manualshive.com logo in svg

Siemens SCALANCE S623, Commissioning And Hardware Installation Manual

Share
Download
Siemens SCALANCE S623 Commissioning And Hardware Installation Manual Download Page 46

Troubleshooting/FAQs 

 

7.5 SCALANCE S device is compromised 

 

SCALANCE S 

46

 

Commissioning and Hardware Installation Manual, 05/2016, C79000-G8976-C266-06 

Security Configuration Tool - follow the steps below: 

1.

 

If necessary, change the project to advanced mode with the menu command "View" > 

"Advanced mode". 

2.

 

In the navigation area, select the VPN group you want to edit. 

3.

 

Select the "Edit" > "Properties..." menu command. 

4.

 

Generate a new key by clicking the "New..." button in the "Pre-shared key" area. 

5.

 

Confirm the next dialog with "Yes". 

6.

 

Download the configuration to all SCALANCE S modules that belong to the VPN group. 

Password of a user is known 

If the password of a user with administrator rights relating to configuration and/or to a module 

or several modules is known, the server certificate of the corresponding module and the 

password of the user should be changed. 
If the password of a user who is assigned the "standard", "diagnostics" or "remote access" 

role is known, the password of the user should be changed. 

Summary of Contents for SCALANCE S623

Page 1: ...___________________ ___________________ ___________________ SIMATIC NET Industrial Ethernet Security SCALANCE S Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 Preface 1 Safety notices 2 Description 3 Deployment planning 4 Mounting 5 Commissioning 6 Troubleshooting FAQs 7 Dimension drawings 8 Approvals A ...

Page 2: ...ation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation in particular its warning notices and safety instructions Qualified personnel are those who based on their training and experience are capable of identifying risks and avoiding potential hazards when working with these products systems Proper use of Siemens products Note the follow...

Page 3: ... 3 3 Components of the product 17 3 4 Power supply 17 3 5 Signaling contact 18 3 6 Displays 19 4 Deployment planning 23 4 1 Unpacking and checking 23 4 2 Attachment to Ethernet 23 4 3 Reset button resetting the configuration to the factory settings 25 4 4 C PLUG configuration plug 27 5 Mounting 31 5 1 Notes on installation 31 5 2 Types of installation 31 5 2 1 Installation on a DIN rail 32 5 2 2 I...

Page 4: ... and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 7 3 SCALANCE S device does not restart correctly 44 7 4 SCALANCE S device cannot be reached 44 7 5 SCALANCE S device is compromised 44 8 Dimension drawings 47 A Approvals 49 Index 55 ...

Page 5: ...he specified approvals apply only when the corresponding mark is printed on the product Notes on configuration The SCALANCE S devices listed above can be configured with the following tools Configuration tool Relevant documentation Security Configuration Tool standalone and integrated in STEP 7 as of V5 5 SP2 HF1 Configuration manual SIMATIC NET Industrial Ethernet Security Ba sics and Application...

Page 6: ...ity information Siemens provides products and solutions with industrial security functions that support the secure operation of plants solutions machines equipment and or networks They are important components in a holistic industrial security concept With this in mind Siemens products and solutions undergo continuous development Siemens recommends strongly that you regularly check for product upd...

Page 7: ...mmissioning 2 1 General notices Do not start up until you have established that the machine on which you intend to run this component complies with the directive 89 392 EEC NOTICE Battery change Each SCALANCE S device has a battery This battery must not be changed by customers or by service personnel A battery can only be changed in the MF K production factory If this becomes necessary send the de...

Page 8: ...NENTS MAY IMPAIR SUITABILITY FOR CLASS I DIVISION 2 OR ZONE 2 WARNING EXPLOSION HAZARD DO NOT OPEN WHEN ENERGIZED WARNING The device may only be operated in an environment with pollution degree 1 or 2 see IEC 60664 1 WARNING The equipment is designed for operation with Safety Extra Low Voltage SELV by a Limited Power Source LPS This means that only SELV LPS complying with IEC 60950 1 EN 60950 1 VD...

