SCALANCE S615 with SINUMERIK 840D sl

Size: px

Start display at page:

Download "SCALANCE S615 with SINUMERIK 840D sl"

Stephen Palmer
5 years ago
Views:

1 Application description 12/2015 SCALANCE S615 with SINUMERIK 840D sl SINUMERIK 840D sl, from SW 4.5 SP 3

2 Siemens AG 2015 All rights reserved Table of contents Table of contents 1 Application description Introduction Provision of an already preconfigured SCALANCE S615 configuration ("configpack SCALANCE S615 for SINUMERIK sl") Knowledge required Overview of the SINUMERIK 840D sl network segments Functional overview of the SCALANCE S Application task Assignment SCALANCE S615 to the Ethernet interfaces of the SINUMERIK 840D sl Assignment table (provision of "configpack SCALANCE S615 for SINUMERIK sl") Information on the provision of the configuration file The SCALANCE S615 in connection with SINEMA Remote Connect (option) Order data of KEY-PLUG M800 and SINEMA Remote Connect Software: References History , V1.1, 12/2015 2

3 Siemens AG 2015 All rights reserved 1 Application description 1.1 Introduction 1 Application description 1.1 Introduction The goal of this application is, in a networked environment with a SINUMERIK 840D sl, to access the respective other network segment (Step7 function, VNC, etc.) from each network segment, if that is desired and without neglecting the security rules. A second approach is to access all lower-level network segments from a network connection (factory network or remote), e.g. SINEMA Remote Connect (option) A SCALANCE S615 is the prerequisite for the following application description. 1.2 Provision of an already preconfigured SCALANCE S615 configuration ("configpack SCALANCE S615 for SINUMERIK sl") The goal of the application is to provide a standard configuration for the user based on a SINUMERIK 840D sl standard network configuration: The configpack has been created for use without SINEMA Remote Connect. If SINEMA Remote Connect is to be used as an additional option, the configpack can be supplemented by the customer. The user should only have to make rudimentary adjustments. 1.3 Knowledge required Basic knowledge of network technology in connection with VLANs (Virtual Local Area Networks) Knowledge of the SINUMERIK sl network structure and parameterization , V1.1, 12/2015 3

4 Siemens AG 2015 All rights reserved 1 Application description 1.4 Overview of the SINUMERIK 840D sl network segments 1.4 Overview of the SINUMERIK 840D sl network segments The following figure shows the basic network structure with the division of the network segments in the standard Figure 1-1 PROFINET network (plant network) The IP range is specified by the OEM or end user Factory network connection In their delivered state, the interfaces are set to DHCP Client HMI network In their delivered state, the interfaces are set to xxx Note For the SINUMERIK 840D sl, there is no routing capability (by means of the system) between "HMI network" or company network and "PROFINET network", e.g. to display the WEB server information , V1.1, 12/2015 4

Siemens AG 2015 All rights reserved 1 Application description 1.5 Functional overview of the SCALANCE S615 1.

5 Siemens AG 2015 All rights reserved 1 Application description 1.5 Functional overview of the SCALANCE S Functional overview of the SCALANCE S615 Connection to SINEMA Remote Connect Web based Management CLI (Command Line Interface) Port based VLAN Source-NAT 1:1 NAT DHCP client on all ports DHCP server on all ports Additional diagnostics For a detailed description, please refer to the user manual: , V1.1, 12/2015 5

6 Siemens AG 2015 All rights reserved 2 Application task 1.5 Functional overview of the SCALANCE S615 2 Application task As mentioned previously, no routing is possible in the standard network configuration of the SINUMERIK 840D sl between "HMI network" or company network and "Profinet network". The SCALANCE S615 allows the network segments to be connected via VLANs (Virtual Local Area Networks) without neglecting the security rules. The following figure shows the basic network structure with the division of the network segments in connection with SCALANCE S615 Figure 2-21 Use case 1) Access web server of the PLC PROFINET that is installed in the 840D sl from the PCU50. To do this, the S615 must be entered in PCU50 as the default gateway. The routing in the S615 goes from VLAN 1 to VLAN 3 for this purpose. Use case 2) The PCU50 is to be accessed from the plant network. The routing in the S615 goes from VLAN 2 to VLAN 1 for this purpose. Use case 3) Remote maintenance: A service technician securely accesses the HMI network via the Internet with VPN. There, he would like to control the NC via the PCU50 and be able to change NC programs. In addition, he can use Step7 to access the PLC of the NCU and change Step7 projects. Note The options of the firmware update are described in the SINEMA Remote Connect documentation. Note For use case 3), we recommend the use of SINEMA Remote Connect , V1.1, 12/2015 6

7 Siemens AG 2015 All rights reserved 2 Application task 2.1 Assignment SCALANCE S615 to the Ethernet interfaces of the SINUMERIK 840D sl 2.1 Assignment SCALANCE S615 to the Ethernet interfaces of the SINUMERIK 840D sl Configuration example (provision of "configpack SCALANCE S615 for SINUMERIK sl"): VLANs (Virtual Local Area Networks) , V1.1, 12/2015 7

