|

|
September 2007
Network Essentials for Test Engineers
By Jon N. Semancik
Web Pages Go Beyond the Basics
By Conrad Proft, Agilent Technologies
Climbing the
LXI Learning Curve
By Paul G. Schreier, Editor
April 2007
LXI Makes Smart Instruments Possible
By Paul F. Franklin, Keithley Insturments
Network Security for LXI Systems
By Mike Dewey, Editor
A Multivendor
Test System
By Rob Purser, The
Mathworks
January 2007
Looking at LXI From a Supplier'
s Perspective
By
David Owen, Pickering Interfaces
LXI Simplifies Satellite Environmental Testing
By Mike Dewey, Editor, and Peter Allen,
Elgar Electronics
Autodiscovery Speeds Test-System Design
By Tom Gaudette, The MathWorks, and Scott Frasso, Northeastern University
October 2006
Time Scales and IEEE 1588
Part 2
By
John C. Eidson, Ph.D.,
and Dan Pleasant, Agilent Technologies
Driving LXI Devices
By Simon Appleby, Pickering Interfaces
Making the Transition From GPIB to LXI
By Mike Dewey, Editor
July 2006
Time Scales and IEEE 1588
Part 1
By
John C. Eidson, Ph.D.,
and Dan Pleasant, Agilent Technologies
Introducing the Wired Trigger Bus
By David Owen, Pickering Interfaces
Integrating
LXI Devices Into Hybrid Test Systems
By Mike Dewey, Editor
April 2006
10 Good Reasons to Use LXI
By Stefan Kopp, Agilent Technologies
The Process and Requirements for
LXI Device Compliance
By Mike Dewey, Editor
LXI Addresses
Structural Test
By Jon N. Semancik, VXI
Technology
January 2006
LXI Instrument
Classes
By Mike Dewey, Editor
Embracing LXI for Switching
By David Owen,
Pickering Interfaces
Exploring LXI'
s Advanced
Capabilities
By Paul Franklin and
Andy Creque, Keithley Instruments
October 2005
LXI
Unveiled as the Future of Test
by Grant Drenkow, Agilent Technologies
The LXI Standard: Its Evolution and Application
by Mike Dewey, Editor
Expanding Test System Functionality
With LXI
by Jon N.
Semancik, VXI Technology
Network Essentials
for Test Engineers
By Jon N. Semancik
The evolution of instrumentation interfaces has landed squarely on Ethernet, an open standard that leverages the most prolific communications infrastructure in history. Simplified, inexpensive out-of-the-box connectivity and high-speed data transfers excite many potential users, but Ethernet implementations will likely involve a learning-curve hurdle for those unfamiliar with network terminology and infrastructure.
Today many consumers purchase a PC, call their local cable or telephone company for high-speed Internet installation, and magically they are surfing the World Wide Web with minimal effort and limited personal interaction. However, this scenario is not a typical occurrence for test and data acquisition (DAQ) engineers. Configuring instrumentation interfaces, setting addresses, defining subnets with multiple network interface cards (NICs), and selecting hubs and switches are more likely to become commonplace.
To begin, let'
s review some background on network communications, the standard on which it is based, how individual devices are identified, and other configuration essentials.
Network communications are based on a well-defined standard established by the International Organization for Standardization (ISO), a standard that is commonly referred to as the Open Systems Interconnect (OSI) model. Think of any network, not just Ethernet, as a stack with each layer building on the one below it (Table 1).
|
|

Table 1. The OSI Networking Model |
Ethernet is one of the most common selections for the network'
s physical layer and clearly the choice for the computer industry. This layer specifically identifies how nodes on the network communicate with one another at the lowest level.
The physical layer specifies the wiring, voltages, and other characteristics required to allow computers to send messages to one another. In the ISO OSI model, Ethernet actually fulfills the functionality of two layers: Layer 1 and Layer 2. Other physical layers that many engineers are familiar with include token ring, asynchronous transfer mode (ATM), and controller area network (CAN).
TCP/IP
The transmission control protocol/Internet protocol (TCP/IP) is a set of communications protocols defined for the Advanced Research Projects Agency Network (ARPANET), the
first operational packet-switching network. Today, these protocols form the basis of all Internet communications.
Within the OSI model, IP is found in the Layer 3, which addresses how messages are transferred from machine to machine on a network. The most familiar protocols are user datagram protocol (UDP) and TCP. They specify how hosts are addressed, how messages find their way between hosts, and how the general formats for messages are determined.
TCP and UDP are collectively known as Layer 4 and primarily concerned with transporting data. UDP is a connectionless protocol for sending messages, and messages sent over UDP are sometimes referred to as datagrams.
UDP has the advantage of a low message overhead, but it is not as reliable as TCP. UDP is primarily used for sending temporary data that causes no errors if some or all of the data sent is lost, such as streaming audio.
There are instances, however, where UDP is useful for a test engineer. LXI instrumentation, for example, uses UDP transmissions for broadcasting messages when performing device discovery. UDP also can be advantageous in situations where a limited number of nodes are on the network, minimizing the possibility of packet collisions and lost data.
TCP, in contrast, is connection-oriented, setting up a persistent connection between two hosts; this approach is well proven and quite reliable. Reliable in this case means that an application that sends a message via TCP will know if that message is received at the other end. TCP uses a number of techniques to guarantee delivery such as:
• Requiring messages to be acknowledged.
• Automatic retransmission of missed messages.
• Timeouts to detect missed messages and unavailable hosts.
With all of these features, it should not be surprising that TCP has a larger message overhead than UDP, but this is the price we pay for dependable message transmission.
Addressing: MAC and IP
Every Ethernet device in the world has a unique hardware address known as a media access control (MAC) address. Each is 6 bytes long, and the addresses typically are written in hexadecimal format, such as 0007E97CA6A0.
Manufacturers of Ethernet-based instrumentation as well as other products such as NICs and switches must purchase a range of MAC addresses from the IEEE. Then, the manufacturer assigns an individual address to every Ethernet product. Using this approach ensures that there is a unique identifier for every device.
Each MAC address then is mapped to an instrument-specific TCP/IP address that consists of 4 bytes, often shown in dotted-decimal notation such as 10.1.2.9. A collection of services and special computers perform a function called domain name service (DNS), which allows for mapping of mnemonic names and domains to Internet addresses. A separate but related protocol, address resolution protocol (ARP), helps to map IP addresses to MAC addresses on a LAN.
To extend the range of Internet addresses, a new scheme called IPv6 is being deployed. It fixes a number of problems in IPv4, such as the limited number of available addresses. It also improves IPv4 in areas such as routing and network autoconfiguration. However, the existing implementation, IPv4, will be supported for at least the next 20 years.
