Siemens SIMATIC S7-1500 Operating Instructions Manual page 55

Note
Settings are lost after restart
The settings are lost after a restart. To save the setting, you have the following options:
• Use the "iptables-save" and "iptables-restore" commands.
• Install the "iptables-persistent" package.
To check the NAT setting, enter the following command:
iptables -t nat -L
To delete the NAT setting, enter the following command:
iptables -t nat -F
Result
The runtime communication interface is not visible in the external network; the CPU can be
accessed directly via the IP address of the physical Linux Ethernet interface.
To access the Web server, use the IP address of the physical Linux Ethernet interface
"192.168.2.15". Enter the address "https://192.168.2.15" into your browser.
Note
Special features
The IP address of the Web serve, in which the certificate is stored, may differs from the IP
address with which the connection is established. As a result, the browser does not accept
the Web server certificate, which means that an encrypted connection cannot be established
successfully.
Establishing access of an external OPC UA client
If you want the runtime communication interface to be hidden or otherwise not reachable
from outside, you can use control-line commands to configure the Linux NAT table.
This enables access to the OPC UA server from an external PC via the physical Linux
Ethernet interface.
Requirement
You have root privileges.
CPU 1505SP (F) Ready4Linux Version 2.7
Operating Instructions, 05/2019, A5E46864285-AA
Commissioning in STEP 7
5.4 Communication between Linux and CPU
55