M00-20-6000 - IP Authorization Gateway
Transcription
M00-20-6000 - IP Authorization Gateway
Part Number: M00-20-6000, Rev. 3 Issue Date: October 14, 2015 Supersedes: June 9, 2014 M00-20-6000 - IP Authorization Gateway Procedure Guide Doc. No.: M00-20-6000 Rev.: 3 Page 2 of 14 Copyright Information © Copyright 2015, OPW. Printed in the USA. © 2015 Delaware Capital Formation, Inc. All Rights Reserved. DOVER and the DOVER logo are registered trademarks of Delaware Capital Formation, Inc., a wholly-owned subsidiary of Dover Corporation. Contact OPW Fuel Management Systems Visit us at www.opwglobal.com, or contact us at: Call 1-877-OPW-TECH (877-679-8324) For calls outside US and Canada, call +1-708-485-4200 Fax 1-800-421-3297 Monday through Friday, 7 a.m. to 6 p.m., US CST For technician registration, see http://opwglobal.com/TechSupport/TechnicianRegistration.aspx . For in-depth training via OPW University, see http://www.opwglobal.com/opw-u-training-registration.html. Compliance Information Software is compliant with Visa U.S.A. Payment Application Best Practices (PABP)/Payment Card Industry Payment Application Data Security Standard (PCI PA-DSS) guidelines by restricting user access to sensitive cardholder data. Specific to networks that process bankcards (i.e., Visa, MasterCard, T-Chek™, Comdata, American Express, Discover and JCB) using the dual-serial port convertor and connecting the inbound port to the FSC3000™ Fuel Site Controller direct-connect serial port (Port 1) conflicts with the guidelines described in the “M030001_PA1-PA-DSS-Implementation-Guide” provided with your FSC3000™ Fuel Site Controller. Please review the “M030001_PA1-PA-DSS-Implementation-Guide.pdf” for more information on maintaining your PCI-DSS compliance. NOTE: System2® is not PCI-compliant.) Doc. No.: M00-20-6000 Rev.: 3 Page 3 of 14 Table of Contents Section 1 Introduction 4 1.1 OPW Ethernet IP Authorization Gateway 4 1.2 OPW Cellular Inbound-Only Gateway 4 Section 2 OPW Ethernet IP Authorization Gateway Installation 5 2.1 Site Assessment for the OPW Ethernet IP Authorization Gateway 5 2.2 Requirements for the OPW Ethernet IP Authorization Gateway 6 2.3 Verify Network Communications 7 2.4 Connecting the OPW Ethernet IP Authorization Gateway 8 2.5 Testing the OPW Ethernet IP Gateway for Network Authorization 8 2.6 Testing the OPW Ethernet IP Gateway for Inbound Communication 8 2.7 Dial Back-up (Optional) 9 2.8 Troubleshooting 9 Section 3 OPW Cellular Gateway Installation 11 3.1 Cellular Service Activation 11 3.2 Connecting the OPW Cellular IP Authorization Gateway 11 3.3 Testing the OPW Cellular IP Gateway for Network Authorization 12 3.4 Testing the OPW Cellular Inbound-Only Communication 12 Warranty 13 Doc. No.: M00-20-6000 Rev.: 3 Page 4 of 14 Section 1 Introduction The instructions in this guide explain the installation of your OPW Authorization Gateway with your FSC3000™ Fuel Site Controller. It covers both the Ethernet IP Authorization Gateway and the Cellular Authorization Gateway. OPW IP Authorization Gateways are certified to communicate with these OPW standard authorization networks: Hardwire AT&T Cellular Verizon Cellular Fleet Only 20-6000 20-6005 20-6014 Fleet and Bank Card 20-6013 20-6015 20-6016 IOL 20-6012 N/A N/A 1.1 OPW Ethernet IP Authorization Gateway The OPW Ethernet IP Authorization Gateway, when used with the Petro Vend System2® or FSC3000™ Fuel Site Controller, provides the ability to use a high-speed Internet connection to authorize fleet and/or creditcard transactions. This creates a secure outbound IP connection for card authorizations and also allows inbound connections to the fuel-site controller. The gateway also contains a dial-up modem that will automatically be used whenever the Internet is unavailable. To use this feature the gateway must be plugged into a standard phone line. If installing an Ethernet IP Gateway, proceed to "OPW Ethernet IP Authorization Gateway Installation" on page 5 of this document. 1.2 OPW Cellular Inbound-Only Gateway The OPW Cellular Inbound-Only Gateway is used in place of a phone modem to communicate with the FSC3000. If installing a Cellular Inbound-Only Gateway, proceed to "OPW Cellular Gateway Installation" on page 11 of this manual. Doc. No.: M00-20-6000 Rev.: 3 Page 5 of 14 Section 2 OPW Ethernet IP Authorization Gateway Installation Prior to the installation of the OPW Ethernet IP Authorization Gateway, an initial site assessment, gateway requirements and network connectivity must be established. Follow the installation procedure below for connecting the OPW Ethernet IP Authorization Gateway. NOTICE: Never press the reset button on the Cellular Gateway. This will erase the program and it will have to be reloaded. There is a fee associated with reloading the program. 