Siemens SCALANCE X-200RNA User manual

SIMATIC NET
Industrial Ethernet switches
SCALANCE X-200RNA
Operating Instructions
04/2022
C79000-G8976-C342-07
Introduction 1
Safety notices 2
Security recommendations 3
Network topologies and
redundancy 4
Device description 5
Installation and
disassembly 6
Connecting up 7
Maintenance and cleaning 8
Functional description and
con󹪝guration using Web
Based Management 9
Technical speci󹪝cations 10
Accessories and compatible
devices 11
Dimension drawings 12
Approvals 13

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage
to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices
referring only to property damage have no safety alert symbol. These notices shown below are graded according to
the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Quali󹪝ed Personnel
The product/system described in this documentation may be operated only by personnel quali󹪝ed for the speci󹪝c
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Quali󹪝ed personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance
are required to ensure that the products operate safely and without any problems. The permissible ambient
conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identi󹪝ed by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may
be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this
publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C342-07
Ⓟ 06/2022 Subject to change
Copyright © Siemens AG 2013 - 2022.
All rights reserved

Table of contents
1 Introduction........................................................................................................................................... 7
1.1 Security information .......................................................................................................... 10
2 Safety notices ...................................................................................................................................... 13
3 Security recommendations.................................................................................................................. 15
4 Network topologies and redundancy .................................................................................................. 19
4.1 PRP.................................................................................................................................... 19
4.2 HSR ................................................................................................................................... 22
4.3 HSR-PRP coupling............................................................................................................... 26
4.3.1 Coupling of two HSR rings via a PRP network ...................................................................... 26
4.3.2 Coupling of two PRP networks via an HSR ring .................................................................... 28
5 Device description ............................................................................................................................... 31
5.1 Functions........................................................................................................................... 31
5.2 Product overview ............................................................................................................... 33
5.3 SCALANCE X204RNA product properties............................................................................. 35
5.3.1 SCALANCE X204RNA (PRP)................................................................................................. 35
5.3.2 SCALANCE X204RNA (HSR) ................................................................................................ 36
5.4 SCALANCE X204RNA interfaces.......................................................................................... 37
5.4.1 TP interfaces...................................................................................................................... 37
5.5 SCALANCE X204RNA EEC product properties ...................................................................... 39
5.5.1 SCALANCE X204RNA EEC (PRP) .......................................................................................... 39
5.5.2 SCALANCE X204RNA EEC (PRP/HSR) .................................................................................. 39
5.5.3 SCALANCE X204RNA EEC (HSR).......................................................................................... 41
5.6 SCALANCE X204RNA EEC interfaces ................................................................................... 42
5.6.1 TP interfaces...................................................................................................................... 42
5.6.2 SFP interface...................................................................................................................... 44
5.6.3 SFP interface for application on rail vehicles ....................................................................... 45
5.6.3.1 Overview........................................................................................................................... 45
5.6.3.2 SFP991-1(C) ...................................................................................................................... 45
5.6.3.3 SFP991-1LD(C) .................................................................................................................. 46
5.6.3.4 SFP992-1LD(C) .................................................................................................................. 46
5.7 C-PLUG .............................................................................................................................. 47
5.8 SELECT/SET button............................................................................................................. 49
5.9 LEDs .................................................................................................................................. 52
5.9.1 SCALANCE X-200RNA (PRP)................................................................................................ 52
5.9.1.1 Fault LED ........................................................................................................................... 52
5.9.1.2 Power LED ......................................................................................................................... 52
5.9.1.3 Port LED............................................................................................................................. 53
5.9.1.4 LED displays during startup ................................................................................................ 53
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 3

