Siemens SIMATIC NET SCALANCE MUM856-1 User manual

SCALANCE MUM856-1
SIMATIC NET
Industrial Remote Communication
-
Remote Networks
SCALANCE MUM856
-1
Operating Instructions
08/2021
C79000
-G8976-C628-02
Preface
Security recommendations
1
Safety notices
2
Description of the device
3
Assembly and disassembly
4
Connecting up
5
Maintenance and cleaning
6
Troubleshooting
7
Technical specifications
8
Dimension drawings
9
Approvals
10

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C628-02
Ⓟ
09/2021 Subject to change
Copyright © Siemens AG 2021.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SCALANCE MUM856-1
Operating Instructions, 08/2021, C79000-G8976-C628-02 3
Preface
Scope of validity
These operating instructions apply to SCALANCE MUM856-1.
Purpose of the Operating Instructions
These operating instructions contain information with which you will be able to install and
connect the SCALANCE MUM856-1 correctly. The configuration and the integration of the
device in a network are not described in these instructions.
Article numbers
Type
Article number
Description
SCALANCE MUM856-1
6GK5856-2EA00-3AA1 (ROW)
6GK5856-2EA00-3DA1 (EU)
6GK5856-2EA00-3FA1 (CN)
Router for wireless IP communication
of Ethernet-based applications over
public 3/4/5G cellular networks and
private 5G networks
1x 10/100/1000 Mbps, redundant 24 V
DC, PoE, CLP slot, 1x DI and 1x DO, A-
coded, IP65, -30… +60 °C
You will find the article numbers for the Siemens products of relevance here in the following
catalogs:
•SIMATIC NET Industrial Communication / Industrial Identification, catalog IK PI
•SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog ST 70
•Industry Mall - catalog and ordering system for automation and drive technology, Online
catalog (https://mall.industry.siemens.com)
You can request the catalogs and additional information from your Siemens representative.

Preface
SCALANCE MUM856-1
4Operating Instructions, 08/2021, C79000-G8976-C628-02
Further documentation
•System manual "Industrial Ethernet"
The system manual contains information on other SIMATIC NET products that you can
operate along with the devices of this product line in an Industrial Ethernet network.
There, you will find among other things optical performance data of the communications
partner that you require for the installation.
The "SIMATIC NET Industrial Ethernet" system manual can be found on the Internet pages
of Siemens Industry Online Support under the following entry ID: 27069465
(https://support.industry.siemens.com/cs/ww/en/view/27069465)
•"Passive network components" system manual
This system manual contains installation instructions for several of the most common
components and guidelines for setting up networked automation plants in buildings.
The "Passive network components" system manual can be found on the Internet pages of
Siemens Industry Online Support under the following entry ID: 84922825
(https://support.industry.siemens.com/cs/ww/en/view/84922825)
SIMATIC NET manuals
You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online Support:
•using the search function:
Link to Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/)
Enter the entry ID of the relevant manual as the search item.
•In the navigation panel on the left hand side in the area "Industrial Communication":
Link to the area "Industrial Communication"
(https://support.industry.siemens.com/cs/ww/en/ps/15247/pm)
Go to the required product group and make the following settings:
tab "Entry list", Entry type "Manuals"
You will find the documentation for the SIMATIC NET products relevant here on the data
medium that ships with some products:
•Product CD / product DVD
•SIMATIC NET Manual Collection

Preface
SCALANCE MUM856-1
Operating Instructions, 08/2021, C79000-G8976-C628-02 5
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary
and only when appropriate security measures (e.g. firewalls and/or network segmentation)
are in place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity).
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customer’s exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity).
Decommissioning
Shut down the device properly to prevent unauthorized persons from accessing confidential
data in the device memory.
To do this, restore the factory settings on the device.
Also restore the factory settings on the storage medium.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certified
disposal company for electronic scrap or your Siemens contact (Product return
(https://support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the different national regulations.
Device defective
If a fault develops, send the device to your SIEMENS representative for repair. Repairs on-site
are not possible.

Preface
SCALANCE MUM856-1
6Operating Instructions, 08/2021, C79000-G8976-C628-02
Trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SCALANCE, SINEMA, KEY-PLUG, C-PLUG
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following documents on the supplied data medium:
•OSS_SCALANCE_MuM856_86.pdf
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary on the Internet at the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)

SCALANCE MUM856-1
Operating Instructions, 08/2021, C79000-G8976-C628-02 7
Table of contents
Preface................................................................................................................................................... 3
1 Security recommendations.................................................................................................................... 9
2 Safety notices ...................................................................................................................................... 17
3 Description of the device..................................................................................................................... 19
3.1 Product characteristics ....................................................................................................... 19
3.2 Device view ....................................................................................................................... 20
3.3 Scope of delivery ............................................................................................................... 20
3.4 Accessories........................................................................................................................ 22
3.5 LED display ........................................................................................................................ 24
3.6 Reset button...................................................................................................................... 26
3.7 CLP.................................................................................................................................... 27
4 Assembly and disassembly.................................................................................................................. 29
4.1 Types of installation........................................................................................................... 32
4.2 Wall mounting................................................................................................................... 32
4.3 DIN rail mounting .............................................................................................................. 33
4.3.1 Installation with the DIN rail mounting adapter .................................................................. 33
4.3.2 Mounting with bracket support.......................................................................................... 35
5 Connecting up ..................................................................................................................................... 39
5.1 Power supply ..................................................................................................................... 44
5.2 Ethernet ............................................................................................................................ 46
5.3 Antennas........................................................................................................................... 47
5.4 SIM card ............................................................................................................................ 49
5.5 Grounding ......................................................................................................................... 51
5.6 Digital input/output ........................................................................................................... 52
5.7 Inserting / removing the CLP .............................................................................................. 54
6 Maintenance and cleaning .................................................................................................................. 57
7 Troubleshooting .................................................................................................................................. 59
7.1 Downloading new firmware using TFTP without WBM and CLI ............................................ 59
7.2 Restoring the factory settings............................................................................................. 60
8 Technical specifications....................................................................................................................... 63
9 Dimension drawings............................................................................................................................ 67
10 Approvals............................................................................................................................................. 71

