Service Note: LAN module firmware update manual€¦ · fo2.frama.com TCP port 443 mupd.frama.com...

Service Note:

LAN module firmware update manual


2

Safety precautions and warnings

Thank you for deciding to use a Frama Franking System.

The information in this guide is intended to support you during the configuration of the franking system to

connect via TCP / IP to FramaOnline2.

Your franking system meets currently valid safety regulations. Inappropriate use, however, can lead to personal

injury or damage to property. With this in mind, please read this guide first before you put the unit into service. By

doing so, you will protect yourself and avoid damaging the unit. Store this guide carefully and pass it along to any

subsequent owner.

Symbols used

This configuration guide uses the following symbols:

Danger!

This symbol points to dangers and safety risks when handling, operating or servicing your

franking system which could result in personal injury.

Note!

This symbol points to valuable guidelines and instructions for handling your franking system

which can eliminate the risk of damage to the franking system, the mail items or the

immediate environment.

Tip!

Interesting notes and tips for efficient handling.


3

Table of Contents

1 INTRODUCTION ................................................................................................................................... 4

2 REFERENCES.......................................................................................................................................... 4

3 OVERVIEW ON LAN MODULE FIRMWARE UPDATE ....................................................................... 4

3.1 System requirements ............................................................................................................................................... 7

4 LAN MODULE FIRMWARE UPDATE PROCEDURE ........................................................................... 8

5 WORKAROUNDS ................................................................................................................................ 10

5.1 Temporary Access ................................................................................................................................................... 10 5.2 Use Alternative Internet Connection ............................................................................................................... 11 5.3 Exchange of the LAN module ............................................................................................................................ 12

6 STATUS AND TROUBLESHOOTING ................................................................................................. 13

6.1 E0775 ........................................................................................................................................................................... 13 6.2 E0776 ........................................................................................................................................................................... 13 6.3 E0777 ........................................................................................................................................................................... 14 6.4 E0778 ........................................................................................................................................................................... 14 6.5 E0779 ........................................................................................................................................................................... 14

7 SYSTEM MESSAGES ........................................................................................................................... 14


4

1 Introduction

This manual describes how to update the Matrix-R2 LAN module firmware in case the franking system has no

direct access to the internet via port 21 or the access to port 21 is managed by a proxy server.

Please refer to the manual “IP configuration manual for Matrix F series” which can be downloaded from

www.frama.com for general reference regarding the setup and configuration of the IP communication of the

Matrix F series franking systems.

Refer to the franking machine user manual for further information on safety and operation maintenance. The

franking machine screens provided in this manual are for reference only and may differ from country to country.

The intended audience for this manual is qualified IT support personnel and requires enhanced knowledge about

network technologies. Speak to a qualified IT support person if you feel uncomfortable with the contents of the

manual.

2 References

[1] Manual “IP configuration manual for Matrix F series” downloadable from www.frama.com

3 Overview on LAN module firmware update

The LAN communication module in the Matrix F series franking systems may be updated from time to time.

Specific versions of the LAN communication module firmware requires special attention as the automated

update of the LAN communication module firmware update via proxy server may fail. The following LAN

communication module firmware versions are available by now:

SOFT1039 “old” firmware, supporting SSLv3, TLS1.0, SHA-I and ftp firmware update without proxy

SOFT1680 “new” firmware, supporting TLS1.2, SHA-II and ftp firmware update via proxy

Please find below a list of the franking system firmware minimum versions starting from which the franking system

updates the LAN communication module firmware:

Switzerland

Matrix Starter, Matrix F22: BOL2_01.06.00

Matrix F32, F42, F62, F82 : MTOL2_01.06.00

Germany

Matrix F12, F22: BOL2_02.04.00

Matrix F32, F42, F62, F82 : MTOL2_02.04.00

The Netherlands

Matrix F12, F22: BOL2_03.04.00

Matrix F32, F42, F62, F82 : MTOL2_03.04.00

Great Britain

Matrix F12, F22: BOL2_04.03.00

Matrix F32, F42, F62, F82 : MTOL2_04.03.00

Italy

Matrix F12, F22: BOL2_05.06.00

Matrix F32, F42, F62, F82 : MTOL2_05.06.00

http://www.frama.com/

http://www.frama.com/


5

The firmware version of the franking system can be detected by the following procedure

Description Matrix F12 Matrix F22 – Matrix F82

Power on the franking system, login as

“Admin” or as normal cost center user.