5.9.1.5 Mode LED (SCALANCE X204RNA EEC (PRP/HSR))................................................................. 54
5.9.2 SCALANCE X-200RNA (HSR) ............................................................................................... 54
5.9.2.1 Fault LED ........................................................................................................................... 54
5.9.2.2 Power LED ......................................................................................................................... 54
5.9.2.3 Port LED............................................................................................................................. 55
5.9.2.4 LED displays during startup ................................................................................................ 55
5.9.2.5 Mode LED (SCALANCE X204RNA EEC (PRP/HSR))................................................................. 56
6 Installation and disassembly ............................................................................................................... 57
6.1 Safety notices for installation ............................................................................................. 57
6.2 EEC device variant restriction ............................................................................................. 60
6.3 Types of installation ........................................................................................................... 61
6.4 Mounting position ............................................................................................................. 62
6.5 Mounting on DIN rails ........................................................................................................ 63
6.6 Wall mounting ................................................................................................................... 66
6.7 Disassembly....................................................................................................................... 68
7 Connecting up ..................................................................................................................................... 69
7.1 Safety when connecting up................................................................................................ 69
7.2 Power supply ..................................................................................................................... 73
7.3 Signaling contact ............................................................................................................... 76
7.4 SFP transceiver .................................................................................................................. 78
7.5 Grounding ......................................................................................................................... 79
8 Maintenance and cleaning .................................................................................................................. 81
9 Functional description and con󹪝guration using Web Based Management......................................... 83
9.1 Introduction....................................................................................................................... 83
9.2 Prerequisite ....................................................................................................................... 84
9.3 Assignment of an IP address............................................................................................... 86
9.3.1 Introduction....................................................................................................................... 86
9.3.2 Initial assignment of an IP address...................................................................................... 87
9.4 Initializing the SCALANCE X204RNA EEC (PRP/HSR)............................................................. 88
9.5 LED simulation of the WBM ................................................................................................ 90
9.6 Working with the WBM ...................................................................................................... 92
9.7 The "System" menu............................................................................................................ 93
9.7.1 System Con󹪝guration......................................................................................................... 93
9.7.2 System Identi󹪝cation & Maintenance.................................................................................. 94
9.7.3 System Restart & Defaults .................................................................................................. 95
9.7.4 System Save & Load ........................................................................................................... 96
9.7.5 System Version Numbers ................................................................................................... 99
9.7.6 System Passwords............................................................................................................ 100
9.7.7 System SELECT/SET button ............................................................................................... 101
9.7.8 System Event Log Table.................................................................................................... 102
9.7.9 C-PLUG Information ......................................................................................................... 103
Table of contents
SCALANCE X-200RNA
4Operating Instructions, 04/2022, C79000-G8976-C342-07

9.8 The "X200" menu............................................................................................................. 105
9.8.1 X200 Status ..................................................................................................................... 105
9.8.2 PRP con󹪝guration............................................................................................................. 107
9.8.3 HSR Coupling Con󹪝guration ............................................................................................. 108
9.8.4 Supervision Frames.......................................................................................................... 110
9.8.5 Fault Mask ....................................................................................................................... 111
9.9 The "Agent" menu............................................................................................................ 115
9.9.1 Agent Con󹪝guration ........................................................................................................ 115
9.9.2 Agent Ping....................................................................................................................... 117
9.9.3 Agent SNMP Con󹪝guration............................................................................................... 118
9.9.4 SNMP Trap Con󹪝guration ................................................................................................. 120
9.9.5 SNMP v3 Groups .............................................................................................................. 121
9.9.6 SNMP v3 User .................................................................................................................. 122
9.9.7 Agent Timeout Con󹪝guration ........................................................................................... 125
9.9.8 Agent Event Con󹪝guration ............................................................................................... 126
9.9.9 Agent E-Mail Con󹪝guration .............................................................................................. 129
9.9.10 Agent Syslog Con󹪝guration .............................................................................................. 130
9.9.11 Agent DHCP Con󹪝guration ............................................................................................... 131
9.9.12 Agent Time Con󹪝guration ................................................................................................ 133
9.10 The "Switch" menu........................................................................................................... 135
9.10.1 Introduction..................................................................................................................... 135
9.10.2 Switch Con󹪝g................................................................................................................... 135
9.10.3 Port status ....................................................................................................................... 136
9.10.4 Switch Forwarding Database............................................................................................ 137
9.10.5 LLDP Con󹪝guration .......................................................................................................... 139
9.10.6 The "Statistics" Menu........................................................................................................ 139
9.10.6.1 Packet Size Statistic.......................................................................................................... 140
9.10.6.2 Packet Type Statistic ......................................................................................................... 141
9.10.6.3 Packet Error Statistic......................................................................................................... 144
9.10.6.4 PRP Statistic ..................................................................................................................... 146
9.10.6.5 Redundancy Statistic........................................................................................................ 147
10 Technical speci󹪝cations ..................................................................................................................... 149
11 Accessories and compatible devices.................................................................................................. 153
11.1 Accessories...................................................................................................................... 153
11.2 PRP-compatible devices.................................................................................................... 155
12 Dimension drawings.......................................................................................................................... 159
13 Approvals........................................................................................................................................... 163
13.1 cULus Information Technology Equipment........................................................................ 169
13.2 cULus Industrial Control Equipment.................................................................................. 170
13.3 UL Industrial Control Equipment....................................................................................... 171
13.4 UL Information Technology Equipment............................................................................. 172
13.5 FDA and IEC X204RNA EEC marking.................................................................................. 174
Index.................................................................................................................................................. 175
Table of contents
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 5

