Frequently Asked Questions
Updated 10/01/2024Universal Voltage DC Power Switche
Quick-start user's guide • Complete Documentation • Check the specs
Firmware Update
See the overview here - or call (408) 330-5599 for a free trial
Setup
Is there a keypad reference?
How do I set up network with the keypad?
How do I set up the WiFi network?
How do I set up network access in Windows? From a Mac? - Thanks to John McClintock for these Mac tips.
How do I set up port forwarding? Router Port Forwarding example. - Kudos to Mike G
What is the default IP address? How do I reset to defaults? What is the default password?
Where can I find the most complete help and documentation?
Hardware
How is the switch wired internally? What's the schematic? Do you have a .STEP file?
How do I wire the switch? Does the switch support negative or positive ground? What wiring gauge should I use?
What output lugs should I use?
What are the contact ratings?
How are the A & B busses connected? Are the returns tied?
What is the power dissipation?
What are the power requirements?
What are the mounting dimensions?
What is the physical size?
* Please note that the built-in Help is quite extensive and specific to the firmware version. We encourage you to explore it.
E.g. http://pro.digial-loggers.com:5002/ Credentials: admin / 4321
General FAQs
* Note that the built-in Help is quite extensive. Please check it out.
What is the current version of firmware?
Can you develop custom firmware or custom hardware for my app?
What are the CRITICAL and PROTECT functions?
Where can I find more extensive and detailed help?
How can I set up autoping to reboot my modem and router, but have my router to come on later?
Can I set outlets to cycle at different rates?
Can I increase the internal system log size?
How can I get a dry contact relay output?
What's the new Lua Language and Scripting all about?
How can I control and customize the LCD?
How do I enable autoping? Explain the autoping settings
What's syslog? How can I keep an event log?
How do I set up event notifications?
How do I change the NTP servers?
The session timeout is too short. Can I make the session longer?
What is the command-line interface in the SSH shell?
How can I update the firmware via the SSH shell?
How to I install a supported VPN?
How can I clean up old SSL certificates?
How can I install my own certificate?
Fixes
How do I fix: email notification failed: [CURL-EASY][PEER_FAILED_VERIFICATION] SSL peer certificate or SSH remote key was not OK (60)
How do I fix: email notification failed: [CURL-EASY][COULDNT_RESOLVE_HOST] Couldn't resolve host name (6)?
I can't access the controller from another network. Cannot autoping an external server such as 8.8.8.8. How do I fix cross network access?
How do I fix: [CURL-EASY][OPERATION_TIMEDOUT] Timeout was reached (28)? Check the above 3 issues.
How do I fix: Peer certificate cannot be authenticated with given CA certificates (60)?
How do I fix: "failure while reading service directory" when trying to renew a SSL certificate?
When I unplug the Ethernet cable the WiFi quits working.
How do I clear "SECURITY LOCKOUT IN PLACE" when I try to login?
How do I fix a "Host request header not present or not recognized" error when I try to login from a different network?
I am getting "Rejected request from RFC1918 IP to public server address".
I am getting "Possible DNS-rebind attack detected". How do I disable DNS-rebind protection?
External APIs - Communicating with the power controller
How can I connect to Amazon Echo, Alexa, Dot or Tap products?
How can I connect to Google Assistant or Google Home?
How can I access the switch from my own application or remote script? What's the cURL API?
Is this product compatible with legacy plaintext scripts and HTTP control?
How can I control the switch from my own applications?
What is the recommended REST API?
Can I give a non-admin user limited admin access?
Have any SNMP setup tips?
Do you support MQTT?
How can I set up IFTTT?
Do you support HomeSeer?
Do you have a Crestron control module?
Can I use LabVIEW to control DLI power controllers?
Where can I find ASCOM drivers? (updated 9/3/2024)
Do you have a Visual Basic.NET example program? Thanks to Alan Holmes
Do you have a .NET programming example?
Do you have a Java programming example?
Do you have a compiled Windows command line tool or a Perl example?
Do you have a Python programming example?
How can I run a Perl script from LabView?
Where can I find iPhone, iPad, or Android apps for Digital Loggers?
Do you support PowerMan?
