Ethernet Services. Schneider Electric Modicon M258
Publicitate
Publicitate
Ethernet Configuration
Ethernet Services Section 11.1
Ethernet Services
What Is in This Section?
This section contains the following topics:
Topic
Presentation
IP Address Configuration
Modbus TCP Client/Server
Web Server
FTP Server
FTP Client
SNMP
Page
138
EIO0000004135 09/2020
Ethernet Configuration
Presentation
Ethernet Services
The controller supports the following services:
Modbus TCP Server
Modbus TCP Client
Web Server
FTP Server
SNMP
Modbus TCP Slave Device
Ethernet Protocols
The controller supports the following protocols:
IP (Internet Protocol)
UDP (User Datagram Protocol)
TCP (Transmission Control Protocol)
ARP (Address Resolution Protocol)
ICMP (Internet Control Messaging Protocol)
IGMP (Internet Group Management Protocol)
Connections
This table shows the maximum number of connections:
Connection Type
Modbus Server
Modbus Client
EtherNet/IP Target
FTP Server
Web Server
Machine Expert Protocol (EcoStruxure Machine
Expert software, trace, Web visualization, HMI devices)
4
10
8
Maximum Number of Connections
8
8
16
EIO0000004135 09/2020
139
Ethernet Configuration
Each connection based on TCP manages its own set of connections as follows:
1. When a client tries to open a connection that exceeds the poll size, the controller closes the oldest connection.
2. If all connections are busy (exchange in progress) when a client tries to open a new one, the new connection is denied.
3. All server connections stay open as long as the controller stays in operational states ( RUNNING ,
STOPPED , HALT ).
4. All server connections are closed when leaving or entering operational states ( RUNNING ,
STOPPED , HALT ), except in case of power outage (because the controller does not have time to close the connections).
Services Available
With an Ethernet communication, the IEC VAR ACCESS service is supported by the controller.
With the IEC VAR ACCESS service, data can be exchanged between the controller and an HMI.
The NetWork variables service is also supported by the controller. With the NetWork variables service, data can be exchanged between controllers.
NOTE: For more information, refer to the EcoStruxure Machine Expert Programming Guide.
140
EIO0000004135 09/2020
Ethernet Configuration
IP Address Configuration
Introduction
There are different ways to assign the IP address to the added Ethernet interface of the controller:
Address assignment by DHCP server
Address assignment by BOOTP server
Fixed IP address
Post configuration file
has priority over the others.
. If a post configuration file exists, this assignment method
The IP address can also be changed dynamically through the:
Controller Selection tab in EcoStruxure Machine Expert
changeIPAddress function block
NOTE: If the attempted addressing method is unsuccessful, the link uses a default IP address
derived from the MAC address.
Carefully manage the IP addresses because each device on the network requires a unique address. Having multiple devices with the same IP address can cause unintended operation of your network and associated equipment.
WARNING
UNINTENDED EQUIPMENT OPERATION
Verify that there is only one master controller configured on the network or remote link.
Verify that all devices have unique addresses.
Obtain your IP address from your system administrator.
Confirm that the IP address of the device is unique before placing the system into service.
Do not assign the same IP address to any other equipment on the network.
Update the IP address after cloning any application that includes Ethernet communications to a unique address.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
NOTE: Verify that your system administrator maintains a record of assigned IP addresses on the network and subnetwork, and inform the system administrator of any configuration changes performed.
EIO0000004135 09/2020
141
Ethernet Configuration
Address Management
This diagram shows the different types of address systems for the controller:
142
NOTE: If a device programmed to use the DHCP or BOOTP addressing methods is unable to contact its respective server, the controller uses the default IP address. It repeats its request constantly.
The IP process restarts in the following cases:
Controller reboot
Ethernet cable reconnection
Application download (if IP parameters change)
DHCP or BOOTP server detected after a prior addressing attempt was unsuccessful.