LXI-based instruments follow this same scheme and require a valid TCP/IP address for proper communications. All devices have a default factory power-on state that includes a TCP/IP address, which typically is derived from the hardware MAC address. Once the instrument is initialized, the user can access the mandatory web browser, enter the default TCP/IP address, and make any changes to this field that might be required. There are a number of ways to configure the address.
Ports
TCP/IP defines a range of ports for communications. Ports create multiple communications points to a single node and keep the conversations separate. They are numbered from 0 to 65,534, with the first 1,024 ports typically called the reserved range.
The reserved ports are used for running well-known services so that other hosts can easily connect to them. For instance, web servers using the HTTP protocol typically run on Port 80.
When a browser such as Microsoft'
s Internet Explorer attempts to connect to a web server, it opens a connection to Port 80 on the designated host. Similarly, SMTP, the protocol used to transmit e-mail on the Internet, uses Port 25. Both ends of a TCP/IP connection require a port. The client side of a connection, such as a browser, typically is assigned a temporary number and is in the higher range of port numbers ( >1,024).
In Figure 1, two copies of Internet Explorer are running on Ports 2004 and 2008 and connected to the same web server (Port 80).
 |
|
Figure 1. Examples of the Usage of Ports |
Sockets
The most common method to send and receive messages using UDP and TCP is with a software object known as a socket. A socket creates a virtual end-to-end network connection between the applications running on the two machines involved. Each end of the connection is identified by the node'
s address and the port number it is using. A connection is fully specified by four elements: client address, client port number, server address, and server port number.
Sockets greatly simplify network-programming tasks. Once a socket connection is opened, the application effectively treats it like a software FIFO. The application uses a simple write function call to send data to the selected target and a simple read function call to retrieve data from the target. Then the operating system handles all details of how the data is communicated to the other side, such as routing, underlying physical connection, and retransmission.
Additionally, socket interfaces are fairly consistent and standardized between operating systems. Windows has a slightly different API than most UNIX-like systems but is similar enough to avoid significant porting issues. Sockets can be seen as the Layer 5 of the ISO OSI model.
When using the IVI instrument driver, which is required by the LXI specification, the user must identify the instrument'
s IP address. The driver is tasked with creating the required sockets and identifying which ports to use for communications.
LAN Configuration
All networked devices, whether instrumentation or computers, must obtain a valid IP address before they can communicate with other devices. There are a number of choices available to acquire an IP address, and all LXI-compliant devices must support the three most common approaches: manual, auto-IP, and dynamic host configuration protocol (DHCP). Most PC users are familiar with these alternatives from the standard network setup screens.
Manual
Manual configuration involves entering the address within a selected range provided by your organization or your choice when dealing with smaller private networks. There are two additional fields that must be entered for manual configuration: the subnet mask and default gateway. The subnet mask determines which subnet, or logical division of a network, the computer is part of. The default gateway identifies the router used by the local computer to gain access to another network.
Auto-IP
Auto-IP configuration is an easy way to obtain an IP address from a DHCP server or from a reserved set of addresses in the absence of the server. The typical range for these addresses is 269.254.0.0 to 269.254.255.255.
An example might involve an LXI instrument connected directly to a host computer with both set to Auto-IP. On power-up, both devices automatically select an IP address such as 169.254.1.10 (LXI device) and 169.254.1.15 (host). The host computer now can use this address in a browser address field to access the device.
DHCP
DHCP involves the host computer accessing a server that contains a list of available addresses. It simplifies network administration because the server automatically assigns addresses from an allotment of available values and eliminates the possibility of duplicate address assignment. The DHCP designates IP addresses, subnet masks, and a default gateway.
Upon power-up, the local computer sends a query to the DHCP server, which then responds with the assigned network parameters. The IP address and other parameters typically are assigned for some finite period of time as determined by the DHCP server; this period is commonly referred to as a lease.
Crossover Cables
Moving from software configuration aspects to hardware, a commonly mentioned concern involves determining when a crossover cable is needed. This is most prevalent when connecting an instrument directly to a computer, and it is similar to connecting two computers directly together.
Crossover cables typically are needed when directly connecting two Ethernet devices without the use of a hub, switch, or router. This is necessary because devices such as routers and switches have their Ethernet plugs reversed to allow connection to these devices without a special cable.
The LXI specification recommends that instrumentation incorporate the Auto-MDIX protocol that allows two Ethernet devices to negotiate their use of the Ethernet transmit and receive pairs, eliminating the need for crossover cables. The specification further requires that any device that does not implement Auto-MDIX must clearly label this exception.
Hubs and Switches
Most test systems are far more expansive than just a connection between one instrument and a PC. When connecting multiple instruments, you must consider some additional aspects, especially when implementing IEEE 1588, a scheme that allows triggering among instruments using Ethernet signals. LXI Class B instruments include IEEE 1588 capability.
An Ethernet hub connects multiple Ethernet devices together as a networked system. These hubs are unsophisticated and increasingly being replaced by network switches.
The hub is a shared-medium device, so any packet that enters the hub, on any port, is broadcast to all other ports. This type of device results in packet collisions on the network affecting overall performance. Additionally, the host computer is responsible for error detection and packet retransmission when an error occurs.
Ethernet switches are similar to hubs except they resolve the performance issues associated with hubs, specifically when more than a few nodes are connected. Switches transmit a received packet only through the port where the device is located, eliminating packet collisions and improving overall system performance.
Switches have become the popular choice primarily due to competitive pricing and improved performance. However, engineers implementing LXI Class B instrumentation must be aware of certain limitations.
The level of synchronization achievable from an IEEE 1588 implementation depends to a large degree on the latency contribution from the network infrastructure. Small configurations composed of only a few devices can use a hub with a fair degree of success because of the broadcast nature of the device.
General-purpose switches are better suited to larger configurations, but they can introduce significant jitter when individual messages are buffered. This issue becomes more of a concern as network traffic increases.
As a result, connecting multiple devices requires a network switch that implements a boundary clock component. The boundary clock effectively allows the synchronization of multiple IEEE 1588 devices without the associated latency fluctuations that are seen in general-purpose switches. The boundary clock acts like any other IEEE 1588 device, permitting all devices to synchronize as if they were connected point to point.
Dedicated Test LANs
Dedicated networks are inexpensive to install and provide the necessary isolation between corporate-wide network traffic and the test system. These characteristics make this approach the logical choice for networked functional test and DAQ installations. This network also can be easily interfaced to the rest of the corporation or the World Wide Web with little effort.
The low cost and ease of use of today'
s switches, routers, and hubs simplify the task of establishing a dedicated network specifically for test purposes (Figure 2). Standard Category 5 (CAT-5) cable is easy to route throughout test bays, inexpensive to use, and available from many commercial sources. Standard RJ-45 connectors also are used, and cable lengths are easy to modify and customize.
 |
|
Figure 2. A Dedicated Test Network |
Isolated instrumentation networks also eliminate many of the logistical issues that can arise when trying to conform to corporate networking and security requirements. Security concerns also can be addressed by prohibiting physical access to outside network connections. One simple and inexpensive way to achieve this is through the use of dedicated NICs.
