semaphore TBOX LT2-530 Series, Руководство пользователя, Страница: 142 / 197

Version : 1.09 142
17. Protection (Access security)
This (optional) access control on
TB
OX
LT2
prevents
non-authorized persons from accessing the RTU and from
opening the TWinSoft document.
Several protocols can be protected: ModBus, HTTP, FTP (server), ReadSMS.
More protection can be implemented, like Firewall (chapter 11.2), OpenVPN (chapter 11.1) or IEE802-1X
though an add-on (see chapter 7.2. Add-ons).
Once you activate the “Access security” option, the TWinSoft document will also be protected, even if no
port has been selected!
There are three methods of activating access security. You select one:

Global Code: You define a 4 digits hexadecimal code.

Enhanced Global Code: The same as above but with maximum 8 of any characters.

User list: You define your own list of Users/Password.
17.1. Access Protection on Communication Ports
The configuration of access security of
TB
OX
LT2
is available from the ‘RTU properties’:

The protection must be activated by one of the three methods (see below).

Then “ModBus” protection can be assigned individually to each port.

Protection on other services (HTTP, ReadSMS, …) can then be assigned too.
17.1.1. ModBus Protection
The ModBus protection provides a protection against writing values (from TWinSoft, from a WebForm)
and sending a new application. Each port individually can be protected.
TWinSoft populates ports according to the model of
TB
OX
LT2
you are configuring; you check the port(s)
you want to protect.
Three access levels are available to access protected port(s):

Level 1: Surveillance mode or VISUALIZATION MODE. The operator can view all
TB
OX
LT2
values
(local or remote), but cannot execute any command.

Level 2: COMMAND MODE, the operator can view all the values and execute commands (locally or
remotely). Also known as READ/WRITE MODE.

Level 3: ENGINEER MODE, the operator can view all the values, execute commands and send new
application (locally or remotely).
When a port is protected it cannot be written through ModBus Transactions.