Siemens SIMATIC NET RUGGEDCOM APE1808 Instruction sheet

Edition 11/2019
Configuration Manual
SIMATIC NET
Industrial Ethernet Switches
RUGGEDCOM APE1808
For APE1808, APE1808W10
https://www.siemens.com

SIMATIC NET
Industrial Ethernet Switches
RUGGEDCOM APE1808
Configuration Manual
For APE1808, APE1808W10
Preface
Overview 1
Configuring and Using the
RUGGEDCOM APE1808 2
Frequently Asked Questions 3
11/2019
C79000-G8976-1415-03

Legal Information
Warning Notice System
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety
alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown be-
low are graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger
will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relat-
ing to property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the
specific task in accordance with the relevant documentation, in particular its warning notices and safety in-
structions. Qualified personnel are those who, based on their training and experience, are capable of identify-
ing risks and avoiding potential hazards when working with these products/systems.
Proper Use of Siemens Products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommend-
ed or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permis-
sible ambient conditions must be complied with. The information in the relevant documentation must be ob-
served.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publica-
tion may be trademarks whose use by third parties for their own purposes could violate the rights of the own-
er.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software de-
scribed. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the in-
formation in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Digital Industry
Process Automation
Postfach 48 48
90026 NÜRNBERG
GERMANY
© 11/2019 Subject to Change Copyright © Siemens 2019
All rights reserved

Table of Contents
Preface ............................................................................................................................................ v
Related Documents ................................................................................................................. v
Training .................................................................................................................................. vi
Customer Support .................................................................................................................. vi
1 Overview ............................................................................................................................... 1
1.1 Operating System .................................................................................................. 1
1.2 Requirements and Restrictions ............................................................................... 3
1.3 Security Recommendations ................................................................................... 3
1.4 Operating Temperature Range and Behavior .......................................................... 5
1.5 Rebooting/Powering Down the RUGGEDCOM APE1808 Module .............................. 5
1.6 Internal Network Interface .................................................................................... 5
1.7 Default IP Addresses .............................................................................................. 6
1.8 RUGGEDCOM APE1808 Ethernet and Network Settings .......................................... 7
1.8.1 Example: Networking in Factory Default Conditions ............................................... 7
1.8.2 Example: RX15xx Services and WAN Networking ................................................... 8
2 Configuring and Using the RUGGEDCOM APE1808 ............................................................ 11
2.1 Logging in to RUGGEDCOM APE1808 .................................................................. 11
2.2 Adding a User (Linux Only) ................................................................................. 11
2.3 Setting the Root and User Passwords (Linux Only) ............................................... 12
2.4 Setting the BIOS Password .................................................................................. 12
2.5 Disabling Alternative Boot Options ...................................................................... 13
2.6 Setting the GRUB Bootloader Password ................................................................ 14
2.7 Setting the Hard Drive Password ......................................................................... 15
2.8 Disabling the Gigabit Ethernet Port (Linux Only) .................................................. 15
2.9 Troubleshooting the RUGGEDCOM APE1808 ........................................................ 15
3 Frequently Asked Questions ............................................................................................... 17
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 iii

Table of Contents
iv RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Preface
This guide describes how to install and configure the RUGGEDCOM APE1808 in any
RUGGEDCOM RX15xx device. Its purpose is to familiarize users with the ways that
RUGGEDCOM APE1808 can be used to support processing applications in RX15xx
networks. It includes information about:
• The RUGGEDCOM APE1808 modules
• Obtaining, installing and using the RUGGEDCOM APE1808 software
• Configuring networks with RUGGEDCOM APE1808
• Troubleshooting
This guide is intended for use by network technical support personnel who are famil-
iar with the operation of networks and the supplied operating system (i.e. Windows,
Linux, etc.). Others who might find the book useful are network and system plan-
ners, system programmers, and line technicians.
Related Documents
The following are other documents related to this product that may be of interest.
Unless indicated otherwise, each document is available on the Siemens Industry On-
line Support (SIOS) [https://support.industry.siemens.com] website.
Note
Documents listed are those available at the time of publication. Newer versions of
these documents or their associated products may be available. For more informa-
tion, visit SIOS or consult a Siemens Customer Support representative.
Catalogs
Document Title Link
RUGGEDCOM RX1500 Modules Catalog https://support.industry.siemens.com/cs/ww/en/-
view/109747072
Installation Guides
Document Title Link
RUGGEDCOM RX1500 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82166529
RUGGEDCOM RX1501 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82164308
RUGGEDCOM RX1510 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82164310
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 v