Conclusion
Adopting any new standard requires some level of change and an associated learning curve, but LXI has the advantage of using the most prolific communications standard in the world as the underlying foundation. Many households have implemented both wired and wireless networks so many of the concepts are familiar. LXI instrumentation will continue to leverage the open standard advantages of Ethernet, offering designers and engineers increased speed, functionality, and flexibility.
About the Author
Jon N. Semancik formerly was the corporate marketing and business development manager at VXI Technology and both secretary and co-chair of the marketing committee for the LXI Consortium. The U.S. Navy veteran has held engineering and project management positions on numerous programs in both the military and commercial sector. Mr. Semancik earned a B.S.E.E. from Fenn College of Engineering and an M.B.A. from the Weatherhead School of Management, Case Western Reserve University.
PDF of this
article
Back to Top
Web Pages Go Beyond the Basics
By Conrad Proft, Agilent Technologies
Imagine being able to monitor a test system from the comfort of your office when the instrument might be 100 feet away, 100 miles, or halfway around the world. That'
s one key benefit of LXI instruments.
The built-in web server gives users an easy way to configure, learn, access remotely, and even assist in programming the product. Virtually no software installation is required to start using the instrument. If your computer has a LAN port, a LAN cable, and virtually any web browser, you can connect to the instrument.
The LXI standard specifies how instruments must behave on the LAN, and there are requirements for the content and presentation of an instrument'
s home web page. This behavior is the foundation of LXI instruments.
If you have worked with one LXI instrument, you already are familiar with others—
much like driving a car or riding a bicycle. You can build a test system with certified instruments from any supplier, and they all behave the same way when connected to the LAN, even if they have drastically different functionality.
Venturing beyond an instrument'
s home page, vendors have the flexibility to implement functionality beyond the LXI specification. This permits product differentiation and lets suppliers achieve competitive advantages. While some manufacturers offer only what is required by the LXI spec, others provide a very comprehensive and even graphical way to control, monitor, and troubleshoot their instruments through the web interface.
Getting Started
Consider a simple case of connecting an LXI instrument directly to a laptop computer with a single LAN cable. All modern-day laptops have LAN interfaces, and those interfaces will likely be Gigabit Ethernet if the computer is less than three years old. With Gigabit Ethernet, you don'
t have to worry about crossover LAN cables because the standard requires auto-sensing of the configuration and modifying itself to connect properly to the peripheral, a feature called Auto-MDIX.
LXI instruments and PCs behave the same way when you connect them to another device over a LAN. First, they both request an IP address from a dynamic host configuration protocol (DHCP) server. Because there is no such server in this simple configuration, both the PC and the instrument revert to Auto-IP, which means they each pick an IP address for themselves. They then broadcast that IP address to each other to make sure it is not the same. If a conflict arises, one device must pick another IP address until no conflict is present.
In this configuration, the IP address always is in the range of 169.254.xxx.xxx. This means the default IP addresses for both the instrument and the PC fall into the same address range, and they can talk to each other.
Many instruments default the last two digits of the IP address to the last three digits of the instrument'
s model number. As a result, the 34980A Switch Measure Unit would default to 169.254.9.80.
The IP address is all you need to connect a web browser to the instrument. Here are just three of the many ways to determine that address:
• Read the IP address from the instrument'
s front panel.
• Use LAN instrument discovery programs, such as ACE and MAX from Agilent Technologies and National Instruments, respectively, to find instrument IP addresses.
• Use the instrument'
s default host name, which usually is a combination of the instrument'
s model number and serial number.
Now run your computer'
s web browser—
whether Firefox, Internet Explorer, Netscape, or another—
and enter the IP address of the instrument into the browser'
s address field. The result looks something like Figure 1.
 |
|
Figure 1. LXI Instrument Home Page |
Manufacturers use different color schemes and templates to give a unique look and feel to their family of instruments, but the information presented on the home page adheres to the LXI spec. It includes product description, serial number, host name, VISA programming string, Telnet port, and socket port.
Buttons on the left give access to additional functionality and information. With View & Modify Configuration, you can change defaults and set up security. Browser Web Control directs you to observing the configuration and controlling the instrument. It also is where vendors find the freedom to create an environment that works best for their particular instrument.
While the home page, the associated communications configuration, and help pages all must be HTML based, the Browser Web Control pages can be Java scripts, Java applets, and flash programs. Java applets and flash programs are executed by browser plug-ins, which means you might have to load some additional software on the PC before controlling instruments using such programs. Most modern PCs come with this software loaded already, but it'
s a simple matter to obtain the plug-in from
www.java.com, for example.
Products such as oscilloscopes and spectrum analyzers generally have a real-time graphical screen that looks very similar to the screen presented on the front panel of the bench version of the instrument. These screens typically are Java applets or flash programs because of the need for real-time updates.
Figure 2 shows examples of screens from various instruments. The user would select various functions simply by clicking on buttons of the virtual front panel.
 |
|
Figure 2. Various Virtual Displays |
Other instruments provide a combination of pop-up dialog boxes, animated representations of switches, and direct control of those switches simply by clicking the image of the switch to actuate it. With up to eight plug-in modules present in the Model 34980A, the user selects which module to view and then can control and configure that module (Figure 3).
 |
|
Figure 3. Direct Control and Feedback |
Other Cool Features
A host of functions are provided that can simplify development and verification of test systems using LXI instruments. In some cases, when you configure the instrument from a web browser, each button push with the mouse actually records which SCPI commands are necessary to configure the instrument for that operation.
For these instruments, there is literally no need for a programming manual. You can copy and paste the SCPI commands from the browser window into a test program. Because many programmers use instrument drivers to avoid learning SCPI, this can be a way to make that learning experience easier. And the net result is a faster executing program.
Having a web browser window open to the instrument also provides the programmer with feedback on the instrument configuration at any time when stepping through a program. This is more difficult to achieve with VXI and PXI products because there typically is no way to open up a soft front panel to the module simultaneously while debugging without causing a conflict with the module driver operating in the user program.
In addition, some instruments, such as the 34980A, also capture SCPI commands and responses when a program is running. If you are using instrument drivers, this can assist you in understanding what the driver is sending to the instrument.
One other feature worth mentioning is the monitoring of relay cycle counts. LXI instruments can keep track of the number of times relays are actuated. The web browser interface allows technicians to monitor test systems passively, while they are operating, to provide preventative maintenance.
Are You Secure?
Instruments that can be operated from a web browser should offer a means to keep instruments from being altered during test system operation. Agilent and other vendors provide security through pop-up dialog boxes that require a password before you can modify the instrument configuration.
In most cases, it is possible to view any configuration, but you are prevented from modifying it without supplying a password. The Agilent 34980A in Figure 3, for example, allows you to view any of the modules during their operation in a test system, even with password protection.
