EDS*ELIT FTP/s Quick Start Guide

Transcription

1 EDS*ELIT FTP/s Quick Start Guide Document Version 2.1 May 24, 2004 Copyright 2004 Cleo Communications In this document Process Map Overview Configure Your Client-Side Firewall Configuration Host Mailbox <send+receive> Action Appendix: EDS*ELIT Trading Partner Requirements Process Map The EDS*ELIT Self-Signed Certificate (included) Client-Side Firewall Considerations Server-Side Network Address Translation SSL Implicit Mode Retrieving Files from EDS*ELIT Aborting a File Transfer If just getting started with LexiCom, refer to the General Process Map of the LexiCom User s guide. Then follow these steps to setup a connection to the EDS ELIT host: Configure Your Client-Side Firewall Activate the EDS ELIT host. Optionally configure the host to meet your file transfer requirements Configure the mailbox with your username and password. Modify the action with your SenderID/ReceiverID. Run the <send+receive> action. 1

2 Overview EDS*ELIT allows trading partners to exchange electronic business documents using the standard protocol, FTP. All standard FTP commands are supported, as referenced in the LexiCom User s Guide, Generic FTP and FTP/s host section. The majority of the settings are pre-configured for you as required by the EDS*ELIT server. For background information on the client-side requirements unique to EDS*ELIT trading partners, see the Appendix at the end of this document. Configure Your Client-Side Firewall Note: this section refers to your firewall settings, and not settings within LexiCom. You may want to contact your systems administrator with questions pertaining to your firewall. Open the following outbound ports in the client-side firewall through NOTE: These firewall requirements are not applicable to trading partners who connect to EDS*ELIT via Windows Dialup Networking to an ISP. Also, trading partners having trouble connecting to EDS*ELIT through a firewall can temporarily bypass the firewall for testing purposes by using Dialup Networking. 2

3 Configuration Activate the EDS ELIT pre-configured host (see below). 1. Click the Preconfigured tab in the tree pane to the left. 2. Right-click the EDS ELIT host. 3. Select Clone and Activate. The entire pre-configured EDS ELIT branch will be copied and made active, the Active tab will be automatically selected in the host tree pane, and the new active EDS ELIT host will be automatically selected in the tree. 4. If desired, type a new host alias in the Host Alias field in the content pane and click [Apply]. 3

4 Now configure the host tree as follows: Host Select EDS ELIT host in the tree pane located to the left. On the General tab: 1. The Server Address is pre-configured to ftp.elit.eds.com 2. The Port # is pre-configured to If you are using dial-up to connect, modify the Connection Type (refer to Configure System Options and/or Setup a Dial-up Connection in the LexiCom User s Guide). 4. Optionally modify the Default Directories as required by your file transfer or EDI software: Uncheck System Default for the directories you wish to change. Click to browse and locate the appropriate directory. 4

5 On the FTP tab: The EDS host comes pre-configured with the Security Mode set to SSL Implicit, the Default Data Type set to binary (at the host level but at the action level, EDI actions are set to ASCII), and the Data Channel Mode set to Passive and Substitute Passive IP Address enabled. Additional properties specific to FTP can be configured using the Advanced tab. These properties are described in more detail in the Generic FTP section of the LexiCom User s Guide. 5

6 Mailbox Select mymailbox under EDS ELIT. On the FTP tab: Enter your User Name and Password. The Account field is not applicable and must be left blank. <send+receive> Action (for EDI file transfers) Select send+receive under mymailbox. On the Commands Tab: 6

7 <send+receive> Action (for non-edi file transfers) Select send+receive under mymailbox. On the Commands Tab: 1. Place one or more test files in the outbox\eds ELIT directory. A file sent to the EDS ELIT server need not be an EDI document. 2. Replace the SenderID & ReceiverID with your SenderID and ReceiverID. 7