EIO0000004135 09/2020
Ethernet Configuration
In the Devices tree, double-click Ethernet:
Ethernet Configuration
EIO0000004135 09/2020
143
Ethernet Configuration
This table describes the configured parameters:
Configured Parameters
Interface Name
Network Name
IP Address by DHCP
IP Address by BOOTP
Fixed IP Address
Ethernet Protocol
Transfer Rate
Description
Name for the network link.
Used as device name to retrieve IP address through
DHCP, maximum 15 characters.
IP address is obtained by DHCP server.
IP address is obtained by BOOTP server.
IP address, Subnet Mask, and Gateway Address are defined by the user.
Protocol type used (Ethernet 2 or IEEE 802.3)
NOTE: If you change the Ethernet Protocol, a power cycle is required before it will be recognized by the controller.
Speed and Duplex are in auto-negotiation mode.
Default IP Address
The IP address by default is 10.10.x.x.
The last two fields in the default IP address are composed of the decimal equivalent of the last two hexadecimal bytes of the MAC address of the port.
The MAC address of the port can be retrieved on the label placed on the front side of the controller.
The default subnet mask is Default Class A Subnet Mask of 255.0.0.0.
NOTE: A MAC address is written in hexadecimal format and an IP address in decimal format.
Convert the MAC address to decimal format.
Example: If the MAC address is 00.80.F4.01.80.F2, the default IP address is 10.10.128.242.
Address Classes
The IP address is linked:
to a device (the host)
to the network to which the device is connected
An IP address is always coded using 4 bytes.
The distribution of these bytes between the network address and the device address may vary.This distribution is defined by the address classes.
144
EIO0000004135 09/2020
Ethernet Configuration
The different IP address classes are defined in this table:
Address Class
Class A
Class B
Class C
Class D
Class E
1
1
1
1
Byte1
0
1
1
Network ID
0 Network ID
1
0
1
1
Network ID
0
1
Multicast Address
0
Byte 2
Host ID
Byte 3
Host ID
Byte 4
Host ID
Address reserved for subsequent use
Subnet Mask
The subnet mask is used to address several physical networks with a single network address. The mask is used to separate the subnetwork and the device address in the host ID.
The subnet address is obtained by retaining the bits of the IP address that correspond to the positions of the mask containing 1, and replacing the others with 0.
Conversely, the subnet address of the host device is obtained by retaining the bits of the IP address that correspond to the positions of the mask containing 0, and replacing the others with 1.
Example of a subnet address:
IP address
Subnet mask
192 (11000000)
255 (11111111)
Subnet address 192 (11000000)
1 (00000001)
255 (11111111)
1 (00000001)
17 (00010001)
240 (11110000)
16 (00010000)
11 (00001011)
0 (00000000)
0 (00000000)
NOTE: The device does not communicate on its subnetwork when there is no gateway.
Gateway Address
The gateway allows a message to be routed to a device that is not on the current network.
If there is no gateway, the gateway address is 0.0.0.0.
The gateway address must be defined on Ethernet_1 interface. The traffic to unknown networks is sent through this interface.
EIO0000004135 09/2020
145
Ethernet Configuration
Security Parameters
This table describes the different security parameters:
Security Parameters
Discovery protocol
FTP Server
Machine Expert protocol
Modbus Server
SNMP protocol
Web Server (HTTP)
WebVisualisation protocol
Description
This parameter deactivates Discovery protocol. When deactivated,
Discovery requests are ignored.
This parameter deactivates the FTP Server of the controller. When deactivated, FTP requests are ignored.
This parameter deactivates the Machine Expert protocol on Ethernet interfaces. When deactivated, every Machine Expert request from every device is rejected, including those from the UDP or TCP connection. Therefore, no connection is possible on Ethernet from a
PC with EcoStruxure Machine Expert, from an HMI target that wants to exchange variables with this controller from Controller Assistant.
This parameter deactivates the Modbus Server of the controller. When deactivated, every Modbus request to the controller is ignored.
This parameter deactivates the SNMP server of the controller. When deactivated, SNMP requests are ignored.
