Siemens SIMATIC NET SCALANCE W M766 Series User manual

SIMATIC NET
Industrial Wireless LAN
SCALANCE WxM766
Operating Instructions
07/2021
C79000-G8976-C617-02
Introduction 1
Safety notices 2
Security recommendations 3
Description of the device 4
Mounting 5
Connection 6
Upkeep and maintenance 7
Technical speci󹪝cations 8
Dimension drawing 9
Approvals 10

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage
to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices
referring only to property damage have no safety alert symbol. These notices shown below are graded according to
the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Quali󹪝ed Personnel
The product/system described in this documentation may be operated only by personnel quali󹪝ed for the speci󹪝c
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Quali󹪝ed personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance
are required to ensure that the products operate safely and without any problems. The permissible ambient
conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identi󹪝ed by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may
be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this
publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C617-02
Ⓟ 08/2021 Subject to change
Copyright © Siemens AG 2021.
All rights reserved

Table of contents
1 Introduction ........................................................................................................................................... 5
2 Safety notices ........................................................................................................................................ 9
3 Security recommendations.................................................................................................................. 11
4 Description of the device..................................................................................................................... 17
4.1 Device view ....................................................................................................................... 18
4.2 Components of the product ............................................................................................... 19
4.3 Accessories........................................................................................................................ 20
4.3.1 Installation ........................................................................................................................ 20
4.3.2 CLP.................................................................................................................................... 20
4.3.3 Industrial Ethernet ............................................................................................................. 21
4.3.4 Digital input / digital output ............................................................................................... 22
4.3.5 Power supply ..................................................................................................................... 23
4.3.6 Flexible connecting cables and antennas............................................................................ 24
4.3.6.1 Flexible connecting cables ................................................................................................. 24
4.3.6.2 Lightning protection .......................................................................................................... 25
4.3.6.3 Terminating resistor ........................................................................................................... 26
4.3.6.4 Antennas........................................................................................................................... 26
4.4 LED display ........................................................................................................................ 28
4.5 Reset button ...................................................................................................................... 32
5 Mounting ............................................................................................................................................. 33
5.1 Types of installation ........................................................................................................... 36
5.2 Wall mounting................................................................................................................... 37
5.3 Mounting on VESA bracket ................................................................................................ 38
5.4 DIN rail mounting .............................................................................................................. 39
5.4.1 Installation with the DIN rail mounting adapter .................................................................. 39
5.4.2 Mounting with bracket support .......................................................................................... 41
6 Connection........................................................................................................................................... 45
6.1 Power supply ..................................................................................................................... 50
6.2 Ethernet ............................................................................................................................ 52
6.3 Antenna connector ............................................................................................................ 53
6.4 Grounding ......................................................................................................................... 55
6.5 Digital input/output ........................................................................................................... 56
6.6 Inserting/removing the PLUG.............................................................................................. 57
7 Upkeep and maintenance.................................................................................................................... 61
7.1 Downloading new 󹪝rmware using TFTP without WBM and CLI............................................. 61
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 3

7.2 Restoring the factory settings............................................................................................. 62
8 Technical speci󹪝cations ....................................................................................................................... 65
9 Dimension drawing.............................................................................................................................. 69
10 Approvals............................................................................................................................................. 73
Index .................................................................................................................................................... 75
Table of contents
SCALANCE WxM766
4Operating Instructions, 07/2021, C79000-G8976-C617-02

Introduction 1
Validity of the Operating Instructions
These operating instructions cover the following products:
Product Article number Certi󹪝cation ID
Access points
SCALANCE WAM766-1 6GK5766-1GE00-7DA0
6GK5766-1GE00-7DB0 (USA)
MSAX65-W1-M12-E2
SCALANCE WAM766-1 EEC 6GK5766-1GE00-7TA0
6GK5766-1GE00-7TB0 (USA)
MSAX65-W1-M12-E2
Client
SCALANCE WUM766-1 6GK5766-1GE00-3DA0
6GK5766-1GE00-3DB0 (USA)
MSAX65-W1-M12-E2
These operating instructions apply to the following software version:
• SCALANCE WxM76x with 󹪝rmware version 1.1
De󹪝nition
An access point is a node in a WLAN that also performs administrative functions in the network
and, for example, provides client modules with a connection to wired networks, to other client
modules in the same wireless cell or in other wireless cells.
Purpose of the Operating Instructions
Using the Operating Instructions, you will be able to install and connect the SCALANCE WxM766
correctly. The con󹪝guration and the integration of the device in a WLAN are not described in
these instructions.
Documentation on the Internet
You can 󹪝nd the current version of the document on the Internet at (https://
support.industry.siemens.com/cs/de/en/ps/15859/man)
Enter the name or article number of the product in the search 󹪝lter.
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 5

