Rule Description

ID

Detection

Rule

6001

Alert

When a local slave is configured for the CPU or BMENOC03•1 module of an M580 PAC, the EIP service of this module must be enabled in the Services tab of the PROPERTIES pane.

6002

Incorrect configuration

For the following modules, when the NTP client service is enabled, the NTP polling value must be configured in the range from 1 to 120:

  • BMENOC0301

  • BMENOC0311

  • BMENOC0321

  • Modicon M580 CPU

6003

Using a CRA adapter module requires that the following services of the associated CPU module be enabled:

  • TFTP

  • EIP

  • DHCP

6004

Alert

When the DHCP server is disabled, client devices that subscribe to it in the DHCP VIEW do not receive IP addresses and network parameters.

Enable the service in the Services tab of the PROPERTIES pane.

6005

Alert

When the DHCP server does not support the protocol that is used by a client device, it cannot provide IP addresses and network parameters to the device.

Assign the device to a server that supports the protocol in the DHCP VIEW or change its protocol in the Services tab of the PROPERTIES pane if possible.

6006

Incorrect configuration

When the DHCP client service is enabled and a DHCP server is configured for a device, Identifier cannot be empty.

For some devices, the DHCP identifier must satisfy device-specific format requirements. Default identifiers may not fulfill these requirements; for example, for generic devices.

6007

Alert

When the DHCP client service is enabled for a device that is scanned by a scanner, the DHCP server that is configured for this device must be the scanner.

6008

When the control port of a BMENUA0100 module is disabled, the primary and secondary NTP server IP addresses in IPv4 format must belong to the same logical network as the BKP interface of the module.

The same applies when the control port is enabled but the IPv4 interface of the module is disabled.

In a redundant PAC, when the control port and the IPv4 interface of the module are enabled, the NTP server IP addresses in IPv4 format of modules in local racks A and B must belong to the same logical network.

NOTE: The incorrect configuration is not detected if the IP addresses are set to 0.0.0.0. An alert may be raised (see rule 6018).

6009

Using a BMENUA0100 module requires that the following services of the associated CPU module be enabled:

  • TFTP

  • DHCP

6010

Using a BMENUA0100 module requires that Data Dictionary be enabled in the project settings of the associated control project

6011

One or more of the following settings is disabled:

  • TFTP

  • DHCP

Verify that the configuration of security services is appropriate for your particular application.

6012

Incorrect configuration

When the Update CPU Time functionality is used, enable it only for one communication module of the PAC and verify that the CPU module is not configured as NPT client.

6013

When the IPsec service is enabled, Secure Protocol must be set to IPsec and the Pre-Shared Key attribute cannot be left blank.

6014

When QoS is selected for the L2 Service of a physical port, the QoS service must be enabled for the module.

6015

When the DHCP client service is enabled for a device, the DHCP server name must be configured.

6016

For TeSys devices, the DHCP identifier cannot exceed 16 characters.

6017

When the DHCP client service is enabled and configured to use the MAC address to identify the device, this address must be properly configured.

6018

Alert

To use the NTP service with SNTP, at least the IP address of the primary NTP server must be configured.

Incorrect configuration

To use the NTP service with NTP version 4, at least one NTP server IP address must be configured.

6019

Incorrect configuration

When the DHCP client service is enabled for a device, the DHCP service of its DHCP server must be enabled.

6021

Verify that for each DHCP client that subscribes to the same DHCP server, the DHCP identifier is unique.

6022

For a BMENUA0100 module, when the control port is enabled, the IP address that is configured for the primary or secondary NTP server must be different from the static IP address of the control port (Embedded Interface ).

This applies to IPv4 and IPv6 addresses.

For a redundant PAC, applies to any combination of roles A and B.

6024

When SNMPv3 is enabled, the User Name attribute cannot be empty.

6025

When the Syslog server is enabled, NTP State must be set to NTP Client.

6026

When the Syslog server is enabled, the following IP addresses of the M580 CPU module must belong to the same logical network:

  • IP Address of the Syslog server

  • MainIP

  • Primary NTP Server

  • Secondary NTP Server

6027

Alert

The attributes of the Syslog Server category for a PAC can be configured independently of the values that are set for the system project.

The values configured for the PAC are the ones that are used for communication with the Syslog server.

6028

Incorrect configuration

The IP addresses of the first and second SNMP managers must be different.

Applies to the following modules:

  • All M580 standalone CPU modules

  • BMECRA31210, BMECRA31310

  • BMENOC0301, BMENOC0310, BMENOC0321

  • BMENUA0100

  • BMXCRA31200, BMXCRA31210

6029

To use the NTP service with NTP version 4, the IP address of the preferred NTP server must be configured.