Multiple Browser Connections
Most, if not all, LXI instruments permit multiple users to be connected to the instrument at the same time. There is a limit, of course, due to available memory. In most cases, three or more connections can be made at the same time. This can be very helpful in training and diagnosing problems with remote test systems.
For example, a 34980A was sent from the United States to France for a trade show. It had an associated demo program that was developed by engineers in Colorado and New Jersey.
When the demo program didn'
t work for the engineer in France, he called the engineers in Colorado and New Jersey for help. Because all Agilent facilities are behind the same firewall, access to instruments can take place from any facility.
The engineer in France simply had to plug the instrument into the Agilent Enterprise Network and provide the instrument'
s IP address. All three engineers brought up the unit'
s web pages to view its operation and configuration.
The French engineer ran the test program, and the other two engineers watched the results because they could monitor the SCPI commands sent to the instrument using their web browsers. In the input buffer log, they noticed errors in the SCPI commands.
The engineer in New Jersey ran the same demo program on his computer connected to the instrument in France. It was slower due to the long distance, but the results were positive. The engineer in Colorado noticed the difference between the input buffer log of the two program executions. The problem became obvious: The PC in France was using a different radix configuration where commas and periods were reversed, which caused the errant SCPI commands.
The program was modified to avoid the localization issue, and the demo worked on the PC in France. The entire effort took 30 minutes to straighten out. Remote access provided a significant benefit in troubleshooting this situation.
Other stories are prevalent where engineers can diagnose problems of test systems running in Asia while monitoring them from their location in the United States or Europe. All this is possible simply because the LXI instrument has a built-in web server that allows monitoring and control.
Conclusion
Easy setup, verification, and help with programming using built-in web pages are all significant strengths of LXI instruments. They reduce overall development time and avoid having to complicate a test program to provide the same functionality. Remote access of instruments is key to monitoring the operation of a test system.
LXI instruments are available in both bench and system packages. System packages typically have no front panel. The web pages provide easy interactive control, often better than using the actual front panel of a bench instrument. As a result, you maintain complete control and access to instrument functionality even when using faceless instruments.
Instrument web pages will become even more functional in the future as instrument manufacturers find ways of providing driverless interfaces to instruments via a LAN. Functionality can literally be created from the web pages and accessed by name through the user program. This then will provide the best of both worlds: easy to set up and easy to program.
About the Author
Conrad Proft is a sales development expert for the Next Generation of Test Electronic Measurements Group at Agilent Technologies. He has worked for HP/Agilent for 28 years and spent about half of that time between R&D and marketing, specializing in general-purpose instrumentation for bench and system measurements. Mr. Proft holds both B.S.E.E. and M.S.C.S. degrees. Agilent Technologies, Loveland, CO 80537, 970-679-3009, e-mail:
conrad_proft@agilent.com
PDF of this
article
Back to Top
Climbing the LXI Learning Curve
By Paul G. Schreier, Editor
Just as users are becoming familiar with LXI and its benefits, manufacturers are finding out how to efficiently add LXI capabilities to instruments and build in features users will find attractive and easy to use. So, what are the major product trends you can expect to see in the next months?
In speaking with LXI suppliers, I'
ve found them universally very enthusiastic. They say that the move to LXI is simply so logical and obvious that the spec'
s success is inevitable, and to be a player in the future, they have to be on-board. As a result, they'
ve started making significant investments in terms of time and funding, and we'
re seeing their first fruits. But product development is as yet embryonic.
It'
s important to recognize that LXI is evolutionary rather than revolutionary. That is, it doesn'
t add any fantastic new functions. Everything you could do before you can do now—
but in some cases much more easily.
By itself, "
LXI doesn'
t change the world. There are no earth-shaking measurement capabilities with LXI today,"
commented Mike Kawasaki, senior manager, Next Generation of Tests Initiative at Agilent Technologies. "
There is huge potential, but it will take time. Suppliers need to learn how to best integrate these capabilities into their instruments, and users have a learning curve to climb."
Will LXI take over as the single dominant instrumentation standard? Most people think not. Modular schemes such as PXI and VXI still will have a place. But when it comes to connecting discrete instruments together, that'
s where LXI shines.
According to Chuck Cimino, a marketing director at Keithley Instruments, "
We envision GPIB as falling by the wayside. USB will be viable for single instruments, and LXI will dominate for connecting discrete instruments. In the transition period, we will likely offer all three, perhaps with GPIB as an option."
From the viewpoint of Peter Allen, product marketing manager at Xantrex/Elgar, "
LXI is the next logical thing, and Class C is the next evolutionary step after GPIB."
For a summary of classes, see the sidebar.
Manufacturers as well as users are in a transition period. For instance, Kepco is upgrading its existing power supplies and making LXI an option. To make room in the supplies, they remove the RS-232 interface. In new designs, the company hopes that LXI becomes standard with GPIB as an option.
In the meantime, customers are not forced to build complete LXI systems from scratch; their test systems can evolve. They can build around a LAN backbone, but it is key that they can reuse existing test-system components while moving to LXI.
It'
s difficult to pin down how many people are actually using it because of the lack of LXI-only instruments. LXI is in the mix, but it'
s not yet a primary driver for people buying instruments.
To get some rough indication of where the market is going, consider power supplies from Xantrex/Elgar. For the moment, LXI is available only as an option. Today, 10% of the units the company ships go out with the LXI option, and the number is growing steadily.
Already there'
s a wide selection of LXI-compatible products, and with them, you should be able to put together systems that meet a wide range of requirements. Agilent, a co-founder of the LXI Consortium and presently offering the widest selection of certified products, has tried to include at least one LXI instrument from each of its major product lines.
In general, though, only a few LXI products implement the spec in its full form. That is, most conform to Class C specs as opposed to Class B or A.
This situation is changing with a number of product introductions at AUTOTESTCON this month. Besides an extensive demo in the LXI Consortium booth, a number of member companies will demo LXI in their own booths. One interesting demo will be based on a wireless LAN.
What'
s Getting Customers Excited?
So what aspects of LXI are actual users getting excited about? Vendors report that initially it'
s the LAN interface. Second, they like avoiding investing lots of money in cables and controllers. Third come the software issues such as the capability to program with standard drivers and operate instruments with web-page interfaces. Finally, there are the life-cycle issues.
Today, explained Agilent'
s Mr. Kawasaki, users sometimes actually hate new products because when it'
s time to replace an instrument they have to reconfigure their systems. With LXI, they can purchase a new box and take advantage of its form factor and functions, yet it will be compatible with the existing system.
LXI also is very attractive for building distributed systems, even in an unconventional sense. Engineers like to work from many locations, whether in the office, at home, or in a coffee shop. With LXI, they can access instruments from anywhere, using built-in web pages to run tests and check results.
