Application and properties
1.5 Configuration limits and performance data
CP 1243-1
Operating Instructions, 04/2017, C79000-G8976-C365-03
15
●
SNMPv3
For secure transmission of network analysis information safe from eavesdropping
●
Protection for devices and network segments
The protection provided by the firewall can cover individual devices, several devices or
even entire network segments.
Note
Plants with security requirements - recommendation
Use the following options:
•
If you have systems with high security requirements, use the secure protocols
NTP (secure), HTTPS and SNMPv3.
•
If you connect to public networks, you should use the firewall. Think about the services
you want to allow access to the station via public networks. By using the "bandwidth
limitation" of the firewall, you can restrict the possibility of flooding and DoS attacks.
See also section Security recommendations (Page 37).
For configuring the security functions refer to the section Security (Page 63).
You will find further information on the functionality and configuration of the security functions
in the information system of STEP 7 and in the manual /4/ (Page 142).
1.5
Configuration limits and performance data
Number of CMs/CPs per station
In each S7-1200 station, up to three CMs/CPs can be plugged in and configured; this allows
three CP 1243-1 modules.
To use telecontrol communication, three CP 1243-1 modules can be plugged in per station.
Connection resources
●
Telecontrol connections
With the various telecontrol protocols the CP can establish connections to the following
master station types:
–
To non-redundant or redundant telecontrol servers (TCSB).
–
To up to four non-redundant or redundant DNP3 masters
–
To up to four non-redundant or redundant IEC masters
With the Telecontrol Basic protocol, in addition to this, inter-station communication with
up to 15 S7 stations with a CP 1243-1 can be operated via the telecontrol server.
