service note: lan module firmware update manual€¦ · fo2.frama.com tcp port 443 mupd.frama.com...
TRANSCRIPT
Service Note:
LAN module firmware update manual
LAN module firmware update manual
2
Safety precautions and warnings
Thank you for deciding to use a Frama Franking System.
The information in this guide is intended to support you during the configuration of the franking system to
connect via TCP / IP to FramaOnline2.
Your franking system meets currently valid safety regulations. Inappropriate use, however, can lead to personal
injury or damage to property. With this in mind, please read this guide first before you put the unit into service. By
doing so, you will protect yourself and avoid damaging the unit. Store this guide carefully and pass it along to any
subsequent owner.
Symbols used
This configuration guide uses the following symbols:
Danger!
This symbol points to dangers and safety risks when handling, operating or servicing your
franking system which could result in personal injury.
Note!
This symbol points to valuable guidelines and instructions for handling your franking system
which can eliminate the risk of damage to the franking system, the mail items or the
immediate environment.
Tip!
Interesting notes and tips for efficient handling.
LAN module firmware update manual
3
Table of Contents
1 INTRODUCTION ................................................................................................................................... 4
2 REFERENCES.......................................................................................................................................... 4
3 OVERVIEW ON LAN MODULE FIRMWARE UPDATE ....................................................................... 4
3.1 System requirements ............................................................................................................................................... 7
4 LAN MODULE FIRMWARE UPDATE PROCEDURE ........................................................................... 8
5 WORKAROUNDS ................................................................................................................................ 10
5.1 Temporary Access ................................................................................................................................................... 10 5.2 Use Alternative Internet Connection ............................................................................................................... 11 5.3 Exchange of the LAN module ............................................................................................................................ 12
6 STATUS AND TROUBLESHOOTING ................................................................................................. 13
6.1 E0775 ........................................................................................................................................................................... 13 6.2 E0776 ........................................................................................................................................................................... 13 6.3 E0777 ........................................................................................................................................................................... 14 6.4 E0778 ........................................................................................................................................................................... 14 6.5 E0779 ........................................................................................................................................................................... 14
7 SYSTEM MESSAGES ........................................................................................................................... 14
LAN module firmware update manual
4
1 Introduction
This manual describes how to update the Matrix-R2 LAN module firmware in case the franking system has no
direct access to the internet via port 21 or the access to port 21 is managed by a proxy server.
Please refer to the manual “IP configuration manual for Matrix F series” which can be downloaded from
www.frama.com for general reference regarding the setup and configuration of the IP communication of the
Matrix F series franking systems.
Refer to the franking machine user manual for further information on safety and operation maintenance. The
franking machine screens provided in this manual are for reference only and may differ from country to country.
The intended audience for this manual is qualified IT support personnel and requires enhanced knowledge about
network technologies. Speak to a qualified IT support person if you feel uncomfortable with the contents of the
manual.
2 References
[1] Manual “IP configuration manual for Matrix F series” downloadable from www.frama.com
3 Overview on LAN module firmware update
The LAN communication module in the Matrix F series franking systems may be updated from time to time.
Specific versions of the LAN communication module firmware requires special attention as the automated
update of the LAN communication module firmware update via proxy server may fail. The following LAN
communication module firmware versions are available by now:
SOFT1039 “old” firmware, supporting SSLv3, TLS1.0, SHA-I and ftp firmware update without proxy
SOFT1680 “new” firmware, supporting TLS1.2, SHA-II and ftp firmware update via proxy
Please find below a list of the franking system firmware minimum versions starting from which the franking system
updates the LAN communication module firmware:
Switzerland
Matrix Starter, Matrix F22: BOL2_01.06.00
Matrix F32, F42, F62, F82 : MTOL2_01.06.00
Germany
Matrix F12, F22: BOL2_02.04.00
Matrix F32, F42, F62, F82 : MTOL2_02.04.00
The Netherlands
Matrix F12, F22: BOL2_03.04.00
Matrix F32, F42, F62, F82 : MTOL2_03.04.00
Great Britain
Matrix F12, F22: BOL2_04.03.00
Matrix F32, F42, F62, F82 : MTOL2_04.03.00
Italy
Matrix F12, F22: BOL2_05.06.00
Matrix F32, F42, F62, F82 : MTOL2_05.06.00
LAN module firmware update manual
5
The firmware version of the franking system can be detected by the following procedure
Description Matrix F12 Matrix F22 – Matrix F82
Power on the franking system, login as
“Admin” or as normal cost center user.
