Siemens SIMATIC NET SCALANCE M80PB User manual

SIMATIC NET
Industrial Remote Communication
Remote Networks
Cloud Connector
Getting Started
07/2020
C79000
-G8976-C507-03
Preface
Description
1
PROFIBUS connection
2
PROFINET connection
3

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
Document order number: C79000-G8976-C507
Ⓟ
07/2020 Subject to change
Copyright © Siemens AG 2019 - 2020.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 3
Preface
Purpose
The configuration of the Cloud Connector is shown with examples.
Validity
Getting Started applies to the SCALANCE M-800 firmware version V6.3 or higher.
IP settings for the examples
Note
The IP settings used in the examples were freely chosen.
In a real network, you would need to adapt these IP settings to avoid possible address
conflicts.
Further documentation
•Configuration Manual: SCALANCE M-800 Command Line Interface
This document contains the CLI commands supported by SCALANCE M-800 devices.
•Getting Started
Based on examples, these documents explain the configuration of the SCALANCE M-
800/S615.
•Operating instructions
These documents contains information on installing, connecting, maintaining and
servicing the following products.
Operating instructions
Products
SCALANCE M804PB
SCALANCE M80PB
SCALANCE M874, M876
SCALANCE M874-2
SCALANCE M874-3
SCALANCE M876-3
SCALANCE M876-4
SCALANCE M812, M816
SCALANCE M812-1
SCALANCE M816-1
SCALANCE M826
SCALANCE M826-2

Preface
Cloud Connector
4Getting Started, 07/2020, C79000-G8976-C507-03
•IP-Based Remote Networks
In this document, the possible configurations of an IP-based remote network are
explained in an overview with the requirements and a link to detailed configuration
instructions.
You will find this document on the Internet under the following entry ID: 26662448
(https://support.industry.siemens.com/cs/ww/en/view/26662448)
•Getting Started with Industrial Remote Communication
In this entry, you can find an overview - arranged by topic - with links to the most
important entries on Industrial Remote Communication in the Siemens Industry Online
Support.
You can find this entry under the following entry ID: 64721753
(https://support.industry.siemens.com/cs/ww/en/view/64721753)
•Setup of a secure VPN connection to a PROFIBUS / MPI system
In this application example, you obtain more information on setting up a secure VPN
connection with SCALANCE M804PB, SINEMA Remote Connect and TIA Portal Cloud
Connector.
You can find this entry under the following entry ID: 109767355
SIMATIC NET manuals
You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online Support:
•using the search function:
Link to Siemens Industry Online Support (https://support.industry.siemens.com/cs/ww/en/)
Enter the entry ID of the relevant manual as the search item.
•In the navigation panel on the left hand side in the area "Industrial Communication":
Link to the area "Industrial Communication"
(https://support.industry.siemens.com/cs/ww/en/ps/15247/pm)
Go to the required product group and make the following settings:
tab "Entry list", Entry type "Manuals"
Training, Service & Support
You will find information on Training, Service & Support in the multi--language document
"DC_support_99.pdf" on the data medium supplied with the documentation.
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary on the Internet at the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)

Preface
Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 5
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary
and only when appropriate security measures (e.g. firewalls and/or network segmentation)
are in place.
For additional information on industrial security measures that may be implemented, please
visit https://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customer’s exposure to
cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under https://www.siemens.com/industrialsecurity
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
Trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SCALANCE, SINEMA,

Preface
Cloud Connector
6Getting Started, 07/2020, C79000-G8976-C507-03

Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 7
Table of contents
Preface ................................................................................................................................................... 3
1 Description............................................................................................................................................. 9
2 PROFIBUS connection .......................................................................................................................... 11
2.1 Local service ...................................................................................................................... 11
2.1.1 Introduction ...................................................................................................................... 11
2.1.2 Enabling the TIA Portal Cloud Connector on the device ....................................................... 14
2.1.3 Enabling the TIA Portal Cloud Connector on the PG/PC........................................................ 15
2.1.4 Connecting to the TIA Portal Cloud Connector .................................................................... 17
2.2 Remote service .................................................................................................................. 20
2.2.1 Introduction ...................................................................................................................... 20
2.2.2 Creating a device and user on the SINEMA RC server........................................................... 24
2.2.3 Configuring SINEMA RC and TIA Cloud Connector on the device ......................................... 28
2.2.4 Start the SINEMA RC client on the PC.................................................................................. 30
2.2.5 Enable the TIA Portal Cloud Connector on the server........................................................... 31
2.2.6 Connecting to the TIA Portal Cloud Connector .................................................................... 33
3 PROFINET connection .......................................................................................................................... 39
3.1 Local service ...................................................................................................................... 39
3.1.1 Introduction ...................................................................................................................... 39
3.1.2 Enabling the TIA Portal Cloud Connector on the device ....................................................... 42
3.1.3 Enabling the TIA Portal Cloud Connector on the PG/PC........................................................ 43
3.1.4 Connecting to the TIA Portal Cloud Connector .................................................................... 45
3.2 Remote service .................................................................................................................. 47
3.2.1 Introduction ...................................................................................................................... 47
3.2.2 Creating a device and user on the SINEMA RC server........................................................... 50
3.2.3 Configuring SINEMA RC and TIA Cloud Connector on the device ......................................... 54
3.2.4 Start the SINEMA RC client on the PC.................................................................................. 55
3.2.5 Enable the TIA Portal Cloud Connector on the server........................................................... 57
3.2.6 Connecting to the TIA Portal Cloud Connector .................................................................... 58
Index.................................................................................................................................................... 61

