Siemens SIMATIC NET SCALANCE W778-1 User manual

SCALANCE W778-1 /W738-1
SIMATIC NET
Industrial Wireless LAN
SCALANCE W778-1 /W738-1
Operating Instructions
MSN65-W1-M12-E2
07/2019
C79000
-G8976-C450-04
Introduction
1
Safety notices
2
Description of the device
3
Mounting
4
Connection
5
Upkeep and maintenance
6
Technical specifications 778-
1/W738-1
7
Dimension drawing
8
Approvals
9

Siemens AG
Digital Industries
Postfach 48 48
90026
NÜRNBERG
GERMANY
C79000-G8976-C450-04
Ⓟ
07/2019 Subject to change
Copyright © Siemens AG 2017 - 2019.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SCALANCE W778-1 /W738-1
Operating Instructions, 07/2019, C79000-G8976-C450-04 3
Table of contents
1 Introduction............................................................................................................................................. 5
2 Safety notices ......................................................................................................................................... 7
2.1 Security recommendations .......................................................................................................9
3 Description of the device....................................................................................................................... 13
3.1 Description of the device ........................................................................................................13
3.2 Accessories.............................................................................................................................15
3.2.1 Flexible connecting cables and antennas...............................................................................18
3.2.1.1 Flexible connecting cables......................................................................................................18
3.2.1.2 Antennas .................................................................................................................................19
3.3 LED display.............................................................................................................................22
3.4 Reset button............................................................................................................................25
4 Mounting............................................................................................................................................... 27
4.1 Safety notices for installation ..................................................................................................27
4.2 Types of installation ................................................................................................................29
4.3 Wall mounting .........................................................................................................................30
4.4 Installation on a DIN rail..........................................................................................................31
4.4.1 Installation with the DIN rail mounting adapter .......................................................................31
4.4.2 Mounting with bracket support................................................................................................33
5 Connection ........................................................................................................................................... 37
5.1 Safety when connecting up.....................................................................................................37
5.4 Power supply ..........................................................................................................................41
5.5 Ethernet ..................................................................................................................................44
5.6 Antenna connector..................................................................................................................45
5.7 Replacing the PLUG (C-PLUG or KEY-PLUG) ......................................................................47
5.8 Grounding ...............................................................................................................................50
6 Upkeep and maintenance ..................................................................................................................... 51
6.1 Device configuration with PRESET-PLUG .............................................................................51
6.2 Downloading new firmware using TFTP without WBM and CLI.............................................54
6.3 Restoring the factory settings .................................................................................................55
7 Technical specifications 778-1/W738-1 ................................................................................................. 57
8 Dimension drawing ............................................................................................................................... 61
9 Approvals.............................................................................................................................................. 63
Index..................................................................................................................................................... 65

Table of contents
SCALANCE W778-1 /W738-1
4Operating Instructions, 07/2019, C79000-G8976-C450-04

SCALANCE W778-1 /W738-1
Operating Instructions, 07/2019, C79000-G8976-C450-04 5
Introduction
1
Validity of the Operating Instructions
These operating instructions cover the following products:
Article number
Article number
US version
Access points
SCALANCE W778-1 M12
6GK5778-1GY00-0AA0
6GK5778-1GY00-0AB0
SCALANCE W778-1 M12 EEC
6GK5778-1GY00-0TA0
6GK5778-1GY00-0TB0
Client module
SCALANCE W738-1 M12
6GK5738-1GY00-0AA0
6GK5738-1GY00-0AB0
These operating instructions apply to the following software version:
●SCALANCE W778/W738 with firmware as of version 6.2
Definition
An access point is a node in a WLAN that also performs administrative functions in the
network and, for example, provides client modules with a connection to wired networks, to
other client modules in the same wireless cell or in other wireless cells.
Purpose of the Operating Instructions
Based on the operating instructions, you will be able to install and connect up the
SCALANCE W778/W738 correctly. The configuration and the integration of the device in a
WLAN are not described in these instructions.
Documentation on the accompanying CD
You will find detailed information about configuration in the SCALANCE W700 configuration
manuals on the accompanying SIMATIC NET IWLAN CD under the file name:
PH_SCALANCE-W770-W730-WBM_76.pdf and PH_SCALANCE-W770-W730-CLI_76.pdf
Note
Make sure that you read the explanations and instructions in the readme.htm file

Introduction
SCALANCE W778-1 /W738-1
6Operating Instructions, 07/2019, C79000-G8976-C450-04
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be
connected to an enterprise network or the internet if and to the extent such a connection is
necessary and only when appropriate security measures (e.g. firewalls and/or network
segmentation) are in place.
For additional information on industrial security measures that may be implemented, please
visit https://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under (https://www.siemens.com/industrialsecurity)
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certified
disposal company for electronic scrap or your Siemens contact (Product return
(https://support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the different national regulations.
Trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SIMATIC NET, SCALANCE, C-PLUG, RCoax

SCALANCE W778-1 /W738-1
Operating Instructions, 07/2019, C79000-G8976-C450-04 7
Safety notices
2
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
WARNING
Hot surfaces
Electric devices have hot surfaces. Do not touch these surfaces. They could cause severe
burns.
•Allow the device to cool down before starting any work on it.
WARNING
The device is intended for indoor use only.
WARNING
Suitable cables at high ambient temperatures
If the temperature of the cable or housing socket exceeds 70 °C or the branching point of
conductors exceeds 80 °C, special precautions must be taken.
If the device is operated at ambient temperatures of between 50 °C and 70 °C, only use
cables with a maximum permitted operating temperature of at least 80 °C.

Safety notices
SCALANCE W778-1 /W738-1
8Operating Instructions, 07/2019, C79000-G8976-C450-04
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
DO NOT OPEN WHEN ENERGIZED.
Safety notices when using the device according to Hazardous Locations (HazLoc) and FM.
If you use the device under HazLoc or FM conditions you must also keep to the following
safety notices in addition to the general safety notices for protection against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-
hazardous locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations
only.

Safety notices
2.1 Security recommendations
SCALANCE W778-1 /W738-1
Operating Instructions, 07/2019, C79000-G8976-C450-04 9
2.1 Security recommendations
To prevent unauthorized access, note the following security recommendations.
General
●You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
●Evaluate your plant as a whole in terms of security. Use a cell protection
(https://www.industry.siemens.com/topics/global/en/industrial-
security/pages/default.aspx) concept with suitable products.
●When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. Therefore operate the device only within a protected
network area.
●For communication via non-secure networks use additional devices with VPN functionality
to encrypt and authenticate the communication.
●Terminate management connections correctly (WBM. Telnet, SSH etc.).
Physical access
●Restrict physical access to the device to qualified personnel.
●The memory card or the PLUG (C-PLUG, KEY-PLUG, security PLUG) contains sensitive
data such as certificates, keys etc. that can be read out and modified.
Software (security functions)
●Keep the firmware up to date. Check regularly for security updates of the product.
You will find information on this on the Internet pages "Industrial Security
(http://www.siemens.com/industrialsecurity)".
●Inform yourself regularly about security advisories and bulletins published by Siemens
ProductCERT (http://www.siemens.com/cert/en/cert-security-advisories.htm).
●Only activate protocols that you really require to use the device.
●Use the security functions such as address translation with NAT (Network Address
Translation) or NAPT (Network Address Port Translation) to protect receiving ports from
access by third parties.
●Restrict access to the device with a firewall or rules in an access control list (ACL -
Access Control List).
●If RADIUS authentication is via remote access, make sure that the communication is
within the secured network area or is via a secure channel.
●The option of VLAN structuring provides good protection against DoS attacks and
unauthorized access. Check whether this is practical or useful in your environment.

Safety notices
2.1 Security recommendations
SCALANCE W778-1 /W738-1
10 Operating Instructions, 07/2019, C79000-G8976-C450-04
●Use a central logging server to log changes and access operations. Operate your logging
server within the protected network area and check the logging information regularly.
●Use WPA2/ WPA2-PSK with AES to protect the WLAN. If iPCF or iPCF-MC is used, use
the AES encryption.
Passwords
●Define rules for the use of devices and assignment of passwords.
●Regularly update passwords and keys to increase security.
●Change all default passwords for users before you operate the device.
●Only use passwords with a high password strength. Avoid weak passwords for example
password1, 123456789, abcdefgh.
●Make sure that all passwords are protected and inaccessible to unauthorized personnel.
●Do not use the same password for different users and systems or after it has expired.
Keys and certificates
This section deals with the security keys and certificates you require to set up HTTPS
(HyperText Transfer Protocol Secured Socket Layer).
●We strongly recommend that you create your own HTTPS certificates and make them
available.
There are preset certificates and keys on the device. The preset and automatically
created HTTPS certificates are self-signed.
We recommend that you use HTTPS certificates signed either by a reliable external or by
an internal certification authority. The HTTPS certificate checks the identity of the device
and controls the encrypted data exchange. You can install the HTTPS certificate via the
WBM (System > Load and Save).
●Handle user-defined private keys with great caution if you use user-defined SSH or SSL
keys.
●Use the certification authority including key revocation and management to sign the
certificates.
●Verify certificates and fingerprints on the server and client to avoid "man in the middle"
attacks.
●We recommend that you use certificates with a key length of 2048 bits.
●Change keys and certificates immediately, if there is a suspicion of compromise.