Page 1
___________________ Preface Connecting SCALANCE M- ___________________ 800 to WAN ___________________ SCALANCE M-800 as DHCP SIMATIC NET server Industrial Remote Communication Remote Networks SCALANCE M-800 Getting Started 01/2019 C79000-G8976-C337-07...
Page 2
Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems.
Preface Purpose The configuration of the SCALANCE M is shown based on examples. IP settings for the examples Note The IP settings used in the examples were freely chosen. In a real network, you would need to adapt these IP settings to avoid possible address conflicts.
Page 4
(https://support.industry.siemens.com/cs/ww/de/view/109475909/en) ● "Web based Management" configuration manual This document is intended to provide you with the information you require to commission and configure devices using the Web Based Management. – SCALANCE M-800: Entry ID: 109751635 (https://support.industry.siemens.com/cs/ww/de/view/109751635/en) – SCALANCE S615: Entry ID: 109751632 (https://support.industry.siemens.com/cs/ww/de/view/109751632/en)
Page 5
Industrial Ethernet network. Entry ID: 27069465 (https://support.industry.siemens.com/cs/ww/de/view/27069465/en) SIMATIC NET manuals You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online Support: ● using the search function: Link to Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/ps)
Page 6
Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers’...
Table of contents Preface ..............................3 Connecting SCALANCE M-800 to WAN ....................9 Procedure in principle ....................... 9 Setting up the SCALANCE M-800 and the network ............... 11 Connecting M826 to SHDSL ....................12 Adapting IP settings ........................ 17 1.4.1 Configuration with the Primary Setup Tool (PST) ..............
Page 8
Table of contents Getting Started, 01/2019, C79000-G8976-C337-07...
Connecting SCALANCE M-800 to WAN Procedure in principle This section provides an overview of how a SCALANCE M-800 with the factory settings can be integrated in a network and configured. This can be a mobile wireless network (SCALANCE M87x) or a wired network (SCALANCE M812, SCALANCE M816 or SCALANCE M826).
Page 10
The required steps in configuration depend in part on the device you are using. If the SCALANCE M826 is used in 2-wire operation, only the configuration step "Setting up SCALANCE M-800 and the network" is required. After this, the SCALANCE M826 is ready for operation immediately (out of the box).
Note the security instructions in the operating instructions before you commission the device. Procedure 1. Unpack the SCALANCE M-800 and check the device for damage. 2. Only with with the SCALANCE M87x: Insert the SIM card. 3. Connect the power supply.
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL Connecting M826 to SHDSL The SCALANCE M826 can be operated in two ways: ● 2-wire operation When supplied, the two SHDSL interfaces are set so that two SCALANCE M826 can be connected via a point-to-point connection.
Page 13
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL Settings used Figure 1-3 Factory settings for the devices of the configuration example Getting Started, 01/2019, C79000-G8976-C337-07...
Page 14
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL 4-wire operation Figure 1-4 The admin PCs represent network nodes that are connected to an Ethernet interface of the relevant SCALANCE M826. The two SCALANCE M826 are connected together via two of the company's own 2-wire cables.
Page 15
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL In routing mode In this example, three different IP subnets will be interconnected via the SCALANCE M826. For this connection, there must be a one SHDSL interface of a device in the role of CO and the other in the role of CPE.
Page 16
Connecting SCALANCE M-800 to WAN 1.3 Connecting M826 to SHDSL Settings used Interface IP address Master M826 SHDSL Vlan 2 192.168.184.2 station (external) 255.255.255.0 Ethernet Vlan 1 192.168.100.1 (internal) 255.255.255.0 Admin PC Ethernet 192.168.100.20 (internal) 255.255.255.0 Station 1 M826 SHDSL Vlan 2 192.168.184.22...
1.4 Adapting IP settings Adapting IP settings Introduction To ba able to access a SCALANCE M-800 with the Web Based Management, the device must have an IP address. You have the following options for assigning an IP address to devices with factory settings for the first time: ●...
Page 18
2. Click on the magnifier in the toolbar to start the search. After the search, all devices are listed that can be configured with the PST. 3. Select the entry for the Ethernet interface of the SCALANCE M-800. 4. Select the option button "Assign IP parameters".
Connecting SCALANCE M-800 to WAN 1.4 Adapting IP settings 1.4.2 Configuration with DCP Discovery Introduction The network parameters of the SCALANCE M826-2 in the plant network are to be updated in this example configuration. To do so, the PC in the service center establishes a WAN connection to a SCALANCE M87x, and the service technician accesses its WBM.
