Manuals / Schneider Electric / Computer Equipment / Network Card

Schneider Electric manual Web Server Security, At a Glance, 890USE17700 April

Models: 890USE17700

1 194

Download 194 pages 47.07 Kb

Page 85

5.3Web Server Security

STB NIP 2212 Web Server

5.3Web Server Security

At a Glance

Introduction

What's in this Section?

The information in this section describes how the HTTP default password, the web access password, and the configuration password are used to protect the

STB NIP 2212 web site.

This section contains the following topics:

Topic	Page

Web Access Password Protection	86

Configuration Password Protection	89

890USE17700 April 2004

85

Image 85

Schneider Electric manual Web Server Security, At a Glance, 890USE17700 April

Contents

Standard Ethernet Modbus TCP/IP Network Interface Module Advantys STBApplications Guide 31003688890USE17700 April Safety Information About the Book Chapter 1 Introduction Table of ContentsChapter 3 Configuring the Island Bus Chapter 2 The STB NIP 2212 NIMChapter 5 STB NIP 2212 Web Server Chapter 4 IP ParametersChapter 6 Data Exchange Chapter 8 Advanced Configuration FeaturesChapter 7 Connection Example Glossary890USE17700 April Important Information Safety InformationDANGER 2004 Schneider Electric. All Rights Reserved Safety Information890USE17700 April At a Glance About the BookTitle of Documentation Validity Note Related DocumentsReference Number At a Glance IntroductionIntroduction Whats in this Chapter? Purpose What Is a Network Interface Module?The Fieldbus NetworkIntegrated Power The NIM’s built-in 24-to-5 VDC power supply provides logic power to the I/O Overview Structuralnetwork view and a physical representation of the island bus Introduction What Is Advantys STB?Island Bus I/O The PrimarySegments Extensionisland bus can support as many as six extension segments segmentModules PreferredCANopen StandardDevices segmentSTB NIP 2212 Product Overview Conformance to The STB NIP 2212 is designed to support all of the standard Advantys STB NIM Ethernet Communications and Connectivity 890USE17700 April IntroductionAt a Glance The STB NIP 2212 NIMFeatures External Features of the STB NIPSummary of NIM operations are locatedThe rotary switches See Physical Description, p. 28 used Island’s Logic Power Bus, p. 39 to the NIMSTB NIP 2212 to use its MAC-based default IP address See An RJ-45 See STB NIP 2212 Network Interface, pfieldbus interface is also called the Ethernet port STB NIP 2212 Network Interfaceused to connect the STB NIP 2212 to the Ethernet baseband NIM toward the topCommunications ConnectorCable and Rotary Switches summarizes the valid address settings LED Indicators memory card See Using the STB XMP 4440 Optional IP Address from a Media Access Control MACEthernet Communications LEDs Advantys STB Communications LEDsisland bus is operational with a configuration mismatch Configuration, p. 49 errorThe CFG Interface Connections An STB XCA 4002 programming cable must be used to connect the computer running the Advantys configuration software or a Modbus-capable HMI panel to the NIM via the CFG port The Power Supply Interface Connectors Logic Power power and sends it across the primary segment Logic PowerFlow IMPROPER GALVANIC ISOLATION Selecting a Source Power Supply for the Island’s Logic Power BusRequirement supplies installed on the island Devices SuggestedGeneral Specifications Module SpecificationsGeneral Specifications 890USE17700 April The STB NIP 2212 NIMAuto-Configuration Configuring the Island BusInstalling the STB XMP 4440 Optional Removable Memory Card At a GlanceAuto-Addressing Module An ExamplePhysical Location Island Bus AddressBus Location Auto-Configuration Installing the STB XMP 4440 Optional Removable Memory Card Use the following procedure to install the card Installing the CardRemoving the Use the following procedure to remove the card from the card drawer. As a handling overwritten equipment manufacturer The RST Button RST Functionality Overwriting Default ValuesFlash Memory with Factory890USE17700 April Configuring the Island BusAt a Glance IP ParametersHow the STB NIP 2212 Obtains IP Parameters The IP Address Assignment ProcessHow the STB NIP 2212 Obtains IP Parameters Deriving an a Media AccessIP Address from Control MACHex Pair Decimal Conversion The IP Address Assignment Process INTERNAL positions See Rotary Switches, p At a Glance STB NIP 2212 Web ServerThis chapter contains the following sections At a Glance 5.1 Introduction to the Embedded Web ServerIntroduction Whats in this Section? 890USE17700 AprilAbout the Embedded Web Server Accessing the STB NIP Web Site STB NIP 2212 is configured Properties Web Pagefollowing figure At a Glance 5.2 Web Server Configuration Options890USE17700 April The Configuration menu appears in the following figure Configuration Web PageConfigurator Web Page, p is linked to a menu optionConfiguring an IP Address for the STB NIP IP Parameters Using the Command Buttons Reboot Option, p Assigning a Configured IP Address to the STB NIPposition See Physical Description, p Ethernet Communications LEDsConfigured IP Web Page, p. 72 opens Restoring Default Parameters from the WebReboot Option, p The Configured IP web page See SampleAbout the Reboot OptionIntroduction Understanding Processing Mastery Configuring Master ControllersFields on the Master Controller Web Page Controller Web Page Setting Up Master Controllers for the IslandMaster Configurator Web Page Configuring a Master Configurator for the Island Fields on the Master Configurator Web PageMaster Configurator Web Page, p The IP address See How the STB NIP 2212 Obtains890USE17700 April Configurator Web Pageand three numeric characters, e.g., STBNIP2212002 Configuring a Role NameA role name is the priority IP address assignment method used by the A sample Role Name web page is shown belowReboot