Preface
Training
Document Title Link
RUGGEDCOM RX1511 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82166915
RUGGEDCOM RX1512 Installation Guide https://support.industry.siemens.com/cs/ww/en/-
view/82167597
Training
Siemens offers a wide range of educational services ranging from in-house training
of standard courses on networking, Ethernet switches and routers, to on-site cus-
tomized courses tailored to the customer's needs, experience and application.
Siemens' Educational Services team thrives on providing our customers with the es-
sential practical skills to make sure users have the right knowledge and expertise to
understand the various technologies associated with critical communications net-
work infrastructure technologies.
Siemens' unique mix of IT/Telecommunications expertise combined with domain
knowledge in the utility, transportation and industrial markets, allows Siemens to
provide training specific to the customer's application.
For more information about training services and course availability, visit https://-
www.siemens.com or contact a Siemens Sales representative.
Customer Support
Customer support is available 24 hours, 7 days a week for all Siemens customers.
For technical support or general information, contact Siemens Customer Support
through any of the following methods:
Online
Visit http://www.siemens.com/automation/support-request to submit a
Support Request (SR) or check on the status of an existing SR.
Telephone
Call a local hotline center to submit a Support Request (SR). To locate a lo-
cal hotline center, visit https://w3.siemens.com/aspa_app/?lang=en.
Mobile App
Install the Industry Online Support app by Siemens AG on any Android,
Apple iOS or Windows mobile device and be able to:
• Access Siemens' extensive library of support documentation, includ-
ing FAQs and manuals
• Submit SRs or check on the status of an existing SR
• Contact a local Siemens representative from Sales, Technical Support,
Training, etc.
vi RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Preface
Customer Support
• Ask questions or share knowledge with fellow Siemens customers
and the support community
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 vii

Preface
Customer Support
viii RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Overview 1
The RUGGEDCOM APE1808 (Application Processing Engine) is an x64-based comput-
er designed to occupy a single line module slot in a RUGGEDCOM RX15xx device. The
RUGGEDCOM APE1808 can host a variety of x64-based operating systems and fea-
tures Gigabit Ethernet, USB ports and a Display port.
The following RUGGEDCOM APE1808 modules are available:
• APE1808
• APE1808W10
1
2 3 4 5
6
4
1 SD Card Slot
2 Display Port
3 Gigabit Ethernet (GbE) Port
4 USB Ports
5 Reset Button
6 Power LED
Figure1.1 RUGGEDCOM APE1808 Module
1.1 Operating System
Each RUGGEDCOM APE1808 module comes with a pre-installed operating system.
Module Operating System
APE1808 Debian Linux®
APE1808W10 Microsoft Windows 10
Upgrading or Changing the Operating System
The operating system can be upgraded or extended as needed. It can also be
changed to an alternative software platform, such as Linux Mint or Ubuntu.
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 1