F12: and navigate to “Setup 2” and

press the button “Systeminfo”.

F22 – F82: and navigate to “Setup 1”

and press the button “Systeminfo”

The franking system displays the system

information screen.

F12: The firmware version of the

franking system is displayed after the

text “Ver.”. In this example the firmware

version is “BOL2_03.03.00”

F22 – F82: The firmware version of the

franking system is displayed after the

text “Software”. In this example the

firmware version is “MTOL2_03.03.00”


6

The firmware version of the LAN module can be detected by the following steps



“Admin” and navigate to the network

settings page

Navigate to Set up 2 / Frama

Online2 / Connection / Network

Setup / / IP config Summary

Navigate to Set up 2 / Frama

Online2 / Connection / Network

Setup / IPConfig 1/2

F12: Go to the second page of the

network configuration screen with the

button “ ”.

F22 – F82: Press the button “IP Config

Summary”.

The franking system displays the

current IP configuration.

The firmware version of the LAN

module is displayed on the line

following “Modem Vs”

Note!

The “new” LAN communication module firmware will overcome this limitation and future

updates of the LAN module firmware will be able to handle the firmware update for the

LAN module via a proxy server.


7

3.1 System requirements

Additional to the system requirements listed in the “IP configuration manual for Matrix F series” the franking

system requires unrestricted access via ftp port 21 to the URL mupd.frama.com.

Summary of system requirements:

An Ethernet network socket that connects to the Internet

The franking system must be able to communicate

o via TCP port 443 (https / TLS) to the URL fo2.frama.com

Supported proxy server configuration are detailed in section 2.2.2 of the

“IP configuration manual for Matrix F series”

o via FTP port 21 to the IP address of URL mupd.frama.com

no proxy server supported

Note!

All security sensitive connections with the FramaOnline2 system are only established

through a TLS secured https tunnel!


8

4 LAN module firmware update procedure

The standard procedure to update the LAN module firmware is initiated automatically by the franking system and

requires no user interventions.

Internet

FramaOnline2

Your (DSL) Router

Connect your franking

system with CAT 5 network

cable to your (DSL) router

fo2.frama.com

TCP port 443

mupd.frama.com

TCP port 21

Your Frama

Franking SystemFrama Firewall

LAN module

Update Server

LAN module firmware update

Matrix F12 Matrix F22 – Matrix F82

The franking system displays a count-

down dialog before starting the update

of the LAN module. This dialog is only

shown, if the update takes place

immediate after a connection, after

startup or if a user has logged in to the

franking system.

Please refer to section 6 for translation

of the displayed message.

During the update of the LAN module

firmware, the user is informed by a

message on the screen.

Duration of the update:

A successful update takes at least

about 2 minutes.

The update duration depends on

the speed and quality of the

internet connection.

An unsuccessful update process is

timed out after 11 minutes latest.

Please refer to section 6 for translation

of the displayed message.


9

After the update the franking system

returns to the login screen.

Note!

You must not switch off the franking system, if a LAN module firmware update is in

progress as otherwise the LAN module may become non-operational!

Note!

The franking system establishes the connection to the LAN module update server using

directly IP address of URL mupd.frama.com!

In case you need to add rules to the firewall, make sure to configure that the firewall rules

accordingly to allow direct access to the IP address of the URL mupd.frama.com.


10

5 Workarounds

If your franking system is located behind a proxy server or if your franking system has no access via port 21 to the

IP address of URL mupd.frama.com, there are several workarounds available to allow the franking system to

update the LAN module firmware:

Temporary access: Alter the configuration of your network and allow the franking system to

access URL mupd.frama.com via port 21 for a limited time span.

Use alternative internet connection: Connect the franking system to another network (e.g. a

guest network) to allow internet access without restrictions on port 21.

