Siemens SIMATIC NET SCALANCE SC-600 User manual

SCALANCE SC-600
SIMATIC NET
Industrial Ethernet security
SCALANCE SC
-600
Operating Instructions
10/2021
C79000
-G8976-C453-04
Introduction
1
Safety notices
2
Security
recommendations
3
Description of the device
4
Installation
5
Connecting
6
Upkeep and maintenance
7
Technical specifications
8
Dimension drawings
9
Approvals
10

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C453-04
Ⓟ
10/2021 Subject to change
Copyright © Siemens AG 2017 -
2021.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to
prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a
safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices
shown below are graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger
will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning
relating to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the
specific task in accordance with the relevant documentation, in particular its warning notices and safety
instructions. Qualified personnel are those who, based on their training and experience, are capable of
identifying risks and avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant
technical documentation. If products and components from other manufacturers are used, these must be
recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning,
operation and maintenance are required to ensure that the products operate safely and without any
problems. The permissible ambient conditions must be complied with. The information in the relevant
documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this
publication may be trademarks whose use by third parties for their own purposes could violate the rights of
the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in
subsequent editions.

SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 3
Table of contents
1 Introduction .................................................................................................................................................5
2 Safety notices........................................................................................................................................... 11
3 Security recommendations .................................................................................................................... 13
4 Description of the device........................................................................................................................ 23
4.1 Product overview.............................................................................................................................. 23
4.2 Accessories ....................................................................................................................................... 24
4.3 Spare parts ........................................................................................................................................ 27
4.4 Device views ..................................................................................................................................... 28
4.4.1 Device view of a SCALANCE SC6x2-2C ...................................................................................... 28
4.4.2 Device view of a SCALANCE SC6x6-2C ...................................................................................... 29
4.5 LED display........................................................................................................................................ 30
4.5.1 "RM" LED / "SB" LED ..................................................................................................................... 30
4.5.2 "F" LED............................................................................................................................................... 30
4.5.3 LEDs "DM1" and "DM2" ................................................................................................................. 31
4.5.4 LEDs "L1" and "L2".......................................................................................................................... 31
4.5.5 Port LEDs........................................................................................................................................... 32
4.6 SELECT/SET button........................................................................................................................ 34
4.7 C-PLUG/KEY-PLUG........................................................................................................................ 37
4.7.1 Function of the C-PLUG/KEY-PLUG........................................................................................... 37
4.7.2 Replacing the C-PLUG/KEY-PLUG.............................................................................................. 38
4.8 Combo ports...................................................................................................................................... 40
5 Installation................................................................................................................................................ 41
5.1 Safety notices for installation........................................................................................................ 41
5.2 Types of installation ........................................................................................................................ 44
5.2.1 Mounting on DIN rails ..................................................................................................................... 45
5.2.2 Installation on a standard S7-300 rail.......................................................................................... 46
5.2.3 Installation on a standard S7-1500 rail ....................................................................................... 47
5.2.4 Wall mounting ................................................................................................................................... 48
5.2.5 Changing the position of the securing bar.................................................................................. 49
6 Connecting................................................................................................................................................ 51
6.1 Safety when connecting up............................................................................................................ 51
6.2 Wiring rules ....................................................................................................................................... 53
6.3 Power supply..................................................................................................................................... 54
6.4 Signaling contact.............................................................................................................................. 56
6.5 Digital input....................................................................................................................................... 58
6.6 Serial interface ................................................................................................................................. 60

Table of contents
SCALANCE SC-600
4Operating Instructions, 10/2021, C79000-G8976-C453-04
6.7 Functional ground.............................................................................................................................62
7 Upkeep and maintenance....................................................................................................................... 63
7.1 Loading new firmware using WBM ...............................................................................................63
7.2 Restoring the factory settings........................................................................................................66
8 Technical specifications ......................................................................................................................... 67
8.1 Technical specifications of the SCALANCE SC-600 .................................................................67
8.2 Mechanical stability (in operation) ...............................................................................................70
8.3 Cable lengths.....................................................................................................................................70
9 Dimension drawings................................................................................................................................ 73
10 Approvals .................................................................................................................................................. 75
Index .......................................................................................................................................................... 81

SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 5
Introduction
1
CAUTION
To prevent injury, read the manual before use.
Purpose of the Operating Instructions
These operating instructions support you when installing and connecting up the
SCALANCE SC-600 product line.
The configuration and the integration of the devices in a network are not described in
these operating instructions.
Validity of the Operating Instructions
These operating instructions apply to the following devices:
•SCALANCE SC622-2C
•SCALANCE SC626-2C
•SCALANCE SC632-2C
•SCALANCE SC636-2C
•SCALANCE SC642-2C
•SCALANCE SC646-2C

Introduction
SCALANCE SC-600
6Operating Instructions, 10/2021, C79000-G8976-C453-04
Designations used
Classification
Description
Terms used
Product line
If information applies to all product groups within the
product line, the term SCALANCE SC-600 is used.
•SCALANCE SC-600
Product group
If information applies to all devices of a product
group, a suitable term is used.
•SCALANCE SC622-2C and SC626-2C
•SCALANCE SC622-2C, SC632-2C and SCALANCE
SC642-2C
•SCALANCE SC626-2C, SCALANCE SC636-2C and
SCALANCE SC646-2C
•SCALANCE SC632-2C and SCALANCE SC636-2C
•SCALANCE SC642-2C and SCALANCE SC646-2C
•SC62x-2C
•SC6x2-2C
•SC6x6-2C
•SC63x-2C
•SC64x-2C
Device
If information relates to a specific device, the device
name is used. •SCALANCE SC622-2C
•SCALANCE SC626-2C
•SCALANCE SC632-2C
•SCALANCE SC636-2C
•SCALANCE SC642-2C
•SCALANCE SC646-2C
Documentation on configuration
You will find detailed information on configuring the devices in the following
configuration manuals:
•SCALANCE SC-600 Web Based Management (WBM)
•SCALANCE SC-600 Command Line Interface (CLI)
You will find the configuration manuals here:
•On the data medium that ships with some products:
–Product CD / product DVD
–SIMATIC NET Manual Collection
•On the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15327/man)
Further documentation
In the system manuals "Industrial Ethernet / PROFINET Industrial Ethernet" and
"Industrial Ethernet / PROFINET passive network components", you will find information
on other SIMATIC NET products that you can operate along with the devices of this
product line in an Industrial Ethernet network.
There, you will find among other things optical performance data of the communications
partner that you require for the installation.

Introduction
SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 7
You will find the system manuals here:
•On the data medium that ships with some products:
–Product CD / product DVD
–SIMATIC NET Manual Collection
•On the Internet pages of Siemens Industry Online Support:
–Industrial Ethernet / PROFINET Industrial Ethernet System Manual
Link: (https://support.industry.siemens.com/cs/ww/en/view/27069465)
–Industrial Ethernet / PROFINET - Passive Network Components System Manual
Link: (https://support.industry.siemens.com/cs/ww/en/view/84922825)
SIMATIC NET manuals
You will find the SIMATIC NET manuals here:
•On the data medium that ships with some products:
–Product CD / product DVD
–SIMATIC NET Manual Collection
•On the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15247)
Catalogs
You will find the article numbers for the Siemens products of relevance here in the
following catalogs:
•SIMATIC NET Industrial Communication / Industrial Identification, catalog IK PI
•SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog
ST 70
•Industry Mall - catalog and ordering system for automation and drive technology,
Online catalog
You can request the catalogs and additional information from your Siemens
representative.
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.

Introduction
SCALANCE SC-600
8Operating Instructions, 10/2021, C79000-G8976-C453-04
You will find the license conditions as a loadable file on the WBM pages of the device.
You will find the description of opening and loading license conditions in section File list
of the configuration manuals.
You can find the file with the license conditions for open source software under the
following name:
•OSS_Readme.zip
Security information
Siemens provides products and solutions with industrial security functions that support
the secure operation of plants, systems, machines, and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement –and continuously maintain –a holistic, state-of-the-art
industrial security concept. Siemens’products and solutions form one element of such a
concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. These systems, machines and components should only be
connected to the enterprise network or the Internet if and only to the extent necessary
and with appropriate security measures (firewalls and/or network segmentation) in
place.
You can find more information on protective measures in the area of industrial security
by visiting:
https://www.siemens.com/industrialsecurity.
Siemens’products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends performing product updates as soon as they are
available and using only the latest product versions. Use of product versions that are no
longer supported, and failure to apply latest updates may increase customer’s exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security
RSS Feed under
https://www.siemens.com/industrialsecurity.
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by
Siemens can be downloaded to the device.