Overview
1.1Operating System
IMPORTANT
Siemens assumes no responsibility for upgrades or changes made to the operating
system.
IMPORTANT
Each RUGGEDCOM APE1808 module supports UHS-I SD cards through its base oper-
ating system. If the operating system is changed, make sure the replacement operat-
ing system also supports this type of SD card.
Other Software/Applications
Siemens does not support any software installed on the RUGGEDCOM APE1808. This
includes, but is not limited to, software images provided by Siemens Customer Sup-
port.
Linux and SD Card Support
By default, the Linux-based version of the RUGGEDCOM APE1808 does not support
SDXC or SDUC microSD cards (i.e. microSD cards with a memory size of 32 GB or
higher).
SDXC and SDUC microSD cards use the Extended File Allocation Table (exFAT) file
system, which is not pre-installed in the Linux-based versions of the RUGGEDCOM
APE1808. For more information, refer to the SD Standard Overview [https://www.sd-
card.org/developers/overview/capacity].
Linux add-ons that provide support for exFAT are available but must be used in con-
junction with a valid license from Microsoft or a Microsoft-authorized provider. For
more information, refer to the Microsoft Technology Licensing Program for exFAT
[https://www.microsoft.com/en-us/legal/intellectualproperty/mtl/exfat-licensing.as-
px].
Windows Licensing
To run Windows® 10 Enterprise 2019 LTSC on the RUGGEDCOM APE1808, the Win-
dows® operating system must be activated after the RUGGEDCOM APE1808 module
has been installed.
For more information, refer to the product key sticker (included in the product pack-
aging) and Windows® Support [https://support.microsoft.com/en-us/help/12440].
2RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Overview
1.2Requirements and Restrictions
1.2 Requirements and Restrictions
Note the following requirements and restrictions for using the RUGGEDCOM
APE1808:
•Operating Temperature Range
Each module is rated for operation within the temperature range of -40 to 75 °C
(-40 to 167 °F).
•Power Consumption
When using the RUGGEDCOM APE1808 module in combination with other line
modules – including other RUGGEDCOM APE1808 modules – make sure the total
power consumption of all installed line modules does not exceed the power bud-
get of the RUGGEDCOM RX15xx host device.
CAUTION
Electrical hazard - risk of power failure
Installing more modules than allowed on a RUGGEDCOM RX15xx device can
lead to power fluctuations and irregular shut downs.
For more information, refer to the RUGGEDCOM RX15xx Installation Manuals in
"Related Documents (Page v)".
•USB Storage Devices
USB storage devices used with the RUGGEDCOM APE1808 must have USB 3.0 In-
terfaces. Other peripheral devices, such as keyboards and mice, may have USB
2.0 or 3.0 interfaces.
•SD Card Usage
Limit the usage of 3.3 V SD cards and use UHS-I type SD cards whenever possible.
1.3 Security Recommendations
To prevent unauthorized access to the module, note the following security recom-
mendations:
Hardware/Software
• Before commissioning the RUGGEDCOM APE1808 line module, apply the latest
security updates from Debian or from Microsoft as per standard Windows® 10
Enterprise update procedure. For more information on applying security updates
from Debian, refer to the user documention provided by Debian or Microsoft.
• Before using the RUGGEDCOM APE1808, make sure all relevant CERT security
advisories and applications are applied. Security advisories that include links to
applications are available on the Industrial Security website [http://www.indus-
try.siemens.com/topics/global/en/industrial-security/news-alerts/Pages/alerts.as-
px] or the ProductCERT Security Advisories website [http://www.siemens.com/in-
novation/en/technology-focus/siemens-cert/cert-security-advisories.htm]. Up-
dates to Siemens Product Security Advisories can be obtained by subscribing to
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 3

Overview
1.3Security Recommendations
the RSS feed on the Siemens ProductCERT SSecurity Advisories website, or by fol-
lowing @ProductCert on Twitter.
• Only enable the services that will be used on the module, including physical
ports. Unused physical ports could potentially be used to gain access to the net-
work behind the module.
• When using the Windows®-based version of the RUGGEDCOM APE1808, use Bit-
locker to avoid unauthorized access to sensitive information stored on the hard
drive.
Authentication
• When using the Linux-based version of the RUGGEDCOM APE1808, add an ad-
ministrative account, disable the root user on Debian Linux, and replace any de-
fault passwords. For a list of default user profiles and passwords, refer to "Log-
ging in to RUGGEDCOM APE1808 (Page 11)".
• To prevent unauthenticated access to the BIOS, configure a supervisor password
and set the power on password. For more information, refer to "Setting the BIOS
Password (Page 12)".
• When using the Linux-based version of the RUGGEDCOM APE1808, ensure the
GRUB bootloader password is configured. For more information, refer to "Setting
the GRUB Bootloader Password (Page 14)".
• Use strong passwords. Avoid weak passwords such as password1, 123456789,
abcdefgh, etc.
• Passwords should not be re-used across different usernames and systems, or af-
ter they expire.
• Make sure to take appropriate precautions when shipping the module beyond
the boundaries of the trusted environment:
• If SSH and SSL keys are configured, replace the existing keys with throwaway
keys prior to shipping.
• If SSH and SSL keys are configured, take the existing keys out of service.
When the module returns, create and program new keys for the module.
Communication
• Log messages should be delivered using TLS-encrypted syslog over TCP to pre-
vent them from being sent as plain text.
Physical/Remote Access
• Do not connect the device to the Internet. Deploy the device only within a secure
network perimeter.
• Exercise extreme caution when changing any settings in the BIOS. For example,
USB and PXE boot are disabled by default; enabling these settings is not advis-
able for securing the module.
• Control access to the USB, SD Card slot, and gigabit Ethernet ports to the same
degree as any physical access to the module.
4RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Overview
1.4Operating Temperature Range and Behavior
• Be aware of enabling any non-secure protocols on the module. Appropriate safe-
guards against non-secure protocols should be taken to prevent unauthorized ac-
cess to the module/network.
Policy
• Periodically audit the module to make sure it complies with these recommenda-
tions and/or any internal security policies.
• Review the user documentation for other Siemens products used in coordination
with RUGGEDCOM APE1808 for further security recommendations.
1.4 Operating Temperature Range and Behavior
The RUGGEDCOM APE1808 is rated for operation within the temperature range of
-40 to 75 °C (-40 to 167 °F).
1.5 Rebooting/Powering Down the RUGGEDCOM APE1808 Module
CAUTION
Electrical hazard - risk of damage to the device.
When hot swapping the RUGGEDCOM APE1808 module, wait 3 seconds before re-
inserting the module into the RUGGEDCOM router.
NOTICE
Whenever possible, reboot the RUGGEDCOM APE1808 from the operating system in-
stead of requesting a reboot with the Reset button. This helps to safeguard against
improper shutdowns and protect data integrity.
Powering Down the RUGGEDCOM APE1808
To fully power down the module, shut down the operating system.
Rebooting the RUGGEDCOM APE1808
To reset the module, restart the operating system.
1.6 Internal Network Interface
In addition to the gigabit Ethernet interface on the faceplate, the RUGGEDCOM
APE1808 features an internal gigabit Ethernet interface on the back of the module
that interfaces with the host RUGGEDCOM RX15xx device. The interface can be used
by the operating system running on the RUGGEDCOM APE1808 as a normal network
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 5

