Siemens SINAUT MD741-1 User guide

SIMATIC NET
EGPRS/GPRS-Router
SINAUT MD741-1
System manual
Preface, Contents
Applications and functions 1
Setup 2
Configuration 3
Local interface 4
External interface 5
Security functions 6
VPN connection 7
Remote access 8
Status, log and diagnosis 9
Additional functions 10
Technical Data 11
Applied Standards and
Approvals 12
Glossary
C79000-G8976-C236-05
Release 01/2013

SINAUT MD741-1
2 C79000-G8976-C236-05
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
!
Danger
indicates that death or severe personal injury will result if proper precautions are not taken
!
Warning
indicates that death or severe personal injury may result if proper precautions are not taken.
!
Caution
with a safety alert symbol, indicates that minor personal injury can result if proper precautions are not taken..
Caution
without a safety alert symbol, indicates that property damage can result if proper precautions are not taken.
Notice
indicates that an unintended result or situation can occur if the corresponding information is not taken into
account.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation for the specific task, in particular its warning notices and
safety instructions. Qualified personnel are those who, based on their training and experience, are capable of
identifying risks and avoiding potential hazards when working with these products/systems.
Prescribed Usage
Note the following:
!
Warning
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be adhered to. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of the Siemens AG. The remaining trademarks in this
publication may be trademarks whose use by third parties for their own purposes could violate the rights of the
owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Automation and Drives
Postfach 48 48
90437 NÜRNBERG
GERMANY
Order No.: C79000-G8976-C236-05
Release 01/2013
Copyright © Siemens AG 2013
Technical data subject to change

SINAUT MD741-1
C79000-G8976-C236-05 3
External power supply
Use only an external power supply which also complies with EN60950. The output
voltage of the external power supply must not exceed 30V DC. The output of the
external power supply must be short-circuit proof.
!
Warning
The power supply unit to supply the SINAUT MD741-1 must comply with the
requirements for a Limited Power Source according to IEC/EN 60950-1
The power supply unit to supply the SINAUT MD741-1 must comply with NEC Class 2
circuits as outlined in the National Electrical Code ® (ANSI/NFPA 70) only.
Please pay regard to section 2.7 of the system manual, as well as the installation
and utilisation regulations of the respective manufacturers of the power supply, the
battery or the accumulator.
SIM card
To install the SIM card the device must be opened. Before opening the device,
disconnect it from the supply voltage. Static charges can damage the device when
it is open. Discharge the electric static of your body before opening the device. To
do so, touch an earthed surface, e.g. the metal casing of the switch cabinet. Please
pay regard to section 2.7 of this system manual.
Handling cables
Never pull a cable connector out of a socket by its cable, but pull on the connector
itself. Cable connectors with screw fasteners (D-Sub) must always be screwed on
tightly. Do not lay the cable over sharp corners and edges without edge protection.
If necessary, provide sufficient strain relief for the cables.
For safety reasons, make sure that the bending radius of the cables is observed.
Failure to observe the bending radius of the antenna cable results in the
deterioration of the system's transmission and reception properties. The minimum
bending radius static must not fall below 5 times the cable diameter and dynamic
below 15 times the cable diameter.

SINAUT MD741-1
4 C79000-G8976-C236-05
Radio device
!
Warning
Never use the device in places where the operation of radio devices is prohibited. The
device contains a radio transmitter which could in certain circumstances impair the
functionality of electronic medical devices such as hearing aids or pacemakers. You
can obtain advice from your physician or the manufacturer of such devices. To prevent
data carriers from being demagnetised, do not keep disks, credit cards or other
magnetic data carriers near the device.
Installing antennas
!
Warning
The emission limits as recommended by the German Commission on Radiological
Protection (13/14 September 2001; www.ssk.de) must be observed.
Installing an external antenna
Caution
When installing an antenna outdoors it is essential that the antenna is fitted correctly
by a qualified person.
When the antenna is installed outdoors it must be earthed for lightning protection. The
outdoor antennas shield must be reliable connective to protective earth.
The installation shall be done according the national installation codes
For US this is the National Electric Code NFPA 70, article 810.
For Germany, observe the current version of the Lightning Protection Standard VDE
0185 (DIN EN 62305) Sections 1 to 4 for buildings with lightning protection, or the
standard VDE 0855 (DIN EN 60728-11) in case there is no lightning protection.
This work must be carried out by qualified personnel only.
Requirements for compliance to Safety, Telecom, EMC and other standards
Caution
Observe the regulations listed in chapter 12 before putting the SINAUT MD741-1 into
operation.

