Table of Contents
Advertisement
Safety instructions
2.2 Protocols
2.2
Protocols
Secure/non-secure protocols
• Check whether it is necessary to use SNMPv1. SNMPv1 is classified as non-secure. Make
use of the possibility to prevent write access. The product offers corresponding settings
for this.
• If SNMP is enabled, change the community names. If no unrestricted access is necessary,
restrict access over SNMP.
• Use only secure protocols when access to the device is not secured by physical protection
measures.
The following protocols provide secure alternatives:
HTTP → HTTPS
• To prevent unauthorized access to the device or network, set up appropriate safeguards
against non-secure protocols.
• Enable only the services (protocols) that will actually be used on the device. The same
applies to the installed interfaces/ports. Unused ports could be used to access the network
downstream from the device.
• When using OPC UA, only use profiles with secure encryption and authentication.
List of available protocols
All available protocols and their ports that are used with SIMATIC Ident CB Gatecomponents
are listed below.
Table 2- 1
List of used protocols: SIMATIC S7 CPU 1212C
Service/
Protocol/
Protocol
Port number
PROFINET
UDP/34964
UDP/49152-
65535
S7
TCP/102
SNMP
UDP/161
TCP server
TCP/2000
in the factory state. Further services/protocols can be activated by reconfiguring.
1)
10
1)
Preset port
Port status
status
configurable
Open
--
Open
--
Open
--
Closed
✓
Port number
Authenticatio
configurable
n
--
--
--
--
--
--
✓
--
Operating Instructions, 08/2022, C79000-G8976-C671-01
Encryption
--
--
--
--
SIMATIC Ident CB Gate
Advertisement
Table of Contents