In order to protect plants, systems, machines and networks against cyber threats, it is necessary
to implement – and continuously maintain – a holistic, state-of-the-art industrial security
concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected to
an enterprise network or the internet if and to the extent such a connection is necessary and only
when appropriate security measures (e.g. 󹪝rewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity).
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customer’s exposure to cyber
threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed
under
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity).
Decommissioning
Shut down the device properly to prevent unauthorized persons from accessing con󹪝dential
data in the device memory.
To do this, restore the factory settings on the device.
Also restore the factory settings on the storage medium.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certi󹪝ed
disposal company for electronic scrap or your Siemens contact (Product return (https://
support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the di󹪜erent national regulations.
Device defective
If a fault develops, send the device to your SIEMENS representative for repair. Repairs on-site are
not possible.
Introduction
SCALANCE WxM766
6Operating Instructions, 07/2021, C79000-G8976-C617-02

SCALANCE, RCoax
Introduction
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 7
Trademarks
The following and possibly other names not identi󹪝ed by the registered trademark sign ® are
registered trademarks of Siemens AG:

Introduction
SCALANCE WxM766
8Operating Instructions, 07/2021, C79000-G8976-C617-02

Safety notices 2
CAUTION
To prevent injury, read the manual before use.
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
WARNING
Hot surfaces
Electric devices have hot surfaces. Do not touch these surfaces. They could cause severe burns.
• Allow the device to cool down before starting any work on it.
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 9

Safety notices
SCALANCE WxM766
10 Operating Instructions, 07/2021, C79000-G8976-C617-02

Security recommendations 3
To prevent unauthorized access to the device and/or network, observe the following security
recommendations.
General
• Check the device regularly to ensure that these recommendations and/or other internal
security policies are complied with.
• Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable
products (https://www.industry.siemens.com/topics/global/en/industrial-security/pages/
default.aspx).
• When the internal and external network are disconnected, an attacker cannot access internal
data from the outside. Therefore operate the device only within a protected network area.
• No product liability will be accepted for operation in a non-secure infrastructure.
• Use VPN to encrypt and authenticate communication from and to the devices.
• For data transmission via a non-secure network, use an encrypted VPN tunnel (IPsec,
OpenVPN).
• Separate connections correctly (WBM, Telnet, SSH etc.).
• Check the user documentation of other Siemens products that are used together with the
device for additional security recommendations.
• Using remote logging, ensure that the system protocols are forwarded to a central logging
server. Make sure that the server is within the protected network and check the protocols
regularly for potential security violations or vulnerabilities.
WLAN
• We recommend that you ensure redundant coverage for WLAN clients.
• More information on data security and data encryption for SCALANCE W is available in
SCALANCE W: Setup of a Wireless LAN in the Industrial Environment (https://
support.industry.siemens.com/cs/ww/en/view/22681042)
Authentication
Note
Accessibility risk - Risk of data loss
Do not lose the passwords for the device. Access to the device can only be restored by resetting
the device to factory settings which completely removes all con󹪝guration data.
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 11