Option, p Configuring a Role NameServer-Assigned IP Addresses, p role name with three numeric values. Youdefault IP parameters. Use the following steps Reboot OptionAbout the Deleting a RoleAt a Glance 5.3 Web Server SecuritySTB NIP 2212 web site This section contains the following topics 890USE17700 AprilWeb Access Password Protection What Is the Web The web access password is an eight-character, case-sensitive user name and Navigate to your url http//configured IP address Setting Up the Web Access LoginProperties Web Page, p. 69 is Introduction Set Configuration Password Procedure Configuration Password ProtectionLogging In and Out software See Protecting Configuration Data, p At a Glance 5.4 Web Server Diagnostic Options890USE17700 April Diagnostics Web Page Ethernet Statistics STB NIP 2212 Registers Web Page STB NIP 2212 Web Server processes I/O Data Values Web Pagemodules STB DDI 3610s and/or STB DDO 3600s, STB AVI 1270s modules can be represented on the I/O Data Values web pageValues Web Page Configuration Island Configuration Web PageIntroduction Sample Island890USE17700 April Island Parameters Web Page890USE17700 April Error Log Web PageSee Diagnostics Web Page Error LogConfiguration Password OperationsAt a Glance 5.5 SNMP ServicesIntroduction SNMP Device ManagementUser Datagram Protocol UDPData Units SNMP ProtocolPDUs SNMP PDUIntroduction Fields on the Configure SNMP Web Page Configure SNMP Web PageConfigure SNMP A sample Configure SNMP web page is shown in the following figureSample Web PageAbout the Schneider Private MIBs Factory Ethernet TransparentTFE Subtree Transparent Factory Ethernet TFE MIB Subtree Transparent Factory Ethernet TFE MIB Subtreeobjects and OIDs used by a TFE service Port502 Messaging SubtreeThe Port502Messaging subtree OID 5 provides connection management and activity Web MIB SubtreeIntroduction Equipment Profiles MIB Subtree Equipment Profiles SubtreeDescription ServiceComment dependent address of the890USE17700 April STB NIP 2212 Web ServerReading Diagnostic Data Data ExchangeModbus Commands Supported by the STB NIP Modbus Error CodesData Exchange with the STB NIP Objects Data and StatusThe I/O modules have the following island bus addresses The Output Data The output data process image contains the data written to the island from the A digital I/O module uses two contiguous registers 45392 through 45409 to support our configuration Data Exchange Data Exchange Data Exchange Reading Diagnostic Data condition Data Exchange Register Node ConfigurationNode Assembly The next eight contiguous registers registers 45367 through 45374 indicate the presence or absence of configured modules in locations on the island bus. This information is stored in Flash memory. At start up, the actual locations of the modules on the island are validated by comparing them to the configured locations stored in memory. Each bit represents a module module 26 error module 28 errormodule 25 error Emergencyfaults were detected STB NIP 2212 Register 45391 contains a word of diagnostic data that is allocated to the status of Status Register the STB NIP 2212. The bits in the high byte have predefined meanings that are Modbus Commands Supported by the STB NIP Ethernet Statistics, p List of Supported CommandsEthernet issued, and the statistics are retrievedStatistics transmissions to and from the STB NIP 2212 over the Ethernet LANModbus Error Codes 890USE17700 April Data ExchangeAt a Glance Connection ExampleIntroduction Type of Connection Network ArchitectureCabling Guidelines Example Sample ConfigurationModbus over ConfigurationTCP/IP View of the SampleN7 channel 1 status N3 statusOutput Process The I/O modules in the sample island bus assembly require five Modbus registers Modbus Functions Supported by the STB NIP STB AVO 1250 module node 8 in the sample Advantys STB island bus See indicate an error condition At a Glance Advanced Configuration FeaturesSTB NIP 2212 Configurable Parameters Selecting the By default, the values for the configurable NIM parameters use decimal notation must reserve space for that data. To reserve data sizes Configuring Mandatory Modules mandatory stop will load the island’s default configuration data Prioritizing a Module What Is a Reflex Action? Reflex Action Configuring aInputs to a Reflex ActionResult of a Reflex Depending on the type of reflex block that you use, it will output either a Boolean or Nesting blocks use the always enabled constant as the enable input whenever possibleon an action module the NIM. The best way to preserve processing resources is toIsland Fallback Scenarios heartbeat message from Flash memory and used to configure your physical island Saving Configuration Datawhen you attempt to save it currently stored in Flash cannot be overwritten by data on the card Protecting Configuration DataA Modbus View of the Island’s Data Image The Data Image The 9999 contiguous registers in the Modbus data image start at register 40001. The illustration below shows a graphical representation of the data image and how it is subdivided into nine distinct blocks Reading Register All the registers in the data image can be read by an HMI panel connected to the The Island’s Process Image Blocks The registers in the output data process image are read/write-capable The HMI Blocks in the Island Data Image HMI Output Data In turn, output data written by the fieldbus master can be used to update enunciator 890USE17700 April Advanced Configuration FeaturesGlossary Page Page digital I/O DHCPeconomy segmentPage HTTP hot swappinggateway globalIDI/O base IEEEI/O module I/O scanninglinearity light industrialmandatory MAC addressmodule master/slavePage 24 VDC, 115 VAC, or 230 VAC Page Page state managementmessage periodic services. The applications and network Page voltage group varistorNumerics IndexPage Page Page Page 890USE17700 April Index