Page 20
Connecting SCALANCE M-800 to WAN 1.4 Adapting IP settings Requirement ● Firmware version V4.3 or later is installed on the devices. ● Device with factory settings Procedure 1. Click "System > DCP Discovery" in the navigation area. 2. Click "Discover" button to start the search. After the search, all devices are listed that can be reached via the interface.
5. Enter the values assigned to the admin PC from the table in the relevant boxes. Note The IP address used in the following figure for the standard gateway 192.168.1.1 must be adapted if the factory setting is not used for the IP address of the SCALANCE M-800. Getting Started, 01/2019, C79000-G8976-C337-07...
Page 22
Connecting SCALANCE M-800 to WAN 1.5 Starting Web Based Management 6. Confirm the dialogs with "OK" and close the Control Panel. 7. Enter the IP address "192.168.1.1" in the address box of the Internet browser. Access via HTTPS is enabled as default. If you access the device via HTTP, the address is automatically redirected to HTTPS.
Page 23
Connecting SCALANCE M-800 to WAN 1.5 Starting Web Based Management 8. If there is a problem-free connection to the device, the logon page of Web Based Management (WBM)is displayed. Getting Started, 01/2019, C79000-G8976-C337-07...
Connecting SCALANCE M-800 to WAN 1.6 Logging in to Web Based Management Logging in to Web Based Management Procedure 1. Log in with the user name "admin" and the password "admin". You will be prompted to change the password. You can also rename the user preset in the factory "admin" once.
Page 25
Connecting SCALANCE M-800 to WAN 1.6 Logging in to Web Based Management 6. Repeat the new password in "Password Confirmation" as confirmation. The entries must match. 7. Click the "Set Values" button. Result The changes take immediate effect and access via DCP is write-protected.
Connecting SCALANCE M-800 to WAN 1.7 Specifying device information Specifying device information To allow better identification of the SCALANCE M-800, specify general device information. Procedure 1. In the navigation area click on "System > General" and in the content area on the "Device"...
1.8 Setting the time Setting the time The date and time are kept on the SCALANCE M-800 to check the validity (time) of certificates and for the time stamps of log entries. You can set the system time yourself manually or have it synchronized automatically with a time server. There are a number of time servers on the Internet that can be used to obtain the current time precisely.
Page 28
Connecting SCALANCE M-800 to WAN 1.8 Setting the time Procedure 1. In the navigation area click on "System > System Time" and in the content area on the "NTP Client" tab. 2. In "Time zone", enter the local time difference to world time (UTC). For Central European Summer time (CEST) +02:00.
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Additional configuration steps with the SCALANCE M87x and SCALANCE M81x 1.9.1 Configuring access parameters for the SCALANCE M87x Requirement ● The services are enabled, e.g. Internet.
Page 30
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Configure APN 1. Click on the "Operator" tab in the content area. 2. Specify the access data for the APN. – If your mobile wireless provider is included in the table, no further configuration is necessary.
Page 31
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x There the name of your mobile wireless provider should appear in "Provider". For a functioning connection, the signal strength should be higher than 104 dBm.
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x When there is a change in the cell, this is displayed by a vertical black line. The cell IDs (old > new) are displayed in the line. When the mobile network changes as well, this is also indicated.
Page 33
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Configuring ADSL 1. Click "Interfaces" > "DSL" in the navigation area 2. Enable the DSL interface. 3. Disable PPPoE passthrough to set up the access data for the SCALANCE M81x. The connected devices can use this DSL connection.
Page 34
Connecting SCALANCE M-800 to WAN 1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x Result The DSL connection is set up. The device connects to the Internet after approximately 30 seconds. You can check whether the connection is established in "Information > Start Page".
1.9 Additional configuration steps with the SCALANCE M87x and SCALANCE M81x 1.9.3 Setting up the DDNS hostname DDNS stands for "dynamic domain name system". If you log the SCALANCE M-800 on to a DDNS service, the device can be reached from the external network under a hostname, e.g. "example.no-ip.com".
Page 36
4. Select the appropriate check box in the "enabled" column for one of the two services "No- IP" or "DynDNS". 5. Click on "Set Values". Result The DDNS client is activated. The DDNS client on the SCALANCE M-800 synchronizes the assigned IP address with the hostname registered in the DDNS service. Getting Started, 01/2019, C79000-G8976-C337-07...
Connecting SCALANCE M-800 to WAN 1.10 Additional steps in configuration with the SCALANCE M826 in 4-wire operation 1.10 Additional steps in configuration with the SCALANCE M826 in 4- wire operation 1.10.1 Configuring SHDSL Procedure 1. In the navigation area, click on "Interfaces > SHDSL > Configuration".
