Siemens SINUMERIK 840DE sl Commissioning Manual page 1369

Basesoftware and operating software

Hide thumbs Also See for SINUMERIK 840DE sl:

Table of Contents

server and its client are output. If the connection to the server is poor, a ping command is

issued in order to check the general accessibility situation.

Alternative names:

Authorization level:

Principle of operation

This command opens a port in the firewall to the company network (X130) for a certain time.

The default time is 15 minutes, but this can be changed with the -MINUTES option. The

maximum possible time is 60 minutes.

The port to be opened is specified in the form "PROTO/PORTNR". The protocol can be either

"tcp" or "udp". This is followed by the specification of the hosts from which the port should be

accessible. Several forms are possible here:

● A single IP address: "128.128.12.12"

● A host name (if this can be resolved via DNS), e.g. "server"

● An IP area with net mask specification, e.g. "128.128.12.0/255.255.255.0"

● An IP area with specification of the valid bits, e.g. "128.128.12.0/24"

If the specification of the source host is completely missing, this is normally acknowledged with

an error message. However, an exception is when the "sc openport" command is entered in

a shell opened via SSH. The permitted host is taken from the $SSH_CLIENT environment

variable that contains the IP of the SSH client.

If the opening was successful, an ID number is output in a status message:

sc: Port tcp/25 is open, rule ID is 6620

This ID can be used with "sc closeport" to manually close the port earlier.

Security risk

Note that opening the ports in the firewall can represent a security risk. Only enable the ports

that you actually require.

Note that every accessible service can have security gaps.

Sinumerik 840d sl