Table of contents
SCALANCE MUM856-1
8Operating Instructions, 08/2021, C79000-G8976-C628-02
10.1 Layout............................................................................................................................... 71
10.2 EC declaration of conformity.............................................................................................. 72
10.2.1 RoHS ................................................................................................................................. 73
10.2.2 RED ................................................................................................................................... 73
10.2.2.1 Protection of health and safety........................................................................................... 73
10.2.2.2 EMC .................................................................................................................................. 74
10.2.2.3 Efficient use of the radio spectrum..................................................................................... 75
10.2.3 Other technical standards .................................................................................................. 75
10.3 UK Declaration of Conformity............................................................................................. 76
10.3.1 The Restriction of the Use of Certain Hazardous Substances in Electrical and Electronic
Equipment Regulations 2012 ............................................................................................. 76
10.3.2 Radio Equipment Regulations 2017.................................................................................... 77
10.3.2.1 Protection of health and safety........................................................................................... 77
10.3.2.2 EMC .................................................................................................................................. 77
10.3.2.3 Efficient use of the radio spectrum..................................................................................... 78
10.3.3 Other technical standards .................................................................................................. 79
10.4 Supplier’s declaration of conformity ................................................................................... 79
10.5 General approvals.............................................................................................................. 80
Index.................................................................................................................................................... 85

SCALANCE MUM856-1
Operating Instructions, 08/2021, C79000-G8976-C628-02 9
Security recommendations
1
To prevent unauthorized access to the device and/or network, observe the following security
recommendations.
General
•Check the device regularly to ensure that these recommendations and/or other internal
security policies are complied with.
•Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products:
Link: (https://www.industry.siemens.com/topics/global/en/industrial-
security/pages/default.aspx)
•When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. If possible, operate the device only within a protected
network area.
•Use VPN to encrypt and authenticate communication from and to the devices.
•For data transmission via a non-secure network, use an encrypted VPN tunnel (IPsec,
OpenVPN).
•Separate connections correctly (WBM, SSH etc.).
•Check the user documentation of other Siemens products that are used together with the
device for additional security recommendations.
•Using remote logging, ensure that the system protocols are forwarded to a central logging
server. Make sure that the server is within the protected network and check the protocols
regularly for potential security violations or vulnerabilities.
Authentication
Note
Accessibility risk
- Risk of data loss
Do not lose the passwords for the device. Access to the device can only be restored by
resetting the device to factory settings which completely removes all configuration data.
•Replace the default passwords for all user accounts, access modes and applications (if
applicable) before you use the device.
•Define rules for the assignment of passwords.
•Use passwords with a high password strength. Avoid weak passwords, (e.g. password1,
123456789, abcdefgh) or recurring characters (e.g. abcabc).
This recommendation also applies to symmetrical passwords/keys configured on the
device.

Security recommendations
SCALANCE MUM856-1
10 Operating Instructions, 08/2021, C79000-G8976-C628-02
•Make sure that passwords are protected and only disclosed to authorized personnel.
•Do not use the same passwords for multiple user names and systems.
•Store the passwords in a safe location (not online) to have them available if they are lost.
•Regularly change your passwords to increase security.
•A password must be changed if it is known or suspected to be known by unauthorized
persons.
•When user authentication is performed via RADIUS, make sure that all communication
takes place within the security environment or is protected by a secure channel.
•Watch out for link layer protocols that do not offer their own authentication between
endpoints, such as ARP or IPv4. An attacker could use vulnerabilities in these protocols to
attack hosts, switches and routers connected to your layer 2 network, for example,
through manipulation (poisoning) of the ARP caches of systems in the subnet and
subsequent interception of the data traffic. Appropriate security measures must be taken
for non-secure layer 2 protocols to prevent unauthorized access to the network. Physical
access to the local network can be secured or secure, higher layer protocols can be used,
among other things.
Certificates and keys
This section deals with the security keys and certificates you require to set up TLS, VPN (IPsec,
OpenVPN) and SINEMA RC.
•The device contains a pre-installed X.509 certificate with key. Replace this certificate with
a self-made certificate with key. Use a certificate signed by a reliable external or internal
certification authority.
•Use the certification authority including key revocation and management to sign the
certificates.
•Make sure that user-defined private keys are protected and inaccessible to unauthorized
persons.
•If there is a suspected security violation, change all certificates and keys immediately.
•SSH and SSL keys are available for admin users. Make sure that you take appropriate
security measures when shipping the device outside of the trusted environment:
–Replace the SSH and SSL keys with disposable keys prior to shipping.
–Decommission the existing SSH and SSL keys. Create and program new keys when the
device is returned.
•Use password-protected certificates in the format "PKCS #12".
•Use certificates with a key length of 4096 bits.
•Verify certificates based on the fingerprint on the server and client side to prevent "man in
the middle" attacks. Use a second, secure transmission path for this.
•Before sending the device to Siemens for repair, replace the current certificates and keys
with temporary disposable certificates and keys, which can be destroyed when the device
is returned.