Table of contents
SCALANCE X-200RNA
6Operating Instructions, 04/2022, C79000-G8976-C342-07

Introduction 1
Purpose of the Operating Instructions
These Operating Instructions support you when commissioning networks with the IE switches
of the SCALANCE X-200RNA product group.
Validity of the Operating Instructions
These Operating Instructions apply to the following devices:
IE switch Article number
SCALANCE X204RNA 6GK5204-0BA00-2KB2 (PRP)
6GK5204-0BA00-2MB2 (HSR)
SCALANCE X204RNA EEC 6GK5204-0BS00-3LA3 (PRP)
6GK5204-0BS00-2NA3 (HSR)
6GK5204-0BS00-3PA3 (PRP/HSR)
Product names of the devices in these operating instructions
The descriptions in these operating instructions always apply to the devices of the SCALANCE
X‑200RNA product line listed under "Validity of the Operating Instructions" in this document
unless the description relates to a speci󹪝c device of the product line.
Product name Covers the following devices:
SCALANCE X-200RNA SCALANCE X204RNA (PRP)
SCALANCE X204RNA (HSR)
SCALANCE X204RNA EEC (PRP)
SCALANCE X204RNA EEC (HSR)
SCALANCE X204RNA EEC (PRP/HSR)
SCALANCE X-200RNA (PRP) SCALANCE X204RNA (PRP)
SCALANCE X204RNA EEC (PRP)
SCALANCE X204RNA EEC (PRP/HSR) in "PRP" mode
SCALANCE X-200RNA (HSR) SCALANCE X204RNA (HSR)
SCALANCE X204RNA EEC (HSR)
SCALANCE X204RNA EEC (PRP/HSR) in "HSR" mode
SCALANCE X204RNA SCALANCE X204RNA (PRP)
SCALANCE X204RNA (HSR)
SCALANCE X204RNA EEC SCALANCE X204RNA EEC (PRP)
SCALANCE X204RNA EEC (HSR)
SCALANCE X204RNA EEC (PRP/HSR)
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 7

Unless mentioned otherwise, the descriptions in these operating instructions refer to all devices
of the SCALANCE X-200RNA product group named above in the section on validity.
Note
SCALANCE X204RNA EEC (PRP/HSR)
This device can be con󹪝gured either as a PRP device or as an HSR device.
If you con󹪝gure the device as a PRP device, it behaves in exactly the same way as the SCALANCE
X204RNA EEC (PRP).
If you con󹪝gure the device as an HSR device, it behaves in exactly the same way as the SCALANCE
X204RNA EEC (HSR).
Additional documentation
The manuals
• "SIMATIC NET Industrial Ethernet Twisted Pair and Fiber Optic Networks (https://
support.industry.siemens.com/cs/ww/en/view/8763736)"
• "Industrial Ethernet Networking Manual (https://support.industry.siemens.com/cs/ww/en/
view/27069465)"
contain additional information on other SIMATIC NET products that you can operate along with
the devices of the SCALANCE X‑200RNA product line in an Industrial Ethernet network.
When commissioning the EEC variant of the device, observe the Operating Instructions of the
plug-in transceivers in addition.
You can 󹪝nd the supplementary documentation on the Internet pages of Siemens Industry
Online Support (https://support.industry.siemens.com/cs/ww/en/ps/15247).
Further documentation
In the system manuals "Industrial Ethernet / PROFINET Industrial Ethernet" and "Industrial
Ethernet / PROFINET passive network components", you will 󹪝nd information on other SIMATIC
NET products that you can operate along with the devices of this product line in an Industrial
Ethernet network.
There, you will 󹪝nd among other things optical performance data of the communications
partner that you require for the installation.
You will 󹪝nd the system manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support:
– Industrial Ethernet / PROFINET Industrial Ethernet System Manual (https://
support.industry.siemens.com/cs/ww/en/view/27069465)
– Industrial Ethernet / PROFINET Passive Network Components System Manual (https://
support.industry.siemens.com/cs/ww/en/view/84922825)
Introduction
SCALANCE X-200RNA
8Operating Instructions, 04/2022, C79000-G8976-C342-07

