Device Access Control (Ip Filter) - Siemens SENTRON PAC4200 Manual

7.3.4

Device access control (IP filter)

The IP filter is a configurable access protection. If the IP filter is activated, MODBUS TCP
commands are only accepted if the remote terminal unit appears in the white list of the
PAC4200.
The white list is a configuration table of PAC4200 in which access rights can be assigned.
The PAC4200 has five configuration tables which allow the user to define device access and
access type for a specific user or group of users.
Figure 7-2 Device access control (IP filter)
Example
PAC4200 with one activated IP filter was configured as shown in the figure above.
● Host 1 (IP: 192.168.100.87) in the subnet (192.168.100.0/24) has read and write access
to the PAC4200.
Reason: In IP filter configuration table 1, the IP address of host 1 was cleared for read
and write access.
● The other hosts (IP: 192.168.100.xxx) in the subnet (192.168.100.0/24) only have read
access to the PAC4200.
Reason: In IP filter configuration table 2, 254 subscribers in the subnet
(192.168.100.0/24) were assigned read access.
PAC4200
System Manual, 05/2019, A5E02316180B-05
Parameterizing
7.3 Protection against manipulation
117