Page 9: ... must also keep to the following safety notices in addition to the general safety notices for protection against explosion WARNING To comply with EC Directive 94 9 ATEX95 or the conditions of IECEx this enclosure or cabinet must meet the requirements of at least IP54 in compliance with EN 60529 WARNING Take measures to prevent transient voltage surges of more than 40 of the rated voltage This is t...

Page 10: ...ZARDOUS This equipment is suitable for use in Class I Division 2 Groups A B C and D or non hazardous locations only This equipment is suitable for use in Class I Zone 2 Group IIC or non hazardous locations only 2 5 Information on use in hazardous areas according to UL Valid only in areas where NEC or CEC applies WARNING Warning for areas subject to NEC or CEC Safety notice for connectors with LAN ...

Page 11: ...cal data Power supply Supply 24 VDC 19 2 to 28 8 VDC Implemented redundantly Safety extra low voltage SELV Typical power consumption at 24 VDC 1000 Mbps SCALANCE S602 S612 9 0 W SCALANCE S623 9 7 W SCALANCE S627 2M 12 0 W without media modules max 2 5 W extra per media module Max current consumption at rated voltage SCALANCE S602 S612 0 5 A SCALANCE S623 0 5 A SCALANCE S627 2M 0 7 A Permitted cabl...

Page 12: ...ental conditions for SCALANCE S627 2M Media module Operating tempera ture vertical installa tion Stor age tra nspor tation tem pera ture Max relative humidi ty in operation at 25 C Max ambient tem perature at operating altitude Without or with the following media mod ules MM991 2 BFOC MM991 2LD BFOC MM991 2 SC MM991 2LH MM991 2LD SC MM992 2 MM992 2LD MM992 2LH MM992 2LH MM992 2ELH MM992 2CUC MM992...

Page 13: ... 40 C up to 3000 m above sea level at max 35 C Approvals ATEX Zone 2 EN 60079 15 Construction Installation options 35 mm DIN rail S7 300 standard rail Wall mounting Dimensions W x H x D in mm SCALANCE S602 S612 S623 60 x 125 x 124 SCALANCE S627 2M 120 x 125 x 124 Weight in g SCALANCE S602 S612 790 SCALANCE S623 815 SCALANCE S627 2M 1300 Article numbers SCALANCE S602 6GK5602 0BA10 2AA3 SCALANCE S61...

Page 14: ...s for accessories IE FC Stripping Tool 6GK1901 1GA00 IE FC blade cassettes 6GK1901 1GB00 IE FC TP standard cable Fast Ethernet 6XV1840 2AH10 IE FC TP trailing cable Fast Ethernet 6XV1840 3AH10 IE FC TP marine cable Fast Ethernet 6XV1840 4AH10 IE FC TP standard cable 4X2 gigabit Ethernet 6XV1870 2E IE FC TP flexible cable 4X2 gigabit Ethernet 6XV1870 2H IE FC RJ 45 Plug 180 Fast Ethernet pack of 1 ...

Page 15: ...e Installation Manual 05 2016 C79000 G8976 C266 06 15 FC FO trailing cable 6XV1847 2C FC SC Plug pack of 10 6GK1900 1LB00 0AC0 FC BFOC Plug pack of 20 6GK1900 1GB00 0AC0 FC SC Coupler pack of 5 6GK1900 1LP00 0AB0 FC BFOC Coupler pack of 10 6GK1900 1GP00 0AB0 C PLUG 6GK1900 0AB00 ...

Page 16: ...016 C79000 G8976 C266 06 3 2 Hardware characteristics All SCALANCE S devices have the following essential characteristics Hardware Rugged housing with degree of protection IP20 Optional mounting on an S7 300 or DIN 35 mm rail wall mounting Redundant power supply Signaling contact Image 3 1 SCALANCE S627 2M ...

Page 17: ...er supply terminals The power supply unit to supply the SCALANCE S must comply with NEC Class 2 voltage range 19 2 28 8 V The device may only be supplied by a power unit that meets the requirements of class 2 for power supply units of the National Electrical Code Table 11 b If the device is connected to a redundant power supply two separate power supplies both must meet these requirements Note Nev...

