ABB i-bus KNX ABA/S 1.2.1, Руководство по эксплуатации продукта

Страница: 10 / 116

ABB i-bus
®
KNX
Safety
10 2CDC509086D0201 | ABA/S 1.2.1
2.5 Twisted pair cabling
►
The ends of KNX twisted pair cables should not be visible or protrude from the wall either inside or
outside the building.
►
If available, use the anti-theft devices on the application modules.
►
Bus lines in outdoor areas are an increased risk. Ensure that physical access to KNX twisted pair
cables is especially difficult here.
►
For extra security, devices installed in areas with limited protection (outdoor areas, underground
parking lots, restrooms, etc.) can be designed as a separate line. Enabling the filter tables in the line
coupler (KNX only) prevents attackers from gaining access to the whole system.
2.6 IP cabling inside the building
For building automation, use a separate LAN or WLAN network with its own hardware (routers, switches
etc.).
Regardless of the KNX system, apply the usual security mechanisms for IP networks. For example:
•
MAC filters
•
Wireless network encryption
•
Use strong passwords and protect them from unauthorized persons
Note
The device cannot be reached during IP, TCP or UDP flooding (access from the internet). To avoid this,
set rate limiting at network level.
Please discuss this with your network administrator.
2.7 Connection to the internet
The device's web server uses unencrypted data transfer and is therefore not intended for use on the public
internet. To prevent KNX communication from being visible on the internet, ports must not be opened in
that direction by routers.
Systems can be accessed via the internet in the following ways:
•
Access to KNX installations via VPN connections. However, this requires a router with VPN server
functionality or a server.
•
Use of manufacturer-specific solutions or visualizations, e.g. access via https.