F12: and navigate to “Setup 2” and
press the button “Systeminfo”.
F22 – F82: and navigate to “Setup 1”
and press the button “Systeminfo”
The franking system displays the system
information screen.
F12: The firmware version of the
franking system is displayed after the
text “Ver.”. In this example the firmware
version is “BOL2_03.03.00”
F22 – F82: The firmware version of the
franking system is displayed after the
text “Software”. In this example the
firmware version is “MTOL2_03.03.00”
LAN module firmware update manual
6
The firmware version of the LAN module can be detected by the following steps
Description Matrix F12 Matrix F22 – Matrix F82
Power on the franking system, login as
“Admin” and navigate to the network
settings page
Navigate to Set up 2 / Frama
Online2 / Connection / Network
Setup / / IP config Summary
Navigate to Set up 2 / Frama
Online2 / Connection / Network
Setup / IPConfig 1/2
F12: Go to the second page of the
network configuration screen with the
button “ ”.
F22 – F82: Press the button “IP Config
Summary”.
The franking system displays the
current IP configuration.
The firmware version of the LAN
module is displayed on the line
following “Modem Vs”
Note!
The “new” LAN communication module firmware will overcome this limitation and future
updates of the LAN module firmware will be able to handle the firmware update for the
LAN module via a proxy server.
LAN module firmware update manual
7
3.1 System requirements
Additional to the system requirements listed in the “IP configuration manual for Matrix F series” the franking
system requires unrestricted access via ftp port 21 to the URL mupd.frama.com.
Summary of system requirements:
An Ethernet network socket that connects to the Internet
The franking system must be able to communicate
o via TCP port 443 (https / TLS) to the URL fo2.frama.com
Supported proxy server configuration are detailed in section 2.2.2 of the
“IP configuration manual for Matrix F series”
o via FTP port 21 to the IP address of URL mupd.frama.com
no proxy server supported
Note!
All security sensitive connections with the FramaOnline2 system are only established
through a TLS secured https tunnel!
LAN module firmware update manual
8
4 LAN module firmware update procedure
The standard procedure to update the LAN module firmware is initiated automatically by the franking system and
requires no user interventions.
Internet
FramaOnline2
Your (DSL) Router
Connect your franking
system with CAT 5 network
cable to your (DSL) router
fo2.frama.com
TCP port 443
mupd.frama.com
TCP port 21
Your Frama
Franking SystemFrama Firewall
LAN module
Update Server
LAN module firmware update
Matrix F12 Matrix F22 – Matrix F82
The franking system displays a count-
down dialog before starting the update
of the LAN module. This dialog is only
shown, if the update takes place
immediate after a connection, after
startup or if a user has logged in to the
franking system.
Please refer to section 6 for translation
of the displayed message.
During the update of the LAN module
firmware, the user is informed by a
message on the screen.
Duration of the update:
A successful update takes at least
about 2 minutes.
The update duration depends on
the speed and quality of the
internet connection.
An unsuccessful update process is
timed out after 11 minutes latest.
Please refer to section 6 for translation
of the displayed message.
LAN module firmware update manual
9
After the update the franking system
returns to the login screen.
Note!
You must not switch off the franking system, if a LAN module firmware update is in
progress as otherwise the LAN module may become non-operational!
Note!
The franking system establishes the connection to the LAN module update server using
directly IP address of URL mupd.frama.com!
In case you need to add rules to the firewall, make sure to configure that the firewall rules
accordingly to allow direct access to the IP address of the URL mupd.frama.com.
LAN module firmware update manual
10
5 Workarounds
If your franking system is located behind a proxy server or if your franking system has no access via port 21 to the
IP address of URL mupd.frama.com, there are several workarounds available to allow the franking system to
update the LAN module firmware:
Temporary access: Alter the configuration of your network and allow the franking system to
access URL mupd.frama.com via port 21 for a limited time span.
Use alternative internet connection: Connect the franking system to another network (e.g. a
guest network) to allow internet access without restrictions on port 21.
Exchange the LAN module: Let Frama technical support exchange the LAN module with an
item that already has the new firmware installed. This is not covered by guarantee or
comprehensive maintenance.