Page 18: ... or to DC voltage higher than 32 VDC The polarity of the connectors is irrelevant The signaling contact is connected to a 2 pin plug in terminal block The signaling contact is a floating switch with which error fault states can be signaled by breaking the contact The following errors faults can be signaled by the signaling contact Fault in the power supply Internal fault If a fault occurs or if no...

Page 19: ...nual 05 2016 C79000 G8976 C266 06 19 3 6 Displays Image 3 4 Operating displays Port status display P1 Port status display P2 Port status display P3 Port status display P4 Port status display P5 Port status display P6 Port status display P7 Fault display F and power display L1 L2 ...

Page 20: ... address was assigned the device remains in this status Flashes orange and red alter nately Device resets itself to factory settings Signaling contact is open Power LEDs L1 L2 The status of the power supply is indicated by two LEDs Status Meaning LED L1 L2 Lit green Power supply L1 or L2 is connected Not lit in non redundant mode Power supply L1 or L2 is not connected or 14 V L Lit red In redundan...

Page 21: ... C266 06 21 Note Learn phase of the SCALANCE S602 in ghost mode While the SCALANCE S602 is learning the IP address of the internal node in ghost mode the two port LEDs of the SCALANCE S602 V3 1 flash synchronized according to the following pattern assuming there is no further data traffic Long Long Short ...

Page 22: ...Description 3 6 Displays SCALANCE S 22 Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 ...

Page 23: ...s can be connected Depending on the interface the network nodes are handled differently SCALANCE S device Interface Ports of the interface Port type SCALANCE S602 S612 External P1 Built in RJ 45 jack copper Internal P2 Built in RJ 45 jack copper SCALANCE S623 External P1 Built in RJ 45 jack copper Internal P2 Built in RJ 45 jack copper DMZ P3 Built in RJ 45 jack copper SCALANCE S627 2M External P1...

Page 24: ...P cable required for gigabit connection For data transfer at 1000 Mbps you need to connect gigabit devices with 4 x 2 TP cables twisted pair to the SCALANCE S V4 You will find more detailed information on cabling via Industrial Ethernet on the Internet under the following entry ID 27069465 http support automation siemens com WW view en 27069465 Autonegotiation The SCALANCE S device supports autone...

Page 25: ...o the factory settings SCALANCE S switches have a reset button The reset button is located on the rear of the housing below the M32 plug immediately above the C PLUG Image 4 1 Reset button and slot for the C PLUG Note Make sure that only authorized personnel has access to the SCALANCE S device What does the reset button do Two functions can be triggered with the reset button Restart The device is ...

Page 26: ...en 4 Close the recess with the M32 plug and mount the device again Reset to factory settings follow the steps below Note If a C PLUG is plugged in when you reset to factory settings the C PLUG is erased 1 If necessary remove the SCALANCE S device from its mounting to allow access to the compartment The compartment is protected by a screw plug 2 Remove the M32 plug on the rear of the device The res...

Page 27: ...ailable if the basic device is replaced How it works Power is supplied by the basic device The C PLUG retains all data permanently when the power is turned off Removing the C PLUG It is only necessary to remove the C PLUG if the basic device fails hardware fault NOTICE Check the operating status The C PLUG may only be removed when the power is off Replacing the C PLUG NOTICE Damage to hardware by ...

Page 28: ...perator intervention being necessary A basic device with an inserted C PLUG automatically uses the configuration data of the C PLUG when it starts up This is however only possible when the data was written by a compatible device type This allows fast and simple replacement of the basic device If a device is replaced the C PLUG is taken from the failed component and inserted in the replacement Afte...

Page 29: ...ormatted for these device types must not be used The following table shows which C PLUG you can use for which SCALANCE S device type SCALANCE S device type C PLUG formatted by S602 V2 S612 V2 S613 V2 S602 V3 S602 V3 1 in ghost mode S602 V4 S612 V3 S612 V4 S623 V3 S623 V4 S627 2M V4 S602 V2 x S612 V2 S613 V2 x S602 V3 x x S602 V3 1 in ghost mode x S602 V4 x x x x S612 V3 x x S612 V4 x x x S623 V3 x...