This parameter deactivates the Web Server of the controller. When deactivated, HTTP requests to the controller Web Server are ignored.
This parameter deactivates the Web visualization pages of the controller. When deactivated, HTTP requests to the logic controller
WebVisualisation protocol are ignored.
Default settings
Active
Inactive
Active
Inactive
Inactive
Active
Inactive
146
EIO0000004135 09/2020
Ethernet Configuration
Modbus TCP Client/Server
Introduction
Unlike Modbus serial link, Modbus TCP is not based on a hierarchical structure, but on a client/server model.
The Modicon M258 Logic Controller implements both client and server services so that it can initiate communications to other controllers and I/O devices, and to respond to requests from other controllers, SCADA, HMIs, and other devices. By default, Modbus Server functionality is not active.
Without any configuration, the embedded Ethernet port of the controller supports Modbus server.
The Modbus client/server is included in the firmware and does not require any programming action from the user. Due to this feature, it is accessible in RUNNING, STOPPED and EMPTY states.
Modbus TCP Client
The Modbus TCP client supports the following function blocks from the PLCCommunication library without any configuration:
ADDM
READ_VAR
SEND_RECV_MSG
SINGLE_WRITE
WRITE_READ_VAR
WRITE_VAR
For further information, refer to the Function Block Descriptions. See EcoStruxure Machine Expert
Modbus and ASCCII Read/Write Functions PLCCommunication Library Guide.
EIO0000004135 09/2020
147
Ethernet Configuration
Modbus TCP Server
The Modbus server supports the Modbus requests:
Function Function Code
Dec (Hex)
1 (1)
2 (2)
3 (3)
6 (6)
8 (8)
15 (F)
16 (10)
23 (17)
43 (2B)
–
–
–
–
–
–
Subfunction
Dec (Hex)
–
–
14 (E)
Read digital outputs (%Q)
Read digital inputs (%I)
Read holding register (%MW)
Write single register (%MW)
Diagnostic
Write multiple digital outputs (%Q)
Write multiple registers (%MW)
Read/write multiple registers (%MW)
Read device identification
NOTE: The embedded Modbus server only ensures time-consistency for a single word (2 bytes).
If your application requires time-consistency for more than 1 word, add and configure
a Modbus TCP Slave Device so that the contents of the %IW and %QW buffers are time-consistent in the associated IEC task (MAST by default).
Diagnostic Request
This table contains the data selection code list:
Data Selection Code (hex)
00
01
02
03
04
05 - 7E
7F
Description
Reserved
Basic Network Diagnostics
Ethernet Port Diagnostic
Modbus TCP/Port 502 Diagnostics
Modbus TCP/Port 502 Connection Table
Reserved for other public codes
Data Structure Offsets
148
EIO0000004135 09/2020
Ethernet Configuration
Web Server
Introduction
As standard equipment, the controller provides an embedded Web server with a predefined, builtin website. You can use the pages of the website for module setup and control as well as application diagnostics and monitoring. These pages are ready to use with a Web browser. No configuration or programming is required.
The Web server can be accessed by the web browsers listed below:
Google Chrome (version 65.0 or greater)
Mozilla Firefox (version 54 or greater)
Microsoft Internet Explorer (version 11 or greater)
The Web server is limited to 10 TCP connections
.
The Web server has full access to your application for reading and writing data and controlling the state of the controller. By enabling the Web server, you enable these functions. You can disable the Web server on an interface by deselecting the Web Server active parameter in the Ethernet
Configuration tab ( see page 143 ) .
The Web server is a tool for reading and writing data, and controlling the state of the controller, with full access to all data in your application. However, if there are security concerns over these functions, you must at a minimum assign a secure password to the Web Server or disable the Web server to help prevent unauthorized access to the application. By enabling the Web server, you enable these functions.
EIO0000004135 09/2020
149
Ethernet Configuration
The Web server allows you to monitor a controller and its application remotely, to perform various maintenance activities including modifications to data and configuration parameters, and change the state of the controller. Care must be taken to ensure that the immediate physical environment of the machine and process is in a state that will not present safety risks to people or property before exercising control remotely.
