ST-72 User's Manual
Document: UM-1007
Revision Level A
130
If accessing the ST-72 from a computer or other device that can resolve its hostname,
dynamic configuration is fine.
10.3
CONNECTING THE ST-72 ON AN ISOLATED NETWORK
Switch
ST-72
PC
PC
ModbusTCP
Slave
PC
Firewall
Router
PC
192.168.0.20
192.168.1.1
192.168.1.100
192.168.1.101
192.168.1.102
192.168.0.1
192.168.0.2
192.168.0.3
192.168.0.4
Figure 10-4
Another possible network configuration for the ST-72 involves connecting the controller,
with ModbusTCP slave devices, and possibly computers on a network. This network can
then be isolated from a larger company network using a router/firewall. The isolated
network will not see any traffic from the company network unless port forwarding rules
are setup in the router. This configuration offers greater security and improved network
performance when the company network has a large amount of traffic.
When creating an isolated network, make sure to use a different private IP address
range than the outside network. For example; if the main network uses 192.168.0.0 –
192.168.0.255 with a netmask of 255.255.255.0, the isolated network could use
192.168.1.0 – 192.168.1.255 with the same netmask.
Port forwarding rules can usually be configured to only allow certain computers outside
the firewall access to the ST-72. The method for creating forwarding rules is heavily
dependent on the router/firewall being used. See router documentation. The IP address
or MAC address of the source (outside computer), Incoming port, destination (ST-72) IP
address, destination port, and protocol will need to be set. The source IP address should
Summary of Contents for ST-72
Page 106: ...ST 72 User s Manual Document UM 1007 Revision Level A 100...
Page 108: ...ST 72 User s Manual Document UM 1007 Revision Level A 102 Figure 6 4...
Page 128: ...ST 72 User s Manual Document UM 1007 Revision Level A 122 8 5 3 COPY CHANNELS Figure 8 7...
Page 129: ...ST 72 User s Manual Document UM 1007 Revision Level A 123 8 5 4 PROGRAMMABLE RELAYS Figure 8 8...