For instance, Jon Semancik, formerly corporate marketing and business development manager at VXI Technology, reported that Boeing uses a number of the company'
s EX1629 Strain-Gage Boxes, a model built to be LXI compliant but not yet officially certified, to test the wings of its 787 Dreamliner. Similarly, Jochen Wolle, a software development manager at Rohde & Schwarz, explained that for EMC applications people want control of a test receiver inside a shielded chamber. Rather than route standard cables into this protected area, the LAN connection can be based on fiber optics.
For power supplies, noted Xantrex/Elgar'
s Mr. Allen, the LAN approach can be very attractive. Many power-supply applications require sense leads on the DUT to help compensate for voltage drops in the cables, and these leads usually are designed for a couple of volts.
But, what if a missile system is located at a distance on the launch pad, resulting in large voltage drops that can be difficult to deal with? Although the test engineer must be far away, the power supply need not be. With LXI, you can simply put a LAN connection close to the missile and not worry about the control computer being too close. Similarly, engineers working in a wafer fab wouldn'
t have to dress in a clean-room suit to debug a test setup.
LXI has other attractive features in specific industries. Physical size can be an issue, particularly when working with microwave signals or in switching high currents such as in the automobile industry, reported Bob Stasonis, sales and marketing manager at Pickering Interfaces.
Some microwave relays are so large that only two or three can fit on a PXI card, and a system will need multiple cards and even multiple chassis. That requires lots of plumbing, which, in turn, affects insertion loss and VSWR. With LXI, the company can offer better specs and use larger, lower-cost relays. In this way, users have switching that is inexpensive to scale up.
The Integrated Web Page
The first round of LXI instruments has been dominated by Class C units that are upgrades of existing designs. Some vendors previously had Ethernet-based instruments, even some with built-in web pages. But they weren't standardized, so interconnecting them could require significant time.
But even at this lowest level of compliance, the LXI spec leaves considerable room for interpretation and enhancements. As a result, manufacturers are taking different approaches to how they deal with it. Some implement the very minimum to get a unit certified; others add special features.
.jpg) |
.jpg) |
| Actual Front Panel (top) and Replica Built-In Web Page (bottom) of Keithley’s Model 2810 RF Signal Analyzer
|
Even so, Class C units have much to offer. One core feature is the integrated web page. LXI has fairly minimal requirements in this regard, and here manufacturers can add interesting features.
With Keithley'
s Model 2810 Signal Analyzer, users can view a remote version of the analyzer'
s front panel on a PC. The web page closely resembles the instrument'
s actual front panel and display in what Keithley terms a lively remote interface. Also, multiple users can view the instrument'
s front panel simultaneously.
Perhaps an engineer in a lab wants to ask colleagues elsewhere for their opinion of certain test results. In an educational setting, an instructor can set up the instrument and, instead of the students crowding around it trying to get a peek at the settings and results on the display, they all can have the instrument display appear on their PCs.
The web page also will have an impact on how users program instruments. "
With that web interface, we think it likely will be possible to eliminate ancillary software for many sequential or analytical applications,"
added Keithley'
s Mr. Cimino. For complex test applications, users will still want a test executive. But for simple sequential tasks, the web page gives customers alternatives to big software applications.
For its LXI switching networks, Pickering wrote a Java applet that allows users to set switches at random. Some of their customers find that they don'
t have to write any code; they just manipulate the switches on the web page.
Similarly, Agilent points to how time can be saved when setting up its Model 34980 Switch. On a PC screen, users can visually click through a series of tasks. The software contains a logging capability so that you first click through the tasks, then ask for the commands to generate code from this listing capability.
The situation is somewhat different with power supplies, and Kepco still is tinkering with their web-page design. For now, that page basically lets you set all power supply parameters. The company'
s plan with its bipolar supplies, though, is to implement a list command to program waveforms on a point-by-point basis in a sort of basic function generator.
|
EX2500 LXI-VXI Gigabit Ethernet Slot-0 Interface
From VXI Technology |
Interestingly, one thing that Kepco discovered is that more than one person can try to control the same power supply at the same time, which would lead to the instrument locking up. As a result, they have implemented a password feature whereby only one person at a time can take control of the instrument.
Class C is perfectly adequate for many power supply applications. Rise times are orders of magnitude larger than the difference between the control signals of GPIB vs. LXI so precise triggering, as in Class B and A designs, isn'
t mandatory. Further, power supply control is not an application with a large data package so control commands can move quickly across the net.
Even if there'
s lots of bus traffic, a control signal has a delay of only a few milliseconds. According to Mr. Stasonis from Pickering, "
Some customers are afraid of sending control signals over the LAN. But by setting up the network properly, we can alleviate these fears."
Class B: Triggers Over the Ethernet
Those who do need precise triggering will start investigating doing so over the Ethernet. Here LXI works with IEEE 1588, a standard that defines clock synchronization over a LAN.
Because early prototypes of this scheme were developed by Agilent, it'
s no surprise that the company currently has the largest number of instruments with this capability. Until recently, there have been no pure Class B instruments available; they'
ve either been Class C (with no LXI triggering) or Class A (with both LAN-based and hardwired triggering).
There is great potential with this little understood technology. The trick is in implementing it in a particular instrument, and there is a significant learning curve for both users and manufacturers. Some vendors even say that adding 1588 is the most expensive and toughest part of this business.
 |
| Rack of Class A Synthetic Instruments
From Agilent Technologies |
Even so, a growing number of products with IEEE 1588 capabilities will appear shortly. You can get a first-hand look at some at two separate demos at AUTOTESTCON this month. The LXI Consortium is presenting a Class B demo that involves multiple vendors including National Instruments, Rohde & Schwarz, and Agilent. Agilent is showing the power of timing synchronization through a new trigger box and the capability of its MXA Spectrum Analyzer and MXG Signal Generator to communicate through peer-to-peer capabilities.
Class B adds some unique features such as peer-to-peer communications without sending signals over a wired bus. It would be useful, for instance, to have an RF signal generator send a stimulus and then notify a spectrum analyzer directly to take a measurement without having to involve a central controller.
A small program inside each box could send signals back and forth as the two instruments step through a series of frequencies. Users could download a list of frequencies, have each instrument run on its own time, and tell the central controller when that task is done. This approach would take traffic off the bus and speed up system-wide communications.
Class A: The Wired Trigger Bus
Currently, the only Class A products are available from Agilent and VXI Technology. The Class A wired trigger bus (WTB) plays a large role in letting engineers integrate LXI into existing test setups and makes LXI compatible with legacy hardware while allowing people to ease into these new technologies. This is part of the philosophy behind VXI Technology'
s EX2500, an LXI-VXI Gigabit Ethernet Slot-0 Interface.
 |
| Rohde & Schwarz FSL Spectrum Analyzer With Class C Plus Capability |
For the moment, all of Agilent'
s Class A products can be used to build synthetic instruments. These modules, building blocks rather than complete traditional instruments, include a digitizer, a downconverter, a waveform generator, and an upconverter.
