Configure Remote Hmi Non Observer Privileges - GE Multilin D400 Instruction Manual

CHAPTER 12: USING THE D400 LOCAL CONFIGURATION UTILITY

Configure Remote HMI Non Observer Privileges

Disable controls from
Remote HMI
procedure
D400 SUBSTATION GATEWAY INSTRUCTION MANUAL
Setting
Configure Remote HMI Non
Observer Privileges
Configure Rsyslog Service
This feature prevents users with D400 operator and supervisor role (class) credentials from
logging into the D400 from the Remote HMI and consequently prevents them from
executing commands and other controllable actions (force, ACK alarms, etc.), or from
changing configurations.
When this feature is enabled, all Remote HMI users are granted the observer role (class)
after successful login. There is no impact on users logged in through Local HMI.
This feature is enabled or disabled using the D400 Configuration Utility (d400cfg). For
security reasons, only a super user or users with elevated admin class privileges in Linux
d400cfg can update the configuration of this feature.
When Redundancy is configured, this parameter must be enabled or disabled both in the
Active and the Standby D400s for proper operation.
To disable controls from Remote HMI:
1. Log into the D400 through maintenance port.
Result: The
D400 #>>
2. Type d400cfg and press Enter.
Result: The D400 Configuration Utility menu appears.
3. Select option 4. Configure Secure Access.
Result: The Secure Access sub-menu appears.
4. Select option 8. Configure Remote HMI Non Observer Privileges.
Result: The following message appears:
Currently Remote HMI Non Observer privileges are Enabled.
Do you want to disable Remote HMI Non Observer privileges
[Y/N]?:
5. If you enter Y, then the controls from the Remote HMI are disabled.
If you enter N, then the controls from the Remote HMI are not disabled.
Result: The settings take effect.
Description
Use this command to enable or disable privileges for the Non
Observer users from the Remote HMI.
It is necessary to reboot the D400 after configuring this parameter.
If redundancy is configured, this parameter must also be configured
in the Standby D400.
Use this command to enable or disable Remote Syslog service in the
D400.
Rsyslog service supports the following features:
• Receiving of Syslog Messages through UDP.
• Receiving of Syslog Messages through TCP.
• Add or Delete Subnets/Hosts for receiving Syslog Messages.
Note :
The D400 Rsyslog service changes the firewall settings to allow
messages/logs on the configured port numbers for UDP/TCP
based connections. These rules update the Firewall rulesets
once configured and rebooted.
While choosing a different port number configured for either
TCP/UDP based connections, ensure that no other application is
using/running with the same port number in the D400.
In the firewall configuration, it is the user's responsibility to
connect Internal zone interfaces to networks that are protected
from unauthorized use.
command prompt appears.
GE INFORMATION 141