Siemens SCALANCE W788 Manuale utente

___________________

SIMATIC NET

Industrial Wireless LAN

SCALANCE W788-x / W748-1

Operating Instructions

09/2017

A5E03678333

-12

Introduction

Security recommendations

Description of the device

Mounting

Connecting up

Upkeep and maintenance

Technical specifications

Dimension drawings

Certification

Siemens AG

Division Process Industries and Drives

Postfach 48 48

90026 NÜRNBERG

GERMANY

A5E03678333-12

Ⓟ

09/2017 Subject to change

Legal information

Warning notice system

This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent

damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert

symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are

graded according to the degree of danger.

DANGER

indicates that death or severe personal injury will result if proper precautions are not taken.

WARNING

indicates that death or severe personal injury may result if proper precautions are not taken.

CAUTION

indicates that minor personal injury can result if proper precautions are not taken.

NOTICE

indicates that property damage can result if proper precautions are not taken.

If more than one degree of danger is present, the warning notice representing the highest degree of danger will

be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to

property damage.

Qualified Personnel

The product/system described in this documentation may be operated only by

personnel qualified

for the specific

task in accordance with the relevant documentation, in particular its warning notices and safety instructions.

Qualified personnel are those who, based on their training and experience, are capable of identifying risks and

avoiding potential hazards when working with these products/systems.

Proper use of Siemens products

Note the following:

WARNING

Siemens products may only be used for the applications described in the catalog and in the relevant technical

documentation. If products and components from other manufacturers are used, these must be recommended

or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and

maintenance are required to ensure that the products operate safely and without any problems. The permissible

ambient conditions must be complied with. The information in the relevant documentation must be observed.

Trademarks

All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication

may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.

Disclaimer of Liability

We have reviewed the contents of this publication to ensure consistency with the hardware and software

described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the

information in this publication is reviewed regularly and any necessary corrections are included in subsequent

editions.

SCALANCE W788-x / W748-1

Operating Instructions, 09/2017, A5E03678333-12 3

Table of contents

1 Introduction............................................................................................................................................. 5

1.1 Information on the Operating Instructions ................................................................................5

2 Security recommendations...................................................................................................................... 7

3 Description of the device....................................................................................................................... 11

3.1 Description of the device ........................................................................................................11

3.2 Structure of the type designations ..........................................................................................13

3.3 Components of the product ....................................................................................................14

3.4 Accessories.............................................................................................................................15

3.4.1 Flexible connecting cables and antennas...............................................................................18

3.4.1.1 Flexible connecting cables......................................................................................................18

3.4.1.2 Antennas .................................................................................................................................19

3.5 LED display.............................................................................................................................22

3.6 Reset button............................................................................................................................25

4 Mounting............................................................................................................................................... 27

4.1 Securing the housing ..............................................................................................................28

4.2 Wall mounting .........................................................................................................................29

4.3 Installing on the S7-300 standard rail .....................................................................................30

4.4 Installing on the S7-1500 standard rail ...................................................................................31

4.5 Installing on a DIN rail.............................................................................................................32

5 Connecting up....................................................................................................................................... 35

5.1 Safety when connecting up.....................................................................................................35

5.2 Lightning protection, power supply and grounding .................................................................36

5.3 Power supply and Ethernet.....................................................................................................39

5.4 Antenna connectors ................................................................................................................41

5.5 Digital input/output ..................................................................................................................45

5.6 Replacing the PLUG (C-PLUG or KEY-PLUG) ......................................................................46

6 Upkeep and maintenance ..................................................................................................................... 49

6.1 Device configuration with PRESET-PLUG .............................................................................49

6.2 Restoring the factory settings .................................................................................................52

6.3 Firmware update via WBM or CLI not possible ......................................................................54

Table of contents

SCALANCE W788-x / W748-1

4Operating Instructions, 09/2017, A5E03678333-12

7 Technical specifications ........................................................................................................................ 57

7.1 Technical specifications of the SCALANCE W7x8-1)............................................................ 57

7.2 Technical specifications of the SCALANCE W7x8-2)............................................................ 60

8 Dimension drawings.............................................................................................................................. 63

9 Certification........................................................................................................................................... 65

