Siemens SCALANCE S615 Manual de usuario

SCALANCE S615 Getting Started

___________________

___________

SIMATIC NET

Industrial Ethernet Security

SCALANCE S615 Getting Started

Getting Started

03/2015

C79000

-G8900-C390-01

Preface

Connecting SCALANCE

S615 to the WAN

OpenVPN tunnel between

SCALANCE S615 and

SINEMA RC Server

Siemens AG

Division Process Industries and Drives

Postfach 48 48

90026 NÜRNBERG

GERM

ANY

C79000-G8900-C390-01

Ⓟ

04/2015 Subject to change

Legal information

Warning notice system

This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent

damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert

symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are

graded according to the degree of danger.

DANGER

indicates that death or severe personal injury will result if proper precautions are not taken.

WARNING

indicates that death or severe personal injury may result if proper precautions are not taken.

CAUTION

indicates that minor personal injury can result if proper precautions are not taken.

NOTICE

indicates that property damage can result if proper precautions are not taken.

If more than one degree of danger is present, the warning notice representing the highest degree of danger will

be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to

property damage.

Qualified Personnel

The product/system described in this documentation may be operated only by

personnel qualified

for the specific

task in accordance with the relevant documentation, in particular its warning notices and safety instructions.

Qualified personnel are those who, based on their training and experience, are capable of identifying risks and

avoiding potential hazards when working with these products/systems.

Proper use of Siemens products

Note the following:

WARNING

Siemens products may only be used for the applications described in the catalog and in the relevant technical

documentation. If products and components from other manufacturers are used, these must be recommended

or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and

maintenance are required to ensure that the products operate safely and without any problems. The permissible

ambient conditions must be complied with. The information in the relevant documentation must be observed.

Trademarks

All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication

may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.

Disclaimer of Liability

We have reviewed the contents of this publication to ensure consistency with the hardware and software

described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the

information in this publication is reviewed regularly and any necessary corrections are included in subsequent

editions.

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 3

Preface

Purpose

The configuration of the SCALANCE S615 is shown based on examples.

IP settings for the examples

Note

The IP settings used in the examples were freely chosen.

In a real network, you would need to adapt these IP settings to avoid possible address

conflicts.

General naming conventions

The designation . . . stands for . . .

SINEMA RC

SINEMA Remote Connect

SINEMA RC Server

SINEMA Remote Connect server

S615

SCALANCE S615

Further Information

Apart from the Configuration Manual you are currently reading, the following documentation

is also available on the topic of Remote Network:

●"Industrial Ethernet Security - SCALANCE S615 Web Based Management" configuration

manual

This document is intended to provide you with the information you require to install,

commission and operate the device. It provides you with the information you require to

configure the devices.

●"Industrial Remote Communication - TeleControl SINEMA Remote Connect Client"

operating instructions

This manual supports you when installing, configuring and operating the application

SINEMA RC Client.

●"Industrial Remote Communication - TeleControl SINEMA Remote Connect Server"

operating instructions

This manual supports you when installing, configuring and operating the application

SINEMA RC Server.

Preface

SCALANCE S615 Getting Started

4Getting Started, 03/2015, C79000-G8900-C390-01

●Getting Started Industrial Remote Communication - TeleControl - SINEMA Remote

Connect"

Based on examples, this document explains the configuration of SINEMA RC.

●The "SIMATIC NET Industrial Ethernet Network Manual" contains information on other

SIMATIC NET products that you can operate along with the devices of this product line in

an Industrial Ethernet network. There, you will find among other things optical

performance data of the communications partners that you require for the installation.

You will find this document on the Internet under the following entry ID: 27069465

(http://support.automation.siemens.com/WW/view/en/27069465)

SIMATIC NET manuals

You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online

Support:

●Using the search function:

Link to Siemens Industry Online Support (http://support.automation.siemens.com/)

Enter the entry ID of the relevant manual as the search item.

●In the navigation panel on the left hand side in the area "Industrial Communication":

Link to the area "Industrial Communication"

(http://support.automation.siemens.com/WW/view/en/10805878/133400)

Go to the required product group and make the following settings:

"Entry list" tab, Entry type "Manuals"

SIMATIC NET glossary

Explanations of many of the specialist terms used in this documentation can be found in the

SIMATIC NET glossary.

You will find the SIMATIC NET glossary here:

●SIMATIC NET Manual Collection or product DVD

The DVD ships with certain SIMATIC NET products.

●On the Internet under the following entry ID:

50305045 (http://support.automation.siemens.com/WW/view/en/50305045)

Training, Service & Support

You will find information on Training, Service & Support in the multi--language document

"DC_support_99.pdf" on the data medium supplied with the documentation.

Preface

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 5

Security information

Siemens provides products and solutions with industrial security functions that support the

secure operation of plants, solutions, machines, equipment and/or networks. They are

important components in a holistic industrial security concept. With this in mind, Siemens’

products and solutions undergo continuous development. Siemens recommends strongly

that you regularly check for product updates.

For the secure operation of Siemens products and solutions, it is necessary to take suitable

preventive action (e.g. cell protection concept) and integrate each component into a holistic,

state-of-the-art industrial security concept. Third-party products that may be in use should

also be considered. For more information about industrial security, visit

http://www.siemens.com/industrialsecurity.

To stay informed about product updates as they occur, sign up for a product-specific

newsletter. For more information, visit http://support.automation.siemens.com.

Trademarks

The following and possibly other names not identified by the registered trademark sign ®are

registered trademarks of Siemens AG:

SINEMA, SCALANCE

Preface

SCALANCE S615 Getting Started

6Getting Started, 03/2015, C79000-G8900-C390-01

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 7

Table of contents

Preface .................................................................................................................................................. 3

1 Connecting SCALANCE S615 to the WAN .............................................................................................. 9

1.1 Procedure in principle ...............................................................................................................9

1.2 Setting up SCALANCE S615 and network .............................................................................11

1.3 Launching Web Based Management......................................................................................12

1.4 Logging in to Web Based Management..................................................................................15

1.5 Changing the IP settings of the S615 .....................................................................................17

1.6 Specifying device information .................................................................................................19

1.7 Setting the time .......................................................................................................................20

1.8 Creating IP subnet ..................................................................................................................22

2 OpenVPN tunnel between SCALANCE S615 and SINEMA RC Server ................................................. 25

2.1 Procedure in principle .............................................................................................................25

2.2 Configuring access to the SINEMA RC Serve........................................................................29

2.2.1 Configuring a route .................................................................................................................29

2.2.2 Activating IP masquerading ....................................................................................................30

2.2.3 Allow access ...........................................................................................................................31

2.3 Configure a remote connection on the SINEMA RC Server...................................................32

2.3.1 Creating node groups .............................................................................................................32

2.3.2 Create devices ........................................................................................................................34

2.3.3 Configure communications relations.......................................................................................36

2.4 Configure a remote connection on the S615 ..........................................................................38

2.4.1 Secure OpenVPN connection with fingerprint ........................................................................38

2.4.2 Secure OpenVPN connection with CA certificate...................................................................41

2.4.2.1 Loading a certificate................................................................................................................41

2.4.2.2 Configure an OpenVPN connection to the SINEMA RC Server.............................................42

Table of contents

SCALANCE S615 Getting Started

8Getting Started, 03/2015, C79000-G8900-C390-01

SCALANCE S615 Getting Started

Getting Started, 03/2015, C79000-G8900-C390-01 9

Connecting SCALANCE S615 to the WAN

1.1

Procedure in principle

In this example the SCALANCE S615 that is in the factory settings status is assigned an IP

address. Following this, the device will be configured using Web Based Management

(WBM). Access to the WAN via the Ethernet interface P5 of the S615 will be connected

Structure

Required devices/components

●1 x S615 (additional option: a suitably installed standard rail with fittings)

●1 x 24 V power supply with cable connector and terminal block plug

●1 x PC for configuring the S615

●The required network cable, TP cable (twisted pair) complying with the IE FC RJ-45

standard for Industrial Ethernet

Connecting SCALANCE S615 to the WAN

1.1 Procedure in principle

SCALANCE S615 Getting Started

10 Getting Started, 03/2015, C79000-G8900-C390-01

Settings used

For the configuration example, the devices are given the following IP address settings:

Interface

IP address

LAN1

S615 LAN port P1

(vlan1)

192.168.100.1

255.255.255.0

WAN port P5

(vlan2)

192.168.50.1

255.255.255.0

PC1 LAN port 192.168.100.20

255.255.255.0

Gateway: IP address vlan1

Note

The IP settings used in the example were freely chosen.