2.1 Site Assessment for the OPW Ethernet IP Authorization Gateway For 20-6013, 20-6015 and 20-6016 network users, prior to installation, the site assessment must be completed and the OPW Site Request Form must be faxed to the number at the top of the form, after which network users must activate their EchoSat Account, which will be sent to the site owner via email. NOTE: There is a monthly charge for an EchoSat Account. IMPORTANT: The OPW Site Request Form must be submitted 48 hours prior to your planned install time. Prior to installing any version of the Ethernet IP Gateway, collect the following information or provide this document to the IT Manager so that the following information can be filled in. l Is the LAN (internal) network at the site DHCP-enabled (dynamic)? Yes l No Are there any outbound port-blocking rules in place on the network? Yes No NOTE: If the network is DHCP-enabled and no outbound ports are blocked, skip to "Requirements for the OPW Ethernet IP Authorization Gateway" on the next page. Otherwise, proceed with the information as follows below. NOTE: The following ports must be open for outbound traffic; 53, 80, 123, 443, 10001, 10002. Doc. No.: M00-20-6000 Rev.: 3 Page 6 of 14 IMPORTANT: If the site chooses to use the Inbound Communications option, then a Static IP Address must be programmed into the unit regardless of whether the LAN is dynamic or static, and the below information must be provided. If this is a Static IP LAN environment, enter the IP Address: Enter the Subnet Mask: Enter the Default Gateway: Enter the DNS (Domain Name Server) 1: Enter the DNS (Domain Name Server) 2: If a Static IP Address is required, the OPW Help Desk will configure it for you once you have completed the following steps: 1. Plug the Ethernet IP Authorization Gateway into a DHCP-capable router (this may be at your office before you arrive onsite). 2. Verify that the status light on the Ethernet IP Authorization Gateway is green and blinking once per second. 3. Verify the last six (6) digits of the MAC address located below the barcode on the bottom of the Ethernet IP Authorization Gateway: n 4. 000:80:44: ________________. Call the OPW Help Desk at 1-877-679-8324 and select Option 1 for Fuel Management Systems. Please have all of the above information available. Tell the Help Desk Technician that you are installing an Ethernet IP Authorization Gateway and that you require a Static IP Address to be programmed into the unit. 2.2 Requirements for the OPW Ethernet IP Authorization Gateway A Laptop Computer to be used for troubleshooting any connectivity issues that may arise on-site. Please visit http://www.ab-net.us/products/gateways/, select the “Download the Port Server Utility here” link and install the PSUtil.exe file on your laptop. One (1) OPW IP Gateway Converter (model #20-6000, 20-6012, 20-6013) with two (2) 20-1517-01 Modem Cables. Two (2) standard CAT5 cables (one for communications from the router/switch to the Gateway Converter. One to connect alaptop to the router/switch for troubleshooting communication issues). l For model #20-6000: (fill in the appropriate blank fields) n CFN Site ID#: ____________________________ n TCH Site ID#: ____________________________ n T-Chek™ Site ID#: ____________________________ Doc. No.: M00-20-6000 Rev.: 3 Page 7 of 14 l For model 20-6013: (fill in the appropriate blank fields) n CFN Site ID#: ____________________________ n TCH Site ID#: ____________________________ n T-Chek™ Site ID#: ____________________________ n NSB Terminal ID #: ____________________________ n Comdata Terminal ID#: ____________________________ n Buypass Terminal ID #: ____________________________ n FleetOne Terminal ID #: ____________________________ n Paymentech Merchant # #: ____________________________ You will need appropriate test cards: Credit (i.e., MasterCard, Visa, etc.) and/or fleet cards (i.e., CFN, TCH, TChek™, Fuelman®, etc.) for running test transactions at the site depending on what card types will be processed at the site. IMPORTANT: You will not be required to purchase fuel during the test process; you will be required to request authorization. You may then pick up and hang up the pump handle to complete the transaction. 2.3 Verify Network Communications 1. Test the network connectivity. a. Plug a CAT5 cable into the Ethernet port on your laptop and plug the other end into an open port on the router at the client site. Verify that you are NOT connecting via wireless. b. Open the Internet browser and type www.google.com. NOTE: If you are able to access the Internet, proceed to the next step. If you cannot access the Internet, proceed to Section 2.8, Troubleshooting. 