#307 - How to configure the firewall in a Scalance SC

- From the Scalance's web browser (and not from TIA Portal) make a backup from System > Load & Save.

- On Layer 2 > VLAN add the required VLAN (new VLAN ID) and assign the functionality to the desired ports (e.g., Tagged (T), Untagged (U), Unused (-)).

VLANs can be segregated as needed, e.g., PLC cross comms, SCADA, PLC to IT, PLC to OT, etc.

- Assign the ports to each VLAN.

- On Layer 3 (IPv4) > Subnets, assign the IP addresses for the VLAN gateways, e.g., x.x.x.254.

- On Security > Firewall open the required port for the each TCP/UDP service (IP Services tab), e.g., Modbus TCP on port 502.

- On Security > Firewall assign the service to the port and connect the VLAN From (client) To (server).