SINAUT MD741-1
C79000-G8976-C236-05 5
Operating costs
Notice
Note that data packets exchanged for sign up connections, reconnecting, connect
attempts (e.g. Server switched off, wrong destination address, etc.) as well as keeping
the connection alive are also subject to charge.
Firmware with Open Source GPL/LGPL
The firmware of the SINAUT MD741-1 includes open Source Software under terms
of GPL/LGPL. According to section 3b of GPL and of section 6b of LGPL we
provide you the source code. Please write to
[email protected]
[email protected]
Please enter 'Open Source MD741' as subject of your e-mail, that we can filter your
e-mail easier.

SINAUT MD741-1
6 C79000-G8976-C236-05
Firmware with OpenBSD
The firmware of SINAUT MD741-1 contains sections from the OpenBSD software.
The use of OpenBSD software is subject to the following copyright notice
* Copyright (c) 1982, 1986, 1990, 1991, 1993
* The Regents of the University of California. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
* must display the following acknowledgement:
* This product includes software developed by the University of
* California, Berkeley and its contributors.
* 4. Neither the name of the University nor the names of its contributors
* may be used to endorse or promote products derived from this software
* without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, * WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.

SINAUT MD741-1
C79000-G8976-C236-05 7
Preface
Purpose of this documentation
This documentation will support you on your way to successful application of
GSM/GPRS modem SINAUT MD741-1. It will introduce you to the topic in clear
and straightforward steps and provide you with an overview of the hardware of the
SINAUT MD741-1 GSM/GPRS modem. This documentation will help you during
installation and commissioning of SINAUT GSM/GPRS modem and explains the
diagnostics and service options available.
Validity of the documentation
This manual is valid for the following product:
GPRS/GSM-Modem SINAUT MD741-1
Firmware version 1.316
Hardware product version 2.x
Order number 6NH9741-1AA00
Intended purpose: (E-)GPRS-VPN-Router for industrial application
Online Support
In addition to our product documentation, the comprehensive online information
platform supports you in all aspects of our Service & Support at any time and from
any location in the world. You will find this on the Internet at the following address:
www.siemens.com/automation/service&support
Here, you will find the following information:
Support news, newsletter
Product information, Product Support, Applications & Tools
Technical Forum
Access to other features of our Service & Support offer:
– Technical Consulting
– Engineering Support
– Field Service
Phone: [phone]

Preface
SINAUT MD741-1
8 C79000-G8976-C236-05
– Spare parts and repairs
Phone: [phone]
– Optimization and modernization
– Technical Support
Expert advice on technical questions with a wide range of demand-
optimized services for all our products and systems.
Phone: [phone]
www.siemens.de/automation/support-request
You will find contact addresses on the Internet at the following address:
www.automation.siemens.com/partner
SITRAIN
With over 300 different courses, SITRAIN covers the entire Siemens product and
system spectrum in the field of automation and drive technology. Advanced training
tailored to your needs is also available. In addition to our classic range of courses,
we also offer a combination of various training media and sequences. You can, for
example, use self-study programs on CD-ROM or on the Internet as preparation or
to consolidate training.
You will find detailed information on our training curriculum and how to contact our
customer consultants at the following Internet address:
www.siemens.com/sitrain
Siemens documentation
You will find the order numbers for the relevant Siemens documentation
in the following catalogs:
– SIMATIC NET Industrial Communication, catalog IK PI
– SIMATIC Products for Totally Integrated Automation and Micro
Automation, catalog ST 70
You can request these catalogs and additional information from your Siemens
representative.
You will find many SIMATIC NET manuals on the Internet pages of
Siemens Customer Support for automation:
Link to Customer Support: http://support.automation.siemens.com/WW/view/en

Preface
SINAUT MD741-1
C79000-G8976-C236-05 9
Enter the ID of the relevant manual as the search item. The ID is listed below some
of the reference entries in brackets.
You will find the latest version of this documentation under the entry ID
22550242.
Alternatively you will find the SIMATIC NET manuals on the Internet
pages of Siemens Customer Support for automation:
http://support.automation.siemens.com/WW/view/en/10805878
Browse to the designated product group and set the following filter settings:
"Entry list" →Entry type "Manuals"