2. Move the CAT5 cable from the Ethernet port on your laptop to the Ethernet port of the Ethernet IP Authorization Gateway. 3. Connect the included power cable to the Ethernet IP Authorization Gateway. Twist a quarter-turn (1/4) to the right in order to lock the power cable in place. 4. Plug the power cable into an available electrical outlet and wait for the status light of the Ethernet IP Authorization Gateway to turn green and begin blinking slowly (approximately once per second). Doc. No.: M00-20-6000 Rev.: 3 Page 8 of 14 2.4 Connecting the OPW Ethernet IP Authorization Gateway 1. Connect one of the OPW-supplied serial modem cables (20-1517-01) to the outbound port on the FSC. a. On the Petro Vend System2 this is Aux 3. b. On the FSC3000 this is COM 5. l 2. Connect the other end to POS Serial Port 1 on the OPW Ethernet IP Authorization Gateway. Connect the other OPW-supplied serial modem cable (20-1517-01) to the inbound port on the FSC. a. On the Petro Vend System2 this is the Modem Port. b. On the FSC3000 this is COM 1. l Connect the other end to POS Serial Port 2 on the OPW Ethernet IP Authorization Gateway. 2.5 Testing the OPW Ethernet IP Gateway for Network Authorization 1. Verify that the FSC3000 is configured properly for the processors that will be supported at the site. NOTE: You are configuring the FSC3000 to work in dial-out mode exactly as if you were going to use the “new” OPW modem and a phone line. IMPORTANT: For all networks, except Buypass, configure the modem communication parameters to 2400 baud, 7E1 to match the Gateway. For the Buypass network, configure the modem communication parameters to 2400 baud, 8N1 to match the Gateway. 2. Test the connection by running a test card at the pump. You should receive a prompt stating Select Pump, Enter Pump Number or that the Pump is Activated; this indicates that you have received authorization. NOTE: You do not need to pump fuel at this time. 2.6 Testing the OPW Ethernet IP Gateway for Inbound Communication IMPORTANT: The IT administrator at the site will need to configure Port Forwarding to the Static IP Address of the Ethernet IP Authorization Gateway (Port 8002) before inbound communications will work. Using Phoenix® or ARTWare, establish a connection to the fuel site controller using the static IP address assigned to the OPW Ethernet IP Authorization Gateway. Doc. No.: M00-20-6000 Rev.: 3 Page 9 of 14 2.7 Dial Back-up (Optional) At this point, transactions should be processing properly over the IP connection, and you should be ready to test the Dial Back-up functionality. 1. Plug a phone line into the Line port on the Ethernet IP Authorization Gateway. IMPORTANT: This phone line may be shared with another device, but should never be shared with a voice line. 2. Remove the CAT5 cable from the Ethernet IP Authorization Gateway Ethernet port. 3. Test the Dial Back-up (DBU) by running a test transaction for all processors (networks) supported at the site. These test transactions will take longer than the high-speed transactions as they are running over a phone line instead of an IP connection. You should receive a prompt stating Select Pump, Enter Pump Number or that the Pump is Activated. This indicates that you have received authorization. NOTE: You do not need to pump fuel at this time. 4. Plug the CAT5 Ethernet cable back into the Ethernet IP Authorization Gateway Ethernet port. NOTE: If all tests were successful, you are now operating on high-speed processing. If any of the above tests failed, contact the OPW Help Desk at 877-679-8324 and select Option 1 for Fuel Management Systems. Tell the Help Desk Technician that you are installing an Ethernet IP Authorization Gateway and provide a description of the problem you are experiencing. 2.8 Troubleshooting 1. Test the network connectivity. a. Plug a CAT5 cable into the Ethernet port on your laptop and plug the other end into an open port on the router at the client site. b. Open the Internet browser and type http://www.google.com, or you can: i. Click the Start button on your PC screen (located in the lower-left corner of the screen). ii. Select Run... iii. Type cmd in the window labeled Open. Click OK . iv. Type the command ping www.google.com in the cmd window. v. Press Enter/Return key. NOTE: If you can browse the Internet or "ping" a website successfully, you have Internet connectivity and your IP Converter should be able to access the Internet. Doc. No.: M00-20-6000 Rev.: 3 Page 10 of 14 c. 2. Close the cmd window and go back to "OPW Ethernet IP Authorization