Summary of Contents for Siemens SIMATIC NET SCALANCE M-800
Page 1
SCALANCE M-800 Preface Connecting SCALANCE M- 800 to WAN SCALANCE M-800 as DHCP SIMATIC NET server Industrial Remote Communication Remote Networks SCALANCE M-800 Getting Started 07/2020 C79000-G8976-C337-09...
Page 2
Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems.
Preface Purpose The configuration of the SCALANCE M is shown based on examples. IP settings for the examples Note The IP settings used in the examples were freely chosen. In a real network, you would need to adapt these IP settings to avoid possible address conflicts.
Page 4
The configuration and the integration of the devices in a network are not described in these instructions. – SCALANCE M874, M876 Entry ID: 74518712 (https://support.industry.siemens.com/cs/ww/de/view/109475909/en) – SCALANCE M812, M816 Entry ID: 90316607 (https://support.industry.siemens.com/cs/ww/de/view/90316607/en) – SCALANCE M804PB: Entry ID: 109759601 (https://support.industry.siemens.com/cs/ww/en/view/109759601)
Page 5
Industrial Ethernet network. Entry ID: 27069465 (https://support.industry.siemens.com/cs/ww/de/view/27069465/en) SIMATIC NET manuals You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online Support: ● using the search function: Link to Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps)
Page 6
Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers’...
Table of contents Preface ............................3 Connecting SCALANCE M-800 to WAN ................... 9 Procedure in principle ......................9 Setting up the SCALANCE M-800 and the network ............11 Connecting M826 to SHDSL ....................12 Adapting IP settings ......................17 1.4.1 Configuration with the Primary Network Initialization (SINEC PNI) ........
Connecting SCALANCE M-800 to WAN Procedure in principle This section provides an overview of how a SCALANCE M-800 with the factory settings can be integrated in a network and configured. This can be a mobile wireless network (SCALANCE M87x) or a wired network (SCALANCE M812, SCALANCE M816 or SCALANCE M826).
Page 10
Connecting SCALANCE M-800 to WAN 1.1 Procedure in principle Additionally with the SCALANCE M87x ● A suitable antenna ● A SIM card of your mobile wireless provider The required services, for example the Internet, must be enabled. Additionally with the SCALANCE M81x ●...
Connecting SCALANCE M-800 to WAN 1.2 Setting up the SCALANCE M-800 and the network Setting up the SCALANCE M-800 and the network Note Note the security instructions in the operating instructions before you commission the device. Procedure 1. Unpack the SCALANCE M-800 and check the device for damage. 2.
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL Connecting M826 to SHDSL The SCALANCE M826 can be operated in two ways: ● 2-wire operation When supplied, the two SHDSL interfaces are set so that two SCALANCE M826 can be connected via a point-to-point connection.
Page 13
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL 2-wire operation with factory settings (out of the box) Figure 1-2 The admin PCs represent network nodes that are connected to an Ethernet interface of the relevant SCALANCE M826. The SCALANCE M826 are connected together via the company's own 2-wire cable. Settings used Figure 1-3 Factory settings for the devices of the configuration example...
Page 14
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL 4-wire operation Figure 1-4 The admin PCs represent network nodes that are connected to an Ethernet interface of the relevant SCALANCE M826. The two SCALANCE M826 are connected together via two of the company's own 2-wire cables.
Page 15
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL In routing mode In this example, three different IP subnets will be interconnected via the SCALANCE M826. For this connection, there must be a one SHDSL interface of a device in the role of CO and the other in the role of CPE.
Page 16
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL Interface IP address Station 2 M826 SHDSL Vlan 2 192.168.184.42 (external) 255.255.255.0 Ethernet Vlan 1 192.168.50.2 (internal) 255.255.255.0 Admin PC Ethernet 192.168.50.40 (internal) 255.255.255.0 SCALANCE M-800 Getting Started, 07/2020, C79000-G8976-C337-09...
Connecting SCALANCE M-800 to WAN 1.4 Adapting IP settings Adapting IP settings Introduction To ba able to access a SCALANCE M-800 with the Web Based Management, the device must have an IP address. You have the following options for assigning an IP address to devices with factory settings for the first time: ●...
Connecting SCALANCE M-800 to WAN 1.4 Adapting IP settings 1.4.1 Configuration with the Primary Network Initialization (SINEC PNI) Introduction The following section describes the procedure for using the SINEC PNI. Requirement ● Device with factory settings Procedure 1. Start SINEC PNI. If several network cards are installed in the PC, select the network adapter connected to SCALANCE M-800 in the "Settings"...
