Siemens SIMATIC NET SCALANCE XM-400 User manual
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage
to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices
referring only to property damage have no safety alert symbol. These notices shown below are graded according to
the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Qualied Personnel
The product/system described in this documentation may be operated only by personnel qualied for the specic
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualied personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance
are required to ensure that the products operate safely and without any problems. The permissible ambient
conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identied by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may
be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this
publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C332-10
Ⓟ 03/2021 Subject to change
Copyright © Siemens AG 2013 - 2021.
All rights reserved
Table of contents
1 Introduction ........................................................................................................................................... 5
1.1 On the Operating Instructions .............................................................................................. 5
2 Safety notices ........................................................................................................................................ 9
3 Recommendations on network security.............................................................................................. 11
4 Description of the device..................................................................................................................... 17
4.1 Properties and functions .................................................................................................... 17
4.2 Product overview............................................................................................................... 19
4.3 Device views...................................................................................................................... 21
4.3.1 PE408................................................................................................................................ 21
4.3.2 PE408PoE .......................................................................................................................... 22
4.3.3 PE400-8SFP ....................................................................................................................... 23
4.4 Accessories........................................................................................................................ 24
4.5 LED display ........................................................................................................................ 25
4.5.1 LEDs "2" and "3" ................................................................................................................. 25
4.5.2 LEDs "L1" and "L2".............................................................................................................. 26
4.5.3 Port LEDs ........................................................................................................................... 26
4.6 Power over Ethernet (PoE).................................................................................................. 28
5 Installation........................................................................................................................................... 31
5.1 Safety notices for installation ............................................................................................. 31
5.2 Types of installation ........................................................................................................... 33
5.3 Installation on a DIN rail..................................................................................................... 34
5.4 Installation on a standard S7-300 rail ................................................................................. 35
5.5 Installation on a standard S7-1500 rail ............................................................................... 36
5.6 Fitting an extender ............................................................................................................ 37
6 Connecting up ..................................................................................................................................... 41
6.1 Safety when connecting up................................................................................................ 41
6.2 Further notes..................................................................................................................... 43
6.3 PoE power supply of the PE408PoE..................................................................................... 45
7 Technical specications ....................................................................................................................... 47
7.1 Technical specications of the PE408.................................................................................. 47
7.2 Technical specications of the PE408PoE ............................................................................ 48
7.3 Technical specications of the PE400-8SFP ......................................................................... 49
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 3
8 Dimension drawings............................................................................................................................ 51
A Approvals............................................................................................................................................. 55
Index .................................................................................................................................................... 63
Table of contents
Extender for SCALANCE XM-400
4Operating Instructions, 03/2021, C79000-G8976-C332-10
Introduction 1
1.1 On the Operating Instructions
Purpose of the Operating Instructions
These operating instructions support you when installing and connecting extenders within the
SCALANCE XM-400 product group.
The conguration and the integration of the device in a network are not described in these
operating instructions.
Validity of the Operating Instructions
These operating instructions apply to the following devices:
• Port extender PE408
• Port extender PE408PoE
• Port extender PE400-8SFP
Unless mentioned otherwise, the descriptions in these operating instructions refer to all devices
named in the section on validity.
Designations used
Classication Description Terms used
Product line The product line includes all devices and variants of all product groups.
If information applies to all product groups within the product line, the term X-400
is used.
X-400
Product group If information applies to all devices and variants of a product group, the term PE-400
is used.
PE-400
Device If information relates to a specic device, the device name is used. PE408
PE408PoE
PE400-8SFP
Additional documentation
In addition, note the Operating Instructions of the basic devices SCALANCE XM-400 and the
pluggable transceivers.
When working with the port extender PE408PoE, note the documentation of the PoE power
supplies SCALANCE PS9230 PoE and SCALANCE PS924 PoE.
