Siemens SIMATIC NET SCALANCE M875 User manual

 
SCALANCE M875
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
_
_________________
_
SIMATIC NET
Industrial Remote Communication
Remote Networks
SCALANCE M875
Operating Instructions
12/2012
C79000-G8976-C258-02
Preface
Description of the device
1
Configuration examples
2
Installation, connecting up,
commissioning
3
Configuration
4
Maintenance and diagnostics
5
Technical specifications
6
Certification
7
Additional Internal Routes
A
Training, Service & Support
B

Siemens AG
Industry Sector
Postfach 48 48
90026 NÜRNBERG
GERMANY
Order number: C79000-G8976-C258
Ⓟ 12/2012 Technical data subject to change
Copyright © Siemens AG 2011 - 2012.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 3
Preface
Purpose of this documentation
This manual will help you during the configuration, installation, commissioning and operation
of the 3G/UMTS router SCALANCE M875.
Device name
In the remainder of the text, the SCALANCE M875 is also simply known as the "M875".
Validity of the documentation
This manual is valid for the following product:
SCALANCE M875
Firmware version 2.112
Hardware product version 1.0
Order number:
6GK5 875-0AA10-1AA2
6GK5 875-0AA10-1CA2 (variant for Japan)
New in this release
● Optimization of several functions with the firmware version named above
● Editorial revision
Replaced documentation
This manual replaces the manual release 01/2012.
Current manual release on the Internet
You will also find the current version of this manual on the Internet pages of Siemens
Automation Customer Support under the following entry ID:
61505654 (http://support.automation.siemens.com/WW/view/en/61505654)

Preface
SCALANCE M875
4 Operating Instructions, 12/2012, C79000-G8976-C258-02
Purpose of the device
SCALANCE M875 is a 3G/UMTS router with HSPA and VPN functionality for industrial
applications.
WARNING
Impairment of medical devices and data media
The device contains a wireless transmitter that could, under certain circumstances, impair
the functionality of electronic medical devices such as hearing aids or pacemakers. Do not
use the device in places where the operation of wireless devices is prohibited. You can
obtain advice from your physician or the manufacturer of such devices.
To prevent data media from being demagnetized, do not keep disks, credit cards or other
magnetic data media near the device.
Connection costs
Note
Note that both when establishing a connection and when attempting to establish a
connection and when a connection is obtained, frames are exchanged that will be charged
by the provider.
Firmware with open source GPL/LGPL
The firmware of the M875 includes open source software under terms of GPL/LGPL.
According to section 3b of GPL and section 6b of LGPL we offer you the source code.
Please write to:
[email protected]
[email protected]
Please enter 'Open Source M875' as the subject of your e-mail, so that we can filter out your
e-mail easier.
Firmware with OpenBSD
The firmware of M875 contains sections from the OpenBSD software. The use of OpenBSD
software obligates the user to publish the following copyright notice:
* Copyright (c) 1982, 1986, 1990, 1991, 1993
* The Regents of the University of California. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:

Preface
SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 5
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above
* copyright notice, this list of conditions and the following
* disclaimer in the * documentation and/or other materials
* provided with the distribution.
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgement:
* This product includes software developed by the University of
* California, Berkeley and its contributors.
* 4. Neither the name of the University nor the names of its
* contributors may be used to endorse or promote products derived
* from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS "AS IS"
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
* PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
* REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
* WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
* NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
* USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY
* OF SUCH DAMAGE.
Security messages
Note
Siemens offers IT security mechanisms for its automation and drive product portfolio in order
to support the safe operation of the plant/machine. Our products are also continuously
developed further with regard to IT security. We therefore recommend that you regularly
check for updates of our products and that you only use the latest versions. You will find
information in:
(http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo2&aktprim=99&lang=
en)
Here, you can register for a product-specific newsletter.
For the safe operation of a plant/machine, however, it is also necessary to integrate the
automation components into an overall IT security concept for the entire plant/machine,
which corresponds to the state-of-the-art IT technology. You will find information on this in:
(http://www.siemens.com/industrialsecurity)
Products from other manufacturers that are being used must also be taken into account.