Index .................................................................................................................................................... 67

SCALANCE W788-x / W748-1

Operating Instructions, 09/2017, A5E03678333-12 5

Introduction

1.1

Information on the Operating Instructions

Validity of the Operating Instructions

These operating instructions cover the following products:

Article number Article number

US version

Article number

IL version

Access points

SCALANCE W788-1 RJ-45

6GK5788-1FC00-0AA0

6GK5788-1FC00-0AB0

SCALANCE W788-1 M12

6GK5788-1GD00-0AA0

6GK5788-1GD00-0AB0

Dual access points

SCALANCE W788-2 RJ-45

6GK5788-2FC00-0AA0

6GK5788-2FC00-0AB0

6GK5788-2FC00-0AC0

SCALANCE W788-2 M12

6GK5788-2GD00-0AA0

6GK5788-2GD00-0AB0

SCALANCE W788-2 M12 EEC

6GK5788-2GD00-0TA0

6GK5788-2GD00-0TB0

Ethernet client modules

SCALANCE W748-1 RJ-45

6GK5748-1FC00-0AA0

6GK5748-1FC00-0AB0

SCALANCE W748-1 M12

6GK5748-1GD00-0AA0

6GK5748-1GD00-0AB0

If information relates to all the named products, the term SCALANCE W7x8 will be used.

These operating instructions apply to the following software version:

●SCALANCE W7x8 with firmware as of version 6.2

Purpose of the Operating Instructions

Using the Operating Instructions, you will be able to install and connect the SCALANCE

W7x8 correctly. The configuration and the integration of the device in a WLAN are not

described in these instructions.

Documentation on the accompanying CD

You will find detailed information about configuration in the SCALANCE W700 configuration

manuals on the accompanying SIMATIC NET IWLAN CD under the file name:

PH_SCALANCE-W780-W740-WBM_0.pdf

and

PH_SCALANCE-W780-W740-CLI_0.pdf

Note

Make sure that you read the explanations and instructions in the README.txt file

Introduction

1.1 Information on the Operating Instructions

SCALANCE W788-x / W748-1

6Operating Instructions, 09/2017, A5E03678333-12

Security information

Siemens provides products and solutions with industrial security functions that support the

secure operation of plants, systems, machines and networks.

In order to protect plants, systems, machines and networks against cyber threats, it is

necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial

security concept. Siemens’ products and solutions constitute one element of such a concept.

Customers are responsible for preventing unauthorized access to their plants, systems,

machines and networks. Such systems, machines and components should only be

connected to an enterprise network or the internet if and to the extent such a connection is

necessary and only when appropriate security measures (e.g. firewalls and/or network

segmentation) are in place.

Additionally, Siemens’ guidance on appropriate security measures should be taken into

account. For additional information on industrial security measures that may be

implemented, please visit

Link (https://www.siemens.com/industrialsecurity)

Siemens’ products and solutions undergo continuous development to make them more

secure. Siemens strongly recommends that product updates are applied as soon as they are

available and that the latest product versions are used. Use of product versions that are no

longer supported, and failure to apply the latest updates may increase customer’s exposure

to cyber threats.

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS

Feed under

Link (https://www.siemens.com/industrialsecurity).

Trademarks

The following and possibly other names not identified by the registered trademark sign ®are

registered trademarks of Siemens AG:

SIMATIC NET, SCALANCE, C-PLUG, RCoax

SCALANCE W788-x / W748-1

Operating Instructions, 09/2017, A5E03678333-12 7

Security recommendations

To prevent unauthorized access, note the following security recommendations.

General

●You should make regular checks to make sure that the device meets these

recommendations and/or other security guidelines.

●Evaluate your plant as a whole in terms of security. Use a cell protection concept with

suitable products (https://www.industry.siemens.com/topics/global/en/industrial-

security/pages/default.aspx).

●When the internal and external network are disconnected, an attacker cannot access

internal data from the outside. Therefore operate the device only within a protected

network area.

●For communication via non-secure networks use additional devices with VPN functionality

to encrypt and authenticate the communication.

●Terminate management connections correctly (WBM. Telnet, SSH etc.).

Physical access

●Restrict physical access to the device to qualified personnel.

