Configuring the Ethernet CP with STEP 7
3.4 Sending entries for the IP access protection to the Advanced CP using HTTP/HTTPS
Configuring and commissioning S7 CPs for Industrial Ethernet
68 Configuration Manual, 09/2013, C79000-G8976-C182-13
Effects of transferring additional access rights
The transfer has the following effects in the IP access control list of the addressed CP:
● The access permissions sent using HTTP/HTTPS can be added to STEP 7 configured
entries, but they cannot be deleted.
● With each list transferred using HTTP/HTTPS, a previous list sent using HTTP/HTTPS
becomes invalid.
Note
A list transferred using HTTP is deleted if there is a loss of power on the CP (power OFF).
Transfer in the update center of Web diagnostics
The most convenient option for the transfer is to use the update center; see section Update
center (Page 194). There, you can download a file of the type "<Accesslist>.txt" directly to
the CP.
Name of the file <Accesslist>.txt
The syntax to be used in the file is as follows:
● Syntax
Make the entries for the transfer to the IP access control list according to the following
syntax:
<IP address>[<
-IP address>][<access attribute1>][<access attribute2>][<access
attribute3>]
● Character coding
The character coding must comply with the following standard: ISO/IEC 8859 (ANSI X
3.4-1968)
● Access attribute
Access to the station is authorized.
M (modify) Modifying the IP access control list by HTTP is
R (routing) There is access to the subnet connected to the
other interface of the CP.
● Example of notation of entries in a file <Accesslist>.txt
– Assignment of rights for an IP address:
192.168.1.44 a r m
192.168.1.45 a
192.168.1.46 a r
To Next Page
Loading...