• Replace the default passwords for all user accounts, access modes and applications (if
applicable) before you use the device.
•De󹪝ne rules for the assignment of passwords.
• Use passwords with a high password strength. Avoid weak passwords, (e.g. password1,
123456789, abcdefgh) or recurring characters (e.g. abcabc).
This recommendation also applies to symmetrical passwords/keys con󹪝gured on the device.
• Make sure that passwords are protected and only disclosed to authorized personnel.
• Do not use the same passwords for multiple user names and systems.
• Store the passwords in a safe location (not online) to have them available if they are lost.
• Regularly change your passwords to increase security.
• A password must be changed if it is known or suspected to be known by unauthorized
persons.
• When user authentication is performed via RADIUS, make sure that all communication takes
place within the security environment or is protected by a secure channel.
• Watch out for link layer protocols that do not o󹪜er their own authentication between
endpoints, such as ARP or IPv4. An attacker could use vulnerabilities in these protocols to
attack hosts, switches and routers connected to your layer 2 network, for example, through
manipulation (poisoning) of the ARP caches of systems in the subnet and subsequent
interception of the data tra󹪟c. Appropriate security measures must be taken for non-secure
layer 2 protocols to prevent unauthorized access to the network. Physical access to the local
network can be secured or secure, higher layer protocols can be used, among other things.
Certi󹪝cates and keys
• The device contains a pre-installed X.509 certi󹪝cate with key. Replace this certi󹪝cate with a
self-made certi󹪝cate with key. Use a certi󹪝cate signed by a reliable external or internal
certi󹪝cation authority. You can install the certi󹪝cate via the WBM ("System > Load and Save").
• Use the certi󹪝cation authority including key revocation and management to sign the
certi󹪝cates.
• Make sure that user-de󹪝ned private keys are protected and inaccessible to unauthorized
persons.
• If there is a suspected security violation, change all certi󹪝cates and keys immediately.
• Use password-protected certi󹪝cates in the format "PKCS #12".
• Use certi󹪝cates with a key length of 4096 bits.
• Verify certi󹪝cates based on the 󹪝ngerprint on the server and client side to prevent "man in the
middle" attacks. Use a second, secure transmission path for this.
• Before sending the device to Siemens for repair, replace the current certi󹪝cates and keys with
temporary disposable certi󹪝cates and keys, which can be destroyed when the device is
returned.
Security recommendations
SCALANCE WxM766
12 Operating Instructions, 07/2021, C79000-G8976-C617-02

Physical/remote access
• Operate the devices only within a protected network area. Attackers cannot access internal
data from the outside when the internal and the external network are separate from each
other.
• Limit physical access to the device exclusively to trusted personnel.
The memory card or the PLUG (C-PLUG, KEY-PLUG, CLP) contains sensitive data such as
certi󹪝cates and keys that can be read out and modi󹪝ed. An attacker with control of the
device's removable media could extract critical information such as certi󹪝cates, keys, etc. or
reprogram the media.
• Lock unused physical ports on the device. Unused ports can be used to gain forbidden access
to the plant.
• We highly recommend that you keep the protection from brute force attacks (BFA) activated
to prevent third parties from gaining access to the device. For more information, see the
con󹪝guration manuals, section "Brute Force Prevention".
• For communication via non-secure networks, use additional devices with VPN functionality
to encrypt and authenticate communication.
• When you establish a secure connection to a server (for example for an upgrade), make sure
that strong encryption methods and protocols are con󹪝gured for the server.
• Terminate the management connections (e.g. HTTP, HTTPS, SSH) properly.
• Make sure that the device has been powered down completely before you decommission it.
For more information, refer to "Decommissioning (Page 5)".
• We recommend formatting a PLUG that is not being used.
Hardware/Software
• Use VLANs whenever possible as protection against denial-of-service (DoS) attacks and
unauthorized access.
• Restrict access to the device by setting 󹪝rewall rules or rules in an access control list (ACL).
• Selected services are enabled by default in the 󹪝rmware. It is recommended to enable only
the services that are absolutely necessary for your installation.
For more information on available services, see "List of available services (Page 11)".
• Use the latest web browser version compatible with the product to ensure you are using the
most secure encryption methods available. Also, the latest web browser versions of Mozilla
Firefox, Google Chrome, and Microsoft Edge have 1/n-1 record splitting enabled, which
reduces the risk of attacks such as SSL/TLS Protocol Initialization Vector Implementation
Information Disclosure Vulnerability (for example, BEAST).
• Ensure that the latest 󹪝rmware version is installed, including all security-related patches.
You can 󹪝nd the latest information on security patches for Siemens products at the Industrial
Security (https://www.siemens.com/industrialsecurity) or ProductCERT Security Advisories
(https://www.siemens.com/cert/en/cert-security-advisories.htm) website.
For updates on Siemens product security advisories, subscribe to the RSS feed on the
ProductCERT Security Advisories website or follow @ProductCert on Twitter.
• Enable only those services that are used on the device, including physical ports. Free physical
ports can potentially be used to gain access to the network behind the device.
Security recommendations
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 13

