HEIDENHAIN TNC 640 User Manual page 819

MOD Functions | Firewall
Firewall settings
Option Meaning
Active Switching the firewall on and off
Selection of the eth0 interface usually corre-
Interface:
sponds to X26 of the MC main computer.
eth1 corresponds to X116. You can check
this in the network settings in the Inter-
faces tab. On main computer units with
two Ethernet interfaces, the DHCP server
is active by default for the second (non-
primary) interface for the machine network.
With this setting it is not possible to activate
the firewall for eth1 because the firewall
and the DHCP server exclude themselves
mutually
Report other inhib- Firewall active with high safety level. (All
ited packets: services except for the SSH are blocked)
Inhibit ICMP echo If this option is set, the control no longer
answer: responds to a PING request
Service This column contains the short names of the
services that are configured with this dialog.
For the configuration it is not important here
whether the services themselves have been
started
LSV2 contains the functionality for
TNCremo and Teleservice, as well as
the HEIDENHAIN DNC interface (ports
19000 to 19010)
SMB only refers to incoming SMB
connections, i.e. if a Windows release
is made on the NC. Outgoing SMB
connections (i.e. if a Windows release
is connected to the NC) cannot be
prevented.
SSH stands for the Secure Shell protocol
(port 22). As of HEROS 504, LSV2 can be
executed securely tunneled via this SSH
protocol
VNC protocol means access to the
screen contents. If this service is
blocked, the screen content can no
longer be accessed, not even with the
TeleService programs from HEIDENHAIN
(e.g. screenshot). If this service is
blocked, the VNC configuration dialog
shows a warning from HEROS that VNC
is disabled in the firewall.
HEIDENHAIN | TNC 640 | ISO Programming User's Manual | 10/2017
20
819