MWS_55_e.indb Page 74
Manual MWS 55 / MWS 88 / MWS 10 and Sensors 55
geändert am 26.10.2017 von DO
REINHARDT
System- und Messelectronic GmbH
Fax: 08196/7005 and 1414 email:
http://www.reinhardt-wetterstationen.de
8.3.6 Set access addresses and authorizations
With *
ADMIN SET INCLUDE
a number of addresses allowed to connect to the weather station
can be set. This is similar to *
ADMIN SET ADDRESS
, but here you can set additional privileges
and connection types (ports).
Here the ADMIN-address does not need to be inserted, the ADMIN address always has full access
(to each port) and priority.
A global limitation is recommended, i.e.:
*ADMIN SET INCLUDE 192.168.0.0/16
(or *
ADMIN SET INCLUDE 192.168.x
)
This sets a read access for all IP-addresses starting with 192.168 on port 20002 (RS-232 tunnel).
After that you might create a (limited) read / write access from IP-address 192.168.0.12 on port
20002 (RS-232 tunnel) with the command:
*ADMIN SET INCLUDE 192.168.0.12 [TCP*]
This privileged access ("Super user") is necessary to i.e. set the clock or read the data logger
*ADMIN SET INCLUDE
<IP-Address> [<kind>, <kind>, ...]
*ADMIN SET INCLUDE
<MAC-Address> [<kind>, <kind>, ...]
*ADMIN SET INCLUDE
<MAC-Address> <IP-Adresse> [<kind>, <kind>, ...]
If commands are received from more than one address at the same time, the first received (or
the lowest number) will be processed, and all other commands of other addresses are temporarly
blocked, except commands from the ADMIN address.
Commands from the ADMIN address interrupt / discard commands from all INCLUDE addresses
and will be executed with priority. Write accesses should be given sparingly to avoid influences
on other clients.
This possibility actually is intended to get commands either from one or another client.
In addition to the IP-address also a MAC-address can be inserted. To compare only a part of a
MAC-address, the MAC-address can be closed after a part of the address, i.e.:
*
ADMIN SET INCLUDE 90-1B-0E-x
This enables read access for all MAC-addresses strating with 90-1B-0E on port 20002 (RS-232
tunnel)
To enable access for only one explicit client you can insert a fixed MAC-address:
*ADMIN SET INCLUDE 90-1B-0E-12-34-56 [TCP*]
For additional limit of the SUB-net, from which this client can access you may add an IP-address:
*ADMIN SET INCLUDE 90-1B-0E-12-34-56 192.168.10.x [TCP*]
Then only from the computer with MAC-address 90-1B-0E-12-34-56 in the SUB-net starting with
192.168.10 (one from 255 clients) commands can be received in the local network.
The current clients list can be read with
*ADMIN GET INCLUDE
single or all addresses can be removed with
*ADMIN REMOVE INCLUDE
When the list is empty, only the ADMIN has access (assumed that an ADMIN-address is set).
(See also *
ADMIN SET ADDRESS
).