Siemens SCALANCE MM900 Administrator guide

SIMATIC NET
Industrial Ethernet switches
SCALANCE MM900
Compact Operating Instructions
11/2019
A5E02630805-16
Introduction 1
Safety notes 2
Recommendations on
network security 3
Device description 4
Assembling 5
Connecting 6
Technical data 7
Dimension drawings 8
Approvals 9
Appendix A

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified
personnel are those who, based on their training and experience, are capable of identifying risks and avoiding
potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this
publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
A5E02630805-16
Ⓟ 11/2019 Subject to change
Copyright © Siemens AG 2010 - 2019.
All rights reserved

Table of contents
1 Introduction...................................................................................................................................................5
2 Safety notes..................................................................................................................................................9
3 Recommendations on network security......................................................................................................11
4 Device description ......................................................................................................................................15
4.1 Product overview....................................................................................................................15
4.2 Product properties and device views .....................................................................................20
4.2.1 MM991-2 (BFOC)...................................................................................................................20
4.2.2 MM991-2FM (BFOC) ............................................................................................................20
4.2.3 MM991-2LD (BFOC) ..............................................................................................................21
4.2.4 MM991-2 (SC) .......................................................................................................................21
4.2.5 MM991-2LD (SC) ...................................................................................................................22
4.2.6 MM991-2LH+ (SC) ................................................................................................................22
4.2.7 MM991-2P (SC RJ)................................................................................................................23
4.2.8 MM992-2CU...........................................................................................................................24
4.2.9 MM992-2CUC ........................................................................................................................24
4.2.10 MM992-2VD ...........................................................................................................................25
4.2.11 MM992-2 (SC)........................................................................................................................26
4.2.12 MM992-2LD (SC) ...................................................................................................................27
4.2.13 MM992-2LH (SC) ..................................................................................................................27
4.2.14 MM992-2LH+ (SC) ................................................................................................................28
4.2.15 MM992-2ELH (SC).................................................................................................................28
4.2.16 MM992-2M12 .........................................................................................................................29
4.2.17 MM992-2SFP / MM992-2SFP (C) .........................................................................................29
5 Assembling .................................................................................................................................................31
5.1 Safety notices for installation .................................................................................................31
5.2 Installation and removal of media modules............................................................................33
5.3 SFP installation in SFP media module...................................................................................38
6 Connecting .................................................................................................................................................41
6.1 Safety when connecting up ....................................................................................................41
6.2 Connecting a media module ..................................................................................................42
7 Technical data ............................................................................................................................................43
7.1 Construction, installation and environmental conditions ........................................................43
7.2 Connectors and electrical data...............................................................................................45
7.3 Cable lengths .........................................................................................................................48
7.4 Other properties .....................................................................................................................51
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 3

8 Dimension drawings ...................................................................................................................................53
9 Approvals....................................................................................................................................................57
A Appendix.....................................................................................................................................................65
A.1 EMC-compatible installation of electrical Industrial Ethernet or PROFIBUS cabling .............65
A.2 Equipotential bonding.............................................................................................................65
Index...........................................................................................................................................................69
Table of contents
SCALANCE MM900
4Compact Operating Instructions, 11/2019, A5E02630805-16

Introduction 1
Purpose of the compact operating instructions
Based on the compact operating instructions, you will be able to install and connect the MM900
media modules correctly.
Validity of these compact operating instructions
These compact operating instructions apply to the MM900 product group within the
SCALANCE X-300 product line:
● MM992-2CUC
● MM992-2CUC (C)
● MM992-2CU
● MM992-2M12 (C)
● MM992-2VD
● MM992-2SFP
● MM992-2SFP (C)
● MM991-2 (BFOC)
● MM991-2FM (BFOC)
● MM991-2LD (BFOC)
● MM991-2 (SC)
● MM991-2LD (SC)
● MM991-2LH+ (SC)
● MM991-2P (SC RJ)
● MM992-2 (SC)
● MM992-2 (C) (SC)
● MM992-2LD (SC)
● MM992-2LH (SC)
● MM992-2LH+ (SC)
● MM992-2ELH (SC)
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 5

Designations used
Classification Description Terms used
Product line For all devices and variants of all product groups within the
SCALANCE X-300 product line, the term IE switches X-300
is used.
IE switches X-300
Product group For all devices and variants of a product group, only the
product group is used.
MM900
Device For a device, only the device name is used. MM992-2SFP
Variant For a variant of the device, the device name has the appro‐
priate variant added to it in brackets (2x24V).
(-)
All variants of
a device
For all variants of the device, the device name has (all) added
to it.
(-)
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
● SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
● On the Internet under the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary and
only when appropriate security measures (e.g. firewalls and/or network segmentation) are in
place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity (http://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customers’ exposure to cyber
threats.
Introduction
SCALANCE MM900
6Compact Operating Instructions, 11/2019, A5E02630805-16