Table of contents
Cloud Connector
8Getting Started, 07/2020, C79000-G8976-C507-03

Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 9
Description
1
Machines and plants are operated in places that are often far away from their place of
construction. Nevertheless, system manufacturers must be able to guarantee service in the
event of a fault. High costs can occur, especially in the warranty phase.
The Cloud Connector is suitable for remote maintenance (Teleservice). You can use it to
perform teleservice functions such as reading diagnostic buffers, firmware updates, and
diagnosing module states.
Remote maintenance can be performed directly (local service) or remotely via SINEMA RC
(remote service).
Getting Started describes the possibilities in 4 configuration examples:
•PROFIBUS / MPI connection
–Local service (Page 11)
–Remote service (Page 20)
•PROFINET / Industrial Ethernet connection
–Local service (Page 39)
–Remote service (Page 47)

Description
Cloud Connector
10 Getting Started, 07/2020, C79000-G8976-C507-03

Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 11
PROFIBUS connection
2
2.1 Local service
2.1.1 Introduction
In this example configuration, the PG/PC of the service technician is directly connected to the
SCALANCE M804PB via Ethernet and the S7 automation system via the MPI/DP interface. An
S7-300 with CPU 317-2 PN/DP is used as the S7 automation system.
In addition to the programming software (TIA Portal or STEP 7), the TIA Portal Cloud
Connector is also required on the PG/PC. SCALANCE M804PB has an integrated TIA Portal
Cloud Connector. The two TIA Portal Cloud Connectors form the endpoints of the
communication connection (unsecured).
The TIA Portal Cloud Connector of the SCALANCE M804PB is the server and the TIA Portal
Cloud Connector on the PG/PC is the client.
The pre-defined IPv4 rule "Cloud Connector" is enabled to prevent unauthorized access by
network devices to the "TIA Portal Cloud Connector" of the device. Only the service technician
is authorized to access the communication connection.
Via this communication link, the service technician accesses the connected S7 automation
system via the programming software and reads out the diagnostic buffer.

PROFIBUS connection
2.1 Local service
Cloud Connector
12 Getting Started, 07/2020, C79000-G8976-C507-03
The communication connection is established as follows:
SCALANCE M804PB
①Enable the integrated TIA Portal Cloud Connector.
PG/PC
②Enable the TIA Portal Cloud Connector to establish an unsecured communication
connection to the TIA Portal Cloud Connector of the SCALANCE M804PB.
③Establish the online connection to the TIA Portal or STEP7 via the TIA Portal Cloud
Connector.

PROFIBUS connection
2.1 Local service
Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 13
Settings used
For the configuration example, the devices are given the following IP address settings:
Device
VLAN
IP address
PG/PC
VLAN1
192.168.16.10
255.255.255.0
SCALANCE M804PB
P1 (VLAN1)
192.168.16.84
255.255.255.0
You use the PG/PC to configure the SCALANCE M804PB via Web Based Management. To do
so, you must assign the IP address to the PC network adapter. In the extended TCP/IP settings
of the network adapter configuration you have the option of adding additional IP addresses.
Note
The IP settings used in the configuration example were freely chosen.
In a real network, you would need to adapt these IP settings to avoid possible address
conflicts.
Requirement
•SCALANCE M804PB
–Firmware version 6.3
–The device is accessible via the PG/PC and you are logged on to the WBM as
"Administrator".
You can find more information on this in the "SCALANCE M-800 Getting Started
(https://support.industry.siemens.com/cs/ww/en/view/78389746)".
–The device is connected to the CPU via the MPI interface.
•PG/PC
–The TIA Portal V15 Update 2 or STEP 7 V5.6 is installed.
Steps in configuration
The following steps are required to read out the diagnostic buffer:
1. Enable the integrated TIA Portal Cloud Connector on the device (Page 14)
2. Enable the TIA Portal Cloud Connector on the PG/PC (Page 15)
3. Connecting to the TIA Portal Cloud Connector (Page 17)