5.1 Temporary Access
This workaround requires your network administration personnel to alter the configuration of the network the
following way:
Allow the franking system to access URL mupd.frama.com via port 21
Internet
Connect your franking
system with CAT 5 network
cable to your network
Your Frama
Franking SystemFrama Firewall
The IP address of your
franking system must have
access to:
1. fo2.frama.com
TCP port 443
2. mupd.frama.com
TCP port 21
Your FirewallYour Network
FramaOnline2
LAN module
Update Server
fo2.frama.com
TCP port 443
mupd.frama.com
TCP port 21
Temporary access through firewall
Internet
Connect your franking
system with CAT 5 network
cable to your network
Your Frama
Franking SystemFrama Firewall
The franking system is
configured to use a proxy and
connect via the proxy to:
1. fo2.frama.com
TCP port 443
Your Proxy ServerYour Network
The IP address of your
franking system must have
additionally access to:
2. mupd.frama.com
TCP port 21
fo2.frama.com
TCP port 443
mupd.frama.com
TCP port 21
FramaOnline2
LAN module
Update Server
Temporary access „around“ proxy
Detailed procedure to follow for workaround “temporary access”:
1. Change configuration of your network to allow the franking system to access URL
mupd.frama.com via port 21.
2. Switch off and on the franking system to trigger a re-boot of the franking system.
LAN module firmware update manual
11
3. After the franking system is re-started, the update of the LAN module will start
automatically.
4. Wait for the update to complete. Best way to do this, is leave the franking system running
for at least 20 minutes after the restart.
5. Check if the LAN module has been updated:
o Login to the franking system
o navigate to “Setup 1/Status List” and check to have status “E0777”in the list and/or
o navigate to “Setup 2/FramaOnline2/IP config summary” to display the actual
version and check against the LAN module versions indicated in section 3
6. Re-establish the normal configuration of your network
5.2 Use Alternative Internet Connection
This workaround requires access to a network with unrestricted access via port 21 to the URL mupd.frama.com.
Such unrestricted access can most commonly be achieved using the following network access:
Guest network
Mobile phones/smartphone with tethering capability
Private internet access (DSL) routers
Tip!
The Matrix-F series franking system has wired LAN connection, so using a LAN to WLAN
bridge allows connection of the franking system with a WLAN base station or a
smartphone with tethering capability.
Internet
FramaOnline2
Any (DSL) router
without restrictions
Connect your franking
system with CAT 5 network
cable to your (DSL) router
fo2.frama.com
TCP port 443
mupd.frama.com
TCP port 21
Your Frama
Franking SystemFrama Firewall
LAN module
Update Server
Guest network or other network without restrictions
Internet
FramaOnline2
Connect your franking
system with CAT 5 network
cable to your (DSL) router
fo2.frama.com
TCP port 443
mupd.frama.com
TCP port 21
Your Frama
Franking SystemFrama Firewall
LAN module
Update Server
LAN – WLAN
Bridge
Smartphone with
Tethering
Connect using LAN-WLAN bridge and tethering mobile smartphone
LAN module firmware update manual
12
Detailed procedure to follow for workaround “use other internet connection”:
1. Switch off the franking system.
2. In case the alternative internet connections is provided by WLAN, setup a LAN to WLAN
bridge.
3. Connect the franking system to the alternative internet connection.
4. Switch on the franking system.
5. After the franking system is re-started, the update of the LAN module will start
automatically.
6. Wait for the update to complete. Best way to do this, is leave the franking system running
for at least 20 minutes after the restart.
7. Check if the LAN module has been updated:
o Login to the franking system
o navigate to “Setup 1/Status List” and check to have status “E0777”in the list and/or
o navigate to “Setup 2/FramaOnline2/IP config summary” to display the actual
version and check against the LAN module versions indicated in section 3
8. Re-establish the normal network connection.
5.3 Exchange of the LAN module
Frama monitors the progress of the LAN module firmware update and will pro-actively plan the service
interventions to cover franking systems that cannot update the LAN module using one of the other workaround
procedures.
As last measure when the other workaround cannot be implemented, this workaround achieves the update of the
LAN module firmware by a physical exchange of the LAN module in the franking system. Such an intervention can
only be performed by Frama technical support personnel during a regular service intervention as opening of
franking system housing is required.