One distinguishing feature they all share is the lack of a front panel: Everything is controlled via software. By combining these modules in various ways, users can emulate traditional instruments or create specialized instruments. The reusability of modules in different measurement scenarios reduces the total lifetime costs of a test system by extending its longevity and provides obsolescence protection.
Much is said about the cost of GPIB cables, and while LAN cables are inexpensive, WTB cables aren'
t throwaways. One of the few suppliers is VXI Technology, whose Class A triggering cables cost from $158 to $475 in distances from 0.5 m to 20 m. The connectors are expensive because they are 25-way microD connectors with shielding.
Class C + WTB = Class C Plus
While Class A instruments must include both the WTB and IEEE 1588 triggering, several vendors have developed Class C instruments that add the WTB but not IEEE 1588. They'
re more than Class C but don'
t qualify as Class A, so some vendors refer to them informally as Class C Plus instruments.

One such supplier is Rohde & Schwarz, whose FSL Spectrum Analyzer has been certified with its LXI hardware trigger. It has a slot that accepts an option card populated with an FPGA that implements the routing of the trigger signals across the WTB.
In addition, there is room on this FPGA to accommodate hardware support for the IEEE 1588 clock synchronization and time-based triggering. With these counter registers for clock implementation and hardware comparison of timestamps, Mr. Wolle said the IEEE 1588 implementation achieves accuracy of between 10 to 20 µs where a pure software scheme would work at 100 to 150 µs.
C&H Technologies is adding the WTB to the EM405-8, an M module carrier already approved as a Class C instrument, to make it another Class C Plus box. Interestingly, the EM405-8 is not a product upgraded to LXI. The company planned to include Ethernet capability and designed it from the ground up for Class C operation.
Reference
1. Dewey, M., "
LXI Instrument Classes,"
LXI ConneXion, January 2006, pp. 8-11.
About the Author
Paul G. Schreier is a technical journalist and marketing consultant working in Zurich, Switzerland. He was the founding editor of Personal Engineering & Instrumentation News, served as chief editor of EDN Magazine, and has since written articles in countless technical magazines. He earned a B.S.E.E. and a B.A. in humanities from the University of Notre Dame and an M.S. in engineering management from Northeastern University. e-mail:
paul@pspr.biz
For More Information
on a wide selection of LXI-compatible products
www.rsleads.com/715ee-176
PDF of this
article
Back to Top
LXI Makes Smart Instruments Possible
By Paul F. Franklin, Keithley Instruments
Smart instruments that do more work and
relieve the burden on test system designers are becoming more available.
These instruments incorporate a number of advanced functions, including
the capability to make complex measurements and control timing and
sequencing.
Smart instruments also can perform highly sophisticated data analysis
that helps transform raw data into useful information. These and other
capabilities greatly improve the performance of test systems while
simplifying setup, debugging, and troubleshooting.
However, while instruments are becoming smarter, none have reached the
level of intelligence most users would like. One factor limiting the
development of smart instruments is cost. Defining, designing, and
producing truly smart instruments increase development cost, time to
market, and product cost.
As a result, instrument makers must strike a balance between the
market'
s demand for less expensive but more intelligent products and the
need to bring products to market faster. For smart instruments to truly
make an impact, instrument makers must demonstrate how they can reduce
the total cost of test before users will be willing to pay more.
Technical considerations also limit the development of smart
instruments. Instruments typically must interface with other equipment
and software as part of a complete test system. Because few test systems
are configured exclusively with one vendor'
s products, the limitations
associated with other components and the interfaces may restrict the
overall level of possible improvement.
Major instrument manufacturers recognized that current technology and
standards limited their capability to provide smarter instruments at
lower total cost. This realization played a major role in the formation
of the LXI (LAN eXtensions for Instrumentation) Consortium. LXI-compliant
instruments provide a number of capabilities that improve the prospects
for the development and deployment of smart instruments.
The Power of LXI
The key features of LXI that make smart instruments possible include
the following:
●
A LAN interface featuring a defined
standard network configuration, a Web page for network configuration,
and a discovery mechanism for locating LXI devices on a network.
●
A Web interface consisting of a set of
standard Web pages that provides information about the instrument, a
standard way to configure the LAN interface, and other features.
●
Timing and synchronization based on IEEE
1588 that synchronizes real-time clocks in each device and can be used
to timestamp data or initiate time-based triggers.
●
An IVI-compliant instrument driver.
●
Peer-to-peer messaging from one LXI device
to another that implements LAN triggering and supports a short data
payload.
●
A uniform trigger model and event structure.
These features provide a powerful toolbox
for vendors developing smarter instruments, especially when combined
with test-script programming that will be available in next-generation
instruments.
Smart Instruments at the Interface
Besides being a key factor in making smart instruments possible, LAN
connectivity can simplify maintenance and support. For example, the LAN
interface provides centralized maintenance monitoring in which the
calibration and maintenance status of all instruments can be monitored
and tracked from a remote location. This capability also allows remote
asset tracking of instruments.
Firmware upgrades also are easier because they can be installed over the
network. In addition, in-house and vendor technical support personnel
can diagnose problems remotely over the LAN, saving the time and expense
of sending a technician to the instrument location. Finally, users can
share and administer licenses for advanced features over the network.
All these features can reduce support, maintenance costs, and downtime.
The basic Web pages recommended by the LXI specification make
instruments easier to integrate and use, but they do not fully
demonstrate the potential of a full-featured Web interface. Web
technologies such as Asynchronous JavaScript and XML (AJAX) and Java
applets can provide a rich, responsive, and easy-to-use Web interface
with relatively modest memory and processing power requirements.
Potential features include full instrument configuration and control,
tabular or graphic data display, extensive user help, and wizard-style
guidance for common tasks.
An enhanced Web interface can provide several benefits, including the
following:
●
Web pages that can be viewed on any browser
from a remote computer.
●
The ability to operate an instrument from
anywhere in the world.
●
No requirement to install software on a
remote computer.
●
No software version conflict issues because
the Web interface is always the correct version for the instrument.
●
Instruments without a front-panel display or
a simple one that still can provide an intuitive user interface.
●
Embedded Web-based help to eliminate hunting
for lost manuals or CDs.
Embedded Applications
In addition to the capabilities provided by enhanced Web pages,
smart instruments can include embedded applications with capabilities
rivaling those of discrete applications normally installed and executed
on a test- system controller. The peer-to-peer capability of the LAN
interface means these applications can involve multiple instruments,
allowing small to medium test systems to be constructed without the
traditional system controller.
For example, two instruments could be controlled by an embedded
application to perform I-V characterization of four-terminal devices.