PROFIBUS connection
2.1 Local service
Cloud Connector
14 Getting Started, 07/2020, C79000-G8976-C507-03
2.1.2 Enabling the TIA Portal Cloud Connector on the device
Procedure
1. Click "System" > "Cloud Connector" in the navigation area.
2. Configure the TIA Portal Cloud Connector with the following settings:
Operation
Enabled
Port
9023
(default port)
If you change the default port, make sure that it is not occupied by another ser-
vice.
Protocol
PROFIBUS
3. Click the "Set Values" button.
4. The firewall is enabled on the device by default. Click on "Security" > "Firewall" in the
navigation area and on the "Predefined IPv4 rules" tab in the content area. Enable the pre-
defined "Cloud Connector" IPv4 rule.
5. Click the "Set Values" button.
Result
The Cloud Connector is started and enabled.

PROFIBUS connection
2.1 Local service
Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 15
The predefined IPv4 rule "Cloud Connector" is enabled for the incoming packets to be
forwarded to the device.
2.1.3 Enabling the TIA Portal Cloud Connector on the PG/PC
Requirement
•The TIA Portal Cloud Connector V1.1 SP4
(https://support.industry.siemens.com/cs/ww/en/view/109764115) is installed.
You can find additional information on the TIA Portal Cloud Connector in the
documentation "Working with the TIA Portal Cloud Connector
(https://support.industry.siemens.com/cs/ww/en/view/109747305)" and "SIMATIC
Instructions on the TIA Portal Cloud Connector
(https://support.industry.siemens.com/cs/ww/en/view/109742490)".
Activating the TIA Portal Cloud Connector
1. Start the TIA Portal Cloud Connector.
2. In the "General" tab, select the "Remote device" option.
3. Switch to the "Protocol" tab and select the "TCP settings" option.
4. Configure TCP with the following settings:
Target device
SCALANCE
User device address
IP address of the SCALANCE M804PB
Port
9023
The port must be the same as the port assigned
to the remote device.
5. To store the settings, click the "Apply" button.
6. Switch to the "General" tab.

PROFIBUS connection
2.1 Local service
Cloud Connector
16 Getting Started, 07/2020, C79000-G8976-C507-03
7. Click on the link in the "Cloud Connector Communication" area.
When the connection to the TIA Portal Cloud Connector of the SCALANCE M804PB has
been successfully established, a check mark appears next to the link.
8. Click on the "Enable Communication" button in the "Cloud Connector Communication" area.
Result
When communication has been established successfully, the color of the status symbol
changes to yellow.

PROFIBUS connection
2.1 Local service
Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 17
2.1.4 Connecting to the TIA Portal Cloud Connector
Connecting via the TIA Portal
1. Start the TIA Portal and switch to the project view.
The color of the TIA Portal Cloud Connector status icon changes to green.
2. Open the "Online access" folder.
3. Right-click on the "SCALANCE M804PB [MPI]" interface.
4. Select the "Properties" command from the shortcut menu.

PROFIBUS connection
2.1 Local service
Cloud Connector
18 Getting Started, 07/2020, C79000-G8976-C507-03
5. For "Active configuration", select the "SCALANCE M804PB [Automatic protocol detection]"
entry and click "OK".
6. Double-click on "Update accessible devices" below the interface.
The devices are listed that can be reached via the MPI interface of the SCALANCE M804PB.
The diagnostics buffer can be read via "Online & Diagnostics".

PROFIBUS connection
2.1 Local service
Cloud Connector
Getting Started, 07/2020, C79000-G8976-C507-03 19
Connecting via STEP 7
1. Double-click the STEP 7 icon on your desktop.
2. Open the dialog "Set PG/PC Interface" via "Options > Set PG/PC Interface...".
3. In the "Interface Parameter Assignment Used" list, select the interface
"SCALANCE.M804PB.Auto.1". Click "OK".

PROFIBUS connection
2.2 Remote service
Cloud Connector
20 Getting Started, 07/2020, C79000-G8976-C507-03
4. Select "PLC > Display Accessible Nodes".
"Accessible Nodes" lists the devices that can be reached via the MPI interface of the
SCALANCE M804PB.
The diagnostics buffer can be read with "PLC > Module Information".
2.2 Remote service
2.2.1 Introduction
In this example configuration, the service technician accesses a server in the service center
via remote desktop. In addition to the programming software (TIA Portal or STEP 7), the TIA
Portal Cloud Connector is also installed on this server.
SINEMA RC is used to secure the TIA Portal Cloud Connector communication connection.
SINEMA RC provides secure management of tunnel connections (VPN) between the service
technician and the service technician as well as the SCALANCE M804PB and the service