Network Security > DPI > Modbus Enforcer
Network Security
162
RM GUI HiSecOS EAGLE20/30
Release
3.0
09/2015
Function Code Displays the function code list for the DPI Modbus Enforcer rule.
If the value
advanced
is specified in the "Function Type" column, you can
edit the values.
The device applies the DPI Modbus Enforcer rules to the data stream
when the profile is active. The device permits data packets with the
function codes specified in the function code list. Data packets containing
different function codes are rejected by the device. You activate the profile
in the "Profile Active" column.
The device allows you to specify multiple function codes (a function code
list) and for specific function codes additional values (address ranges).
The device allows you to specify the following options for configuring the
function code list:
Specifies the value
readwrite
, readwrite,
programming
or
readonly
in the "Function Type" column. The device enters the related function
codes of the Modbus protocol in the "Function Code" column.
Click the "Function Code Configurator" button to open the "Function
Code Configurator" dialog.
If a value other than
advanced
is specified in the "Function Type"
column, the "Deep Packet Inspection Modbus Enforcer" function
changes the value to
advanced
. Prerequisite: The function type of the
entry is
advanced
.
Otherwise, the device displays a message. Confirm that you agree
with changing the function type to the value
advanced
.
Specify the value
advanced
in the "Function Type" column. Enter one
or more values in the "Function Code" field.
Possible values:
<1,2,..,255>|<0..65535>|<0..65535>
The device permits data packets with the following properties:
Function codes
<1,2,..,255>, Read-Adressbereich <0..65535>
and write address range
<0..65535>
.
– You separate multiple function codes with a comma.
Example:
1,2,3
The device permits data packets with the
following function codes:
1 (Read Coils)
,
2 (Read Discrete
Inputs)
and
3 (Read Holding Registers)
.
– You separate additional values (address ranges) with vertical
lines. Example:
23|128-255|512-1023
The device permits data packets with the following properties:
Function code
23 (Read/Write Multiple Registers
, read
address range
128..255
, write address range
512..1023
1,2,3,4,7,11,12,17,20,24
(default setting for "Function Code" =
readonly
)
1,2,3,4,5,6,7,11,12,15,16,17,20,21,22,23,24
(default setting for "Function Code" =
readwrite
)
1,2,3,4,5,6,7,11,12,15,16,17,20,21,22,23,24,40,42,90,125,
126
(default setting for "Function Code" =
programming
)
1,2,..,255
(default setting for "Function Code" =
all
)
You can find the meaning of the "Function Code" numbers in section
“Meaning of the Function Code values” on page 168.
Parameters Meaning
To Next Page
Loading...