SINAUT MD741-1
C79000-G8976-C236-05 10
Contents
1Applications and functions ......................................................................................... 12
2Setup.............................................................................................................................. 16
2.1 Important notes on using the device.................................................................. 16
2.2 Step by step....................................................................................................... 17
2.3 Preconditions for operation................................................................................ 18
2.4 Device front........................................................................................................ 19
2.5 Service button (SET) ......................................................................................... 19
2.6 Operating state indicators.................................................................................. 20
2.7 Connections....................................................................................................... 21
2.8 Inserting the SIM card........................................................................................ 23
2.9 Top rail mounting ............................................................................................... 24
3Configuration ................................................................................................................ 25
3.1 TCP/IP configuration of the network adapter in Windows XP ........................... 26
3.2 Allowed characters for user name, passwords and other inputs....................... 27
3.3 Establishing a configuration connection ............................................................ 28
3.4 Start page of the Web user interface................................................................. 31
3.5 Language selection............................................................................................ 35
3.6 Configuration procedure .................................................................................... 36
3.7 Configuration Profiles ........................................................................................ 37
3.8 Changing the password..................................................................................... 38
3.9 Reboot ............................................................................................................... 40
3.10 Load factory settings.......................................................................................... 41
4Local interface .............................................................................................................. 43
4.1 IP addresses of the local interface .................................................................... 43
4.2 DHCP server to local network ........................................................................... 45
4.3 DNS to local network ......................................................................................... 47
4.4 Local hostname ................................................................................................. 49
4.5 System Time/NTP.............................................................................................. 50
4.6 Additional Internal Routes ................................................................................. 52
5External interface ......................................................................................................... 53
5.1 Access parameters to EGPRS/GPRS ............................................................... 53
5.2 Installation mode - aligning antennas ................................................................ 58
5.3 Traffic volume supervision................................................................................. 60
5.4 EGPRS/GPRS Connection Monitoring.............................................................. 62
5.5 Hostname via DynDNS...................................................................................... 65
5.6 SRS – Siemens Remote Service....................................................................... 66
5.1 NAT - Network Address Translation .................................................................. 68

Contents
SINAUT MD741-1
C79000-G8976-C236-05 11
6Security functions ........................................................................................................ 70
6.1 Firewall rules...................................................................................................... 70
6.2 Port Forwarding ................................................................................................. 75
6.3 Advanced security functions.............................................................................. 77
6.4 Firewall Log ....................................................................................................... 79
7VPN connection ............................................................................................................ 80
7.1 VPN Roadwarrior Mode..................................................................................... 84
7.2 IPsec VPN Standard Mode................................................................................ 89
7.3 Loading VPN certificates ................................................................................... 98
7.4 Firewall rules for VPN tunnel ............................................................................. 99
7.5 Supervision of VPN connections ..................................................................... 101
7.6 Advanced settings for VPN connections ......................................................... 103
7.7 Status of the VPN connections........................................................................ 106
8Remote access ........................................................................................................... 107
8.1 HTTPS remote access..................................................................................... 107
8.2 SSH remote access ......................................................................................... 109
8.3 Remote access via dial-in connection ............................................................. 111
9Status, log and diagnosis .......................................................................................... 114
9.1 Log................................................................................................................... 114
9.2 Remote logging................................................................................................ 117
9.3 Snapshot.......................................................................................................... 118
9.4 Hardware information ...................................................................................... 120
9.5 Software information........................................................................................ 120
10 Additional functions................................................................................................... 121
10.1 Service Center ................................................................................................. 121
10.2 Alarm SMS....................................................................................................... 121
10.3 SMS - Messaging from the local network ........................................................ 123
10.4 Software Update .............................................................................................. 126
11 Technical Data ............................................................................................................ 128
12 Applied Standards and Approvals............................................................................ 131
12.1 EU Declaration of Conformance...................................................................... 131
12.2 Compliance to FM, UL and CSA ..................................................................... 134
12.3 Compliance to FCC ......................................................................................... 135
Glossary ...................................................................................................................... 137

SINAUT MD741-1
C79000-G8976-C236-05 12
Applications and functions 1
The SINAUT MD741-1 provides a wireless connection to the Internet or to a private
network. The SINAUT MD741-1 can provide this connection in any location where
a GSM network (Global System for Mobile Communication = mobile phone
network) is available which provides the services EGPRS (Enhanced General
Packet Radio Service = EDGE) or GPRS (General Packet Radio Service). A
precondition for this is a SIM card of a GSM network operator with the appropriate
services activated.
The SINAUT MD741-1 thus links a locally connected application or entire networks
to the Internet via wireless IP connections. It is also possible to connect directly to
an intranet, to which in turn the external remote stations are connected.
The SINAUT MD741-1 can establish a VPN (Virtual Private Network) between a
locally connected application / a network and an external network, and can protect
this connection against access by third parties through the use of IPsec (Internet
Protocol Security).
In order to perform these tasks in the scenarios described, the device combines the
following functions:
EDGE modem for flexible data communication via EGPRS or GPRS
Firewall for protection against unauthorized access. The dynamic packet filter
examines data packets based on their source and destination addresses
(stateful inspection firewall) and blocks undesirable data traffic (anti-spoofing)
The SINAUT MD741-1 can establish via the wireless IP connections a VPN
Virtual Private Network) between the locally connected application or network
and en external network and can protect this connection by IPsec (Internet
Protocol Security) against unwanted access by third parties.