8 Appendix: EDS*ELIT Trading Partner Requirements This section provides an overview of the client-side requirements unique to EDS*ELIT trading partners. The requirements highlighted in this section are referenced in subsequent sections. We recommend that you read this section in order to obtain a greater understanding of EDS*ELIT file transfer issues. Note: All the settings discussed are pre-set for you in LexiCom as this is a pre-configured host. You do not need to perform any additional set-up based on the following information. The EDS*ELIT Self-Signed Certificate EDS*ELIT requires trading partners to use an EDS-generated (self-signed) CAcertificate for secure FTP transfers. This certificate, which is used during SSL negotiation, guarantees the identity of the server to the client. LexiCom: In Lexicom, EDS is enabled as a trusted-ca by placing the EDS self-signed certificate in the Lexicom\certs folder. More explanation: Typically, a company hosting a secure FTP server will purchase a server certificate from a Certificate Authority (CA) such as Entrust or VeriSign. Trading partners must then specify (from within client software) that they trust the CA who issued the certificate. Sometimes, instead of purchasing a Server Certificate from a CA, a company will create its own server certificate and distribute it to trading partners. This type of selfgenerated certificate is called a self-signed certificate. EDS uses a self-signed certificate, requiring clients to trust EDS as the issuer of its own certificate. Client-Side Firewall Considerations EDS*ELIT requires the client-side firewall to open the following outbound ports. Control port 990 8

9 Data ports through More Explanation: FTP protocol opens a data channel to transfer each file. Traditionally, the client sends a TCP port number (using a PORT command) for the server to connect to. This creates a problem when the client firewall is not configured to allow incoming connections. The PASV command (also issued by the client) allows the server to specify port numbers. Using PASV mode, the server firewall must allow incoming connections whereas the client firewall must allow only simple outbound TCP connections. PASV mode is typically more acceptable to clients, because it does not require the client firewall to open inbound data ports. Server-Side Network Address Translation The EDS*ELIT server physically resides at an IP address that is different from the IP address that is visible and accessible to trading partners. More Explanation: Server-side network address translation (NAT) occurs when a server resides on an IP address that is different than the IP address accessible to trading partners. Most firewalls monitor FTP traffic and actually change the FTP commands on the fly, by changing the non-reachable/internal IP address generated by the FTP server to the external or visible IP address accessible to trading partners. However, firewalls are unable to monitor secure FTP traffic because the secure tunnel that is created between the server and client blocks the view of the firewall. Therefore, firewalls are unable to manage IP addresses within the FTP protocol as they should. The result is that the client must be smart enough to substitute inaccessible IP addresses specified by the server with external, accessible IP addresses. 9

10 SSL Implicit Mode EDS*ELIT allows trading partners to only communicate via secure FTP. It does not allow trading partners to switch between secure FTP and non-secure FTP via the AUTH command. In other words, SSL security is negotiated between client and server by default or implicitly. More Explanation: SSL Implicit security is less common than SSL security using the AUTH command. LexiCom accommodates both variations. Retrieving Files from EDS*ELIT EDS*ELIT does not support the FTP delete command (DELE). Instead, it uses the following creative mechanism for handling file removal from the server. Files are not deleted automatically when downloaded. Instead, they are only marked as retrieved. The user is expected to perform a wildcard GET (GET *) to retrieve new files from the server. The wildcard GET only retrieves files that have not already been marked as retrieved. If a trading partner needs to retrieve an already-retrieved file, this can be accomplished by specifying the exact file name (GET filename), rather than a wildcard. If a trading partner does not know the exact file name on the server, he can perform a DIR to view the complete list of files available for retrieval. After a certain number of days, files that have been marked as retrieved will be deleted by the server. As stated above, the wildcard GET (GET *) will retrieve all files that have not already been marked as retrieved. Optionally, extra parameters can be added after the * which can be used to limit or expand the files retrieved. The optional parameters as documented in the EDS*ELIT Server User s Guide are as follows: f=xxx where xxx specifies a specific ELIT Filename or mask s=xxx where xxx specifies a specific SenderId or mask r=xxx where xxx specifies a specific Reference # or mask d=xxx where xxx specifies a specific DataSetName or mask c=xxx where xxx specifies a specific Control # fd indicates a request to include only files sent using the ReceiveID of FROMDATA all indicates a request to include files that have already been obtained 10

11 sn obtained indicates a request to use system generated DataSetNames A comma should precede each optional parameter specified. So, for example: GET *,s=snb Aborting a File Transfer EDS*ELIT does not support the FTP ABORT command. Note: In Lexicom, selecting the STOP button during a file transfer normally aborts a file transfer by sending an FTP ABORT command to the FTP server. However, this does not work with EDS*ELIT because the ELIT server ignores the FTP ABORT command. When the ABORT command fails, LexiCom will abort after the file transfer that is currently in progress. 11