The instrument running the application could use peer-to-peer LAN
messaging to control the second instrument and collect data for display
on a Web page.
Another benefit of embedded applications is the smaller impact on end
applications due to changes in the operating system, I/O libraries, and
related software and utilities. In traditional systems, application
programs running on a separate computer or controller demand maintenance
because they must be retested when those components are updated.
In contrast, Web browsers change less frequently and maintain strict
backward compatibility. This translates into reduced maintenance by the
vendor, which, in turn, means fewer updates and revisions for the user.
Embedded applications also provide an architectural advantage. A typical
application program generally involves interactions between the program
logic itself, an instrument driver, an I/O library that supports
instrument communications, and the instrument firmware.
Although there are benefits to this type of layered architecture, it
also can increase development time and cause maintenance problems. An
error in the logic or changes to the instrument can require revisions to
all components in the system.
However, with an embedded application, all the necessary logic is
contained within the instrument, reducing development time and
maintenance. For example, consider a simple application developed to run
on a separate controller. The application has a graphical user interface
that allows the user to select the measurement range of an instrument.
The application uses the IVI driver provided with the instrument and the
VISA I/O library to manage communications with the instrument.
Such an application will have logic to check the validity of the user'
s
range selection in multiple software components. There will be
range-checking logic in the user interface logic and perhaps in the main
program logic, the instrument driver, and the instrument itself.
However, in the case of an embedded application with the same
functionality, all the logic is contained within the instrument so
updates become simpler and there is no danger of having incompatible
versions of separate components. A further improvement is possible by
using a single-range check function within the instrument that is called
whenever range validation is required. This eliminates the redundant
software code entirely, an ideal solution that is not practical in the
stand-alone application.
Some system designers may be concerned about the performance of embedded
Web-based applications, especially Java applets. However, many
techniques are available to optimize the performance of embedded
applications.
In addition, because discrete application programs often use layered
architectures, data and commands must pass through each layer, often
requiring buffering and reformatting to conform to the standards for
each layer. These steps incur extra processing overhead that slows
throughput.
However, embedded applications have total control over the data flow
from instrument to application. All aspects associated with data and
command flow can be fully optimized because there is no need to conform
to IVI driver or VISA I/O library formatting standards. For that reason,
performance of a Web-based application can be superior to a stand-alone
application program implementation.
Scripting Boosts Performance
Adding script-processing capability to smart instruments can greatly
improve performance because it supports the concurrent operation of
multiple instruments. In a traditional controller-based test system,
instruments can experience significant idle time while waiting for the
controller to process data from another instrument before sending the
next command. Each step in the test program may require several commands
be sent to each instrument to prepare for the next step.
With script-processing instruments, each instrument'
s portion of the
test program can be transferred to it prior to execution. The
instruments then can be sequenced through their individual programs
using LAN triggers, time-based triggers, or hardware triggers to keep
the instruments synchronized and minimize the delay between steps.
In high data-rate or large data-set applications, instruments can
post-process data, compressing large data sets or performing
sophisticated analysis before the data is transferred to the controller,
easing controller or network throughput issues. Scripting and
concurrency also can benefit applications that are not controller or
network limited. Here, complex problems can be broken into manageable
pieces that run independently but also collaborate to solve the larger
problem.
In addition to scripting, features incorporated into the LXI standard
such as IEEE 1588 clock synchronization, peer-to-peer messaging, and LAN
triggers will offer users the ability to develop concurrent test and
measurement systems.
Scripting Enables Event-Driven Testing
One strategy for accelerating testing, which avoids bottlenecks in
conventional test system architectures, is event driven testing. In this
approach, test code embedded in the UUT collaborates with smart
instruments to run a series of tests at the fastest possible test
execution rate.
The smart instruments are pre-loaded with appropriate test scripts. Once
the test cycle has been initiated, the UUT starts and controls the
sequence of tests. The UUT can sequence tests using control signals of
various types, including hardware trigger lines, Ethernet
communications, or some other communications bus.
While this strategy is only applicable to sophisticated UUTs, it
provides additional benefits. For example, since the UUT has access to
internal data and state information, it is possible to optimize test
selection and speed without interaction from a system controller.
Preloading test scripts and other configuration information into smart
instruments can eliminate controller and communications bottlenecks,
improving overall test throughput.
Scripting and Extensible Instruments
Test scripts are an ideal way to extend the functionality of an
instrument beyond its base set of functions. Because scripts are
executed within the instrument itself, their performance is better, and
timing is more deterministic than for an application running on a remote
or system controller, regardless of the communications bus used.
For an instrument manufacturer, deploying example programs and small
application solutions as scripts greatly reduces its development effort.
Normally, such an example program would have to be written in multiple
programming languages to suit the needs of various users.
However, when written as a script, it is usable by all users, regardless
of their choice of programming language. Writing, testing, and
documenting a single example are much easier than supporting multiple
versions. Lowering the cost of developing and deploying examples and
applications ultimately reduces the total cost of test.
The Future of LXI and Smart Instruments
Several significant enhancements and additions are planned for
future LXI specification releases that will further enhance the ability
of instrument makers to provide smarter instruments. LXI Identification
is a mechanism for obtaining a detailed description of an instrument and
its capabilities from the instrument via the LAN interface. Upon
request, the instrument will provide an XML document with a structured
description of the instrument. This capability is intended to provide an
enhanced version of the *IDN? query currently implemented in all SCPI-
based instruments.
LXI Resource Management will provide a protocol for managing access to
instrument functions and data from multiple clients or controllers. GPIB-based
systems, for example, are limited to a single active controller at any
time.
LXI systems have no such inherent limitation. LXI instruments with
multiple channels or subsystems can be shared by multiple applications
or controllers. A power supply with four independent outputs can be used
simultaneously for four different test programs. LXI Resource Management
also will provide the tools to prevent inadvertent or improper access to
a device when it already is in use.
The IEEE 1588 Working Group is pursuing version 2.0 of the
specification. When it is released, LXI will require compliance with the
version 2.0 specification for LXI Class B devices. IEEE 1588 V2 provides
significant enhancements relevant to test and measurement applications.
One important change is support for much better timing accuracy.
Conclusion
Smart instruments offer the potential to lower the total cost of
test by performing more of the work for users. Limitations in prevailing
test-system architectures and communications buses have, until recently,
prevented smart instruments from achieving their full potential. LXI
technologies and programmable instruments are combining to break through
the limitations of the past and allow smart instruments to shine.
Planned LXI enhancements will accelerate this trend.
|
Putting Smart
Instruments to the Test
The capabilities and benefits
of smart instruments can be demonstrated by considering a
test system designed to make pulsed RF measurements on an
RFIC power amplifier. Testing is done in short pulses (2 ms)
to avoid overheating and thermal effects so timing and
synchronization are critical design factors.