1 Applications and functions
SINAUT MD741-1
C79000-G8976-C236-05 13
Application examples of the SINAUT MD741-1
APN
(E-)GPRS INTERNET
MD741-1
DSL-Modem
TIM
CPU
VPN-Router
Central
Station
ST7cc
VPN-Tunnel
S7-300
Figure 1-1 Connection between CPU and Central Station
APN
(E-)GPRS INTERNET
MD741-1
DSL-Modem VPN-Router
Central
Station
ST7cc
MD741-1
VPN-Tunnel
VPN-Tunnel
TIM
Logical
connection
TIM
CPU
TIM
CPU
Figure 1-2 Connection between two CPUs
Configuration
The device can be configured via a Web user interface that can simply be
displayed using a Web browser. It can be accessed by means of the following:
the local interface
EGPRS/GPRS
CSD (Circuit Switched Data = dial-in data connection) of the GSM

1 Applications and functions
SINAUT MD741-1
C79000-G8976-C236-05 14
MD741-1
Connection
via (E-)GPRS
PC with
Web browser
Connection via
GSM-CSD
PC with
Web browser
PC with
Web browser
Figure 1-3 Configuration
VPN functions
The SINAUT MD741-1 provides the following VPN functions:
●Private and public VPN
●IPsec as VPN tunnel protocol
●IPsec-3DES encryption with 168 bits
●IPsec-AES encryption with 128, 192 and 256 bits
●Packet authentication MD5 and SHA-1
●Internet Key Exchange (IKE) with main mode and aggressive mode
●Authentication by pre-shared key (PSK), X.509v3 certificate and CA
●Dead peer detection (DPD)
Firewall functions
The SINAUT MD741-1 provides the following firewall functions in order to protect
the local network and itself from external attacks:
●Stateful inspection firewall
●Anti-spoofing
●Port forwarding
●NAT

1 Applications and functions
SINAUT MD741-1
C79000-G8976-C236-05 15
Additional functions
The SINAUT MD741-1 provides the following additional functions:
●DNS cache
●DHCP server
●NTP
●Remote logging
●In Port
●Web user interface for configuration
●Sending alarm SMS
●SSH console for configuration
●DynDNS client
●Dial-in data connection for maintenance and remote configuration

SINAUT MD741-1
C79000-G8976-C236-05 16
Setup 2
2.1 Important notes on using the device
Safety notices on the use of the device
The following safety notices must be adhered to when setting up and operating the
device and during all work relating to it such as installation, connecting up,
replacing devices or opening the device.
General notices on use in hazardous areas
!
Warning
Risk of explosion when connecting or disconnecting the device
EXPLOSION HAZARD
DO NOT CONNECT OR DISCONNECT EQUIPMENT WHEN A FLAMMABLE OR
COMBUSTIBLE ATMOSPHERE IS PRESENT.
!
Warning
Replacing components
EXPLOSION HAZARD
SUBSTITUTION OF COMPONENTS MAY IMPAIR SUITABILITY FOR CLASS I,
DIVISION 2 OR ZONE 2.
General notices on use in hazardous areas according to ATEX
!
Warning
Requirements for the cabinet/enclosure
When used in hazardous environments corresponding to Class I, Division 2 or Class I,
Zone 2, the device must be installed in a cabinet or a suitable enclosure.
To comply with EU Directive 94/9 (ATEX95), this enclosure must meet the
requirements of at least IP54 in compliance with EN 60529.

