4 FUNCTIONS
4.5 Security
53
4
Setting method
1. Set the IP address to be allowed or blocked in the "IP Filter Settings" window of "Security" under "Application Settings".
( Page 139 Security)
A warning is displayed in the following cases.
• When blocking the IP address of the device station set in "Network Configuration Settings" under "Basic Settings" was
attempted
• When a device station is not set in "Network Configuration Settings" under "Basic Settings", and the "Allow" target IP
address is not set in the "IP Filter Settings" window (because the IP filter blocks every IP address)
2. Write the module parameters to the FX5 CPU module.
3. The IP filter is enabled when the FX5 CPU module is powered off and on or reset.
Even if the connection was specified in "Network Configuration Settings" under "Basic Settings" or by a
program, access from the external device is either allowed or blocked according to the setting in the "IP Filter
Settings" window.
Setting target
Allow or block should be set to all IP addresses that connect to the same network. Also, set allow or block to the IP address of
the device station that is registered in "Network Configuration Settings" under "Basic Settings".
The setting details can be registered to the master station and local stations. The setting details are referenced to allow or
block the IP packets received from the device station with the registered IP address.
Operation
Even for the device station registered in "Network Configuration Settings" under "Basic Settings", a station with an IP address
set as blocked becomes a disconnected station. As a result, cyclic transmission and transient transmission are not performed.
Such a station is also displayed as a disconnected station on the "CC-Link IE TSN/CC-Link IE Field Diagnostics" window.
However, Ethernet devices are not displayed on the "CC-Link IE TSN/CC-Link IE Field Diagnostics" window. ( Page 201
CC-Link IE TSN/CC-Link IE Field diagnostics)
• Do not set the IP address of the master station or of a device station as blocked. When a device station is set as blocked
while using line topology, cyclic and transient transmissions cannot be performed on the device stations that are connected
after the device station set as blocked.
• If there is a proxy server in the LAN line, block the IP address of the proxy server. If the IP address is allowed, access from
personal computers that access the proxy server will not be prevented.
• To block access from an external device to another station, block access to the connected station (station connected
directly to an external device) by using the IP filter.
When the "Deny" IP address is set to 192.168.1.2 using the IP filter of the master station No.0:
Only the device station No.1 can access the master station, and the device station No.2 and device station No.3 cannot access the master station.
No.0 No.1: 192.168.1.1 No.2: 192.168.1.2 No.3: 192.168.1.3
To Next Page
Loading...
