Anybus® CompactCom 40 - EtherNet/IP IIoT Secure

Login

Login to the Anybus CompactCom is done by submitting a form with the following content to /login.cgi:

Username

Name of user to log in. Max 64 ASCII characters.

Password

Used to authenticate a user for a specific account. Max 64 ASCII characters

Target

Optional.

If access is granted, the client is redirected to this location. Please note that if the user is not authorized to access Target, the user will still be logged in, but without access to Target.

The web server of the Anybus CompactCom will set the following cookies after a successful login:

Cookie

Description

wto

Contains creation time and user role. Signed by the server and cannot be modified by the client. Must accompany all requests. (Automatically added by all browsers).

csrf

Used to protect from CSRF attacks. The value of this cookie must be included as an HTML parameter (csrf) in all state-changing

role

The role of the user currently logged in. Can be used by the client web pages. (Information to client, not used by server) This cookie must be base64 encoded.

user

The name of the user currently logged in. Can be used by the client web pages. (Information to client, not used by server) This cookie must be base64 encoded.

stmo

The session timeout (in seconds) configured for the currently logged in role. Can be used by the client web pages. (Information to client, not used by server)

sret

Session retriggered. The value changes every time the session is used. Can be used by client web pages to trigger a timer used to know when a web session is going to time out. (Information to client, not used by server)