SIMATIC NET manuals
You will 󹪝nd the SIMATIC NET manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15247).
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will 󹪝nd the SIMATIC NET glossary here:
• SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
• On the Internet under the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Security information
Introduction
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 9

1.1 Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary
to implement – and continuously maintain – a holistic, state-of-the-art industrial security
concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected to
an enterprise network or the internet if and to the extent such a connection is necessary and only
when appropriate security measures (e.g. 󹪝rewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity).
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customer’s exposure to cyber
threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed
under
https://www.siemens.com/cert (https://www.siemens.com/cert).
Note on 󹪝rmware/software support
Check regularly for new 󹪝rmware/software versions or security updates and apply them. After
the release of a new version, previous versions are no longer supported and are not maintained.
Catalogs
You will 󹪝nd the article numbers for the Siemens products of relevance here in the following
catalogs:
• SIMATIC NET Industrial Communication / Industrial Identi󹪝cation, catalog IK PI
• SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog ST 70
• Industry Mall - catalog and ordering system for automation and drive technology, Online
catalog (https://mall.industry.siemens.com/goos/WelcomePage.aspx?regionUrl=/
en&language=en)
You can request the catalogs and additional information from your Siemens representative.
Device defective
If a fault develops, send the device to your SIEMENS representative for repair. Repairs on-site are
not possible.
Introduction
1.1 Security information
SCALANCE X-200RNA
10 Operating Instructions, 04/2022, C79000-G8976-C342-07

Decommissioning
Shut down the device properly to prevent unauthorized persons from accessing con󹪝dential
data in the device memory.
To do this, restore the factory settings on the device.
Also restore the factory settings on the storage medium.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certi󹪝ed
disposal company for electronic scrap or your Siemens contact (Product return (https://
support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the di󹪜erent national regulations.
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
You will 󹪝nd license conditions in the following documents on the supplied data medium:
• DOC_OSS-SCALANCE-X_74.pdf
• DC_LicenseSummaryScalanceX200RNA_76.pdf
You will 󹪝nd these documents on the product DVD in the following directory: /Open Source
Information
Trademarks
The following and possibly other names not identi󹪝ed by the registered trademark sign ® are
registered trademarks of Siemens AG:
SCALANCE, C-PLUG, OLM
Introduction
1.1 Security information
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 11

Electrostatic discharge
NOTICE
Electrostatic sensitive devices (ESD)
Electronic modules contain electrostatic sensitive components
These components can easily be destroyed if handled incorrectly.
Note the following instructions to avoid damage.
• Touch electronic modules only when you absolutely need to work on them.
• If electronic modules need to be touched, the body of the person involved must 󹪝rst be
electrostatically discharged and grounded.
• Do not bring electronic modules in contact with electrically isolating materials such as
plastic 󹪝lm, isolating table top pads or clothing made of synthetic 󹪝bers.
• Place the modules only on conductive surfaces.
• Pack, store and transport electronic modules and components only in conductive packaging
such as metalized plastic or metal containers, conductive foam or household aluminum foil.
Introduction
1.1 Security information
SCALANCE X-200RNA
12 Operating Instructions, 04/2022, C79000-G8976-C342-07

Safety notices 2
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
CAUTION
To prevent injury and damage, read the manual before using the device.
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
Do not open the device when the supply voltage is turned on.
Safety instructions for use in hazardous locations according to UL/FM HazLoc
If you use the device under UL or FM HazLoc conditions, you must also adhere to the following
safety instructions in addition to the general safety instructions for protection against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-hazardous
locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 13