WARNING
UNINTENDED EQUIPMENT OPERATION
Configure and install the RUN/STOP input for the application, if available for your particular controller, so that local control over the starting or stopping of the controller can be maintained regardless of the remote commands sent to the controller.
Define a secure password for the Web Server and do not allow unauthorized or otherwise unqualified personnel to use this feature.
Ensure that there is a local, competent, and qualified observer present when operating on the controller from a remote location.
You must have a complete understanding of the application and the machine/process it is controlling before attempting to adjust data, stopping an application that is operating, or starting the controller remotely.
Take the precautions necessary to assure that you are operating on the intended controller by having clear, identifying documentation within the controller application and its remote connection.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
NOTE: The Web server must only be used by authorized and qualified personnel. A qualified person is one who has the skills and knowledge related to the construction and operation of the machine and the process controlled by the application and its installation, and has received safety training to recognize and avoid the hazards involved. No responsibility is assumed by Schneider
Electric for any consequences arising out of the use of this feature.
150
EIO0000004135 09/2020
Ethernet Configuration
Web Server Access
Access to the Web server is controlled by User Rights when they are enabled in the controller. For more information, refer to Users and Groups Tab Description
To access the Web server you must first connect to the controller with EcoStruxure Machine Expert or Controller Assistant and modify the default user password.
WARNING
UNAUTHORIZED DATA ACCESS
Secure access to the FTP/Web server using User Rights.
If you disable User Rights, disable the FTP/Web server to help prevent any unwanted or unauthorized access to data in your application.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
In order to change the password, go to Users and Groups tab of the device editor. For more information, refer to the EcoStruxure Machine Expert Programming Guide (see SoMachine,
Programming Guide) .
NOTE: The only way to gain access to a controller that has user access-rights enabled and for which you do not have the password(s) is by performing an Update Firmware operation. This clearing of User Rights can only be accomplished by using a USB key to update the controller firmware. In addition, you may clear the User Rights in the controller by running a script (for more information, refer to EcoStruxure Machine Expert Programming Guide memory, but restores the ability to access the Controller.
(see SoMachine,
Programming Guide) ) . This effectively removes the existing application from the controller
EIO0000004135 09/2020
151
Ethernet Configuration
Home Page Access
To access to the website home page shown in the following illustration, type in your navigator the
IP address of the controller, or 90.0.0.1 for a USB connection:
This figure shows the Web Server site login page:
This figure shows the home page of the Web Server site once you have logged in:
152
EIO0000004135 09/2020
Ethernet Configuration
NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial
Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.
WARNING
UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE
OPERATION
Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-
Depth, before connecting the automation system to any network.
Limit the number of devices connected to a network to the minimum necessary.
Isolate your industrial network from other networks inside your company.
Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.
Monitor activities within your systems.
Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.
Prepare a recovery plan including backup of your system and process information.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
Generic Menu Bar
The generic menu bar lets you access the main Web server pages.
The Web Server contains the following pages:
Menu
Home
Documentation
Page Description
Home
Home page of the controller Web server page.
Provides access to the tabs:
Monitoring
Diagnostics
Maintenance
Setup
References Link to the brand site.
EIO0000004135 09/2020
153
Ethernet Configuration
Home Page Menu Descriptions:
:
Menu
Monitoring
Diagnostics
Maintenance
Setup
Submenu
Controller Viewer
Description
Serial Number
Version (firmware, boot...)
Configuration status
Expansion Viewer
Shows the status of expansion modules.
Shows the module with module I/O values.
Oscilloscope
Displays 2 variables in the form of a recorder-type time chart.
Lets you display and modify controller variables.
Controller
Controller status
Ethernet status
Serial
Profibus
FTP
Serial line status
Profibus status
Link to the file system server ( /Usr , /bd0 and /Sys folders)
User Management
Lets you change user password and customize login message.
