Siemens SIMOTICS S-1FK2, Operating Instructions Manual

Page: 160 / 768

6.11.2 Configuring the IP connection
The X127 and X150 interfaces have the following defaults:
● Service interface (X127)
Access to the web server via the service interface is always active. Communication is
performed in the factory setting via an HTTP connection.
NOTICE
Software manipulation when using non-encrypted connections (HTTP)
The HTTP protocol transfers data without encryption. This facilitates password theft, for
example, and can lead to data manipulation by unauthorized parties and thus ultimately
to damage.
● Limit access to HTTPS connections so that all data is transferred encrypted.
● PROFINET interface (X150)
Access to the web server via the PROFINET interface is deactivated by default.
Communication via the PROFINET interface is always performed via the secure HTTPS
connection.
Note
Security measures for communication via PROFINET
In accordance with the Defense in Depth concept, PROFINET must be isolated from the
remaining plant network (see Industrial Security ( https://www.industry.siemens.com/topics/
global/en/industrial-security/pages/default.aspx )). Access to cables and possibly open
connections must be implemented in a protected fashion, as in a control cabinet.
Note
Certificates for the secure data transfer
To secure an HTTPS connection, it requires security certificates for the encryption of the
access. Detailed information on working with these security certificates can be found in
Section "Certificates for the secure data transfer (Page 750)".
You can make the connection between the converter and the commissioning device more
secure through the settings described in the following.
Commissioning and diagnostics in the Web server
6.11 System settings
SINAMICS S210 servo drive system
158
Operating Instructions, 12/2017, A5E41702836B AA