Rockwell-automation 1756-EN2TSC EtherNet/IP Secure Communication User Bedienungsanleitung

EtherNet/IP Secure CommunicationCatalog Number 1756-EN2TSCUser Manual

10 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 1 Secure Communication ArchitectureThe 1756-EN2TSC module provides a level

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 11Secure Communication Architecture Chapter 1Local Chassis SecurityYou can use the 1

12 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 1 Secure Communication ArchitectureThe trusted slot and serial number lock

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 13Secure Communication Architecture Chapter 1As part of establishing the secure tunn

14 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 1 Secure Communication ArchitecturePerformanceThe basic communication capa

Rockwell Automation Publication ENET-UM003B-EN-P - August 2013 15Chapter 2Get StartedThis chapter describes the initial configuration settings require

16 Rockwell Automation Publication ENET-UM003B-EN-P - August 2013Chapter 2 Get StartedConfigure all security parameters via the web server. In the Add

Rockwell Automation Publication ENET-UM003B-EN-P - August 2013 17Get Started Chapter 22. After the web browser connects to the server, a warning messa

18 Rockwell Automation Publication ENET-UM003B-EN-P - August 2013Chapter 2 Get StartedDefault CredentialsDefault credentials are case sensitive and ar

Rockwell Automation Publication ENET-UM003B-EN-P - August 2013 19Get Started Chapter 2See the next chapters in this manual for different security conf

Important User InformationRead this document and the documents listed in the additional resources section about installation, configuration, and opera

20 Rockwell Automation Publication ENET-UM003B-EN-P - August 2013Chapter 2 Get StartedIn This Field SpecifyEthernet Interface Configuration The networ

Rockwell Automation Publication ENET-UM003B-EN-P - August 2013 21Get Started Chapter 2Create User AccountsYou can define user accounts for the web int

22 Rockwell Automation Publication ENET-UM003B-EN-P - August 2013Chapter 2 Get StartedFrom this form, you can change the following:• Password• Group m

Rockwell Automation Publication ENET-UM003B-EN-P - August 2013 23Get Started Chapter 2Some web pages use both .asp, form, and URL elements. In such ca

24 Rockwell Automation Publication ENET-UM003B-EN-P - August 2013Chapter 2 Get StartedCertificatesOn initial powerup, the subject common name (CN) of

Rockwell Automation Publication ENET-UM003B-EN-P - August 2013 25Get Started Chapter 2Backup / RestoreTo back up module configuration, choose Administ

26 Rockwell Automation Publication ENET-UM003B-EN-P - August 2013Chapter 2 Get Started1. Specify the back-up file to use.2. If the back-up file is pas

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 27Chapter 3Configure a Secure Connection to a Microsoft Windows ClientIn this scenar

28 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows ClientTo configure

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 29Configure a Secure Connection to a Microsoft Windows Client Chapter 3The Microsoft

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 3Summary of ChangesThis manual contains new and updated information. Changes through

30 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows Client1. Log in to

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 31Configure a Secure Connection to a Microsoft Windows Client Chapter 34. Click Add.

32 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows Client8. Make the f

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 33Configure a Secure Connection to a Microsoft Windows Client Chapter 311. If needed

34 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows Client15. Click Add

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 35Configure a Secure Connection to a Microsoft Windows Client Chapter 34. Select No,

36 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows Client7. Enter the

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 37Configure a Secure Connection to a Microsoft Windows Client Chapter 312. Once the

38 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows Client15. On the Op

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 39Configure a Secure Connection to a Microsoft Windows Client Chapter 316. On the Se

4 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Summary of ChangesNotes:

40 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows Client18. On the Ne

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 41Configure a Secure Connection to a Microsoft Windows Client Chapter 3Interface Met

42 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows ClientOpen the VPN

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 43Configure a Secure Connection to a Microsoft Windows Client Chapter 3Communicate t

44 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 3 Configure a Secure Connection to a Microsoft Windows ClientIf you connec

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 45Chapter 4Configure Secure Communication Between Two 1756-EN2TSC ModulesIn this sce

46 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 4 Configure Secure Communication Between Two 1756-EN2TSC ModulesTo create

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 47Configure Secure Communication Between Two 1756-EN2TSC Modules Chapter 4Configure

48 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 4 Configure Secure Communication Between Two 1756-EN2TSC ModulesConfigure

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 49Configure Secure Communication Between Two 1756-EN2TSC Modules Chapter 4Test the C

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 5Table of ContentsPrefaceAdditional Resources . . . . . . . . . . . . . . . . . . .

50 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 4 Configure Secure Communication Between Two 1756-EN2TSC ModulesNotes:

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 51Chapter 5Configure a Secure Connection to a VPN ApplianceIn this scenario, a VPN a

52 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 5 Configure a Secure Connection to a VPN ApplianceAn appliance like the Ci

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 53Configure a Secure Connection to a VPN Appliance Chapter 5Configure the Module to

54 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 5 Configure a Secure Connection to a VPN Appliance4. Click Apply Changes.E

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 55Configure a Secure Connection to a VPN Appliance Chapter 5Set the key life time (1

56 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 5 Configure a Secure Connection to a VPN ApplianceNotes:

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 57Chapter 6DiagnosticsDiagnostic Web PagesThe 1756-EN2TSC module supports the same d

58 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 6 DiagnosticsSecure Tunnel Diagnostics Web PageFor specific diagnostics re

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 59Diagnostics Chapter 6Status IndicatorsThe 1756-EN2TSC module uses the same status

6 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Table of ContentsDiagnosticsDiagnostic Web Pages . . . . . . . . . . . . . . . . .

60 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013Chapter 6 DiagnosticsNetwork (NET) Status IndicatorOK Status IndicatorStatus Descr

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 61IndexAaccess limits 22additional resources 7, 15architectureMicrosoft Windows clie

62 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013IndexTtest connection 49traffic filtering 14trusted slot 11Uuser account 21VVPM ap

Publication ENET-UM003B-EN-P - September 2013Supersedes ENET-UM003A-EN-P - February 2013 Copyright © 2013 Rockwell Automation, Inc. All rights reserve

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 7PrefaceThe 1756-EN2TSC is a security-enhanced version of the 1756-EN2T EtherNet/IP

8 Rockwell Automation Publication ENET-UM003B-EN-P - September 2013PrefaceNotes:

Rockwell Automation Publication ENET-UM003B-EN-P - September 2013 9Chapter 1Secure Communication ArchitectureMany control systems currently use 1756-E