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 5
You will nd the supplementary documentation here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15315/man)
When using the Function Extender BUS ANALYZER Agent XM-400, note the documentation of
the BUS ANALYZER Agent XM-400 on the Siemens Industry Online Support website:
• Product announcement (https://support.industry.siemens.com/cs/de/en/view/109745817)
• Application example (https://support.industry.siemens.com/cs/de/en/view/109762541)
Documentation on conguration
You will nd detailed information on conguring the devices in the following conguration
manuals:
• SCALANCE XM-400/XR-500 Web Based Management
• SCALANCE XM-400/XR-500 Command Line Interface
You will nd the conguration manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support. (https://
support.industry.siemens.com/cs/ww/en/ps/15315)
Further documentation
In the system manuals "Industrial Ethernet / PROFINET Industrial Ethernet" and "Industrial
Ethernet / PROFINET passive network components", you will nd information on other SIMATIC
NET products that you can operate along with the devices of this product line in an Industrial
Ethernet network.
There, you will nd among other things optical performance data of the communications
partner that you require for the installation.
Introduction
1.1 On the Operating Instructions
Extender for SCALANCE XM-400
6Operating Instructions, 03/2021, C79000-G8976-C332-10
You will nd the system manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support:
– Industrial Ethernet / PROFINET Industrial Ethernet System Manual (https://
support.industry.siemens.com/cs/ww/en/view/27069465)
– Industrial Ethernet / PROFINET Passive Network Components System Manual (https://
support.industry.siemens.com/cs/ww/en/view/84922825)
SIMATIC NET manuals
You will nd the SIMATIC NET manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15247).
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will nd the SIMATIC NET glossary here:
• SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
• On the Internet under the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary
to implement – and continuously maintain – a holistic, state-of-the-art industrial security
concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected to
an enterprise network or the internet if and to the extent such a connection is necessary and only
when appropriate security measures (e.g. rewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity)
Introduction
1.1 On the Operating Instructions
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 7
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customers’ exposure to cyber
threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed
under
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity)
Catalogs
You will nd the article numbers for the Siemens products of relevance here in the following
catalogs:
• SIMATIC NET Industrial Communication / Industrial Identication, catalog IK PI
• SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog ST 70
• Industry Mall - catalog and ordering system for automation and drive technology, Online
catalog (https://mall.industry.siemens.com/goos/WelcomePage.aspx?regionUrl=/
en&language=en)
You can request the catalogs and additional information from your Siemens representative.
Device defective
If a fault develops, send the device to your SIEMENS representative for repair. Repairs on-site are
not possible.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certied
disposal company for electronic scrap or your Siemens contact (Product return (https://
support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the dierent national regulations.
Trademarks
The following and possibly other names not identied by the registered trademark sign ® are
registered trademarks of Siemens AG:
SIMATIC NET, SCALANCE, C-PLUG, OLM
Introduction
1.1 On the Operating Instructions
Extender for SCALANCE XM-400
8Operating Instructions, 03/2021, C79000-G8976-C332-10
Safety notices 2
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
CAUTION
To prevent injury, read the manual before use.
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
Do not open the device when the supply voltage is turned on.
Safety notices when using the device according to Hazardous Locations (HazLoc)
If you use the device under HazLoc conditions you must also keep to the following safety notices
in addition to the general safety notices for protection against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-hazardous
locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 9
Safety notices
Extender for SCALANCE XM-400
10 Operating Instructions, 03/2021, C79000-G8976-C332-10
Recommendations on network security 3
NOTICE
Information security
Connect to the device and change the standard password for the user set in the factory "admin"
and "" before you operate the device.
To prevent unauthorized access, note the following security recommendations.
General
• You should make regular checks to make sure that the device meets these recommendations
and/or other security guidelines.
• Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable
products (https://www.industry.siemens.com/topics/global/en/industrial-security/pages/
default.aspx).
• When the internal and external network are disconnected, an attacker cannot access internal
data from the outside. Therefore operate the device only within a protected network area.
• For communication via non-secure networks use additional devices with VPN functionality to
encrypt and authenticate the communication.