Safety notices
SCALANCE X-200RNA
14 Operating Instructions, 04/2022, C79000-G8976-C342-07

Security recommendations 3
NOTICE
Information security
Connect to the device and change the standard passwords for the users "admin" and "user"
before you operate the device. To be able to change passwords you need to be logged in with
write access to the con󹪝guration data.
To prevent unauthorized access to the device and/or network, observe the following security
recommendations.
General
• Check the device regularly to ensure that these recommendations and/or other internal
security policies are complied with.
• Evaluate the security of your location and use a cell protection concept with suitable products
(https://www.industry.siemens.com/topics/global/en/industrial-security/Seiten/
default.aspx).
• When the internal and external network are disconnected, an attacker cannot access internal
data from the outside. Therefore operate the device only within a protected network area.
• No product liability will be accepted for operation in a non-secure infrastructure.
• Use VPN to encrypt and authenticate communication from and to the devices.
• For data transmission via a non-secure network, use an encrypted VPN tunnel (IPsec,
OpenVPN).
• Separate connections correctly (WBM, SSH etc.).
• Check the user documentation of other Siemens products that are used together with the
device for additional security recommendations.
• Using remote logging, ensure that the system protocols are forwarded to a central logging
server. Make sure that the server is within the protected network and check the protocols
regularly for potential security violations or vulnerabilities.
Physical access
• Restrict physical access to the device to quali󹪝ed personnel because the plug-in data medium
can contain sensitive data.
• Lock unused physical interfaces on the device. Unused interfaces can be used to gain access
to the plant without permission.
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 15

Software (security functions)
• Keep the 󹪝rmware up to date. Check regularly for security updates for the device. You can
󹪝nd information on this at the Industrial Security website.
• Inform yourself regularly about security recommendations published by Siemens
ProductCERT.
• Only activate protocols that you require to use the device.
• Restrict access to the management of the device with rules in an access control list (ACL).
• The option of VLAN structuring provides protection against DoS attacks and unauthorized
access. Check whether this is practical or useful in your environment.
• Use a central logging server to log changes and accesses. Operate your logging server within
the protected network area and check the logging information regularly.
See also
www.siemens.com/industrialsecurity (http://www.siemens.com/industrialsecurity)
http://www.siemens.com/cert/en/cert-security-advisories.htm (http://www.siemens.com/
cert/en/cert-security-advisories.htm)
Authentication
Note
Accessibility risk - Risk of data loss
Do not lose the passwords for the device. Access to the device can only be restored by resetting
the device to factory settings which completely removes all con󹪝guration data.
• Replace the default passwords for all user accounts, access modes and applications (if
applicable) before you use the device.
•De󹪝ne rules for the assignment of passwords.
• Use passwords with a high password strength. Avoid weak passwords, (e.g. password1,
123456789, abcdefgh) or recurring characters (e.g. abcabc).
This recommendation also applies to symmetrical passwords/keys con󹪝gured on the device.
• Make sure that passwords are protected and only disclosed to authorized personnel.
• Do not use the same passwords for multiple user names and systems.
• Store the passwords in a safe location (not online) to have them available if they are lost.
• Regularly change your passwords to increase security.
• A password must be changed if it is known or suspected to be known by unauthorized
persons.
Security recommendations
SCALANCE X-200RNA
16 Operating Instructions, 04/2022, C79000-G8976-C342-07

• When user authentication is performed via RADIUS, make sure that all communication takes
place within the security environment or is protected by a secure channel.
• Watch out for link layer protocols that do not o󹪜er their own authentication between
endpoints, such as ARP or IPv4. An attacker could use vulnerabilities in these protocols to
attack hosts, switches and routers connected to your layer 2 network, for example, through
manipulation (poisoning) of the ARP caches of systems in the subnet and subsequent
interception of the data tra󹪟c. Appropriate security measures must be taken for non-secure
layer 2 protocols to prevent unauthorized access to the network. Physical access to the local
network can be secured or secure, higher layer protocols can be used, among other things.
Certi󹪝cates and keys
• There is a preset SSL certi󹪝cate with 1024 bit key length in the device. Replace this certi󹪝cate
with a self-made certi󹪝cate with key. We recommend that you use a certi󹪝cate signed either
by a reliable external or by an internal certi󹪝cation authority.
• Use a certi󹪝cation authority including key revocation and management to sign certi󹪝cates.
• Make sure that user-de󹪝ned private keys are protected and inaccessible to unauthorized
persons.
• Verify certi󹪝cates and 󹪝ngerprints on the server and client to prevent "man in the middle"
attacks.
• It is recommended that you use certi󹪝cates with a key length of at least 2048 bits.
• Change certi󹪝cates and keys immediately if there is a suspicion of compromise.
Note
The devices have a default SSL certi󹪝cate with a key length of 1024 bit.
Decommissioning
Shut down the device properly to prevent unauthorized persons from accessing con󹪝dential
data in the device memory.
To do this, restore the factory settings on the device.
Also restore the factory settings on the storage medium.
Security recommendations
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 17