8 Siemens AG 2015 All rights reserved 2 Application task 2.1 Assignment SCALANCE S615 to the Ethernet interfaces of the SINUMERIK 840D sl Assignment table (provision of "configpack SCALANCE S615 for SINUMERIK sl") SCALANCE S615 ports NCU Note Port VLAN IP address Interface IP band Network designation P5 2 DHCP client Remote port This port connection would receive an IP address from a DHCP server P X120, Ethernet 2 (PCU50 if available) P X120, Ethernet 2 (PCU50 if available) * * * * HMI network HMI network Port 1 and 2 are on the same VLAN. Thus, the user has an additional connection option in the HMI network, e.g. service PC P3 2 DHCP client X130 *DHCP client Factory network This port connection would receive an IP address from a DHCP server P X xxx.xxx PROFINET / plant network Note The displayed table is an example configuration for the configuration in the SCALANCE S615 and can naturally be adapted by the user to meet his needs. * Delivery SINUMERIK 840D sl , V1.1, 12/2015 8

9 Siemens AG 2015 All rights reserved 2 Application task Information on the provision of the configuration file The configuration file is based on the default (delivery state) network setting of the SINUMERIK 840D sl. If you make different settings, e.g. for the plant network (corresponds to VLAN3), then the configuration must be adapted. The Ethernet interfaces of the X130 (VLAN2) assign an IP address from an external DHCP server, e.g. from the company network or from a DSL router. The file must not be edited in advance (without SCALANCE S615). It must be transferred or read-in to a SCALANCE S615 and then be adapted afterward, if applicable. This "preconfiguration" is read in via the WEB interface of the SCALANCE S615. You can find the exact procedure in the user manual. To prevent unauthorized access to the HMI network and also the PROFINET network from outside, we recommend that you activate the firewall. In particular, access from the plant network (VLAN 2) to the necessary nodes should be limited. Ports that must be enabled: TCP 5900 (runtime download of the HMI software) TCP 102 (port for Step7 access) TCP 443 (Web server of the PLC) The basic parameterization for the function "SINEMA Remote Connect" (option) is already provided. Note on the login S615: User name: admin Password: Siemens.112 Note: The password must be changed after initial start-up , V1.1, 12/2015 9

Siemens AG 2015 All rights reserved 3 The SCALANCE S615 in connection with SINEMA Remote Connect (option) 3 The SCALANCE S615 in connection with SINEMA Remote Connect (option) The SCALANCE S615 can

As an alternative to the LAN router S615, additional routers are available for connectivity: SCALANCE M812/816 (DSL) and the mobile wireless router M874 or M876 (for UMTS or LTE respectively).

10 Siemens AG 2015 All rights reserved 3 The SCALANCE S615 in connection with SINEMA Remote Connect (option) 3 The SCALANCE S615 in connection with SINEMA Remote Connect (option) The SCALANCE S615 can be retrofitted via a KEY PLUG for operating under the remote maintenance platform SINEMA Remote Connect. This software can be ordered as an option. As an alternative to the LAN router S615, additional routers are available for connectivity: SCALANCE M812/816 (DSL) and the mobile wireless router M874 or M876 (for UMTS or LTE respectively). Functional limitations in connection with a SINUMERIK 840D sl are not known. It is not necessary for SINUMERIK to enable additional options. Overview: The functional description or handling of SINEMA Remote Connect can be found in the manual , V1.1, 12/

11 Siemens AG 2015 All rights reserved 3 The SCALANCE S615 in connection with SINEMA Remote Connect (option) 3.1 Order data of KEY-PLUG M800 and SINEMA Remote Connect Software: Article number 6GK5615-0AA00-2AA2 6GK1720-1AH01-0BV0 6GK5908-0PB00 Description SCALANCE S615 LAN ROUTER; F. PROTECTION OF DEVICES/ NETWORKS IN AUTOMATION AND PROTECTION OF INDUSTRIAL COMMUNICATION VIA VPN AND FIREWALL; FURTHER FUNCTIONS: ADDRESS CONVERSION (NAT/NAPT), CONNECTION TO SINEMA RC, 5-PORT SWITCH, 1XDIG. INPUT, 1XDIG. OUTPUT SINEMA REMOTE CONNECT VIRTUAL APPLIANCE V1.1; BASIC SOFTWARE PACKAGE FOR 4 VPN CONNECTIONS USER, DEVICE, GROUP ADMINISTRATION; CERTIFICATE MANAGEMENT; AUTOCONFIG INTERFACE SINEMA RC CLIENT V1.0: FOR 1 INSTALLATION SW, DOCUM. ON DVD; LICENSE KEY ON USB STICK; 2 LANGUAGES (GER, EN); WINDOWS 7 SP1 (32/64 BIT) WINDOWS 8.1 (64 BIT) KEY-PLUG SINEMA RC, REPLACEABLE MEDIUM FOR ACTIVATING THE CONNECTION TO SINEMA REMOTE CONNECT. C-PLUG INTEGRATED FOR S615 FOR SIMPLE DEVICE EXCHANGE IN CASE OF FAILURE AND FOR STORAGE OF CONFIGURATION DATA , V1.1, 12/

12 Siemens AG 2015 All rights reserved 4 References 4 References Topic \1\ Siemens Industry Online Support \2\ SCALANCE S615 Getting Started \3\ SINEMA Remote Connect Title History Table 5-1 Version Date Change V1.0 09/2015 First Edition V1.1 11/2015 Editorial revision; adaptation configpack , V1.1, 12/

Setting up a secure VPN Connection between a Tablet (ios), SCALANCE S615 and SINEMA Remote Connect Server. SINEMA Remote Connect, SCALANCE S615

Configuration Example 09/2015 Setting up a secure VPN Connection between a Tablet (ios), SCALANCE S615 and SINEMA Remote Connect Server SINEMA Remote Connect, SCALANCE S615 https://support.industry.siemens.com/cs/ww/en/view/109479578