Users account management: allows you to remove all passwords from the controller and reset user
accounts to their default state.
Clone management: lets you include or exclude user access rights when cloning a controller.
Lets you set the Ethernet and serial line parameters.
Post configuration setup
EthernetIP configurations
Lets you set the EthernetIP configuration files.
The following submenu is visible in each tab:
Submenu
Info
Control
Description
Current Controller information
Reference
Device name
Running state
Allows you to Start or Stop the controller
154
EIO0000004135 09/2020
Ethernet Configuration
The Web server allows you to remotely monitor a controller and its application, and to perform various maintenance activities including modifications to data and configuration parameters, and change the state of the controller. Ensure that the immediate physical environment of the machine and process is in a state that will not present safety risks to people or property before exercising control remotely.
WARNING
UNINTENDED EQUIPMENT OPERATION
Configure and install the RUN/STOP input for the application, if available for your particular controller, so that local control over the starting or stopping of the controller can be maintained regardless of the remote commands sent to the controller.
Define a secure password for the Web Server and do not allow unauthorized or otherwise unqualified personnel to use this feature.
Ensure that there is a local, competent, and qualified observer present when operating on the controller from a remote location.
You must have a complete understanding of the application and the machine/process it is controlling before attempting to adjust data, stopping an application that is operating, or starting the controller remotely.
Take the precautions necessary to assure that you are operating on the intended controller by having clear, identifying documentation within the controller application and its remote connection.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
NOTE: The Web server must only be used by authorized and qualified personnel. A qualified person is one who has the skills and knowledge related to the construction and operation of the machine and the process controlled by the application and its installation, and has received safety training to recognize and avoid the hazards involved. No responsibility is assumed by Schneider
Electric for any consequences arising out of the use of this feature.
EIO0000004135 09/2020
155
Ethernet Configuration
Page Access
This table lists the necessary status of the controller to access different pages:
Menu
Home
Documentation
Monitoring
Diagnostics
Maintenance
Setup
Submenu
Home
References
Controller Viewer
Expansion Viewer
IO Viewer
Oscilloscope
Data parameters
Controller diagnostic
Ethernet diagnostic
Serial diagnostic
Profibus diagnostic
/Usr or /bd0
/Sys X
Post configuration setup X
EthernetIP configurations files
X
X
X
-
X
X
X
-
-
-
X
X
X
Controller State
EMPTY STOPPED
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
RUNNING
X
X
X
X
X
X
-
-
-
-
X
X
X
X
X
HALT
X
156
EIO0000004135 09/2020
Monitoring: Controller Viewer Submenu
The Controller Viewer submenu shows the controller status:
Ethernet Configuration
The Configuration status field can change depending on the controller reference visualized (a
TM258LF42DT in the previous screenshot) and can have the following status:
Configuration Status Description
No error No error detected on the corresponding element.
Error An error is detected on the corresponding element.
EIO0000004135 09/2020
157
Ethernet Configuration
Monitoring: Expansion Viewer Submenu
The Expansion Viewer submenu shows the expansion module status:
158
The following table describes each status code:
20
30
100
200
Status Code
0
10
11
201
202
Description
INACTIVE: module inactive
BOOT: boot state
FWDNLD: firmware download in progress
PREOP: basic initialization
OPERATE: register initialization
ACTIVE: module communication active
ERROR: an error has been detected
UNSUP: unsupported module
NOCFG: no configuration available
EIO0000004135 09/2020
Ethernet Configuration
Monitoring: Data Parameters
Monitoring Web Server Variables
To monitor Web server variables, you must add a Web Data Configuration object to your project.
Within this object, you can select all variables you want to monitor.
This table describes how to add a Web Data Configuration object:
Step
1
2
3
Action
Right click the Application node in the Applications tree tab.
Click Add Object → Web Data Configuration....
Result: The Add Web Data Configuration window is displayed.
Click Add.
Result: The Web Data Configuration object is created and the Web Data Configuration editor is open.
NOTE: As a Web Data Configuration object is unique for a controller, its name cannot be changed.