Page 30: ...the SCALANCE S device After removing a C PLUG or if a C PLUG is damaged there is therefore no configuration data available To return the SCALANCE S to operation either download the required configuration to the SCALANCE S or insert a C PLUG with the required configuration in the SCALANCE S Diagnostics Inserting a C PLUG that does not contain the configuration of a compatible device type removing t...

Page 31: ...mation siemens com WW view en 27069465 CAUTION Provide suitable shade to protect the device against direct sunlight This avoids unwanted warming of the device and prevents premature aging of the device and cabling Note The requirements of EN61000 4 5 surge test on power supply lines are met only when a Blitzductor BVT AVD 24V type no 918 422 is used Manufacturer DEHN SÖHNE GmbH Co KG Hans Dehn Str...

Page 32: ...Install the SCALANCE S on a 35 mm DIN rail complying with DIN EN 50022 1 Place the upper catch of the device over the top of the DIN rail and then push in the lower part of the device against the rail until it clips into place 2 Install the electrical connecting cables and the terminal block for the signaling contact Image 5 1 SCALANCE S installation on a DIN rail 35 mm ...

Page 33: ...ling To remove the SCALANCE S from the DIN rail 1 First disconnect the TP cables and pull out the terminal block for the power supply and the signaling contact 2 Use a screwdriver to release the lower rail catch of the device and pull the lower part of the device away from the rail Image 5 2 SCALANCE S removing from a DIN rail 35 mm ...

Page 34: ...6 C266 06 5 2 2 Installation on a standard rail Installation on a SIMATIC S7 300 standard rail 1 Place the upper guide at the top of the SCALANCE S housing in the S7 standard rail 2 Screw the SCALANCE S device to the lower part of the standard rail Image 5 3 SCALANCE S installation on a SIMATIC S7 300 standard rail ...

Page 35: ...ong Screws 3 5 mm in diameter and 40 mm long Note The wall mounting must be capable of supporting at least four times the weight of the device 5 2 4 Grounding Installation on a DIN rail The device is grounded over the DIN rail S7 standard rail The device is grounded over its rear panel and the neck of the screw Wall mounting The device is grounded by the securing screw in the unpainted hole Note N...

Page 36: ...Mounting 5 2 Types of installation SCALANCE S 36 Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 ...

Page 37: ...le To operate the SCALANCE S you need to download a configuration created with the Security Configuration Tool or STEP 7 as of V12 Configuration using the Security Configuration Tool is described below Configuring a SCALANCE S also includes the following aspects Mode selection IP parameters Firewall rules IPsec tunnel not for S602 Before putting the device into operation you can first create the e...

Page 38: ...the device is accessible IP communication is then possible If router information is also included in the configuration and has been downloaded to the SCALANCE S the device can also be reached via routers The device has a fixed default MAC address the MAC address is printed on the device and must be used during configuration The firewall is preconfigured with the following basic firewall rules All ...

Page 39: ... Now establish the physical network connections by plugging the network cable connectors into the ports you want to use RJ 45 jacks or media module ports Connect the external interface with the external network to which the configuration PC PG is connected Connect the internal interface with the internal network If applicable connect the DMZ interface with the corresponding network component Note ...

Page 40: ...the dialog that follows create a new user with a user name and the corresponding password The administrator role is assigned to the user automatically Confirm your entries with OK Result A new project is created The Selection of a module or software configuration dialog opens 4 Configure the product type module and firmware release 5 In the Configuration area enter the MAC address in the required ...

Page 41: ...on that can also be found on the product data medium 8 Save the project with the following menu command Project Save As 9 Select the module in the content area and select the menu command Transfer To module When you first load a configuration after installing the Security Configuration Tool a dialog appears in which you can select the required network adapter 10 If you click on the Start button in...

Page 42: ...Commissioning 6 2 Step 2 Configuring and downloading SCALANCE S 42 Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 ...

Page 43: ... lead to damage to the hardware device and C PLUG Replace the C PLUG only when the device is de energized 7 2 Transferring new firmware You can download new firmware versions to a SCALANCE S device with the Security Configuration Tool or STEP 7 as of V12 Requirements To transfer new firmware to a SCALANCE S device the following conditions must be met You must have administrator rights for the proj...