• For optimal security, use SNMPv3 authentication and encryption mechanisms whenever
possible, and use strong passwords.
•Con󹪝guration 󹪝les can be downloaded from the device. Ensure that con󹪝guration 󹪝les are
adequately protected. The options for achieving this include digitally signing and encrypting
the 󹪝les, storing them in a secure location, or transmitting con󹪝guration 󹪝les only through
secure communication channels.
Con󹪝guration 󹪝les can be password protected during download. You enter passwords on the
WBM page "System > Load & Save > Passwords".
• When using SNMP (Simple Network Management Protocol):
–Con󹪝gure SNMP to generate a noti󹪝cation when authentication errors occur.
For more information, see WBM "System > SNMP > Noti󹪝cations".
– Ensure that the default community strings are changed to unique values.
– Use SNMPv3 whenever possible. SNMPv1 and SNMPv2c are considered non-secure and
should only be used when absolutely necessary.
– If possible, prevent write access above all.
• Use the security functions such as address translation with NAT (Network Address
Translation) or NAPT (Network Address Port Translation) to protect receiving ports from
access by third parties.
• Use WPA2/ WPA2-PSK with AES to protect the WLAN. You can 󹪝nd additional information in
the con󹪝guration manual Web Based Management "Security menu".
Secure/ non-secure protocols
• Use secure protocols if access to the device is not prevented by physical protection measures.
• Disable or restrict the use of non-secure protocols. While some protocols are secure (e.g.
HTTPS, SSH, 802.1X, etc.), others were not designed for the purpose of securing applications
(e.g. SNMPv1/v2c, RSTP, etc.).
Therefore, take appropriate security measures against non-secure protocols to prevent
unauthorized access to the device/network. Use non-secure protocols on the device using a
secure connection (e.g. SINEMA RC).
• If non-secure protocols and services are required, ensure that the device is operated in a
protected network area.
Security recommendations
SCALANCE WxM766
14 Operating Instructions, 07/2021, C79000-G8976-C617-02

• Check whether use of the following protocols and services is necessary:
– Non-authenticated and unencrypted ports
– LLDP
– Syslog
– DHCP options 66/67
– TFTP
– Telnet
– HTTP
– SNMP v1/2c
– Syslog
– SNTP
• The following protocols provide secure alternatives:
– SNMPv1/v2c → SNMPv3
Check whether use of SNMPv1/v2c is necessary. SNMPv1/v2c is classi󹪝ed as non-secure.
Use the option of preventing write access. The product provides you with suitable setting
options.
If SNMP is enabled, change the community names. If no unrestricted access is necessary,
restrict access with SNMP.
Use SNMPv3 in conjunction with passwords.
– HTTP → HTTPS
– Telnet → SSH
– TFTP → SFTP
– Syslog Client → Syslog Client TLS
• Using a 󹪝rewall, restrict the services and protocols available to the outside to a minimum.
• For the DCP function, enable the "Read Only" mode after commissioning.
List of available services
The following is a list of all available services and their ports through which the device can be
accessed.
The table includes the following columns:
•Service
The services that the device supports
•Protocol/port number
Port number assigned to the protocol
•Default port status
•Con󹪝gurable port/service
Indicates whether the port number or the service can be con󹪝gured via WBM / CLI.
Security recommendations
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 15

