Mitsubishi Electric MELSEC iQ-R Series User Manual page 64

Setting method
1.
Set the IP address to be allowed or blocked in the "IP Filter Settings" window of "Security" under "Application Settings".
( Page 112 Security) A warning is displayed in the following cases.
• When blocking the IP address of the slave station set in "Network Configuration Settings" under "Basic Settings" was
attempted
• When a slave station is not set in "Network Configuration Settings" under "Basic Settings", and an IP address allowed to
access is not set in the "IP Filter Settings" window (because the IP filter blocks every IP address)
2.
Write the module parameters to the CPU module.
3.
The IP filter is enabled when power is turned off and on or the CPU module is reset.
Even if the connection was specified in "Network Configuration Settings" under "Basic Settings" or by a
program, access from the external device is either allowed or blocked according to the setting in the "IP Filter
Settings" window.
Setting Target
Allow or block should be set to all IP addresses that connect to the same network. Also, set allow or block to the IP address of
the slave station that is registered in "Network Configuration Settings" under "Basic Settings".
Register the setting details to the master station or the local station, and allow or block the IP packets received from the slave
station of the registered IP address.
Operation
Even for the slave station registered in "Network Configuration Settings" under "Basic Settings", a station with an IP address
set as blocked can become a disconnected station. As a result, cyclic transmission and transient transmission are not
performed. Such a station is also displayed as a disconnected station on the "CC-Link IE TSN/CC-Link IE Field Diagnostics"
window. However, Ethernet devices are not displayed on the "CC-Link IE TSN/CC-Link IE Field Diagnostics" window. (
Page 169 CC-Link IE TSN/CC-Link IE Field Diagnostics)
When an IP packet is received from an IP address that is set as blocked, the denial is registered in the event history.
( Page 235 Event List)
Precautions
• Do not set the IP addresses of the master station or slave stations as blocked. When a slave station using line topology is
set as blocked, cyclic and transient transmissions cannot be performed on the slave stations that are connected after the
slave station set as blocked.
No.0
When the "Deny" IP address is set to 192.168.1.2 using the IP filter of the master station No.0:
Only the slave station No.1 can access the master station, and the slave station No.2 and slave station No.3 cannot access the master station.
• If there is a proxy server in the LAN line, block the IP address for the proxy server. If the IP address is allowed, it will not be
possible to prevent access from personal computers that access the proxy server.
• To block access from an external device to another station, block access to the connected station (station connected
directly to an external device) by using the IP filter.
1 FUNCTIONS
62
1.4 Security
No.1: 192.168.1.1 No.2: 192.168.1.2 No.3: 192.168.1.3