00198615-04_UM_IPC-HERMES-9852-V1.2_DE_EN_ZH.pdf - 第16页

3 Configuration 3.1 Connection configuration in the LAN 16 Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020 3.1.3 Using the symmedia Plug & Work Box as a router The symmedia box of …

100%1 / 140
3 Configuration
3.1 Connection configuration in the LAN
Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020 15
Setting up
► Create a connection between stacker and printer. Outgoing connections from the SIPLACE
LAN via symmedia box are working out-of-the-box.
► Establish a connection between placement machine and conveyor:
ð firewall-cmd --zone=red --add-forward-port=proto=tcp:port=60101:toaddr=172.22.0.101:
toport=50101--permanent
ð firewall-cmd --reload
Displaying
► A list of configured connections can be viewed via:
ð firewall-cmd --list-all-zones
Deleting
► Deleting the connections that have been set up:
ð firewall-cmd --zone=red --remove-forward-port=proto=tcp:port=60101:
toaddr=172.22.0.101:toport=50101 --permanent
ð firewall-cmd --reload
Configuring (LAN)
► Configure the symmedia box for ssh access via the root account on one of the two LAN net-
work plugs:
The ssh connection on the LAN network plugs are working out-of-the-box.
Configuring (WAN)
► Configure the symmedia box for ssh access via the root account on the WAN network plug:
ð firewall-cmd --zone=red --add-service=ssh --permanent
ð firewall-cmd --reload
Disabling (WAN)
► Disable the ssh access on the WAN network connection:
ð firewall-cmd --zone=red --remove-service=ssh --permanent
ð firewall-cmd --reload
NOTICE
Configuring a network card under Linux
Information on configuring a network card under Linux can also be found in the internet.
3 Configuration
3.1 Connection configuration in the LAN
16 Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020
3.1.3 Using the symmedia Plug & Work Box as a router
The symmedia box of the Remote Smart Factory solution can be used as a router for Hermes con-
nections as well. Here, the command iptables is used. To issue the commands you need to open a
connection via ssh on one of the two LAN network plugs and login as root.
Setting up
► Create a connection between stacker and printer:
ð iptables -A CUSTOMFORWARD -i br0 -o eth3 -p tcp --syn -d 192.168.0.1 --dport 50101
-j ACCEPT -m state --state NEW
► Establish a connection between placement machine and conveyor:
ð iptables -t nat -A CUSTOMPREROUTING -i eth3 -p tcp --dport 60101 -j DNAT
--to 172.22.0.101:50101
ð iptables -A CUSTOMFORWARD -i eth3 -o br0 -p tcp --syn -d 172.22.0.101 --dport 50101
-j ACCEPT -m state --state NEW
► You need to add the above lines in /var/efw/inithooks/rc.firewall.local in the start section for
the changes to persist.
Displaying
► A list of configured connections can be viewed via:
ð iptables -t nat -nvL
ð iptables -nvL
Deleting
► Deleting the connections that have been set up:
ð iptables -D CUSTOMFORWARD -i br0 -o eth3 -p tcp --syn -d 192.168.0.1 --dport 50101
-j ACCEPT -m state --state NEW
ð iptables -t nat -D CUSTOMPREROUTING -i eth3 -p tcp --dport 60101 -j DNAT
--to 172.22.0.101:50101
ð iptables -D CUSTOMFORWARD -i eth3 -o br0 -p tcp --syn -d 172.22.0.101 --dport 50101
-j ACCEPT -m state --state NEW
► You need to delete the above lines in /var/efw/inithooks/rc.firewall.local in the start section for
the changes to persist.
NOTICE
Configuring a network card under Linux
Information on configuring a network card under Linux can also be found in the internet.
3 Configuration
3.1 Connection configuration in the LAN
Administrator Guide / Administrator Handbuch / 管理员指南 IPC-HERMES-9852 - V1.2 05/2020 17
3.1.4 Using the Linux computer as a router
Any Linux computer with two network cards can also be used as a router for Hermes connections.
Here, the Linux service firewalld (3.1.2 "Using the symmedia Plug & Work Box Industrial as a
router" [}14]) or the Linux command iptables (3.1.3 "Using the symmedia Plug & Work Box as a
router" [}16]) is used. The commands need to be issued as super user / root.
3.1.4.1 firewalld
NOTICE
Customizing firewalld
firewalld needs to be adapted to your own configuration.
Basic configuration
► Set up the basic configuration:
ð firewall-cmd --zone=public --add-masquerade --permanent
ð firewall-cmd --reload
Setting up
► Create a connection between stacker and printer:
ð firewall-cmd --zone=dmz --add-forward-port=proto=tcp:port=40101:toaddr=192.168.0.1:
toport=50101 --permanent
ð firewall-cmd --reload
► Establish a connection between placement machine and conveyor:
ð firewall-cmd --zone=public --add-forward-port= proto=tcp:port=60101:
toaddr=172.22.0.101:toport=50101 --permanent
ð firewall-cmd --reload
Displaying
► A list of configured connections can be viewed via:
ð firewall-cmd --list-all-zones
Deleting
► Deleting the connections that have been set up:
ð firewall-cmd --zone=public --remove-masquerade --permanent
ð firewall-cmd --zone=dmz --remove-forward-port=proto=tcp:port=40101:
toaddr=192.168.0.1:toport=50101 --permanent
ð firewall-cmd --zone=public --remove-forward-port=proto=tcp:port=60101:
toaddr=172.22.0.101: toport=50101 --permanent
ð firewall-cmd --reload
NOTICE
Configuring a network card under Linux
Information on configuring a network card under Linux can also be found in the internet.