• No product liability will be accepted for operation in a non-secure infrastructure.
• Terminate management connections correctly (WBM. Telnet, SSH etc.).
Physical access
• Restrict physical access to the device to qualied personnel.
– The memory card or the PLUG (C-PLUG, KEY-PLUG) contains sensitive data such as
certicates, keys etc. that can be read out and modied.
– Using the button, you can reset the device to the factory defaults.
• If the device is publicly accessible, disable the functions of the button using the software.
• Lock unused physical ports on the device. Unused ports can be used to gain forbidden access
to the plant.
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 11
Software (security functions)
• Keep the rmware up to date. Check regularly for security updates for the device. You can
nd information on this at the Industrial Security (https://www.siemens.com/
industrialsecurity) website.
• Inform yourself regularly about security recommendations published by Siemens
ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).
• Only activate protocols that you require to use the device.
• Restrict access to the management of the device with rules in an access control list (ACL).
• The option of VLAN structuring provides protection against DoS attacks and unauthorized
access. Check whether this is practical or useful in your environment.
• Use a central logging server to log changes and accesses. Operate your logging server within
the protected network area and check the logging information regularly.
Passwords
•Dene rules for the assignment of passwords.
• Regularly change your passwords to increase security.
• Use passwords with a high password strength.
• Make sure that all passwords are protected and inaccessible to unauthorized persons.
• A password must be changed if it is known or suspected to be known by unauthorized
persons.
• Do not use the same password for dierent users and systems.
Certicates and keys
• The device contains a pre-installed certicate with key. Replace this certicate with a self-
made certicate with key. We recommend that you use a certicate signed either by a reliable
external or by an internal certication authority. You can install the certicate via the WBM
(System > Load and Save).
• Use the certication authority including key revocation and management to sign the
certicates.
• Make sure that user-dened private keys are protected and inaccessible to unauthorized
persons.
• Verify certicates and ngerprints on the server and client to prevent "man in the middle"
attacks.
• It is recommended that you use password-protected certicates in the PKCS#12 format.
• It is recommended that you use certicates with a key length of at least 2048 bits.
• Change keys and certicates immediately if there is a suspicion of compromise.
Recommendations on network security
Extender for SCALANCE XM-400
12 Operating Instructions, 03/2021, C79000-G8976-C332-10
Secure/non-secure protocols and services
• Avoid or disable non-secure protocols and services, for example HTTP, Telnet and TFTP. For
historical reasons, these protocols are available, however not intended for secure
applications. Use non-secure protocols on the device with caution.
• Check whether use of the following protocols and services is necessary:
– Non authenticated and unencrypted ports
– MRP, HRP
– IGMP snooping
– LLDP
– Syslog
– RADIUS
– DHCP Options 66/67
– TFTP
– GMRP and GVRP
• The following protocols provide secure alternatives:
– HTTP → HTTPS
– Telnet → SSH
– SNMPv1/v2c → SNMPv3
Check whether use of SNMPv1/v2c. is necessary. SNMPv1/v2c is classied as non-secure.
Use the option of preventing write access. The device provides you with suitable setting
options.
If SNMP is enabled, change the community names. If no unrestricted access is necessary,
restrict access with SNMP.
Use the authentication and encryption mechanisms of SNMPv3.
• Use secure protocols when access to the device is not prevented by physical protection
measures.
• If you require non-secure protocols and services, operate the device only within a protected
network area.
• Restrict the services and protocols available to the outside to a minimum.
• For the DCP function, enable the "Read Only" mode after commissioning.
• If you use RADIUS for management access to the device, activate secure protocols and
services.
Interfaces security
• Disable unused interfaces.
• Use IEEE 802.1X for interface authentication.
• Use the function "Locked Ports" to block interfaces for unknown nodes.
• Use the conguration options of the interfaces, e.g. the "Edge Type".
•Congure the receive ports so that they discard all untagged frames ("Tagged Frames Only").
Recommendations on network security
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 13
Available protocols
The following list provides you with an overview of the open protocol ports.
