Siemens Simatic Net Scalance M812 User manual

___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
SIMATIC NET
Industrial Remote Communication
Remote Networks
SCALANCE M812, M816
Operating Instructions
08/2016
C79000
-G8976-C343-04
Preface
Security recommendations
1
Description of the device
2
Installation
3
Connecting up
4
Dimension drawings
5
Technical specifications
6
Approvals
A

Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
Document order number: C79000-G8976-C343
Ⓟ
10/2016 Subject to change
Copyright © Siemens AG 2014 - 2016.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified
for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 3
Preface
Purpose of the Operating Instructions
These compact operating instructions contain information with which you will be able to
install and connect up a device of the SCALANCE M -800 product line. The configuration
and the integration of the device in a network are not described in these instructions.
Validity of the manual
These operating instructions apply to the following devices:
●SCALANCE M812-1
●SCALANCE M816-1
Naming of the devices
Classification
Description
Terms used
Product line For all devices and variants in the product line, the term M-
800 is used.
M-800
Device family For all devices and variants in the device family line, the
term M81x is used.
M81x
Device If information relates to a specific device, the device name
is used.
M812
M816
Further documentation
●System manual "Industrial Ethernet"
The system manual contains information on other SIMATIC NET products that you can
operate along with the devices of this product line in an Industrial Ethernet network.
There, you will find among other things optical performance data of the communications
partner that you require for the installation.
The "SIMATIC NET Industrial Ethernet" system manual can be found on the Internet
pages of Siemens Industry Online Support under the following entry ID:27069465
(http://support.automation.siemens.com/WW/view/wn/27069465)
●"Passive network components" system manual
This system manual contains installation instructions for several of the most common
components and guidelines for setting up networked automation plants in buildings.
The "Passive Network Components" system manual can be found on the Internet pages
of Siemens Industry Online Support under the following entry ID:84922825
(http://support.automation.siemens.com/WW/view/en/84922825)

Preface
SCALANCE M812, M816
4Operating Instructions, 08/2016, C79000-G8976-C343-04
SIMATIC NET manuals
You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online
Support:
●using the search function:
Link to Siemens Industry Online Support (http://support.automation.siemens.com/)
Enter the entry ID of the relevant manual as the search item.
●In the navigation panel on the left hand side in the area "Industrial Communication":
Link to the area "Industrial Communication"
(http://support.automation.siemens.com/WW/view/en/10805878/133400)
Go to the required product group and make the following settings:
tab "Entry list", Entry type "Manuals"
You will find the documentation for the SIMATIC NET products relevant here on the data
medium that ships with some products:
●Product CD / product DVD
●SIMATIC NET Manual Collection
You will find the article numbers for the Siemens products of relevance here in the following
catalogs:
●SIMATIC NET Industrial Communication / Industrial Identification, catalog IK PI
●SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog
ST 70
●Industry Mall - catalog and ordering system for automation and drive technology, Online
catalog (http://eb.automation.siemens.com/)
You can request the catalogs and additional information from your Siemens representative.

Preface
SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 5
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines
and networks. Systems, machines and components should only be connected to the
enterprise network or the internet if and to the extent necessary and with appropriate security
measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken into
account. For more information about industrial security, please visit
Link: (http://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends to apply product updates as soon as available and to
always use the latest product versions. Use of product versions that are no longer supported,
and failure to apply latest updates may increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
Link: (http://www.siemens.com/industrialsecurity).
Trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SCALANCE, SINEMA, KEY-PLUG, C-PLUG
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following documents on the supplied data medium:
●OSS_ScalanceM-800_S615_86.htm
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary on the Internet at the following address:
50305045 (http://support.automation.siemens.com/WW/view/en/50305045)

Preface
SCALANCE M812, M816
6Operating Instructions, 08/2016, C79000-G8976-C343-04

SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 7
Table of contents
Preface ................................................................................................................................................... 3
1 Security recommendations...................................................................................................................... 9
2 Description of the device....................................................................................................................... 15
2.1 Product characteristics............................................................................................................15
2.2 Accessories.............................................................................................................................17
2.3 LED display.............................................................................................................................18
2.3.1 SCALANCE M812-1 ...............................................................................................................18
2.3.2 SCALANCE M816-1 ...............................................................................................................21
2.4 Terminals ................................................................................................................................23
2.5 SET button ..............................................................................................................................25
2.6 C-PLUG and KEY-PLUG ........................................................................................................27
3 Installation ............................................................................................................................................ 29
3.1 Securing the housing ..............................................................................................................30
3.2 Wall mounting .........................................................................................................................31
3.3 Installing on the DIN rail..........................................................................................................33
3.4 Installing on the S7-300 standard rail .....................................................................................34
3.5 Installing on the S7-1500 standard rail ...................................................................................35
3.6 Mounting on a pedestal...........................................................................................................36
4 Connecting up....................................................................................................................................... 39
4.1 Safety when connecting up.....................................................................................................40
4.2 Power supply ..........................................................................................................................42
4.3 Grounding ...............................................................................................................................44
4.4 Digital input/output ..................................................................................................................45
4.5 DSL interface ..........................................................................................................................47
4.6 Ethernet port ...........................................................................................................................48
4.7 Replacing the PLUG ...............................................................................................................49
5 Dimension drawings.............................................................................................................................. 51
5.1 SCALANCE M812-1 ...............................................................................................................51
5.2 SCALANCE M816-1 ...............................................................................................................53
6 Technical specifications ........................................................................................................................ 55
6.1 SCALANCE M812 \ M816 ......................................................................................................55
A Approvals.............................................................................................................................................. 59

Table of contents
SCALANCE M812, M816
8Operating Instructions, 08/2016, C79000-G8976-C343-04
A.1 EU declaration of conformity.................................................................................................. 61
A.1.1 ATEX...................................................................................................................................... 62
A.1.2 RoHS...................................................................................................................................... 62
A.1.3 R&TTE / RED......................................................................................................................... 62
A.2 RCM / C-TICK ........................................................................................................................ 63
A.3 ATEX...................................................................................................................................... 64
A.4 IECEx ..................................................................................................................................... 65
A.5 FM certification....................................................................................................................... 66
A.6 UL certification (product safety) ............................................................................................. 67
A.7 UL HAZ. LOC certification (explosion protection) .................................................................. 68
A.8 EAC........................................................................................................................................ 69
Index .................................................................................................................................................... 71

SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 9
Security recommendations
1
To prevent unauthorized access, note the following security recommendations.
General
●You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
●Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products:
Link: (http://www.industry.siemens.com/topics/global/en/industrial-security/network-
security/Pages/Default.aspx)
●When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. Therefore operate the device only within a protected
network area.
●Operate the device only within a protected network area.
●Use VPN to encrypt and authenticate communication from and to the devices.
●For data transmission via a non-secure network use an encrypted VPN tunnel (IPsec,
Open VPN).
●Separate connections correctly (WBM. Telnet, SSH etc.).
Physical access
●Limit physical access to the device to qualified personnel.
The memory card or the PLUG (C-PLUG, KEY-PLUG) contains sensitive data such as
certificates, keys etc. that can be read out and modified.
●Lock unused physical ports on the device. Unused ports can be used to gain forbidden
access to the plant.

Security recommendations
SCALANCE M812, M816
10 Operating Instructions, 08/2016, C79000-G8976-C343-04
Software (security functions)
●Keep the software up to date. Check regularly for security updates of the product.
You will find information on this on the Internet pages "Industrial Security
(http://www.siemens.com/industrialsecurity)".
●Inform yourself regularly about security advisories and bulletins published by Siemens
ProductCERT (http://www.siemens.com/cert/en/cert-security-advisories.htm).
●Only activate protocols that you really require to use the device.
●The option of VLAN structuring provides good protection against DoS attacks and
unauthorized access. Check whether this is practical or useful in your environment.
●Restrict access to the device by firewall, VPN (IPsec, OSINEMA RC) and NAT.
●Use a central logging server to log changes and accesses. Operate your logging server
within the protected network area and check the logging information regularly.
Passwords
●Define rules for the use of devices and assignment of passwords.
●Regularly update passwords and keys to increase security.
●Change all default passwords for users before you operate the device.
●Only use passwords with a high password strength. Avoid weak passwords for example
password1, 123456789, abcdefgh.
●Make sure that all passwords are protected and inaccessible to unauthorized personnel.
●Do not use the same password for different users and systems or after it has expired.
Keys and certificates
This section deals with the security keys and certificates you require to set up SSL, VPN
(IPsec, OpenVPN) and SINEMA RC.
●The device contains a pre-installed SSL certificate with key. Replace this certificate with a
self-made certificate with key. We recommend that you use a certificate signed by a
reliable external or internal certification authority.
●Use the certification authority including key revocation and management to sign the
certificates.
●Make sure that user-defined private keys are protected and inaccessible to unauthorized
persons.
●Verify certificates and fingerprints on the server and client to prevent "man in the middle"
attacks.
●It is recommended that you use password-protected certificates in the PKCS #12 format
●It is recommended that you use certificates with a key length of at least 2048 bits.
●Change keys and certificates immediately, if there is a suspicion of compromise.