Introduction
SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 9
Unpacking and checking
WARNING
Do not use any parts that show evidence of damage
If you use damaged parts, there is no guarantee that the device will function according
to the specification.
If you use damaged parts, this can lead to the following problems:
•Injury to persons
•Loss of the approvals
•Violation of the EMC regulations
•Damage to the device and other components
Use only undamaged parts.
1. Make sure that the package is complete.
2. Check all the parts for transport damage.
Device defective
If a fault develops, please send the device to your Siemens representative for repair.
Repairs on-site are not possible.
Decommissioning
Shut down the device properly to prevent unauthorized persons from accessing
confidential data in the device memory.
To do this, restore the factory settings on the device.
Also restore the factory settings on the storage medium.
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the
WEEE directive 2012/19/EU "Waste Electrical and Electronic Equipment".
Do not dispose of the product at public disposal sites. For environmentally friendly
recycling and the disposal of your old device contact a certified disposal company for
electronic scrap or your Siemens contact.
Keep to the local regulations.
You will find information on returning the product on the Internet pages of Siemens
Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)

Introduction
SCALANCE SC-600
10 Operating Instructions, 10/2021, C79000-G8976-C453-04
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in
the SIMATIC NET glossary.
You will find the SIMATIC NET glossary on the Internet at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Electrostatic discharge
NOTICE
Electrostatic sensitive devices (ESD)
Electronic modules contain electrostatic sensitive components
These components can easily be destroyed if handled incorrectly.
Note the following instructions to avoid damage.
•Touch electronic modules only when you absolutely need to work on them.
•If electronic modules need to be touched, the body of the person involved must first
be electrostatically discharged and grounded.
•Do not bring electronic modules in contact with electrically isolating materials such
as plastic film, isolating table top pads or clothing made of synthetic fibers.
•Place the modules only on conductive surfaces.
•Pack, store and transport electronic modules and components only in conductive
packaging such as metalized plastic or metal containers, conductive foam or
household aluminum foil.

SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 11
Safety notices
2
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
NOTICE
Cleaning the housing
If the device is not in a hazardous area, only clean the outer parts of the housing with a
dry cloth.
If the device is in a hazardous area, use a slightly damp cloth for cleaning.
Do not use solvents.
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
Do not open the device when the supply voltage is turned on.
WARNING
EXPLOSION HAZARD
Do not press the SET button if there is a potentially explosive atmosphere.
Safety instructions for use in hazardous locations according to UL/FM HazLoc
If you use the device under UL or FM HazLoc conditions, you must also adhere to the
following safety instructions in addition to the general safety instructions for protection
against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-
hazardous locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous
locations only.

Safety notices
SCALANCE SC-600
12 Operating Instructions, 10/2021, C79000-G8976-C453-04
WARNING
Do not remove or replace while circuit is live when a flammable or combustible
atmosphere is present.
Batteries: Replacement, recycling and disposal
Handling batteries
WARNING
Risk of explosion and danger of release of harmful substances!
Do not throw batteries into a fire, do not solder the body of the cell, do not open
batteries, do not short-circuit batteries, do not reverse the polarity of batteries, do not
heat batteries above 100 ºC.
Protect batteries from direct sunlight, dampness and condensation.
Dispose of batteries according to the regulations.
Replacing batteries
Note
Replacement not possible
It is not possible to replace the internal battery.
Recycling / disposal
Batteries and rechargeable batteries can be recycled. Their components can be used as
raw materials for new batteries/rechargeable batteries or other products. Effective
recycling procedures are only possible if batteries of the used batteries of the same type
are collected together.
Note
Regulations for disposal of batteries
Keep to the local regulations for the recycling and disposal of batteries.

SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 13
Security recommendations
3
To prevent unauthorized access to the device and/or network, observe the following
security recommendations.
General
•You should make regular checks to make sure that the device meets the following
recommendations and other internal security guidelines if applicable.
•Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
Link: (https://www.industry.siemens.com/topics/global/en/industrial-
security/Seiten/default.aspx)
•Check regularly for security updates of the products and use them.
•Check the user documentation of other Siemens products that are used together with
the device for additional security recommendations.
•Check regularly for news on the Siemens Internet pages.
–You can find information on Industrial Security here:
Link: (http://www.siemens.com/industrialsecurity)
–You can find information on security in industrial communication here:
Link: (http://w3.siemens.com/mcms/industrial-communication/de/ie/industrial-
ethernet-security/Seiten/industrial-security.aspx)
•Keep the software up to date. Always use the latest software version of the device.
Information regarding product news and new software versions is available at the
following address:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15327/pm)
Authentication
Note
Accessibility risk
- Risk of data loss
Do not lose the passwords for the device. Access to the device can only be restored by
resetting the device to factory settings which completely removes all configuration data.
•Replace the default passwords for all user accounts, access modes and applications
(if applicable) before you use the device.
•Define rules for the assignment of passwords.