Exchange the LAN module: Let Frama technical support exchange the LAN module with an

item that already has the new firmware installed. This is not covered by guarantee or

comprehensive maintenance.

5.1 Temporary Access

This workaround requires your network administration personnel to alter the configuration of the network the

following way:

Allow the franking system to access URL mupd.frama.com via port 21

Internet



cable to your network

Your Frama


The IP address of your

franking system must have

access to:

1. fo2.frama.com

TCP port 443

2. mupd.frama.com

TCP port 21

Your FirewallYour Network

FramaOnline2

LAN module

Update Server

fo2.frama.com

TCP port 443

mupd.frama.com

TCP port 21

Temporary access through firewall

Internet



cable to your network

Your Frama


The franking system is

configured to use a proxy and

connect via the proxy to:

1. fo2.frama.com

TCP port 443

Your Proxy ServerYour Network

The IP address of your

franking system must have

additionally access to:

2. mupd.frama.com

TCP port 21

fo2.frama.com

TCP port 443

mupd.frama.com

TCP port 21

FramaOnline2

LAN module

Update Server

Temporary access „around“ proxy

Detailed procedure to follow for workaround “temporary access”:

1. Change configuration of your network to allow the franking system to access URL

mupd.frama.com via port 21.

2. Switch off and on the franking system to trigger a re-boot of the franking system.


11

3. After the franking system is re-started, the update of the LAN module will start

automatically.

4. Wait for the update to complete. Best way to do this, is leave the franking system running

for at least 20 minutes after the restart.

5. Check if the LAN module has been updated:

o Login to the franking system

o navigate to “Setup 1/Status List” and check to have status “E0777”in the list and/or

o navigate to “Setup 2/FramaOnline2/IP config summary” to display the actual

version and check against the LAN module versions indicated in section 3

6. Re-establish the normal configuration of your network

5.2 Use Alternative Internet Connection

This workaround requires access to a network with unrestricted access via port 21 to the URL mupd.frama.com.

Such unrestricted access can most commonly be achieved using the following network access:

Guest network

Mobile phones/smartphone with tethering capability

Private internet access (DSL) routers

Tip!

The Matrix-F series franking system has wired LAN connection, so using a LAN to WLAN

bridge allows connection of the franking system with a WLAN base station or a

smartphone with tethering capability.

Internet

FramaOnline2

Any (DSL) router

without restrictions




fo2.frama.com

TCP port 443

mupd.frama.com

TCP port 21

Your Frama


LAN module

Update Server

Guest network or other network without restrictions

Internet

FramaOnline2




fo2.frama.com

TCP port 443

mupd.frama.com

TCP port 21

Your Frama


LAN module

Update Server

LAN – WLAN

Bridge

Smartphone with

Tethering

Connect using LAN-WLAN bridge and tethering mobile smartphone


12

Detailed procedure to follow for workaround “use other internet connection”:

1. Switch off the franking system.

2. In case the alternative internet connections is provided by WLAN, setup a LAN to WLAN

bridge.

3. Connect the franking system to the alternative internet connection.

4. Switch on the franking system.

5. After the franking system is re-started, the update of the LAN module will start

automatically.

6. Wait for the update to complete. Best way to do this, is leave the franking system running

for at least 20 minutes after the restart.

7. Check if the LAN module has been updated:

o Login to the franking system

o navigate to “Setup 1/Status List” and check to have status “E0777”in the list and/or

o navigate to “Setup 2/FramaOnline2/IP config summary” to display the actual

version and check against the LAN module versions indicated in section 3

8. Re-establish the normal network connection.

5.3 Exchange of the LAN module

Frama monitors the progress of the LAN module firmware update and will pro-actively plan the service

interventions to cover franking systems that cannot update the LAN module using one of the other workaround

procedures.

As last measure when the other workaround cannot be implemented, this workaround achieves the update of the

LAN module firmware by a physical exchange of the LAN module in the franking system. Such an intervention can

only be performed by Frama technical support personnel during a regular service intervention as opening of

franking system housing is required.