Preface
SCALANCE M875
6 Operating Instructions, 12/2012, C79000-G8976-C258-02
Where to find Siemens documentation
● You will find the order numbers for the Siemens products of relevance here in the
following catalogs:
– SIMATIC NET Industrial Communication / Industrial Identification, catalog IK PI
– SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog
ST 70
You can request the catalogs and additional information from your Siemens
representative.
● You will find SIMATIC NET manuals on the Internet pages of Siemens Automation
Customer Support:
Link to Customer Support (http://support.automation.siemens.com/WW/view/en)
Enter the entry ID of the relevant manual as the search item. The ID is listed below some
of the reference entries in brackets.
As an alternative, you will find the SIMATIC NET documentation on the pages of Product
Support:
10805878 (http://support.automation.siemens.com/WW/view/en/10805878)
Go to the required product group and make the following settings:
→ Entry list → Entry type "Manuals / Operating Instructions"
You will find the documentation for the SIMATIC NET products relevant here on the data
medium that ships with the product:
– Product CD / product DVD or
– SIMATIC NET Manual Collection

SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 7
Table of contents
Preface ...................................................................................................................................................... 3
1 Description of the device ......................................................................................................................... 11
1.1 Connection via mobile wireless and Internet ...............................................................................11
1.2 Functions......................................................................................................................................12
1.3 Appearance of the device ............................................................................................................14
1.4 Interfaces .....................................................................................................................................15
1.5 LEDs to display operation ............................................................................................................15
1.6 Service button SET ......................................................................................................................16
1.7 Requirements for operation .........................................................................................................17
2 Configuration examples ........................................................................................................................... 19
2.1 Internet access via the mobile wireless network..........................................................................19
2.2 TELECONTROL via the mobile wireless network .......................................................................20
2.3 Direct communication between stations using mobile wireless...................................................21
2.4 Remote maintenance solutions....................................................................................................22
2.4.1 Mobile access to plants and plant sections .................................................................................23
2.4.2 Plant access via a remote maintenance center...........................................................................24
3 Installation, connecting up, commissioning.............................................................................................. 25
3.1 Safety notices...............................................................................................................................25
3.2 Connecting...................................................................................................................................26
3.3 Steps in commissioning ...............................................................................................................30
3.4 Inserting the SIM card..................................................................................................................31
3.5 Installation....................................................................................................................................32
4 Configuration ........................................................................................................................................... 33
4.1 Settings on the admin PC ............................................................................................................33
4.1.1 TCP/IP configuration in Windows XP ..........................................................................................34
4.1.2 Permitted characters....................................................................................................................35
4.1.3 Establishing the configuration connection ...................................................................................36
4.1.4 Basics of configuration.................................................................................................................38
4.1.5 Language selection......................................................................................................................39
4.2 Start page of the Web user interface - Overview.........................................................................40
4.3 System .........................................................................................................................................44
4.3.1 System time .................................................................................................................................44
4.3.2 Log ...............................................................................................................................................47
4.3.3 Device identification .....................................................................................................................48

Table of contents
SCALANCE M875
8 Operating Instructions, 12/2012, C79000-G8976-C258-02
4.4 Local Network ............................................................................................................................. 49
4.4.1 Local interface............................................................................................................................. 49
4.4.2 Local IP addresses...................................................................................................................... 49
4.4.3 DHCP server on local network.................................................................................................... 51
4.4.4 Local hostname........................................................................................................................... 54
4.4.5 DNS server on local network....................................................................................................... 55
4.4.6 Additional Internal Routes........................................................................................................... 57
4.5 External Network......................................................................................................................... 58
4.5.1 External interface ........................................................................................................................ 58
4.5.2 UMTS/EDGE - access parameters ............................................................................................. 58
4.5.3 Installation mode - aligning antennas ......................................................................................... 64
4.5.4 Traffic volume supervision .......................................................................................................... 65
4.5.5 Checking the connection - Connection monitoring ..................................................................... 68
4.5.6 Hostname by DynDNS................................................................................................................ 71
4.5.7 SRS - Siemens Remote Service................................................................................................. 73
4.5.8 NAT - Network Address Translation ........................................................................................... 75
4.6 Security ....................................................................................................................................... 76
4.6.1 Firewall rules ............................................................................................................................... 76
4.6.2 Port Forwarding........................................................................................................................... 81
4.6.3 Advanced security functions ....................................................................................................... 83
4.6.4 Firewall Log................................................................................................................................. 84
4.7 IPsec VPN - Virtual Private Network........................................................................................... 85
4.7.1 Explanation of VPN connections................................................................................................. 85
4.7.2 Connections - Roadwarrior mode ............................................................................................... 89
4.7.2.1 Creating connections .................................................................................................................. 89
4.7.2.2 Editing connections ..................................................................................................................... 90
4.7.2.3 IKE settings ................................................................................................................................. 91
4.7.3 Connections - Standard mode .................................................................................................... 95
4.7.3.1 Creating connections .................................................................................................................. 95
4.7.3.2 Editing connections ..................................................................................................................... 96
4.7.3.3 IKE settings ................................................................................................................................. 99
4.7.3.4 Firewall rules for VPN tunnel..................................................................................................... 103
4.7.4 Managing certificates and keys................................................................................................. 105
4.7.5 Supervision of the VPN connections......................................................................................... 106
4.7.6 Advanced settings..................................................................................................................... 109
4.7.7 Status ........................................................................................................................................ 111
4.8 Remote access ......................................................................................................................... 112
4.8.1 Changing the password ............................................................................................................ 112
4.8.2 HTTPS....................................................................................................................................... 113
4.8.3 CSD........................................................................................................................................... 115
4.9 SMS........................................................................................................................................... 116
4.9.1 Service Center (SMSC)............................................................................................................. 116
4.9.2 Alarm SMS ................................................................................................................................ 116
4.9.3 Sending SMS over IP messages from the local area network.................................................. 118
4.10 SNMP........................................................................................................................................ 121
4.10.1 Settings ..................................................................................................................................... 121
4.10.2 SNMP traps............................................................................................................................... 124