Security recommendations
SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 11
Secure/non-secure protocols
●Avoid or disable non-secure protocols, for example Telnet and TFTP. For historical
reasons, these protocols are still available, however not intended for secure applications.
Use non-secure protocols on the device with caution.
●Avoid or disable non-secure protocols. Check whether use of the following protocols is
necessary:
–Broadcast pings
–Non authenticated and unencrypted interfaces
–ICMP (redirect)
–LLDP
–Syslog
–DHCP Options 66/67
–TFTP
●The following protocols provide secure alternatives:
–SNMPv1/v2 → SNMPv3
Check whether use of SNMPv1 is necessary. SNMPv1 is classified as non-secure.
Use the option of preventing write access. The product provides you with suitable
setting options.
If SNMP is enabled, change the community names. If no unrestricted access is
necessary, restrict access with SNMP.
–HTTP → HTTPS
–Telnet → SSH
●Use secure protocols when access to the device is not prevented by physical protection
measures.
●To prevent unauthorized access to the device or network, take suitable protective
measures against non-secure protocols.
●If you require non-secure protocols and services, activate these at interfaces that are
located within a protected network area.
●Using a firewall, restrict the services and protocols available to the outside to a minimum.
●For the DCP function, enable the "DCP read-only" mode after commissioning.
Available protocols per port
The following list provides you with an overview of the open ports on this device. Keep this in
mind when configuring a firewall.

Security recommendations
SCALANCE M812, M816
12 Operating Instructions, 08/2016, C79000-G8976-C343-04
The table includes the following columns:
●
Protocol
All protocols that the device supports
●
Port number
Port number assigned to the protocol
●
Port status
–Open
The port is always open and cannot be closed.
–Open (when configured)
The port is open if it has been configured.
●
Factory setting
–Open
The factory setting of the port is "Open".
–Closed
The factory setting of the port is "Closed".
●
Authentication
Specifies whether or not the protocol is authenticated during access.
With some protocols the port can be open but access is prevented by a predefined IP
package filter rule. You will find further information on the predefined IP package rules in
"Security > Firewall > Predefined IPv4"
Protocol
Port number
Port status
Factory setting
Authentication
Internal
interface
External
interface
SSH
TCP/22
Open (when configured)
Open
Closed
Yes
HTTP
TCP/80
Open (when configured)
Open
Closed
Yes
HTTPS
TCP/443 Open Open Closed Yes
SNTP
UDP/123
Open (only outgoing)
Closed
Closed
No
SNMP
UDP/161 Open (when configured) Open Closed Yes
DNS
TCP/53
Open (when configured)
Open
Closed
No
UDP/53
Open (when configured)
Open
Closed
No
Syslog
UDP/514
Open (only outgoing)
Closed
Closed
No
IPsec
UDP/500
UDP/4500
Open (when configured) Closed Open Yes
DHCP
UDP/67
UDP/68
Open (when configured) Open Closed No
NTP
UDP/123
Open (only outgoing)
Closed
Closed
Yes
Siemens Remote Service
(cRSP/SRS)
TCP/443 Open (only outgoing) Closed Closed Yes
PROFINET
UDP/34964
Open (when configured)
Closed
Closed
No

Security recommendations
SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 13
Protocol
Port number
Port status
Factory setting
Authentication
Internal
interface
External
interface
OpenVPN to SINEMA RC
TCP, any
Open (only outgoing)
Closed
Closed
Yes
TFTP
UDP/69
Open (only outgoing)
Closed
Closed
No
DynDNS
TCP/80 Open (only outgoing) Closed Closed No
Telnet
TCP/23
Open (when configured)
Open
Closed
Yes
Ping
ICMP
Open
Open
Closed
No