Existing Setup
The existing test setup consists of standard instruments; a
PC; application programs in visual C, VB, or other ADE;
instrument drivers; an I/O library; a GPIB controller and
cables; trigger cables; and a controller and communications
to determine timing (Figure 1).

Figure 1. Existing Setup |
Possible Future Solution
A test system taking advantage of LXI-compliant smart
instruments would include LXI Class B instruments with
scripting, a PC, an embedded application in each instrument,
LAN cables, a hub or switch, and IEEE 1588 timing (Figure
2).

Figure 2. Possible Future Setup |
Benefits
The move to smart instruments benefits both the user and the
instrument supplier: no software, driver, or I/O library
installation and maintenance; no version-itis between
software, driver, I/O library, and instrument versions; less
costly than GPIB; no trigger cabling; and better performance
with timing accuracy tied to IEEE 1588 and optimized
communications between application and instruments.
Vendors also can reap some benefits. Applications are
written only once, eliminating the need for several versions
for different ADEs. Also, less maintenance is needed for
operating systems and ADE upgrades.
|
About
the Author
Paul Franklin is the manager of Keithley Labs and chairs the LXI
Consortium'
s Technical Committee. Before joining Keithley Instruments in
2000, he gained more than 20 years of measurement and control industry
experience as an engineer and a manager with electronic controls and
industrial automation firms. Mr. Franklin earned B.S.E.E. and M.S.E.
degrees at Case Western Reserve University and is a member of IEEE, the
IEEE Computer Society, the IEEE Instrumentation and Measurement Society,
and the Association for Computing Machinery. Keithley Instruments, 28775
Aurora Rd., Cleveland, OH 44139, 440-542-8097, e-mail:
pfranklin@keithley.com
FOR MORE INFORMATION
on the LXI specification
www.rsleads.com/714ee-176
PDF of this
article
Back to Top
Network Security for LXI Systems
By Mike Dewey, Editor
The ubiquity of LANs and the low cost of
Ethernet are features that make LXI a very attractive alternative to
other control bus implementations such as GPIB, RS-232, FireWire, or
USB. However, unlike test systems that might be controlled by a
localized network such as GPIB, systems that rely upon a LAN or WAN must
contend with network security issues.
Depending on the specific architecture and span of connections that
comprise a LAN-based test system, the requirements for a secure network
can vary from minimal to extensive, with each LXI device and the
associated system configuration conforming to a company'
s IT security
policies.
The need for secure networks is universally recognized by all IT
organizations. Consequently, implementing an LXI system that uses these
same networks requires that test system designers and users apply the
adopted policies and procedures to maintain the security integrity of
the network.
Understanding Network Security
To understand how the incorporation of an LXI device or the design
of an LXI system might impact the overall security of the controlling
network, it'
s important to know the requirements, policies, and methods
associated with creating a secure network. Protecting the integrity of
your network and the information transported requires addressing the
following questions: How do you protect confidential information that is
available on your private network from those who do not explicitly need
to access it, and how do you protect your network and its resources from
malicious users and accidents that originate outside your network?
Network security involves protecting against a variety of security
threats, which can compromise both your network'
s information and
performance. Several of the more common methods of attack include the
following:
Network Packet Sniffers
Network packet sniffers can gain access to system-level account
information by monitoring nonencrypted packet traffic. User account
information, passwords, and even the integrity of the network can be
compromised by intercepting network traffic packets.
IP Spoofing
IP spoofing involves an attacker who can send erroneous or
embarrassing e-mail to someone within the organization appearing like it
came from a known person within the organization. It also can be used to
access user account and password information. The attack could come from
within the organization or via a Telnet connection to an SMTP port on
the system, which allows the attacker to insert bogus sender
information.
Password Attacks
Password attacks can result in an unauthorized individual
successfully penetrating the network, compromising a network'
s
integrity. For example, an attacker could modify the routing tables of
the network by having all packets routed to him or her for monitoring
prior to delivery, effectively becoming a man in the middle.
Denial-of-Service Attacks
Denial-of-service attacks are somewhat different from other security
breaches because they make a network or service unavailable for normal
use. Basically, by overloading a service or server, they can effectively
shut down a website or server. Depending on a network'
s specific
architecture and topology, it is possible for a denial-of-service attack
to cripple a complete network by flooding it with undesired or useless
data packets and providing erroneous information regarding the status of
network resources.
Application-Layer Attacks
Application-layer attacks are probably the most visible or at least
the most publicized types of security attacks and referred to as
malicious software (malware). Viruses, worms, and Trojan horses are all
types of malware.
A Trojan horse is any program that invites the user to run it but
conceals a harmful or malicious payload. The malicious payload may take
effect immediately and can result in many undesirable consequences, such
as deleting all the user'
s files. More commonly, it may install further
harmful software into the user'
s system to serve the creator'
s
longer-term goals.
Trojan horses also can start a worm outbreak by injecting the worm into
the user'
s local networks. The use of ActiveX controls is a known method
for implementing a Trojan horse attack and one of the main reasons that
many network computers are configured to disallow the use of ActiveX
controls.
A network'
s vulnerability to security breaches or attacks can vary
depending on the network'
s span or perimeter size as well as the number
of access points. Generally, the larger the network, the more vulnerable
it may be to security incursions. Types of networks include the
following:
● LAN—
a network that typically operates within a limited part of a
building'
s floor or area. Private networks also can be classified as
LANs.
● WAN—
a network of subnetworks that interconnects LANs over a
geographical area within a single organization.
● Intranet—
a TCP/IP-based logical network within an organization'
s
internal network structure.
● Internet—
a global, public TCP/IP-based network that may be used to
interconnect WANs and LANs via a switched or a virtual switched
connection using the Internet cloud.
● Virtual Private Network (VPN)—
a network where data packets from an
internal network are transmitted over the Internet using encryption to
ensure a secure connection, resulting in a virtual private connection.
Figure 1 details a simple network that incorporates some of these
network topologies.

Figure 1. Typical Network Configuration |
Regardless of the network'
s complexity or size, establishing a secure
network involves defining the security perimeter of your network; that
is, the outer bounds of the network where traffic is monitored and
managed to and from your network as well as defining what users are
trusted. To ensure network security, all external interfaces to your
network must be controlled including connections to the Internet, PCs,
modems, and other network devices including instruments such as LXI
devices.
All LXI devices conform to current TCP/IP networking standards. When
they are connected to a LAN, they will operate in a defined manner. In
the case of a network fault such as a duplicate IP address, they will
have a benign effect on the network.
Depending on the type and size of a network, various network components
will be used, some for simply interconnecting various network devices
and others that provide not only connectivity but also a level of
security. Network components for interconnecting Ethernet devices, LANs,
WANs, and network infrastructure include hubs, switches, routers, and
firewalls. Routers and firewalls are key components for constructing a
secure network perimeter.
Routers provide the capability to interconnect and isolate multiple
networks via high-level protocols such as T |