2 Setup
SINAUT MD741-1
C79000-G8976-C236-05 17
!
Warning
Suitable cables for temperatures in excess of 70 °C
If the cable or conduit entry point exceeds 70 °C or the branching point of conductors
exceeds 80 °C, special precautions must be taken. If the equipment is operated in an
air ambient in excess of 50 °C, only use cables with admitted maximum operating
temperature of at least 80 °C.
!
Warning
Protection against transient voltage surges
Provisions shall be made to prevent the rated voltage from being exceeded by
transient voltage surges of more than 40 %. This criterion is fulfilled, if supplies are
derived from SELV (Safety Extra-Low Voltage) only.
2.2 Step by step
Set up the SINAUT MD741-1 in the following steps:
Step Chapter
1.
First familiarise yourself with the preconditions for operation
of the SINAUT MD741-1.
2.3
2.
Read the safety instructions and other instructions at the
beginning of this document very carefully, and be sure to
follow them.
3.
Familiarise yourself with the control elements, connections
and operating state indicators of the SINAUT MD741-1.
2.4 -2.7
4.
Connect a PC with a Web browser (Admin PC) to the local
interface (X2) of the SINAUT MD741-1.
3
5.
Using the Web user interface of the SINAUT MD741-1, enter
the PIN (Personal Identification Number) of the SIM card.
5.1
6.
Disconnect the SINAUT MD741-1 from the power supply. 2.7
7.
Insert the SIM card in the device. 2.8
8.
Connect the antenna. 2.7
9.
Connect the SINAUT MD741-1 to the power supply. 2.7
10.
Set the SINAUT MD741-1 up in accordance with your
requirements.
3 - 10
11.
Connect your local application. 2.7

2 Setup
SINAUT MD741-1
18 C79000-G8976-C236-05
2.3 Preconditions for operation
In order to operate the SINAUT MD741-1, the following information must be on
hand and the following preconditions must be fulfilled:
Antenna
An antenna, adapted to the frequency bands of the GSM network operator you
have chosen: 850 MHz, 900 MHz, 1800 MHz or 1900 MHz. Use only antennas
from the accessories for the SINAUT MD741-1.
See Chapter 2.7.
Power supply
A power supply with a voltage between 12 VDC and 30 VDC that can provide
sufficient current.
See Chapter 2.7.
SIM card
A SIM card from the chosen GSM network operator.
PIN
The PIN for the SIM card.
EGPRS / GPRS activation
The SIM card must be activated by your GSM network operator for the services
EGPRS or GPRS.
The EGPRS / GPRS access data must be known:
●Access Point Name (APN)
●User name
●Password
CSD 9600 bit/s activation
The SIM card must be activated by your GSM network operator for the CSD
service if you wish to use remote configuration via a dial-in data connection, see
Chapter 8.3.

2 Setup
SINAUT MD741-1
C79000-G8976-C236-05 19
2.4 Device front
Here are definitions of terms frequently used in this manual:
1) Connection terminals for the
power supply
2) Set button
3) Antenna jack type SMA
4) Operating state indicators S,
Q,
5) X1 (Service; USB) – without
function
6) 10/100 Base-T - RJ45 jack for
connecting the local network
7) Operating state indicators
Power, LAN, VPN
Figure 2-1 Operating elements
2.5 Service button (SET)
On the front side of the SINAUT MD741-1 there is a small hole (see B) which is
SET marked and has a button behind it. Use a pointed object, e.g. a straightened-
out paperclip, to press this button.
●If you press the button for longer than 5 seconds, the SINAUT MD741-1
reboots and loads the factory settings.

2 Setup
SINAUT MD741-1
20 C79000-G8976-C236-05
2.6 Operating state indicators
The LEDs on the SINAUT MD741-1provide information about the operating status
of the device.
Meaning of the LEDs on the left-hand side of the device:
LED State Meaning
Flashing slowly PIN transfer
Flashing quickly PIN error / SIM error
S(Status)
ON PIN transfer successful
OFF Not logged into GSM network
Flashing briefly Poor signal strength
(CSQ < 6)
Flashing slowly Medium signal strength
(CSQ= 6..10)
ON, with brief interruptions Good signal strength
(CSQ=11-18)
Q
(Quality)
ON Very good signal strength
(CSQ > 18)
OFF No connection
Flashing quickly Service call via CSD active
ON with brief interruptions GPRS connection active
C
(Connect)
ON EGPRS connection active
Light up in sequence quickly Booting
Light up in sequence slowly Update
S, Q, C
together
Flashing quickly in unison Error
Meaning of the LEDs on the right-hand side of the device:
LED State Meaning
ON Device switched on, operating
voltage present
DC5V
OFF Device switched off, operating
voltage not present
ON Ethernet connection established to the
local application / the local network
OFF No Ethernet connection to the local
application / the local network
LINK
ON with brief interruptions Data transfer via the Ethernet
connection
ON VPN connection active
VPN
OFF VPN connection active