Gateway Installation" on page 5 of this document to restart the installation process. If you are unable to establish network connectivity, complete the following: a. Locate the high-speed modem and router at the site. There may be only one piece of equipment if the modem has a built-in router. Verify with your network administrator. b. Check the status lights on all device(s). If there is a DSL and/or Internet light, these should be green. c. Please record what the status light(s) on the high-speed modem and/or router are doing. d. Please record what the status light on the Ethernet IP Authorization Gateway is doing. NOTE: You may need to reboot (power cycle) the high-speed modem, router and the Ethernet IP Authorization Gateway. e. f. g. Reboot the devices in this order: i. Power down the Ethernet IP Authorization Gateway. ii. Power down the router at the site. iii. Power down the high-speed modem. Wait 20 seconds and power up all of the devices in reverse order: i. Power up the high-speed modem. Wait until Power, DSL and all Internet lights are green. ii. Power up the router at the site. Wait until Power and Ethernet/Internet/LAN light are green. iii. Power up the Ethernet IP Authorization Gateway. Repeat "Troubleshooting" on the previous page to verify network connectivity. NOTE: If you are still unable to successfully access the Internet, you will need to speak with the person who handles the network for the site. This may be the Network Administrator or this may be the Internet Service Provider (ISP). Doc. No.: M00-20-6000 Rev.: 3 Page 11 of 14 Section 3 OPW Cellular Gateway Installation Prior to the installation of the OPW Cellular IP Authorization Gateway or the Cellular Inbound-Only Gateway, cellular service must be activated. Follow the installation procedure below for connecting the OPW Cellular IP Authorization Gateway. NOTICE: Never press the reset button on the Cellular Gateway. This will erase the program and it will have to be reloaded. There is a fee associated with reloading the program. NOTE: If you have any questions, contact the OPW Help Desk at 1-877-679-8324 and select Option 1 for Fuel Management Systems. Tell the Help Desk technician that you are installing an OPW Cellular IP Connection and provide a description of the problem you are experiencing. 3.1 Cellular Service Activation If you are installing a 20-6005, 20-6014, 20-6015, 20-6016 gateway, complete and return the OPW cellularagreement contract. Please allow up to four (4) days for activation. For a Verizon cellular data plan, you will need to provide the Modem MEID number to Verizon for device activation, and a static IP address must be requested. 3.2 Connecting the OPW Cellular IP Authorization Gateway 1. Connect the cellular antenna by connecting it to the “MAIN” connector on the Cellular IP Gateway. 2. Connect the communication cable to the Cellular IP Gateway’s serial port and to the correct FSC3000 serial port as follows: When Using for Network Authorization n 20-6005, 20-6014, 20-6015, 20-6016: Connect to COM 5 Connection for Inbound Communication n 20-6005 and 20-6014 can be connected to serial port 1 for inbound only connections 3. Connect the power connector to the Cellular IP Gateway. Twist a quarter-turn (1/4) clock-wise to lock in place. 4. Plug the power cord into the power pack and into a live power outlet. 5. The “Status” LED will begin to blink green. After a short delay, the signal strength LEDs will come on to indicate the cellular signal strength and the “Cell On” LED should turn solid green. 6. Reposition the antenna to receive the best possible signal. Doc. No.: M00-20-6000 Rev.: 3 Page 12 of 14 NOTE: You will not need to test the network connectivity and should not use this OPW Wireless Connection to access the Internet with your laptop. This connection is for transaction data ONLY. 3.3 Testing the OPW Cellular IP Gateway for Network Authorization 1. Testing the OPW Cellular IP Gateway for Network Authorization NOTE: You are configuring the FSC3000 to work in dial-out mode exactly as if you were going to use the “new” OPW modem and a phone line. IMPORTANT: For all networks, except Buypass, configure the modem communication parameters to 2400 baud, 7E1 to match the Gateway. For the Buypass network, configure the modem communication parameters to 2400 baud, 8N1 to match the Gateway. 