Security recommendations
SCALANCE SC-600
14 Operating Instructions, 10/2021, C79000-G8976-C453-04
•Use passwords with a high password strength. Avoid weak passwords, (e.g.
password1, 123456789, abcdefgh) or recurring characters (e.g. abcabc).
This recommendation also applies to symmetrical passwords/keys configured on the
device.
•Make sure that passwords are protected and only disclosed to authorized personnel.
•Do not use the same passwords for multiple user names and systems.
•Store the passwords in a safe location (not online) to have them available if they are
lost.
•Regularly change your passwords to increase security.
•A password must be changed if it is known or suspected to be known by unauthorized
persons.
•When user authentication is performed via RADIUS, make sure that all
communication takes place within the security environment or is protected by a
secure channel.
•Watch out for link layer protocols that do not offer their own authentication between
endpoints, such as ARP or IPv4. An attacker could use vulnerabilities in these
protocols to attack hosts, switches and routers connected to your layer 2 network, for
example, through manipulation (poisoning) of the ARP caches of systems in the
subnet and subsequent interception of the data traffic. Appropriate security measures
must be taken for non-secure layer 2 protocols to prevent unauthorized access to the
network. Physical access to the local network can be secured or secure, higher layer
protocols can be used, among other things.
Certificates and keys
This section deals with the security keys and certificates you require to set up TLS, VPN
(IPsec, OpenVPN) and SINEMA RC.
•The device contains a pre-installed X.509 certificate with key. Replace this certificate
with a self-made certificate with key. Use a certificate signed by a reliable external or
internal certification authority. You can install the certificate via the WBM ("System >
Load and Save").
•Use the certification authority including key revocation and management to sign the
certificates.
•Make sure that user-defined private keys are protected and inaccessible to
unauthorized persons.
•If there is a suspected security violation, change all certificates and keys immediately.
•SSH and SSL keys are available for admin users. Make sure that you take appropriate
security measures when shipping the device outside of the trusted environment:
–Replace the SSH and SSL keys with disposable keys prior to shipping.
–Decommission the existing SSH and SSL keys. Create and program new keys
when the device is returned.
•Use password-protected certificates in the format "PKCS #12".
•Use certificates with a key length of 4096 bits.

Security recommendations
SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 15
•Verify certificates based on the fingerprint on the server and client side to prevent
"man in the middle" attacks. Use a second, secure transmission path for this.
•Before sending the device to Siemens for repair, replace the current certificates and
keys with temporary disposable certificates and keys, which can be destroyed when
the device is returned.
Physical/remote access
•Restrict physical access to the device to qualified personnel.
•The storage medium (C-PLUG, KEY-PLUG) contains sensitive data such as
certificates, keys, etc. that can be read out and modified.
•Using the button, you can reset the device to the factory defaults.
•If the device is publicly accessible, disable the functions of the button using the
software.
•Lock unused physical ports on the device. Unused ports can be used to gain
forbidden access to the plant.
•We strongly recommend that you leave Brute Force Prevention (BFP) enabled to
protect the device from unauthorized access. For more information, see the
configuration manuals, section "Brute Force Prevention".
•For data transmission via a non-secure network, use an encrypted VPN tunnel (IPsec,
OpenVPN) to encrypt and authenticate communication.
•When you establish a secure connection to a server (for example for an upgrade),
make sure that strong encryption methods and protocols are configured for the
server.
•Terminate management connections correctly (WBM, SSH etc.).
•Using remote logging, ensure that the system protocols are forwarded to a central
logging server. Make sure that the server is within the protected network and check
the protocols regularly for potential security violations or vulnerabilities.
•With communication via non-secure networks, use the authentication options offered
by the protocol.
Hardware/Software
•The option of VLAN structuring provides protection against DoS attacks and
unauthorized access. Check whether this is practical or useful in your environment.
•Restrict access to the device using firewall rules.
•Use a central logging server to log changes and access operations. Operate your
logging server within the protected network area and check the logging information
regularly.
•Selected services are enabled by default in the firmware. It is recommended to enable
only the services that are absolutely necessary for your installation.
For more information on available services, see "List of available services (Page 13)".

