Web Server. Schneider Electric Modicon M258

Ethernet Configuration

Web Server

Introduction

As standard equipment, the controller provides an embedded Web server with a predefined, builtin website. You can use the pages of the website for module setup and control as well as application diagnostics and monitoring. These pages are ready to use with a Web browser. No configuration or programming is required.

The Web server can be accessed by the web browsers listed below:



Google Chrome (version 65.0 or greater)





Mozilla Firefox (version 54 or greater)

Microsoft Internet Explorer (version 11 or greater)

The Web server is limited to 10 TCP connections

( see page 139 )

.

The Web server has full access to your application for reading and writing data and controlling the state of the controller. By enabling the Web server, you enable these functions. You can disable the Web server on an interface by deselecting the Web Server active parameter in the Ethernet

Configuration tab ( see page 143 ) .

The Web server is a tool for reading and writing data, and controlling the state of the controller, with full access to all data in your application. However, if there are security concerns over these functions, you must at a minimum assign a secure password to the Web Server or disable the Web server to help prevent unauthorized access to the application. By enabling the Web server, you enable these functions.

EIO0000004135 09/2020

149

Ethernet Configuration

The Web server allows you to monitor a controller and its application remotely, to perform various maintenance activities including modifications to data and configuration parameters, and change the state of the controller. Care must be taken to ensure that the immediate physical environment of the machine and process is in a state that will not present safety risks to people or property before exercising control remotely.

WARNING

UNINTENDED EQUIPMENT OPERATION











Configure and install the RUN/STOP input for the application, if available for your particular controller, so that local control over the starting or stopping of the controller can be maintained regardless of the remote commands sent to the controller.

Define a secure password for the Web Server and do not allow unauthorized or otherwise unqualified personnel to use this feature.

Ensure that there is a local, competent, and qualified observer present when operating on the controller from a remote location.

You must have a complete understanding of the application and the machine/process it is controlling before attempting to adjust data, stopping an application that is operating, or starting the controller remotely.

Take the precautions necessary to assure that you are operating on the intended controller by having clear, identifying documentation within the controller application and its remote connection.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: The Web server must only be used by authorized and qualified personnel. A qualified person is one who has the skills and knowledge related to the construction and operation of the machine and the process controlled by the application and its installation, and has received safety training to recognize and avoid the hazards involved. No responsibility is assumed by Schneider

Electric for any consequences arising out of the use of this feature.

150

EIO0000004135 09/2020

Ethernet Configuration

Web Server Access

Access to the Web server is controlled by User Rights when they are enabled in the controller. For more information, refer to Users and Groups Tab Description

( see page 72 ) .

To access the Web server you must first connect to the controller with EcoStruxure Machine Expert or Controller Assistant and modify the default user password.

WARNING





UNAUTHORIZED DATA ACCESS

Secure access to the FTP/Web server using User Rights.

If you disable User Rights, disable the FTP/Web server to help prevent any unwanted or unauthorized access to data in your application.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

In order to change the password, go to Users and Groups tab of the device editor. For more information, refer to the EcoStruxure Machine Expert Programming Guide (see SoMachine,

Programming Guide) .

NOTE: The only way to gain access to a controller that has user access-rights enabled and for which you do not have the password(s) is by performing an Update Firmware operation. This clearing of User Rights can only be accomplished by using a USB key to update the controller firmware. In addition, you may clear the User Rights in the controller by running a script (for more information, refer to EcoStruxure Machine Expert Programming Guide memory, but restores the ability to access the Controller.

(see SoMachine,

Programming Guide) ) . This effectively removes the existing application from the controller

EIO0000004135 09/2020

151

Ethernet Configuration

Home Page Access

To access to the website home page shown in the following illustration, type in your navigator the

IP address of the controller, or 90.0.0.1 for a USB connection:

This figure shows the Web Server site login page:

This figure shows the home page of the Web Server site once you have logged in:

152

EIO0000004135 09/2020

Ethernet Configuration

NOTE: Schneider Electric adheres to industry best practices in the development and implemen tation of control systems. This includes a "Defense-in-Depth" approach to secure an Industrial

Control System. This approach places the controllers behind one or more firewalls to restrict access to authorized personnel and protocols only.















WARNING

UNAUTHENTICATED ACCESS AND SUBSEQUENT UNAUTHORIZED MACHINE

OPERATION

Evaluate whether your environment or your machines are connected to your critical infrastructure and, if so, take appropriate steps in terms of prevention, based on Defense-in-

Depth, before connecting the automation system to any network.

Limit the number of devices connected to a network to the minimum necessary.

Isolate your industrial network from other networks inside your company.

Protect any network against unintended access by using firewalls, VPN, or other, proven security measures.

Monitor activities within your systems.

Prevent subject devices from direct access or direct link by unauthorized parties or unauthen ticated actions.

Prepare a recovery plan including backup of your system and process information.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

Generic Menu Bar

The generic menu bar lets you access the main Web server pages.

The Web Server contains the following pages:

Menu

Home

Documentation

Page Description

Home

( see page 154 )

Home page of the controller Web server page.