Table of contents
SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 9
5 Maintenance and diagnostics ................................................................................................................ 129
5.1 Calling the Maintenance Web pages .........................................................................................129
5.2 Updating the firmware................................................................................................................129
5.3 Configuration profiles .................................................................................................................131
5.4 Reboot........................................................................................................................................134
5.5 Remote logging..........................................................................................................................135
5.6 Firmware information .................................................................................................................137
5.7 Hardware Info.............................................................................................................................138
5.8 Snapshot....................................................................................................................................138
5.9 Factory settings..........................................................................................................................139
6 Technical specifications......................................................................................................................... 141
7 Certification............................................................................................................................................ 145
A Additional Internal Routes...................................................................................................................... 149
B Training, Service & Support................................................................................................................... 151
Glossary ................................................................................................................................................ 153
Index...................................................................................................................................................... 163

Table of contents
SCALANCE M875
10 Operating Instructions, 12/2012, C79000-G8976-C258-02

SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 11
Description of the device 1
1.1 Connection via mobile wireless and Internet
$31
5HPRWHQHWZRUN/RFDOQHWZRUN
0DVWHUVWDWLRQ
5RXWHU
,3PRELOHZLUHOHVVFRQQHFWLRQ
YLD+63$8076RU(*356
,QWHUQHW
6VWDWLRQ
HJ
0RELOHZLUHOHVV
QHWZRUN
,QGXVWULDO(WKHUQHW
6&$/$1&(6
0
Figure 1-1 Example of connecting a station to the master station via Internet and mobile wireless
Wireless connection via the mobile wireless network
With the M875, you can establish wireless access to the Internet or to a private network. This
is possible at any location at which a mobile wireless network is available that provides
packet-oriented data services.
With UMTS, these are the data services HSPA Data Service or UMTS Data Service.
With GSM, these are the data services EGPRS or GPRS.
For the wireless connection, you require a SIM card of a mobile wireless provider with the
required data services activated.
The M875 can then connect locally attached applications or entire networks to the Internet.
Direct connections via an intranet to external partners connected to it are also possible with
the M875.
Private and public VPN
Via the public mobile wireless network, the M875 can establish a Virtual Private Network
(VPN) between one or more local networks and one or more remote networks. These
connections are protected from access by third parties by Internet Protocol Security (IPsec).
Here, communication is possible both via a public as well as a private VPN tunnel.

Description of the device
1.2 Functions
SCALANCE M875
12 Operating Instructions, 12/2012, C79000-G8976-C258-02
You will find detailed examples of the potential uses of the M875 in the following section
Configuration examples (Page 19).
This means that the device performs various functions:
● Router for connecting networks via mobile wireless
● Wireless modem for flexible data communication using UMTS, HSPA, EGPRS or GPRS
● VPN router for secure data transfer in public networks with IPsec, 3DES data encryption
and AES encryption.
● Firewall for protection against unauthorized access. The dynamic packet filter examines
frames based on their source and destination addresses (stateful inspection firewall) and
blocks undesirable data traffic (anti-spoofing).
1.2 Functions
Configuration
The device can be configured using a Web user interface that can be displayed simply using
a Web browser.
You can access the Web user interface in the following ways:
● Via the local interface X2
● Via the mobile wireless connections HSPA, UMTS, EGPRS and GPRS
This requires access via DynDNS and an accessible public IP address.
&RQQHFWLRQYLD*60&6'
3&ZLWK:HE
EURZVHU
$GPLQ3& 3&ZLWK:HE
EURZVHU
&RQQHFWLRQYLD+63$8076
(*356
,QGXVWULDO(WKHUQHW
0
Figure 1-2 Configuration connections