•Authentication
Speci󹪝es whether the communication partner is authenticated.
If optional, the authentication can be con󹪝gured as required.
•Encryption
Speci󹪝es whether the transfer is encrypted.
If optional, the encryption can be con󹪝gured as required.
Service Protocol /
Port number
Default
port status
Con󹪝gurable Authentica‐
tion
Encryption
Port Service
DHCP Client IPv4 UDP/68 Outgoing only -- ✓ -- --
DHCP Client IPv6 UDP/546 Outgoing only -- ✓ -- --
DNS Client TCP/53
UDP/53
Outgoing only -- ✓ -- --
HTTP TCP/80 Open ✓ ✓ ✓ --
HTTPS TCP/443 Open ✓ ✓ ✓ ✓
NTP- Client UDP/123 Outgoing only ✓ ✓ -- --
PROFINET UDP/34964
UDP/49154
UDP/49155
Open -- ✓ -- --
RADIUS UDP/1812 Outgoing only ✓ ✓ ✓ --
SFTP Server TCP/22 Closed ✓ ✓ ✓ ✓
SMTP Client TCP/25 Closed ✓ ✓ -- --
SMTP (secure) TCP/465 Closed ✓ ✓ Optional ✓
SNMPv1/v2c UDP/161 Open ✓ ✓ -- --
SNMPv3 UDP/161 Open ✓ ✓ Optional Optional
SNMP Traps UDP/162 Outgoing only -- ✓ -- --
SNTP Client UDP/123 Outgoing only ✓ ✓ -- --
SSH TCP/22 Open ✓ ✓ ✓ ✓
Syslog Client UDP/514 Closed ✓ ✓ -- --
Syslog Client TLS TCP/6514 Closed ✓ ✓ -- ✓
Telnet TCP/23 Closed ✓ ✓ ✓ --
TFTP Server UDP/69 Closed ✓ ✓ -- --
TCP Event TCP/26864 Closed ✓ ✓ ✓ --
Layer 2 Default
Status
Con󹪝gurable
DCP Open ✓
LLDP Open ✓
RSTP Closed ✓
iPRP Closed ✓
MSTP Closed ✓
SIMATIC NET TIME Closed ✓
802.1x Closed ✓
Security recommendations
SCALANCE WxM766
16 Operating Instructions, 07/2021, C79000-G8976-C617-02

Description of the device 4
Structure of the type designation
The type designation of the device is made up of several parts that have the following meaning:
: 0    
1XPEHURI:/$1LQWHUIDFHV
$$FFHVVSRLQW8&OLHQW
((&
,3
:L)LD[
,:/$1
0DLQ/LQH
:/$1
(QKDQFHG(QYLURQPHQWDO&RQGLWLRQ
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 17

4.1 Device view

①LED display
②R1A1 antenna connector, female N-Connect type
③Screw-down cover:
- for the reset button and
- for the PLUG slot (CLP)
④R2A1 antenna connector, female N-Connect type
⑤Ground connector (thread M4) on the bottom
⑥Connector for power supply (L1, L2)
⑦Digital input (DI) / Digital output (DQ)
⑧Ethernet connector P1 (PoE capability)
Description of the device
4.1 Device view
SCALANCE WxM766
18 Operating Instructions, 07/2021, C79000-G8976-C617-02

4.2 Components of the product
The following components are supplied with the product:
• One SCALANCE W device
• One cover for CLP slot
•Two protective caps for the antenna sockets
• Three protective caps for the M12 sockets
– 1 x Ethernet
– 1 x power supply
– 1 x digital input/digital output
• One grounding screw
Please check that the consignment you have received is complete. If the consignment is
incomplete, contact your supplier or your local Siemens o󹪟ce.
Note
Not included with the product
The following components do not ship with the product:
• Removable data storage medium CLP
• Antennas
• DIN rail adapter
You will 󹪝nd more detailed information in "Accessories (Page 20)".
Description of the device
4.2 Components of the product
SCALANCE WxM766
Operating Instructions, 07/2021, C79000-G8976-C617-02 19

4.3 Accessories
Technical data subject to change.
You will 󹪝nd further information on the range of accessories in the Industry Mall (https://
mall.industry.siemens.com)
4.3.1 Installation
Component Description Article number
Mounting adapter
DIN rail
Adapter for mounting on a 35mm DIN rail
according to DIN EN 50 022
6GK5798-8MF00-0AA1
Angle adapter 90° angle adapter for rail mounting, only
in conjunction with SCALANCE
MUM856-1, WAM/ WUM766-1;
Scope of delivery: Bracket with mounting
rail adapter for 35 mm standard mounting
rail, 󹪝xing screws
6GK5798-8MF00-0AB1
4.3.2 CLP
PLUG
Component Description Article number
CLP
Con󹪝guration
License PLUG
Exchangeable storage medium for saving con󹪝guration
data
SCALANCE CLP 2GB 6GK1900-0UB00-0AA0
SCALANCE CLP EEC 2GB 6GK1900-0UQ00-0AA0
CLP iFeatures Exchangeable storage medium for saving con󹪝guration
data and enabling iFeatures
SCALANCE CLP 2GB W700 AP iFeatures 6GK5907-8UA00-0AA0
SCALANCE CLP 2GB W700 Client iFeatures 6GK5907-4UA00-0AA0
Description of the device
4.3 Accessories
SCALANCE WxM766
20 Operating Instructions, 07/2021, C79000-G8976-C617-02