Siemens S7-300 - Scaled Password Protection with Security

S7-CP Advanced as Web server: HTML process control
10.2 Security when accessing process data
Configuring and commissioning S7 CPs for Industrial Ethernet
164 Configuration Manual, 09/2013, C79000-G8976-C182-13
TCP port (protocol) to be
opened
Function used
Opening required for
Access in direction
102 (S7) Configuration with STEP 7 via ISO-on-
TCP
PC/PG -> CP
161 SNMP
Network management
PC/PG <-> CP
Security activated - firewall on CP
By operating the firewall of the CP, the required ports of the CP are opened automatically.
10.2.3
Scaled password protection with security
It is generally the case that different groups of people require different types of access to
process data. To protect your process data from unauthorized access, you can restrict
access to the process data to authorized users when you configure the CP.
This access protection also works when accessing via a Web server.
Security enabled
With security enabled, the user administration allows further assignment of roles and rights.
There are system-defined roles that cannot be modified or you can create new user-defined
roles and assign rights to them.
Users that have already been set up are migrated to the expanded user administration when
the security function is enabled. In a migration dialog, you control how the existing entries
are adopted; you will find details in /16/ (Page 232)
Project engineering
In the STEP 7 configuration of the CP you can set scaled access rights for individual users
according to functions in the user administration (see section "User management" parameter
group (Page 57)).
When data on the CP is accessed, there is then a password query.
Note
Renewed logon following CP STOP/START
After changing the mode to STOP/START, it is necessary to log on again on the Web server.