Out-Bound Network Services On The Neta-21; Safe Deployment Of Neta-21 - ABB NETA-21 User Manual

48 Program features

Out-bound network services on the NETA-21


Port Service
21 FTP
25 / TCP SMTP(S)
(or another
configured
port)
80, 443 HTTP,
HTTPS
80 HTTP
123 / UDP NTP
24576 / ABB
UDP Netconfig

Safe deployment of NETA-21


The NETA-21 firmware includes many extra services as follows:
•
NBT NS discovery
•
ABB Netconfig
•
FTP
•
FTPS
•
HTTP
•
Modbus/TCP gateway
•
PC tool gateway
•
NTP
Before deployment of NETA-21 cybersecurity features, you should disable all unwanted
services. By default, the following services are disabled:
•
PC tool gateway
•
Modbus/TCP gateway
•
FTP
•
Modbus/TCP master (By default, no slaves are configured)
Purpose
File Transfer Protocol. Reporting option for sending CSV files over the FTP
protocol to any external server. Not in use until configured.
Simple Mail Transfer Protocol, outgoing e-mail. Also secure version
SMTPS is supported (typically TCP port 587 or 465). NETA-21 can send
email out if the SMTP(S) server settings and email reporting are configured.
By default, the service is not in use.
Two SMTP servers are supported (primary and secondary server). Server
names and outgoing port numbers can be configured in the web UI (Set-
tings –> Network services). To enable the email plug-in, go to Reports –>
Settings –> Add and select E-mail reporting.
Used for reporting data to external portal services. Not in use until config-
ured.
HTTP protocol is used for the Ethernet tool network slave device access, to
access FENA-11/-21 fieldbus modules and BCU-xx control boards over the
Ethernet tool network (typical use case in a local/private network only).
Connection to supported devices established if supported devices are dis-
covered.
Network Time Service.
NETA-21 sends outgoing NTP service packets to "pool.ntp.org" by default
every hour. To configure the setting, go to Settings –> Locale –> Date and
time. If no NTP server is found, the NETA-21 defaults to a manually config-
ured clock setting.
Autodiscovery protocol. By default the NETA-21 sends discovery broad-
casts over the ETH2 interface every minute to discover other ABB devices
(eg, FENA-11 or BCU-xx) in a local network segment. To modify the back-
ground scan setting, go to Settings –> Device interfaces –> Ethernet –>
Settings.