Security recommendations
SCALANCE SC-600
16 Operating Instructions, 10/2021, C79000-G8976-C453-04
•Ensure that the latest firmware version is installed, including all security-related
patches.
You can find the latest information on security patches for Siemens products at the
Industrial Security (https://www.siemens.com/industrialsecurity) or ProductCERT
Security Advisories website.
For updates on Siemens product security advisories, subscribe to the RSS feed on the
ProductCERT Security Advisories website or follow @ProductCert on Twitter.
•For optimum security, use SNMPv3 authentication and encryption mechanisms
whenever possible, and use strong passwords.
•Configuration files can be downloaded from the device. Ensure that configuration files
are adequately protected. The options for achieving this include digitally signing and
encrypting the files, storing them in a secure location, or transmitting configuration
files only through secure communication channels.
Configuration files can be password protected during download. You enter passwords
on the WBM page "System > Load & Save > Passwords".
•When using SNMP (Simple Network Management Protocol):
–Configure SNMP to generate a notification when authentication errors occur.
For more information, see WBM "System > SNMP > Notifications".
–Ensure that the default values of the community strings are changed.
–Use SNMPv3 whenever possible. SNMPv1 and SNMPv2c are considered non-
secure and should only be used when absolutely necessary.
–If possible, prevent write access above all.
Interfaces security
•Disable unused interfaces.
•Use IEEE 802.1X for interface authentication.
•Use the function "Locked Ports" to block interfaces for unknown nodes.
•Use the configuration options of the interfaces, e.g. the "Edge Type".
•Configure the receive ports so that they discard all untagged frames ("Tagged Frames
Only").
Secure/non-secure protocols
•Use secure protocols if access to the device is not prevented by physical protection
measures.
•Restrict the use of non-secure protocols. While some protocols are secure (e.g.
HTTPS, SSH, 802.1X, etc.), others were not designed for the purpose of securing
applications (e.g. SNMPv1/v2c, RSTP, etc.).
Therefore, take appropriate security measures against non-secure protocols to
prevent unauthorized access to the device/network. Use non-secure protocols on the
device with caution.

Security recommendations
SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 17
•If non-secure protocols and services are required, ensure that the device is operated
in a protected network area.
•Check whether use of the following protocols and services is necessary:
–Non-authenticated and unencrypted ports
–MRP, HRP
–IGMP Snooping
–Syslog
–RADIUS
–Broadcast pings
–ICMP (redirect)
–LLDP
–DHCP Options 66/67
–SNTP
–NTP
–TFTP
–GMRP and GVRP
–VRRPv3
–DNS
–SNMPv1/V2c
•If a secure alternative is available for a protocol, use it.
The following protocols provide secure alternatives:
–SNMPv1/v2 →SNMPv3
Check whether use of SNMPv1/v2c is necessary. SNMPv1/v2c are classified as
non-secure. Use the option of preventing write access. The device provides you
with suitable setting options.
If SNMP is enabled, change the community names. If no unrestricted access is
necessary, restrict access with SNMP.
Use the authentication and encryption mechanisms of SNMPv3.
–HTTP →HTTPS
–Telnet →SSH
–NTP →Secure NTP
–TFTP →SFTP
•Restrict the services and protocols available to the outside to a minimum.
•If you use RADIUS for management access to the device, enable secure protocols and
services.
•For the DCP function, leave the "Read-Only" mode after commissioning.

Security recommendations
SCALANCE SC-600
18 Operating Instructions, 10/2021, C79000-G8976-C453-04
Available protocols
The following list provides you with an overview of the open protocol ports.
The table includes the following columns:
•Protocol
•Port
•Factory setting
–Open
The factory setting of the port is "Open".
–Closed
The factory setting of the port is "Closed".
•Port status
–Open
The port is always open and cannot be closed.
–Open (when configured)
The port is open if it has been configured.
•Authentication
Specifies whether or not the protocol is authenticated.
•Encryption
Specifies whether or not the transfer is encrypted.
List of available services
The following is a list of all available protocols and services as well as their ports through
which the device can be accessed.
The table includes the following columns:
•Service/Protocol
The services/protocols that the device supports.
•Protocol / Port number
Port number assigned to the protocol.
•Default port status
The port status on delivery (factory setting) distinguishes between local and external
access.
–Local access: The port is accessed via a local connection (vlan1).
–External access: The port is accessed via an external connection (vlan2).
•Configurable port/service
Indicates whether the port number or the service can be configured via WBM / CLI.

