Security (Cp 1543Sp-1); Security User; Firewall; Pre-Check Of Messages By The Mac Firewall - Siemens SIMATIC NET ET 200SP Operating Instructions Manual

Configuration

4.9 Security (CP 1543SP-1)

4.9 Security (CP 1543SP-1)
Security functions of the CP 1542SP-1 IRC
You can find a description of the security functions of the CP 1542SP-1 IRC in the
configuration manual of the respective telecontrol protocol, see Documentation references
(Page 113).
Security functions of the CP 1543SP-1
The following description of the security functions only applies to the CP 1543SP-1.
For an overview of the functions, refer to the section Application and functions (Page 13).
To be able to configure the security functions, you need to create a security user; see
section Security user (Page 62).
4.9.1

Security user

Creating a security user
You need the relevant configuration rights to be able to configure security functions. For this
purpose, you need to create at least one security user with the corresponding rights.
Navigate to the global security settings > "User and roles" > "Users" tab.
1. Create a user and configure the parameters.
2. Assign this user the role "NET Standard" or "NET Administrator" in the area below
"Assigned roles".
After logging on, this user can make the necessary settings in the STEP 7 project.
In the future, continue to log on as this user when working on security parameters.
4.9.2

Firewall

4.9.2.1

Pre-check of messages by the MAC firewall.

Each incoming or outgoing frame initially runs through the MAC firewall (layer 2). If the frame
is discarded at this level, it will not be checked by the IP firewall (layer 3). This means that
with suitable MAC firewall rules, IP communication can be restricted or blocked.
62
Operating Instructions, 12/2019, C79000-G8976-C426-05
CP 154xSP-1