13

6 Status and Troubleshooting

During the process to update the LAN module firmware, the franking system logs the progress and status of LAN

module firmware update process in the status list. This status codes are also shown in reference [1].

Use the following procedure to display the status list:



“Admin” or as normal cost center user.

F12: and navigate to “Setup 2” and

press the button “Status List”.

F22 – F82: and navigate to “Setup 1”

and press the button “System List”

Note: The text of the screens appear in

the currently set language of the

franking system.

6.1 E0775

Code Screen Message Description

E0775 -1 LAN module firmware update started.

Information status entry telling that update of LAN module has

been started.

Note: This is not a failure, it is a status message.

6.2 E0776


E0776 -1 LAN module firmware update is not successful.

Possible Causes Solution

Slow or unreliable internet connection The franking system is automatically retrying the LAN

module firmware update on next calendar day or after a

reboot.

Load on ftp server too high The franking system is automatically retrying the LAN


reboot.

Ftp server down The franking system is automatically retrying the LAN


reboot.

1 E0775, E0776, E0777 and E0778 are recorded by the franking system in the status list, but there is no

message shown to the franking system user.


14

Proxy or firewall blocks completely the required ftp

connection

Use one of the workarounds described in section 5 of this

document to allow the franking system to access the

internet via port 21.

The franking system is automatically retrying the LAN


reboot.

6.3 E0777


E0777 -1 LAN module firmware update completed successful.

Note: This is not a failure, it is a success message.

6.4 E0778


E0778 -1 LAN module firmware update process timed out.

When E0778 is followed by an E0777, than the update of the LAN

module is successfully completed and the E0778 can be ignored.

See E0776 for possible causes and solutions.

6.5 E0779


E0779 Communication module failure.

If the error persists

please contact

Frama Technical Service.

LAN module firmware update was not successful and LAN module

is not usable anymore for communication purposes.

Note: This message is displayed in the current active language of

the franking system. Please refer to section 6 for a translation of

the displayed message.

Possible Causes Solution

Hardware Failure Please contact your FramaOnline2 Hotline.

7 System Messages

This table contains the translation of the system messages referenced in this document and displayed during the

process of updating the LAN module firmware:

English German Dutch French Italian

Firmware update required.

Would you like

to update

the firmware now?

Firmwareupdate erforderlich.

Möchten Sie die Firmware

jetzt aktualisieren?

Firmware update

noodzakelijk.

Wilt u de firmware

nu updaten?

Mise à jour du

firmware nécessaire.

Voulez-vous mettre à jour

le firmware maintenant?

Richiesto aggiornamento

firmware.

Desidera di aggiornare

il firmware ora?

Firmware update

in process.

This may take

several minutes.

Please do not switch off!

Firmwareupdate wird

installiert. Dieser Vorgang

kann mehrere Minuten dauern.

Nicht ausschalten!

Firmware update actief.

Dit kan enkele

minute duren.

Zet de machine niet uit!

Mise à jour du firmware

en cours. Cela peut

prendre plusieurs minutes.

Ne pas éteindre s'il vous

plaît!

Aggiornamento del firmware

è in fase di installazione.

Questa procedura può

durare alcuni minuti.

Si prega di non spegnere!

Communication module

failure.

If the error persists

please contact

Frama Technical Service.

Fehler Kommunikationsmodul.

Bleibt der Fehler bestehen,

wenden Sie sich bitte an

Ihre Vertriebsorganisation.

Communicatie probleem.

Neem contact op met

de Frama Helpdesk

als dit probleem zich

blijft voordoen.

Défaillance du module

de communication.

Si l'erreur persiste

veuillez contacter notre

service technique.

Errore nel modulo

di comunicazione.

Se il problema permane,

si prega di rivolgersi alla

vostra organizzazione

di vendita.


15

Frama AG

CH-3438 Lauperswil Matrix F series IP module firmware update manual

1020023 R01.05 – 07.2015 Switzerland

Service Note: LAN module firmware update manual€¦ · fo2.frama.com TCP port 443 mupd.frama.com...

Documents

Transcript of Service Note: LAN module firmware update manual€¦ · fo2.frama.com TCP port 443 mupd.frama.com...