Siemens S7-300 - Page 69

Configuring the Ethernet CP with STEP 7
3.4 Sending entries for the IP access protection to the Advanced CP using HTTP/HTTPS
Configuring and commissioning S7 CPs for Industrial Ethernet
Configuration Manual, 09/2013, C79000-G8976-C182-13
69
– Assignment of rights for an IP address range:
192.168.1.47-192.168.1.58 a
– Deleting dynamically transferred entries:
0.0.0.0
– Comments:
# this is a comment
Configuration limits of the file <Accesslist>.txt
The following can be entered:
● up to 16 IP addresses, of these up to 4 IP address ranges
● length of the file: Maximum of 1024 characters
Call using POST request
To transfer additional access control entries using HTTP, use the POST method.
The structure of such a POST request is as follows:
POST /ACL HTTP/1.0\r\n
Host: 192.168.1.11\r\n
Content type: application/x-www-form-urlencoded\r\n
Content length: ....\r\n
\r\n
192.168.1.55 a r m\r\n
The last line contains the actual entry for the IP-ACL according to the syntax and meaning of
the access attributes described above.
Simplified transfer using the cURL program
The cURL command line program, for example, that is available as open source software
allows a simpler notation and allows entries to be made in a list in a text file.
For example, to transfer the <Accesslist>.txt file to a CP with the IP address 172.16.1.180,
you can use entries in the Windows command line as described below. Note the distinction
between the protocol variants HTTP and HTTPS.
● HTTP is enabled on the CP
curl -0 --url 172.16.1.180/ACL --data-urlencode @AccessList.txt