Connecting SCALANCE M-800 to WAN 1.4 Adapting IP settings 1.4.2 Configuration with DCP Discovery Introduction The network parameters of the SCALANCE M826-2 in the plant network are to be updated in this example configuration. To do so, the PC in the service center establishes a WAN connection to a SCALANCE M87x, and the service technician accesses its WBM.
Page 20
Connecting SCALANCE M-800 to WAN 1.4 Adapting IP settings Requirement ● Firmware version V4.3 or later is installed on the devices. ● Device with factory settings Procedure 1. Click "System > DCP Discovery" in the navigation area. 2. Click "Discover" button to start the search. After the search, all devices are listed that can be reached via the interface.
Connecting SCALANCE M-800 to WAN 1.5 Starting Web Based Management Starting Web Based Management Depending on the device and the example shown, the admin PC is assigned the following IP address: ● SCALANCE M87x and SCALANCE M81x IP address Subnet mask Admin PC 192.168.1.20 255.255.255.0...
Page 22
Connecting SCALANCE M-800 to WAN 1.5 Starting Web Based Management 5. Enter the values assigned to the admin PC from the table in the relevant boxes. Note The IP address used in the following figure for the standard gateway 192.168.1.1 must be adapted if the factory setting is not used for the IP address of the SCALANCE M-800.
Page 23
Connecting SCALANCE M-800 to WAN 1.5 Starting Web Based Management 7. Enter the IP address "192.168.1.1" in the address box of the Internet browser. Access via HTTPS is enabled as default. If you access the device via HTTP, the address is automatically redirected to HTTPS.
Connecting SCALANCE M-800 to WAN 1.6 Logging in to Web Based Management Logging in to Web Based Management Procedure 1. Log in with the user name "admin" and the password "admin". You will be prompted to change the password. You can also rename the user preset in the factory "admin" once. Afterwards, renaming "admin"...
Page 25
Connecting SCALANCE M-800 to WAN 1.6 Logging in to Web Based Management 6. Repeat the new password in "Password Confirmation" as confirmation. The entries must match. 7. Click the "Set Values" button. Result The changes take immediate effect and access via DCP is write-protected. The Basic Wizard starts to support you when configuring the device parameters.
Connecting SCALANCE M-800 to WAN 1.7 Specifying device information Specifying device information To allow better identification of the SCALANCE M-800, specify general device information. Procedure 1. In the navigation area click on "System > General" and in the content area on the "Device"...
Connecting SCALANCE M-800 to WAN 1.8 Setting the time Setting the time The date and time are kept on the SCALANCE M-800 to check the validity (time) of certificates and for the time stamps of log entries. You can set the system time yourself manually or have it synchronized automatically with a time server.
Page 28
Connecting SCALANCE M-800 to WAN 1.8 Setting the time Procedure 1. In the navigation area click on "System > System Time" and in the content area on the "NTP Client" tab. 2. In "Time zone", enter the local time difference to world time (UTC). For Central European Summer time (CEST) +02:00.
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Additional configuration steps with the SCALANCE M87x and SCALANCE M81x 1.9.1 Configuring access parameters for the SCALANCE M87x Requirement ● The services are enabled, e.g. Internet. ●...
Page 30
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Configure APN 1. Click on the "Operator" tab in the content area. 2. Specify the access data for the APN. – If your mobile wireless provider is included in the table, no further configuration is necessary.
Page 31
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x There the name of your mobile wireless provider should appear in "Provider". For a functioning connection, the signal strength should be higher than 104 dBm. Note This page provides the option of automatic updating.
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x When there is a change in the cell, this is displayed by a vertical black line. The cell IDs (old > new) are displayed in the line. When the mobile network changes as well, this is also indicated.
Page 33
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Configuring ADSL 1. Click "Interfaces" > "DSL" in the navigation area 2. Enable the DSL interface. 3. Disable PPPoE passthrough to set up the access data for the SCALANCE M81x. The connected devices can use this DSL connection.
Page 34
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Result The DSL connection is set up. The device connects to the Internet after approximately 30 seconds. You can check whether the connection is established in "Information > Start Page". SCALANCE M-800 Getting Started, 07/2020, C79000-G8976-C337-09...
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x You will find more detailed information on the connection in "Information > DSL". 1.9.3 Setting up the DDNS hostname DDNS stands for "dynamic domain name system". If you log the SCALANCE M-800 on to a DDNS service, the device can be reached from the external network under a hostname, e.g.
Page 36
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x 4. Select the appropriate check box in the "enabled" column for one of the two services "No- IP" or "DynDNS". 5. Click on "Set Values". Result The DDNS client is activated.
Connecting SCALANCE M-800 to WAN 1.10 Additional steps in configuration with the SCALANCE M826 in 4-wire operation 1.10 Additional steps in configuration with the SCALANCE M826 in 4- wire operation 1.10.1 Configuring SHDSL Procedure 1. In the navigation area, click on "Interfaces > SHDSL > Configuration". 2.
