Mitsubishi Electric MELSEC iQ-R C R12CCPU-V, User Manual

Page: 119 / 262

6 Ethernet COMMUNICATION FUNCTIONS
6.6 Security Function
117
6
6.6
Security Function
By restricting the access to a C Controller module for each communication route, the optimal security for the network
environment can be applied.
The security function is one of the methods for preventing unauthorized access (such as program or data
corruption) from an external device. However, this function does not prevent unauthorized access completely.
Incorporate measures other than this function if the C Controller system's safety must be maintained against
unauthorized access from an external device. Mitsubishi Electric Corporation cannot be held responsible for
any system problems that may occur from unauthorized access.
Examples of measures for unauthorized access are shown below.
• Install a firewall.
• Install a personal computer as a relay station, and control the relay of send/receive data with an application
program.
• Install an external device for which the access rights can be controlled as a relay station. (For details on the
external devices for which access rights can be controlled, consult the network provider or equipment
dealer.)
IP filter function
This function identifies the IP address of an access source and prevents access from unauthorized devices by specifying IP
addresses.
Set the IP address of the target device to be passed or blocked in the parameters to restrict the access from target devices.
Use of this function is recommended when using C Controller module in an environment which is connected to LAN.
Setting method
1.
Set the IP address for the IP address to be passed or blocked in "Security" under "Application Settings". (

Page 123
Security)
2.
Write the module parameters to the C Controller module.
3.
The IP filter function is enabled after turning the power OFF and ON, or resetting the C Controller module.
Even if the connection is specified by the setting of "External Device Configuration" of the C Controller module
or the program, the access from the target device is either passed or blocked according to the IP filter settings.
If the IP address set to "External Device Configuration" of the C Controller module is set to be blocked in the
"IP Filter Settings", the IP filter setting is enabled and communication with the target device is blocked.
Considerations
If there is a proxy server on the LAN, block the IP address of the proxy server. Otherwise, the access from the personal
computers that can access the proxy server cannot be prevented.