Siemens SCALANCE S615 Manuale utente

SCALANCE S615 Getting Started

___________________

___________

SIMATIC NET

Industrial Ethernet Security

SCALANCE S615 Getting Started

Getting Started

03/2015

C79000

-G8900-C390-01

Preface

Connecting SCALANCE

S615 to the WAN

OpenVPN tunnel between

SCALANCE S615 and

SINEMA RC Server

Siemens AG

Division Process Industries and Drives

Postfach 48 48

90026 NÜRNBERG

GERM

ANY

C79000-G8900-C390-01

Ⓟ

04/2015 Subject to change

Legal information

Warning notice system

This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent

damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert

symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are

graded according to the degree of danger.

DANGER

indicates that death or severe personal injury will result if proper precautions are not taken.

WARNING

indicates that death or severe personal injury may result if proper precautions are not taken.

CAUTION

indicates that minor personal injury can result if proper precautions are not taken.

NOTICE

indicates that property damage can result if proper precautions are not taken.

If more than one degree of danger is present, the warning notice representing the highest degree of danger will

be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to

property damage.

Qualified Personnel

The product/system described in this documentation may be operated only by

personnel qualified

for the specific

task in accordance with the relevant documentation, in particular its warning notices and safety instructions.

Qualified personnel are those who, based on their training and experience, are capable of identifying risks and

avoiding potential hazards when working with these products/systems.

Proper use of Siemens products

Note the following:

WARNING

Siemens products may only be used for the applications described in the catalog and in the relevant technical

documentation. If products and components from other manufacturers are used, these must be recommended

or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and

maintenance are required to ensure that the products operate safely and without any problems. The permissible

ambient conditions must be complied with. The information in the relevant documentation must be observed.

Trademarks

All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication

may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.

Disclaimer of Liability

We have reviewed the contents of this publication to ensure consistency with the hardware and software

described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the

information in this publication is reviewed regularly and any necessary corrections are included in subsequent

editions.

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 3

Preface

Purpose

The configuration of the SCALANCE S615 is shown based on examples.

IP settings for the examples

Note

The IP settings used in the examples were freely chosen.

In a real network, you would need to adapt these IP settings to avoid possible address

conflicts.

General naming conventions

The designation . . . stands for . . .

SINEMA RC

SINEMA Remote Connect

SINEMA RC Server

SINEMA Remote Connect server

S615

SCALANCE S615

Further Information

Apart from the Configuration Manual you are currently reading, the following documentation

is also available on the topic of Remote Network:

●"Industrial Ethernet Security - SCALANCE S615 Web Based Management" configuration

manual

This document is intended to provide you with the information you require to install,

commission and operate the device. It provides you with the information you require to

configure the devices.

●"Industrial Remote Communication - TeleControl SINEMA Remote Connect Client"

operating instructions

This manual supports you when installing, configuring and operating the application

SINEMA RC Client.

●"Industrial Remote Communication - TeleControl SINEMA Remote Connect Server"

operating instructions

This manual supports you when installing, configuring and operating the application

SINEMA RC Server.

Preface

SCALANCE S615 Getting Started

4Getting Started, 03/2015, C79000-G8900-C390-01

●Getting Started Industrial Remote Communication - TeleControl - SINEMA Remote

Connect"

Based on examples, this document explains the configuration of SINEMA RC.

●The "SIMATIC NET Industrial Ethernet Network Manual" contains information on other

SIMATIC NET products that you can operate along with the devices of this product line in

an Industrial Ethernet network. There, you will find among other things optical

performance data of the communications partners that you require for the installation.

You will find this document on the Internet under the following entry ID: 27069465

(http://support.automation.siemens.com/WW/view/en/27069465)

SIMATIC NET manuals

You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online

Support:

●Using the search function:

Link to Siemens Industry Online Support (http://support.automation.siemens.com/)

Enter the entry ID of the relevant manual as the search item.

●In the navigation panel on the left hand side in the area "Industrial Communication":

Link to the area "Industrial Communication"

(http://support.automation.siemens.com/WW/view/en/10805878/133400)

Go to the required product group and make the following settings:

"Entry list" tab, Entry type "Manuals"

SIMATIC NET glossary

Explanations of many of the specialist terms used in this documentation can be found in the

SIMATIC NET glossary.

You will find the SIMATIC NET glossary here:

●SIMATIC NET Manual Collection or product DVD

The DVD ships with certain SIMATIC NET products.

●On the Internet under the following entry ID:

50305045 (http://support.automation.siemens.com/WW/view/en/50305045)

Training, Service & Support

You will find information on Training, Service & Support in the multi--language document

"DC_support_99.pdf" on the data medium supplied with the documentation.

Preface

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 5

Security information

Siemens provides products and solutions with industrial security functions that support the

secure operation of plants, solutions, machines, equipment and/or networks. They are

important components in a holistic industrial security concept. With this in mind, Siemens’

products and solutions undergo continuous development. Siemens recommends strongly

that you regularly check for product updates.

For the secure operation of Siemens products and solutions, it is necessary to take suitable

preventive action (e.g. cell protection concept) and integrate each component into a holistic,

state-of-the-art industrial security concept. Third-party products that may be in use should

also be considered. For more information about industrial security, visit

http://www.siemens.com/industrialsecurity.

To stay informed about product updates as they occur, sign up for a product-specific

newsletter. For more information, visit http://support.automation.siemens.com.