Question: | I have a different model: Web Power Switch 7, Ethernet Power Controller II, III, V, or PC-8000 model. Where can I find information? |
Answer: | Jump to the support page here. Don't see what you need? Just give us a call (408) 330-5599. |
Question: | What are the contact ratings? |
Answer: |
All eight internal T-90 Relays are rated at 30/40A DC. Contacts are MOV protected. Relays are RU and CE approved, and rated at 250,000 operations MTBF at 50% load. Case terminals are rated at 25A. Input terminals and breakers are rated at 50. Output breakers are nominally rated at 15A. Other output breakers may be installed by special order. Only stranded wire of appropriate gauge should be used. Terminals must be well torqued. It is wise to recheck torque after completing the installation. Heavy traces and gold plating are used to minimize internal resistance between the terminals and relay contacts, typically 25m Ohms, so internal contact power dissipation is not normally a consideration. For maximum flexibility an internal MOV is provided for arc protection across each contact. Switching a large inrush current, or inductive load? Have a look at this article. |
Question: | What output terminal lugs should I use? What wire gauge? |
Answer: | Any fork or "spade tongue" terminal with a width of .360 or less and a slot of .150 or larger will work fine. Size the barrel to terminal to match your wire gauge. Be careful not to over-torque. This part selector from Digikey may help. |
Question: | What are the mounting dimensions and physical size? |
Answer: | RETMA 1-U form factor, 10" chassis depth not including connectors and keypad. Recommend 13" mounting depth including allowance for terminals and cable bend radius. Reserving a 13" depth will give you 1" front panel clearance and 2" at the back for cabling. The chassis itself is height 1.750", width 17.00", ear-to-ear width 19.00. Front panel keypad extends 0.15" from front panel. SMA WiFi antenna connector extends 0.55" from front panel, not including antenna. Here's STEP file for the chassis. |
Question: | What is the current version of firmware? |
Answer: | Find the revision history here, and firmware update instructions here. |
Question: | How does this model compare to the earlier wired-only models? |
Answer: | These units have both hardwired Ethernet and WiFi, thanks to a more powerful 32 bit CPU from Qualcomm Atheros. The design includes expanded memory for the Atheros including FLASH, EEPROM, and SDRAM. Leveraging open-source code and expanded memory allowed us to add several firmware features including SNMP, HTTPS, SSL, SSH, a REST-like API, Alexa Compatibility and MQTT. The BASIC scripting language has been replaced by Lua. A much more powerful watchdog supervisory processor has been added. Most important, there's good news on price: the new, more powerful ICs are less expensive. Here's a feature matrix comparing the older Taifatech and newer Atheros power models. Courtesy of Mike Gillen |
Question: | Where can I find more extensive and detailed help? |
Answer: |
Click on the Help menu link on the power controller itself. Then click on the on-line help icon. |
Question: | I have a different model: Web Power Switch 7, Ethernet Power Controller II, III, V, or PC-8000 model. Where can I find information? |
Answer: | Jump to the support page here. Don't see what you need? Just give us a call (408) 330-5599. |
Question: | How can I control and customize the LCD? |
Answer: | The LCD can be used to display settings, outlet status, or any message of your choice. You can operate the LCD in "billboard" style, displaying a series of user defined messages. To customize the LCD, you'll want to write a script using the Lua scripting language. You can also use the display to send messages from remote systems (ie. service alert warnings). To send messages remotely, write a script first, saving it in FLASH then start the script from your remote system. Learn more about scripting here. |
Question: |
How can I set up autoping to reboot my modem and router, but have my router come on later? Can I set outlets to cycle at different rates? |
Answer: |
OF course, this can be done via Scripts. However, you can also make the outlets cycle at individual rates by using the REST API or UOM. Log into the power controller and be sure that the REST API is enabled. Go to the Outlets in the REST API. e.g. http://192.1680.100/restapi/relay/outlets/ Select the outlet to set the custom cycle time on. Select the cycle delay setting. Set the custom cycle delay. For example, you can set the modem delay to 15 seconds and the router delay to 45 seconds. In this example, when Autoping cycles the outlets, the modem will come on after 15 seconds and the router will come on after 45 seconds. |
Question: | Is this product compatible with the older (less secure) HTTP plaintext command syntax? |
Answer: |
To use the earlier
HTTP commands
described here and
CURL scripts that use plaintext login, you'll need to enable this
legacy setting on the SETUP page:
|
Question: | What is the default IP address? How do I reset to defaults? What is the default password? |
Answer: |
Follow this procedure to reset to the default IP address of 192.168.0.100:
Press and release the reset button. After about 5 seconds, you will hear a beep, then use the up and down keys to choose the type of reset. The following reset modes are available: 1. Clear lock bits: Clear protection bits only. Other settings are
preserved. The default master login is "admin" and default password is "1234". The default IP is 192.168.0.100. If all settings are reset (the two last 'wipe' reset modes), the Subnet Restriction will be enabled to prevent remote access using the default password. ONLY MACHINES IN THE SAME SUBNET WILL BE ABLE TO CONNECT AFTER RESETTING TO DEFAULTS. Besides setting your computer to a compatible network, you can also use the keypad to set it up. The keypad settings Pro/V222/DC3/ISO32 are slightly different from the keypad settings for the DIN and EPCR models. |
Question: | On initial setup, I can't establish a Ethernet communications from a Windows PC. Help! |
Answer: |
If your default Windows settings won’t access the controller,
follow
these steps to reach the controller’s IP. You'll find a
more extensive explanation
in the user's manual.