Security recommendations
SCALANCE M812, M816
14 Operating Instructions, 08/2016, C79000-G8976-C343-04

SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 15
Description of the device
2
2.1
Product characteristics
Interfaces
Functionality
M812-1
M816-1
DSL interface
1x RJ45
1x RJ45
Ethernet interface
1x RJ-45 10 / 100 Mbps
4 x RJ-45 10 / 100 Mbps
Digital input/output 1/1 1/1
PLUG slot
-
✓
Scope of delivery
The following components ship with the product:
●One device
●A 5-pin terminal block for the power supply
●A 2-pin terminal block for the digital output
●A 2-pin terminal block for the digital input
●Documentation CD
Note
Not included with the product
The following components do not ship with the product:
•
KEY-PLUG / C-PLUG
You will find more detailed information in "C-PLUG and KEY-PLUG (Page 27)".
Article numbers
Type
Description
Article number
SCALANCE M812-1 ADSL2+ router
Analog phone connection (Annex A)
6GK5812-1AA00-2AA2
ISDN connection (Annex B)
6GK5812-1BA00-2AA2
SCALANCE M816-1 ADSL2+ router
Analog phone connection (Annex A)
6GK5816-1AA00-2AA2
ISDN connection (Annex B)
6GK5816-1BA00-2AA2

Description of the device
2.1 Product characteristics
SCALANCE M812, M816
16 Operating Instructions, 08/2016, C79000-G8976-C343-04
Unpacking and checking
WARNING
Do not use any parts that show evidence of damage
If you use damaged parts, there is no guarantee that the device will function according to
the specification.
If you use damaged parts, this can lead to the following problems:
•Injury to persons
•Loss of the approvals
•Violation of the EMC regulations
Use only undamaged parts.
1. Make sure that the package is complete.
2. Check all the parts for transport damage.

Description of the device
2.2 Accessories
SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 17
2.2
Accessories
You will find further information on the accessories program for the M812 and M816 in the
Industry Mall
(https://eb.automation.siemens.com/goos/WelcomePage.aspx?regionUrl=/de&language=en)
.
Type
Properties
Article number
C-PLUG Exchangeable storage medium (32 MB) for the
configuration data
6GK1900-0AB00
Exchangeable storage medium (256 MB) for
the configuration data
6GK1900-0AB10
KEY-PLUG SINEMA RC Exchangeable storage medium (256 MB) to
enable the connection functionality to SINEMA
Remote Connect and for storing configuration
data.
6GK5908-0PB00
Desktop pedestal SCALANCE M-800 desktop pedestal for table
mounting for SCALANCE M812 / M816 / M874-
X / M876-X / S615
6GK5898-8MD00

Description of the device
2.3 LED display
SCALANCE M812, M816
18 Operating Instructions, 08/2016, C79000-G8976-C343-04
2.3
LED display
2.3.1
SCALANCE M812-1
LED
Status
Meaning
F OFF
No fault/error.
ON
The device is starting up or an error has occurred.
Flashing
The bootloader waits in this state for a new firmware file that you can
download using TFTP.

Description of the device
2.3 LED display
SCALANCE M812, M816
Operating Instructions, 08/2016, C79000-G8976-C343-04 19
LED
Status
Meaning
L OFF
Device turned off, no power supply.
ON
Device turned on, power supply present.
CR OFF
Device is not dialed in.
Flashing
DSL line training is completed, the DSL connection is established and
PPPoE passthrough is enabled.
ON
The dial-in with the access data was successful and the device was
assigned an external IP address by the DSL provider.
ON
The dial-in has failed.
DSL OFF
DSL interface is off.
ON
DSL interface is enabled and the DSL line training is running: The device
synchronizes itself with the DSLAM in the central office.
Flashing
DSL line training has failed or the DSL cable connection is down.
ON
DSL line training is completed and the DSL connection is established.
OFF
VPN not established
ON
VPN established
P1 OFF
Ethernet connection to local computer or LAN not established
ON
Ethernet connection to local computer or LAN established
ON
Device receiving / sending data
DI OFF
Digital input inactive

Description of the device
2.3 LED display
SCALANCE M812, M816
20 Operating Instructions, 08/2016, C79000-G8976-C343-04
LED
Status
Meaning
ON
Digital input active.
DO OFF Digital output inactive
ON
Digital output active.