Siemens SIMATIC NET SCALANCE SC646-2C User Manual

Configuring with Web Based Management
4.7 "Security" menu
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
319
• Precedence
Define the sequence in which the IP rules of the firewall are processed (ascending
from 0 ... 999).
• Assign
To assign the IP rules to the selected rule set, activate the setting for the desired IP
rules and click the "Set Values" button.
• Assigned
Shows the rule set to which this IP rule is assigned. The IP rules can also be assigned
to multiple rule sets. If the IP rule is assigned to all rule sets, "all" is displayed.
• Comment
If needed, enter a comment.
4.7.5.8 Pre-defined MAC rules
The WBM page contains pre-defined MAC packet filter rules.
Select which incoming services the interface accepts and also forwards.
If you create your own MAC packet filter rules, these have a higher priority than the pre-
defined MAC packet filter rules.
Description
• Interface
Interface to which the settings relate. The list of interfaces/subnets is dynamic and is
based on the settings from "Layer 3 > Subnet".
• Access to the following MAC services is permitted:
– All
All predefined MAC services, no filtering.
– ARP
Access via ARP to the device or bridged subnets is permitted.
Changes to this setting can have the result that the device is no longer reachable.
– DCP
Access via DCP to the device or bridged subnets is permitted.
– IPv4
Access via IPv4 to the device, bridged or routed subnets is permitted.

Siemens SIMATIC NET SCALANCE SC646-2C Specifications

General

Brand	Siemens
Model	SIMATIC NET SCALANCE SC646-2C
Category	Switch
Language	English

Summary

Security recommendations

General

Authentication

Covers password strength, protection, and user authentication methods like RADIUS.

Certificates and keys

Physical/remote access

Details how to restrict physical and remote access, including button functions and port security.

Description

Function

PLUG

Explains the function of the removable PLUG medium for configuration transfer and backup.

Configuring with Web Based Management

Web Based Management

Describes the integrated HTTP server for Web Based Management (WBM) via HTTPS.

Starting and logging in

Provides steps for establishing a connection to the device and logging into the WBM interface.

System

Passwords

Events

SNMP

Layer 2

Configuration

Provides basic configuration for Layer 2 functions like MAC aging and redundancy types.

Dynamic MAC Aging

Layer 3

Subnets

NAT

Explains Network Address Translation (NAT) methods like IP masquerading and NAPT for connecting different networks.

VRRPv3

Security

Users

Covers creating local user accounts with corresponding rights and configuring password policies.

Roles

Details creating roles with function rights and descriptions for managing user access locally.

Firewall

Covers enabling the firewall, configuring idle timeouts for TCP, UDP, and ICMP, and TCP state checking.

Brute Force Prevention

Details protection against unauthorized access by limiting incorrect login attempts per user or IP.

Upkeep and maintenance

Device configuration with PRESET-PLUG

Restoring the factory settings