Overview
1.7Default IP Addresses
interface. Typical port parameters for the internal interface, such as speed, duplex,
VLANs, and more, can be configured via RUGGEDCOM ROX II.
NOTICE
Interface settings configured via RUGGEDCOM ROX II must be mirrored within the
RUGGEDCOM APE1808 module. For instance, if a VLAN is assigned to the module in
RUGGEDCOM ROX II, a corresponding VLAN must also be configured via the mod-
ule's operating system.
1
2
2
3
4
1 Switch Fabric Data Plane
2 Line Module (10/100/1000Base-TX)
3 RUGGEDCOM APE1808 Module
4 Gigabit Ethernet (GbE) Network Interfaces
Figure1.2 A RUGGEDCOM RX15xx Device With an RUGGEDCOM APE1808 Module Installed
1.7 Default IP Addresses
Based on the software platform installed on the RUGGEDCOM APE1808, the IP ad-
dresses for the front and/or internal ports may be pre-configured or set dynamically
by the Dynamic Host Configuration Protocol (DHCP).
Software Platform External Port (RJ45) Internal Port
Windows® 10 Enterprise 2019
LTSC
DHCP DHCP
Debian Linux® DHCP DHCP
6RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Overview
1.8 RUGGEDCOM APE1808 Ethernet and Network Settings
1.8 RUGGEDCOM APE1808 Ethernet and Network Settings
The RUGGEDCOM APE1808 is essentially a two-port industrial computer. When the
RUGGEDCOM APE1808 is inserted into a chassis, the first internal Ethernet port is
activated on the connector that carries power to to the RUGGEDCOM APE1808. The
second RUGGEDCOM APE1808 Ethernet port is available for use on the faceplate of
the RUGGEDCOM APE1808 line module.
To the RX15xx device, the RUGGEDCOM APE1808 internal Ethernet port appears like
any other Gigabit-capable switched or routed port.
For examples of how the RUGGEDCOM APE1808 can be configured in a RX15xx de-
vice, refer to "Example: Networking in Factory Default Conditions (Page 7)" and
"Example: RX15xx Services and WAN Networking (Page 8)".
1.8.1 Example: Networking in Factory Default Conditions
The following figure illustrates how routing and switching would work when the
RUGGEDCOM APE1808 is used in a RUGGEDCOM RX15xx chassis with a four-port Eth-
ernet module in LM2.
Figure1.3 Example Configuration
In the factory default condition, all Ethernet interfaces on the RUGGEDCOM RX15xx
router (including the internal port of the RUGGEDCOM APE1808) are created as
switched ports in the default VLAN. When DHCP is configured in RUGGEDCOM ROX II,
an IPv4 subnet and a gateway IP are automatically assigned to this VLAN.
In RUGGEDCOM ROX II, the default conditions for this VLAN are to use PVID 1 and to
operate untagged. The factory default creates the switch group (switch.0001) for de-
vices on this VLAN and creates a virtual interface 192.168.0.2/24 for devices (such as
the RUGGEDCOM APE1808) in switch.0001 to reach services on the control module
and network management.
In this situation, the RUGGEDCOM APE1808 can be assigned an unused IP address in
subnet 192.168.0.0/24 and communicate with other devices in VLAN1 at a bridging
and routing level. In Figure1.3, “Example Configuration”, the RUGGEDCOM APE1808
ETH0 interface has been assigned an address of 192.168.0.1, either manually by the
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 7