LAN module firmware update manual
13
6 Status and Troubleshooting
During the process to update the LAN module firmware, the franking system logs the progress and status of LAN
module firmware update process in the status list. This status codes are also shown in reference [1].
Use the following procedure to display the status list:
Description Matrix F12 Matrix F22 – Matrix F82
Power on the franking system, login as
“Admin” or as normal cost center user.
F12: and navigate to “Setup 2” and
press the button “Status List”.
F22 – F82: and navigate to “Setup 1”
and press the button “System List”
Note: The text of the screens appear in
the currently set language of the
franking system.
6.1 E0775
Code Screen Message Description
E0775 -1 LAN module firmware update started.
Information status entry telling that update of LAN module has
been started.
Note: This is not a failure, it is a status message.
6.2 E0776
Code Screen Message Description
E0776 -1 LAN module firmware update is not successful.
Possible Causes Solution
Slow or unreliable internet connection The franking system is automatically retrying the LAN
module firmware update on next calendar day or after a
reboot.
Load on ftp server too high The franking system is automatically retrying the LAN
module firmware update on next calendar day or after a
reboot.
Ftp server down The franking system is automatically retrying the LAN
module firmware update on next calendar day or after a
reboot.
1 E0775, E0776, E0777 and E0778 are recorded by the franking system in the status list, but there is no
message shown to the franking system user.
LAN module firmware update manual
14
Proxy or firewall blocks completely the required ftp
connection
Use one of the workarounds described in section 5 of this
document to allow the franking system to access the
internet via port 21.
The franking system is automatically retrying the LAN
module firmware update on next calendar day or after a
reboot.
6.3 E0777
Code Screen Message Description
E0777 -1 LAN module firmware update completed successful.
Note: This is not a failure, it is a success message.
6.4 E0778
Code Screen Message Description
E0778 -1 LAN module firmware update process timed out.
When E0778 is followed by an E0777, than the update of the LAN
module is successfully completed and the E0778 can be ignored.
See E0776 for possible causes and solutions.
6.5 E0779
Code Screen Message Description
E0779 Communication module failure.
If the error persists
please contact
Frama Technical Service.
LAN module firmware update was not successful and LAN module
is not usable anymore for communication purposes.
Note: This message is displayed in the current active language of
the franking system. Please refer to section 6 for a translation of
the displayed message.
Possible Causes Solution
Hardware Failure Please contact your FramaOnline2 Hotline.
7 System Messages
This table contains the translation of the system messages referenced in this document and displayed during the
process of updating the LAN module firmware:
English German Dutch French Italian
Firmware update required.
Would you like
to update
the firmware now?
Firmwareupdate erforderlich.
Möchten Sie die Firmware
jetzt aktualisieren?
Firmware update
noodzakelijk.
Wilt u de firmware
nu updaten?
Mise à jour du
firmware nécessaire.
Voulez-vous mettre à jour
le firmware maintenant?
Richiesto aggiornamento
firmware.
Desidera di aggiornare
il firmware ora?
Firmware update
in process.
This may take
several minutes.
Please do not switch off!
Firmwareupdate wird
installiert. Dieser Vorgang
kann mehrere Minuten dauern.
Nicht ausschalten!
Firmware update actief.
Dit kan enkele
minute duren.
Zet de machine niet uit!
Mise à jour du firmware
en cours. Cela peut
prendre plusieurs minutes.
Ne pas éteindre s'il vous
plaît!
Aggiornamento del firmware
è in fase di installazione.
Questa procedura può
durare alcuni minuti.
Si prega di non spegnere!
Communication module
failure.
If the error persists
please contact
Frama Technical Service.
Fehler Kommunikationsmodul.
Bleibt der Fehler bestehen,
wenden Sie sich bitte an
Ihre Vertriebsorganisation.
Communicatie probleem.
Neem contact op met
de Frama Helpdesk
als dit probleem zich
blijft voordoen.
Défaillance du module
de communication.
Si l'erreur persiste
veuillez contacter notre
service technique.
Errore nel modulo
di comunicazione.
Se il problema permane,
si prega di rivolgersi alla
vostra organizzazione
di vendita.
LAN module firmware update manual
15
Frama AG
CH-3438 Lauperswil Matrix F series IP module firmware update manual
1020023 R01.05 – 07.2015 Switzerland