Allowed Origins
Under “Allowed Origins,” you can specify additional host names or IP addresses from which connections to the server are permitted. By default, the server accepts only the IP addresses and host names specified in the certificate being used. Other systems that are allowed to access the server can be specified as regular expressions (RegEx).
Examples:
IP address 172.12.123.1 on port 2020
^https://172\.12\.123\.1:2020$Host name myserver on port 2020
^https://myserver:2020$Host name myserver on port 8080
^https://myserver:8080$Allow all origins
.*
| |
Allowing general access You can allow all requests using “.*”. This is a significant security vulnerability and should be used exclusively for testing and development purposes. This setting is expressly not recommended for production systems. |
To access a server over the network, at least one of the following requirements must be met:
- The IP address or host name used is listed in the certificate.
- The IP address or host name used is configured under “Allowed Origins”.
If these requirements are not met, access can alternatively be gained via an SSH tunnel. This is helpful, for example, on a Linux® system without a connected monitor.
- 1. To do this, open PowerShell.
- 2. Run the following command, replacing <Host-IP-or-Host name> with the IP address or hostname of the external device.
ssh -N -L 2020:localhost:2020 Administrator@<Host-Ip-or-Hostname>- 3. Open a local browser.
- 4. You can now access your external server using the following URL
https://127.0.0.1:2020/Config- 5. Navigate to TcHmiSrv/Security
- 6. Adjust the “Allowed Origins” entry accordingly to allow future connections even without an SSH tunnel.
- After saving, you can access the server directly using the newly configured IP address or host name.