Security recommendations
SCALANCE SC-600
Operating Instructions, 10/2021, C79000-G8976-C453-04 19
•Authentication
Specifies whether an authentication of the communication partner takes place or
whether an authentication can be configured.
•Encryption
Specifies whether the transfer is encrypted or whether the encryption can be
configured.
Service/Protocol Protocol/
Port
number
Default status
Configurable
Authenticati
on
Encryption
VLAN1 *) VLAN2 *) Port Service
DHCPv4 Client
UDP/68
Closed
Open
--
✓
--
--
DHCPv4-Server
UDP/67
Closed
Closed
--
✓
--
--
DNS-Client
TCP/53
UDP/53
Outgoing only
Outgoing only
--
✓
--
--
DNS-Server
TCP/53
UDP/53
Open
Closed
--
✓
--
--
DDNS
TCP/80
UDP/80
TCP/443
UDP/443
Outgoing only
Outgoing only
--
✓
✓
--
Firewall State
Sync
UDP/3780
Closed
Closed
✓
✓
--
--
HTTP
TCP/80
Open
Closed
✓
✓
✓
--
HTTP Proxy
TCP/3128
TCP/8080
Outgoing only
Outgoing only
✓
✓
Optional
--
HTTPS
TCP/443
Open
Closed
✓
✓
✓
✓
IPsec/IKE
UDP/500
UDP/4500
Closed
Closed
--
✓
✓
✓
NTP-Client
UDP/123
Outgoing only
Outgoing only
✓
✓
--
--
NTP-Server
UDP/123
Closed
Closed
✓
✓
--
--
NTP-Server
(secure)
UDP/123
Closed
Closed
✓
✓
✓
--
OpenVPN-Client
UDP/1194
TCP/1194
Outgoing only
Outgoing only
✓
✓
✓
✓
OpenVPN-Server
UDP/1194
TCP/1194
Closed
Closed
✓
✓
✓
✓
Ping
ICMP
Open
Closed
--
✓
--
--
RADIUS
UDP/1812
UDP/1813
Outgoing only
Outgoing only
✓
✓
✓
--
SFTP
TCP/22
Outgoing only
Outgoing only
✓
✓
✓
✓
Siemens Remote
Service
(cRSP/SRS)
TCP/443
Outgoing only
Outgoing only
--
✓
Optional
✓

Security recommendations
SCALANCE SC-600
20 Operating Instructions, 10/2021, C79000-G8976-C453-04
Service/Protocol
Protocol/
Default status
Configurable
Authenticati
Encryption
SINEMA RC
HTTPS/443
and
TCP/UDP
depending
on the
server
configuratio
n
Outgoing only
Outgoing only
✓
✓
✓
✓
SMTP Client
TCP/25
Outgoing only
Outgoing only
✓
✓
Optional
--
SMTP (secure)
TCP/465
TCP/587
Outgoing only
Outgoing only
✓
✓
Optional
✓
SNMPv1/v2c
UDP/161
Open
Closed
✓
✓
--
--
SNMPv3
UDP/161
Open
Closed
✓
✓
Optional
Optional
SNMP Traps
UDP/162
Outgoing only
Outgoing only
✓
✓
--
--
SNTP Client
UDP/123
Closed
Closed
✓
✓
--
--
SSH
SFTP
TCP/22
Open
Closed
✓
✓
✓
✓
Syslog Client
UDP/514
Outgoing only
Outgoing only
✓
✓
--
--
Syslog Client TLS
TCP/6514
Outgoing only
Outgoing only
✓
✓
--
✓
TFTP
UDP/69
Outgoing only
Outgoing only
✓
✓
--
--
VRRP
IP/112
Closed
Closed
--
✓
--
--
*)
Depending on the device type, VLAN1 and VLAN2 are on different physical ports:
SC6x2
-2C: VLAN1 = port 1, VLAN2 = port 2
SC6x6-2C: VLAN1 = port 1-4, VLAN2 = port 5-6
Layer 2 services
Default status
Configurable
DCP
Open (when configured)
✓
LLDP
Open (when configured)
✓
SIMATIC NET TIME
Open (when configured)
✓
VLAN
Open (when configured)
✓