Siemens SIMATIC NET SCALANCE SC632-2C User Manual

Security recommendations
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
21
• Authentication
Specifies whether an authentication of the communication partner takes place or
whether an authentication can be configured.
• Encryption
Specifies whether the transfer is encrypted or whether the encryption can be
configured.
Service/Protocol Protocol/
Port number
Default status
Configurable
Authenticati
on
Encryption
VLAN1
*)
VLAN2
*)
Port
Service
DHCPv4 Client
UDP/68
Closed
Open
--
✓
--
--
DHCPv4-Server
UDP/67
Closed
Closed
--
✓
--
--
DNS-Client
TCP/53
UDP/53
Outgoing
only
Outgoing only
--
✓
--
--
DNS-Server
TCP/53
UDP/53
Open
Closed
--
✓
--
--
DDNS
TCP/80
UDP/80
TCP/443
UDP/443
Outgoing
only
Outgoing only
--
✓
✓
--
Firewall State
Sync
UDP/3780
Closed
Closed
✓
✓
--
--
HTTP
TCP/80
Open
Closed
✓
✓
✓
--
HTTP Proxy
TCP/3128
TCP/8080
Outgoing
only
Outgoing only
✓
✓
Optional
--
HTTPS
TCP/443
Open
Closed
✓
✓
✓
✓
IPsec/IKE
UDP/500
UDP/4500
Closed
Closed
--
✓
✓
✓
NTP-Client
UDP/123
Outgoing
only
Outgoing only
✓
✓
--
--
NTP-Server
UDP/123
Closed
Closed
✓
✓
--
--
NTP-Server
(secure)
UDP/123
Closed
Closed
✓
✓
✓
--
OpenVPN-Client
UDP/1194
TCP/1194
Outgoing
only
Outgoing only
✓
✓
✓
✓
OpenVPN-Server
UDP/1194
TCP/1194
Closed
Closed
✓
✓
✓
✓
Ping
ICMP
Open
Closed
--
✓
--
--
RADIUS
UDP/1812
UDP/1813
Outgoing
only
Outgoing only
✓
✓
✓
--
SFTP
TCP/22
Outgoing
only
Outgoing only
✓
✓
✓
✓
Siemens Remote
Service
(cRSP/SRS)
TCP/443
Outgoing
only
Outgoing only
--
✓
Optional
✓
SINEMA RC
HTTPS/443 and
TCP/UDP
depending on
the server
configuration
Outgoing
only
Outgoing only
✓
✓
✓
✓

Siemens SIMATIC NET SCALANCE SC632-2C Specifications

General

Brand	Siemens
Model	SIMATIC NET SCALANCE SC632-2C
Category	Switch
Language	English

Summary

Introduction

Security recommendations

Description

Function

Details the configuration and security functions of the device.

Technical basics

IP address

Explains the structure of IPv4 addresses, subnet masks, and CIDR notation.

Configuring with Web Based Management

Web Based Management

Describes the Web Based Management (WBM) interface and its requirements.

Starting and logging in

Provides steps for establishing a connection and logging into the WBM.

"System" menu

DHCP Server

Details the configuration of the device as a DHCP server.

Passwords

"Layer 2" menu

Configuration

Enables basic configuration for Layer 2 functions like MAC aging and redundancy.

"Layer 3" menu

NAT

Covers NAT general settings, masquerading, NAPT, source NAT, and NETMAP.

VRRPv3

Details VRRPv3 configuration for router redundancy and interface tracking.

"Security" menu

Users

Covers user account management, roles, and groups for security settings.

Passwords

Allows configuration and management of user passwords and password policies.

Firewall

IPsec VPN (SC64x-2C)

Details the configuration of IPsec VPN connections, phase 1 and phase 2 settings.

Upkeep and maintenance

Device configuration with PRESET-PLUG

Explains how to configure devices using the PRESET-PLUG.

Restoring the factory settings

Exchange of configuration data with STEP7

Exchange of configuration data with STEP 7 Basic/Professional using a file