Siemens S7-300 Configuration Manual page 68

Configuring the Ethernet CP with STEP 7
3.4 Sending entries for the IP access protection to the Advanced CP using HTTP/HTTPS
Effects of transferring additional access rights
The transfer has the following effects in the IP access control list of the addressed CP:
● The access permissions sent using HTTP/HTTPS can be added to STEP 7 configured
entries, but they cannot be deleted.
● With each list transferred using HTTP/HTTPS, a previous list sent using HTTP/HTTPS
becomes invalid.
Note
A list transferred using HTTP is deleted if there is a loss of power on the CP (power OFF).
Transfer in the update center of Web diagnostics
The most convenient option for the transfer is to use the update center; see section Update
center (Page 194). There, you can download a file of the type "<Accesslist>.txt" directly to
the CP.
Name of the file <Accesslist>.txt
The syntax to be used in the file is as follows:
● Syntax
Make the entries for the transfer to the IP access control list according to the following
syntax:
<IP address>[<-IP address>][<access attribute1>][<access attribute2>][<access
attribute3>]
● Character coding
The character coding must comply with the following standard: ISO/IEC 8859 (ANSI X
3.4-1968)
● Access attribute
Access attribute
A (access)
M (modify)
R (routing)
● Example of notation of entries in a file <Accesslist>.txt
– Assignment of rights for an IP address:
68
192.168.1.44 a r m
192.168.1.45 a
192.168.1.46 a r
Meaning
Access to the station is authorized.
Modifying the IP access control list by HTTP is
permitted.
There is access to the subnet connected to the
other interface of the CP.
Configuring and commissioning S7 CPs for Industrial Ethernet
Configuration Manual, 09/2013, C79000-G8976-C182-13