Page 44: ... correctly If the fault LED of the SCALANCE S device is lit red after booting you should first completely reset the device Press the reset button until the fault LED starts to flash orange red The device is then reset to the factory settings and runs a reboot For productive operation you must then download the configuration to the device again If rebooting fails three times in succession the firmw...

Page 45: ...e authority is known If the private key of the certificate authority has become known the certificate of the certificate authority must be replaced on the SCALANCE S module The user names can remain unchanged The VPN groups do however require new certificates provided by the new certificate authority Security Configuration Tool follow the steps below 1 If necessary change the project to advanced m...

Page 46: ...mmand 4 Generate a new key by clicking the New button in the Pre shared key area 5 Confirm the next dialog with Yes 6 Download the configuration to all SCALANCE S modules that belong to the VPN group Password of a user is known If the password of a user with administrator rights relating to configuration and or to a module or several modules is known the server certificate of the corresponding mod...

Page 47: ...SCALANCE S Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 47 Dimension drawings 8 Dimension drawing for SCALANCE S602 S612 S623 devices ...

Page 48: ...Dimension drawings SCALANCE S 48 Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 Dimension drawing for SCALANCE S627 2M devices ...

Page 49: ...7 cert https support industry siemens com cs ww en ps 15327 cert EC directives SIMATIC NET products meet the requirements and aims of the following EC directives EMC directive electromagnetic compatibility The SIMATIC NET products described in these operating instructions meet the requirements of EC directive 2004 108 EC Electromagnetic Compatibility for the following areas of application Field of...

Page 50: ...C Installation Guidelines configuration manual 60612658 http support automation siemens com WW view en 60612658 Working on the device To protect the device from electrostatic discharge personnel must first discharge any electrostatic charge from their body before touching the device Note The test was performed with a device and a connected communications partner that also meets the requirements of...

Page 51: ...5972 cULus Approval Hazardous Location cULus Listed I T E FOR HAZ LOC Underwriters Laboratories Inc complying with UL 60950 1 Information Technology Equipment ANSI ISA 12 12 01 2007 CSA C22 2 No 213 M1987 Approved for use in Cl 1 Div 2 GP A B C D T4 Cl 1 Zone 2 GP IIC T4 Report no E240480 FM The product meets the requirements of the standards Factory Mutual Approval Standard Class Number 3611 FM H...

Page 52: ...in Potentially Explosive Atmospheres ATEX classification II 3 G Ex nA IIC T4 Gc KEMA 07ATEX0145 X The products meet the requirements of the following standards EN 60079 15 electrical apparatus for potentially explosive atmospheres Type of protection n EN 60079 0 Explosive atmospheres Part 0 Equipment General requirements The current versions of the standards can be seen in the EU Declaration of Co...

Page 53: ...C266 06 53 MTBF 40 C SCALANCE S602 S612 54 56 a SCALANCE S623 52 42 a SCALANCE S627 2M 38 13 a Marking for the customs union EAC Eurasian Conformity Customs union of Russia Belarus and Kazakhstan Declaration of the conformity according to the technical regulations of the customs union TR CU ...

Page 54: ...Approvals SCALANCE S 54 Commissioning and Hardware Installation Manual 05 2016 C79000 G8976 C266 06 ...

Page 55: ... 29 C PLUG slot 28 D Degree of protection 16 DIN rail 16 31 32 Displays 20 Fault display 20 Port status LEDs 20 Power LEDs L1 L2 20 E Electrical data 11 Environmental conditions 12 Ethernet cable Crossover 24 F Factory defaults 25 38 Firmware update 43 G Glossary 6 H Hardware 5 16 I Installation 31 31 Installation on a DIN rail 32 Installation on a standard rail 34 Types of installation 31 Uninsta...

Page 56: ...vice 28 Reset button 25 Reset to factory settings 26 RJ 45 jacks 23 S S7 standard rail 35 Safety notices general 7 Use in hazardous areas 7 SFP 13 Signaling contact 18 SIMATIC NET glossary 6 Standard rail 31 34 Standards approvals 13 EN61000 4 5 31 IEC950 EN60950 VDE0805 17 Status as supplied 38 System manual 50 T Terminal block 17 TP interfaces 23 TP ports Insulation 25 W Wall mounting 31 35 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands