Siemens SIMATIC NET SCALANCE S615 Instruction sheet

SIMATIC NET
Industrial Ethernet Security
SCALANCE S615 Web Based
Management
Configuration Manual
11/2019
C79000-G8976-C388-08
Preface
Description 1
Security recommendation 2
Technical basics 3
Configuring with Web Based
Management 4
Upkeep and maintenance 5
Appendix A A

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified
personnel are those who, based on their training and experience, are capable of identifying risks and avoiding
potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this
publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
Document order number: C79000-G8976-C388
Ⓟ 12/2019 Subject to change
Copyright © Siemens AG 2015 - 2019.
All rights reserved

Preface
Scope of the manual
This Configuration Manual covers the following product:
●SCALANCE S615
This Configuration Manual applies to the following software version:
● SCALANCE S615 firmware as of version V 6.2
Purpose of the Configuration Manual
This Configuration Manual is intended to provide you with the information you require to install,
commission and operate the device. It provides you with the information you require to
configure the devices.
New in this edition
● Personalized welcome message
● Search function in the help pages
● Security overview: Display of SSH fingerprints MD5 and SHA256
● Port can be configured for HTTP, HTTPS, Telnet, SSH and SNMP
● Password-protected loading and saving of Config and Config Pack
● DHCP client on all devices
● DHCP: Configuration limits for static IP addresses expanded to 128 per pool
● Events extended by firewall
● Support for TLS-based Syslog
● Connection Check
● Schedule restart
● NETMAP rules editable; bidirectional rules; auto firewall rules
● User-specific firewall rules combinable with the "Digital input" event
● Pre-defined IPv4 rule for VRRP; interface extended by VPN connections
● IPsec: Subnet lists can be used for connections and for remote endpoints
● SINEMA RC, IPsec, OpenVPN: Closing of an unused VPN tunnel after a configurable time
has elapsed.
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 3

Orientation in the documentation
Apart from the Configuration Manual you are currently reading, the following documentation is
also available on the topic of remote network:
● Configuration Manual: SCALANCE S615 Command Line Interface
This document contains the CLI commands supported by SCALANCE S615 devices.
● Getting Started
Based on examples, this document explains the configuration of the SCALANCE M800/S
615 device.
● Operating Instructions SCALANCE S615
You will find this document on the Internet pages of Siemens Industry Online Support. It
contains information on installation, connecting up and approvals of the SCALANCE S615.
● Operating Instructions SINEMA RC Server
You will find this document on the Internet pages of Siemens Industry Online Support. It
contains information on the installation, configuration and operation of the application
SINEMA Remote Connect Server.
● IP-based remote networks
In this document, the possible configurations of an IP-based remote network are explained
in an overview with the requirements and a link to detailed configuration instructions.
You will find this document on the Internet under the following entry ID: 26662448 (https://
support.industry.siemens.com/cs/ww/en/view/26662448)
SIMATIC NET manuals
You will find SIMATIC NET manuals on the Internet pages of Siemens Industry Online Support:
● Using the search function:
Link to Siemens Industry Online Support (http://support.automation.siemens.com/WW/
view/en)
Enter the entry ID of the relevant manual as the search term.
●In the navigation panel on the left-hand side in the "Industrial Communication" area:
Link to the "Industrial Communication" area (http://support.automation.siemens.com/WW/
view/en/10805878/130000)
Go to the required product group and make the following settings:
"Entry list" tab, Entry type "Manual"
You will find the documentation for the SIMATIC NET products relevant here on the data
storage medium that ships with some products:
●Product CD / product DVD
● SIMATIC NET Manual Collection
Training, Service & Support
You will find information on Training, Service & Support in the multi--language document
"DC_support_99.pdf" on the data medium supplied with the documentation.
Preface
SCALANCE S615 Web Based Management
4Configuration Manual, 11/2019, C79000-G8976-C388-08

SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
●SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
● On the Internet under the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Security information
Firmware
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary and
only when appropriate security measures (e.g. firewalls and/or network segmentation) are in
place.
For additional information on industrial security measures that may be implemented, please
visit https://www.siemens.com/industrialsecurity
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under https://www.siemens.com/industrialsecurity
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
Preface
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 5

You will find license conditions in the following documents on the supplied data medium:
● OSS_Scalance-M-800-S615_86.pdf
Trademarks
The following and possibly other names not identified by the registered trademark sign ® are
registered trademarks of Siemens AG:
SCALANCE, SINEMA, KEY-PLUG, C-PLUG
Preface
SCALANCE S615 Web Based Management
6Configuration Manual, 11/2019, C79000-G8976-C388-08

Table of contents
Preface .........................................................................................................................................................3
1 Description..................................................................................................................................................13
1.1 Function .................................................................................................................................13
1.2 Configuration examples .........................................................................................................14
1.2.1 TeleControl with SINEMA RC ................................................................................................14
1.2.2 Secure access with S615.......................................................................................................16
1.3 Requirements for operation....................................................................................................16
1.3.1 Use in a PROFINET environment ..........................................................................................17
1.4 System functions....................................................................................................................18
1.5 Configuration limits for WBM and CLI ....................................................................................19
1.6 Configuration limits for SINEMA RC ......................................................................................21
1.7 PLUG .....................................................................................................................................22
1.7.1 C-PLUG and KEY-PLUG .......................................................................................................22
1.7.2 PRESET PLUG ......................................................................................................................23
2 Security recommendation...........................................................................................................................25
3 Technical basics .........................................................................................................................................31
3.1 Structure of an IPv4 address..................................................................................................31
3.2 ICMP ......................................................................................................................................33
3.3 VLAN......................................................................................................................................35
3.3.1 VLAN......................................................................................................................................35
3.3.2 VLAN tagging .........................................................................................................................36
3.4 SNMP.....................................................................................................................................37
3.5 Security functions...................................................................................................................40
3.5.1 User management..................................................................................................................40
3.5.2 Firewall...................................................................................................................................42
3.5.2.1 Firewall...................................................................................................................................42
3.5.3 NAT ........................................................................................................................................45
3.5.4 NAT and firewall.....................................................................................................................46
3.5.5 Certificates .............................................................................................................................49
3.5.6 VPN........................................................................................................................................49
3.5.6.1 IPsec VPN..............................................................................................................................49
3.5.6.2 OpenVPN ...............................................................................................................................53
3.5.6.3 VPN connection establishment ..............................................................................................54
3.6 Redundancy ...........................................................................................................................58
3.6.1 Spanning Tree........................................................................................................................58
3.6.1.1 RSTP......................................................................................................................................59
3.6.2 VRRPv3 .................................................................................................................................59
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 7

4 Configuring with Web Based Management ................................................................................................61
4.1 Web Based Management.......................................................................................................61
4.2 Starting and logging in ...........................................................................................................62
4.3 "Wizard" menu .......................................................................................................................66
4.3.1 Basic Wizard ..........................................................................................................................66
4.3.2 IP............................................................................................................................................67
4.3.3 Device ....................................................................................................................................69
4.3.4 Time Settings .........................................................................................................................70
4.3.5 DDNS .....................................................................................................................................72
4.3.6 SINEMA RC ...........................................................................................................................73
4.3.7 Summary................................................................................................................................76
4.4 "Information" menu.................................................................................................................78
4.4.1 Start Page ..............................................................................................................................78
4.4.2 Versions .................................................................................................................................84
4.4.3 Identification & Maintenance ..................................................................................................85
4.4.4 ARP Table..............................................................................................................................86
4.4.5 Log Tables .............................................................................................................................87
4.4.5.1 Event log ................................................................................................................................87
4.4.5.2 Security Log ...........................................................................................................................89
4.4.5.3 Firewall Log............................................................................................................................91
4.4.6 Faults .....................................................................................................................................92
4.4.7 DHCP Server .........................................................................................................................93
4.4.8 SNMP.....................................................................................................................................94
4.4.9 LLDP ......................................................................................................................................95
4.4.10 Routing Table.........................................................................................................................96
4.4.11 IPsec VPN..............................................................................................................................97
4.4.12 SINEMA RC ...........................................................................................................................98
4.4.13 OpenVPN client....................................................................................................................100
4.4.14 Redundancy .........................................................................................................................101
4.4.14.1 Overview ..............................................................................................................................101
4.4.14.2 Spanning Tree......................................................................................................................103
4.4.15 VRRPv3 Statistics ................................................................................................................106
4.4.16 Security ................................................................................................................................108
4.4.16.1 Overview ..............................................................................................................................108
4.4.16.2 Supported Function Rights...................................................................................................111
4.4.16.3 Roles ....................................................................................................................................112
4.4.16.4 Groups .................................................................................................................................112
4.5 "System" menu.....................................................................................................................113
4.5.1 Configuration........................................................................................................................113
4.5.2 General ................................................................................................................................118
4.5.2.1 Device ..................................................................................................................................118
4.5.2.2 Coordinates..........................................................................................................................119
4.5.3 Restart..................................................................................................................................121
4.5.4 Load&Save...........................................................................................................................123
4.5.4.1 File list ..................................................................................................................................123
4.5.4.2 HTTP....................................................................................................................................125
4.5.4.3 TFTP ....................................................................................................................................128
4.5.4.4 SFTP ....................................................................................................................................132
4.5.4.5 Passwords............................................................................................................................136
Table of contents
SCALANCE S615 Web Based Management
8Configuration Manual, 11/2019, C79000-G8976-C388-08

4.5.5 Events ..................................................................................................................................137
4.5.5.1 Event Configuration..............................................................................................................137
4.5.5.2 Severity Filters .....................................................................................................................141
4.5.6 SMTP client..........................................................................................................................142
4.5.6.1 General ................................................................................................................................142
4.5.6.2 Recipient ..............................................................................................................................145
4.5.7 SNMP...................................................................................................................................147
4.5.7.1 General ................................................................................................................................147
4.5.7.2 Traps ....................................................................................................................................149
4.5.7.3 v3 Groups.............................................................................................................................151
4.5.7.4 v3 users................................................................................................................................153
4.5.8 System Time ........................................................................................................................155
4.5.8.1 Manual Setting .....................................................................................................................156
4.5.8.2 DST Overview ......................................................................................................................158
4.5.8.3 DST Configuration................................................................................................................160
4.5.8.4 SNTP Client .........................................................................................................................163
4.5.8.5 NTP Client............................................................................................................................166
4.5.8.6 SIMATIC Time Client ...........................................................................................................170
4.5.8.7 NTP Server ..........................................................................................................................172
4.5.9 Auto Logout..........................................................................................................................173
4.5.10 Button...................................................................................................................................175
4.5.11 Syslog Client ........................................................................................................................175
4.5.12 Fault Monitoring ...................................................................................................................177
4.5.12.1 Link Change .........................................................................................................................177
4.5.13 PLUG ...................................................................................................................................179
4.5.13.1 Configuration........................................................................................................................179
4.5.13.2 License.................................................................................................................................182
4.5.14 Ping ......................................................................................................................................185
4.5.15 DCP Discovery.....................................................................................................................186
4.5.16 DNS......................................................................................................................................188
4.5.16.1 DNS Client ...........................................................................................................................188
4.5.16.2 DNS Proxy ...........................................................................................................................189
4.5.16.3 DDNS Client.........................................................................................................................189
4.5.17 DHCP ...................................................................................................................................191
4.5.17.1 DHCP Client.........................................................................................................................191
4.5.17.2 DHCP Server .......................................................................................................................193
4.5.17.3 DHCP Options......................................................................................................................195
4.5.17.4 Static Leases........................................................................................................................198
4.5.18 cRSP / SRS..........................................................................................................................200
4.5.19 Proxy Server ........................................................................................................................201
4.5.20 SINEMA RC .........................................................................................................................202
4.5.21 Configuration Backup...........................................................................................................206
4.5.22 Monitoring of the connection ................................................................................................207
4.6 "Interfaces" menu.................................................................................................................209
4.6.1 Ethernet................................................................................................................................209
4.6.1.1 Overview ..............................................................................................................................209
4.6.1.2 Configuration........................................................................................................................210
4.6.2 PPP ......................................................................................................................................212
4.6.2.1 Overview ..............................................................................................................................212
4.6.2.2 Configuration........................................................................................................................213
4.7 "Layer 2" menu.....................................................................................................................215
Table of contents
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 9

