For the following function you must have the item "OCPP security settings" or the right "OCPP security settings", which you can unlock, so that this item is displayed to you in the "Settings" tab.
From now on it is possible for you to define IP address ranges via be.ENERGISED, which will be applied when connecting your station via the OCPP-Broker. With this configuration only connections between station and backend are accepted, which fall into this IP address range.
What is the benefit of this setting?
This new feature is used to further increase the security of the connection between the charging station and the be.ENERGISED backend. Thus, this is an option especially in case of a public connection via the OCPP-Broker to additionally secure the connection.
Where in the backend can this setting be made?
You can make these settings under Settings/System Settings/OCPP Security Settings. Go to the tab "IP Address Ranges" and click on "New IP range".
You now have the option to specify an IP range.
IP address ranges are configured in Classless Inter-Domain Routing (CIDR) format.
Then you have to select the broker connection type (private, public, privatessl etc.). Finally, you specify the environment, whether these settings should already be activated productively or only in the test environment, just as you would otherwise do with the passwords in the OCPP security settings.
Then save the data and the configuration is complete.
Please note that the settings may take a few minutes to become active.
From here on, when a connection is established, the system checks the IP address of the charging station and compares it with the IP address range you specified. If the IP address falls within the range, the connection is accepted.
More information about the connection via the OCPP broker can be found here.
Version: 2022-03-23 12:50:35 UTC