Firewall settings

The IEC 61850 uses the TCP/IP as transport protocol (T-profile) during the client/server communication (MMS mapping). Please ensure that the corresponding TCP port is enabled if a firewall is used. The table below lists ports that have to be taken into account when a firewall is used.

Description

Type

Protocol

Port

Connection Oriented Transport Protocol (COTP, ISO 8073)

Protocol

TCP

102

Configuration under Windows

The Windows Firewall is configured via the corresponding dialog in the Control Panel. For more information on configuration, refer to the Windows or firewall documentation.

Notice

Enable the port

If an embedded controller without monitor connector and USB is used, please ensure that Remote Display (Windows CE) or Remote Desktop (Windows XP/Windows Vista) is enabled in the firewall. Otherwise the computer administration via the network is no longer possible.

Configuration under TC/BSD

Log in to the console.
Default login data:
Login: Administrator
Password: 1
Alternatively, for example, via the Git BASH console:
ssh Administrator@[YourIPAddress]
1. Next, you need to modify the firewall configuration file to enable the corresponding TCP/IP port. The following command opens the configuration file in the editor:
doas ee /etc/pf.conf
2. The following entry is added to the configuration file (if not already present):
#allow traffic to TCL/IP port 102
Pass in quick proto tcp to port 102 keep state
3. Escape calls the menu in the editor.
4. Save the changes and exit the editor.
The configuration is now complete.

Other useful commands:

Reboot device: doas shutdown -r now

Disable firewall: doas pfctl -d

Enable firewall: doas pfctl -e