4.7.1 Layer 2 configuration............................................................................................................215
4.7.2 VLAN....................................................................................................................................216
4.7.2.1 General ................................................................................................................................216
4.7.2.2 Port Based VLAN .................................................................................................................220
4.7.3 Dynamic MAC Aging ............................................................................................................222
4.7.4 Spanning Tree......................................................................................................................223
4.7.4.1 General ................................................................................................................................223
4.7.4.2 ST general............................................................................................................................224
4.7.4.3 ST port .................................................................................................................................225
4.7.5 LLDP ....................................................................................................................................228
4.8 "Layer 3" menu.....................................................................................................................230
4.8.1 Static routes .........................................................................................................................230
4.8.2 Subnets ................................................................................................................................232
4.8.2.1 Overview ..............................................................................................................................232
4.8.2.2 Configuration........................................................................................................................235
4.8.3 NAT ......................................................................................................................................236
4.8.3.1 Masquerading ......................................................................................................................236
4.8.3.2 NAPT....................................................................................................................................237
4.8.3.3 Source NAT..........................................................................................................................238
4.8.3.4 NETMAP ..............................................................................................................................241
4.8.4 VRRPv3 ...............................................................................................................................244
4.8.4.1 Router ..................................................................................................................................244
4.8.4.2 Configuration........................................................................................................................247
4.8.4.3 Address overview.................................................................................................................249
4.8.4.4 Address Configuration..........................................................................................................250
4.8.4.5 Interface Tracking ................................................................................................................251
4.8.4.6 Address monitoring ..............................................................................................................253
4.9 "Security" menu....................................................................................................................254
4.9.1 Users....................................................................................................................................254
4.9.1.1 Local users...........................................................................................................................254
4.9.1.2 Roles ....................................................................................................................................257
4.9.1.3 Groups .................................................................................................................................259
4.9.2 Passwords............................................................................................................................260
4.9.3 AAA ......................................................................................................................................262
4.9.3.1 General ................................................................................................................................262
4.9.3.2 RADIUS client ......................................................................................................................263
4.9.4 Certificates ...........................................................................................................................265
4.9.4.1 Overview ..............................................................................................................................265
4.9.4.2 Certificates ...........................................................................................................................267
4.9.5 Firewall.................................................................................................................................270
4.9.5.1 General ................................................................................................................................270
4.9.5.2 Predefined IPv4 rules...........................................................................................................271
4.9.5.3 User-specific ........................................................................................................................273
4.9.5.4 IP services............................................................................................................................275
4.9.5.5 ICMP services ......................................................................................................................276
4.9.5.6 IP protocols ..........................................................................................................................277
4.9.5.7 IP rules .................................................................................................................................278
4.9.6 IPsec VPN............................................................................................................................281
4.9.6.1 General ................................................................................................................................281
4.9.6.2 Remote End .........................................................................................................................282
4.9.6.3 Connections .........................................................................................................................284
Table of contents
SCALANCE S615 Web Based Management
10 Configuration Manual, 11/2019, C79000-G8976-C388-08

4.9.6.4 Authentication ......................................................................................................................286
4.9.6.5 Phase 1 ................................................................................................................................288
4.9.6.6 Phase 2 ................................................................................................................................290
4.9.7 OpenVPN client....................................................................................................................292
4.9.7.1 General ................................................................................................................................292
4.9.7.2 Connections .........................................................................................................................293
4.9.7.3 Remote.................................................................................................................................295
4.9.7.4 Authentication ......................................................................................................................296
5 Upkeep and maintenance.........................................................................................................................297
5.1 Device configuration with PRESET-PLUG...........................................................................297
5.2 Firmware update using WBM not possible...........................................................................300
5.3 Restoring the factory settings...............................................................................................301
A Appendix A ...............................................................................................................................................303
A.1 Format of the syslog messages ...........................................................................................303
A.2 Parameters in Syslog messages..........................................................................................304
A.3 Syslog messages .................................................................................................................305
A.3.1 Syslog messages SR7.4 .....................................................................................................314
Index.........................................................................................................................................................317
Table of contents
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 11

Table of contents
SCALANCE S615 Web Based Management
12 Configuration Manual, 11/2019, C79000-G8976-C388-08

Description 1
1.1 Function
Configuration
Configuration of all parameters using the
● Web Based Management (WBM) via HTTP and HTTPS.
● Command Line Interface (CLI) via Telnet and SSH.
Security functions
● Router with NAT function
– IP masquerading
– NAPT
– SourceNAT
– NETMAP
● Password protection
● Firewall function
– Port forwarding
– IP firewall with stateful packet inspection (layer 3 and 4)
– Global and user-defined firewall rules
● VPN functions
To establish a VPN (Virtual Private Network), the following functions are available
– IPsec VPN
– OpenVPN client
● SINEMA RC client
● Proxy server
● Siemens Remote Service (SRS)
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 13

Monitoring / diagnostics / maintenance
● LEDs
Display of operating statuses via the LED display. You will find further information on this in
the Operating Instructions of the device.
● Logging
For monitoring have the events logged.
● SNMP
For monitoring and controlling network components such as routers or switches from a
central station.
Other functions
● Time-of-day synchronization
– NTP client and NTP server
– Secure NTP server
– SIMATIC Time Client
– SNTP Client
● DHCP
– DHCP server (local network)
– DHCP client
● Virtual networks (VLAN)
To structure Industrial Ethernet networks with a fast growing number of nodes, a physical
network can be divided into several virtual subnets
● Digital input/digital output
● Dynamic DNS client
● DNS client / DNS proxy
● SMTP client
● TIA Portal Cloud Connector (SCALANCE M804PB)
1.2 Configuration examples
1.2.1 TeleControl with SINEMA RC
In this configuration, the remote maintenance master station is a connected to the Internet/
intranet via the SINEMA Remote Connect Server. The stations communicate via SCALANCE
M874 or SCALANCE S615 that establish a VPN tunnel to the SINEMA RC server server. In the
master station, the SINEMA SINEMA RC client establishes a VPN tunnel to the SINEMA RC
Server.
Description
1.2 Configuration examples
SCALANCE S615 Web Based Management
14 Configuration Manual, 11/2019, C79000-G8976-C388-08

The devices must log on to the SINEMA RC server. The VPN tunnel between the device and
the SINEMA RC Server is established only after successful authentication. Depending on the
configured communications relations and the security settings, the SINEMA RC server
connects the individual VPN tunnels.
PC with
SINEMA RC server
PC with SINEMA RC client
Station 1 Station 2
Master station
LQWHUQDOQHWZRUNH[WHUQDOSXEOLFQHWZRUNLQWHUQDOQHWZRUNLQWHUQDOQHWZRUNBuilding1
PC
LQWHUQDOQHWZRUN931WXQQHO,QGXVWULDO(WKHUQHWM874 M874
S615
M812
TIM 3V-IE
Advanced
S7-300
CP 1243-1
DNP3
S7-1200
Procedure
To be able to access a plant via a remote maintenance master station, follow the steps below:
1. Establish the Ethernet connection between the S615 and the connected Admin PC.
2. Create the devices and node groups on the SINEMA RC Server.
3. Configure the connection to the SINEMA RC server on the device, refer to the
section SINEMA RC (Page 202).
4. Set up the connected applications of the plant for data communication.
Description
1.2 Configuration examples
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 15

1.2.2 Secure access with S615
Secure remote access and network segmentation with SCALANCE S615
A secure connection for data exchange between an automation plant and remote stations will
be established via the Internet and mobile wireless network. At the same time, a secure
connection will be established when necessary for service purposes. This connection is,
however, restricted to a specific plant section or a specific machine.
In the automation plant, a SCALANCE S615 is connected to the Internet via the ADSL+ router
M812-1. The remote stations will be connected to the Internet via the LTE-CP 1243-7 or the
HSPA+ router SCALANCE M874-3. The devices establish a VPN connection to the
SCALANCE S615 via which data can be exchanged securely.
When necessary, the service technician connects to the Internet. With the SOFTNET Security
Client, he or she establishes a secure VPN connection to the S615. Various IP subnets are
connected to the S615 between which the integrated firewall checks communication. This
allows the communication of the service technician to be restricted to a specific IP subnet.
Industrial Ethernet
Automation application
Automation system
SCALANCE
S615
PROFINET PROFINET PROFINET
VPN tunnel
Remote stations
SCALANCE
M874-3
SIMATIC
S7-1200 with
CP 1243-7 (LTE)
VPN
tunnel
SCALANCE
M812-1
GPRS/UMTS/LTE
GPRS/
UMTS/
LTE
Internet
Internet
router
SIMATIC
Field PG with
SOFTNET
Security
Client
SIMATIC S7-1500
with CP 1543-1
Automation cell 1 Automation cell 2 Automation cell 3
Plant network
1.3 Requirements for operation
Power supply
A power supply with a voltage between 12 VDC and 24 VDC that can provide sufficient current.
Description
1.3 Requirements for operation
SCALANCE S615 Web Based Management
16 Configuration Manual, 11/2019, C79000-G8976-C388-08

You will find further information on this in the device-specific operating instructions.
Configuration
In the factory settings, the SCALANCE S615 can be reached as follows for initial configuration:
Default values set in the factory
Ethernet interface for the configu‐
ration
(internal)
P1 ... P4 (vlan 1)
Ethernet interface for the connec‐
tion to WAN
(external)
P5 (vlan 2)
IP address 192.168.1.1
Subnet mask 255.255.255.0
WBM Access using HTTPS: TCP port 443
CLI Access using SSH, TCP port 22
User name admin
The user name can be changed after the first logon or after a "Re‐
store Factory Defaults and Restart". Afterwards, renaming "admin"
is no longer possible.
Password admin
The password needs to be changed after the first logon or after a
"Restore Factory Defaults and Restart"
You will find more information in "Web Based Management (Page 61)" and in "Starting and
logging in (Page 62)".
1.3.1 Use in a PROFINET environment
Note
Validity of CCA declaration
The CCA declaration applies to PROFINET RT without the use in media redundancy structures.
Configuration information
When using the device in a PROFINET environment, follow the following configuration
instructions:
● Set the "Aging Time" to 45 seconds.
● Disable Spanning Tree and enable Passive Listening.
Description
1.3 Requirements for operation
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 17

1.4 System functions
Availability of the system functions
The following table shows the availability of the system functions. Note that all functions are
described in this configuration manual and in the online help. Some functions may not be
available to you depending on the KEY PLUG.
We reserve the right to make technical changes.
SCALANCE
S615
Basic Wizard IP settings ✓
Device Settings ✓
Time settings -
SINEMA RC 1) ✓
DDNS ✓
Information ARP Table ✓
Log Tables ✓
Redundancy ✓
VRRPv3 ✓
SINEMA RC 1) ✓
System SMTP client ✓
SNMP ✓
Time setting ✓
Automatic logout ✓
Syslog client ✓
Fault Monitoring ✓
PLUG ✓
SMS ✓
DNS ✓
DHCP Client ✓
DHCP Server ✓
cRSP/SRS ✓
Proxy Server ✓
SINEMA RC1) ✓
Connection Check ✓
Interfaces Ethernet ✓
PPP ✓
Layer 2 Configuration ✓
VLAN ✓
Dynamic MAC aging ✓
LLDP ✓
Spanning Tree ✓
Description
1.4 System functions
SCALANCE S615 Web Based Management
18 Configuration Manual, 11/2019, C79000-G8976-C388-08

SCALANCE
S615
Layer 3 Static routes ✓
Subnets ✓
Spanning Tree ✓
NAT ✓
VRRPv3 ✓
Security Passwords ✓
User ✓
AAA (Authentication, Authoriza‐
tion, Accounting)
✓
Certificates ✓
Firewall ✓
IPsec VPN ✓
OpenVPN ✓
1) KEY-PLUG SINEMA Remote Connect 6GK5908-0PB00
1.5 Configuration limits for WBM and CLI
Configuration limits of the device
The following table lists the configuration limits for Web Based Management and the Command
Line Interface of the device.
Description
1.5 Configuration limits for WBM and CLI
SCALANCE S615 Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C388-08 19

Depending on your device, some functions are not available.
Configurable function Maximum number
System DNS server 2
Syslog server 3
SMTP server 3
E-mail recipient 60
20 per SMTP server
SNMPv1 trap recipient 10
SMS receiver 20
SNTP server 2
NTP server 3
One per layer 3 interface
NTP (secure) - Server 3
One per layer 3 interface
DHCP pools 8
Static assignments per DHCP pool 128
DHCP options
(1, 2, 3, 4, 5, 6, 42, 66, 67)
9
SINEMA RC 1
Proxy server 5
Layer 2 Virtual LANs (port-based; including
VLAN 1)
16
Maximum frame size 2048 bytes
Layer 3 IP interfaces 12
Static routes 100
NETMAP 256
SourceNAT 32
NAPT 32
VRRPv3 VRRPv3 instances (VRID): 2
Assigned IP addresses: 1 per VRID
Description
1.5 Configuration limits for WBM and CLI
SCALANCE S615 Web Based Management
20 Configuration Manual, 11/2019, C79000-G8976-C388-08