HEIDENHAIN TNC 620 User Manual page 403

HEROS functions | Firewall
Setting
Interface
Report other inhibited packets
Inhibit ICMP echo answer
Service
HEIDENHAIN | TNC 620 | User's Manual for Setup, Testing and Running NC Programs | 01/2022
Meaning
Select the interface
Selection of the eth0 interface usually corresponds to X26 of the MC main
computer. eth1 corresponds to X116.
You can check the interfaces in the network settings on the Interfaces tab. For
main computer units with two Ethernet interfaces, the DHCP server for the
machine network is active for the second, non-primary, interface by default. With
this setting the firewall cannot be activated for eth1 because the firewall and
DHCP server mutually exclude each other.
Activate the firewall with a high security level
All services except for SSH are blocked.
When this option is set, the control no longer responds to a PING request
This column contains the short names of the services that are configured with
this dialog. For the configuration it is not important here whether the services
themselves have been started.
DNC designates the service the DNC server provides via the RPC protocol
for external applications that were developed with the RemoTools SDK (port
19003)
For more detailed information, consult the RemoTools SDK
manual.
LDAPS includes the server on which the user data and the user
administration configuration are saved.
LSV2 includes the functionality for TNCremo, Teleservice, and other
HEIDENHAIN PC Tools (port 19000)
When user administration is active, you can set up only secure
network connections via SSH. The control automatically disables
the LSV2 connections via the serial interfaces (COM1 and COM2)
and the network connections without user identification.
OPC UA designates the service provided by the OPC UA NC Server (port
4840)
SMB only refers to incoming SMB connections, i.e. if a Windows share is
created on the NC. Outgoing SMB connections (i.e. if a Windows share is
connected to the NC) cannot be prevented.
SRI refers to the connections that are used in conjunction with the acquisition
of operating states through the State Reporting Interface option.
SSH stands for the Secure Shell protocol (port 22). As of HEROS 504, LSV2
can be executed securely via this SSH protocol while user administration is
active.
Further information: "User authentication from external applications",
Page 448
VNC protocol means access to the screen contents. If you block this service,
the screen content can no longer be accessed, not even with the Teleservice
programs from HEIDENHAIN (e.g. to create a screenshot) If this service is
blocked, the HEROS VNC configuration dialog shows a warning that VNC is
disabled in the firewall.
10
403