●The memory card or the PLUG (C-PLUG, KEY-PLUG, security PLUG) contains sensitive

data such as certificates, keys etc. that can be read out and modified.

Software (security functions)

●Keep the software up to date. Check regularly for security updates of the product.

You will find information on this on the Internet pages "Industrial Security

(https://www.siemens.com/industrialsecurity)"

●Inform yourself regularly about security advisories and bulletins published by Siemens

ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).

●Only activate protocols that you really require to use the device.

●Use the security functions such as address translation with NAT (Network Address

Translation) or NAPT (Network Address Port Translation) to protect receiving ports from

access by third parties.

●Restrict access to the device with a firewall or rules in an access control list (ACL -

Access Control List).

●If RADIUS authentication is via remote access, make sure that the communication is

within the secured network area or is via a secure channel.

●The option of VLAN structuring provides good protection against DoS attacks and

unauthorized access. Check whether this is practical or useful in your environment.

Security recommendations

SCALANCE W788-x / W748-1

8Operating Instructions, 09/2017, A5E03678333-12

●Enable logging functions. Use the central logging function to log changes and access

attempts centrally. Check the logging information regularly.

●Configure a Syslog server to forward all logs to a central location.

●Use WPA2/ WPA2-PSK with AES to protect the WLAN. If iPCF or iPCF-MC is used, use

the AES encryption.

Passwords

●Define rules for the use of devices and assignment of passwords.

●Regularly update passwords and keys to increase security.

●Change all default passwords for users before you operate the device.

●Only use passwords with a high password strength. Avoid weak passwords for example

password1, 123456789, abcdefgh.

●Make sure that all passwords are protected and inaccessible to unauthorized personnel.

●Do not use the same password for different users and systems or after it has expired.

Keys and certificates

This section deals with the security keys and certificates you require to set up HTTPS (

HyperText Transfer Protocol Secured Socket Layer).

●We strongly recommend that you create your own HTTPS certificates and make them

available.

There are preset certificates and keys on the device. The preset and automatically

created HTTPS certificates are self-signed.

We recommend that you use HTTPS certificates signed either by a reliable external or by

an internal certification authority. The HTTPS certificate checks the identity of the device

and controls the encrypted data exchange. You can install the HTTPS certificate via the

WBM (System > Load and Save).

●Handle user-defined private keys with great caution if you use user-defined SSH or SSL

keys.

●Use the certification authority including key revocation and management to sign the

certificates.

●Verify certificates and fingerprints on the server and client to avoid "man in the middle"

attacks.

●We recommend that you use certificates with a key length of 2048 bits.

●Change keys and certificates immediately, if there is a suspicion of compromise.

Security recommendations

SCALANCE W788-x / W748-1

Operating Instructions, 09/2017, A5E03678333-12 9

Secure/non-secure protocols

●For the DCP function, enable the "DCP read-only" mode after commissioning.

●Avoid and disable non-secure protocols, for example Telnet and TFTP. For historical

reasons, these protocols are still available, however not intended for secure applications.

Use non-secure protocols on the device with caution.

●The following protocols provide secure alternatives:

–SNMPv1/v2 → SNMPv3

Check whether use of SNMPv1 is necessary. SNMPv1 is classified as non-secure.

Use the option of preventing write access. The product provides you with suitable

setting options.

If SNMP is enabled, change the community names. If no unrestricted access is

necessary, restrict access with SNMP.

Use SNMPv3 in conjunction with passwords.

–HTTP → HTTPS

–Telnet → SSH

–SNTP → NTP

●Use secure protocols when access to the device is not prevented by physical protection

measures.

●To prevent unauthorized access to the device or network, take suitable protective

measures against non-secure protocols.

●If you require non-secure protocols and services, operate the device only within a

protected network area.

●Restrict the services and protocols available to the outside to a minimum.

Available protocols per port

The following list provides you with an overview of the open ports on this device.

The table includes the following columns:

●

Protocol

All protocols that the device supports

●

Port number

Port number assigned to the protocol

●

Port status

–Open

The port is always open and cannot be closed.

–Open (when configured)

The port is open if it has been configured.

Security recommendations

SCALANCE W788-x / W748-1

10 Operating Instructions, 09/2017, A5E03678333-12

●

Factory setting

–Open

The factory setting of the port is "Open".