2. Test the connection by running a test card at the pump. You should receive a prompt stating Select Pump, Enter Pump Number or that the Pump is Activated; this indicates that you have received authorization. NOTE: You do not need to pump fuel at this time. 3.4 Testing the OPW Cellular Inbound-Only Communication Using Phoenix® or ARTWare, establish a connection to the Fuel Site Controller using the static IP address assigned to the OPW Cellular IP Gateway. Doc. No.: M00-20-6000 Rev.: 3 Page 13 of 14 Warranty OPW Fuel Management Systems warrants that all OPW Tank Gauge and Petro Vend Fuel Control systems supplied by OPW Fuel Management Systems to the Original Purchaser will be free from defects in material and/or workmanship under normal use and service for a period of 12 months from the date of installation or 15 months from the date of shipment from OPW. Additionally, OPW Fuel Management Systems warrants that all upgrades and replacement parts (new and remanufactured) supplied by OPW Fuel Management Systems will be free from defects in material and workmanship under normal use and serviced for a period of 90 days from the date of installation or for the remainder of the system’s original warranty, whichever is greater, as set forth in the first sentence of this statement. The foregoing warranties will not extend to goods subjected to misuse, neglect, accident, or improper installation or maintenance or which have been altered or repaired by anyone other than OPW Fuel Management Systems or its authorized representative. The buyer’s acceptance of delivery of the goods constitutes acceptance of the foregoing warranties and remedies, and all conditions and limitations thereof. If a claim is made within the warranted time period that any equipment and/or remanufactured part is defective in material or workmanship under normal use and service, such equipment and/or remanufactured part shall be returned to OPW Fuel Management Systems, freight prepaid. If such equipment or remanufactured part is found by OPW Fuel Management Systems in its sole judgment to be defective in material or workmanship under normal use and service, OPW Fuel Management Systems shall, at its sole option, repair or replace such equipment and/or remanufactured part (excluding, in all instances, fuses, ink cartridges, batteries, other consumable items, etc.) OPW Fuel Management Systems shall not be held responsible for data loss or retrieval on returned products. The warranties, as set forth above, are made expressly in lieu of all other warranties, either expressed or implied (including, without limitation, warranties of merchantability and fitness for any particular purpose and of all other obligations or liabilities on OPW Fuel Management Systems’ part.) Further, OPW Fuel Management Systems neither assumes, nor authorizes any other person to assume for it, any other liability in connection with the sale of the systems, or any new/replacement part that has been subject to any damage from any act of nature or any force majeure. Any terms proposed by the Original Purchaser either orally or in writing are expressly rejected. The terms and conditions expressed in this document may only be changed upon the express written consent of OPW Fuel Management Systems. The term “Original Purchaser” as used in these warranties shall be deemed to mean the authorized OPW Fuel Management Systems’ distributor to which the system or any new/replacement part was originally sold. These warranties may be assigned by the original purchaser to any of its customers who purchase any OPW Fuel Management Systems’ systems or new/replacement parts. This document shall be governed by and construed in accordance with the law of the State of Illinois. OPW Fuel Management Systems and Original Purchaser agree that any legal action or proceeding under or with respect to this document may ONLY be brought in the courts of the State of Illinois, or the United States District Court having jurisdiction in the City of Hodgkins, Illinois. Original Purchaser expressly consents to personal jurisdiction in any of the above-mentioned forums and agrees to waive all defenses based on improper venue or inconvenient form should an action be brought therein. The sole liability of OPW Fuel Management Systems, for any breach of warranty, shall be as set forth above. OPW Fuel Management Systems does not warrant against damage caused by accident, abuse, faulty or improper installation or operation. In no event shall manufacturer’s liability on any claim for damages arising out of the manufacture, sale, delivery or use of the goods exceed the original purchase price of the goods. In no event shall OPW Fuel Management Systems be liable for any direct, indirect, incidental or consequential damage or loss of product. TERMS Ex-works our factory, Hodgkins, Illinois, USA Installation not included. All trade names are registered. Patents pending. Subject to engineering improvement and/or other changes.