The table includes the following columns:
•Protocol
•Port
•Default port status
– Open
The factory setting of the port is "Open".
– Closed
The factory setting of the port is "Closed".
•Congurable port
– ✓
The port status can be changed.
– --
The port status cannot be changed.
•Authentication
Species whether the communication partner is authenticated.
•Encryption
Species whether or not the transfer is encrypted.
Protocol Protocol/
Port number
Default port status Congurable port Authentication Encryption
DHCPv4 Server UDP/67
Closed ✓ No No
DHCPv4 Client UDP/68 Open ✓ No No
DHCPv6 IPv6 UDP/546 Closed ✓ No No
Discard TCP/9 Open, ltered -- No No
Echo IP UPD/TCP/9 Open -- No No
EtherNet/IP TCP/44818
UDP/2222
UDP/44818
Closed ✓ No No
HTTP TCP/80 Open ✓ Yes No
HTTPS TCP/443 Open ✓ Yes Yes
Kerberos TCP/464 Open, ltered -- No No
MSDP TCP/639 Closed ✓ No No
NTP
SNTP
UDP/123 Closed ✓ No No
NTP (secure) UDP/123 Closed ✓ Yes No
PROFINET UDP/34964,
UDP/49151
… 491591)
Open ✓ No No
Recommendations on network security
Extender for SCALANCE XM-400
14 Operating Instructions, 03/2021, C79000-G8976-C332-10
Protocol Protocol/
Port number
Default port status Congurable port Authentication Encryption
RADIUS UDP/
1812,1813
Closed ✓ Yes Yes
RIP UDP/520 Closed -- No No
RIPng IPv6 UDP/521 Closed ✓ No No
SMTP TCP/25
TCP/465
Closed ✓ Yes Yes
SNMP UDP/161 Open ✓ Yes Yes (when cong‐
ured)
SSH TCP/22 Open ✓ Yes Yes
Syslog UDP/514 Closed ✓ Yes Yes
TELNET TCP/23 Open ✓ Yes No
TFTP UDP/69 Open -- No No
VRRP TCP/50000 Open, ltered -- No No
1) Port number can be congured via the WBM.
Recommendations on network security
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 15
Recommendations on network security
Extender for SCALANCE XM-400
16 Operating Instructions, 03/2021, C79000-G8976-C332-10
Description of the device 4
4.1 Properties and functions
SCALANCE XM-400 product group
The product group SCALANCE XM-400 consists of basic devices (compact switches) and
extenders (port extenders and function extender).
SCALANCE XM-400 basic device
Basic properties
The SCALANCE XM-400 basic devices are modular compact switches with xed RJ-45 ports
(10/100/1000 Mbps) and SFP transceiver slots that can be equipped individually. The SFP
transceiver slots are combo ports.
A SCALANCE XM-400 can manage a maximum of 24 ports with 10/100/1000 Mbps.
The following components exist only on the basic device:
• CPU
• Power supply
• Signaling contact
• Out-of-band port
• Serial interface
• "SELECT / SET" button
Expansions
The basic devices can be expanded with additional ports and functions by using an extender. The
extenders are connected to the side of the basic device. Each basic device has an expansion
interface to the left for function extenders and to the right an expansion interface for port
extenders.
Depending on the number of ports of the basic device (10/100/1000 Mbps) up to 2 port
extenders can be added. Further port extenders are not supplied with power. There is no
particular order in which the port extenders need to be added.
Example:
• The basic device SCALANCE XM408-8C has 8 ports. It can therefore be expanded by 2 port
extenders each with 8 ports.
• The basic device SCALANCE XM416-4C has 16 ports. It can therefore be expanded by one
port extender with 8 ports.
A function extender can be added.
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 17
Port extender PE-400
Port extenders are modular network components with RJ-45 ports (10/100/1000 Mbps) or SFP
transceiver slots. To the left they have an expansion interface to connect to the basic device or
to another port extender and to the right they have an expansion interface for additional port
extenders. Each port extender functions with every basic device.