–Closed

The factory setting of the port is "Closed".

●

Authentication

Specifies whether or not the protocol is authenticated.

Protocol

Port number

Port status

Factory setting

of the port

Authentication

SSH

TCP/22

Open (when configured)

Open

Yes

TELNET

TCP/23 Open (when configured) Open Yes

HTTP

TCP/80

Open (when configured)

Open

Yes

HTTPS

TCP/443 Open (when configured) Open Yes

SNTP

NTP

UDP/123 Open (when configured) Closed No

SNMP

UDP/161

Open (when configured)

Open

Yes

PROFINET

UDP/34964,

UDP/49154,

49155

Open Open No

Syslog

UDP/514

Open (when configured)

Open

EtherNet/IP

TCP/44818,

UDP/2222,4

4818

Open (when configured) Open No

DHCP

UDP/67,68

Open (when configured)

Closed

RADIUS

UDP/1812,1

813

Open (when configured) Closed No

TFTP

UDP/69

Open (when configured)

Closed

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Siemens Punto di accesso wireless

Siemens

Siemens SIMATIC NET SCALANCE W734-1 Manuale utente

Siemens

Siemens SIMATIC NET SCALANCE W786C Series Manuale utente

Siemens

Siemens SCALANCE W770 Series Manuale utente

Siemens

Siemens SCALANCE X204RNA EEC Manuale utente

Siemens

Siemens SCALANCE W788-1 Manuale utente

Siemens

Siemens SCALANCE W774-1 Manuale utente

Siemens

Siemens SCALANCE W1788 Series Manuale utente

Siemens

Siemens SIMATIC NET SCALANCE W774-1 Manuale utente

Siemens

Siemens RuggedCom WIN7023 Manuale utente

Siemens

Siemens SINAMICS G120 Manuale utente

Siemens

Siemens SCALANCE W700 802.11ax Manuale utente

Siemens

Siemens SCALANCE W784-1 Guida per l'amministratore

Siemens

Siemens HiPath V6R1 Manuale utente

Siemens

Siemens SCALANCE W774-1 Manuale utente

Siemens

Siemens SCALANCE W774-1 RJ-45 Manuale utente

Siemens

Siemens SCALANCE W788-1PRO Manuale utente

Siemens

Siemens RUGGEDCOM WIN5137 Manuale utente

Siemens

Siemens SCALANCE W786-1PRO Manuale utente

Siemens

Siemens SIMATIC NET SCALANCE W M766-1 Series Manuale utente

Siemens

Siemens HiPath Series Manuale utente

Siemens

Siemens SIMATIC NET SCALANCE W780 Series Foglio di istruzioni

Siemens

Siemens SIMATIC NET SCALANCE W786C Series Manuale utente

Siemens

Siemens SCALANCE W1780 Foglio di istruzioni

Siemens

Siemens SCALANCE W760 Manuale utente

Manuali Punto di accesso wireless popolari di altre marche

D-Link

D-Link DWL-2100AP - AirPlus Xtreme G Manuale utente

Ubiquiti

Ubiquiti NanoStation NSM2 Manuale utente

Cisco

Cisco Aironet 1550 Series Manuale utente

Aruba

Aruba IAP-335 Manuale utente

Advantek Networks

Advantek Networks AWN-AP-54MR Manuale utente

IP-COM

IP-COM AP355 Manuale utente

Buffalo

Buffalo AirStation WLA-L11G Manuale utente

EnGenius

EnGenius EnStationACv2 Manuale utente

D-Link

D-Link DAP-3662 Manuale utente

xG Technology

xG Technology xMax CN1300 Manuale utente

Widelink

Widelink ezWave WAP-1100 Series Manuale utente

Edimax

Edimax CAP1200 Manuale utente

Ubiquiti

Ubiquiti LBE-5AC-Gen2 Manuale utente

Aruba

Aruba AP-203R Manuale utente

LuXout Shades

LuXout Shades LUXSHADE MOTION Manuale utente

CreatComm

CreatComm TB5F Manuale utente

SineDigital

SineDigital MW-1500AP(H) Manuale utente

TP-Link

TP-Link AP9650 V1 Manuale utente