Page 38
Connecting SCALANCE M-800 to WAN 1.10 Additional steps in configuration with the SCALANCE M826 in 4-wire operation 5. Click on "Set Values". Getting Started, 01/2019, C79000-G8976-C337-07...
Page 39
Connecting SCALANCE M-800 to WAN 1.10 Additional steps in configuration with the SCALANCE M826 in 4-wire operation 6. In the navigation area click "Interfaces" > "SHDSL" > "Overview". 7. Enable the PME aggregation function. When enabled, the SHDSL interfaces or the 2-wire cables are put together to form a single connection with a higher transmission rate.
Connecting SCALANCE M-800 to WAN 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode 1.11.1 Creating IP subnet In routing mode, the interfaces are handled differently.
Connecting SCALANCE M-800 to WAN 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode Result The IP subnets have been created. The IP subnets are displayed in the "Overview" tab. 1.11.2 Configuring routes The master station and the stations are in different IP subnets. To allow the master station to communicate with the stations, the appropriate routes need to be created on the M826.
Page 42
Connecting SCALANCE M-800 to WAN 1.11 Additional steps in configuration with the SCALANCE M826 in routing mode 3. When you have entered the values, click "Create". 4. To update the display, click "Refresh". M826 in the stations: Configuring routes 1. Click "Layer 3 > Static Routes" in the navigation area.
The predefined firewall rules specify which of the zones (VLAN1, VLAN2, ... or PPP) may access which services of the SCALANCE M-800. With predefined rules it is possible to permit data exchange between the zones (internal VLAN1 to external PPP0). The firewall rule for the opposite direction is permitted by stateful packet inspection.
Page 44
Connecting SCALANCE M-800 to WAN 1.12 Allow access 3. Configure HTTP with the following settings: Transport Destination Port (Range) (standard port) 4. Click on "Set Values". 5. A new entry is created in the table. 6. Under "Service Name", enter e.g. "DNS" and click "Create". A new entry is created in the table.
Page 45
Connecting SCALANCE M-800 to WAN 1.12 Allow access 5. Click "Create". A new entry is created in the table. 6. Configure the firewall rule for DNS with the following settings: Action Accept From vlan1 (INT) ppp0 or usb0 Source (Range) 192.168.100.10 (the required device)
Page 46
Connecting SCALANCE M-800 to WAN 1.12 Allow access Getting Started, 01/2019, C79000-G8976-C337-07...
● The required network cable, TP cable (twisted pair) complying with the IE FC RJ-45 standard for Industrial Ethernet Setting used In the configuration example, the SCALANCE M-800 has the following IP address setting: ● IP address 192.168.100.1 ● Subnet mask: 255.255.255.0...
Page 48
● IP address 192.168.100.1 ● Subnet mask: 255.255.255.0 Requirement ● The SCALANCE M-800 can be reached via the admin PC and you are logged in to the WBM as "admin". Steps in configuration 1. Configuring dynamic IP address assignment (Page 49) 2.
SCALANCE M-800 as DHCP server 2.1 Configuring dynamic IP address assignment Configuring dynamic IP address assignment The devices whose MAC address or whose client ID was not specified specifically, are assigned a random IP address from a specified address range.
Page 50
SCALANCE M-800 as DHCP server 2.1 Configuring dynamic IP address assignment 9. To enable the configured DHCP pool, select the check box in the "Enable" column. 10.Click on "Set Values". Result The DHCP server can assign up to 100 IP addresses from a set address band. This is only possible if the connected devices are configured so that they obtain the IP address from a DHCP server.
SCALANCE M-800 as DHCP server 2.2 Specifying DHCP options Specifying DHCP options Further information can be transferred to the DHCP client using DHCP options. The various DHCP options are defined in RFC 2132. The DHCP options 1, 3, 6, 66 and 67 are created automatically when the IPv4 address band is created.
Page 52
SCALANCE M-800 as DHCP server 2.2 Specifying DHCP options 3. Enter "42" in "Option Code". 4. Click "Create". A new row is created in the table. 5. In "Value", enter the IP address of the NTP server. 6. Click on "Set Values".
SCALANCE M-800 as DHCP server 2.3 Configuring static IP address assignment Configuring static IP address assignment For nodes in permanent operation, static IP address assignment should be preferred, for example for a local NTP server. The IP address of the NTP server is used in the DHCP option.
Page 54
SCALANCE M-800 as DHCP server 2.3 Configuring static IP address assignment 6. In "IP Address", enter the IP address of the NTP server. 7. Click on "Set Values". Result The NTP server always has the IP address 192.168.100.87. Getting Started, 01/2019, C79000-G8976-C337-07...