Trademarks

The following and possibly other names not identified by the registered trademark sign ®are

registered trademarks of Siemens AG:

SINEMA, SCALANCE

Preface

SCALANCE S615 Getting Started

6Getting Started, 03/2015, C79000-G8900-C390-01

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 7

Table of contents

Preface .................................................................................................................................................. 3

1 Connecting SCALANCE S615 to the WAN .............................................................................................. 9

1.1 Procedure in principle ...............................................................................................................9

1.2 Setting up SCALANCE S615 and network .............................................................................11

1.3 Launching Web Based Management......................................................................................12

1.4 Logging in to Web Based Management..................................................................................15

1.5 Changing the IP settings of the S615 .....................................................................................17

1.6 Specifying device information .................................................................................................19

1.7 Setting the time .......................................................................................................................20

1.8 Creating IP subnet ..................................................................................................................22

2 OpenVPN tunnel between SCALANCE S615 and SINEMA RC Server ................................................. 25

2.1 Procedure in principle .............................................................................................................25

2.2 Configuring access to the SINEMA RC Serve........................................................................29

2.2.1 Configuring a route .................................................................................................................29

2.2.2 Activating IP masquerading ....................................................................................................30

2.2.3 Allow access ...........................................................................................................................31

2.3 Configure a remote connection on the SINEMA RC Server...................................................32

2.3.1 Creating node groups .............................................................................................................32

2.3.2 Create devices ........................................................................................................................34

2.3.3 Configure communications relations.......................................................................................36

2.4 Configure a remote connection on the S615 ..........................................................................38

2.4.1 Secure OpenVPN connection with fingerprint ........................................................................38

2.4.2 Secure OpenVPN connection with CA certificate...................................................................41

2.4.2.1 Loading a certificate................................................................................................................41

2.4.2.2 Configure an OpenVPN connection to the SINEMA RC Server.............................................42

Table of contents

SCALANCE S615 Getting Started

8Getting Started, 03/2015, C79000-G8900-C390-01

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 9

Connecting SCALANCE S615 to the WAN

1.1

Procedure in principle

In this example the SCALANCE S615 that is in the factory settings status is assigned an IP

address. Following this, the device will be configured using Web Based Management

(WBM). Access to the WAN via the Ethernet interface P5 of the S615 will be connected

Structure

Required devices/components

●1 x S615 (additional option: a suitably installed standard rail with fittings)

●1 x 24 V power supply with cable connector and terminal block plug

●1 x PC for configuring the S615

●The required network cable, TP cable (twisted pair) complying with the IE FC RJ-45

standard for Industrial Ethernet

Connecting SCALANCE S615 to the WAN

1.1 Procedure in principle

SCALANCE S615 Getting Started

10 Getting Started, 03/2015, C79000-G8900-C390-01

Settings used

For the configuration example, the devices are given the following IP address settings:

Interface

IP address

LAN1

S615 LAN port P1

(vlan1)

192.168.100.1

255.255.255.0

WAN port P5

(vlan2)

192.168.50.1

255.255.255.0

PC1 LAN port 192.168.100.20

255.255.255.0

Gateway: IP address vlan1

Note

The IP settings used in the example were freely chosen.

In a real network, you would need to adapt these IP settings to avoid possible address

conflicts.

Steps in configuration

1. Setting up SCALANCE S615 and network (Page 11)

2. Launching Web Based Management (Page 12)

3. Logging in to Web Based Management (Page 15)

4. Changing the IP settings of the SCALANCE S615 (Page 17)

5. Configuring SCALANCE S615

–Specifying device information (Page 19)

–Setting the time (Page 20)

–Creating IP subnet (Page 22)

Altri manuali per SCALANCE S615

Indice

Altri manuali Siemens Router di rete

Siemens

Siemens CL-010 Manuale utente

Siemens

Siemens SIMATIC NET RUGGEDCOM RX1400 Manuale utente

Siemens

Siemens 2614 Manuale utente

Siemens

Siemens SpeedStream 2105 Manuale utente

Siemens

Siemens 73 82 851 Manuale

Siemens

Siemens RUGGEDCOM i803 Manuale utente

Siemens

Siemens gigaset se 105 Manuale utente

Siemens

Siemens SCALANCE X-200 Guida per l'amministratore

Siemens

Siemens SCALANCE M812 Manuale utente

Siemens

Siemens CL-110 Manuale utente

Siemens

Siemens RUGGEDCOM ROX II Manuale utente

Siemens

Siemens gigaset SE551 Manuale utente

Siemens

Siemens RUGGEDCOM RSG2300P Manuale utente

Siemens

Siemens Santis ADSL 50 Manuale utente

Siemens

Siemens RUGGEDCOM RX1500 Manuale utente

Siemens

Siemens 4100 Series Manuale utente

Siemens

Siemens SCALANCE XB-000 Manuale utente

Siemens

Siemens PSFR-CP41 Come usare

Siemens

Siemens SIMATIC NET RUGGEDCOM RS920W Manuale utente

Siemens

Siemens RUGGEDCOM RM1224 Manuale utente

Siemens

Siemens ADSL C-110 Manuale utente

Siemens

Siemens PXG3.L Manuale utente

Siemens

Siemens SINAUT MD741-1 Guida utente

Siemens

Siemens Gigaset Optical LAN Adapter Duo Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza