DeltaV system security > DeltaV Firewall IPD

Logging on and re-addressing a firewall IPD

After initial IP configuration, you can change the IP addresses of the firewall IPD using HiView from the Management station. To log onto the firewall IPD from the Management station, launch HiView, enter the Primary IP address of the firewall IPD in the URL field, and accept the security warnings. A view of the firewall IPD with its configuration options will appear. Refer to KBA NK-1600-0290 for information about using HiView to manage the firewall.

In order for a firewall IPD on the Secondary network to be managed, it must conform to Secondary IP addressing. After assigning a Secondary IP to the firewall IPD during initial configuration, connect the firewall IPD to the Secondary DeltaV network. Then you can use the Management station to change the IP address. Note that the NIC card of the Management station must conform to Secondary IP addressing. Therefore, it is best to use a Management station with two NIC cards: one set up for Primary firewall IPD IP addresses and one set up for Secondary firewall IPD IP addresses. With two NIC cards, you do not need to change the card addresses from Primary to Secondary as you would if the Management station had only one NIC.

Give the first firewall IPD on the network a unique IP address from the supported range (10.5.128.16 through 10.5.128.48 for Primary addresses, and 10.9.128.16 through 10.9.128.48 for Secondary addresses). Then increment each address by one (1) as more are added to the network to avoid duplicate IP address.

Follow these steps to re-address the firewall IPD for the Secondary network:

  1. Launch HiView and enter the Secondary IP address for the firewall IPD in the URL field. (Remember, if this is a brand new firewall IPD, the IP address is unconfigured and you must configure the address using the serial port first.) The System screen appears.
  2. Find the Network folder on the left side of the System screen, expand the folder, and select Transparent to open the Transparent Mode page.
  3. In the IP Address field on the Transparent Mode page, enter an address from the recommended Secondary address list.
  4. The Netmask field should read 255.254.0.0.
  5. Click Set.

    The Management station loses the connection when you change the address.

  6. Enter the newly assigned Secondary IP address in the URL field.
  7. Find the Network folder on the left side of the System screen, expand the folder, and select Transparent to open the Transparent Mode page.
  8. Verify that the IP address in the IP Address field is the one you assigned above.
  9. Follow these steps to save the configuration:
    1. Select Set at the bottom of the screen.

      The Writing Data message slowly fades out after a few seconds and the Load/Save screen displays a warning (yellow !).

    2. Select Save to NVM+ACA to store the configuration in the standard profile (config).

      NVM status becomes green and the warning (yellow !) no longer appears on the Load/Save screen.

    3. Reboot and check the configuration that is loaded from the standard profile (config).

Repeat this procedure for each firewall IPD, making sure that each has a unique address and the profiles are saved.

Note

Never use a DeltaV workstation or controller address for a firewall IPD address.