Details for setting
up via the keypad can be found here. Before adding an IP, close network programs and browsers. Go to the Network Settings – Local Area Network or use the keyboard shortcut
( <Windows-R> - in the Run... box type “ncpa.cpl” and click OK
). The default user name is "admin" (lower case) and password is “1234” Set the IP address of the unit to your network, then restore your settings. |
Question: | How can I change the NTP servers? |
Answer: |
Log into the unit and choose the External APIs link. If the REST API is not enabled, check the REST API checkbox and press submit. Either: Scroll down to the "Browse the REST API" link Select config Select ntp_peers or enter it manually Eg: http://192.168.0.100/restapi/config/ntp_peers/ Now you can select NTP peer #1 and edit it |
Question: | Can I set the session timeout longer? |
Answer: | Yes Log into the unit and choose the External APIs link. If the REST API is not enabled, check the REST API checkbox and press submit. Scroll down to the "Browse the REST API" link <strong>or enter it manually Eg: http://192.168.0.100/restapi/ Select the auth (Authentication server object) link Select Cookie timeout Eg: http://192.168.0.100/restapi/auth/cookie_timeout/ Enter a time in seconds. The next time you login, the timeout will take effect. |
Question: |
Can I increase the internal system log size? |
Answer: | Yes, but this must be done using the SSH shell. Log into the unit via SSH. The default is 16KB; to make it 64, use these commands: uci set system.@system[0].log_size=64 uci commit system /etc/init.d/log restart *Note that this will clear the log. |
Question: |
How to I install
a supported VPN? |
|||||||||||||||||||||||||
Answer: |
Instructions
and information are in the built-in Help under User-installable
packages. Also in the Complete Online
Documentation - User's Guide under User-installable packages. Below are basic instructions for Tailscale, ZeroTier, NetBird, innernet and.OpenVPN. These must be installed and configured using SSH. See Help for more information.
ZeroTier: FIRST, if you do not have one, prepare a ZeroTier account cd /tmp opkg update opkg install zerotier edit /etc/config/zerotier and write the network ID /etc/init.d/zerotier restart The device appears in the net in the zerotier web UI control panel but isn't authorized (and thus has no IP) Tick the Auth checkbox, and it gains an IP. *The configuration is retained across firmware updates. The package must be reinstalled after firmware updates unless the firmware is 1.13.1.0 or higher and the "Preserve user installed packages" is checked in the Firmware Upload page before the update. Tailscale: FIRST, if you do not have one, prepare a Tailscale account cd /tmp opkg update opkg install tailscale-combined tailscale up You will be prompted to authorize the device (copy the URL and paste into the browser): *The configuration is retained across firmware updates. The package must be reinstalled after firmware updates unless the firmware is 1.13.1.0 or higher and the "Preserve user installed packages" is checked in the Firmware Upload page before the update. NetBird: FIRST, if you do not have one, prepare a NetBird account AND verify the email (activation will otherwise fail). cd /tmp opkg update opkg install netbird netbird up You will be prompted to authorize the device (copy the URL and paste into the browser) *The configuration is retained across firmware updates. The package must be reinstalled after firmware updates unless the firmware is 1.13.1.0 or higher and the "Preserve user installed packages" is checked in the Firmware Upload page before the update. Innernet summary: (requires 1.12.9.0) This release includes two new installable packages, innernet and innernet-server supporting, as of now, Linux and Mac OS only (no Android, Windows, etc.). They enable you to build kernel-mode-routed mesh networks based on the Wireguard protocol, but there's no central server: you need to host it yourself by installing "innernet-server" on a device with a public IP, installing "innernet" and following the documentation (both packages have a text-mode user interface for configuration). The summary is that it may be tricky to configure and limited to UNIX-like systems, but shaves off ~15% of median ping time, reduces RAM usage and CPU load, and isn't controlled by third parties. OpenVPN: cd /tmp opkg update opkg install openvpn Edit the /etc/config/openvpn file https://openwrt.org/docs/guide-user/services/vpn/openvpn/client /etc/init.d/openvpn start *The configuration is retained across firmware updates. The package must be reinstalled after firmware updates unless the firmware is 1.13.1.0 or higher and the "Preserve user installed packages" is checked in the Firmware Upload page before the update. |
Question: |
How can I clean up
old certificates from prior firmware versions? |
Answer: | Beginning with firmware 1.12.14.0, you can get a list of certificates not shipped with the
current firmware via the RESI API. http://192.168.0.100/restapi/config/certificates/all;custom=true/ or curl e.g.: curl -u admin:1234 -H "Content-type: application/json" --digest http://192.168.0.100/restapi/config/certificates/all;custom=true/ You can delete selectively via SSH or the REST API. To delete all certificates not shipped with the current firmware via curl e.g.: curl -u admin:1234 -X DELETE -H "X-Requested-With: XMLHttpRequest" --digest http://192.168.0.100/restapi/config/certificates/all;custom=true/ Alternatively, a full reset will clear them. Perform a complete backup, except uncheck the "Trusted certificate and revocation list store". Perform the full reset (complete wipe). Restore from backup. |
Question: |
How can I install my own certificate? |
Answer: |
Your certificate and key must in PEM format with the certificate being the full chain.
Once created, login via SSH and place them into /etc/uhttpd.key and /etc/uhttpd.crt,
respectively. |
Question: | When I unplug the Ethernet cable, WiFi quits working. |
Answer: |
This happens when the Wired and WiFi are on the same network and subnet. 1. Change the LAN Metric to 1. This resolves most of these issues. (Firmware 1.9.8.0+) If you plan to run the WiFI and Ethernet on the same network continually or still have issues; 2. Change the last character of the WiFi MAC address. e.g. http://192.168.0.100/restapi/network/wireless/mac_address/ Changing the last HEX number is all that is required. |
Question: | How do I fix: email notification failed: [CURL-EASY][COULDNT_RESOLVE_HOST] Couldn't resolve host name (6)? |
Answer: |
1. Verify that "Same subnet only" is unchecked in the General Network Settings 2. Verify that a gateway is entered in Network Settings 3. Verify that a DNS server are entered in Network Settings |
Question: |
How do I fix: [CURL-EASY][PEER_FAILED_VERIFICATION] SSL peer certificate or SSH remote key was not OK (60), Peer certificate cannot be authenticated with given CA certificates (60) or Certificate renewal error "failure while reading service directory". |
Answer: |
If the firmware version is below 1.9.x, then update the firmware to support the latest certificates. If the issue persists, log into the unit via SSH. Type: curl --capath /etc/ssl/certs/ https://acme-v02.api.letsencrypt.org/directory If you get "curl: (6) Could not resolve host: acme-v02.api.letsencrypt.org" then verify that the DNS server(s) are set in setup/networking. If you get "curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.se/docs/sslcerts.html" then type: ls -l /etc/ssl/certs/ You'll likely see the .crt files but no symlinks like 12345678.0 -> XXX.crt. If so, then type or copy/paste: rm -f /etc/ssl/certs/[0-9a-f]*.[0-9] uci delete system.__dliconf_trust_all_known_root_ca_certificates uci commit system sh /rom/etc/uci-defaults/trust-all-known-root-ca-certificates uci: Entry not found < -- This is normal then check that ls -l /etc/ssl/certs/ shows the symlinks have appeared. |
Question: | How do I clear "SECURITY LOCKOUT IN PLACE" when I try to login? |
Answer: |
When you enter an incorrect password or use an old "hidden key" too many times, you may be *locked out. In the Settings page is a "Delays" section. The duration of the security lockout is set there: There are a few ways to end the lockout. Option A. Don't access the unit until the lockout expires There are three ways to end the lockout prematurely without power-cycling. Option B. Press the reset button and choose option 1 or option 6: Press and release the reset button. After about 5 seconds, you will hear a beep, then use the up and down keys to choose the type of reset. The following reset modes are available: 1. Clear lock bits: Clear protection bits only. Other settings are
preserved. Option C. Login via SSH and type: reboot Option D. Login via SSH and type: /etc/init.d/generic_state_server restart * To help prevent lockouts: With each visit to the login page a secret key is generated. If another key is generated because someone else brought up the page after you did, then the key has expired. Before logging in, press the F5 key to refresh the browser if it has been some time since going to the login page. If you make a mistake on the password and press the "back" button on the browser to go back and try again, press F5 to refresh the page and get a new key. If you don't do this, you are using the old key and will get locked out. |
Question: | How do I fix a "Host request header not present or not recognized" error when I try to login from a different network? |
Answer: |