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/industrialsecurity (http://www.siemens.com/industrialsecurity)
Device defective
If a fault develops, please send the device to your SIEMENS service center for repair. Repairs
on-site are not possible.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certified
disposal company for electronic scrap or your Siemens contact (Product return (https://
support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the different national regulations.
Introduction
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 7

Introduction
SCALANCE MM900
8Compact Operating Instructions, 11/2019, A5E02630805-16

Safety notes 2
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
CAUTION
To prevent injury, read the manual before use.
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
Do not open the device when the supply voltage is turned on.
Safety notices when using the device according to Hazardous Locations (HazLoc) and FM.
If you use the device under HazLoc or FM conditions you must also keep to the following safety
notices in addition to the general safety notices for protection against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-hazardous
locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 9

Safety notes
SCALANCE MM900
10 Compact Operating Instructions, 11/2019, A5E02630805-16

Recommendations on network security 3
NOTICE
Information security
Connect to the device and change the standard passwords for the users "admin" and "user"
before you operate the device. To be able to change passwords you need to be logged in with
write access to the configuration data.
To prevent unauthorized access, note the following security recommendations.
General
● You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
● Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products (https://www.industry.siemens.com/topics/global/en/industrial-security/
pages/default.aspx).
● When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. Therefore operate the device only within a protected network
area.
● For communication via non-secure networks use additional devices with VPN functionality
to encrypt and authenticate the communication.
● Terminate management connections correctly (WBM. Telnet, SSH etc.).
Physical access
● Restrict physical access to the device to qualified personnel because the plug-in data
medium can contain sensitive data.
● Lock unused physical interfaces on the device. Unused interfaces can be used to gain
access to the plant without permission.
Software (security functions)
● Keep the firmware up to date. Check regularly for security updates for the device. You can
find information on this at the Industrial Security (https://www.siemens.com/
industrialsecurity) website.
● Inform yourself regularly about security recommendations published by Siemens
ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).
● Only activate protocols that you require to use the device.
● Restrict access to the management of the device with rules in an access control list (ACL).
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 11

● The option of VLAN structuring provides protection against DoS attacks and unauthorized
access. Check whether this is practical or useful in your environment.
● Use a central logging server to log changes and accesses. Operate your logging server
within the protected network area and check the logging information regularly.
Passwords
● Define rules for the assignment of passwords.
● Regularly change your passwords to increase security.
● Use passwords with a high password strength.
● Make sure that all passwords are protected and inaccessible to unauthorized persons.
● Do not use the same password for different users and systems.
Certificates and keys
● On the device there is a preset SSL certificate with key. Replace this certificate with a self-
made certificate with key. We recommend that you use a certificate signed either by a
reliable external or by an internal certification authority.
● Use a certification authority including key revocation and management to sign certificates.
● Make sure that user-defined private keys are protected and inaccessible to unauthorized
persons.
● It is recommended that you use password-protected certificates in the PKCS #12 format
● Verify certificates and fingerprints on the server and client to prevent "man in the middle"
attacks.
● It is recommended that you use certificates with a key length of at least 2048 bits.
● Change certificates and keys immediately, if there is a suspicion of compromise.
Recommendations on network security
SCALANCE MM900
12 Compact Operating Instructions, 11/2019, A5E02630805-16

Secure/non-secure protocols
● Avoid or disable non-secure protocols, for example Telnet and TFTP. For historical reasons,
these protocols are available, however not intended for secure applications. Use non-
secure protocols on the device with caution.
● Check whether use of the following protocols and services is necessary:
– Non authenticated and unencrypted ports
– MRP, HRP
– LLDP
– DHCP Options 66/67
The following protocols provide secure alternatives:
– HTTP → HTTPS
– TFTP → FTPS
– Telnet → SSH
– SNTP → NTP
– SNMPv1/v2c → SNMPv3
Check whether use of SNMPv1/v2c. is necessary. SNMPv1/v2c are classified as non-
secure. Use the option of preventing write access. The device provides you with suitable
setting options.
If SNMP is enabled, change the community names. If no unrestricted access is
necessary, restrict access with SNMP.
Use the authentication and encryption mechanisms of SNMPv3.
● Use secure protocols when access to the device is not prevented by physical protection
measures.
● If you require non-secure protocols and services, operate the device only within a protected
network area.
● Restrict the services and protocols available to the outside to a minimum.
● For the DCP function, enable the "DCP read-only" mode after commissioning.
Recommendations on network security
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 13

