Siemens SIRIUS 3RK3 Equipment Manual page 239

Hazardous system state due to unauthorized access via fieldbus
Can Cause Death, Serious Injury, or Property Damage.
Unauthorized access to the safety relay via fieldbus can enable configuration changes and
overriding of safety functions.
To prevent unauthorized access to the safety relay via the fieldbus network, assign a password
for accessing the device in Safety ES. If you operate several safety relays in one fieldbus
network, you must assign a separate password for each safety relay to prevent confusion when
accessing via the fieldbus. In other words, the passwords must not be identical.
Setting the IP parameters with SIRIUS Safety ES
The IP parameters are configured with Safety ES parameterization software and transferred to
the device.
Options and procedures
The SIRIUS Safety ES parameterization software provides various options for assigning the IP
parameters:
• "Properties interface module"
The IP parameters can be set in "Properties interface module" in "Configuration".
Thus, the IP parameters are a part of the configuration that is loaded into the safety relay. This
option is always given.
It is always possible to change the IP parameters in the "Properties interface module" dialog.
• Setting the communication interface
The IP parameters can be assigned during the setting of the communication interface, e.g.
via the menu command "Target system" > "Edit Ethernet node...".
As a result, the IP parameters are saved in the safety relay and the safety relay can be reached
via PROFINET. The configuration can then be transferred via the PROFINET interface.
The requirement for changing the IP parameters when setting the communication interface
is the setting of the parameter "Ethernet addresses - Change authorizations" to "Can be
changed without restrictions". The setting of the change authorizations can be
parameterized in the "Properties interface module" dialog.
Result
The device communicates with the assigned name and the IP parameters assigned by the IO
controller.
The IO controller assigns the IP parameters to the IO device
Requirements
The requirement for changing the IP parameters via the automation system is the setting of the
parameter "Ethernet addresses - Change authorizations" to "Can be changed without
restrictions". The setting of the change authorizations can be changed in SIRIUS Safety ES in the
"Properties interface module" dialog.
SIRIUS 3RK3 Modular Safety System
Equipment Manual, 07/2020, NEB926253002000/RS-AC/006
WARNING
6.6 Integration into PROFINET master systems
Operation
239