Sending Entries For The Ip Access Protection To The Advanced Cp Using Http/Https - Siemens S7-300 Configuration Manual

Configuring the Ethernet CP with STEP 7

3.4 Sending entries for the IP access protection to the Advanced CP using HTTP/HTTPS

Note
Topology display in STEP 7 V5.5
To be able to use the full range of the topology display, the "Report system errors" function
needs to be used.
This is automatically taken into account by STEP 7 and has no effect on the "Report System
Error" function of other devices in the S7 station.
This is only possible if you execute the function "Save and compile" in HW Config after
enabling the "Topology display" option. Due to the "Report system errors" function that is
enabled automatically, "Save and compile" then requires more time.
Note the language settings for display. You can configure the language settings in the
SIMATIC Manager (menu command "Options > Language for display devices"). During
compilation, you receive an error message if the language currently being used in STEP 7 is
not included in the languages installed on the project for the display devices.
Automatic update / "Update interval"
If you select the "Enable" option, the CP updates the displayed Web pages at the selected
intervals.
Range of values for the update interval 1 to 999 s
Security configuration - HTTPS (HyperText Transfer Protocol Secure)
Enabling security has the following effects:
● With the "Allow access only via HTTPS" option, Web data is transferred encrypted. This
option opens port 443 of the CP. Port 80, on the other hand, is blocked for access.
● In the rights administration of the user administration, specify which users or roles for this
module have which Web access. If the "Allow access only via HTTPS" option is enabled,
the entries apply to HTTPS otherwise to HTTP.
See also section "Security" parameter group (STEP 7 V5.5) (Page 63).
3.4 Sending entries for the IP access protection to the Advanced CP
using HTTP/HTTPS
Significance and how it works
The IP access protection in the IP access control list or in the firewall rules can be
supplemented by dynamic entries in CP operation. The behavior must be distinguished as
follows:
66
Configuring and commissioning S7 CPs for Industrial Ethernet
Configuration Manual, 09/2013, C79000-G8976-C182-13