Web Data Configuration Editor
Click the Refresh button to be able to select variables, this action will display all the variables defined in the application.
EIO0000004135 09/2020
159
Ethernet Configuration
Select the variables you want to monitor in the web server:
160
NOTE: The variable selection is possible only in offline mode.
EIO0000004135 09/2020
Ethernet Configuration
Monitoring: Data Parameters Submenu
The Data Parameters submenu allows you to display and modify variable values:
Element
Add
Description
Adds a list description or a variable
Del Deletes a list description or a variable
Refresh period Refreshing period of the variables contained in the list description (in ms)
Refresh Enables I/O refreshing:
Gray button: refreshing disabled
Orange button: refreshing enabled
Load
Save
Loads saved lists from the controller internal Flash to the Web server page
Saves the selected list description in the controller ( /usr/web or /bd0/web directory)
NOTE: IEC objects ( %IW , %M ,...) are not directly accessible. To access IEC objects you must first group their contents in located registers (refer to Relocation Table
EIO0000004135 09/2020
161
Ethernet Configuration
Monitoring: IO Viewer Submenu
The IO Viewer submenu allows you to display and modify the current I/O values:
162
Element
Refresh
1000 ms
<<
>>
Description
Enables I/O refreshing:
Gray button: refreshing disabled
Orange button: refreshing enabled
I/O refreshing period in ms
Goes to previous I/O list page
Goes to next I/O list page
EIO0000004135 09/2020
Ethernet Configuration
Monitoring: Oscilloscope Submenu
The oscilloscope submenu can display up to 2 variables in the form of a recorder time chart:
Element
Reset
Refresh
Load
Save
Item0
Item1
Min
Max
Period(ms)
Description
Erases the memorization
Starts/stops refreshing
Loads parameter configuration of Item0 and Item1
Saves parameter configuration of Item0 and Item1 in the controller
Variable to be displayed
Variable to be displayed
Minimum value of the variable axis
Maximum value of the variable axis
Page refresh period in milliseconds
EIO0000004135 09/2020
163
Ethernet Configuration
Diagnostic: Controller Submenu
The Controller submenu displays information of the current status of the controller:
164
EIO0000004135 09/2020
Diagnostic: Ethernet Submenu
The Ethernet submenu displays Ethernet communication information:
Ethernet Configuration
The Reset Statistic button sets the Ethernet statistics to 0.
EIO0000004135 09/2020
165
Ethernet Configuration
Diagnostics: Serial Submenu
The Serial submenu displays the serial line communication information:
The Reset Statistics button sets the statistics of the serial connections to 0.
Diagnostics: Profibus Submenu
The Profibus submenu is available for controllers with PCI module. It displays the Profibus communication information:
166
EIO0000004135 09/2020
Ethernet Configuration
Maintenance Page
The Maintenance page provides access to the /usr , /bd0 and /sys folders of the controller flash
:
Index of /usr or /bd0 :
Index of /sys :
WARNING
UNINTENDED WEB SERVER AND CONTROLLER BEHAVIOR
Do not modify any of the files in the /usr and /sys directories.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
EIO0000004135 09/2020
167
Ethernet Configuration
Setup: Post Conf Submenu
The Post Conf page allows you to update the PostConf
file saved on the controller:
168
Step
1
2
3
Action
Click Load.
Modify the parameters ( see page 239 )
.
Click Save.
NOTE: The new parameters will be considered at next Post Configuration file reading
.
EIO0000004135 09/2020
Ethernet Configuration
Setup: Ethernet IP configurations File Submenu
The file tree only appears when the Ethernet IP service is configured on the controller.
Index of /usr or /bd0 :
File
My Machine Controller.gz
My Machine Controller.ico
My Machine Controller.eds
Description
GZIP file
Icon file
Electronic Data Sheet file
Maintenance: User Management Submenu
The User Management submenu displays a screen that allows you to access two different actions:
User accounts management:
Allows you to manage user accounts management, removing passwords and returning the user accounts on the controller to default settings.