In a real network, you would need to adapt these IP settings to avoid possible address

conflicts.

Steps in configuration

1. Setting up SCALANCE S615 and network (Page 11)

2. Launching Web Based Management (Page 12)

3. Logging in to Web Based Management (Page 15)

4. Changing the IP settings of the SCALANCE S615 (Page 17)

5. Configuring SCALANCE S615

–Specifying device information (Page 19)

–Setting the time (Page 20)

–Creating IP subnet (Page 22)

Otros manuales para SCALANCE S615

Tabla de contenidos

Otros manuales de Enrutador de red de Siemens

Siemens

Siemens RUGGEDCOM RX1400 Manual de usuario

Siemens

Siemens gigaset SE551 Manual de usuario

Siemens

Siemens SCALANCE XM-400 Hoja de instrucciones

Siemens

Siemens RUGGEDCOM RS416PF Manual de usuario

Siemens

Siemens SX763 Manual de usuario

Siemens

Siemens SIMATIC NET SCALANCE W778-1 Manual de usuario

Siemens

Siemens RUGGEDCOM RS900G Manual de usuario

Siemens

Siemens SCALANCE S615 Hoja de instrucciones

Siemens

Siemens RUGGEDCOM RS900GP Manual de usuario

Siemens

Siemens CL-010 Manual de usuario

Siemens

Siemens SpeedStream SS2624 Manual de usuario

Siemens

Siemens SpeedStream 6515 Guía del usuario

Siemens

Siemens N 146 Manual de servicio

Siemens

Siemens RUGGEDCOM RSG2100PF Manual de usuario

Siemens

Siemens RUGGEDCOM RMC40 Manual de usuario

Siemens

Siemens RUGGEDCOM RX1000 Manual de usuario

Siemens

Siemens PXG3.L Manual de usuario

Siemens

Siemens PXG3 Series Manual de usuario

Siemens

Siemens SIMATIC NET SCALANCE XR-300M EEC Series Guía del administrador

Siemens

Siemens RUGGEDCOM RX1500 Manual de usuario

Siemens

Siemens gigaset se 105 Manual de usuario

Siemens

Siemens RUGGEDCOM RM1224 Manual de usuario

Siemens

Siemens GIGASET SX762 WLAN DSL Manual de usuario

Siemens

Siemens RUGGEDCOM RSL910 Manual de usuario

Manuales populares de Enrutador de red de otras marcas

Allnet

Allnet ALL0333AU Manual de usuario

HomeSeer

HomeSeer HT-SEL Manual de usuario

Sercomm

Sercomm Genesis OC3505D Manual de usuario

Billion

Billion BIPAC 5102 Series Manual de usuario

TP-Link

TP-Link TD-8817 Manual de usuario

Motorola

Motorola MR1900 Manual de usuario

Digi

Digi IX14 Manual de usuario

Cisco

Cisco NCS 540 Manual

XAVi

XAVi X8821e Manual de usuario

BEC

BEC 6200WZL Manual de usuario

MikroTik

MikroTik hAP ac3 Series Manual de usuario

Korenix

Korenix JetNet 5428G Series Manual de usuario

NETGEAR

NETGEAR FS526T - Switch Manual de usuario

Korenix

Korenix JetNet 5710G Series Manual de usuario

Automated Logic

Automated Logic ZN551 Manual del propietario

Cisco

Cisco ASR 1000 Series Manual del operador

EnGenius

EnGenius ESR-9710 Manual de usuario

Cisco

Cisco 805 Series Instrucciones de funcionamiento y seguridad