MVI56E-MNETC/MNETCXT ♦ ControlLogix Platform Start Here
Modbus TCP/IP Client Enhanced Communication Module - Client/Server User Manual
ProSoft Technology, Inc. Page 11 of 172
September 20, 2018
1.2 Setting Jumpers
The Setup Jumper acts as "write protection" for the module’s firmware. In "write
protected" mode, the Setup pins are not connected, and the module’s firmware
cannot be overwritten. The module is shipped with the Setup jumper OFF. Do not
jumper the Setup pins together unless you are directed to do so by ProSoft
Technical Support (or you want to update the module firmware).
The following illustration shows the MVI56E-MNETC/MNETCXT jumper
configuration with the Setup Jumper OFF.
Note: If you are installing the module in a remote rack, you may prefer to leave the Setup pins
jumpered. That way, you can update the module’s firmware without requiring physical access to
the module.
Security considerations:
Leaving the Setup pin jumpered leaves the module open to unexpected firmware updates.
You should consider segmenting the data flow for security reasons. Per IEC 62443-1-1, you should
align with IEC 62443 and implement segmentation of the control system. Relevant capabilities are
firewalls, unidirectional communication, DMZ. Oil and Gas customers should also see DNVGL-RP-
G108 for guidance on partitioning.
You should practice security by design, per IEC 62443-4-1, including layers of security and
detection. The module relies on overall network security design, as it is only one component of
what should be a defined zone or subnet.