Description of the device
1.2 Functions
SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 13
VPN functions
To establish a VPN, the following functions are available:
● Private and public VPN
● IPsec as VPN tunnel protocol
● IPsec-3DES encryption with 168 bits
● IPsec-AES encryption with 128, 192 and 256 bits
● Packet authentication MD5 and SHA-1
● Internet Key Exchange (IKE) with main mode and aggressive mode
● Authentication by pre-shared key (PSK), X.509v3 certificate and CA
● Dead peer detection (DPD)
The M875 also supports the SOFTNET Security Client (SSC) as of version 3.0 in Windows
XP and Windows 7.
Firewall functions
The M875 provides the following firewall functions to protect the local network and itself from
external attacks:
● Stateful inspection firewall
● Anti-spoofing
● Port forwarding
Further functions
The M875 also supports the following extra functions:
● DNS caching
● DHCP server
● NAT, NAT-T, 1:1-NAT
● NTP
● Remote logging
● In port for triggering alarm SMS messages
● Out port for signaling existing VPN connections
● Web user interface for configuration
● Sending freely configured alarm SMS messages
● Sending SMS messages from the local area network
● DynDNS client
● Remote access with HTTPS
● SNMP and SNMP traps
● Traffic volume supervision

Description of the device
1.3 Appearance of the device
SCALANCE M875
14 Operating Instructions, 12/2012, C79000-G8976-C258-02
● Installation mode for aligning the antennas
● Information for device identification
1.3 Appearance of the device









① LEDs DC5V, VPN, IN, OUT
② 2-port switch with the ports "X2P1" and "X2P2" for connection to the local area
network, RJ-45 jacks each with 2 LEDs
③ Terminals for in port and out port (on the underside of the device)
④ X1, USB connector (currently without function)
⑤ Antenna socket "A2", type SMA (only for the extra antenna)
⑥ LEDs S, Q, C
⑦ Antenna socket "A1", type SMA (for the first connected antenna)
⑧ Service button SET
⑨ Terminals for connecting the supply voltage (top of device)

Description of the device
1.4 Interfaces
SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 15
1.4 Interfaces
Connection to a the local area network
Fall the LAN connection to the local area network, the M875 has a switch with the two ports
"X2P1" and "X2P2". The two ports can be configured with different IP addresses.
Connect your local area network via port X2P1 or X2P2.
Note
No use of the M875 as a router between internal subnets
Do not use the M875 as a router between internal subnets.
Connection to the remote network
For the wireless connection to the remote network, the M875 has two SMA sockets. If you
only connect a single antenna, use the upper SMA socket "A1" of the M875.
1.5 LEDs to display operation
The LEDs on the M875 provide information about the operating status of the device.
Meaning of the LEDs on the left-hand side of the device
LED Status Meaning
Flashing slowly PIN transfer
Flashing quickly PIN error/ SIM error
S
(Status)
On PIN transfer successful
Off Not logged into GSM network
Flashing briefly Poor signal strength (CSQ < 6)
Flashing slowly Medium signal strength (CSQ= 6 to 10)
On, with brief interruptions Good signal strength (CSQ 11 to 18)
Q
(Quality)
On Very good signal strength (CSQ > 18)
Off No connection
Flashing slowly EGPRS/GPRS connection active
C (Connect)
On HSPA/UMTS connection active
Flash on and off in sequence
(fast)
Device startup
Flash on and off in sequence
(slow)
Transfer of new firmware
S, Q, C
simultaneousl
y
Flashing fast (in sync) Error

Description of the device
1.6 Service button SET
SCALANCE M875
16 Operating Instructions, 12/2012, C79000-G8976-C258-02
Meaning of the LEDs on the right-hand side of the device
LED Status Meaning
On Device turned on, power supply present. DCV5
Off Device turned off, no power supply.
On At least one VPN connection established VPN
Off No VPN connection established
On In port active IN
Off In port not active
On Out port active OUT
Off Out port not active
Meaning of the two LEDs on the connectors X2P1 or X2P2
LED Status Meaning
RX/TX
Flashing Data transfer via the Ethernet connection
Green LED
(top)
Off No data transfer via the Ethernet connection
Link status
On Existing Ethernet connection to the local
application or the local area network
Yellow LED
(bottom)
Off No Ethernet connection to the local application or
the local area network
1.6 Service button SET
In the small hole labeled SET, there is a button that is used to reboot the device. During a
reboot, the device is reset to its factory settings.
You can press the button with a thin object, for example a straightened paper clip.
You will find more information on resetting the device in the section Factory settings
(Page 139).

