Configuring the Ethernet CP with STEP 7
3.3 Setting further CP properties
Configuring and commissioning S7 CPs for Industrial Ethernet
64 Configuration Manual, 09/2013, C79000-G8976-C182-13
The selectable parameters / options are explained below:
● Enable security
As default, the buttons for security configuration are disabled in the individual tabs. To be
able to make security settings, select the "Enable security" check box.
Result:
– The security functions in the individual tabs become active.
– The " Edit > Security Configuration Tool" menu becomes active if, for example, you
create VPN groups or add modules that cannot be configured in STEP 7.
– The "Data migration for security-relevant project data" window opens in which you can
migrate existing access control lists, device users and settings for the time-of-day
synchronization to SCT.
● Start of security configuration
Click the "Run" button to open SCT in an overview mode. Make the security settings you
require.
● Reloading firewall rules
If you click the "Run" button, the reloadable data is generated and loaded on the CP
without causing a stop on the module.
Note
Loss of the security configuration
If you disable the "Enable security" check box again, all the security settings you
have
made are lost and you will need to make them again if you enable the check box again.
The CP is no longer shown in SCT and is removed from the existing VPN groups. The
settings prior to activating security for access control lists, device users and t
ime-of-day
synchronization are restored.
You will find detailed information in the manual /16/ (Page 232) on configuring the security
function
"Web" parameter group
Meaning
The CP provides you with the functionality of a web server for access by means of a web
browser. Certain HTML pages with CP information and diagnostic functions are stored in a
memory area of the CP for this.