Click Disable to remove passwords on the controller.
Click OK on the window that appears to confirm. As a result:
Users no longer have to set and enter a password to connect to the controller.
FTP and HTTP connections accept anonymous user connections.
NOTE: The Disable button is only active if the current user has administrative privileges.
Click Reset to default to return the user accounts on the controller to their default setting state.
Click OK on the window that appears to confirm.
NOTE: Connections to FTP and HTTP are blocked until a new password is set.
EIO0000004135 09/2020
169
Ethernet Configuration
Clone management: allows you to control whether user rights are copied and applied to the target controller when cloning a controller with a USB key.
Click Exclude users rights to exclude copying user rights to the target controller when cloning a controller.
NOTE: By default, the users rights are excluded.
Click Include users rights to copy user rights to the target controller when cloning a controller. A popup prompts you to confirm copying the user rights. Click OK to continue.
170
EIO0000004135 09/2020
Ethernet Configuration
FTP Server
Introduction
Any FTP client installed on a computer that is connected to the controller (Ethernet or through USB port), without EcoStruxure Machine Expert installed, can be used to transfer files to and from the data storage area of the controller.
NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial
Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.
WARNING
UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE
OPERATION
Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-
Depth, before connecting the automation system to any network.
Limit the number of devices connected to a network to the minimum necessary.
Isolate your industrial network from other networks inside your company.
Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.
Monitor activities within your systems.
Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.
Prepare a recovery plan including backup of your system and process information.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
NOTE: Make use of the security-related commands which provide a way to add, edit, and remove a user in the online user management of the target device where you are currently logged in.
The FTP server is deactivated by default.
FTP Access
Access to the FTP server is controlled by User Rights when they are enabled in the controller. For more information, refer to Users and Groups Tab Description
To access the FTP server you must first connect to the controller with EcoStruxure Machine Expert or Controller Assistant and modify the default user password.
Files Access
See File Organization ( see page 28 )
.
EIO0000004135 09/2020
171
Ethernet Configuration
FTP Client
Introduction
The FtpRemoteFileHandling library provides the following FTP client functionalities for remote file handling:
Reading files
Writing files
Deleting files
Listing content of remote directories
Adding directories
Removing directories
NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial
Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.
WARNING
UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE
OPERATION
Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-
Depth, before connecting the automation system to any network.
Limit the number of devices connected to a network to the minimum necessary.
Isolate your industrial network from other networks inside your company.
Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.
Monitor activities within your systems.
Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.
Prepare a recovery plan including backup of your system and process information.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
For further information, refer to FtpRemoteFileHandling Library Guide.
172
EIO0000004135 09/2020
Ethernet Configuration
SNMP
Introduction
The Simple Network Management Protocol (SNMP) is used to provide the data and services required for managing a network.
The data is stored in a Management Information Base (MIB). The SNMP protocol is used to read or write MIB data. Implementation of the Ethernet SNMP services is minimal, as only the compulsory objects are handled.
SNMP Server
This table presents the supported server objects:
Object sysDescr
Description
Text description of the device
Access
Read
Value
SCHNEIDER M258 Fast Ethernet
TCP/IP
1.3.6.1.4.1.3833.1.7.36
sysObjectID Points to the product reference in the private MIB sysUpTime Time elapsed since the controller was last turned on sysContact Data item used to contact the manager of this node sysName Node administrative name sysLocation Physical location of the product sysService Indicates the type of service provided by this product
Read
Read
Read/Write -
-
Read/Write TM258LF42DT
Read/Write -
Read 79
The size of these character strings is limited to 50 characters.
The values written are saved to the controller via SNMP client tool software. The Schneider Electric software for this is ConneXview. ConneXview is not supplied with the controller or bus coupler. For more details, refer to www.schneider-electric.com.
EIO0000004135 09/2020
173
Descarcă
Link public actualizat
Linkul public către chat-ul tău a fost actualizat. You may view and manage your chat links after registration here.
Link public document
Publicitate