Description of the device
1.7 Requirements for operation
SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 17
1.7 Requirements for operation
Antenna
To operate the M875, you require one or two antennas that are tuned to the frequency bands
of the mobile wireless provider you have selected.
● With GPRS transmission: 850 MHz, 900 MHz, 1800 MHz or 1900 MHz
● With UMTS transmission: 850 MHz, 1700 MHz, 1900 MHz or 2100 MHz.
Use only antennas from the accessories for the SCALANCE M875.
For more detailed information, refer to section Connecting (Page 26).
Power supply
You require a power supply with a voltage between 12 VDC and 30 VDC that can provide
sufficient current.
For more detailed information, refer to section Connecting (Page 26).
SIM card
You require a SIM card of your mobile wireless provider with the corresponding PIN
(Personal Identification Number).
● Activation for packet-oriented data services
The SIM card must be activated for packet-oriented data services HSPA (HSUPA and
HSDPA), UMTS, EGPRS and GPRS by your mobile wireless provider.
● Access data for the mobile wireless network
The following access data must be present:
– Access point name (APN)
– User name
– Password
For more detailed information, refer to section UMTS/EDGE - access parameters
(Page 58).

Description of the device
1.7 Requirements for operation
SCALANCE M875
18 Operating Instructions, 12/2012, C79000-G8976-C258-02

SCALANCE M875
Operating Instructions, 12/2012, C79000-G8976-C258-02 19
Configuration examples 2
The UMTS router SCALANCE M875 has a wide variety of possible uses in various areas of
application. In this section, you will find configuration examples for the following:
● Internet access via the mobile wireless network
● Direct communication from station to station via mobile wireless with VPN
● TELECONTROL via the mobile wireless network
● Mobile access to plants
● Plant access via a remote maintenance center
With all the examples, you should first familiarize yourself with the security instructions and
commission the device as described in section Installation, connecting up, commissioning
(Page 25).
2.1 Internet access via the mobile wireless network
$31
0RELOHZLUHOHVV
QHWZRUN
$31RIWKH
QHWZRUNSURYLGHU
0DVDFFHVVWRWKH,QWHUQHWYLD
WKHPRELOHZLUHOHVVQHWZRUN
,QWHUQHW
$FFHVVWR,QWHUQHWVHUYLFHVVXFKDV
VHQGUHFHLYHHPDLO
,QWHUQHW
VHUYLFHV
,QGXVWULDO(WKHUQHW
0
With the M875, you can access the Internet via the mobile wireless network. This means that
the Internet services, for example sending and receiving e-mail or information from the World
Wide Web are available to you.
Procedure
To configure Internet access via the mobile wireless network, follow the steps below:
1. Establish a configuration connection between the M875 and the connected PC.
See section Settings on the admin PC (Page 33).
2. Establish a connection to the mobile wireless network.
See section UMTS/EDGE - access parameters (Page 58).

Configuration examples
2.2 TELECONTROL via the mobile wireless network
SCALANCE M875
20 Operating Instructions, 12/2012, C79000-G8976-C258-02
3. To allow access to the required Internet services, set up firewall rules.
See section Security (Page 76).
4. Set up your application for the Internet services, for example for sending/receiving e-
mails.
2.2 TELECONTROL via the mobile wireless network
$31
0RELOHZLUHOHVVQHWZRUN
$31RIWKH
QHWZRUNSURYLGHU
6&$/$1&(0DVDFFHVVWRWKH
PRELOHZLUHOHVVQHWZRUN
0DVWHUVWDWLRQ
6WDWLRQ
)L[HG,3
DGGUHVV
)L[HG,3
DGGUHVV
)L[HG,3
DGGUHVV
6WDWLRQ
931WXQQHO
,QGXVWULDO(WKHUQHW
6,1$87
67FFVF
0
7,05,(
7,05,(
0
0
7,09,(
You can use the M875 to transfer process data from remote stations via the mobile wireless
network to the master station. The VPN function provides the necessary protection during
data transfer in the public mobile wireless network.
Requirements
You require Internet access capable of VPN at both ends, for example using the M875 and a
SCALANCE S6xx. To establish a VPN tunnel, you also require additional services from your
mobile wireless provider that support direct communication between mobile wireless routers.
This requires a fixed IP address for mobile wireless devices and/or an access to the Internet
via a private APN.