SIMATIC WinCC Open Architecture Forum

Good day,

I want to ask about the ports that are used by wincc oa to be opened through the firewall between multiple subnets.

In the system architecture we are using redundancy and distributed.

1) Should the event , data , pmon ports to be opened between the Distributed or redundant servers.
2) For the distributed system should we open only one port with distPort config or we will need two ports for bidirectional communication and the same applies for redundancy ( do we need one port or two for reduPort )?

Please if possible list all needed ports that we have to open through the firewall.

Regards

Which ports are needed for the inbound communication depends on the project configuration.
If you are using the Multiplexing Proxy only the proxy port is used for inbound communication. Otherwise all ports used by WinCC OA need to be opened for inbound communication.

In the WinCC OA Documentation you will find the information what the standard ports are for every manager which is opening a server port (Data, Event, Redu, Dist, Split, Proxy).

Best Regards
Leopold Knipp
Senior Support Specialist

Hi Leo,

The case is not multiplexing proxy, ports to be opened are the normal managers ports (distrib,event,data,etc...) .

one of the endpoints (server or client) sends the packet over a specified port configured in the config file ,while the other is receiving on an arbitrary port (random) , is there a range of random ports or is there a way to declare the sending and receiving ports.

Please clarify the communication criteria.

Thanks

There seems to be a misunderstanding in how the communication via the ports works.
In TCP, you have the server listening for incoming connections on a specific port (in WinCC_OA this is
the eventPort, dataPort, mxproxy port, dist port). This is the port which needs to be reachable
through the firewall - and only this.
What you might be thinking of is that the OS assigns an "arbitrary" port for the then established communication, but this
does no longer matter, since the firewall blocks the INCOMING connection requests to the server port.