message authentication is enabled sets default session timeout (w hen not returned as Session-Timout Attribute) show s default session timeout

snmp

enters cmd group “snmp”

snmp port set {ip_port}

sets SNMP UDP port

snmp port show

show s SNMP UDP port

snmp snmpget enabled set {OFF=0|ON=1}

enables SNMP GET cmds on/off

snmp snmpget enabled show

show if SNMP GET cmds are enabled

snmp snmpset enabled set {OFF=0|ON=1}

enables SNMP SET cmds on/off

snmp snmpset enabled show

show if SNMP SET cmds are enabled

snmp snmpv2 enabled set {OFF=0|ON=1}

enables SNMP v2 on/off

snmp snmpv2 enabled show

show if SNMP v2 is enabled

snmp snmpv2 public set “{text}”

enables SNMP v3 on/off

snmp snmpv2 public show

show if SNMP v3 isenabled

snmp snmpv2 private set “{text}”

sets SNMP v2 public cummnity

snmp snmpv2 private show

show s SNMP v2 public community

snmp system {CONTACT=0|NAME=1| LOCATION=2} set “{text}”

sets sysLocation/sysName/sysContact

snmp system {CONTACT=0|NAME=1| LOCATION=2} show

gets sysLocation/sysName/sysContact

snmp snmpv3 enabled set {OFF=0|ON=1}

sets SNMP v2 private community

snmp snmpv3 enabled show

show s SNMP v2 private community

snmp snmpv3 username set “{text}”

sets SNMP v3 username

snmp snmpv3 username show

show s SNMP v3 username

snmp snmpv3 authalg set {NONE=0|MD5=1| SHA1=2|SHA256=3|SHA384=4|SHA512=5}

sets SNMP v3 authentication

snmp snmpv3 authalg show

show SNMP v3 authentication algorithm

snmp snmpv3 privalg set {NONE=0|DES=1|

3DES=2|AES128=3|AES192=4|AES256=5|

sets SNMP v3 privacy algorithm

AES192=6|AES256=7}

snmp snmpv3 privalg show

show SNMP v3 privacy algorithm

snmp snmpv3 authpassw d set “{passw d}”

sets SNMP v3 authentication passw ord

snmp snmpv3 privpassw d set “{passw d}”

sets SNMP v3 privacy passw ord

snmp snmpv3 authpassw d hash set “{passw d}” sets SNMP v3 authentication hashed passw ord

snmp snmpv3 privpassw d hash set “{passw d}” sets SNMP v3 privacy hashed passw ord

snmp trap type set {NONE=0|V1=1|V2=2|V3=3} sets type of SNMP traps

snmp trap type show

show SNMP trap type

snmp trap receiver {trap_num} set “{dns_name}”

sets address and port of {trap_num}

SNMP trap receiver

snmp trap receiver {trap_num} show

show address and port of SNMP trap receiver {trap_num}

syslog syslog enabled set {OFF=0|ON=1} syslog enabled show syslog server set “{dns_name}” syslog server show

enters cmd group “syslog” enables syslog msgs on/off show if syslog enabled sets address of syslog server show s address of syslog server

system system restart system f absettings system bootloader system f lushdns system uptime system name show system version show system display {disp_num} def ault extsensor {port_num} {sen_type} set {sen_field}

enters cmd group “system” restarts device restore fab settings and restart device enters bootloader mode flush DNS cache number of seconds the device is running show s device name show s actual firmw are version
show s external sensor

78

Expert Power Control 8316

Specifications

system display {disp_num} def ault linesensor {line_num} set {sen_field}

show s energy line sensor

system display {disp_num} def ault set {BLANK=0,LOCAL_TIME=1,UTC_TIME=2}

show s other contents

system display {disp_num} def ault show

show s default setting for display

system display def ault hash set “{data}”

sets hashed display setting

system display def ault hash show