Provides access to the tabs:



Monitoring







Diagnostics

Maintenance

Setup

References Link to the brand site.

EIO0000004135 09/2020

153

Ethernet Configuration

Home Page Menu Descriptions:

:

Menu

Monitoring

Diagnostics

Maintenance

Setup

Submenu

Controller Viewer

( see page 157 )







Description

Serial Number

Version (firmware, boot...)

Configuration status

Expansion Viewer

( see page 158 )

Shows the status of expansion modules.

IO Viewer ( see page 162 )

Shows the module with module I/O values.

Oscilloscope

( see page 163 )

Data parameters

( see page 159 )

Displays 2 variables in the form of a recorder-type time chart.

Lets you display and modify controller variables.

Controller

( see page 164 )

Controller status

Ethernet ( see page 165 )

Ethernet status

Serial

( see page 166 )

Profibus

( see page 166 )

FTP

( see page 167 )

Serial line status

Profibus status

Link to the file system server ( /Usr , /bd0 and /Sys folders)

User Management

( see page 169 )

Lets you change user password and customize login message.



Users account management: allows you to remove all passwords from the controller and reset user

 accounts to their default state.

Clone management: lets you include or exclude user access rights when cloning a controller.

Lets you set the Ethernet and serial line parameters.

Post configuration setup

( see page 235 )

EthernetIP configurations

files ( see page 169 )

Lets you set the EthernetIP configuration files.

The following submenu is visible in each tab:

Submenu

Info

Control

Description

Current Controller information



Reference





Device name

Running state

Allows you to Start or Stop the controller

154

EIO0000004135 09/2020

Ethernet Configuration

The Web server allows you to remotely monitor a controller and its application, and to perform various maintenance activities including modifications to data and configuration parameters, and change the state of the controller. Ensure that the immediate physical environment of the machine and process is in a state that will not present safety risks to people or property before exercising control remotely.

WARNING

UNINTENDED EQUIPMENT OPERATION











Configure and install the RUN/STOP input for the application, if available for your particular controller, so that local control over the starting or stopping of the controller can be maintained regardless of the remote commands sent to the controller.

Define a secure password for the Web Server and do not allow unauthorized or otherwise unqualified personnel to use this feature.

Ensure that there is a local, competent, and qualified observer present when operating on the controller from a remote location.

You must have a complete understanding of the application and the machine/process it is controlling before attempting to adjust data, stopping an application that is operating, or starting the controller remotely.

Take the precautions necessary to assure that you are operating on the intended controller by having clear, identifying documentation within the controller application and its remote connection.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: The Web server must only be used by authorized and qualified personnel. A qualified person is one who has the skills and knowledge related to the construction and operation of the machine and the process controlled by the application and its installation, and has received safety training to recognize and avoid the hazards involved. No responsibility is assumed by Schneider

Electric for any consequences arising out of the use of this feature.

EIO0000004135 09/2020

155

Ethernet Configuration

Page Access

This table lists the necessary status of the controller to access different pages:

Menu

Home

Documentation

Monitoring

Diagnostics

Maintenance

Setup

Submenu

Home

References

Controller Viewer

Expansion Viewer

IO Viewer

Oscilloscope

Data parameters

Controller diagnostic

Ethernet diagnostic

Serial diagnostic

Profibus diagnostic

/Usr or /bd0

/Sys X

Post configuration setup X

EthernetIP configurations files

X

X

X

-

X

X

X

-

-

-

X

X

X

Controller State

EMPTY STOPPED

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

X

RUNNING

X

X

X

X

X

X

-

-

-

-

X

X

X

X

X

HALT

X

156

EIO0000004135 09/2020

Monitoring: Controller Viewer Submenu

The Controller Viewer submenu shows the controller status:

Ethernet Configuration

The Configuration status field can change depending on the controller reference visualized (a

TM258LF42DT in the previous screenshot) and can have the following status:

Configuration Status Description

No error No error detected on the corresponding element.

Error An error is detected on the corresponding element.

EIO0000004135 09/2020

157

Ethernet Configuration

Monitoring: Expansion Viewer Submenu

The Expansion Viewer submenu shows the expansion module status:

158

The following table describes each status code:

20

30

100

200

Status Code

0

10

11

201

202

Description

INACTIVE: module inactive

BOOT: boot state

FWDNLD: firmware download in progress

PREOP: basic initialization

OPERATE: register initialization

ACTIVE: module communication active

ERROR: an error has been detected

UNSUP: unsupported module

NOCFG: no configuration available

EIO0000004135 09/2020

Ethernet Configuration

Monitoring: Data Parameters

Monitoring Web Server Variables

To monitor Web server variables, you must add a Web Data Configuration object to your project.

Within this object, you can select all variables you want to monitor.

This table describes how to add a Web Data Configuration object:

Step

1

2

3

Action

Right click the Application node in the Applications tree tab.

Click Add Object → Web Data Configuration....

Result: The Add Web Data Configuration window is displayed.

Click Add.

Result: The Web Data Configuration object is created and the Web Data Configuration editor is open.

