Opening Ports On The Advanced Cp During Configuration; Operation With Firewall And Proxy Server - Siemens S7-300 Configuration Manual

10.2.1

Opening ports on the Advanced CP during configuration

To be able to use the IT functions of the Advanced CP, the relevant ports of the CP must be
enabled in the STEP 7 configuration.
● Enable the Web server
● For a security CP: Permit access only with HTTPS
● Activate FTP server
As default, the ports are enabled. To disable the ports, deselect the options.
10.2.2

Operation with firewall and proxy server

Operating a firewall
The operation of an internal company network (Intranet) is normally protected against
external, uncontrolled access by a firewall. Operation with a firewall is possible if the IP
addresses set in the HTML pages can pass through the filter mechanism of the firewall.
Opening ports on the communications partner
To make use of the full functionality of the Advanced CP, make sure that the relevant ports
of the communication partner of the Advanced CP are opened. The following table lists the
ports and functions:
TCP port (protocol) to be
opened
80 (HTTP)
443 (HTTPS)
443 (HTTPS)
25
20 and 21
Configuring and commissioning S7 CPs for Industrial Ethernet
Configuration Manual, 09/2013, C79000-G8976-C182-13
Port 80 of the CP is thereby enabled.
Port 443 of the CP is thereby enabled.
To achieve this, ports 20/21 of the CP are opened for FTP/FTPS.
Function used
Access to an HTML page on the
Advanced CP or on a Web server, for
example using Web diagnostics.
(Advanced CP or Web server is HTTP
server);
Configuration of the security functions to
allow diagnostics functions on the CP.
(SCT)
Access by the mail client to a mail server;
(Advanced CP is SMTP client, mail server
is SMTP server)
File access:
Access to files on the Advanced CP using
FTP/FTPS functions (Advanced CP is the
FTP server or FTP client).
S7-CP Advanced as Web server: HTML process control
10.2 Security when accessing process data
PC/PG (Web browser with firewall) -> CP
PC/PG -> CP
CP -> mail server with firewall
(opened on the mail server)
FTP client with firewall -> CP
CP -> FTP server with firewall
Opening required for
Access in direction
163