Recommendations on network security
SCALANCE MM900
14 Compact Operating Instructions, 11/2019, A5E02630805-16

Device description 4
4.1 Product overview
Note
Type designation and labeling of a media module differ
Example: The device with article number 6GK5 992‑2AS00‑8AA0 is called "MM992‑2SFP", the
labeling on the device is "9922AS".
The labeling on the devices is shown in bold in the following table following the [article numbers].
Note
Media modules for SFP transceivers
Only the media modules MM992-2SFP andMM992-2SFP (C) may be fitted with approved SFP
transceivers. These SFP media modules can be fitted with up to two SFPs.
Note
Supplement (C) in the type name
Media modules with the supplement (C) in the type name have varnished printed circuit boards
(conformal coating).
Media module Properties Article number
Labeling on the device
MM992-2CUC 2 x 10/100/1000 Mbps, RJ-45 ports electrical with securing collar 6GK5 992-2GA00-8AA0
9922GA
MM992-2CUC (C) 2 x 10/100/1000 Mbps, RJ-45 ports electrical with securing collar, var‐
nished
6GK5 992-2GA00-8FA0
9922GA
MM992-2CU 2 x 10/100/1000 Mbps, RJ-45 port electrical without securing collar 6GK5 992-2SA00-8AA0
9922SA
MM992-2M12 (C) 2 x 10/100/1000 Mbps, GE M12 connector electrical, varnished 6GK5 992-2HA00-0AA0
9922HA
MM992-2VD 2 x 10/100/1000 Mbps, RJ-45 ports electrical with securing collar, varia‐
ble distance
6GK5 992-2VA00-8AA0
9922VA
MM992-2SFP 2 x 100/1000 Mbps, SFP media module 6GK5 992-2AS00-8AA0
9922AS
MM992-2SFP (C) 2 x 100/1000 Mbps, SFP media module, varnished 6GK5 992-2AS00-8FA0
9922AS
MM991-2 (BFOC) 2 x 100 Mbps, BFOC port optical, for glass FO cable (multimode), up to
max. 5 km
6GK5 991-2AB00-8AA0
9912AB
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 15

Media module Properties Article number
Labeling on the device
MM991-2FM (BFOC) 2 x 100 Mbps, BFOC port optical, for glass FO cable (multimode) with
diagnostics up to max. 5 km
6GK5 991-2AB01-8AA0
9912AB
MM991-2LD (BFOC) 2 x 100 Mbps, BFOC port optical, for glass FO cable (single mode), up to
max. 26 km
6GK5 991-2AC00-8AA0
9912AC
MM991-2 (SC) 2 x 100 Mbps, SC ports optical, for glass FO cable (multimode), up to
max. 5 km
6GK5 991-2AD00-8AA0
9912AD
MM991-2LD (SC) 2 x 100 Mbps, SC ports optical, for glass FO cable (single mode), up to
max. 26 km
6GK5 991-2AF00-8AA0
9912AF
MM991-2LH+ (SC) 2 x 100 Mbps, SC ports optical, for glass FO cable (single mode), up to
max. 70 km
6GK5 991-2AE00-8AA0
9912AE
MM991-2P (SC RJ) 2 x 100 Mbps SC RJ ports optical for Plastic Optical Fiber (POF) up to
max. 50 m or Polymer Cladded Fiber (PCF) up to max. 100 m
6GK5 991-2AH00-8AA0
9912AH
MM992-2 (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (multimode), up to
max. 750 m
6GK5 992-2AL00-8AA0
9922AL
MM992-2 (C) (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (multimode), up to
max. 750 m, varnished
6GK5 992-2AL00-8FA0
9922AL
MM992-2LD (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to
max. 10 km
6GK5 992-2AM00-8AA0
9922AM
MM992-2LH (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to
max. 40 km
6GK5 992-2AN00-8AA0
9922AN
MM992-2LH+ (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to
max. 70 km
6GK5 992-2AP00-8AA0
9922AP
MM992-2ELH (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to
max. 120 km
6GK5 992-2AQ00-8AA0
9922AQ
Type key for the MM900 media modules
The type designation of an MM900 media module is made up of several parts that have the
following meaning:
Interface
Number of ports
100 Mbps
MM991-2
Interface Property
[-] BFOC port 100 Mbps multimode FO cable
LD BFOC port 100 Mbps single mode FO cable
(SC) SC port 100 Mbps multimode FO cable (up to max. 5 km)
LD (SC) SC port 100 Mbps single mode FO cable (up to max. 26 km)
LH+ (SC) SC port 100 Mbps single mode FO cable (up to max. 70 km)
Device description
4.1 Product overview
SCALANCE MM900
16 Compact Operating Instructions, 11/2019, A5E02630805-16