NOTE: As a Web Data Configuration object is unique for a controller, its name cannot be changed.

Web Data Configuration Editor

Click the Refresh button to be able to select variables, this action will display all the variables defined in the application.

EIO0000004135 09/2020

159

Ethernet Configuration

Select the variables you want to monitor in the web server:

160

NOTE: The variable selection is possible only in offline mode.

EIO0000004135 09/2020

Ethernet Configuration

Monitoring: Data Parameters Submenu

The Data Parameters submenu allows you to display and modify variable values:

Element

Add

Description

Adds a list description or a variable

Del Deletes a list description or a variable

Refresh period Refreshing period of the variables contained in the list description (in ms)

Refresh Enables I/O refreshing:



Gray button: refreshing disabled



Orange button: refreshing enabled

Load

Save

Loads saved lists from the controller internal Flash to the Web server page

Saves the selected list description in the controller ( /usr/web or /bd0/web directory)

NOTE: IEC objects ( %IW , %M ,...) are not directly accessible. To access IEC objects you must first group their contents in located registers (refer to Relocation Table

( see page 32 ) ).

EIO0000004135 09/2020

161

Ethernet Configuration

Monitoring: IO Viewer Submenu

The IO Viewer submenu allows you to display and modify the current I/O values:

162

Element

Refresh

1000 ms

<<

>>

Description

Enables I/O refreshing:



Gray button: refreshing disabled



Orange button: refreshing enabled

I/O refreshing period in ms

Goes to previous I/O list page

Goes to next I/O list page

EIO0000004135 09/2020

Ethernet Configuration

Monitoring: Oscilloscope Submenu

The oscilloscope submenu can display up to 2 variables in the form of a recorder time chart:

Element

Reset

Refresh

Load

Save

Item0

Item1

Min

Max

Period(ms)

Description

Erases the memorization

Starts/stops refreshing

Loads parameter configuration of Item0 and Item1

Saves parameter configuration of Item0 and Item1 in the controller

Variable to be displayed

Variable to be displayed

Minimum value of the variable axis

Maximum value of the variable axis

Page refresh period in milliseconds

EIO0000004135 09/2020

163

Ethernet Configuration

Diagnostic: Controller Submenu

The Controller submenu displays information of the current status of the controller:

164

EIO0000004135 09/2020

Diagnostic: Ethernet Submenu

The Ethernet submenu displays Ethernet communication information:

Ethernet Configuration

The Reset Statistic button sets the Ethernet statistics to 0.

EIO0000004135 09/2020

165

Ethernet Configuration

Diagnostics: Serial Submenu

The Serial submenu displays the serial line communication information:

The Reset Statistics button sets the statistics of the serial connections to 0.

Diagnostics: Profibus Submenu

The Profibus submenu is available for controllers with PCI module. It displays the Profibus communication information:

166

EIO0000004135 09/2020

Ethernet Configuration

Maintenance Page

The Maintenance page provides access to the /usr , /bd0 and /sys folders of the controller flash

memory ( see page 28 )

:

Index of /usr or /bd0 :

Index of /sys :

WARNING

UNINTENDED WEB SERVER AND CONTROLLER BEHAVIOR

Do not modify any of the files in the /usr and /sys directories.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

EIO0000004135 09/2020

167

Ethernet Configuration

Setup: Post Conf Submenu

The Post Conf page allows you to update the PostConf

( see page 235 )

file saved on the controller:

168

Step

1

2

3

Action

Click Load.

Modify the parameters ( see page 239 )

.

Click Save.

NOTE: The new parameters will be considered at next Post Configuration file reading

( see page 236 )

.

EIO0000004135 09/2020

Ethernet Configuration

Setup: Ethernet IP configurations File Submenu

The file tree only appears when the Ethernet IP service is configured on the controller.

Index of /usr or /bd0 :

File

My Machine Controller.gz

My Machine Controller.ico

My Machine Controller.eds

Description

GZIP file

Icon file

Electronic Data Sheet file

Maintenance: User Management Submenu

The User Management submenu displays a screen that allows you to access two different actions:



User accounts management:

Allows you to manage user accounts management, removing passwords and returning the user accounts on the controller to default settings.

Click Disable to remove passwords on the controller.

Click OK on the window that appears to confirm. As a result:



Users no longer have to set and enter a password to connect to the controller.



FTP and HTTP connections accept anonymous user connections.

NOTE: The Disable button is only active if the current user has administrative privileges.

Click Reset to default to return the user accounts on the controller to their default setting state.

Click OK on the window that appears to confirm.

NOTE: Connections to FTP and HTTP are blocked until a new password is set.

EIO0000004135 09/2020

169

Ethernet Configuration



Clone management: allows you to control whether user rights are copied and applied to the target controller when cloning a controller with a USB key.

Click Exclude users rights to exclude copying user rights to the target controller when cloning a controller.

NOTE: By default, the users rights are excluded.

Click Include users rights to copy user rights to the target controller when cloning a controller. A popup prompts you to confirm copying the user rights. Click OK to continue.

170

EIO0000004135 09/2020