Note
Port extenders function only in conjunction with a basic device.
Function Extender BUS ANALYZER Agent XM-400
Function extenders are modular network components, that expand the range of functions of the
basic device.
To the right they have an expansion interface to connect to the basic device. Function extenders
can be used with every basic device.
The BUS ANALYZER Agent XM-400 can be used as a function extender for SCALANCE XM-400.
As a function extender the BUS ANALYZER Agent XM-400 is a modular network component with
4 internal monitor ports for port mirroring. On the internal ports of the BUS ANALYZER Agent
XM-400, ports of the basic device can be mirrored and their data trac recorded. The BUS
ANALYZER Agent XM-400 has an expansion interface to the right to connect to the basic device.
It can be used with every basic device.
In standalone mode, the BUS ANALYZER Agent XM-400 is an independent hardware module for
recording and sending Ethernet and PROFINET data without any consequences.
You will nd detailed information in the operating instructions of the BUS ANALYZER Agent
XM-400, see section "Introduction (Page 5)", subsection "Additional documentation".
Description of the device
4.1 Properties and functions
Extender for SCALANCE XM-400
18 Operating Instructions, 03/2021, C79000-G8976-C332-10
4.2 Product overview
Port extender
Type Properties Article number
PE408 8 x 10/100/1000 Mbps RJ-45 ports 6GK5 408-0GA00-8AP2
PE408PoE 8 x 10/100/1000 Mbps, RJ-45 ports with PoE 6GK5 408-0PA00-8AP2
PE400-8SFP 8 x 100/1000 Mbps, SFP ports 6GK5 400-8AS00-8AP2
Function Extender BUS ANALYZER Agent XM-400
Device Properties Article number
BUS ANALYZER
Agent XM-400 as
function extender
4 x internal monitor ports for port mirroring 9AE 4140-2AA00
Type designation
The type designation of an extender is made up of several parts that have the following meaning:
[ - ]
Interface
Number of electrical connectors
[ - ]
Number of SFP transceiver slots
Standard version
Power over Ethernet
[ - ]
PoE
PE4 -
Interface Property
SFP SFP port with 100/1000 Mbps
Description of the device
4.2 Product overview
Extender for SCALANCE XM-400
Operating Instructions, 03/2021, C79000-G8976-C332-10 19
Unpacking and checking
WARNING
Do not use any parts that show evidence of damage
If you use damaged parts, there is no guarantee that the device will function according to the
specication.
If you use damaged parts, this can lead to the following problems:
• Injury to persons
• Loss of the approvals
• Violation of the EMC regulations
• Damage to the device and other components
Use only undamaged parts.
1. Make sure that the package is complete.
2. Check all the parts for transport damage.
Components of the product
The following components are supplied with an extender:
• 1 x Extender
• 1 x Operating instructions
• 1 x Securing screw for mounting on an S7 standard rail
The following components are also supplied with a PE408PoE:
• 2 x Two-pin terminal blocks for Power over Ethernet (spring-loaded terminal)
The following components are also supplied with a PE400-8SFP:
• 8 x covers for the plug-in transceiver slots
Description of the device
4.2 Product overview
Extender for SCALANCE XM-400
20 Operating Instructions, 03/2021, C79000-G8976-C332-10
Other manuals for SIMATIC NET SCALANCE XM-400
1
Table of contents
Other Siemens Extender manuals
Siemens
Siemens SIMATIC User manual
Siemens
Siemens 505-2571 User manual
Siemens
Siemens PAD-4 User manual
Siemens
Siemens PSX-12C User manual
Siemens
Siemens SIMATIC NET PE408 User manual
Siemens
Siemens SPCE450 User manual
Siemens
Siemens SPCW130 User manual
Siemens
Siemens SPCE110 User manual
Siemens
Siemens 6ES7 972-4AA02-0XA0 User manual
Siemens
Siemens PSX-12 User manual
