Siemens SIMATIC NET SCALANCE SC642-2C - Table of Contents

SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
9
Table of contents
Introduction .................................................................................................................................................3
1 Security recommendations .................................................................................................................... 15
2 Description ............................................................................................................................................... 23
2.1 Function ............................................................................................................................................. 23
2.2 Requirements for operation ........................................................................................................... 25
2.2.1 Use in a PROFINET environment .................................................................................................. 26
2.3 System functions .............................................................................................................................. 26
2.4 Configuration limits for WBM and CLI ......................................................................................... 28
2.5 PLUG .................................................................................................................................................. 29
2.5.1 PRESET PLUG .................................................................................................................................. 31
3 Technical basics ...................................................................................................................................... 33
3.1 IP address .......................................................................................................................................... 33
3.1.1 Structure of an IPv4 address ......................................................................................................... 33
3.1.2 IPv4 ..................................................................................................................................................... 35
3.1.3 Initial assignment of an IP address .............................................................................................. 36
3.1.4 Address assignment with DHCP ................................................................................................... 36
3.2 MAC address ..................................................................................................................................... 37
3.3 ICMP ................................................................................................................................................... 38
3.4 VLAN ................................................................................................................................................... 40
3.4.1 VLAN tagging .................................................................................................................................... 41
3.5 SNMP .................................................................................................................................................. 43
3.6 Redundancy ....................................................................................................................................... 45
3.6.1 HRP ..................................................................................................................................................... 45
3.6.2 MRP .................................................................................................................................................... 46
3.6.3 Spanning Tree ................................................................................................................................... 48
3.6.4 RSTP ................................................................................................................................................... 49
3.7 Routing function ............................................................................................................................... 50
3.7.1 Routing ............................................................................................................................................... 50
3.7.2 VRRPv3 ............................................................................................................................................... 50
3.7.3 Static routing ..................................................................................................................................... 51
3.8 Security functions ............................................................................................................................ 51
3.8.1 Adapting the MTU for IPsec VPN and SINEMA RC .................................................................. 51
3.8.2 User management ............................................................................................................................ 51
3.8.3 Firewall ............................................................................................................................................... 54
3.8.3.1 Firewall rules SC600 ................................................................
........................................................ 54
3.8.4 NAT ..................................................................................................................................................... 57
3.8.5 NAT and firewall ............................................................................................................................... 58
3.8.6 Certificates ........................................................................................................................................ 59