CHAPTER 12: USING THE D400 LOCAL CONFIGURATION UTILITY
D400 SUBSTATION GATEWAY INSTRUCTION MANUAL
GE INFORMATION
141
Configure Remote HMI Non Observer Privileges
This feature prevents users with D400 operator and supervisor role (class) credentials from
logging into the D400 from the Remote HMI and consequently prevents them from
executing commands and other controllable actions (force, ACK alarms, etc.), or from
changing configurations.
When this feature is enabled, all Remote HMI users are granted the observer role (class)
after successful login. There is no impact on users logged in through Local HMI.
This feature is enabled or disabled using the D400 Configuration Utility (d400cfg). For
security reasons, only a super user or users with elevated admin class privileges in Linux
d400cfg can update the configuration of this feature.
NOTE
When Redundancy is configured, this parameter must be enabled or disabled both in the
Active and the Standby D400s for proper operation.
Disable controls from
Remote HMI
procedure
To disable controls from Remote HMI:
1.
Log into the D400 through maintenance port.
Result: The
D400 #>>
command prompt appears.
2.
Type
d400cfg
and press
Enter
.
Result: The D400 Configuration Utility menu appears.
3.
Select option
4. Configure Secure Access
.
Result: The Secure Access sub-menu appears.
4.
Select option
8. Configure Remote HMI Non Observer Privileges
.
Result: The following message appears:
Currently Remote HMI Non Observer privileges are Enabled.
Do you want to disable Remote HMI Non Observer privileges
[Y/N]?:
5.
If you enter
Y
, then the controls from the Remote HMI are disabled.
If you enter
N
, then the controls from the Remote HMI are not disabled.
Result: The settings take effect.
Configure Remote HMI Non
Observer Privileges
Use this command to enable or disable privileges for the Non
Observer users from the Remote HMI.
It is necessary to reboot the D400 after configuring this parameter.
If redundancy is configured, this parameter must also be configured
in the Standby D400.
Configure Rsyslog Service
Use this command to enable or disable Remote Syslog service in the
D400.
Rsyslog service supports the following features:
•
Receiving of Syslog Messages through UDP.
•
Receiving of Syslog Messages through TCP.
•
Add or Delete Subnets/Hosts for receiving Syslog Messages.
Note
:
The D400 Rsyslog service changes the firewall settings to allow
messages/logs on the configured port numbers for UDP/TCP
based connections. These rules update the Firewall rulesets
once configured and rebooted.
While choosing a different port number configured for either
TCP/UDP based connections, ensure that no other application is
using/running with the same port number in the D400.
In the firewall configuration, it is the user's responsibility to
connect Internal zone interfaces to networks that are protected
from unauthorized use.
Setting
Description
Summary of Contents for Multilin D400
Page 12: ...12 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL PRODUCT SUPPORT ...
Page 28: ...28 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 1 BEFORE YOU START ...
Page 34: ...34 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 2 INSTALLING THE D400 ...
Page 88: ...88 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL CHAPTER 5 POWERING UP THE D400 ...
Page 174: ...174 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX A STANDARDS PROTECTION ...
Page 184: ...184 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL APPENDIX C LIST OF ACRONYMS ...
Page 192: ...192 GE INFORMATION D400 SUBSTATION GATEWAY INSTRUCTION MANUAL INDEX ...