Firmware 1.12.12.0+ supports "Host request header filtering for DNS rebinding protection". Login via a local IP address and check the "Allowed Hostnames setting in the general network settings section. If the top field empty, enter an asterisk ( * ) in and submit the changes. For better security, see below: If the unit is accessible only via a private (e.g. RFC1918) IP address, a malicious site can manipulate its DNS entry to trick your browser into sending a request to the private address. Host header restriction can used to prevent such DNS rebinding attacks. The default permitted list contains just the wildcard "*" for backwards compatibility. To enable the protection, add patterns for hostname(s) you use to address the unit to the list and remove the "*" wildcard. AFTER REMOVING THE "*" WILDCARD, THE UNIT MAY ONLY BE REACHED VIA HOSTNAMES MATCHING THE PATTERNS LISTED, OR BY ITS LOCAL IP. If connectivity is lost, use a local connection as discussed above and use the explicit IP address, which always is an allowed Host header value. Hostname patterns support the following special sequences: "*" stands for any sequence of characters, e.g. "*.example.com" will match "pcr.example.com" and "another.pcr.example.com"; "${hostname}" stands for the current unit hostname (as configured), and will usually be used for as part of a fully-qualified domain name (e.g. "${hostname}.example.com") for uniform configuration between several units. |
Question:/i> | My program used to run fine on an earlier model, but won't run on this one. What can I do? |
Answer: |
It's possible that the program requires legacy login methods
which accept plaintext authentication. Go
to the Setup page and tick the "Allow legacy plaintext login
methods" checkbox, then click "Submit". If the program works, please inform the author that the preferred authentication method is by using the more secure challenge/response mechanism. Have a look at the Rest API here for new development. |
Question: | I can't access the controller from another network. Autoping will not ping an external server such as 8.8.8.8. How do I fix it? |
Answer: |
1.
First make sure the
"Same subnet access only" is unchecked in the General network settings
#route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default 192.168.11.1 0.0.0.0 UG 0 0 0 eth0 192.168.11.0 * 255.255.255.0 U 0 0 0 eth0Only if you don't see a default route and items 1 and 2 are verified, enter these commands into the SSH shell. /etc/init.d/default_route_manager stop /etc/init.d/default_route_manager disable rm /etc/udhcpc-filters/500-divert-default-route-updates /etc/init.d/network restart *Let support@digital-loggers.com know that these default_route changes were made. |
Question: | How do I fix: Rejected request from RFC1918 IP to public server address? |
Answer: |
Log in via SSH and run theese commands: uci set uhttpd.main.rfc1918_filter=0 uci commit uhttpd /etc/init.d/uhttpd restart If it still does not work, type: reboot |
Question: | How do I disable DNS-rebind protection? |
Answer: |
Log in via SSH and run theese commands: uci set dhcp.@dnsmasq[0].rebind_protection=0 uci commit dhcp /etc/init.d/dnsmasq restart To re-enable protection: uci set dhcp.@dnsmasq[0].rebind_protection=1 uci commit dhcp /etc/init.d/dnsmasq restart |
Question: | Can you develop custom firmware for my application? |
Answer: | Gladly. We've done this for many customers. After we agree on a -very specific- project description, we can send you an estimate of the time involved to code, debug and test. In most cases, a kick-off meeting in Silicon Valley is required. |
Question: | Do you support HomeSeer? |
Answer: |
Yes!
Alex Khassapov has created a
plugin for HomeSeer. |
Question: | Can you develop custom hardware for my application? |
Answer: | Gladly. We've done this for many customers. Please call with your requirements. To amortize NRE, practical minimum order quantities are typically 100-1000 units. In most cases, a kick-off meeting in Silicon Valley is required. |
Question: | Do you support PowerMan? |
Answer: | Yes, absolutely. The latest code is added to the tarball. Download the latest User Utility here. |
Question: | What is the blue LCD for? |
Answer: | The blue LCD shows outlet status during power up, the IP address, netmask, outlet names, and other useful information. Time and date stamps for significant events (such as power outages or emergency shutdowns) are also displayed. Using the keypad, you can set up some of the features such as the network settings. You can program this display to display your own messages using the scripting feature. |
If we haven't answered your questions here, please call (408) 330-5599 or send us an email. We'll be glad to help.
© Digital Loggers, Inc. 2005-2024.