Security recommendations
SCALANCE X-200RNA
18 Operating Instructions, 04/2022, C79000-G8976-C342-07

Network topologies and redundancy 4
4.1 PRP
Parallel Redundancy Protocol
The "Parallel Redundancy Protocol" is a redundancy protocol for Ethernet networks. It is de󹪝ned
in Part 3 of the IEC 62439 standard. The devices of the SCALANCE X-200RNA product line
support the PRP method. The areas of application of PRP are distributed real-time applications
with high reliability demands that depend on the high availability of the network. Compared
with classic fault-tolerant networks, PRP provides bumpless redundancy. This redundancy
method allows data communication to be maintained without interruption/recon󹪝guration
time if there are interruptions in the network. Other redundancy methods have a network
recon󹪝guration time of, for example 200 ms (MRP, 50 nodes in the ring) or 300 ms (High Speed
Redundancy, 50 nodes in the ring) and cannot therefore be used for substation applications or
other applications that require high network availability.
The PRP method has the advantage that it uses parallel, separate networks made up of standard
network components. The end devices that use this method are connected to the two networks
via a preceding device or via two integrated device interfaces. This means that the frame of the
end device can be transferred at the same time via both networks. If a transmission path is
interrupted, the frame arrives at its destination via the second path.
The devices of the SCALANCE X-200RNA product line are used to connect end devices without
integrated PRP interfaces to parallel networks.
Note
SCALANCE X204RNA EEC (PRP/HSR)
If you initialize the device as a PRP device, it behaves in exactly the same way as the SCALANCE
X204RNA EEC (PRP).
Which topologies can be implemented?
With the devices of the SCALANCE X-200RNA (PRP) product line, nodes or entire network
segments without PRP capability can be connected to a "Parallel Redundancy Protocol" network.
The products with PRP capability of the SCALANCE X-200RNA product line can be used to
implement an integrated solution for network components and protective devices for a
substation and also process application.
SCALANCE X-200RNA
Operating Instructions, 04/2022, C79000-G8976-C342-07 19

The SCALANCE X-200RNA can manage a maximum of 1023 MAC addresses.
Note
Keep to the maximum permitted cable lengths of the devices you are using. You will 󹪝nd the
permitted cable lengths in the technical speci󹪝cations.
Example
Figure 4-1 Schematic diagram of the "Parallel Redundancy Protocol"
With the "Parallel Redundancy Protocol" (PRP), each node must transmit Ethernet frames on two
independent, parallel networks. These are two physically separate networks with a bus (linear),
star or ring topology. The PRP destination device must also be connected to the two networks.
This then receives each frame twice. The 󹪝rst frame is forwarded to the application. The second
frame received is recognized and discarded. This achieves N-1 redundancy without
recon󹪝guration (= bumpless switchover).
Note
Overlong frames
When a SCALANCE X204RNA IE switch feeds a frame with the maximum length into a PRP
network, the IE switch appends a PRP trailer to the frame. Appending the PRP trailer results in an
overlong frame that exceeds the maximum permitted frame length (according to the IEEE 802.3
standard).
To prevent data loss with overlong frames, all network components located in a PRP network
must support a frame length of at least 1528 bytes.
You will 󹪝nd a list of compatible devices that support processing of overlong frames in the
section "PRP-compatible devices (Page 155)".
Network topologies and redundancy
4.1 PRP
SCALANCE X-200RNA
20 Operating Instructions, 04/2022, C79000-G8976-C342-07