Overview
1.8.2Example: RX15xx Services and WAN Networking
user or automatically by a pre-configured DHCP server, to allow it to communicate on
VLAN1. It has also been assigned a unique subnet to its ETH1 port.
The RUGGEDCOM APE1808 can also access services and network management of the
RUGGEDCOM RX1500 control module at its 192.168.0.2 address. These services in-
clude SSH, HTTP and HTTPS services for network management, DHCP, NTP and TCP
connections to chassis serial ports.
The RUGGEDCOM APE1808 can also communicate with any hosts on interfaces
lm-2-1 through lm-2-4.
Should you wish to configure the RUGGEDCOM APE1808 to forward traffic
through to the 192.168.1.0/24 network via fe-cm-1, you would need to configure
192.168.0.2 as a default gateway.
For much the same reason, should you wish to forward traffic arriving on fe-cm-1
through to the 172.16.0.0/16 network via the RUGGEDCOM APE1808, you would
need to configure a route for it on the RUGGEDCOM RX15xx device and enable IP for-
warding from the Windows or Linux operating system.
Note
When operating the RUGGEDCOM APE1808 in either switch or router mode, the
RUGGEDCOM RX15xx will issue RSTP BPDUs to the RUGGEDCOM APE1808.
If you do not wish the RUGGEDCOM APE1808 to receive these BPDUs, they may be
disabled in RUGGEDCOM RUGGEDCOM APE1808 in the interface switch menu for the
RUGGEDCOM APE1808 interface.
1.8.2 Example: RX15xx Services and WAN Networking
The following illustration shows how the RUGGEDCOM APE1808 might be used in a
more complex situation in which it is routed as opposed to bridged. The use of inter-
nal serial ports, firewalls, and port forwarding is discussed.
8RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Overview
1.8.2Example: RX15xx Services and WAN Networking
Figure1.4 Example Configuration
In this scenario, the RUGGEDCOM APE1808 is reached via a routed interface. This is
accomplished by moving the RUGGEDCOM APE1808 port onto its own VLAN, and
creating a point-to-point connection between it and the control module.
The figure shows six serial ports available on serial LM 3. In order to become net-
work-accessible, these ports must be configured as socket ports that allow incoming
calls on TCP ports 5001 (ser-3-1) through 5006 (ser-3-6). While any address on the
RX1500 control module may be used to connect the RUGGEDCOM APE1808 to these
ports, switch.0001, switch.0002, and dummy0 addresses are recommended. In par-
ticular, dummy0 addresses are useful when router redundancy is implemented.
As in the previous scenario, devices on the 192.168.0.0/24 subnet are still available
to the RUGGEDCOM APE1808; however, in this scenario, they are available through
routing.
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 9

Overview
1.8.2Example: RX15xx Services and WAN Networking
10 RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03

Configuring and Using the RUGGEDCOM APE1808 2
The following sections describe how to configure and use the RUGGEDCOM
APE1808:
NOTICE
Before using the RUGGEDCOM APE1808, create a backup image that can be restored
should the module be configured improperly.
Warranty does not support modules rendered inoperable/inaccessible due to config-
uration errors made by the user.
2.1 Logging in to RUGGEDCOM APE1808
Use the following default username and password to log in to the RUGGEDCOM
APE1808:
NOTICE
Security hazard – risk of unauthorized access
To prevent unauthorized access to the device, make sure to change the default pass-
word before commissioning the device.
Software Platform Default Username Default Password
Windows® 10 Enterprise 2019
LTSC
There is no default username or password for Windows® 10 Enter-
prise 2019 LTSC installations. The username and password is set by
the user during the first boot.
Linux root admin
2.2 Adding a User (Linux Only)
To add a new user, type:
adduser { name }
Where:
•{ name } is the name of the user
NOTICE
Use strong passwords. Avoid weak passwords such as password1, 123456789,
abcdefgh, etc.
RUGGEDCOM APE1808
Configuration Manual, 11/2019, C79000-G8976-1415-03 11