.. index::
   pair: idcp; cryo
   single: cryo control

=====================================
Insertion Device Cryo control program
=====================================

The source
----------

The cryo control program is currently the only part of the ID Controls project.
If you have full rights to access our software repositories you can check out
the project with this command::

  hg clone ssh://rcsadm@repo.acc.bessy.de//opt/repositories/controls/hg/ID-Controls

If you don't have these rights you can create a copy of the repository with
this command::

  hg clone http://repo.acc.bessy.de/hg/ID-Controls

Note that the following is also described in file "README".

How to compile
--------------

In order to compile the source enter::

  ./configure.sh
  make

How to put the software on the server
-------------------------------------

Sources are distributed with 
`rsync-dist.pl <https://rsync-dist.sourceforge.io/>`_.
You don't have know the details here. You distribute
and activate the software with::

  ./distribute.sh dist -m 'no log message'

How to restart the server
-------------------------

You have to do this when you installed new software or when the server was crashed.
Enter::

  console sioc94c

Note that you have to know the console password for user "tscadm" here.

On the console prompt press CTRL-X (Control key plus "x")

When the boot process is finished press CTRL-E . (Control Key plus "e", then a dot ".") to leave the console.

IP Address translation
----------------------

The system uses a 
`MOXA EDR-810-VPN-2GSFP <https://www.moxa.com/product/EDR-810.htm>`_
Industrial Secure Router to perform network address translation.

A detailed description on how the MOXA box was configured can be found in the
sources of ID Controls. When you have checked out the sources like
described in "The Source" further above, this description can be found in file
"documentation/MOXA.rst".

You can connect to the MOXA box web server at the address 
`ci1s12g <https://ci1s12g.blc12.bessy.de>`_.

.. note ::
   The MOXA box uses TLS 1.0 for https connections with is no longer supported 
   in *any* modern web browser. For this reason, a Debian 9 virtualbox
   virtual machine was created where Firefox still supports TLS 1.0. This 
   virtual machine can be downloaded at http://repo.acc.bessy.de/virtualbox/debian-9-browser/.

If you do so, you may have to add a security certificate exception in your
browser before you can access the web server. Log in as user "admin" and use
the undulator password (known by all people in the insertion device
contol group). *Caution: Do not change the MOXA configuration by mistake*.

IP address translation means that IP addresses configured in the Windows CE
Interface and the PLC of the cryo control device are *not the same* as
the addresses seen by the BESSY network. Here is a list of the IP addresses are
used:

=================================== ================ =============== ======================
*Description*                       *IP Address*     *Network*       *DNS name* 
=================================== ================ =============== ======================
 IP Address of MOXA                 192.168.213.107  ctl.bessy.de    ci1s12g.ctl.bessy.de 
 Internal IP Address of Windows CE  193.149.14.129   (internal)      
 Internal IP Address of PLC         193.149.14.135   (internal)     
=================================== ================ =============== ======================


Note that the network cable that connects the MOXA box to the BESSY network must be attached to port 1 of the MOXA box.

The MOXA box has also configured port forwarding in order to present servers from the internal network to the BESSY network. Here is the setting:

================ ================ =============== ===============  ==============================
*External IP*    *External port*  *Internal IP*   *Internal port*  *Description* 
================ ================ =============== ===============  ==============================
192.168.213.107  5800 tcp/udp     193.149.14.129  5800 tcp/udp     VNC access to Windows CE 
192.168.213.107  5900 tcp/udp     193.149.14.129  5900 tcp/udp     VNC access to Windows CE 
192.168.213.107  2000 tcp/udp     193.149.14.135  2000 tcp/udp     PLC access for EPICS Soft-IOC 
================ ================ =============== ===============  ==============================