Using a Global Address for the EtherNet/IP Port
Communications
over Internet
Firewall
Ethernet (EtherNet/IP)
Firewall
IP router
Communications
in intranet
EtherNet/IP port: Global address
Private address
Global address
Private address
Cannot connect to Internet
Cannot connect to Internet
Global address
Private address
IP router
CIP client on a computer,
such as Network
Configurator
Ethernet (EtherNet/IP)
Controller
(required)
Internet
Intranet
Intranet
POWER
PORT2
l
Conditions for Communications Applications
You can use the explicit message communications service over the Internet under the following
conditions.
• A device such as a personal computer (a CIP application including the Network Configurator)
can connect online and communicate over the Internet with an EtherNet/IP port that has a global
address.
•
The TCP port number (44818) or UDP port number (44818) that is used for EtherNet/IP cannot
be used because it is prohibited by a firewall in the communications path.
Precautions for Correct Use
• To set a global IP address for an EtherNet/IP port involves network security considerations. It
is recommended that the user contract with a communications company for a dedicated line,
rather than for a general line such as a broadband line. Also, be sure to consult with a net-
work specialist and consider security measures such as a firewall.
• Some communication applications may not be available depending on the firewall settings
made by the communications company
. If there are communication applications that cannot
be used, be sure to check with your communications company.
• When sending and receiving data over a global address, use secure communications, such
as secure socket communications and OPC UA, that ensure confidentiality and integrity.
8 TCP/IP Functions
8-11
NX-series EtherNet/IP Unit User's Manual (W627)
8-1 Determining IP Addresses
8
8-1-3 Private and Global Addresses