Page 38
Connecting SCALANCE M-800 to WAN 1.10 Additional steps in configuration with the SCALANCE M826 in 4-wire operation 6. In the navigation area click "Interfaces" > "SHDSL" > "Overview". 7. Enable the PME aggregation function. When enabled, the SHDSL interfaces or the 2-wire cables are put together to form a single connection with a higher transmission rate.
Connecting SCALANCE M-800 to WAN 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode 1.11.1 Creating IP subnet In routing mode, the interfaces are handled differently. ●...
Connecting SCALANCE M-800 to WAN 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode Result The IP subnets have been created. The IP subnets are displayed in the "Overview" tab. 1.11.2 Configuring routes The master station and the stations are in different IP subnets. To allow the master station to communicate with the stations, the appropriate routes need to be created on the M826.
Page 41
Connecting SCALANCE M-800 to WAN 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode 3. When you have entered the values, click "Create". 4. To update the display, click "Refresh". M826 in the stations: Configuring routes 1. Click "Layer 3 > Static Routes" in the navigation area. 2.
Connecting SCALANCE M-800 to WAN 1.12 Allow access 1.12 Allow access The firewall is enabled as default. The following access is nor allowed: ● Access from internal to external. ● Access from external to internal. ● Data exchange between different internal VLANs. ●...
Page 43
Connecting SCALANCE M-800 to WAN 1.12 Allow access Allow Internet access for a certain device and a certain service (HTTP) Create HTTP and DNS services 1. Click on "Security > Firewall" in the navigation area and on the "IP Services" tab in the content area.
Page 44
Connecting SCALANCE M-800 to WAN 1.12 Allow access Only allow the IP service for a specific device 1. Click on "Security > Firewall" in the navigation area and on the "IP Rules" tab in the content area. 2. Click "Create". A new entry is created in the table. 3.
Page 45
Connecting SCALANCE M-800 to WAN 1.12 Allow access Allow an internal node access to the Internet 1. Click on "Security > Firewall" in the navigation area and on the "IP Rules" tab in the content area. 2. Click "Create". A new entry is created in the table. 3.
Page 46
Connecting SCALANCE M-800 to WAN 1.12 Allow access SCALANCE M-800 Getting Started, 07/2020, C79000-G8976-C337-09...
SCALANCE M-800 as DHCP server If you want to use the device to manage the network configuration, you can use the device as a DHCP server. This allows IP addresses to be assigned automatically to the devices connected to the internal network. In this example, both static and dynamic IP address assignments are configured.
Page 48
SCALANCE M-800 as DHCP server Requirement ● The SCALANCE M-800 can be reached via the admin PC and you are logged in to the WBM as "admin". Steps in configuration 1. Configuring dynamic IP address assignment (Page 49) 2. Specifying DHCP options (Page 51) 3.
SCALANCE M-800 as DHCP server 2.1 Configuring dynamic IP address assignment Configuring dynamic IP address assignment The devices whose MAC address or whose client ID was not specified specifically, are assigned a random IP address from a specified address range. Procedure 1.
Page 50
SCALANCE M-800 as DHCP server 2.1 Configuring dynamic IP address assignment 9. To enable the configured DHCP pool, select the check box in the "Enable" column. 10. Click on "Set Values". Result The DHCP server can assign up to 100 IP addresses from a set address band. This is only possible if the connected devices are configured so that they obtain the IP address from a DHCP server.
SCALANCE M-800 as DHCP server 2.2 Specifying DHCP options Specifying DHCP options Further information can be transferred to the DHCP client using DHCP options. The various DHCP options are defined in RFC 2132. The DHCP options 1, 3, 6, 66 and 67 are created automatically when the IPv4 address band is created.
Page 52
SCALANCE M-800 as DHCP server 2.2 Specifying DHCP options 3. Enter "42" in "Option Code". 4. Click "Create". A new row is created in the table. 5. In "Value", enter the IP address of the NTP server. 6. Click on "Set Values". Result The DHCP options are configured.
SCALANCE M-800 as DHCP server 2.3 Configuring static IP address assignment Configuring static IP address assignment For nodes in permanent operation, static IP address assignment should be preferred, for example for a local NTP server. The IP address of the NTP server is used in the DHCP option.
Page 54
SCALANCE M-800 as DHCP server 2.3 Configuring static IP address assignment 6. In "IP Address", enter the IP address of the NTP server. 7. Click on "Set Values". Result The NTP server always has the IP address 192.168.100.87. SCALANCE M-800 Getting Started, 07/2020, C79000-G8976-C337-09...