52
4 FUNCTIONS
4.5 Security
4.5 Security
This function ensures security according to the network environment by restricting access for each communication path to the
FX5 CPU module. The following two access restriction methods can be used.
Page 52 IP filter
Page 54 Remote password
IP filter
This function identifies the IP address of the access source, and prevents unauthorized access.
By setting the IP address of the access source using the engineering tool, IP packets are allowed or blocked. (The IP packets
received from the access source are allowed or blocked. IP packets sent from the own station are ignored.)
Use of this function is recommended when using in an environment connected to a LAN line.
The IP filter is one method of preventing unauthorized access (such as a program or data destruction) from an
external device. It does not completely prevent unauthorized access. Take appropriate measures other than
this function if the safety of the programmable controller system must be maintained against unauthorized
access from an external device. Mitsubishi shall not be held liable for any system problems that may occur
from unauthorized access.
Examples of measures for unauthorized access are as follows.
• Install a firewall.
• Install a personal computer as a relay station, and control the relay of send/receive data with an application
program.
• Install an external device for which the access rights can be controlled as a relay station. (Contact the
network service provider or equipment dealer for details on the external devices for which access rights can
be controlled.)
When the "Allow" IP addresses are set to 192.168.1.1 and 192.168.1.2 using the IP filter of the master station No.0:
Only the Ethernet device (1) and device station No.1 can access the master station, and the Ethernet device (2) and device station No.2 cannot access the
master station.
No.0
No.1
192.168.1.2
No.2
192.168.1.3
(1) 192.168.1.1
(2) 192.168.1.5
Industrial switch