Interface Property
P SC RJ port 100 Mbps POF or PCF
FM BFOC port 100 Mbps multimode FO cable with diagnostics
Interface
Number of ports
1000 Mbps
MM992-2
Interface Property
CU RJ-45 port electrical 10/100/1000 Mbps without securing collar
CUC RJ-45 port electrical 10/100/1000 Mbps with securing collar
M12 M12 connection electrical 10/100/1000 Mbps
VD RJ-45 port electrical 10/100/1000 Mbps with securing collar (up to max. 1000 m)
[-] SC port 1000 Mbps multimode FO cable (up to max. 750 m)
LD SC port 1000 Mbps single mode FO cable (up to max. 10km)
LH SC port 1000 Mbps single mode FO cable (up to max. 40 km)
LH+ SC port 1000 Mbps single mode FO cable (up to max. 70 km)
ELH SC port 1000 Mbps single mode FO cable (up to max. 120 km)
SFP SFP media module
Ethernet standards of the media modules
The following table shows which Ethernet standards according to IEEE 802.3 the individual
media modules comply with.
Media module IEEE 802.3 standard
MM992-2CUC 1000Base-TX
MM992-2CUC (C) 1000Base-TX
MM992-2CU 1000Base-TX
MM992-2M12 (C) 1000Base-TX
MM992-2VD 1000Base-TX
MM991-2 (BFOC) 100Base-FX
MM991-2FM (BFOC) 100Base-FX
MM991-2LD (BFOC) 100Base-FX
MM991-2 (SC) 100Base-FX
MM991-2LD (SC) 100Base-FX
MM991-2LH+ (SC) 100Base-FX
MM991-2P (SC RJ) 100Base-FX
MM992-2 (SC) 1000Base-SX
MM992-2 (C) (SC) 1000Base-SX
MM992-2LD (SC) 1000Base-LX
MM992-2LH (SC) 1000Base-LX
Device description
4.1 Product overview
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 17

Media module IEEE 802.3 standard
MM992-2LH+ (SC) 1000Base-LX
MM992-2ELH (SC) 1000Base-LX
Note
Use media modules only in an approved modular device ("M")
Use an MM900 media module only in a device equipped with suitable slots for such modules.
Example: X308-2M.
The MM900 media module decides what can be connected
The connection of end devices or other network segments does not depend on the module slot,
but rather on the selected MM900 media module.
Possible attachment Figure
BFOC ports optical
BFOC-Ports optical with diagnostics
Optical SC ports
SC RJ ports optical
Electrical RJ-45 ports without securing collar
Electrical RJ-45 ports with securing collar
Device description
4.1 Product overview
SCALANCE MM900
18 Compact Operating Instructions, 11/2019, A5E02630805-16

Possible attachment Figure
GE M12 connector electrical
SFP transceivers
Only the SFP media module MM992-2SFP may be
fitted with approved SFP transceivers. The SFP me‐
dia module can be fitted with up to two SFPs.
Unpacking and checking
WARNING
Do not use any parts that show evidence of damage
If you use damaged parts, there is no guarantee that the device will function according to the
specification.
If you use damaged parts, this can lead to the following problems:
● Injury to persons
● Loss of the approvals
● Violation of the EMC regulations
● Damage to the device and other components
Use only undamaged parts.
1. Make sure that the package is complete.
2. Check all the parts for transport damage.
Scope of delivery
The following components are supplied with a SCALANCE MM900 media module:
● MM99x-2xx media module
● Compact operating instructions
Note
Identification labels
The location labels identify the media modules and ship with the SCALANCE device.
Device description
4.1 Product overview
SCALANCE MM900
Compact Operating Instructions, 11/2019, A5E02630805-16 19

4.2 Product properties and device views
4.2.1 MM991-2 (BFOC)
Possible attachments
The MM991-2 (BFOC) media module has the following:
● 2 x 100 Mbps, BFOC port optical (multimode, glass) up to max. 5 km
Figure 4-1 MM991-2 (BFOC) [9912AB]
[Device labeling in square brackets]
4.2.2 MM991-2FM (BFOC)
Possible attachments
The MM991-2FM (BFOC) media module has the following:
● 2 x 100 Mbps, BFOC port optical (multimode, glass) with diagnostics up to max. 5 km
Figure 4-2 MM991-2FM (BFOC) [9912AB]
[Device labeling in square brackets]
Device description
4.2 Product properties and device views
SCALANCE MM900
20 Compact Operating Instructions, 11/2019, A5E02630805-16